last executing test programs: 1m50.191433341s ago: executing program 0 (id=321): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x2b9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) llistxattr(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file2\x00'}, 0x6e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x48001, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x40000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f00000003c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0xa, 0x400000) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x5e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_usb_connect(0x2, 0x5a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m45.421339463s ago: executing program 0 (id=328): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) 1m44.964599774s ago: executing program 0 (id=330): syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="25a5c6ba0e84b763", 0x8}, {&(0x7f00000000c0)="85b83598c439bd27b38e33b8cf5b79235a2cb763d1aed75fe47a936a323eef31e254e4812eec46115ec28b5d3688e4"}, {&(0x7f0000000100)="713db7285acb50639b2768c39ae139f61f3da85180336317bb74731b14760059ca4625514b81b5521efa12d164cc3b41991f3c8cb26410adc45e50cf9bf80b113401c727f6782db612d08807c4ecb9cf186e6e39aca8c17f3a64940d1c924a500852aab290ab07d7319ec000ddca3d61d6be91fcfc2769e499086f4685f57ceaebe4693c3cb832ceef59ccddab842fed054d6b3f1e5336e4e984cd923a9cda04ae2f13de3c5d1641ea4196a156cf6e9c07c05b3d0735ddc2539ee6d541b4734c11133eaa74e5a5307e458ea1bf8b54cbfe26743e946a78b816cbd5"}, {&(0x7f0000000200)="2c8cb853edb936fd7c534718acb0675cd1ca234600b603d6196cf82f3f0b704ec9e0a0ec85afe9295a9ce43bc865d90571e943a0a1a6d412fbb440c71dbdc777072c108558e339ff1b82f8cfbb1d09000ad01e31ed907d73027d7f94bfe4928f22be45315703c79d09086b"}], 0x1}}, {{0x0, 0x80000, &(0x7f0000000280), 0x38}}], 0x2, 0x0) 1m42.393292212s ago: executing program 0 (id=340): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0xa}) 1m42.390438331s ago: executing program 0 (id=341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000340)="3f000000010003", 0x7) 1m42.38865626s ago: executing program 0 (id=347): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x20, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 1m27.305359823s ago: executing program 32 (id=347): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x20, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 8.38628804s ago: executing program 3 (id=711): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000003280), 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x14}, 0x48) 8.243722328s ago: executing program 3 (id=713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40042, 0x1fe) close(r0) execveat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0, 0x4000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x10, 0x8fa0}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r5 = eventfd2(0x1, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f0000000340)="0b48171e3dc836ea028d3dd830a379a48ae363665d57fc5518a9947f03f837c35aa4f0b0973bb7e9d3e543d597d28c1cb9d8bb3fbb22cec0aa225dd712afe483bc1d5c704bb3f2ec7bf1e9f7e324008d46cc54b2ccde453afb660aa68771dd4992895d6f07b7ad82b4b0b4a1567ff7ab448edc636570f5700a45b31e25", &(0x7f00000004c0)="0a1890d021ffcae7e9c79ec4fca7ed5f60f2c8dcdd4974fab878f6d777b92381e44a34ad8895bffaea3e053d1ba177db5cb905d2ec6c246f8d74692430ba9661faaedb14170576bc32660f0127993ae381aa9eadaa15fb06299fad9d36cccc869b330361b68415b15620efd2f538774c791fdc8739dff5e1d7eea15d7ea9330541ba540ae1a6a412b625bc995d34edf8e1f9e4d6b292148378d6203b"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000280)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, r1, {0x2, 