last executing test programs: 25.558057964s ago: executing program 3 (id=1106): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x20, r0, 0x801, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 25.547053929s ago: executing program 3 (id=1107): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x81, 0xffffffff}) faccessat(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x20, r0, 0x801, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 25.467289975s ago: executing program 3 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_on}, {@redirect_dir_follow}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000445000/0x1000)=nil, 0x1000, 0x0, 0x4002011, r4, 0x80000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f000000ae80)={0x2020}, 0x2020) 25.383538457s ago: executing program 3 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={0x48, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1, {r2}}, 0x58) 25.122436232s ago: executing program 3 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (fail_nth: 1) 24.797946456s ago: executing program 3 (id=1120): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x28, r0, 0x801, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 24.715512772s ago: executing program 32 (id=1120): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x28, r0, 0x801, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 4.378084841s ago: executing program 4 (id=1226): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x4e22, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0xd, 0x0, 0x0, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@remote, 0x1fb}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@private}, {@multicast2}, {}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r6, 0x29, 0x0, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x80, 0x5, 0x2}}) 4.31678868s ago: executing program 4 (id=1227): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xae383) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.38235081s ago: executing program 4 (id=1233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000800)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "ee2886", 0x4d4, 0x11, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x0, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x8, 0x8c, "aa3d9fc34610b96650af8b7759466a9a2493ebb0be5ee44f28a4a0804da09125fe957a68658da34ba0d628d0084a0a4346259bae17d28eedcde583bbf68690bc7ae234ce95f0f8b30ce1bc4fad9abb4dfd951cf242f06c54e7dcb889084b7f1aa87d8e5f7c4b446e0baab9c896857b779c078b9bacdad243cd53aeec911192408f0ac93d2fb3238e813e4163"}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @ra]}, @hopopts={0x73, 0x32, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x8, [0xffffffffffff8001, 0x200, 0x9, 0x1, 0x4, 0x1, 0x9bbd]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x81, 0xae, "e29af31e62dba058e676be61a35214a83e45a88d07ca8903436ebc981602622e85bea50f9eae419b18774c3587b040659ac014880220b5b36b3488eda1bf9ed6aa21223358a82cc44b035307d0bcb2b6a2db0a649da291555cf3ec2fc2f713b2bec5cfa0df2d7c855bbead7e29aa63aaa25d2007f4183a54aa8dc5dd4ff872088c0938554fdc1122308949fdfe6f5438f67f828d5fbbb8794af8a782598e9c869981a631d8fc9695444f569d4ca3"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x8b, "26289fed7ee581029317cc63c72358cceb3358d820b4e6fc3873f03aeac5f034e32d356a87215c1cab0d9ec13038fa08adba99e57b0499b9754609f6e5066847a3bbdc26c4fba18ee5a742927752e14420e3630da4064e5ca15961b67c27ee1261d9cfa4f035a71b279a36707de16a54c7712e8e398c5bb9f135f5bb45b7b7d6a65ba97aefae2baec023fb"}, @ra={0x5, 0x2, 0x2}, @padn]}, @srh={0x87, 0x4, 0x4, 0x2, 0x80, 0x10, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, @hopopts={0x12, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}, @dstopts={0x2c, 0xb, '\x00', [@generic={0x5e, 0x43, "e32b4823f0b16b7717e86c8c10d005afd0466b509b56063f809ab742441c2d4e8fdaeaef0c9058658052103c876416d709d56ed8f561be9ac7c901a748ca954e2e1446"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0xffffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x1000}]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x0, 0x28, 0x3ff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x16, 0x12, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x88, "2bea1a6e009d20fedce2f1a969b258671059b4957836292c34338fe61d97751bbe2f0f74f23f6dc613ff0e724162510b1fddf7472ef528cc45f0366d0bae465019925cfd2b7684b2c782e03ce3d69158499080ef74c92e79f76790a866979bb57200e2b629fb8d0cbfbc2df77bbc50efe8bb21e22eeaa55b96713ba6e4a1dfb68f208c51dbdeb4ae"}, @jumbo={0xc2, 0x4, 0xfffffff7}]}], {0x4e22, 0x4e22, 0xec, 0x0, @gue={{0x2, 0x0, 0x2, 0x4, 0x100, @val=0x80}, "34065ad17fec7227d872a5324d38306e4711f6177cc8c1f6c585ea4d1f6ddd644f858273babc902c18361d993580db96c386cd893b9f3208c945f3bd37afe49804e59ebba7c07cc69ce76d85dfaa249c77b02f61dbc4265b7a7abd2cadd165afa8fc8911b16d66641fe65d5e0cd18e0d005fbfeda1817b6a79cbaabdbd1c38119b6c5b8e65eccd8ed3734693730f39c953af7daf23c8ac3ea934729589998c306b71221075c87cf661929145f9ee48161cb2ec24751e2d10c1ef56f23daa32c0a74cdc425d1cebbb0df7f4ef2ef60d516c8fd7786c1c67e944dcf48c"}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.908073051s ago: executing program 0 (id=1236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045503, 0x0) (fail_nth: 1) 2.708230376s ago: executing program 2 (id=1237): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 1) 2.606333154s ago: executing program 2 (id=1238): openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200101, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x25, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1f}, [@generic="686bcb5de7c5339b807161e21e483a7071ff5c690d1d46db6afebf86d61392bfbb62b789f94ae6061603e0296c40fd8dd862c04daf8a23853246211bc57ee720b55cc0fe164f1761501477c1b570d62771ab6580e556ee5a30fd9b35b5e955b18ed932", @typed={0x8, 0xbd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x5, "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"}) 2.512533903s ago: executing program 2 (id=1239): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2.495401591s ago: executing program 1 (id=1240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r2, 0x29, 0xa5, 0x8, 0x4, 0x2b, @empty, @private2, 0x10, 0x10, 0x3, 0x2}}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000140)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f2c91fefe5087225fb205881821b", 0xe}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000240)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_tos_u8={{0xd}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2a}}], 0x58}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="b048b8b438429d791e36a43cfbaf661ce8c64a9a87c152c69c36ecb04a2d447c933b3de1510d9492c759ad1d9ad0982dda18bb8d1ee5b13286794b30db3a4d49c184f15d3b625307343c290897801327dfdf1e174cf8fbb40e3015e87e27d15477da49a6437ab4c958f6a1777e279bf5616c473d66f76d9a3069d5ca99c25a767eaa47df66f12ada4a628b1c37bfc7e3142a36d8165befc4cc9628023fe0d9676781f306c543b32459fd0d53407f53c2a0451837d623a7f925b90dcde57e15e69889c1f8755eb3cef025e5b1811b11a4e887bd08ef2a12dac63f40cef8f24559b285c0c0b9b7bd644f7bcb91b4ce704614174eb2d099c0dd8f102a7ac118b5044ad4ee51246781776c1ec645661a93dd6786f8cbf1e3f68b245e184bf5da8320fa40c21a76d181386eacf07b9d6c686b87765814fdc10026eaa5a596e502883f289b60ae0283ed767b82463253209ac7989abf2b1cc6dd8c3e99977c959587c41cc4b1083d7c8cf284f0b2ace4b52e1703437e5721e72b46b9d05d29e2e7564e24cc1b815791abfea871b5c27fca1cccfc0e78df0d006b8695c9566d7dca59de44c8245c5b2cf56e5862bb5bff261a410034e0dd4be1547bf38474b2ce837d8e0854f417658ed01cd7d38e17cd5aa201be52704e3ff7326c4030f5891dd89520ff8585d89d3916ea8d79882d716e4833ab9acf78ade4a7372d5ec67209e5619e7c645ce206762c0367a338ddafd00a7e233ab9f6c34962a1cfeea0e25ad369dee052ab6a7ae996ff3bad34d6490820a8308579ecbb76431069305e3afbe48461e807817e5034795804088b51243df8c967d1f2e5c3b7998ba0523e53b2101e4a0f504ff86dba40fbc2e3d5932bfcb26f8b665e39ca9043292970a1fcda2932c1524124cf64b579f39f66eef8fa7a153067e05a3a6609c43178f3a190fdcd13de50ed6bb4416108a0c3bed2eeee91f239bd62e0705556e0049e6d4a3982d17b911c4ada2458ffaaac7194fbf3da6979dffa50925a0fd2290086ad9e28d927d020ac0532d7406ad27dcecb4d2c48e5bca94b355e9c338dfde281b67cc80e4ad5b0b49ea194bc600801343bb107f15ca702e4959c3305ad6f52bc74711d5cc4b6a308e4332e55771853c7b59f22fd6b7851659d5b9b958cc35d3e7c7b2cc88e61d32ef04532a478da938c34c213096b2b987936b95117111208692f834c69d941439e5623174d442e06a96797a46d45ed85d1071c40dc6446645adb2ecb6dae1cacb04d81d50b4bc8b1d519ec3e694295b938ab55229064dc639845fdd4fa83ba3dcbc88e5cbd547f3fb3be25f4b09794ac780f19887b1eed46395b3b688475550efd6f6b1eede14965f451192fefb0e97fd49aa1fb0b8446647dcfbeddda30b89dac16d2e9ebbad1d1723b701ef2f6f3cd2e25e43fd7abf167462539caf6a2c300726f91b9c829fb55453c117bef288cd6e4947bec7610dbfb85a9ee7f8a6feab056d8ac02c2d6c947264b8b3e78fec674f67933722687e35884bc3ebcfa938c77d7eb75f9d4ac7650d6c7a9ed9b11c10d6dfd69f3164cb008f153a6cbf86a0aa7fdd618c0c7441579aca10c321c7358657d584de660afe6fef54a49f278d724cdd87d72962a726381128fb177d38e574c322a393c4b4e5c31e13353e723eea37ec1b929a65609bde16c23962211f34d220fbeae511457e01f92f211d804cfe2a4fdc7088642bb1ab0290eee676436e4e0745ca936ae300b72d6964ef35921723cc0f96905b18577e6cb6cc7b958f061207e065039f2afec49c414cb6eeb05d444ba9ad926a0e04bb5261913275ce8db806353e0e610a92d9ac39076944d6abaa820beb9d3ec20bd4d90819cc9e9034ee501e832bcd5ebd750f5c4736566491f727a285073ddf805b224d1e887a2b73cd8ac3587a986d28ef807528fb73770c175ab0f9225531f4de543a35a9827a06cee3c9a091e6e3796d2ed1dbf68f7d3176049b086a25e7903adb3946c475df028896b34180823edd0a2fd8dbc7a053561863c785cdeb526e1e965a4465c534f871cb47b0a41b768122610ef70fffb5337eb7832d5fb96435e89872a977f1ef155b3ab1908e4eb8820758b58da5c1580e3952ef631b48177e1e08cc2d4b835eedbaae7161bf96a8de90f2bc840c23c132e2de80c630d8e72ef9f08ea097c0580b14d54d42255458e2684106181979cb2f7d9efce71cdc85a0e22ebdcc0664436e98e43c1bac45732853a1c4e5f77faa2a1fbfbd3d21e76a6bd498b65e2655b5a164e975f68281ece604cd75d9cde2965b8af483def4fd28128d43518ce7ee0c446a50a26fb09352f1bd28e3123e5071251c3c6e99cccf4387ebc1d795c3766bd470dd97c23ad2a41d28769f25167dae9680074e02dedb49a3ea769a67a578bc742cf84a66b732a652ed33d0c6f3fc75df684f2cd3bd285cce2bec81c228d7353b8b444c51936ab7c4153d3d01c105642bf2d311eb032574e0932043dd0adea6dcc15bf67327d03dea8c314dfaaf8a6d96c9d6311bd7203276f5533c2ea52b68a353deb975e77646e92819219c30e4be824ae155c5b65105f3e4f93ffc9e5cd81936c3698051ffed3cde4b83ad01987b772aa88acc66b49cf1850a6e407b7675bc21f014b0cc5cd62f0825d57d3ce6b309ed1e8718509086a838665ea85f8c704e61b022824fff8001beb64abac1ce89a6c6664c3fae729f37cab542bfb0ce856f752acf9a571b7cc88738190dfc2808630c23529f000a62ff4f6595279f31e17c21435fc8ab3bf439245faf85eb2c74d3cedde16cbbf92774a717798a497e0344b331efceca90a1c9ed0db878519608bb30265ca6877b0ae2af5e740177a017fcc2a614927d32027f007c0c0b8d6e24cf3098e1c46e7a3e5c70e675b3cfd472ef621186e5374db164d7f45a3c2e6a5ed75ae70c192f4bac2f719ac2999e100a09ccfc81d4046ed30d5caa76d5bde66b117c162674d8697dfb459a78df3060863615ac1a4a631f932df4418e7a744cb9688ab2c65589a38bd02f86c66d3d94e1c7df3a50bc6ca972eee94e8e68222abbfded5ea74f6ed59072207c82411f152d229af281e885219ae2d99fab3a2f5af8a52f2257f171c17741513d963f63b1d96d4c8219e510fcf067bcb54f531a259d7c60a52244b5c35e817c75ec8763f760ef24714d91f01efae4ad9a39a7daca932f8121dbbc8e1e188d8bc4938beecd7a8988d7f897893b9823693e738a7f164697f410b8f36dc6d5fcf59ae3a17439d241b77affa8f704dd1b9041bd69b045a3eb2e9ef5341d941bdd5159c6730363a5ea2b9748af83d71fc15cbe9c839ef24bfcecdee79509895f763d908771b464c33c6d62995e4516440a3c93951869ae07500c56c7e16aa586988120703395ece01d374428bddbd08ca3e94122f741fc172cb924f0070d72ad67e8293b1cc50a33e2b146eef93f4c127ebdb42983e99a8c57db25cee8ad12132ffd47e026b0a5072aa543e3245e57f08f6736aad31616bbc67bd3aa7a75a79528de1b5d9eef8a73ff2c9327724445c51d37c720be55fd9e375560a0fc149f46b599e049fa76603a184a40bc32c80ad69fc5a4c29fa3f72076aceb76f8a1ec3ad798fe6602cc608267db43d9542f61f00a5c9520ceddf90da12fa8e7bb922e79843309cbf6e7c38a672d1e6dcfd4bf5e08eb19d218191c1ee600784dd02a8ec9bf1fd0b00433a6ef0ea2f16154c71bf85fe2399c04dfd92403d55f36f7c88362c4e0a25764ecec8d6971834bff3f2c0a6e8ceb6c9eade4b44af4436d57f987f00e3ebbeab1174bf5e4294b090465e08ffa126f0ee903301bbff8d7bbc762bd476809269369e47fd0a203f5603208304017717bb264736a0d91ed6b996cd7da2810063d93e877f7ee9af0cc801713e8868e676c837fc99b88515dc3d29647d4b7f599ba184fc373203939d749361dbf822055451a79456f05593aa2422df44f5c27dd6bd436418d646d08c6c087e59243f79ce851703859dcf30cfd989f278de37c70392c84c63ed832126d4ae7ca8d03271e7ca1a6b18ae30b8908daebddfd4ce9cd8e95c0d58395a7bdf91fd70bc2b232fd935b3f2a7a4ed31f5bf4df2bad08edfac5eb104eb22aeb8ec4f82dfca59ef3169e1c17aa90c7bc0876c759834b095bc8436e7ff243dedfe23ce2f13f09495cbccb4f89b35348e2b300d0128db556bd9aa9e0b35dd66c8922922600ddb6b7840bae4f0d07ebcfdd08cbe6dad78ec8d137f1bf4841537744e61619654d647e11613934e5d49f1497cff0d39d89c1506ea792894889fd8e39984ccd11e26a4375b9b34df1ea5fdb0b5ef8cff64830ef7f68457bcb2e4c99aa9d2dd69075f4ceb36e884efa4d0d43d030a331462f8abb2202fa87410aac490986246fdcd4fc9b1b43a0e7728254663d92c3595f871142ad0768672806eb932d5c353b92f6b48d028e801e49b7f60a329324f1b1b336aa5b2153a627afbcd21a26f8b014312ba765732b94b9095c534a8476809a5c7629d20ce29503db34f7f4ca6636ac08e143e4659a6b878c1129df58300d1d8ff8b8692d7cdf7330a251ebd42465a72e861548f726aec09c71da31d85989fe84407ba83653033be98555416044bb15f6e1ed55cca4805d3cf5ae7b98436e12fd4d72bccd5bea4c31da734de2c8f5497e09cb62cdb68b9c8895bd771144042fcf29d25cac5d1d3261baf1def0bf3ac836985860fb1ab9ef352bee7716269abe6aae04d4f10260b6f22b9844acc0ba552eb609228e867a40dc82fd96dd68cab7b18cf224d55bf0baf5a29da004ebf9770f1931a7f221d1ac870c44dddf9e633fe242ec6a7e62c65fc71c6312f963bcd754073e373382c3de718cafdf17bf87e7a2149827ae9fb05af7e18e65b7cf5e4b275f9d484eae89568ebe4070fda552149945cb11630b5b310b11b8d7d8680718d0322bb60c88bc09ed7f857147d8f381543774101ed236fd72b75d5906c08786a423439236426aadccb1415db8379e4e60f04da5a93b1482910bd580b87b349d2c369a3f880cd5ad9f7abd264eb2db830ed4c7560cbe69d962e51ed0094754e1d676bdddfaeb5a252e3197faaae79a12570f799052ba62fb42ac70c48d2f9bd812e8bf760e25e8454616c35835805e44168f24b0b507def44e5abc85d39a7aad220502abe8235ddb1ac0bdfc98c4e241b7fe88a9ed6decfff910b6d1fba62ee924b1064ae2bd5d035d1afca3b63aa9ec520f393121cac3ce7aca863603879c5cd43d3febc8961232bf6e1f2139112ee55c6a0ca4a0b5c6904211eb9cb6293848c9265859a17145133715545bfcda29ca5f7a9d5d09a2b05bb6bf89ac6a07fd34ad0b9cf73ba39b4049c601e1cf876ad40cce054074db5635e2c4a61bc3fed3a72fb4e4b34004b29093baeb2db0b598b495e4afc7ac5770064ff166914ab46a0a09241dce8cbb7ef64b4d16e7299345e932521ee420fe1733ba8372f84f660d810434554634d307aff0e1280917eb42891595957cd1f8722a1fb954a6213ac9cc5de1f1f26740945789fbd1ddd9e7ca49d6f451aef90555bf960cafaebbd38d18ea005f83c4a74d222bd797ccf8866499873995f74d43745f2ef55fa964708fd8926b31b7b79c0ba0416861539ece3f4de9c6621537b94107e54d0e141d22983dfe9e11fec682625d9c86efcb3b29692a8ba580d6bc67d10c3faa285dbfb9b17dd18da1d0efcd7121e8668ea16bf1ef9f4945233b96ebfe8321c83bc9b12dd282339a0643ff0e21d4f4233593b11", 0x1000}, {0xfffffffffffffffe}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7ff}}], 0x10}}, {{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="572be6a4e45be317d342ca0b3a8e1bda8a62db7b119ea1c75e455268babe3e4fbd12b2fdda46e8151e9fe715965a8abc661d0844c886ecfbfc51d89a79611a4dcefa3690cbdc89115380ea0c11a074c98dbeb153ed9a0b084c24c8a4", 0x5c}, {&(0x7f0000000400)="12e074a9645e5d4186390a23e27929fceac9c14ec945e777236bfa42d3588ca65f25d9529c2b4a657c71bf6cf96804a0b0dee44fe196b6142ec725a3885945", 0x3f}], 0x2, &(0x7f0000000540)=[@ip_ttl={{0x10, 0x0, 0x2, 0x6}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1000000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @remote, @loopback}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="81d1f71ecb65772f2b9ce647fd03c03e2b7cf9a75a5128516b811c669307cc18ea89b07a52a0384d42366052a0333f9f96396f422961d011e436f877174f9bde60", 0x41}, {&(0x7f0000001700)="a67c306c6ecbee3b4ba1fc765445380058e5b180bf2df68e34aa186d507642656a093c6ea186da9d57545c79370e6a5b4002f2d740d07b3819c9f5fa873ba987ecfe38f028849b9733763ee0a35ecdbc82cb8533255949b6b6f9e452a687841f57a66085e507c0afca6a9d5ae3306105161d5f399c771893db708789a2376d5c25f0822387ebec2766f9763ed545dc22b506836488a4eae68a512a1040aff550697630df1cd0e2f05396c133aead6aafb152613da72141c10df9a1fee370b5458494f3d63bb85650e61c032ac7e9bb0ddde95f6bc47ed09fb6bdecf35bae3894b937", 0xe2}, {&(0x7f0000000600)="0be65b5775251c5a1ee2eb8bb2d6061def9adc3c558f1ac55f65a89fa647607dfde1bd7d9d65733ab85b9d878ad71383420eb847862f1851dea7137b6a8453481e7349f7ef6856bd0e89f56245502583c026c2b2eeafe7359e2b739f0889ded23d2253d2932b0f475636df18b7dac2027c0485a44417b3aa301d7f0f6f65913c727e125be9a1236487fb2d", 0x8b}, {&(0x7f0000001800)="a10b1e11", 0x4}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001880)="f2b0ce5b05d75d07715a6634fc2de8c710bff8503be79ff8aa5921cffe16eeb4292b044cbc97924fc98d6fe497e799744964df60bb32a78f51d8bb8bbc7918e43a21c5527b3ff6c6287a03a3ac8371a84e9ecb1ef52ca6e7a6900b1fdac2f0b1b2dd9d63d59c34578d8dba49a8cb0769458641ba6a680f8ff656f8b05c638a561d9fba20a09f3b7336166c783d5d4b2fe85f8498c92599bfe626ad89dfe64532d62702feba03b06a890bbc08c5", 0xad}, {&(0x7f0000001940)="850265a3bcefd464850651c40752df6d88db959a93925be413c7f5f18d4621a5e054d470196d15cab439a36e728b3ffe39dc5b4823488ef0b85026a1bb6bf8e3317564c1f025be3201b3", 0x4a}], 0x2}}], 0x5, 0x4048444) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc044) unshare(0x4000000) 2.470327426s ago: executing program 4 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000800)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "ee2886", 0x4d4, 0x11, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x0, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x8, 0x8c, "aa3d9fc34610b96650af8b7759466a9a2493ebb0be5ee44f28a4a0804da09125fe957a68658da34ba0d628d0084a0a4346259bae17d28eedcde583bbf68690bc7ae234ce95f0f8b30ce1bc4fad9abb4dfd951cf242f06c54e7dcb889084b7f1aa87d8e5f7c4b446e0baab9c896857b779c078b9bacdad243cd53aeec911192408f0ac93d2fb3238e813e4163"}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @ra]}, @hopopts={0x73, 0x32, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x8, [0xffffffffffff8001, 0x200, 0x9, 0x1, 0x4, 0x1, 0x9bbd]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x81, 0xae, "e29af31e62dba058e676be61a35214a83e45a88d07ca8903436ebc981602622e85bea50f9eae419b18774c3587b040659ac014880220b5b36b3488eda1bf9ed6aa21223358a82cc44b035307d0bcb2b6a2db0a649da291555cf3ec2fc2f713b2bec5cfa0df2d7c855bbead7e29aa63aaa25d2007f4183a54aa8dc5dd4ff872088c0938554fdc1122308949fdfe6f5438f67f828d5fbbb8794af8a782598e9c869981a631d8fc9695444f569d4ca3"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x8b, "26289fed7ee581029317cc63c72358cceb3358d820b4e6fc3873f03aeac5f034e32d356a87215c1cab0d9ec13038fa08adba99e57b0499b9754609f6e5066847a3bbdc26c4fba18ee5a742927752e14420e3630da4064e5ca15961b67c27ee1261d9cfa4f035a71b279a36707de16a54c7712e8e398c5bb9f135f5bb45b7b7d6a65ba97aefae2baec023fb"}, @ra={0x5, 0x2, 0x2}, @padn]}, @srh={0x87, 0x4, 0x4, 0x2, 0x80, 0x10, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, @hopopts={0x12, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}, @dstopts={0x2c, 0xb, '\x00', [@generic={0x5e, 0x43, "e32b4823f0b16b7717e86c8c10d005afd0466b509b56063f809ab742441c2d4e8fdaeaef0c9058658052103c876416d709d56ed8f561be9ac7c901a748ca954e2e1446"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0xffffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x1000}]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x0, 0x28, 0x3ff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x16, 0x12, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x88, "2bea1a6e009d20fedce2f1a969b258671059b4957836292c34338fe61d97751bbe2f0f74f23f6dc613ff0e724162510b1fddf7472ef528cc45f0366d0bae465019925cfd2b7684b2c782e03ce3d69158499080ef74c92e79f76790a866979bb57200e2b629fb8d0cbfbc2df77bbc50efe8bb21e22eeaa55b96713ba6e4a1dfb68f208c51dbdeb4ae"}, @jumbo={0xc2, 0x4, 0xfffffff7}]}], {0x4e22, 0x4e22, 0xec, 0x0, @gue={{0x2, 0x0, 0x2, 0x4, 0x100, @val=0x80}, "34065ad17fec7227d872a5324d38306e4711f6177cc8c1f6c585ea4d1f6ddd644f858273babc902c18361d993580db96c386cd893b9f3208c945f3bd37afe49804e59ebba7c07cc69ce76d85dfaa249c77b02f61dbc4265b7a7abd2cadd165afa8fc8911b16d66641fe65d5e0cd18e0d005fbfeda1817b6a79cbaabdbd1c38119b6c5b8e65eccd8ed3734693730f39c953af7daf23c8ac3ea934729589998c306b71221075c87cf661929145f9ee48161cb2ec24751e2d10c1ef56f23daa32c0a74cdc425d1cebbb0df7f4ef2ef60d516c8fd7786c1c67e944dcf48c"}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 2.469128587s ago: executing program 2 (id=1242): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) r1 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', r2, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r7, &(0x7f0000000080)=""/102355, 0x18fd3, 0xc2a) write$binfmt_script(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x8]}}) futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019080)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYRES32=r7], 