0x0, @remote}, 0x0, 0xfb, 0x2}}, 0x26) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @private}, &(0x7f0000000440)=0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) 7.31772933s ago: executing program 3 (id=716): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000180)={0x1, @win={{0x2, 0x4, 0xe3, 0x9}, 0x8, 0x8000, 0x0, 0x2, 0x0, 0x6}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff625e, {{0x7, 0x6c2, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) flock(r4, 0x6) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_crypto(0x10, 0x3, 0x15) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x87, 0xa}, {0x7, 0x3, 0x353, 0x0, 0x3}}}}, 0x17) 6.283226306s ago: executing program 2 (id=718): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={&(0x7f0000004000)=[0xfffffffd, 0x101, 0x238, 0x40, 0x7, 0x2, 0x4dfb, 0xa, 0x0, 0x2, 0x7, 0x81, 0x3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x60, 0x7, 0x200, 0xa3f, 0x9a, 0x7, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x0, 0x2e, 0x3, 0x7f, 0x7, 0x6c9d3c45, 0x401, 0x7, 0xfffffff9, 0x8, 0x7d, 0x5, 0x24f4, 0x1000, 0x6, 0xe, 0x7fffffff, 0x1ff, 0x2, 0x3ea8, 0xb32, 0x0, 0x3, 0x6, 0x101, 0x6, 0x519, 0x3, 0x7f, 0xb7, 0x7, 0x5, 0x401, 0x9, 0x5, 0x5, 0x2, 0xff, 0x0, 0x3, 0x5, 0xfffffff7, 0x8, 0x2, 0xe8, 0x1, 0x6, 0xcef3, 0xfffffff6, 0x1, 0x5, 0x1000, 0x9, 0x400, 0x8f, 0x0, 0xcabc, 0x7, 0x5, 0x6, 0x6, 0x2, 0xd34, 0x265, 0x3, 0x8, 0x49, 0x8, 0x1000, 0x0, 0x5, 0x4, 0xb0, 0xffffffff, 0x9, 0x5, 0x80000000, 0x9, 0x6, 0x97df, 0x6, 0x800, 0x7ff, 0x18ff, 0x3, 0x3, 0x8, 0xfff, 0xfb, 0x3, 0x5, 0x4, 0x1, 0xffff, 0x8, 0x3, 0x3, 0x2, 0x7f, 0x6, 0x2, 0x8, 0x3ff, 0xfd, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2, 0xfffffff8, 0x8, 0x339, 0xfffffff0, 0x3, 0x9, 0x1, 0xf, 0x6, 0x800, 0xc791, 0x6, 0xfd, 0x1, 0x10040000, 0x3, 0x8, 0x9, 0x101, 0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x1, 0x102, 0x6, 0x4, 0x80, 0x4, 0x0, 0x8, 0x6, 0x0, 0x43df, 0x1, 0x54eb, 0x80, 0x80000000, 0x5, 0xfffffffd, 0x9, 0x9, 0x7, 0x5, 0x10, 0x8, 0xfffffff7, 0x0, 0x8, 0xc, 0x8, 0x6, 0x800, 0x6, 0x3, 0x3ff, 0x2, 0x3, 0x2, 0x3, 0x0, 0x4e, 0x5, 0xffff, 0x6, 0xc3, 0x0, 0x4, 0xe3, 0x9, 0x5, 0xfff, 0x5, 0x10000, 0x2, 0xcff, 0x6, 0x4, 0x100, 0x3, 0x6, 0x8, 0xfffffff7, 0x0, 0x200, 0x7f, 0x5, 0x42, 0x3, 0x6, 0x411af549, 0x0, 0x22cb, 0x0, 0x6, 0x2428, 0x1, 0x3, 0x9, 0x8001, 0x81, 0x7, 0x3, 0x4, 0x10000000, 0x6, 0x8, 0x7, 0xc8, 0x401, 0xc9f3, 0xd6, 0x800, 0x10, 0x1, 0xf1b, 0x10001, 0x3ae44413, 0x534c, 0x2, 0x28, 0x80000000, 0xffffffff, 0x200, 0xfffff025, 0x3, 0x6, 0x0, 0xfff, 0x6, 0x4, 0xdd, 0x5c7115a2, 0x10, 0x6, 0x3, 0x6, 0x0, 0x6, 0x81, 0x8, 0x1, 0x3, 0x4, 0x9, 0x1, 0x4, 0x4, 0x4, 0x101, 0x3, 0x4730, 0x7, 0x5, 0x6e87, 0x7, 0x2, 0x8, 0xffffffff, 0xd, 0x8, 0x8000, 0x4, 0x8, 0xa, 0xfffffff9, 0x9, 0x9, 0x2, 0x8, 0x2, 0x0, 0xcdb2, 0x800, 0x1, 0x7, 0xdd8f, 0x7f0a, 0x5, 0x3, 0x80000001, 0x7fffffff, 0x5, 0x2, 0xfffffffd, 0x80000000, 0x3fd, 0x9, 0x1, 0x81, 0x4, 0x1, 0x7, 0x8, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0x2, 0x4, 0x0, 0x6, 0x4, 0xbb0e, 0x5022, 0x4, 0xfffffffd, 0xe, 0x7, 0x2, 0x6, 0x3, 0x21000, 0x8, 0x3, 0x6, 0x7, 0x800, 0x7f5, 0x3ff, 0xf1, 0x4, 0x7, 0x9fc, 0x80000001, 0xfffffffb, 0x1, 0x1, 0x3, 0x5, 0x7, 0x4, 0x8, 0x1, 0x8, 0x0, 0xb, 0x8001, 0x3, 0x0, 0xa, 0x6a1f, 0x0, 0x22, 0xc, 0x6c000000, 0x6, 0x80, 0x1, 0x6, 0x40, 0x5cb2, 0x8, 0x2, 0x8, 0xffff7e5c, 0x800, 0x120, 0x7fff, 0x8, 0x401, 0x7d43, 0x80000000, 0x1, 0x0, 0x8, 0x8, 0xffffe110, 0x5, 0xef0, 0xfffffffd, 0x9, 0x9845, 0xe, 0x170, 0x5, 0x3, 0x5, 0x7ad, 0x3, 0x9, 0x5, 0x4, 0x0, 0x6, 0x5d, 0x7, 0x940, 0xebc, 0xffffff20, 0x800, 0x4, 0x0, 0x203b, 0x0, 0x330, 0x7, 0x7, 0x63b, 0xe, 0x7ff, 0x5bf9, 0x9, 0x5, 0xf3, 0x200, 0x0, 0x7, 0xc000, 0x8, 0x7, 0x50, 0x4da, 0xd, 0x3, 0x7, 0x50d, 0x3, 0x1, 0x1, 0x7, 0x2c16f915, 0x8001, 0x800, 0x1, 0x4, 0x2, 0xa, 0x5d, 0x6, 0x0, 0x0, 0x6, 0xa, 0x6, 0x80000001, 0x7b, 0x400, 0x7, 0xe0, 0x3, 0x9d8, 0x2, 0x5, 0x9, 0x1, 0x5, 0x0, 0xfffffe00, 0x5, 0x0, 0xd, 0xfffffff4, 0xd2, 0x7, 0x80000001, 0x80000000, 0x4, 0x5, 0xffffffe9, 0x1ff, 0xbc, 0x1, 0x200, 0x6, 0x5, 0x9, 0x6, 0xfffffffb, 0x805, 0x2, 0xffffffff, 0xff, 0x3, 0xf, 0x0, 0x3, 0x8, 0x6, 0x6, 0x100000, 0xfffffff3, 0x6, 0x6, 0x28, 0x8, 0x5, 0x0, 0xc0000000, 0x401, 0x1, 0x2, 0x7, 0x4, 0x8, 0xb, 0x9, 0x1, 0x5, 0xffffffff, 0x3efc, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x6, 0xfe, 0x5, 0x7, 0x7776, 0xff, 0x3, 0x20, 0x1, 0x36a, 0x1, 0xa, 0x400, 0x2afcad61, 0x0, 0x4, 0xccfc, 0x8, 0x9, 0x800, 0xa, 0x7, 0x2, 0x21, 0x5, 0x4, 0xe, 0x1000, 0x3, 0x1, 0x9, 0xacf, 0x6, 0x3, 0x7fd, 0x8, 0x9338, 0x7, 0x9, 0x9, 0x71, 0x3, 0x1ff, 0x80, 0xd98b, 0x8, 0x2, 0x1, 0x5, 0x4, 0x5, 0x5, 0x3, 0x9, 0x2, 0x0, 0x101, 0x66, 0x6, 0x2, 0x7, 0xfffffffc, 0x8, 0x40, 0x1, 0x4, 0x5, 0x2, 0x9, 0xc1cc, 0x3ff, 0x2, 0x8, 0x4b, 0x80000003, 0x0, 0x40, 0xd, 0x0, 0x3571, 0x5396, 0x0, 0x0, 0x8469, 0x3, 0x80000000, 0x0, 0x7e1, 0x4, 0x2b, 0x6, 0xf7d9, 0x9, 0x5, 0xc00d, 0x3, 0x3, 0x80000000, 0xe600, 0x7, 0xc, 0x80000001, 0x401, 0x4, 0x5, 0x3, 0x9, 0xf3f, 0x1, 0xfffffffe, 0x9, 0x1, 0x6, 0x4, 0x2, 0x84, 0x448f, 0x0, 0x8, 0x100, 0x9, 0x0, 0x4, 0x9, 0x4, 0x3, 0x0, 0x5, 0x9, 0x1, 0x8000, 0x1fc, 0xffff1364, 0x80000001, 0x67, 0xc, 0xdf6, 0x4, 0x7, 0x8, 0x756, 0x3, 0xfffffc00, 0xc9, 0x7, 0xce, 0x8, 0x0, 0x6, 0xfffffffd, 0x9, 0x8, 0x8, 0x9, 0x1, 0x6, 0xa7, 0x10000, 0xfffff801, 0x6, 0x31fe, 0x28, 0x10, 0x8020000, 0x2, 0x1, 0x2, 0x1, 0x8, 0x1, 0xecc, 0x3, 0x0, 0x4, 0x6, 0x6, 0x80, 0xfcd, 0x7, 0x9, 0x7, 0xe, 0x1000, 0x3, 0xffffffff, 0xa4, 0x0, 0xffffffff, 0x8, 0x0, 0x40, 0x1, 0xfffffff8, 0x0, 0xfffffffe, 0x7, 0x81, 0x400, 0x2, 0xa255, 0x1, 0xbd1e, 0xc, 0x8, 0x401, 0x9, 0x0, 0x400, 0x1, 0x700, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x4, 0x4, 0x0, 0x400, 0xfff, 0x0, 0x5cb, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x2, 0x7fffffff, 0x1ff, 0x101, 0x77960, 0xbc0, 0x81, 0x800, 0xfff, 0x7f, 0x7ff, 0x5, 0x6, 0x0, 0x7, 0x81, 0x0, 0x0, 0x9, 0xe, 0xfffffffd, 0xf1fb, 0x1, 0xe3c, 0x3, 0x9, 0xc5c9ca61, 0x8, 0x3, 0xfffffff9, 0xc8aa, 0xb2, 0x3ff, 0xd9, 0x81, 0xffff, 0xffff, 0xfffffc00, 0xadf, 0x5, 0x6, 0x4, 0x6, 0x7, 0x6, 0x2, 0x2, 0xd6, 0x8, 0x4, 0x2, 0x8000, 0x7, 0x6, 0x0, 0x1, 0x2, 0x0, 0x39d, 0x9, 0x3ff, 0x8000, 0xb, 0x2, 0x7, 0x6, 0x8, 0x19, 0xfffffff0, 0x7, 0x9, 0xb5a, 0x101, 0x1, 0x3, 0x10000, 0x4, 0xfffffffb, 0x3ff, 0xe, 0x3, 0x0, 0x7ff, 0x1, 0x404d, 0x6, 0x3ff, 0x0, 0xce, 0x6, 0x2, 0x4, 0x0, 0x3, 0x7, 0x81, 0x6, 0x8, 0xb54, 0x9, 0x31, 0x80000001, 0x3ff, 0x7, 0x9, 0x400, 0x1, 0xe7, 0x8, 0x8001, 0x2, 0x7, 0x5, 0x9, 0x17ff, 0x6, 0x3, 0x80000001, 0x800, 0x3c8, 0x43b, 0x101, 0x2, 0x7, 0x7f, 0x7, 0x7f, 0x10000, 0x9, 0xd39, 0xfb27, 0x3, 0x3, 0x3, 0x1, 0x6, 0x9, 0xd63, 0x4, 0x80000001, 0x5, 0x6, 0xa, 0x5, 0x8, 0x6, 0x7, 0x9, 0x526, 0x5, 0x8, 0x2, 0x8, 0x2, 0x53, 0xa, 0xc9ad, 0x8, 0xf3, 0x80, 0x9, 0x9, 0x3, 0x7ff, 0x1, 0x1f, 0x0, 0x3bb, 0x3, 0x1, 0x2, 0x2, 0x6, 0x140, 0xb, 0x0, 0xfffffffe, 0x3, 0x6, 0x1, 0x90a0, 0x2, 0x1b6, 0x0, 0x1, 0xc6bd, 0x3, 0xfffffffc, 0x1, 0x295d, 0x7, 0x96, 0x3, 0x3, 0x9, 0x5, 0x2, 0xe7c, 0x3, 0x5, 0x6, 0x8, 0x1, 0x1, 0x3, 0x9, 0x3, 0x4000006, 0x8, 0x0, 0x8, 0x0, 0x2, 0x5, 0x8, 0x7, 0x6, 0x720b, 0x10, 0x5, 0x5, 0x2000003, 0x3, 0x8000, 0xfffffffe, 0x7, 0x4, 0x6f, 0x9, 0xb, 0x3, 0xc, 0x3326c296, 0x2, 0xcd, 0x5, 0x2, 0x7, 0xffff, 0x80, 0x2, 0x4, 0xf4f1], 0x6, 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0xebff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(0x0, 