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x1ce9a9fddf9b59e1, 0x81, 0x20000a2c, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x10000}}) 2.217058447s ago: executing program 1 (id=1243): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) 2.168040384s ago: executing program 1 (id=1244): socket(0x2, 0x80805, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x23, 0x5, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xc29b) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x15) r5 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="71756f74612c6772707174615f626c6f636b5f686172646c696d69743d332c000000bfcdc2e0dd0c7fd78a49187a0d65213276224a7304cd3d343395adc00655ad31d75aefdb568b86bb79c2ce14d841331e7bd382a2fdc8"]) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) pipe2(0x0, 0x840c0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000023c0)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r9, r9, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 1.503910508s ago: executing program 4 (id=1245): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r6, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe6) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r8, r8, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r9 = dup(r1) read$FUSE(r9, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 1.246992307s ago: executing program 2 (id=1246): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r2 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0xc3f4, 0xc8, &(0x7f0000000680)=""/200, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0xa000000c, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r9, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r11, r11, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r12 = dup(r1) read$FUSE(r12, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 1.221350414s ago: executing program 0 (id=1247): openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200101, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x25, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1f}, [@generic="686bcb5de7c5339b807161e21e483a7071ff5c690d1d46db6afebf86d61392bfbb62b789f94ae6061603e0296c40fd8dd862c04daf8a23853246211bc57ee720b55cc0fe164f1761501477c1b570d62771ab6580e556ee5a30fd9b35b5e955b18ed932", @typed={0x8, 0xbd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000080)={0x5, "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"}) 1.127544389s ago: executing program 1 (id=1248): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESHEX=r9, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe6) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r11, r11, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r12 = dup(r2) read$FUSE(r12, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x890) 1.127263105s ago: executing program 0 (id=1249): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0) close(r0) 1.037960367s ago: executing program 0 (id=1250): r0 = socket(0x9, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket(0x1d, 0x6, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRESOCT, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x100000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840c0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB, @ANYRESHEX=r12, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8fc4c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769"]) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xe, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r13, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(r2) read$FUSE(r8, &(0x7f0000003c40)={0x2020}, 0x2020) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x890) 847.759213ms ago: executing program 0 (id=1251): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000180)) r3 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x40045532, &(0x7f0000003f80)=""/4086) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001", @ANYRES32, @ANYBLOB="f8ffffff042004001c002b800800030019000800"], 0x44}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) cachestat(r6, &(0x7f0000000180)={0xffffffffffffffff, 0x80000000}, &(0x7f0000000200), 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r9, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f00000000c0)={0xd, 0x4, 0x6, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) 486.168673ms ago: executing program 4 (id=1252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000800)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "ee2886", 0x4d4, 0x11, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x0, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x8, 0x8c, "aa3d9fc34610b96650af8b7759466a9a2493ebb0be5ee44f28a4a0804da09125fe957a68658da34ba0d628d0084a0a4346259bae17d28eedcde583bbf68690bc7ae234ce95f0f8b30ce1bc4fad9abb4dfd951cf242f06c54e7dcb889084b7f1aa87d8e5f7c4b446e0baab9c896857b779c078b9bacdad243cd53aeec911192408f0ac93d2fb3238e813e4163"}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @ra]}, @hopopts={0x73, 0x32, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x8, [0xffffffffffff8001, 0x200, 0x9, 0x1, 0x4, 0x1, 0x9bbd]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x81, 0xae, "e29af31e62dba058e676be61a35214a83e45a88d07ca8903436ebc981602622e85bea50f9eae419b18774c3587b040659ac014880220b5b36b3488eda1bf9ed6aa21223358a82cc44b035307d0bcb2b6a2db0a649da291555cf3ec2fc2f713b2bec5cfa0df2d7c855bbead7e29aa63aaa25d2007f4183a54aa8dc5dd4ff872088c0938554fdc1122308949fdfe6f5438f67f828d5fbbb8794af8a782598e9c869981a631d8fc9695444f569d4ca3"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x8b, "26289fed7ee581029317cc63c72358cceb3358d820b4e6fc3873f03aeac5f034e32d356a87215c1cab0d9ec13038fa08adba99e57b0499b9754609f6e5066847a3bbdc26c4fba18ee5a742927752e14420e3630da4064e5ca15961b67c27ee1261d9cfa4f035a71b279a36707de16a54c7712e8e398c5bb9f135f5bb45b7b7d6a65ba97aefae2baec023fb"}, @ra={0x5, 0x2, 0x2}, @padn]}, @srh={0x87, 0x4, 0x4, 0x2, 0x80, 0x10, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, @hopopts={0x12, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}, @dstopts={0x2c, 0xb, '\x00', [@generic={0x5e, 0x43, "e32b4823f0b16b7717e86c8c10d005afd0466b509b56063f809ab742441c2d4e8fdaeaef0c9058658052103c876416d709d56ed8f561be9ac7c901a748ca954e2e1446"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0xffffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x1000}]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x0, 0x28, 0x3ff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x16, 0x12, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x88, "2bea1a6e009d20fedce2f1a969b258671059b4957836292c34338fe61d97751bbe2f0f74f23f6dc613ff0e724162510b1fddf7472ef528cc45f0366d0bae465019925cfd2b7684b2c782e03ce3d69158499080ef74c92e79f76790a866979bb57200e2b629fb8d0cbfbc2df77bbc50efe8bb21e22eeaa55b96713ba6e4a1dfb68f208c51dbdeb4ae"}, @jumbo={0xc2, 0x4, 0xfffffff7}]}], {0x4e22, 0x4e22, 0xec, 0x0, @gue={{0x2, 0x0, 0x2, 0x4, 0x100, @val=0x80}, "34065ad17fec7227d872a5324d38306e4711f6177cc8c1f6c585ea4d1f6ddd644f858273babc902c18361d993580db96c386cd893b9f3208c945f3bd37afe49804e59ebba7c07cc69ce76d85dfaa249c77b02f61dbc4265b7a7abd2cadd165afa8fc8911b16d66641fe65d5e0cd18e0d005fbfeda1817b6a79cbaabdbd1c38119b6c5b8e65eccd8ed3734693730f39c953af7daf23c8ac3ea934729589998c306b71221075c87cf661929145f9ee48161cb2ec24751e2d10c1ef56f23daa32c0a74cdc425d1cebbb0df7f4ef2ef60d516c8fd7786c1c67e944dcf48c"}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 250.346717ms ago: executing program 0 (id=1253): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001040500000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x3, 0x0, 0x0) r1 = syz_io_uring_setup(0x1df5, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) close(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000b0601020000000000000000000000090900020073797a32000006"], 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) r8 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r5, 0x0, 0x1d8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r11, &(0x7f0000000200)='L', 0x1) 183.082292ms ago: executing program 1 (id=1254): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xae383) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x801) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.923331ms ago: executing program 2 (id=1255): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 1 (id=1256): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (fail_nth: 1) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.650'. [ 207.889111][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 207.926396][ T8709] fuse: Bad value for 'fd' [ 208.025650][ T8711] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 208.048964][ T8711] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.072355][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 208.111808][ T8716] 9pnet_virtio: no channels available for device ./file0/file0 [ 208.422585][ T8725] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.588289][ T8726] fuse: Bad value for 'fd' [ 209.048820][ T8730] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.439747][ T8738] fuse: Bad value for 'fd' [ 209.996373][ T8754] 9pnet_virtio: no channels available for device ./file0/file0 [ 210.672557][ T8757] __nla_validate_parse: 6 callbacks suppressed [ 210.672570][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 210.688568][ T8757] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.710064][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 210.720998][ T8755] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 211.872082][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 211.982359][ T8786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 211.984523][ T8786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.053578][ T8786] vhci_hcd vhci_hcd.0: Device attached [ 212.330564][ T6673] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 212.599889][ T8788] vhci_hcd: connection reset by peer [ 212.604416][ T65] vhci_hcd: stop threads [ 212.606434][ T65] vhci_hcd: release socket [ 212.606646][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 212.607992][ T65] vhci_hcd: disconnect device [ 212.613302][ T8776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 212.615418][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.630053][ T8794] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.645739][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 212.730264][ T8804] 9pnet_virtio: no channels available for device ./file0/file0 [ 212.811202][ T8798] vhci_hcd: connection closed [ 212.811952][ T1228] vhci_hcd: stop threads [ 212.815969][ T1228] vhci_hcd: release socket [ 212.817992][ T1228] vhci_hcd: disconnect device [ 212.824037][ T6151] vhci_hcd: vhci_device speed not set [ 213.019632][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 213.032265][ T8808] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.313687][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.679'. [ 213.366246][ T8809] fuse: Bad value for 'fd' [ 214.101753][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'. [ 215.520898][ T8847] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 215.522993][ T8847] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.525700][ T8847] vhci_hcd vhci_hcd.0: Device attached [ 215.824447][ T8848] vhci_hcd: connection closed [ 215.826787][ T65] vhci_hcd: stop threads [ 215.833206][ T65] vhci_hcd: release socket [ 215.835634][ T65] vhci_hcd: disconnect device [ 215.903794][ T1324] usb 43-1: new high-speed USB device number 16 using vhci_hcd [ 215.906348][ T1324] usb 43-1: enqueue for inactive port 0 [ 215.974036][ T1324] vhci_hcd: vhci_device speed not set [ 216.051587][ T8854] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 216.053691][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.056422][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 216.276802][ T8855] vhci_hcd: connection closed [ 216.277127][ T13] vhci_hcd: stop threads [ 216.281464][ T13] vhci_hcd: release socket [ 216.283565][ T13] vhci_hcd: disconnect device [ 216.294054][ T66] vhci_hcd: vhci_device speed not set [ 216.563166][ T8859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 216.565653][ T8859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.570290][ T8859] vhci_hcd vhci_hcd.0: Device attached [ 216.706608][ T8872] netlink: 36 bytes leftover after parsing attributes in process `syz.3.694'. [ 216.735432][ T8872] fuse: Bad value for 'fd' [ 216.772456][ T8860] vhci_hcd: connection closed [ 216.772851][ T12] vhci_hcd: stop threads [ 216.779080][ T12] vhci_hcd: release socket [ 216.781093][ T12] vhci_hcd: disconnect device [ 216.824109][ T6151] usb 39-1: new high-speed USB device number 12 using vhci_hcd [ 216.826613][ T6151] usb 39-1: enqueue for inactive port 0 [ 216.904806][ T6151] vhci_hcd: vhci_device speed not set [ 217.220867][ T8876] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 217.223679][ T8876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.228043][ T8876] vhci_hcd vhci_hcd.0: Device attached [ 217.454038][ T6673] vhci_hcd: vhci_device speed not set [ 217.464187][ T66] usb 41-1: new high-speed USB device number 13 using vhci_hcd [ 217.754977][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.698'. [ 217.967040][ T8877] vhci_hcd: connection reset by peer [ 218.129675][ T12] vhci_hcd: stop threads [ 218.131073][ T12] vhci_hcd: release socket [ 218.132676][ T12] vhci_hcd: disconnect device [ 218.286466][ T8886] netlink: 'syz.0.699': attribute type 23 has an invalid length. [ 218.963693][ T8903] netlink: 'syz.1.702': attribute type 23 has an invalid length. [ 219.120228][ T6673] libceph: connect (1)[c::]:6789 error -101 [ 219.122965][ T6673] libceph: mon0 (1)[c::]:6789 connect error [ 219.123423][ T8910] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 219.154470][ T8910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 219.156741][ T8904] ceph: No mds server is up or the cluster is laggy [ 219.166580][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 219.277895][ T8914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.705'. [ 219.608646][ T8920] fuse: Bad value for 'fd' [ 219.755115][ T8929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.708'. [ 220.373301][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.710'. [ 220.576707][ T8939] fuse: Bad value for 'fd' [ 220.744661][ T6673] libceph: connect (1)[c::]:6789 error -101 [ 220.747312][ T6673] libceph: mon0 (1)[c::]:6789 connect error [ 220.754880][ T8946] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 220.791044][ T8946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 220.799304][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 220.948859][ T8941] ceph: No mds server is up or the cluster is laggy [ 221.004362][ T6673] libceph: connect (1)[c::]:6789 error -101 [ 221.006991][ T6673] libceph: mon0 (1)[c::]:6789 connect error [ 221.636653][ T5984] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.785458][ T5984] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 221.788457][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.792382][ T5984] usb 5-1: config 0 descriptor?? [ 221.797713][ T5984] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 221.942735][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 221.960580][ T8971] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 222.004817][ T5984] usb 5-1: USB disconnect, device number 5 [ 222.443084][ T8974] netlink: 'syz.3.718': attribute type 23 has an invalid length. [ 222.453577][ T8974] Zero length message leads to an empty skb [ 222.514880][ T8975] netlink: 44 bytes leftover after parsing attributes in process `syz.2.719'. [ 222.584507][ T66] vhci_hcd: vhci_device speed not set [ 223.004442][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.722'. [ 223.167852][ T8988] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 223.188622][ T8988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.200904][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.723'. [ 223.390501][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.724'. [ 223.985468][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 223.995471][ T9000] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.872128][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 225.024368][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 225.176036][ T34] usb 8-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 225.178846][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.185773][ T34] usb 8-1: config 0 descriptor?? [ 225.191027][ T34] bfusb 8-1:0.0: probe with driver bfusb failed with error -5 [ 225.317365][ T9018] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 225.319643][ T9018] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 225.323256][ T9018] vhci_hcd vhci_hcd.0: Device attached [ 225.396654][ T34] usb 8-1: USB disconnect, device number 6 [ 225.574282][ T66] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 225.655278][ T9020] vhci_hcd: connection reset by peer [ 225.658442][ T1038] vhci_hcd: stop threads [ 225.660249][ T1038] vhci_hcd: release socket [ 225.662260][ T1038] vhci_hcd: disconnect device [ 225.846789][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 225.863336][ T9031] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.189148][ T9030] fuse: Bad value for 'fd' [ 226.871846][ T9042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.738'. [ 227.030458][ T9045] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 227.033333][ T9045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.038142][ T9045] vhci_hcd vhci_hcd.0: Device attached [ 227.134206][ T6004] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 227.405579][ T6151] usb 43-1: new high-speed USB device number 17 using vhci_hcd [ 227.516222][ T6004] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 227.519635][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.523787][ T6004] usb 7-1: config 0 descriptor?? [ 227.528493][ T6004] bfusb 7-1:0.0: probe with driver bfusb failed with error -5 [ 227.558061][ T9046] vhci_hcd: connection reset by peer [ 227.562279][ T13] vhci_hcd: stop threads [ 227.563645][ T13] vhci_hcd: release socket [ 227.565263][ T13] vhci_hcd: disconnect device [ 227.676187][ T9060] 9pnet_virtio: no channels available for device ./file0/file0 [ 227.734027][ T6004] usb 7-1: USB disconnect, device number 7 [ 228.240030][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 228.273301][ T9061] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.404944][ T6673] libceph: connect (1)[c::]:6789 error -101 [ 228.407352][ T6673] libceph: mon0 (1)[c::]:6789 connect error [ 228.448272][ T9064] ceph: No mds server is up or the cluster is laggy [ 228.456005][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.746'. [ 228.874981][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 229.038070][ T34] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 229.044029][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.048338][ T34] usb 5-1: config 0 descriptor?? [ 229.055241][ T34] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 229.113718][ T9082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 229.116014][ T9082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.118906][ T9082] vhci_hcd vhci_hcd.0: Device attached [ 229.191059][ T9081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 229.193199][ T9081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.205805][ T9081] vhci_hcd vhci_hcd.0: Device attached [ 229.256950][ T34] usb 5-1: USB disconnect, device number 6 [ 229.364091][ T1324] usb 39-1: new high-speed USB device number 13 using vhci_hcd [ 229.666410][ T9083] vhci_hcd: connection reset by peer [ 229.668453][ T12] vhci_hcd: stop threads [ 229.669993][ T12] vhci_hcd: release socket [ 229.671500][ T12] vhci_hcd: disconnect device [ 229.676986][ T9085] vhci_hcd: connection closed [ 229.677107][ T12] vhci_hcd: stop threads [ 229.680118][ T12] vhci_hcd: release socket [ 229.681618][ T12] vhci_hcd: disconnect device [ 229.848978][ T9091] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 229.865408][ T9091] 8021q: adding VLAN 0 to HW filter on device bond12 [ 230.216295][ T9096] netlink: 'syz.0.752': attribute type 23 has an invalid length. [ 230.684026][ T66] vhci_hcd: vhci_device speed not set [ 231.125174][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 231.261530][ T9105] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.303317][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 231.757297][ T9112] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.273786][ T9126] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 232.293873][ T9126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.335879][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 232.353207][ T9128] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.424032][ T8871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.503698][ T6151] vhci_hcd: vhci_device speed not set [ 232.575885][ T8871] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 232.579245][ T8871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.588151][ T8871] usb 5-1: config 0 descriptor?? [ 232.595231][ T8871] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 232.693054][ T9134] fuse: Bad value for 'fd' [ 233.100863][ T9138] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 233.103462][ T9138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.108888][ T9138] vhci_hcd vhci_hcd.0: Device attached [ 233.315727][ T9142] kvm: kvm [9141]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 233.320899][ T9142] kvm: kvm [9141]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 233.328834][ T9142] kvm: kvm [9141]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 233.353045][ T9142] kvm: kvm [9141]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 233.354000][ T8871] usb 41-1: new high-speed USB device number 15 using vhci_hcd [ 233.574483][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 233.640415][ T9139] vhci_hcd: connection reset by peer [ 233.642968][ T1180] vhci_hcd: stop threads [ 233.645204][ T1180] vhci_hcd: release socket [ 233.647190][ T1180] vhci_hcd: disconnect device [ 233.727403][ T34] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 233.732373][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 233.736082][ T34] usb 6-1: can't read configurations, error -61 [ 233.874764][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.036806][ T34] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 234.041577][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 234.044116][ T34] usb 6-1: can't read configurations, error -61 [ 234.047041][ T34] usb usb6-port1: attempt power cycle [ 234.239263][ T5984] usb 5-1: USB disconnect, device number 7 [ 234.340269][ T9151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'. [ 234.394494][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.417239][ T34] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 234.421381][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 234.434211][ T34] usb 6-1: can't read configurations, error -61 [ 234.472335][ T9156] fuse: Bad value for 'fd' [ 234.504152][ T1324] vhci_hcd: vhci_device speed not set [ 234.564018][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 234.585398][ T34] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 234.595327][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 234.597733][ T34] usb 6-1: can't read configurations, error -61 [ 234.604312][ T34] usb usb6-port1: unable to enumerate USB device [ 234.771735][ T6151] libceph: connect (1)[c::]:6789 error -101 [ 234.774172][ T6151] libceph: mon0 (1)[c::]:6789 connect error [ 234.824111][ T9159] ceph: No mds server is up or the cluster is laggy [ 235.145946][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 235.161246][ T9173] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 235.881767][ T9183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.775'. [ 235.924206][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 236.087398][ T34] usb 8-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 236.091166][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.102485][ T34] usb 8-1: config 0 descriptor?? [ 236.110549][ T34] bfusb 8-1:0.0: probe with driver bfusb failed with error -5 [ 236.254427][ T9190] 9pnet_virtio: no channels available for device ./file0/file0 [ 236.438744][ T9191] fuse: Bad value for 'fd' [ 236.478534][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.779'. [ 236.499013][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 236.538686][ T9196] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 237.331483][ T9202] fuse: Bad value for 'fd' [ 237.523848][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 237.526551][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 237.561158][ T9199] ceph: No mds server is up or the cluster is laggy [ 238.504234][ T8871] vhci_hcd: vhci_device speed not set [ 238.576954][ T10] usb 8-1: USB disconnect, device number 7 [ 238.846248][ T9225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.786'. [ 239.492559][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 239.506380][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 239.519868][ T9228] ceph: No mds server is up or the cluster is laggy [ 239.530651][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 239.543561][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 239.702981][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 239.711696][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 239.718763][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 239.734261][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 239.864669][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 239.984071][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 239.984595][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 240.007617][ T9250] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.271414][ T34] usb 8-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 240.274336][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.278734][ T34] usb 8-1: config 0 descriptor?? [ 240.294799][ T34] bfusb 8-1:0.0: probe with driver bfusb failed with error -5 [ 240.325208][ T9253] fuse: Bad value for 'fd' [ 240.514454][ T9257] fuse: Bad value for 'fd' [ 240.970505][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 241.040743][ T9259] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.967458][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 241.969764][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 242.131583][ T9266] ceph: No mds server is up or the cluster is laggy [ 242.250322][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.255505][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.259968][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.273668][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.279710][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.286991][ T9277] kvm: kvm [9276]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 242.480406][ T9282] fuse: Bad value for 'fd' [ 242.559592][ T9286] fuse: Bad value for 'fd' [ 242.574189][ T8871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.666516][ T5984] usb 8-1: USB disconnect, device number 8 [ 242.722665][ T9291] 9pnet_virtio: no channels available for device ./file0/file0 [ 242.810478][ T8871] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 242.813333][ T8871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.817607][ T8871] usb 5-1: config 0 descriptor?? [ 242.825926][ T8871] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 242.968522][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 242.997291][ T9298] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.054848][ T5954] usb 5-1: USB disconnect, device number 8 [ 243.445381][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 243.447422][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 243.487175][ T9297] ceph: No mds server is up or the cluster is laggy [ 243.891046][ T9310] fuse: Bad value for 'fd' [ 244.131948][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 244.147903][ T9305] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.597051][ T9319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 244.599328][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.602162][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 244.687343][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 244.708787][ T9327] bridge26: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.749354][ T9326] fuse: Bad value for 'fd' [ 245.074722][ T8871] usb 41-1: new high-speed USB device number 16 using vhci_hcd [ 245.090090][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 245.092263][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 245.117861][ T9329] ceph: No mds server is up or the cluster is laggy [ 245.135285][ T9335] 9pnet_virtio: no channels available for device ./file0/file0 [ 245.278673][ T9322] vhci_hcd: connection reset by peer [ 245.281511][ T1228] vhci_hcd: stop threads [ 245.282934][ T1228] vhci_hcd: release socket [ 245.292349][ T1228] vhci_hcd: disconnect device [ 245.376456][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 245.405018][ T9337] bridge27: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 245.960876][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 246.038201][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 246.040893][ T9342] ceph: No mds server is up or the cluster is laggy [ 246.142913][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 246.156466][ T9348] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 246.244249][ T9354] fuse: Bad value for 'fd' [ 246.290040][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.821'. [ 247.040462][ T9367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 247.042561][ T9367] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.045171][ T9367] vhci_hcd vhci_hcd.0: Device attached [ 247.143708][ T9366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 247.146507][ T9366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.151324][ T9366] vhci_hcd vhci_hcd.0: Device attached [ 247.332525][ T9368] vhci_hcd: connection closed [ 247.332787][ T1228] vhci_hcd: stop threads [ 247.337903][ T1228] vhci_hcd: release socket [ 247.339545][ T1228] vhci_hcd: disconnect device [ 247.394062][ T5984] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 247.572850][ T9371] vhci_hcd: connection reset by peer [ 247.575212][ T12] vhci_hcd: stop threads [ 247.576806][ T12] vhci_hcd: release socket [ 247.578564][ T12] vhci_hcd: disconnect device [ 247.656421][ T9379] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 247.658736][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.676748][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 247.844313][ T9380] vhci_hcd: connection closed [ 247.847481][ T1228] vhci_hcd: stop threads [ 247.852762][ T1228] vhci_hcd: release socket [ 247.855005][ T1228] vhci_hcd: disconnect device [ 247.864147][ T1324] vhci_hcd: vhci_device speed not set [ 248.460139][ T9389] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.478972][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.828'. [ 248.715864][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.829'. [ 248.900915][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 248.925886][ T9396] bridge26: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 249.358473][ T9399] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 249.360618][ T9399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.369993][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.831'. [ 249.381289][ T9399] vhci_hcd vhci_hcd.0: Device attached [ 249.530731][ T9404] vhci_hcd: connection closed [ 249.531032][ T1228] vhci_hcd: stop threads [ 249.536239][ T1228] vhci_hcd: release socket [ 249.539397][ T1228] vhci_hcd: disconnect device [ 249.549237][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.833'. [ 249.849013][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 249.925865][ T9420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 249.928659][ T9420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.931915][ T9420] vhci_hcd vhci_hcd.0: Device attached [ 250.264560][ T8871] vhci_hcd: vhci_device speed not set [ 250.324032][ T1324] usb 43-1: new high-speed USB device number 18 using vhci_hcd [ 250.364258][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 250.364885][ T9421] vhci_hcd: connection reset by peer [ 250.369158][ T12] vhci_hcd: stop threads [ 250.370593][ T12] vhci_hcd: release socket [ 250.372124][ T12] vhci_hcd: disconnect device [ 250.379930][ T9418] bridge27: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.752191][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 250.982133][ T9430] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 251.067098][ T6151] libceph: connect (1)[c::]:6789 error -101 [ 251.069147][ T6151] libceph: mon0 (1)[c::]:6789 connect error [ 251.091535][ T9441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 251.104571][ T9432] ceph: No mds server is up or the cluster is laggy [ 251.546347][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.842'. [ 251.572957][ T9450] fuse: Bad value for 'fd' [ 251.733345][ T9455] fuse: Bad value for 'fd' [ 252.197040][ T9460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 252.408433][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 252.410499][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 252.446096][ T9457] ceph: No mds server is up or the cluster is laggy [ 252.502967][ T5984] vhci_hcd: vhci_device speed not set [ 252.842876][ T9475] 9pnet_virtio: no channels available for device ./file0/file0 [ 253.126597][ T9478] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 253.175808][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 253.378515][ T9479] bridge28: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 253.471281][ T6151] libceph: connect (1)[c::]:6789 error -101 [ 253.473348][ T6151] libceph: mon0 (1)[c::]:6789 connect error [ 253.514183][ T9473] ceph: No mds server is up or the cluster is laggy [ 254.210154][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 254.237686][ T9487] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 254.375572][ T6151] libceph: connect (1)[c::]:6789 error -101 [ 254.377541][ T6151] libceph: mon0 (1)[c::]:6789 connect error [ 254.487737][ T9495] ceph: No mds server is up or the cluster is laggy [ 254.529553][ T9501] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 254.532275][ T9501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.535457][ T9501] vhci_hcd vhci_hcd.0: Device attached [ 254.602043][ T9506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.855'. [ 254.751356][ T9504] vhci_hcd: connection closed [ 254.760454][ T76] vhci_hcd: stop threads [ 254.765014][ T76] vhci_hcd: release socket [ 254.766942][ T76] vhci_hcd: disconnect device [ 254.784102][ T6151] vhci_hcd: vhci_device speed not set [ 255.026517][ T9513] fuse: Bad value for 'fd' [ 255.148115][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.151070][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.447087][ T9520] fuse: Bad value for 'fd' [ 255.508487][ T9519] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 255.511046][ T9519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 255.514320][ T9519] vhci_hcd vhci_hcd.0: Device attached [ 255.584358][ T1324] vhci_hcd: vhci_device speed not set [ 255.789665][ T5987] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 255.872882][ T9531] 9pnet_virtio: no channels available for device ./file0/file0 [ 256.035609][ T9521] vhci_hcd: connection reset by peer [ 256.041649][ T76] vhci_hcd: stop threads [ 256.043213][ T76] vhci_hcd: release socket [ 256.045322][ T76] vhci_hcd: disconnect device [ 256.053706][ T9534] 9pnet_virtio: no channels available for device ./file0/file0 [ 256.175265][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 256.201036][ T9536] bridge29: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.522993][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 256.572267][ T9535] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.637853][ T6151] libceph: connect (1)[c::]:6789 error -101 [ 256.640596][ T6151] libceph: mon0 (1)[c::]:6789 connect error [ 256.672093][ T9523] ceph: No mds server is up or the cluster is laggy [ 256.827470][ T9542] 9pnet_virtio: no channels available for device ./file0/file0 [ 257.110854][ T9545] 9pnet_virtio: no channels available for device ./file0/file0 [ 257.115512][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 257.318897][ T9543] bridge30: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.425134][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 257.484626][ T9550] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.789329][ T9556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'. [ 257.837344][ T1324] libceph: connect (1)[c::]:6789 error -101 [ 257.840083][ T1324] libceph: mon0 (1)[c::]:6789 connect error [ 257.875063][ T9549] ceph: No mds server is up or the cluster is laggy [ 258.067019][ T1324] libceph: connect (1)[c::]:6789 error -101 [ 258.069031][ T1324] libceph: mon0 (1)[c::]:6789 connect error [ 258.112101][ T9554] ceph: No mds server is up or the cluster is laggy [ 258.825022][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 258.922733][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 258.938435][ T9586] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.970501][ T9582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 258.973307][ T9582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.991741][ T9582] vhci_hcd vhci_hcd.0: Device attached [ 259.309305][ T9585] vhci_hcd: connection closed [ 259.309602][ T65] vhci_hcd: stop threads [ 259.314896][ T65] vhci_hcd: release socket [ 259.316942][ T65] vhci_hcd: disconnect device [ 259.374038][ T6151] usb 41-1: new high-speed USB device number 17 using vhci_hcd [ 259.377265][ T6151] usb 41-1: enqueue for inactive port 0 [ 259.429308][ T1324] libceph: connect (1)[c::]:6789 error -101 [ 259.431295][ T1324] libceph: mon0 (1)[c::]:6789 connect error [ 259.444070][ T6151] vhci_hcd: vhci_device speed not set [ 259.458063][ T9589] ceph: No mds server is up or the cluster is laggy [ 259.645857][ T9601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 259.681444][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 259.693769][ T9602] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.751957][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 259.764059][ T9603] bridge31: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.721926][ T9614] 9pnet_virtio: no channels available for device ./file0/file0 [ 260.928178][ T5987] vhci_hcd: vhci_device speed not set [ 261.001593][ T9621] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 261.752888][ T9627] fuse: Bad value for 'fd' [ 261.880679][ T9630] fuse: Bad value for 'fd' [ 261.998503][ T9633] fuse: Bad value for 'fd' [ 262.592264][ T9643] 9pnet_virtio: no channels available for device ./file0/file0 [ 262.801401][ T9647] __nla_validate_parse: 1 callbacks suppressed [ 262.801436][ T9647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.891'. [ 263.057482][ T9652] 9pnet_virtio: no channels available for device ./file0/file0 [ 263.203347][ T9655] 9pnet_virtio: no channels available for device ./file0/file0 [ 263.317809][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 263.332568][ T9644] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.372812][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 263.399960][ T9657] bridge28: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.751985][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 263.756758][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 263.764875][ T9656] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.772734][ T9648] bridge32: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.774753][ T9660] 9pnet_virtio: no channels available for device ./file0/file0 [ 263.991589][ T9663] 9pnet_virtio: no channels available for device ./file0/file0 [ 264.221134][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 264.232809][ T9661] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.274920][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 264.302633][ T9668] bridge29: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.604543][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 264.624087][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.897'. [ 264.766286][ T34] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 264.770298][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.778167][ T34] usb 7-1: config 0 descriptor?? [ 264.785897][ T34] bfusb 7-1:0.0: probe with driver bfusb failed with error -5 [ 264.936014][ T9681] 9pnet_virtio: no channels available for device ./file0/file0 [ 265.069944][ T9683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 265.169428][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 265.195171][ T9684] bridge30: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.901361][ T9688] fuse: Bad value for 'fd' [ 265.952958][ T9691] fuse: Bad value for 'fd' [ 266.392910][ T9695] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 266.395124][ T9695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.397861][ T9695] vhci_hcd vhci_hcd.0: Device attached [ 266.644024][ T6151] usb 43-1: new high-speed USB device number 19 using vhci_hcd [ 266.877625][ T9696] vhci_hcd: connection reset by peer [ 266.879854][ T65] vhci_hcd: stop threads [ 266.881228][ T65] vhci_hcd: release socket [ 266.882680][ T65] vhci_hcd: disconnect device [ 267.193224][ T9705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 267.195661][ T9705] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 267.200131][ T9705] vhci_hcd vhci_hcd.0: Device attached [ 267.258789][ T9] usb 7-1: USB disconnect, device number 8 [ 267.349654][ T9709] 9pnet_virtio: no channels available for device ./file0/file0 [ 267.495980][ T9706] vhci_hcd: connection closed [ 267.496842][ T1228] vhci_hcd: stop threads [ 267.499705][ T1228] vhci_hcd: release socket [ 267.501120][ T1228] vhci_hcd: disconnect device [ 267.504075][ T8871] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 267.506279][ T8871] usb 37-1: enqueue for inactive port 0 [ 267.594357][ T9711] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 267.618891][ T8871] vhci_hcd: vhci_device speed not set [ 268.067799][ T9717] __nla_validate_parse: 2 callbacks suppressed [ 268.067814][ T9717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.908'. [ 268.334398][ T9720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.909'. [ 268.498481][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 268.875315][ T9729] 9pnet_virtio: no channels available for device ./file0/file0 [ 269.006114][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.912'. [ 269.108949][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 269.133101][ T9732] bridge33: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.377478][ T9722] syz.0.910 (9722): drop_caches: 2 [ 269.457362][ T9737] 9pnet_virtio: no channels available for device ./file0/file0 [ 269.692074][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 269.717899][ T9742] bridge31: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.909661][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.915'. [ 270.055661][ T9746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.916'. [ 270.241340][ T9751] 9pnet_virtio: no channels available for device ./file0/file0 [ 270.311049][ T9749] syz.2.917 (9749): drop_caches: 2 [ 270.313304][ T9749] syz.2.917 (9749): drop_caches: 2 [ 270.465847][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 270.494189][ T9756] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.255666][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 271.378429][ T9773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 271.378445][ T9773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.378628][ T9773] vhci_hcd vhci_hcd.0: Device attached [ 271.433590][ T9774] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 271.435834][ T9774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.442343][ T9774] vhci_hcd vhci_hcd.0: Device attached [ 271.744078][ T1324] usb 39-1: new high-speed USB device number 16 using vhci_hcd [ 271.753152][ T9775] vhci_hcd: connection closed [ 271.753342][ T76] vhci_hcd: stop threads [ 271.756746][ T76] vhci_hcd: release socket [ 271.758761][ T76] vhci_hcd: disconnect device [ 271.784167][ T6151] vhci_hcd: vhci_device speed not set [ 271.786834][ T8871] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 271.789339][ T8871] usb 37-1: enqueue for inactive port 0 [ 271.827075][ T9778] vhci_hcd: connection reset by peer [ 271.833448][ T76] vhci_hcd: stop threads [ 271.836563][ T76] vhci_hcd: release socket [ 271.838070][ T76] vhci_hcd: disconnect device [ 271.864406][ T8871] vhci_hcd: vhci_device speed not set [ 271.976060][ T9781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 271.978669][ T9781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.981694][ T9781] vhci_hcd vhci_hcd.0: Device attached [ 272.125257][ T9785] 9pnet_virtio: no channels available for device ./file0/file0 [ 272.221034][ T9782] vhci_hcd: connection closed [ 272.221420][ T76] vhci_hcd: stop threads [ 272.225392][ T76] vhci_hcd: release socket [ 272.227379][ T76] vhci_hcd: disconnect device [ 272.264085][ T66] usb 41-1: new high-speed USB device number 18 using vhci_hcd [ 272.266478][ T66] usb 41-1: enqueue for inactive port 0 [ 272.334123][ T66] vhci_hcd: vhci_device speed not set [ 272.365915][ T9787] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.706673][ T9790] 9pnet_virtio: no channels available for device ./file0/file0 [ 272.708459][ T9791] 9pnet_virtio: no channels available for device ./file0/file0 [ 273.373717][ T9793] __nla_validate_parse: 1 callbacks suppressed [ 273.373730][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 273.373781][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 273.393577][ T9792] bridge32: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 273.595946][ T9800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.930'. [ 273.725738][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.931'. [ 273.902385][ T9810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 273.904545][ T9810] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.907170][ T9810] vhci_hcd vhci_hcd.0: Device attached [ 274.128873][ T9815] 9pnet_virtio: no channels available for device ./file0/file0 [ 274.231790][ T66] usb 43-1: new high-speed USB device number 20 using vhci_hcd [ 274.286018][ T9812] vhci_hcd: connection reset by peer [ 274.290901][ T1038] vhci_hcd: stop threads [ 274.292320][ T1038] vhci_hcd: release socket [ 274.304081][ T1038] vhci_hcd: disconnect device [ 274.365636][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 274.409716][ T9817] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 274.761254][ T9822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.935'. [ 275.161897][ T9830] 9pnet_virtio: no channels available for device ./file0/file0 [ 275.334305][ T9832] fuse: Bad value for 'fd' [ 275.410130][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 275.434128][ T9833] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 275.838380][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 276.246830][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.941'. [ 276.381967][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 276.894021][ T1324] vhci_hcd: vhci_device speed not set [ 277.124258][ T8871] libceph: connect (1)[c::]:6789 error -101 [ 277.126300][ T8871] libceph: mon0 (1)[c::]:6789 connect error [ 277.146092][ T9854] ceph: No mds server is up or the cluster is laggy [ 277.422430][ T9869] fuse: Bad value for 'fd' [ 278.236284][ T9880] fuse: Bad value for 'fd' [ 278.558236][ T9887] __nla_validate_parse: 4 callbacks suppressed [ 278.558247][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.952'. [ 278.725840][ T9888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 278.728047][ T9888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.730580][ T9888] vhci_hcd vhci_hcd.0: Device attached [ 279.044116][ T1324] usb 41-1: new high-speed USB device number 19 using vhci_hcd [ 279.082759][ T9901] fuse: Bad value for 'fd' [ 279.226277][ T9893] vhci_hcd: connection reset by peer [ 279.228426][ T46] vhci_hcd: stop threads [ 279.229889][ T46] vhci_hcd: release socket [ 279.231595][ T46] vhci_hcd: disconnect device [ 279.374075][ T66] vhci_hcd: vhci_device speed not set [ 279.465072][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'. [ 279.494927][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.957'. [ 279.630422][ T9912] fuse: Bad value for 'fd' [ 280.109749][ T9920] 9pnet_virtio: no channels available for device ./file0/file0 [ 280.126097][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.959'. [ 280.181083][ T9923] netlink: 36 bytes leftover after parsing attributes in process `syz.3.960'. [ 280.378403][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 281.110328][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.963'. [ 281.131051][ T9940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.965'. [ 281.599205][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.969'. [ 281.847892][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'. [ 281.895157][ T9957] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 281.897238][ T9957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 281.899795][ T9957] vhci_hcd vhci_hcd.0: Device attached [ 282.139913][ T9966] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 282.159061][ T9966] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.244007][ T8871] usb 43-1: new high-speed USB device number 21 using vhci_hcd [ 282.282802][ T9959] vhci_hcd: connection reset by peer [ 282.285016][ T1228] vhci_hcd: stop threads [ 282.286382][ T1228] vhci_hcd: release socket [ 282.288998][ T1228] vhci_hcd: disconnect device [ 282.834320][ T9984] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 282.848362][ T9984] 8021q: adding VLAN 0 to HW filter on device bond11 [ 283.329203][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.336056][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.341760][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.360189][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.373786][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.385037][ T9997] kvm: kvm [9996]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 283.506180][T10005] fuse: Bad value for 'fd' [ 283.771009][T10008] __nla_validate_parse: 9 callbacks suppressed [ 283.771021][T10008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.983'. [ 284.048092][T10010] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 284.070706][T10010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.204038][ T1324] vhci_hcd: vhci_device speed not set [ 284.393539][T10026] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 284.418454][T10026] 8021q: adding VLAN 0 to HW filter on device bond12 [ 284.834254][ T66] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 285.006616][ T66] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 285.012678][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.028517][ T66] usb 6-1: config 0 descriptor?? [ 285.039218][ T66] bfusb 6-1:0.0: probe with driver bfusb failed with error -5 [ 285.252778][ T1324] usb 6-1: USB disconnect, device number 9 [ 285.647507][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 286.054963][ T1324] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 286.239528][ T1324] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 286.242489][ T1324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.249715][ T1324] usb 6-1: config 0 descriptor?? [ 286.257489][ T1324] bfusb 6-1:0.0: probe with driver bfusb failed with error -5 [ 286.428576][T10066] kvm: kvm [10064]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 286.457567][ T9] usb 6-1: USB disconnect, device number 10 [ 286.481243][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1003'. [ 286.578568][T10071] kvm: kvm [10070]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 286.587337][T10071] kvm: kvm [10070]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 286.594137][T10071] kvm: kvm [10070]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 287.374124][ T8871] vhci_hcd: vhci_device speed not set [ 287.990266][T10103] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 288.003164][T10103] 8021q: adding VLAN 0 to HW filter on device bond13 [ 288.110236][T10110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1016'. [ 288.755218][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 288.774017][T10114] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.976152][T10119] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 288.988946][T10119] 8021q: adding VLAN 0 to HW filter on device bond13 [ 289.328687][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 289.341613][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 289.351089][T10134] bridge34: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.541611][T10128] bridge34: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.999662][T10139] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 290.011965][T10139] 8021q: adding VLAN 0 to HW filter on device bond14 [ 290.280581][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 291.289995][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 291.302620][T10168] bridge35: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.065995][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 292.076927][T10184] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.321249][T10193] vlan0: entered promiscuous mode [ 292.496371][T10197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1044'. [ 292.764614][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 292.773715][T10205] bridge35: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 294.310470][T10225] FAULT_INJECTION: forcing a failure. [ 294.310470][T10225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.315583][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.0.1054 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 294.315598][T10225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.315604][T10225] Call Trace: [ 294.315608][T10225] [ 294.315613][T10225] dump_stack_lvl+0x16c/0x1f0 [ 294.315649][T10225] should_fail_ex+0x512/0x640 [ 294.315671][T10225] _copy_from_user+0x2e/0xd0 [ 294.315681][T10225] move_addr_to_kernel+0x65/0x170 [ 294.315699][T10225] __sys_sendto+0x1be/0x510 [ 294.315710][T10225] ? __pfx___sys_sendto+0x10/0x10 [ 294.315732][T10225] ? ksys_write+0x1b9/0x240 [ 294.315742][T10225] ? __pfx_ksys_write+0x10/0x10 [ 294.315754][T10225] __ia32_sys_sendto+0xdd/0x1b0 [ 294.315764][T10225] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.315779][T10225] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 294.315795][T10225] __do_fast_syscall_32+0x73/0x120 [ 294.315812][T10225] do_fast_syscall_32+0x32/0x80 [ 294.315827][T10225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.315840][T10225] RIP: 0023:0xf708e579 [ 294.315848][T10225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 294.315858][T10225] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 294.315868][T10225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 294.315874][T10225] RDX: 0000000000000000 RSI: 000000002406c014 RDI: 0000000080000040 [ 294.315880][T10225] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 294.315886][T10225] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 294.315892][T10225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.315904][T10225] [ 294.402173][T10227] FAULT_INJECTION: forcing a failure. [ 294.402173][T10227] name failslab, interval 1, probability 0, space 0, times 1 [ 294.407296][T10227] CPU: 3 UID: 0 PID: 10227 Comm: syz.0.1055 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 294.407315][T10227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.407322][T10227] Call Trace: [ 294.407326][T10227] [ 294.407330][T10227] dump_stack_lvl+0x16c/0x1f0 [ 294.407350][T10227] should_fail_ex+0x512/0x640 [ 294.407366][T10227] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 294.407380][T10227] should_failslab+0xc2/0x120 [ 294.407394][T10227] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 294.407405][T10227] ? rcu_is_watching+0x12/0xc0 [ 294.407415][T10227] ? __alloc_skb+0x2b2/0x380 [ 294.407429][T10227] __alloc_skb+0x2b2/0x380 [ 294.407441][T10227] ? __pfx___alloc_skb+0x10/0x10 [ 294.407452][T10227] ? find_held_lock+0x2b/0x80 [ 294.407463][T10227] ? aa_label_sk_perm+0x19b/0x5a0 [ 294.407478][T10227] alloc_skb_with_frags+0xe0/0x860 [ 294.407492][T10227] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 294.407507][T10227] sock_alloc_send_pskb+0x7fb/0x990 [ 294.407519][T10227] ? __lock_acquire+0x5ca/0x1ba0 [ 294.407539][T10227] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 294.407552][T10227] ? __pfx___might_resched+0x10/0x10 [ 294.407564][T10227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.407580][T10227] hci_sock_sendmsg+0x1c7/0x25e0 [ 294.407593][T10227] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.407605][T10227] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 294.407619][T10227] sock_write_iter+0x4ff/0x5b0 [ 294.407635][T10227] ? __pfx_sock_write_iter+0x10/0x10 [ 294.407658][T10227] ? bpf_lsm_file_permission+0x9/0x10 [ 294.407668][T10227] ? security_file_permission+0x71/0x210 [ 294.407683][T10227] ? rw_verify_area+0xcf/0x680 [ 294.407700][T10227] vfs_write+0x5bd/0x1180 [ 294.407710][T10227] ? __pfx_sock_write_iter+0x10/0x10 [ 294.407726][T10227] ? __pfx_vfs_write+0x10/0x10 [ 294.407735][T10227] ? find_held_lock+0x2b/0x80 [ 294.407755][T10227] ksys_write+0x205/0x240 [ 294.407765][T10227] ? __pfx_ksys_write+0x10/0x10 [ 294.407776][T10227] ? rcu_is_watching+0x12/0xc0 [ 294.407787][T10227] __do_fast_syscall_32+0x73/0x120 [ 294.407806][T10227] do_fast_syscall_32+0x32/0x80 [ 294.407821][T10227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.407834][T10227] RIP: 0023:0xf708e579 [ 294.407843][T10227] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 294.407853][T10227] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 294.407863][T10227] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 294.407869][T10227] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.407874][T10227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.407880][T10227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 294.407886][T10227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.407898][T10227] [ 294.538497][T10232] Bluetooth: MGMT ver 1.23 [ 294.599346][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1058'. [ 294.844214][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 294.898231][T10245] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1062'. [ 295.025692][ T9] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 295.029518][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.040423][ T9] usb 6-1: config 0 descriptor?? [ 295.044476][ T9] bfusb 6-1:0.0: probe with driver bfusb failed with error -5 [ 295.255518][ T9] usb 6-1: USB disconnect, device number 11 [ 295.535557][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 295.580953][T10252] FAULT_INJECTION: forcing a failure. [ 295.580953][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.586395][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.3.1065 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 295.586410][T10252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.586417][T10252] Call Trace: [ 295.586420][T10252] [ 295.586424][T10252] dump_stack_lvl+0x16c/0x1f0 [ 295.586444][T10252] should_fail_ex+0x512/0x640 [ 295.586462][T10252] _copy_from_user+0x2e/0xd0 [ 295.586473][T10252] __sys_bpf+0x21d/0x4d80 [ 295.586489][T10252] ? __pfx___sys_bpf+0x10/0x10 [ 295.586504][T10252] ? ksys_write+0x190/0x240 [ 295.586517][T10252] ? populate_seccomp_data+0x213/0x540 [ 295.586549][T10252] ? fput+0x70/0xf0 [ 295.586567][T10252] ? ksys_write+0x1b9/0x240 [ 295.586589][T10252] __ia32_sys_bpf+0x76/0xe0 [ 295.586613][T10252] __do_fast_syscall_32+0x73/0x120 [ 295.586638][T10252] do_fast_syscall_32+0x32/0x80 [ 295.586662][T10252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.586682][T10252] RIP: 0023:0xf7f93579 [ 295.586696][T10252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.586713][T10252] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 295.586730][T10252] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 295.586741][T10252] RDX: 00000000000000e4 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.586751][T10252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.586760][T10252] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.586770][T10252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.586813][T10252] [ 295.927226][T10271] program syz.3.