0x2) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, 0x0, 0x0) 6.13017362s ago: executing program 2 (id=719): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf000000) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8c, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x28ff, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xd, 0x0, {0x7, 0x25, 0x1, 0x6, 0xf, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x4, 0x2, {0x7, 0x25, 0x1, 0x0, 0x9, 0x3}}}}}}}]}}, 0x0) 5.267078852s ago: executing program 4 (id=721): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) connect$bt_rfcomm(r1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)) (fail_nth: 1) 4.14214616s ago: executing program 3 (id=722): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000000)={0x0, 0x7fff, 0x100000, 0x0, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x0, 0x2) 4.050019403s ago: executing program 3 (id=723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04001afaf4f541f4c6b4a1b7b4be352cbd70004d18e3fb3100cd61b5722b175bb70ac700000500", @ANYRES32=r4, @ANYBLOB="0a0001007770616e330000000a0001007770616e3300000005003400050000000a0001007770616e31000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10000080) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r5, r5, r5], 0x3, 0x0, 0x0, {0x0, r7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0xffffffff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 3.819676932s ago: executing program 2 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x5}) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) (async) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) (async) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x5}) (async) 3.668634005s ago: executing program 2 (id=725): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.614146914s ago: executing program 2 (id=727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0xffffffffffffff55) r5 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2a, 0x2, 0x0, 0x20, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x3010}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x480dc}, 0x4000080) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) read$FUSE(r2, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f00000000c0)={0x10, 0x0, r9}, 0x10) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xaf4, 0x0) close(r1) 3.150185s ago: executing program 4 (id=728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a2c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) close_range(r0, 0xffffffffffffffff, 0x0) 2.934877502s ago: executing program 4 (id=729): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x86a8400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r6, 0x93a, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa410101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x92fa}]}, 0xb8}, 0x1, 0x0, 0x0, 0x5}, 0x4004004) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/176, 0xb0}], 0x5}}], 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec00000010000100000000000000000000000000000000000000000000000000ac1414aa001b000000000000000000004e200000000000800a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000ac1e00010000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063500000a00000000000000"], 0xec}}, 0x4800) 1.578174868s ago: executing program 1 (id=730): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @multicast}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x6e9c43) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8d0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x5, 