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.945218][T10271] FAULT_INJECTION: forcing a failure. [ 295.945218][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 295.950367][T10271] CPU: 1 UID: 0 PID: 10271 Comm: syz.3.1069 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 295.950406][T10271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.950417][T10271] Call Trace: [ 295.950423][T10271] [ 295.950429][T10271] dump_stack_lvl+0x16c/0x1f0 [ 295.950455][T10271] should_fail_ex+0x512/0x640 [ 295.950480][T10271] ? fs_reclaim_acquire+0xae/0x150 [ 295.950503][T10271] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 295.950526][T10271] should_failslab+0xc2/0x120 [ 295.950547][T10271] __kmalloc_noprof+0xd2/0x510 [ 295.950573][T10271] tomoyo_realpath_from_path+0xc2/0x6e0 [ 295.950601][T10271] ? tomoyo_profile+0x47/0x60 [ 295.950619][T10271] tomoyo_path_number_perm+0x245/0x580 [ 295.950640][T10271] ? tomoyo_path_number_perm+0x237/0x580 [ 295.950664][T10271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.950687][T10271] ? finish_task_switch.isra.0+0x221/0xc10 [ 295.950729][T10271] ? find_held_lock+0x2b/0x80 [ 295.950746][T10271] ? hook_file_ioctl_common+0x145/0x410 [ 295.950766][T10271] ? __fget_files+0x204/0x3c0 [ 295.950804][T10271] ? __fget_files+0x20e/0x3c0 [ 295.950819][T10271] ? __fput_deferred+0x350/0x370 [ 295.950845][T10271] security_file_ioctl_compat+0x9b/0x240 [ 295.950870][T10271] __ia32_compat_sys_ioctl+0xc3/0x360 [ 295.950899][T10271] __do_fast_syscall_32+0x73/0x120 [ 295.950927][T10271] do_fast_syscall_32+0x32/0x80 [ 295.950951][T10271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.950969][T10271] RIP: 0023:0xf7f93579 [ 295.950984][T10271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.951001][T10271] RSP: 002b:00000000f507455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 295.951018][T10271] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000005423 [ 295.951029][T10271] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.951038][T10271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.951048][T10271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.951058][T10271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.951082][T10271] [ 295.951118][T10271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.186218][T10279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.420400][T10283] bridge36: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 296.508096][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 296.532654][T10282] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 296.785082][T10285] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 296.789190][T10285] overlayfs: missing 'lowerdir' [ 296.947981][T10300] vivid-007: disconnect [ 296.951310][T10296] vivid-007: reconnect [ 297.134025][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 297.153801][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 297.161940][T10306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 297.164991][T10306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.255263][T10308] FAULT_INJECTION: forcing a failure. [ 297.255263][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 297.260409][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.3.1083 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 297.260444][T10308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.260454][T10308] Call Trace: [ 297.260460][T10308] [ 297.260466][T10308] dump_stack_lvl+0x16c/0x1f0 [ 297.260494][T10308] should_fail_ex+0x512/0x640 [ 297.260517][T10308] ? fs_reclaim_acquire+0xae/0x150 [ 297.260543][T10308] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.260567][T10308] should_failslab+0xc2/0x120 [ 297.260587][T10308] __kmalloc_noprof+0xd2/0x510 [ 297.260611][T10308] tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.260637][T10308] ? tomoyo_profile+0x47/0x60 [ 297.260654][T10308] tomoyo_path_number_perm+0x245/0x580 [ 297.260673][T10308] ? tomoyo_path_number_perm+0x237/0x580 [ 297.260695][T10308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.260740][T10308] ? find_held_lock+0x2b/0x80 [ 297.260754][T10308] ? hook_file_ioctl_common+0x145/0x410 [ 297.260773][T10308] ? __fget_files+0x204/0x3c0 [ 297.260791][T10308] ? __fget_files+0x20e/0x3c0 [ 297.260804][T10308] ? __fput_deferred+0x350/0x370 [ 297.260828][T10308] security_file_ioctl_compat+0x9b/0x240 [ 297.260852][T10308] __ia32_compat_sys_ioctl+0xc3/0x360 [ 297.260877][T10308] __do_fast_syscall_32+0x73/0x120 [ 297.260904][T10308] do_fast_syscall_32+0x32/0x80 [ 297.260929][T10308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.260949][T10308] RIP: 0023:0xf7f93579 [ 297.260960][T10308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.260975][T10308] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 297.260991][T10308] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80 [ 297.261005][T10308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.261015][T10308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.261024][T10308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 297.261033][T10308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.261053][T10308] [ 297.261229][T10308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.296328][ T24] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 297.353124][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.363562][ T24] usb 6-1: config 0 descriptor?? [ 297.373212][ T24] bfusb 6-1:0.0: probe with driver bfusb failed with error -5 [ 297.596618][ T5954] usb 6-1: USB disconnect, device number 12 [ 297.737395][T10318] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.432118][T10334] syz_tun: entered allmulticast mode [ 298.439333][T10334] dvmrp1: entered allmulticast mode [ 298.456393][T10334] capability: warning: `syz.3.1091' uses deprecated v2 capabilities in a way that may be insecure [ 298.469186][T10333] syz_tun: left allmulticast mode [ 298.471376][T10333] dvmrp1: left allmulticast mode [ 298.476444][T10332] NILFS (nbd1): device size too small [ 298.751924][T10342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 298.863190][T10346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1094'. [ 299.144096][ T68] Bluetooth: hci2: command 0x0406 tx timeout [ 299.514306][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 299.728869][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 299.760367][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 299.768085][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.771377][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.777553][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.780863][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.883100][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 299.914615][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.263737][ T9] usb 7-1: usb_control_msg returned -32 [ 300.265981][ T9] usbtmc 7-1:16.0: can't read capabilities [ 300.307144][T10384] warning: `syz.3.1105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 300.326689][T10384] netlink: 'syz.3.1105': attribute type 17 has an invalid length. [ 300.330802][T10384] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1105'. [ 300.333828][T10384] macvtap0: entered allmulticast mode [ 300.339886][T10384] veth0_macvtap: entered allmulticast mode [ 300.342243][T10384] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 300.353254][T10378] bridge37: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 300.575900][T10391] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 300.947613][T10414] FAULT_INJECTION: forcing a failure. [ 300.947613][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.952798][T10414] CPU: 3 UID: 0 PID: 10414 Comm: syz.0.1117 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 300.952815][T10414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.952821][T10414] Call Trace: [ 300.952826][T10414] [ 300.952830][T10414] dump_stack_lvl+0x16c/0x1f0 [ 300.952850][T10414] should_fail_ex+0x512/0x640 [ 300.952868][T10414] _copy_to_user+0x32/0xd0 [ 300.952880][T10414] simple_read_from_buffer+0xcb/0x170 [ 300.952909][T10414] proc_fail_nth_read+0x197/0x270 [ 300.952926][T10414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.952941][T10414] ? rw_verify_area+0xcf/0x680 [ 300.952957][T10414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.952972][T10414] vfs_read+0x1de/0xc70 [ 300.952983][T10414] ? __pfx___mutex_lock+0x10/0x10 [ 300.952999][T10414] ? __pfx_vfs_read+0x10/0x10 [ 300.953012][T10414] ? __fget_files+0x20e/0x3c0 [ 300.953026][T10414] ksys_read+0x12a/0x240 [ 300.953035][T10414] ? __pfx_ksys_read+0x10/0x10 [ 300.953044][T10414] ? rcu_is_watching+0x12/0xc0 [ 300.953056][T10414] ? rcu_is_watching+0x12/0xc0 [ 300.953067][T10414] __do_fast_syscall_32+0x73/0x120 [ 300.953084][T10414] do_fast_syscall_32+0x32/0x80 [ 300.953100][T10414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.953112][T10414] RIP: 0023:0xf708e579 [ 300.953121][T10414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.953132][T10414] RSP: 002b:00000000f507e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 300.953142][T10414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f507e620 [ 300.953148][T10414] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 300.953154][T10414] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 300.953160][T10414] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 300.953165][T10414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.953178][T10414] [ 301.034689][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.038055][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.064760][T10417] syz.0.1119 uses obsolete (PF_INET,SOCK_PACKET) [ 301.201386][ T1038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.312523][T10420] FAULT_INJECTION: forcing a failure. [ 301.312523][T10420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.313444][ T1038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.316151][T10420] CPU: 3 UID: 0 PID: 10420 Comm: syz.0.1122 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 301.316166][T10420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.316173][T10420] Call Trace: [ 301.316176][T10420] [ 301.316180][T10420] dump_stack_lvl+0x16c/0x1f0 [ 301.316199][T10420] should_fail_ex+0x512/0x640 [ 301.316216][T10420] _copy_from_user+0x2e/0xd0 [ 301.316226][T10420] get_compat_msghdr+0xa7/0x170 [ 301.316239][T10420] ? __pfx_get_compat_msghdr+0x10/0x10 [ 301.316265][T10420] ? __pfx__kstrtoull+0x10/0x10 [ 301.316280][T10420] ___sys_sendmsg+0x1ae/0x1d0 [ 301.316294][T10420] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.316313][T10420] ? find_held_lock+0x2b/0x80 [ 301.316332][T10420] __sys_sendmmsg+0x2f9/0x420 [ 301.316346][T10420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.316364][T10420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.316385][T10420] ? fput+0x70/0xf0 [ 301.316397][T10420] ? ksys_write+0x1b9/0x240 [ 301.316407][T10420] ? __pfx_ksys_write+0x10/0x10 [ 301.316419][T10420] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 301.316432][T10420] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 301.316448][T10420] __do_fast_syscall_32+0x73/0x120 [ 301.316465][T10420] do_fast_syscall_32+0x32/0x80 [ 301.316480][T10420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.316493][T10420] RIP: 0023:0xf708e579 [ 301.316502][T10420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.316512][T10420] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 301.316523][T10420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 301.316529][T10420] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.316535][T10420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.316540][T10420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 301.316546][T10420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.316558][T10420] [ 301.383893][T10427] FAULT_INJECTION: forcing a failure. [ 301.383893][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.390999][T10427] CPU: 1 UID: 0 PID: 10427 Comm: syz.0.1125 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 301.391013][T10427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.391020][T10427] Call Trace: [ 301.391024][T10427] [ 301.391028][T10427] dump_stack_lvl+0x16c/0x1f0 [ 301.391047][T10427] should_fail_ex+0x512/0x640 [ 301.391069][T10427] strncpy_from_user+0x3b/0x2e0 [ 301.391091][T10427] path_removexattrat+0xc6/0x5e0 [ 301.391112][T10427] ? __pfx_path_removexattrat+0x10/0x10 [ 301.391139][T10427] ? ksys_write+0x1b9/0x240 [ 301.391154][T10427] ? __pfx_ksys_write+0x10/0x10 [ 301.391174][T10427] __ia32_sys_removexattr+0x59/0x80 [ 301.391187][T10427] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 301.391204][T10427] __do_fast_syscall_32+0x73/0x120 [ 301.391225][T10427] do_fast_syscall_32+0x32/0x80 [ 301.391248][T10427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.391268][T10427] RIP: 0023:0xf708e579 [ 301.391281][T10427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.391291][T10427] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000eb [ 301.391301][T10427] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000300 [ 301.391307][T10427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.391313][T10427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.391319][T10427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 301.391324][T10427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.391336][T10427] [ 301.507988][ T1038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.637079][ T1038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.728591][ T1038] bridge_slave_1: left allmulticast mode [ 301.731045][ T1038] bridge_slave_1: left promiscuous mode [ 301.734680][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.746802][ T1038] bridge_slave_0: left allmulticast mode [ 301.749207][ T1038] bridge_slave_0: left promiscuous mode [ 301.751808][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.148858][T10425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.151261][T10425] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 302.157098][T10425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.159297][T10425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.161386][T10425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.178245][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.181134][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.184057][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.193017][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.198489][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.452120][T10438] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 302.455429][T10438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1128'. [ 302.472120][T10443] program syz.1.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.184415][T10447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1129'. [ 303.259307][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.265003][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.269746][ T1038] bond0 (unregistering): Released all slaves [ 303.326560][ T1038] bond1 (unregistering): Released all slaves [ 303.380010][ T1038] bond2 (unregistering): Released all slaves [ 303.428231][ T1038] bond3 (unregistering): Released all slaves [ 303.478892][ T1038] bond4 (unregistering): Released all slaves [ 303.529405][ T1038] bond5 (unregistering): Released all slaves [ 303.544152][T10444] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.549107][T10444] bond0: (slave lo): Error: Device can not be enslaved while up [ 303.624452][ T5957] Bluetooth: hci1: command 0x0406 tx timeout [ 303.688707][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1131'. [ 303.786764][T10430] chnl_net:caif_netlink_parms(): no params data found [ 303.989783][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.991875][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.999939][T10430] bridge_slave_0: entered allmulticast mode [ 304.005523][T10430] bridge_slave_0: entered promiscuous mode [ 304.020202][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.024330][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.032815][T10430] bridge_slave_1: entered allmulticast mode [ 304.036532][T10430] bridge_slave_1: entered promiscuous mode [ 304.096832][ T1038] hsr_slave_0: left promiscuous mode [ 304.099175][ T1038] hsr_slave_1: left promiscuous mode [ 304.101246][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.103705][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.108265][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.110593][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.143453][ T1038] veth1_macvtap: left promiscuous mode [ 304.147130][ T1038] veth0_macvtap: left allmulticast mode [ 304.149671][ T1038] veth0_macvtap: left promiscuous mode [ 304.152690][ T1038] veth1_vlan: left promiscuous mode [ 304.184135][ T68] Bluetooth: hci3: command 0x0406 tx timeout [ 304.184156][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 304.266551][ T5957] Bluetooth: hci0: command tx timeout [ 304.471971][T10470] FAULT_INJECTION: forcing a failure. [ 304.471971][T10470] name failslab, interval 1, probability 0, space 0, times 0 [ 304.476737][T10470] CPU: 2 UID: 0 PID: 10470 Comm: syz.1.1132 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 304.476754][T10470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 304.476760][T10470] Call Trace: [ 304.476764][T10470] [ 304.476768][T10470] dump_stack_lvl+0x16c/0x1f0 [ 304.476787][T10470] should_fail_ex+0x512/0x640 [ 304.476803][T10470] ? fs_reclaim_acquire+0xae/0x150 [ 304.476820][T10470] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 304.476836][T10470] should_failslab+0xc2/0x120 [ 304.476849][T10470] __kmalloc_noprof+0xd2/0x510 [ 304.476864][T10470] tomoyo_realpath_from_path+0xc2/0x6e0 [ 304.476880][T10470] ? tomoyo_profile+0x47/0x60 [ 304.476891][T10470] tomoyo_path_number_perm+0x245/0x580 [ 304.476903][T10470] ? tomoyo_path_number_perm+0x237/0x580 [ 304.476917][T10470] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.476943][T10470] ? find_held_lock+0x2b/0x80 [ 304.476953][T10470] ? hook_file_ioctl_common+0x145/0x410 [ 304.476965][T10470] ? __fget_files+0x204/0x3c0 [ 304.476977][T10470] ? __fget_files+0x20e/0x3c0 [ 304.476984][T10470] ? __fput_deferred+0x350/0x370 [ 304.476999][T10470] security_file_ioctl_compat+0x9b/0x240 [ 304.477015][T10470] __ia32_compat_sys_ioctl+0xc3/0x360 [ 304.477031][T10470] __do_fast_syscall_32+0x73/0x120 [ 304.477047][T10470] do_fast_syscall_32+0x32/0x80 [ 304.477063][T10470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.477075][T10470] RIP: 0023:0xf7f02579 [ 304.477084][T10470] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 304.477094][T10470] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 304.477104][T10470] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 304.477110][T10470] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.477116][T10470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.477122][T10470] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 304.477127][T10470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.477139][T10470] [ 304.477144][T10470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.879367][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 304.941094][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 305.051866][T10484] trusted_key: encrypted_key: insufficient parameters specified [ 305.429140][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.438061][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.499085][T10430] team0: Port device team_slave_0 added [ 305.508620][T10430] team0: Port device team_slave_1 added [ 305.570002][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.572975][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.584344][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.592085][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.595430][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.603295][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.704515][ T5957] Bluetooth: hci1: command 0x0406 tx timeout [ 305.718120][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 305.731534][T10430] hsr_slave_0: entered promiscuous mode [ 305.735292][T10430] hsr_slave_1: entered promiscuous mode [ 305.738237][T10430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.741360][T10430] Cannot create hsr debugfs directory [ 306.121314][T10415] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 306.301021][ T5957] Bluetooth: hci3: command 0x0406 tx timeout [ 306.345443][ T5957] Bluetooth: hci0: command tx timeout [ 306.599933][ T5986] usb 7-1: USB disconnect, device number 9 [ 306.726732][T10509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.729036][T10509] overlayfs: failed to set xattr on upper [ 306.730810][T10509] overlayfs: ...falling back to redirect_dir=nofollow. [ 306.732963][T10509] overlayfs: ...falling back to index=off. [ 306.735342][T10509] overlayfs: ...falling back to uuid=null. [ 306.739619][T10509] FAULT_INJECTION: forcing a failure. [ 306.739619][T10509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.745348][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1142 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 306.745364][T10509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.745370][T10509] Call Trace: [ 306.745374][T10509] [ 306.745377][T10509] dump_stack_lvl+0x16c/0x1f0 [ 306.745397][T10509] should_fail_ex+0x512/0x640 [ 306.745415][T10509] _copy_to_user+0x32/0xd0 [ 306.745426][T10509] simple_read_from_buffer+0xcb/0x170 [ 306.745443][T10509] proc_fail_nth_read+0x197/0x270 [ 306.745458][T10509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.745474][T10509] ? rw_verify_area+0xcf/0x680 [ 306.745489][T10509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.745503][T10509] vfs_read+0x1de/0xc70 [ 306.745514][T10509] ? __pfx___mutex_lock+0x10/0x10 [ 306.745530][T10509] ? __pfx_vfs_read+0x10/0x10 [ 306.745543][T10509] ? __fget_files+0x20e/0x3c0 [ 306.745556][T10509] ksys_read+0x12a/0x240 [ 306.745566][T10509] ? __pfx_ksys_read+0x10/0x10 [ 306.745576][T10509] ? rcu_is_watching+0x12/0xc0 [ 306.745589][T10509] __do_fast_syscall_32+0x73/0x120 [ 306.745605][T10509] do_fast_syscall_32+0x32/0x80 [ 306.745621][T10509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.745634][T10509] RIP: 0023:0xf70de579 [ 306.745642][T10509] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.745652][T10509] RSP: 002b:00000000f50ce590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 306.745663][T10509] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ce620 [ 306.745669][T10509] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 306.745675][T10509] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 306.745680][T10509] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 306.745686][T10509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.745698][T10509] [ 306.786820][T10430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.836812][T10430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.847975][T10430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.852586][T10430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.865780][T10517] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.868026][T10517] overlayfs: failed to set xattr on upper [ 306.869811][T10517] overlayfs: ...falling back to redirect_dir=nofollow. [ 306.872022][T10517] overlayfs: ...falling back to index=off. [ 306.874025][T10517] overlayfs: ...falling back to uuid=null. [ 306.919845][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.936988][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.952793][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.955223][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.959689][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.961941][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.984735][T10525] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.986900][T10525] overlayfs: failed to set xattr on upper [ 306.988723][T10525] overlayfs: ...falling back to redirect_dir=nofollow. [ 306.990897][T10525] overlayfs: ...falling back to index=off. [ 306.993466][T10525] overlayfs: ...falling back to uuid=null. [ 307.193296][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.528012][T10430] veth0_vlan: entered promiscuous mode [ 307.543016][T10430] veth1_vlan: entered promiscuous mode [ 307.577805][T10430] veth0_macvtap: entered promiscuous mode [ 307.586239][T10430] veth1_macvtap: entered promiscuous mode [ 307.599632][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.622252][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.629931][T10430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.633016][T10430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.637888][T10430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.640632][T10430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.697160][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.700871][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.724903][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.727717][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.009130][T10571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1149'. [ 308.424119][ T5957] Bluetooth: hci0: command tx timeout [ 309.154547][T10608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1154'. [ 309.157444][T10608] nbd: must specify at least one socket [ 309.240203][T10611] FAULT_INJECTION: forcing a failure. [ 309.240203][T10611] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 309.246595][T10611] CPU: 2 UID: 0 PID: 10611 Comm: syz.4.1155 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 309.246621][T10611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.246630][T10611] Call Trace: [ 309.246637][T10611] [ 309.246646][T10611] dump_stack_lvl+0x16c/0x1f0 [ 309.246702][T10611] should_fail_ex+0x512/0x640 [ 309.246732][T10611] should_fail_alloc_page+0xe7/0x130 [ 309.246756][T10611] prepare_alloc_pages+0x3c2/0x610 [ 309.246785][T10611] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 309.246808][T10611] ? __page_table_check_zero+0x323/0x5b0 [ 309.246833][T10611] ? __page_table_check_zero+0x32d/0x5b0 [ 309.246853][T10611] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 309.246873][T10611] ? __pfx___page_table_check_zero+0x10/0x10 [ 309.246894][T10611] ? get_page_from_freelist+0x133c/0x3920 [ 309.246915][T10611] ? post_alloc_hook+0x171/0x1b0 [ 309.246941][T10611] ? get_page_from_freelist+0x135c/0x3920 [ 309.246962][T10611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.246985][T10611] ? policy_nodemask+0xea/0x4e0 [ 309.247009][T10611] alloc_pages_mpol+0x1fb/0x550 [ 309.247032][T10611] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 309.247054][T10611] ? should_fail_alloc_page+0xee/0x130 [ 309.247079][T10611] folio_alloc_noprof+0x20/0x2d0 [ 309.247103][T10611] fuse_readdir_uncached+0x184/0x1af0 [ 309.247134][T10611] ? find_held_lock+0x2b/0x80 [ 309.247152][T10611] ? __kasan_check_byte+0x13/0x50 [ 309.247174][T10611] ? unwind_next_frame+0x3f4/0x20a0 [ 309.247195][T10611] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 309.247219][T10611] ? __kasan_check_byte+0x13/0x50 [ 309.247242][T10611] ? rcu_is_watching+0x12/0xc0 [ 309.247258][T10611] ? lock_release+0x201/0x2f0 [ 309.247278][T10611] ? bpf_ksym_find+0x124/0x1c0 [ 309.247303][T10611] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.247323][T10611] ? is_bpf_text_address+0x94/0x1a0 [ 309.247342][T10611] ? kernel_text_address+0x8d/0x100 [ 309.247359][T10611] ? __kernel_text_address+0xd/0x40 [ 309.247373][T10611] ? unwind_get_return_address+0x59/0xa0 [ 309.247393][T10611] ? arch_stack_walk+0xa6/0x100 [ 309.247422][T10611] ? stack_trace_save+0x8e/0xc0 [ 309.247437][T10611] ? __pfx_stack_trace_save+0x10/0x10 [ 309.247459][T10611] ? check_path.constprop.0+0x24/0x50 [ 309.247505][T10611] fuse_readdir+0x964/0x1ce0 [ 309.247530][T10611] ? down_read_killable+0x220/0x4b0 [ 309.247550][T10611] ? __pfx_down_read_killable+0x10/0x10 [ 309.247567][T10611] ? apparmor_file_permission+0x251/0x400 [ 309.247591][T10611] iterate_dir+0x293/0xb40 [ 309.247620][T10611] __ia32_sys_getdents64+0x14d/0x2d0 [ 309.247645][T10611] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 309.247667][T10611] ? fput+0x70/0xf0 [ 309.247687][T10611] ? __pfx_filldir64+0x10/0x10 [ 309.247712][T10611] ? rcu_is_watching+0x12/0xc0 [ 309.247733][T10611] __do_fast_syscall_32+0x73/0x120 [ 309.247760][T10611] do_fast_syscall_32+0x32/0x80 [ 309.247782][T10611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.247804][T10611] RIP: 0023:0xf7f73579 [ 309.247816][T10611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.247831][T10611] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 309.247848][T10611] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 309.247857][T10611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.247867][T10611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.247877][T10611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.247886][T10611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.247907][T10611] [ 309.853830][T10621] FAULT_INJECTION: forcing a failure. [ 309.853830][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.858750][T10621] CPU: 3 UID: 0 PID: 10621 Comm: syz.2.1157 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 309.858765][T10621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.858771][T10621] Call Trace: [ 309.858774][T10621] [ 309.858779][T10621] dump_stack_lvl+0x16c/0x1f0 [ 309.858797][T10621] should_fail_ex+0x512/0x640 [ 309.858815][T10621] _copy_from_user+0x2e/0xd0 [ 309.858825][T10621] get_compat_msghdr+0xa7/0x170 [ 309.858837][T10621] ? __pfx_get_compat_msghdr+0x10/0x10 [ 309.858850][T10621] ? __pfx__kstrtoull+0x10/0x10 [ 309.858865][T10621] ___sys_sendmsg+0x1ae/0x1d0 [ 309.858880][T10621] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.858898][T10621] ? find_held_lock+0x2b/0x80 [ 309.858916][T10621] __sys_sendmmsg+0x2f9/0x420 [ 309.858930][T10621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.858947][T10621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.858969][T10621] ? fput+0x70/0xf0 [ 309.858981][T10621] ? ksys_write+0x1b9/0x240 [ 309.858991][T10621] ? __pfx_ksys_write+0x10/0x10 [ 309.859003][T10621] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 309.859016][T10621] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 309.859031][T10621] __do_fast_syscall_32+0x73/0x120 [ 309.859048][T10621] do_fast_syscall_32+0x32/0x80 [ 309.859063][T10621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.859076][T10621] RIP: 0023:0xf70de579 [ 309.859097][T10621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.859109][T10621] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 309.859123][T10621] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001640 [ 309.859130][T10621] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.859136][T10621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.859141][T10621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.859147][T10621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.859159][T10621] [ 310.504030][ T5957] Bluetooth: hci0: command tx timeout [ 310.808589][T10652] FAULT_INJECTION: forcing a failure. [ 310.808589][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 310.813735][T10652] CPU: 3 UID: 0 PID: 10652 Comm: syz.1.1168 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 310.813750][T10652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.813757][T10652] Call Trace: [ 310.813760][T10652] [ 310.813764][T10652] dump_stack_lvl+0x16c/0x1f0 [ 310.813784][T10652] should_fail_ex+0x512/0x640 [ 310.813800][T10652] ? fs_reclaim_acquire+0xae/0x150 [ 310.813818][T10652] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 310.813833][T10652] should_failslab+0xc2/0x120 [ 310.813847][T10652] __kmalloc_noprof+0xd2/0x510 [ 310.813862][T10652] tomoyo_realpath_from_path+0xc2/0x6e0 [ 310.813878][T10652] ? tomoyo_profile+0x47/0x60 [ 310.813889][T10652] tomoyo_path_number_perm+0x245/0x580 [ 310.813916][T10652] ? tomoyo_path_number_perm+0x237/0x580 [ 310.813932][T10652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.813959][T10652] ? find_held_lock+0x2b/0x80 [ 310.813970][T10652] ? hook_file_ioctl_common+0x145/0x410 [ 310.813982][T10652] ? __fget_files+0x204/0x3c0 [ 310.813993][T10652] ? __fget_files+0x20e/0x3c0 [ 310.814001][T10652] ? __fput_deferred+0x350/0x370 [ 310.814017][T10652] security_file_ioctl_compat+0x9b/0x240 [ 310.814032][T10652] __ia32_compat_sys_ioctl+0xc3/0x360 [ 310.814049][T10652] __do_fast_syscall_32+0x73/0x120 [ 310.814066][T10652] do_fast_syscall_32+0x32/0x80 [ 310.814081][T10652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.814095][T10652] RIP: 0023:0xf7f02579 [ 310.814104][T10652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.814114][T10652] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 310.814124][T10652] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000541a [ 310.814130][T10652] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.814136][T10652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.814141][T10652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 310.814148][T10652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.814162][T10652] [ 310.883029][T10652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.934455][ T5954] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 311.087366][ T5954] usb 9-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 311.091186][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.097228][ T5954] usb 9-1: config 0 descriptor?? [ 311.122009][ T5954] bfusb 9-1:0.0: probe with driver bfusb failed with error -5 [ 311.290960][ T40] audit: type=1800 audit(1748221929.535:2): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1173" name="/" dev="9p" ino=2 res=0 errno=0 [ 311.320052][ T34] usb 9-1: USB disconnect, device number 2 [ 311.407621][T10666] random: crng reseeded on system resumption [ 311.434414][ T5954] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 311.599817][ T5954] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.603130][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.624694][ T5954] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.629422][ T5954] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.632997][ T5954] usb 6-1: Manufacturer: syz [ 311.653656][ T5954] usb 6-1: config 0 descriptor?? [ 311.785270][ T5954] rc_core: IR keymap rc-hauppauge not found [ 311.799978][ T5954] Registered IR keymap rc-empty [ 311.819240][ T5954] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 311.846671][ T5954] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 311.866950][T10662] FAULT_INJECTION: forcing a failure. [ 311.866950][T10662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.889968][T10662] CPU: 2 UID: 0 PID: 10662 Comm: syz.1.1172 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 311.889997][T10662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.890004][T10662] Call Trace: [ 311.890008][T10662] [ 311.890012][T10662] dump_stack_lvl+0x16c/0x1f0 [ 311.890033][T10662] should_fail_ex+0x512/0x640 [ 311.890053][T10662] _copy_to_user+0x32/0xd0 [ 311.890064][T10662] simple_read_from_buffer+0xcb/0x170 [ 311.890083][T10662] proc_fail_nth_read+0x197/0x270 [ 311.890099][T10662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.890116][T10662] ? rw_verify_area+0xcf/0x680 [ 311.890131][T10662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.890148][T10662] vfs_read+0x1de/0xc70 [ 311.890160][T10662] ? __pfx___mutex_lock+0x10/0x10 [ 311.890176][T10662] ? __pfx_vfs_read+0x10/0x10 [ 311.890194][T10662] ? __fget_files+0x20e/0x3c0 [ 311.890203][T10662] ? __fget_files+0x1c0/0x3c0 [ 311.890216][T10662] ksys_read+0x12a/0x240 [ 311.890226][T10662] ? __pfx_ksys_read+0x10/0x10 [ 311.890238][T10662] ? rcu_is_watching+0x12/0xc0 [ 311.890250][T10662] __do_fast_syscall_32+0x73/0x120 [ 311.890269][T10662] do_fast_syscall_32+0x32/0x80 [ 311.890284][T10662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.890298][T10662] RIP: 0023:0xf7f02579 [ 311.890307][T10662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.890317][T10662] RSP: 002b:00000000f5026590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 311.890327][T10662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5026620 [ 311.890333][T10662] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 311.890339][T10662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 311.890344][T10662] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 311.890350][T10662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.890363][T10662] [ 312.084625][T10675] syzkaller0: entered promiscuous mode [ 312.086340][T10675] syzkaller0: entered allmulticast mode [ 312.091045][ T1228] syzkaller0: tun_net_xmit 48 [ 312.097396][T10675] syzkaller0: create flow: hash 3076083103 index 0 [ 312.334028][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 312.348780][ T34] usb 6-1: USB disconnect, device number 13 [ 312.541066][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 312.543783][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.553879][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 312.589705][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 312.592590][ T9] usb 9-1: Manufacturer: syz [ 312.622843][ T9] usb 9-1: config 0 descriptor?? [ 312.843825][ T9] rc_core: IR keymap rc-hauppauge not found [ 312.846336][ T9] Registered IR keymap rc-empty [ 312.880040][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 312.905453][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input8 [ 312.956949][ T9] usb 9-1: USB disconnect, device number 3 [ 313.386125][ T66] libceph: connect (1)[c::]:6789 error -101 [ 313.388397][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 313.393506][ T66] libceph: connect (1)[c::]:6789 error -101 [ 313.411948][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 313.577353][T10692] ceph: No mds server is up or the cluster is laggy [ 313.701849][ T40] audit: type=1326 audit(1748221931.945:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.0.1181" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 313.779509][T10709] FAULT_INJECTION: forcing a failure. [ 313.779509][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 313.784756][T10709] CPU: 3 UID: 0 PID: 10709 Comm: syz.1.1182 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 313.784773][T10709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.784780][T10709] Call Trace: [ 313.784784][T10709] [ 313.784789][T10709] dump_stack_lvl+0x16c/0x1f0 [ 313.784808][T10709] should_fail_ex+0x512/0x640 [ 313.784823][T10709] ? fs_reclaim_acquire+0xae/0x150 [ 313.784849][T10709] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.784864][T10709] should_failslab+0xc2/0x120 [ 313.784878][T10709] __kmalloc_noprof+0xd2/0x510 [ 313.784893][T10709] tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.784910][T10709] ? tomoyo_profile+0x47/0x60 [ 313.784920][T10709] tomoyo_path_number_perm+0x245/0x580 [ 313.784933][T10709] ? tomoyo_path_number_perm+0x237/0x580 [ 313.784946][T10709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.784973][T10709] ? find_held_lock+0x2b/0x80 [ 313.784983][T10709] ? hook_file_ioctl_common+0x145/0x410 [ 313.784995][T10709] ? __fget_files+0x204/0x3c0 [ 313.785006][T10709] ? __fget_files+0x20e/0x3c0 [ 313.785014][T10709] ? __fput_deferred+0x350/0x370 [ 313.785029][T10709] security_file_ioctl_compat+0x9b/0x240 [ 313.785045][T10709] __ia32_compat_sys_ioctl+0xc3/0x360 [ 313.785061][T10709] __do_fast_syscall_32+0x73/0x120 [ 313.785080][T10709] do_fast_syscall_32+0x32/0x80 [ 313.785096][T10709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.785109][T10709] RIP: 0023:0xf7f02579 [ 313.785117][T10709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.785127][T10709] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 313.785137][T10709] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040046109 [ 313.785144][T10709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.785150][T10709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.785155][T10709] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 313.785161][T10709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.785173][T10709] [ 313.785177][T10709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.174053][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 314.197350][T10687] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 314.224601][T10674] syzkaller0 (unregistered): delete flow: hash 3076083103 index 0 [ 314.324017][ T9] usb 6-1: device descriptor read/64, error -71 [ 314.509469][T10727] tipc: Started in network mode [ 314.511511][T10727] tipc: Node identity ac14140f, cluster identity 4711 [ 314.514305][T10727] tipc: New replicast peer: 255.255.255.255 [ 314.516736][T10727] tipc: Enabled bearer , priority 10 [ 314.522738][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 314.527049][T10727] tipc: Disabling bearer [ 314.554217][ T66] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 314.564197][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.694105][ T9] usb 6-1: device descriptor read/64, error -71 [ 314.707149][ T66] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 314.710999][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.716526][ T66] usb 7-1: config 0 descriptor?? [ 314.721452][ T66] bfusb 7-1:0.0: probe with driver bfusb failed with error -5 [ 314.804540][ T9] usb usb6-port1: attempt power cycle [ 314.930787][ T6004] usb 7-1: USB disconnect, device number 10 [ 315.054265][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1187'. [ 315.164875][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 315.188630][ T9] usb 6-1: device descriptor read/8, error -71 [ 315.428138][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 315.454740][ T9] usb 6-1: device descriptor read/8, error -71 [ 315.574721][ T9] usb usb6-port1: unable to enumerate USB device [ 315.999784][T10765] fuse: blksize only supported for fuseblk [ 316.002732][T10764] bridge22: entered promiscuous mode [ 316.004110][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 316.134028][ T34] usb 6-1: device descriptor read/64, error -71 [ 316.375188][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 316.504215][ T34] usb 6-1: device descriptor read/64, error -71 [ 316.589971][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.592836][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.614417][ T34] usb usb6-port1: attempt power cycle [ 316.687508][T10768] FAULT_INJECTION: forcing a failure. [ 316.687508][T10768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.692294][T10768] CPU: 1 UID: 0 PID: 10768 Comm: syz.2.1195 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 316.692310][T10768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.692316][T10768] Call Trace: [ 316.692321][T10768] [ 316.692325][T10768] dump_stack_lvl+0x16c/0x1f0 [ 316.692360][T10768] should_fail_ex+0x512/0x640 [ 316.692382][T10768] _copy_from_user+0x2e/0xd0 [ 316.692392][T10768] get_compat_msghdr+0xa7/0x170 [ 316.692405][T10768] ? __pfx_get_compat_msghdr+0x10/0x10 [ 316.692422][T10768] ___sys_sendmsg+0x1ae/0x1d0 [ 316.692436][T10768] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.692463][T10768] __sys_sendmsg+0x16d/0x220 [ 316.692476][T10768] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.692492][T10768] ? rcu_is_watching+0x12/0xc0 [ 316.692503][T10768] ? rcu_is_watching+0x12/0xc0 [ 316.692514][T10768] __do_fast_syscall_32+0x73/0x120 [ 316.692531][T10768] do_fast_syscall_32+0x32/0x80 [ 316.692547][T10768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.692560][T10768] RIP: 0023:0xf70de579 [ 316.692569][T10768] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.692579][T10768] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 316.692588][T10768] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 316.692595][T10768] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.692601][T10768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.692606][T10768] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 316.692612][T10768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.692624][T10768] [ 316.974181][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 317.003677][T10780] Bluetooth: MGMT ver 1.23 [ 317.185106][ T34] usb 6-1: device not accepting address 20, error -71 [ 317.187931][T10784] bridge23: entered promiscuous mode [ 317.833660][T10787] ALSA: mixer_oss: invalid index 40000 [ 317.835545][T10787] ALSA: mixer_oss: invalid index 40000 [ 317.934697][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 317.952343][T10790] bridge38: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 318.153424][T10796] FAULT_INJECTION: forcing a failure. [ 318.153424][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 318.158486][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.2.1203 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 318.158502][T10796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.158509][T10796] Call Trace: [ 318.158513][T10796] [ 318.158517][T10796] dump_stack_lvl+0x16c/0x1f0 [ 318.158537][T10796] should_fail_ex+0x512/0x640 [ 318.158553][T10796] ? fs_reclaim_acquire+0xae/0x150 [ 318.158571][T10796] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 318.158610][T10796] should_failslab+0xc2/0x120 [ 318.158628][T10796] __kmalloc_noprof+0xd2/0x510 [ 318.158644][T10796] tomoyo_realpath_from_path+0xc2/0x6e0 [ 318.158660][T10796] ? tomoyo_profile+0x47/0x60 [ 318.158671][T10796] tomoyo_path_number_perm+0x245/0x580 [ 318.158684][T10796] ? tomoyo_path_number_perm+0x237/0x580 [ 318.158697][T10796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 318.158723][T10796] ? find_held_lock+0x2b/0x80 [ 318.158734][T10796] ? hook_file_ioctl_common+0x145/0x410 [ 318.158747][T10796] ? __fget_files+0x204/0x3c0 [ 318.158758][T10796] ? __fget_files+0x20e/0x3c0 [ 318.158766][T10796] ? __fput_deferred+0x350/0x370 [ 318.158781][T10796] security_file_ioctl_compat+0x9b/0x240 [ 318.158796][T10796] __ia32_compat_sys_ioctl+0xc3/0x360 [ 318.158813][T10796] __do_fast_syscall_32+0x73/0x120 [ 318.158830][T10796] do_fast_syscall_32+0x32/0x80 [ 318.158846][T10796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.158858][T10796] RIP: 0023:0xf70de579 [ 318.158867][T10796] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.158877][T10796] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 318.158892][T10796] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 318.158898][T10796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.158904][T10796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.158910][T10796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 318.158915][T10796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.158928][T10796] [ 318.158932][T10796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.345529][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 319.352982][T10849] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 319.405420][T10849] bond15: entered promiscuous mode [ 319.407297][T10849] 8021q: adding VLAN 0 to HW filter on device bond15 [ 319.487291][T10855] bond15: (slave veth3): making interface the new active one [ 319.490238][T10855] veth3: entered promiscuous mode [ 319.494349][T10855] bond15: (slave veth3): Enslaving as an active interface with an up link [ 319.783124][T10876] FAULT_INJECTION: forcing a failure. [ 319.783124][T10876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.795710][T10876] CPU: 1 UID: 0 PID: 10876 Comm: syz.4.1219 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 319.795753][T10876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.795764][T10876] Call Trace: [ 319.795770][T10876] [ 319.795777][T10876] dump_stack_lvl+0x16c/0x1f0 [ 319.795807][T10876] should_fail_ex+0x512/0x640 [ 319.795835][T10876] _copy_from_user+0x2e/0xd0 [ 319.795862][T10876] snd_pcm_oss_write2+0x1c2/0x410 [ 319.795890][T10876] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 319.795913][T10876] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 319.795933][T10876] ? snd_pcm_oss_prepare+0x11e/0x220 [ 319.795960][T10876] snd_pcm_oss_write+0x711/0xa10 [ 319.795978][T10876] ? security_file_permission+0x71/0x210 [ 319.796007][T10876] vfs_write+0x25c/0x1180 [ 319.796022][T10876] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 319.796054][T10876] ? __pfx_vfs_write+0x10/0x10 [ 319.796068][T10876] ? find_held_lock+0x2b/0x80 [ 319.796086][T10876] ? __fget_files+0x204/0x3c0 [ 319.796104][T10876] ? __fget_files+0x20e/0x3c0 [ 319.796127][T10876] ksys_write+0x12a/0x240 [ 319.796144][T10876] ? __pfx_ksys_write+0x10/0x10 [ 319.796162][T10876] ? rcu_is_watching+0x12/0xc0 [ 319.796182][T10876] __do_fast_syscall_32+0x73/0x120 [ 319.796210][T10876] do_fast_syscall_32+0x32/0x80 [ 319.796235][T10876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.796255][T10876] RIP: 0023:0xf7f73579 [ 319.796270][T10876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.796286][T10876] RSP: 002b:00000000f507555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 319.796302][T10876] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000500 [ 319.796313][T10876] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.796323][T10876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.796332][T10876] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 319.796342][T10876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.796365][T10876] [ 321.210492][T10924] FAULT_INJECTION: forcing a failure. [ 321.210492][T10924] name failslab, interval 1, probability 0, space 0, times 0 [ 321.214676][T10924] CPU: 1 UID: 0 PID: 10924 Comm: syz.2.1224 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 321.214703][T10924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.214710][T10924] Call Trace: [ 321.214714][T10924] [ 321.214718][T10924] dump_stack_lvl+0x16c/0x1f0 [ 321.214737][T10924] should_fail_ex+0x512/0x640 [ 321.214753][T10924] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 321.214767][T10924] should_failslab+0xc2/0x120 [ 321.214780][T10924] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 321.214792][T10924] ? mpol_new+0x11b/0x2d0 [ 321.214803][T10924] ? lock_acquire+0x179/0x350 [ 321.214817][T10924] mpol_new+0x11b/0x2d0 [ 321.214830][T10924] do_mbind+0x218/0xf30 [ 321.214847][T10924] ? rcu_is_watching+0x12/0xc0 [ 321.214857][T10924] ? __pfx_do_mbind+0x10/0x10 [ 321.214871][T10924] ? __schedule+0x1186/0x5de0 [ 321.214885][T10924] ? ksys_write+0x190/0x240 [ 321.214895][T10924] ? compat_get_bitmap+0x137/0x1c0 [ 321.214917][T10924] ? __pfx_get_nodes+0x10/0x10 [ 321.214927][T10924] ? __pfx___schedule+0x10/0x10 [ 321.214940][T10924] ? __fget_files+0x20e/0x3c0 [ 321.214952][T10924] kernel_mbind+0x1e3/0x1f0 [ 321.214967][T10924] ? __pfx_kernel_mbind+0x10/0x10 [ 321.214983][T10924] ? rcu_is_watching+0x12/0xc0 [ 321.214994][T10924] __do_fast_syscall_32+0x73/0x120 [ 321.215011][T10924] do_fast_syscall_32+0x32/0x80 [ 321.215026][T10924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.215040][T10924] RIP: 0023:0xf70de579 [ 321.215049][T10924] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.215063][T10924] RSP: 002b:00000000f508c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000112 [ 321.215074][T10924] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 321.215080][T10924] RDX: 0000000000008003 RSI: 0000000080000000 RDI: 0000000000000008 [ 321.215086][T10924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.215092][T10924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 321.215098][T10924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.215110][T10924] [ 322.001605][T10936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1228'. [ 322.327723][T10948] netfs: Couldn't get user pages (rc=-14) [ 322.487031][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1232'. [ 323.287503][T10971] FAULT_INJECTION: forcing a failure. [ 323.287503][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.291581][T10971] CPU: 3 UID: 0 PID: 10971 Comm: syz.2.1237 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 323.291609][T10971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.291616][T10971] Call Trace: [ 323.291620][T10971] [ 323.291625][T10971] dump_stack_lvl+0x16c/0x1f0 [ 323.291644][T10971] should_fail_ex+0x512/0x640 [ 323.291662][T10971] _copy_from_user+0x2e/0xd0 [ 323.291673][T10971] __sys_bpf+0x21d/0x4d80 [ 323.291689][T10971] ? __pfx___sys_bpf+0x10/0x10 [ 323.291704][T10971] ? ksys_write+0x190/0x240 [ 323.291716][T10971] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 323.291739][T10971] ? fput+0x70/0xf0 [ 323.291751][T10971] ? ksys_write+0x1b9/0x240 [ 323.291762][T10971] ? __pfx_ksys_write+0x10/0x10 [ 323.291774][T10971] __ia32_sys_bpf+0x76/0xe0 [ 323.291790][T10971] __do_fast_syscall_32+0x73/0x120 [ 323.291807][T10971] do_fast_syscall_32+0x32/0x80 [ 323.291822][T10971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.291836][T10971] RIP: 0023:0xf70de579 [ 323.291843][T10971] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.291853][T10971] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 323.291863][T10971] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 323.291869][T10971] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.291875][T10971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.291881][T10971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.291887][T10971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.291898][T10971] [ 323.540723][T10979] process 'syz.1.1240' launched './file0' with NULL argv: empty string added [ 323.640164][T10984] FAULT_INJECTION: forcing a failure. [ 323.640164][T10984] name failslab, interval 1, probability 0, space 0, times 0 [ 323.644638][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.0.1236 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 323.644654][T10984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.644661][T10984] Call Trace: [ 323.644665][T10984] [ 323.644669][T10984] dump_stack_lvl+0x16c/0x1f0 [ 323.644702][T10984] should_fail_ex+0x512/0x640 [ 323.644718][T10984] ? fs_reclaim_acquire+0xae/0x150 [ 323.644735][T10984] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 323.644750][T10984] should_failslab+0xc2/0x120 [ 323.644763][T10984] __kmalloc_noprof+0xd2/0x510 [ 323.644778][T10984] tomoyo_realpath_from_path+0xc2/0x6e0 [ 323.644795][T10984] ? tomoyo_profile+0x47/0x60 [ 323.644806][T10984] tomoyo_path_number_perm+0x245/0x580 [ 323.644818][T10984] ? tomoyo_path_number_perm+0x237/0x580 [ 323.644832][T10984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 323.644859][T10984] ? find_held_lock+0x2b/0x80 [ 323.644869][T10984] ? hook_file_ioctl_common+0x145/0x410 [ 323.644881][T10984] ? __fget_files+0x204/0x3c0 [ 323.644893][T10984] ? __fget_files+0x20e/0x3c0 [ 323.644901][T10984] ? __fput_deferred+0x350/0x370 [ 323.644916][T10984] security_file_ioctl_compat+0x9b/0x240 [ 323.644932][T10984] __ia32_compat_sys_ioctl+0xc3/0x360 [ 323.644949][T10984] __do_fast_syscall_32+0x73/0x120 [ 323.644965][T10984] do_fast_syscall_32+0x32/0x80 [ 323.644981][T10984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.644993][T10984] RIP: 0023:0xf708e579 [ 323.645001][T10984] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.645012][T10984] RSP: 002b:00000000f503c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 323.645027][T10984] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080045503 [ 323.645034][T10984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.645039][T10984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.645045][T10984] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.645050][T10984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.645063][T10984] [ 323.650972][T10984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.079234][T10994] tmpfs: Unknown parameter 'grpqta_block_hardlimit' [ 324.149623][T10995] loop6: detected capacity change from 0 to 524287999 [ 325.045824][T11012] 9pnet_fd: Insufficient options for proto=fd [ 325.082383][T11013] 9pnet_fd: Insufficient options for proto=fd [ 325.201453][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1251'. [ 326.044283][ T5986] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.195712][ T5986] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 326.200599][ T5986] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.204707][ T5986] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.209260][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.213283][ T5986] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.217754][ T5986] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.219811][T11038] FAULT_INJECTION: forcing a failure. [ 326.219811][T11038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.220560][T11038] [ 326.220565][T11038] ====================================================== [ 326.220569][T11038] WARNING: possible circular locking dependency detected [ 326.220574][T11038] 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.220580][T11038] ------------------------------------------------------ [ 326.220583][T11038] syz.1.1256/11038 is trying to acquire lock: [ 326.220588][T11038] ffffffff8e2ccec0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4d4/0x6d0 [ 326.220613][T11038] [ 326.220613][T11038] but task is already holding lock: [ 326.220616][T11038] ffff88802b239f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 326.220636][T11038] [ 326.220636][T11038] which lock already depends on the new lock. [ 326.220636][T11038] [ 326.220639][T11038] [ 326.220639][T11038] the existing dependency chain (in reverse order) is: [ 326.220642][T11038] [ 326.220642][T11038] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 326.220654][T11038] _raw_spin_lock_nested+0x31/0x40 [ 326.220667][T11038] raw_spin_rq_lock_nested+0x29/0x130 [ 326.220676][T11038] task_rq_lock+0xcf/0x490 [ 326.220684][T11038] cgroup_move_task+0x81/0x2a0 [ 326.220694][T11038] css_set_move_task+0x288/0x5f0 [ 326.220705][T11038] cgroup_post_fork+0x201/0x9e0 [ 326.220725][T11038] copy_process+0x5006/0x91b0 [ 326.220737][T11038] kernel_clone+0xfc/0x960 [ 326.220748][T11038] user_mode_thread+0xc7/0x110 [ 326.220760][T11038] rest_init+0x23/0x2b0 [ 326.220769][T11038] start_kernel+0x3e9/0x4d0 [ 326.220791][T11038] x86_64_start_reservations+0x18/0x30 [ 326.220805][T11038] x86_64_start_kernel+0xb0/0xc0 [ 326.220819][T11038] common_startup_64+0x13e/0x148 [ 326.220830][T11038] [ 326.220830][T11038] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 326.220842][T11038] _raw_spin_lock_irqsave+0x3a/0x60 [ 326.220853][T11038] try_to_wake_up+0xb2/0x1680 [ 326.220862][T11038] __wake_up_common+0x132/0x1f0 [ 326.220874][T11038] __wake_up+0x31/0x60 [ 326.220883][T11038] tty_port_default_wakeup+0x2a/0x40 [ 326.220897][T11038] serial8250_tx_chars+0x68e/0x860 [ 326.220910][T11038] serial8250_handle_irq+0x761/0xcb0 [ 326.220923][T11038] serial8250_default_handle_irq+0x9a/0x210 [ 326.220938][T11038] serial8250_interrupt+0x106/0x210 [ 326.220952][T11038] __handle_irq_event_percpu+0x229/0x7d0 [ 326.220961][T11038] handle_irq_event+0xab/0x1e0 [ 326.220968][T11038] handle_edge_irq+0x263/0xd10 [ 326.220982][T11038] __common_interrupt+0xe2/0x250 [ 326.220995][T11038] common_interrupt+0xba/0xe0 [ 326.221005][T11038] asm_common_interrupt+0x26/0x40 [ 326.221014][T11038] __rcu_read_lock+0x2a/0xf0 [ 326.221028][T11038] unwind_next_frame+0xae/0x20a0 [ 326.221038][T11038] arch_stack_walk+0x94/0x100 [ 326.221048][T11038] stack_trace_save+0x8e/0xc0 [ 326.221058][T11038] kasan_save_stack+0x33/0x60 [ 326.221068][T11038] kasan_save_track+0x14/0x30 [ 326.221077][T11038] kasan_save_free_info+0x3b/0x60 [ 326.221092][T11038] __kasan_slab_free+0x51/0x70 [ 326.221102][T11038] kmem_cache_free+0x2d4/0x4d0 [ 326.221111][T11038] rcu_core+0x79c/0x14e0 [ 326.221125][T11038] handle_softirqs+0x216/0x8e0 [ 326.221135][T11038] run_ksoftirqd+0x3a/0x60 [ 326.221144][T11038] smpboot_thread_fn+0x3f7/0xae0 [ 326.221155][T11038] kthread+0x3c2/0x780 [ 326.221168][T11038] ret_from_fork+0x48/0x80 [ 326.221175][T11038] ret_from_fork_asm+0x1a/0x30 [ 326.221189][T11038] [ 326.221189][T11038] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 326.221200][T11038] _raw_spin_lock_irqsave+0x3a/0x60 [ 326.221212][T11038] __wake_up+0x1c/0x60 [ 326.221221][T11038] tty_port_default_wakeup+0x2a/0x40 [ 326.221233][T11038] serial8250_tx_chars+0x68e/0x860 [ 326.221246][T11038] serial8250_handle_irq+0x761/0xcb0 [ 326.221259][T11038] serial8250_default_handle_irq+0x9a/0x210 [ 326.221273][T11038] serial8250_interrupt+0x106/0x210 [ 326.221287][T11038] __handle_irq_event_percpu+0x229/0x7d0 [ 326.221296][T11038] handle_irq_event+0xab/0x1e0 [ 326.221303][T11038] handle_edge_irq+0x263/0xd10 [ 326.221317][T11038] __common_interrupt+0xe2/0x250 [ 326.221330][T11038] common_interrupt+0xba/0xe0 [ 326.221339][T11038] asm_common_interrupt+0x26/0x40 [ 326.221347][T11038] _raw_spin_unlock_irqrestore+0x31/0x80 [ 326.221360][T11038] uart_write+0x2a4/0xb30 [ 326.221371][T11038] n_tty_write+0x40f/0x1160 [ 326.221384][T11038] file_tty_write.constprop.0+0x502/0x9b0 [ 326.221396][T11038] redirected_tty_write+0xd4/0x150 [ 326.221407][T11038] vfs_write+0x5bd/0x1180 [ 326.221415][T11038] ksys_write+0x12a/0x240 [ 326.221424][T11038] do_syscall_64+0xcd/0x230 [ 326.221437][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.221446][T11038] [ 326.221446][T11038] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 326.221458][T11038] _raw_spin_lock_irqsave+0x3a/0x60 [ 326.221469][T11038] serial8250_console_write+0x181/0x1890 [ 326.221484][T11038] console_flush_all+0x801/0xc60 [ 326.221491][T11038] console_unlock+0xd8/0x210 [ 326.221498][T11038] vprintk_emit+0x418/0x6d0 [ 326.221506][T11038] _printk+0xc7/0x100 [ 326.221517][T11038] register_console+0xc2d/0x11b0 [ 326.221526][T11038] univ8250_console_init+0x5f/0x90 [ 326.221538][T11038] console_init+0x14f/0x680 [ 326.221552][T11038] start_kernel+0x29f/0x4d0 [ 326.221565][T11038] x86_64_start_reservations+0x18/0x30 [ 326.221579][T11038] x86_64_start_kernel+0xb0/0xc0 [ 326.221592][T11038] common_startup_64+0x13e/0x148 [ 326.221602][T11038] [ 326.221602][T11038] -> #0 (console_owner){-.-.}-{0:0}: [ 326.221613][T11038] __lock_acquire+0x1173/0x1ba0 [ 326.221625][T11038] lock_acquire+0x179/0x350 [ 326.221636][T11038] vprintk_emit+0x4e5/0x6d0 [ 326.221644][T11038] _printk+0xc7/0x100 [ 326.221655][T11038] should_fail_ex+0x4e7/0x640 [ 326.221668][T11038] strncpy_from_user+0x3b/0x2e0 [ 326.221681][T11038] strncpy_from_user_nofault+0x7f/0x180 [ 326.221694][T11038] bpf_probe_read_compat_str+0xf1/0x170 [ 326.221705][T11038] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 326.221716][T11038] bpf_trace_run4+0x249/0x5a0 [ 326.221727][T11038] __bpf_trace_sched_switch+0x145/0x190 [ 326.221736][T11038] __traceiter_sched_switch+0x6f/0xc0 [ 326.221750][T11038] __schedule+0x1bf3/0x5de0 [ 326.221762][T11038] preempt_schedule_irq+0x51/0x90 [ 326.221774][T11038] irqentry_exit+0x36/0x90 [ 326.221787][T11038] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.221796][T11038] lock_acquire+0x62/0x350 [ 326.221808][T11038] schedule+0x21c/0x3a0 [ 326.221819][T11038] schedule_timeout+0x257/0x290 [ 326.221829][T11038] wait_woken+0x197/0x1e0 [ 326.221836][T11038] sk_stream_wait_connect+0x41d/0x950 [ 326.221847][T11038] tcp_sendmsg_locked+0x2f3/0x3930 [ 326.221862][T11038] tcp_sendmsg+0x2e/0x50 [ 326.221875][T11038] inet_sendmsg+0xb9/0x140 [ 326.221889][T11038] __sys_sendto+0x431/0x510 [ 326.221898][T11038] __ia32_sys_sendto+0xdd/0x1b0 [ 326.221908][T11038] __do_fast_syscall_32+0x73/0x120 [ 326.221921][T11038] do_fast_syscall_32+0x32/0x80 [ 326.221936][T11038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.221947][T11038] [ 326.221947][T11038] other info that might help us debug this: [ 326.221947][T11038] [ 326.221950][T11038] Chain exists of: [ 326.221950][T11038] console_owner --> &p->pi_lock --> &rq->__lock [ 326.221950][T11038] [ 326.221963][T11038] Possible unsafe locking scenario: [ 326.221963][T11038] [ 326.221966][T11038] CPU0 CPU1 [ 326.221968][T11038] ---- ---- [ 326.221971][T11038] lock(&rq->__lock); [ 326.221976][T11038] lock(&p->pi_lock); [ 326.221982][T11038] lock(&rq->__lock); [ 326.221988][T11038] lock(console_owner); [ 326.221994][T11038] [ 326.221994][T11038] *** DEADLOCK *** [ 326.221994][T11038] [ 326.221996][T11038] 3 locks held by syz.1.1256/11038: [ 326.222002][T11038] #0: ffffffff8e28d020 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x1fd/0x3a0 [ 326.222028][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.222034][T11038] #1: ffff88802b239f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 326.222056][T11038] #2: ffffffff8e3bfa80 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 326.222079][T11038] [ 326.222079][T11038] stack backtrace: [ 326.222084][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.1.1256 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 326.222096][T11038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.222102][T11038] Call Trace: [ 326.222106][T11038] [ 326.222110][T11038] dump_stack_lvl+0x116/0x1f0 [ 326.222124][T11038] print_circular_bug+0x275/0x350 [ 326.222137][T11038] check_noncircular+0x14c/0x170 [ 326.222150][T11038] __lock_acquire+0x1173/0x1ba0 [ 326.222165][T11038] lock_acquire+0x179/0x350 [ 326.222177][T11038] ? vprintk_emit+0x4d4/0x6d0 [ 326.222186][T11038] ? vprintk_emit+0x4c2/0x6d0 [ 326.222196][T11038] vprintk_emit+0x4e5/0x6d0 [ 326.222204][T11038] ? vprintk_emit+0x4d4/0x6d0 [ 326.222213][T11038] ? __pfx_vprintk_emit+0x10/0x10 [ 326.222223][T11038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 326.222238][T11038] _printk+0xc7/0x100 [ 326.222249][T11038] ? __pfx__printk+0x10/0x10 [ 326.222262][T11038] ? ___ratelimit+0x24c/0x570 [ 326.222276][T11038] ? __pfx____ratelimit+0x10/0x10 [ 326.222290][T11038] should_fail_ex+0x4e7/0x640 [ 326.222305][T11038] strncpy_from_user+0x3b/0x2e0 [ 326.222319][T11038] strncpy_from_user_nofault+0x7f/0x180 [ 326.222333][T11038] bpf_probe_read_compat_str+0xf1/0x170 [ 326.222345][T11038] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 326.222352][T11038] bpf_trace_run4+0x249/0x5a0 [ 326.222364][T11038] ? __pfx_bpf_trace_run4+0x10/0x10 [ 326.222377][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.222390][T11038] __bpf_trace_sched_switch+0x145/0x190 [ 326.222400][T11038] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 326.222411][T11038] ? plist_check_prev_next+0x12a/0x1a0 [ 326.222423][T11038] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 326.222438][T11038] __traceiter_sched_switch+0x6f/0xc0 [ 326.222453][T11038] ? set_next_task_rt+0x176/0x6a0 [ 326.222466][T11038] __schedule+0x1bf3/0x5de0 [ 326.222478][T11038] ? bpf_trace_run4+0x2be/0x5a0 [ 326.222493][T11038] ? __pfx___schedule+0x10/0x10 [ 326.222505][T11038] ? __bpf_trace_sched_switch+0x145/0x190 [ 326.222541][T11038] ? mark_held_locks+0x49/0x80 [ 326.222553][T11038] preempt_schedule_irq+0x51/0x90 [ 326.222567][T11038] irqentry_exit+0x36/0x90 [ 326.222580][T11038] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.222590][T11038] RIP: 0010:lock_acquire+0x62/0x350 [ 326.222603][T11038] Code: e0 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 9f ed 0e 0f 82 74 02 00 00 8b 35 8a ce ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 df 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 326.222613][T11038] RSP: 0018:ffffc9000629f7e0 EFLAGS: 00000206 [ 326.222621][T11038] RAX: 0000000000000046 RBX: ffffffff8e28d020 RCX: 00000000ffce56aa [ 326.222627][T11038] RDX: 0000000000000000 RSI: ffffffff8dbb9360 RDI: ffffffff8bf48ea0 [ 326.222633][T11038] RBP: 0000000000000000 R08: 6a66505ac341e0be R09: 0000000000000001 [ 326.222639][T11038] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 326.222644][T11038] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 326.222653][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.222666][T11038] schedule+0x21c/0x3a0 [ 326.222678][T11038] ? schedule+0x1fd/0x3a0 [ 326.222690][T11038] schedule_timeout+0x257/0x290 [ 326.222701][T11038] ? __pfx_schedule_timeout+0x10/0x10 [ 326.222718][T11038] ? find_held_lock+0x2b/0x80 [ 326.222728][T11038] ? wait_woken+0x48/0x1e0 [ 326.222735][T11038] wait_woken+0x197/0x1e0 [ 326.222744][T11038] sk_stream_wait_connect+0x41d/0x950 [ 326.222755][T11038] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 326.222768][T11038] ? __pfx_sk_stream_wait_connect+0x10/0x10 [ 326.222779][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.222791][T11038] ? _parse_integer_limit+0x17f/0x1d0 [ 326.222803][T11038] ? __pfx_woken_wake_function+0x10/0x10 [ 326.222813][T11038] ? _kstrtoull+0x145/0x200 [ 326.222825][T11038] tcp_sendmsg_locked+0x2f3/0x3930 [ 326.222839][T11038] ? find_held_lock+0x2b/0x80 [ 326.222837][ T5986] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.222849][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.222863][T11038] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 326.222868][ T5986] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.222879][T11038] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.222891][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.222894][T11038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.222910][T11038] ? __local_bh_enable_ip+0xa4/0x120 [ 326.222922][T11038] tcp_sendmsg+0x2e/0x50 [ 326.222936][T11038] ? __pfx_tcp_sendmsg+0x10/0x10 [ 326.222950][T11038] inet_sendmsg+0xb9/0x140 [ 326.222965][T11038] __sys_sendto+0x431/0x510 [ 326.222975][T11038] ? __pfx___sys_sendto+0x10/0x10 [ 326.222990][T11038] ? ksys_write+0x1b9/0x240 [ 326.222999][T11038] ? __pfx_ksys_write+0x10/0x10 [ 326.223009][T11038] __ia32_sys_sendto+0xdd/0x1b0 [ 326.223019][T11038] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.223033][T11038] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 326.223048][T11038] __do_fast_syscall_32+0x73/0x120 [ 326.223064][T11038] do_fast_syscall_32+0x32/0x80 [ 326.223079][T11038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.223091][T11038] RIP: 0023:0xf7f02579 [ 326.223097][T11038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.223107][T11038] RSP: 002b:00000000f4fe455c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 326.223116][T11038] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000800012c0 [ 326.223122][T11038] RDX: 00000000000020c8 RSI: 0000000000000011 RDI: 0000000000000000 [ 326.223127][T11038] RBP: 0000000000000027 R08: 0000000000000000 R09: 0000000000000000 [ 326.223133][T11038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 326.223138][T11038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.223147][T11038] [ 326.223660][ T5986] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.227088][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.1.1256 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 326.227104][T11038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.227110][T11038] Call Trace: [ 326.227113][T11038] [ 326.227116][T11038] dump_stack_lvl+0x116/0x1f0 [ 326.227132][T11038] should_fail_ex+0x512/0x640 [ 326.227148][T11038] strncpy_from_user+0x3b/0x2e0 [ 326.227161][T11038] strncpy_from_user_nofault+0x7f/0x180 [ 326.227176][T11038] bpf_probe_read_compat_str+0xf1/0x170 [ 326.227188][T11038] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 326.227196][T11038] bpf_trace_run4+0x249/0x5a0 [ 326.227208][T11038] ? __pfx_bpf_trace_run4+0x10/0x10 [ 326.227221][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.227234][T11038] __bpf_trace_sched_switch+0x145/0x190 [ 326.227244][T11038] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 326.227255][T11038] ? plist_check_prev_next+0x12a/0x1a0 [ 326.227268][T11038] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 326.227283][T11038] __traceiter_sched_switch+0x6f/0xc0 [ 326.227297][T11038] ? set_next_task_rt+0x176/0x6a0 [ 326.227310][T11038] __schedule+0x1bf3/0x5de0 [ 326.227322][T11038] ? bpf_trace_run4+0x2be/0x5a0 [ 326.227337][T11038] ? __pfx___schedule+0x10/0x10 [ 326.227349][T11038] ? __bpf_trace_sched_switch+0x145/0x190 [ 326.227361][T11038] ? mark_held_locks+0x49/0x80 [ 326.227373][T11038] preempt_schedule_irq+0x51/0x90 [ 326.227387][T11038] irqentry_exit+0x36/0x90 [ 326.227401][T11038] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.227411][T11038] RIP: 0010:lock_acquire+0x62/0x350 [ 326.227424][T11038] Code: e0 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 9f ed 0e 0f 82 74 02 00 00 8b 35 8a ce ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 df 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 326.227433][T11038] RSP: 0018:ffffc9000629f7e0 EFLAGS: 00000206 [ 326.227441][T11038] RAX: 0000000000000046 RBX: ffffffff8e28d020 RCX: 00000000ffce56aa [ 326.227447][T11038] RDX: 0000000000000000 RSI: ffffffff8dbb9360 RDI: ffffffff8bf48ea0 [ 326.227453][T11038] RBP: 0000000000000000 R08: 6a66505ac341e0be R09: 0000000000000001 [ 326.227458][T11038] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 326.227464][T11038] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 326.227473][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.227486][T11038] schedule+0x21c/0x3a0 [ 326.227498][T11038] ? schedule+0x1fd/0x3a0 [ 326.227510][T11038] schedule_timeout+0x257/0x290 [ 326.227521][T11038] ? __pfx_schedule_timeout+0x10/0x10 [ 326.227534][T11038] ? find_held_lock+0x2b/0x80 [ 326.227544][T11038] ? wait_woken+0x48/0x1e0 [ 326.227551][T11038] wait_woken+0x197/0x1e0 [ 326.227560][T11038] sk_stream_wait_connect+0x41d/0x950 [ 326.227572][T11038] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 326.227585][T11038] ? __pfx_sk_stream_wait_connect+0x10/0x10 [ 326.227595][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.227607][T11038] ? _parse_integer_limit+0x17f/0x1d0 [ 326.227619][T11038] ? __pfx_woken_wake_function+0x10/0x10 [ 326.227629][T11038] ? _kstrtoull+0x145/0x200 [ 326.227641][T11038] tcp_sendmsg_locked+0x2f3/0x3930 [ 326.227656][T11038] ? find_held_lock+0x2b/0x80 [ 326.227666][T11038] ? __lock_acquire+0xaa4/0x1ba0 [ 326.227680][T11038] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 326.227695][T11038] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.227710][T11038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.227730][T11038] ? __local_bh_enable_ip+0xa4/0x120 [ 326.227741][T11038] tcp_sendmsg+0x2e/0x50 [ 326.227755][T11038] ? __pfx_tcp_sendmsg+0x10/0x10 [ 326.227770][T11038] inet_sendmsg+0xb9/0x140 [ 326.227785][T11038] __sys_sendto+0x431/0x510 [ 326.227796][T11038] ? __pfx___sys_sendto+0x10/0x10 [ 326.227810][T11038] ? ksys_write+0x1b9/0x240 [ 326.227820][T11038] ? __pfx_ksys_write+0x10/0x10 [ 326.227830][T11038] __ia32_sys_sendto+0xdd/0x1b0 [ 326.227840][T11038] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.227854][T11038] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 326.227870][T11038] __do_fast_syscall_32+0x73/0x120 [ 326.227885][T11038] do_fast_syscall_32+0x32/0x80 [ 326.227900][T11038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.227912][T11038] RIP: 0023:0xf7f02579 [ 326.227918][T11038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.227928][T11038] RSP: 002b:00000000f4fe455c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 326.227936][T11038] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000800012c0 [ 326.227942][T11038] RDX: 00000000000020c8 RSI: 0000000000000011 RDI: 0000000000000000 [ 326.227948][T11038] RBP: 0000000000000027 R08: 0000000000000000 R09: 0000000000000000 [ 326.227953][T11038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 326.227959][T11038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.227968][T11038] [ 326.868672][T11037] bridge0: port 3(syz_tun) entered disabled state [ 326.885358][T11037] syz_tun (unregistering): left allmulticast mode [ 326.887409][T11037] syz_tun (unregistering): left promiscuous mode [ 326.889569][T11037] bridge0: port 3(syz_tun) entered disabled state [ 326.923696][ T5986] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.927084][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.929633][ T5986] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 326.931938][ T5986] usb 5-1: can't read configurations, error -71 [ 327.178165][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.257381][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.346431][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.396729][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.466334][ T46] bridge_slave_1: left allmulticast mode [ 327.468125][ T46] bridge_slave_1: left promiscuous mode [ 327.469881][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.472560][ T46] bridge_slave_0: left allmulticast mode [ 327.474645][ T46] bridge_slave_0: left promiscuous mode [ 327.476455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.706914][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.710622][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.714480][ T46] bond0 (unregistering): Released all slaves [ 328.765044][ T46] bond1 (unregistering): Released all slaves [ 328.812869][ T46] bond2 (unregistering): Released all slaves [ 328.875890][ T46] bond3 (unregistering): Released all slaves [ 328.940657][ T46] bond4 (unregistering): Released all slaves [ 329.004325][ T46] bond5 (unregistering): Released all slaves [ 329.065640][ T46] bond6 (unregistering): Released all slaves [ 329.120847][ T46] bond7 (unregistering): Released all slaves [ 329.170203][ T46] bond8 (unregistering): Released all slaves [ 329.220602][ T46] bond9 (unregistering): Released all slaves [ 329.268349][ T46] bond10 (unregistering): Released all slaves [ 329.620980][ T46] hsr_slave_0: left promiscuous mode [ 329.623766][ T46] hsr_slave_1: left promiscuous mode [ 329.627061][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.630146][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.633670][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.637025][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.642896][ T46] veth1_macvtap: left promiscuous mode [ 329.644810][ T46] veth0_macvtap: left promiscuous mode [ 329.647033][ T46] veth1_vlan: left promiscuous mode [ 329.649231][ T46] veth0_vlan: left promiscuous mode [ 329.826094][ T46] team0 (unregistering): Port device team_slave_1 removed [ 329.855216][ T46] team0 (unregistering): Port device team_slave_0 removed [ 330.391507][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.457206][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.519827][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.586531][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.666143][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.740055][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.827035][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.868804][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.965898][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.038064][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.079220][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.157043][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.244569][ T46] bridge_slave_1: left allmulticast mode [ 331.246394][ T46] bridge_slave_1: left promiscuous mode [ 331.248294][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.251410][ T46] bridge_slave_0: left allmulticast mode [ 331.253209][ T46] bridge_slave_0: left promiscuous mode [ 331.255569][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.260482][ T46] bridge_slave_1: left allmulticast mode [ 331.262945][ T46] bridge_slave_1: left promiscuous mode [ 331.265542][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.269208][ T46] bridge_slave_0: left allmulticast mode [ 331.271520][ T46] bridge_slave_0: left promiscuous mode [ 331.274156][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.301325][ T46] bridge_slave_1: left allmulticast mode [ 331.303190][ T46] bridge_slave_1: left promiscuous mode [ 331.305415][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.308710][ T46] bridge_slave_0: left allmulticast mode [ 331.310569][ T46] bridge_slave_0: left promiscuous mode [ 331.312371][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.196840][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.200320][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.205233][ T46] bond0 (unregistering): Released all slaves [ 335.214716][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.219766][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.223001][ T46] bond0 (unregistering): Released all slaves [ 335.276329][ T46] bond1 (unregistering): Released all slaves [ 335.344013][ T46] bond2 (unregistering): Released all slaves [ 335.397221][ T46] bond3 (unregistering): Released all slaves [ 335.452644][ T46] bond4 (unregistering): Released all slaves [ 335.513077][ T46] bond5 (unregistering): Released all slaves [ 335.565088][ T46] bond6 (unregistering): Released all slaves [ 335.611628][ T46] bond7 (unregistering): Released all slaves [ 335.659088][ T46] bond8 (unregistering): Released all slaves [ 335.706392][ T46] bond9 (unregistering): Released all slaves [ 335.755519][ T46] bond10 (unregistering): Released all slaves [ 335.821331][ T46] bond11 (unregistering): Released all slaves [ 335.872925][ T46] bond12 (unregistering): Released all slaves [ 335.921268][ T46] bond13 (unregistering): Released all slaves [ 335.971166][ T46] bond14 (unregistering): Released all slaves [ 336.018633][ T46] bond15 (unregistering): (slave veth3): Releasing backup interface [ 336.021179][ T46] veth3: left promiscuous mode [ 336.023415][ T46] bond15 (unregistering): Released all slaves [ 336.029125][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.032642][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.035962][ T46] bond0 (unregistering): Released all slaves [ 336.091552][ T46] bond1 (unregistering): Released all slaves [ 336.138127][ T46] bond2 (unregistering): Released all slaves [ 336.186488][ T46] bond3 (unregistering): Released all slaves [ 336.234546][ T46] bond4 (unregistering): Released all slaves VM DIAGNOSIS: 00:12:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b223700 RCX=000000000000080b RDX=0000000000000000 RSI=ffffffff8168f3bc RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000007e30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81684d0f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000068170000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000004b731c RBX=0000000000000001 RCX=ffffffff8b69b3e9 RDX=ffffed10056665be RSI=ffffffff8bf48e20 RDI=ffffffff81913731 RBP=ffffed1003b57488 RSP=ffffc9000046fdc8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000001 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90854f10 R15=0000000000000000 RIP=ffffffff810014f0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000052b85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff92000723ebe RBX=ffffea0001451a80 RCX=ffffffff81f581d3 RDX=ffff888023362440 RSI=ffffffff81f584c3 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000391f408 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000005 R11=0000000000000000 R12=ffffc9000391f548 R13=dffffc0000000000 R14=ffffc9000391f5e8 R15=0000000000000001 RIP=ffffffff81baafd8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7482ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c7935 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc90003b0f050 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=000000000000000a R14=ffffffff9ade4c40 R15=ffffffff854c78d0 RIP=ffffffff854c795f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006a513000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000