0x2}) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x82) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000900)={0x200, 0x5, &(0x7f0000000440)=[r4, r3, r2, 0x0, r5], &(0x7f0000000480)=[0x3, 0x7, 0x8, 0x1, 0x4c, 0x5], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0xfffffffffffffff7, 0xfffffffffffff5ad, 0x9], 0x0, 0x3}) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = dup(r6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a4c000000060a0b0400000000000000000200ffff200005801c0001800b00010272656a65637400030900010073797a30000000000900020073797a32000000e9b52ca9bc9344820000000000000000000000000a5c0c34266c9f2b192c4aaeab86a620a3cd16ccd0039219f146ddc87b2d5cb8b8d9419e61c8b6548c9ef811e80598e1ab34d66fb93665202cd3fecf87f39bac1271b551b70c727a241875b2adac7f224e4c22868d3d4e2b80bee507b3fc279bc67d000b3ac4ba11ab57646c6e954d9f5044e7f96caf97b0946196c3bb8e3ef5"], 0x74}}, 0x0) (async, rerun: 64) setresgid(0x0, 0xee00, 0x0) (async, rerun: 64) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000080), &(0x7f00000001c0)) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000380)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x2c) (async, rerun: 32) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x9}) 1.564054563s ago: executing program 4 (id=731): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000002fdedd2a", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) 1.464545448s ago: executing program 1 (id=732): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x9123, 0xe, 0x875, 0x1, 0x1, 0x0, 0x7, 0x9, 0x83, 0x80000000, 0xfffffffffffffd92, 0x3, 0x9, 0xffffffff, 0x5], 0xf000}) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x90) syz_io_uring_setup(0x45e1, &(0x7f0000000400)={0x0, 0x3356, 0x3180, 0x7ffd, 0x400246}, 0x0, &(0x7f00000006c0)) 1.237678658s ago: executing program 1 (id=733): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000005c0)={r4, 0x6, 0x2}, 0x8) dup(r1) (async) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="cf07746e598be9df037edcc9f71a0c8e2a9041aef05780d164b79a6e4e8029951525523baa6c06b5", 0x28}], 0x1, 0x2, 0x10000, 0x3) 979.862977ms ago: executing program 1 (id=734): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0xefff, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc5) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xed10}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x2040) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r5, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, 0x0, 0x80800) 666.588158ms ago: executing program 4 (id=735): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) 566.345374ms ago: executing program 4 (id=736): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x721e2a9faf6bddb2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x200005) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r5 = fcntl$dupfd(r2, 0x406, r2) ioctl$TCFLSH(r5, 0x400455c8, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) ioctl$TIOCSETD(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xdb) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000040)={0x5, 0x80000000, 0x2, 0x2, '\x00', '\x00', '\x00', 0x7ff, 0x8000, 0x49, 0x36, "a03fd83f547a3006bec0181bf1f9fadc"}) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b40)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x11}]}, 0x18}}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) connect$bt_rfcomm(r5, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)) 113.743363ms ago: executing program 1 (id=737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='sys_exit\x00', r0, 0x0, 0x1}, 0x18) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 62.779837ms ago: executing program 3 (id=738): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x86a8400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, r6, 0x93a, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x92fa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x4004004) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/176, 0xb0}], 0x5}}], 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec00000010000100000000000000000000000000000000000000000000000000ac1414aa001b000000000000000000004e200000000000800a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000ac1e00010000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063500000a00000000000000"], 0xec}}, 0x4800) 18.792504ms ago: executing program 1 (id=739): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, @in6={0xa, 0x19, 0xff, @private1, 0x8}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6f}], 0x94) sendfile(r0, r0, &(0x7f0000000140)=0xfffffffd, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000180), 0x24100, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000001c0)=0x4956a27c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2b, 0x0, 0x0, 0x7, 0x24, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x40, 0x10, 0xef7, 0x6}}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80040410}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0x1d}, {0x7, 0x1a}, {0xd, 0x9}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xbf}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x103, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x400, @bearer=@l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) r6 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x205}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000700)='pimreg0\x00') ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)="dd59d1f03c1397f320e5bb3294d0f0fa531ae197855b295c68db609bc8de31f00ac49282acc39ae58aee2bb73982420be9726a7f610f29eaf07a2ed82462e5a713f6b7158216d75053a0c7760f7fb25758b17c6f89857db56f6ceb68f759254315b752fc5235de71d307b529f917f5b3a36bba95734774a7d3db4122a6511303d8e0d56e015ed800172cf566dd4b7032cdb5406defb3203d6c823d1e6c110ca69e4070b97c64499744e92db956de74ed9e4ef6580227051f9bff10ce142d97e331fc3cca3efedddbf248c382cff9d7dfc7ba686dd500c622b37522ab3e88bd4b916d9670572fe8e03a5562f940d78a126b4480e3c29e73ba33c6b818a852c770a8b921a326c43014050648507c201b615e04c9a67b69e8123a72738b5c00573d5e6bbcaf1bfbc4319861088e3e9d705b2e4d12986d5ca39a5c9e1e21075a682dd49f5ec29b43bddee72fada208fe64c1286dc6beefa56efdf7bee17be994013c7819d99bfbb80f642a9de0543141ac98dde20950982e52ff40ca3032b9a38c064196f8ae04394fca1f0dcb454f1009b4c5a9b742c48f5c242afa8d59555b9be8cfb18532ba86aeddf60de9d1acdb57c0be7443d4ce332bcc668a7ec801f41b748043b2f761a0d3f2da3b3c8ada4ab72a3e75280cc92150ea67841cb3d5c17efa88937a3d7e93de1297bcf504eae072a80649b88fbfa0143957d62d3ccdecd7d5acab02966b2fe41804d250ec819181f949fd828c014b048c15e06926cf4f91e3c6e1ded5ff350be78d8ffca5ede1eb404c4a8be7dd906b4a217850922f796ee0e0b76189157eec8a63621b9eb562003ff7b467c36e9152dfa9d6eba1e01c24421af95e03d187988fe2b2f1764cda8e55565ab15ef6251478408b39a9336231b75c7064b6143314dcee6c826ab4fcae7678ab155abe2d243f444ee6f0a734b81caa7dbe39599cdfafc4f2719cd907b3f3994b200eb8383b1d4ae275e12bd21e6d781071950aada4ffd31bb378dff7a7bedf3ad9263ed547a6cd1c5de2dbee4e900b14e42a6aa22168175deafafe46f44bafc9016af09ed04a94d5da6216f68710e8760235f309375922848f831b42d97623a30405be714f7f1815a065191975b3f585c8c08bdf26f7d4d8633920a62e599e2f4eb3d6c658be5caf3a3b2eab2c7cade2bbe217c571a69f8371916ab98bd925619a2427893820511b7ac4f17cd3a9f918578e889ea558e5f12668c1fb7e8246e4a0d96dba99d301553d4d76a417edc11309cc59bb56add948197746a3be5f056f09d213b8cd717b0c8d8ac41c298315d76db19d7c0b0b6ef2f0eeef0cf6e189713baedfc799d66ea66d5a31db432b0d73e71bc7c79c66bb2a36a622d86bfc4f826109c45cade5ca034e6d1b6bfde954d8e9dd608da067b39861acf3e4a21439c257a9bac7c64c63a5b740559a2ec4fc35fcbcf09f7cc7577ea7873d6eb745852c4bd1681ed59ee3a14d907836b659b9d69a65a5916329ba549f7bafd143b3281e9192e2dcca8e7bf18b38fb9ea1b7ec186ccd47b4d8ef7b52b4251ca05333c666717b822cfec97cccc03f7d418e378528f706540ba13df3a208fc5573751ca67ba559d98c2bbb384f17f6b753df446324baa00e78a12662fefb2b2f62e463374cfbe75dc505772629db48f0b4849e1766f81e50ff4231d397ab42edc55c21377d9bdb43f05bb4e15a93d10b134e11dbe8750d3577567c895f1cb934bf309a86bed1de40db3fddf1f4d369095390c76cb438753cd9399b514d6d0369c9e276946a32a70a84cde5b59a8808e1ac004d92f7fcb04699778b3fd4419047098dc8101d44b4f42cbdc7a9cd5fd25a5cdb3056f6c1567e0d1ea9b996192c8720f4969392fcd83bec38304517377a6afe614fc70d48fc340444e2eb66ec8a7eefea5180ee825d6c18ff6dc455b4cb1ca3b13caac89b6584b985214e0b50db8156b8b2da892db677a38aba5294072115cb266ba16e3c3139ff8400949b89379de5ac7d74b2d890666637fed69d3a29d65cde9146f22e12adce6ba5fb98ba45027c8ea9ffb28b20a88920944d4e5c9cbec16e563a8f0b237ae94841a608c255cd899694f57bc1e3c7ce4b58d1c7ad935d4cacf1ad908b2b99968918260b6c1a0dc8b3953676874b2d0a4ab5a8ded7321f934cf74d011bcf2416903cd8a5897714d78d8abfcda5db78df70e531ac2e736b8b349b3bf7380c7b919278f2e07482abc5582bb2b7ff85b32bf2e8ad080334988509496e7c705c66db53ecc9a7c42a5f0c129a111eb602c3fb50a787a3a64224adb3e7867daa72fce9df57eb6bddf139d3e93668f69a0484595868c29b9bc81137af728975efd248dbcd440ef110b7f2597e4f8a33011e0d038dfff21fd484d63e9d9995e0801f453f56b2508bc256ca2a8fa5f8b86db03eab98e771bbd7388791b413d1f7b9df2b4ac61336554ab21034dd15d1dfe8e4b0a6a48191beff79a8accef9b9af1cd05b69f5ad57cdf2dcf542b0e43da977e9f19f0eb04201545dce9166cbfb2f94d74b703b1e4c5321c5f87cb48474e9dd5fc07fcb72966c76948b63e9687235dbdb53cf5cfa454d6663339c26bb5a0dd579e7bb6e836dc5497dd63b8dc5e0eb2c3c5eedc743351b0b6dfe7afb9db3a0247ae133c1088652b0a5d75f5aa4920ecffc9c3a868f7bc934ee4bb275c304cb319e9eb9b089244a3e384e14043f2d294c1911a20211fedcc723e806ce4304854d2abf800b135c466c7ab553a8465cd230352252e57966deaa5374c18f1d87183eed3744ac1b080556def97b66396e931df26ac3cde6f3c297598e3f438f9dffae3082b60418a83e76607d36a07f840d1122e434a6381d1af69c5f542a42ac923f83379367cc4b91f6c938d4d3f7d76cbb24b85c440948fd4756d95c3b667d864f3d606c04886da8f0df8667d2ee13800d584808c1717b58c1441e21f7dfe43418a2a99e272ec1f3e0c4b0e08dd34be6386f1071d4948fdae056458ad0c43b67375a47a9a26f210d4d2b004a71499fcf704990727099ae0fcac57d64ea1a7237ea47dc0d20b83caa3c9f7a804db1bb3dd7ad303132a26998cde9fda740b6f62dafff44048bb01a021060a8f24f3cc075e2b406136dd4ba2171cb87c8edba6513d5f33173f96c1c0c21ce0027a8169b328a3ad6179c9787e5f790b2e2b2ce2f0898a24bc22b90818f8ba8913eb1cc048cd2f60c4ffb1309b8f569b9fb852ab3852c1e2671349958f19eccdbfcedc0232db185c28d45b8580de8c0f4c879cbaf451cfad05044b6c42035cfe78e700d5e36657b8726803bddb85a0014637ca4cefc64bdffed8952307bd269f1ed1bb18e0004740b9f4c7ffbb4d0d50660c4cb7dc3cf2a0f1e211796e337aee8ac55ccf3d03f82ca82c8efc342d246a7b5cee6327d2e30c95ce5060525a4552867cd5d4f4d133d1638086605a30e6f3ca03ba8be91b7bf699eb59f68b216a4258b6c20a123690eec0b47c1cb25700edaa48f02dde5efc4e8c71cf3276ac7482be16d7fc83410722eb803753550fb6c8176ebade1ccd129f486a0c0e2c61e45a4b622dff87c21aa444ed42a6c49b273af5f82b65252b79177176257597632abbc6142e2fde3bb4e700beb9a780244128e6a1a75d8611ae9c96fa94dbdafece23c5a02e75fcd3787be9e3637785b79c40f2b1d0d0c0d67e8318b3f28795418d737b4e300b1e01e49f2a525a66c261731be1b30c843ce833c07736c9711f27e09a9da579b3739e8888653286915de3a110b2313d353430da0efcf0a3598b32258ad7aa4e2663fd577398acd605fc669c3772046b29167f0bddc3e66c959e668be4fca74878ef700c7303d33447948095c2ef54fa887d87db0b88f7b69ce195071594ced2fd24d2e80375861cb03f12f44ad16fce0b7b27bed804f70401f72f075edcf27a7eab97a015b26290a59b0af1bece46c180ca77c66aecffeee2d7da95b65fe9c422b3507bea5e4ec1c79ca41b974aa1ba7f6d3d7ecc26a7807a799d1453a3680b5a8639cf10165073033b43f9ec5ef2932eff86f824aea2fb8c603040b02c1f7229ade0373372c9f49e06ebdd2d3bddf9686defe44ba273f7e980bf3f22eabdc53f5f55346ca4c2bc5a4f9b372d123a607e15433b9d8cb0aed8a4aad219f7b30720ab8be95c66f0be8edf3b437bc2a1e73decbfdd464c2dcfedb31305ab092d1d4b396dbfc5c28bd627d2abc6f1e1395f14b5d2110e65255ca27b1f7f10984c14278c75b4833807e3eaca15ff726283320ac007ef7dc1c5f66f0a84657ac7a734b2ecaf0922688b675e32de12c162977e538a179e4a010c691bc7054d5a758050e3c76b66972f691ca139d8c83fff50179281bf9ef85c1d8138740126d9be12ae4dc074506a4c5e0ae58a20653bb26e36282798d9077a226eaf651f9e455e7ce21ae11a3b4d11e149b017977b36a85784a7451707b8b9a84f8bf131a7a3315a0dc7a412d6f50a6c1b781dc1e815d4921b5b510df1db6739ae87491dbefccd30a06d418dcf2580f038349030fbc4dbd893c7f71a1f0210698843c06cbebeca02bd053fd14ef7a8a694924f363ef76e15a15a336d2e26fc9bfce54fb33664976afcd2a33e5a8630ebc6aa861c202141d57148686674a183eb517f2cffa0d72cb0a995f8277b781aa7dbe2d5a6bbd78f22d05b21e87ccd08d51105c4bec30f78ab005dc3969aa21d3553fdac6cd83caf6018de6b9276ef8ed5f5fe3640fe5d0ec25d3c6569b3148e78cdb04b785bf8397c2e29758f5c555140600204918f322e2cdce1cfd7be9b6a1ac809ba66de6c9c200dbc92a775184d00d4219abd4ddb206c8a47f7c0f156078b6fdc300cd8e244fbd97af512defdac9ae6850522258b7deffc9195101e083bea4ce9db42fa0def505f9ff449b26dc87c8ca874d0f127e44df241b83e5d81cc04f78f3fad89ea9cb37b1ae5242cf16b908015417e6929b5334500af77d9c2f9a8e64c8076e0589f07d90215eedbe736efc46b55583627e458f61cd451b2eba2326a30aa606b638903ee9655d56dc7a5ea859f05eb51c5049c7e09b8d1be4f48defcf3a18ba0b448c7cfc63fe494ffc779d7cf1d1b8d6078c39795442025aee772b0c00435c350e030dd1d4454d784da74d7d834b0e313af6e3f0ad87ea1c4d0b8ae92e02752e1c9ac8067095e11bfa7c3369f0ef7b143fced03c517f93e948159a21e0a52ed4d3b380f0bf796b95d7388b3e3ed56d69704f34999ef557d1b5ba77060b56a6dd7f9b418143a7e17982aaa99b1f97988588ad17b40ba2f86d45f123c944ff017997f68f54758cfe7073a1b80e8c0d740cb449a8b1f3dbc19275d87189de729844dbbc08e960e9143410ca8303f5a3f73ad993f652a9fe5045ce77f1454ac412d01f08820fd36e353c3452a863a9d592f257646092e77a4cd166e3a8cc4c544d2bfdab5f6a176e708aadb45c44cb6d7f0481f45aa72f49a6ad5eb8e146deb3d3cdf35fa1bfffbb8c1a98a48e1edbfa50ce01189d6c534cfccf23ca667bd8ef09862467fb950f3453baa99f1be6351a336db8cd9fa53fd93f03ef4fbc0d2fbd73460a405bb7f679ee8cd7a8747d85ef8bffc1f88746465baab47c641390f5c395f1003231cbf194bbade6bbba984f234ac8c04c6a5d7fbe90981a2e2a44428d7d61478889e0de82f37c3d53333c7419dcb3805f9a0ed085a25ee9299f7b0f599c995c71e0580320cb9b5b2341c1dc00cb5022da85223b62ca97f3b49820b72544d630de8df59644242ccc9641799259d69015ff2c9d", 0x1000}, {&(0x7f0000001740)="52fc83ca9c5d82743bbe8e150fe4294a638b6ee5fde433e7e87f32fb6961940aa0253c19244b397308f4ff857c051d071a1b5bff969c6216521283c16e051be9463ebf4798c4e2", 0x47}, {&(0x7f00000017c0)="400202c9aa28772ecc2357d98d0c5ad0eb4797232a194847996f56fff02577f935c903a389293c7a8dcbaedee7947bd344b9b0f9f9d4dc0303b475c0e1259902ceca5b8c94d4f75ccae297dc04f5d0e7e423de53dbb009b870a5e89ac552", 0x5e}], 0x3, &(0x7f0000001880)=[{0x28, 0x3a, 0x1, "34bea2bc3018c5da60726c3b91d87414e2a3edb067005059873c1b"}, {0xf4, 0x10a, 0x0, "900b7f4d5bf28056d32a4c1882de4aec645cc9c91cdb4c419c4fb8b74faacc83489398978eb1691eef60857894d36e87a454a22a912abbf4b59157aad28e2984664008eaa6bcbf3cfcf8c4707c77c3a5871c5c5376c91a6aa83f0ec843744c9ceb512f7a5662d6910da0495aae33355a949395dd3b571d98e622f06e57d409edbfd2e97d167c8e5ad69870ac26b909052f555e0594b5c7fda4de3ac47ef5a66c54dcf94c493688f45bd3aa61b2b488db7403b96b86136d809121907011af26b29f3b1da78964f7c2c245ba86e68b1938e3793313a6955aa8d457db02cd320a34022d92b43264c9d9"}, {0xdc, 0x111, 0x5, "bc544efe43e30655fa036da2aea9ee4796b532f098deaa055da1e76ec33f1a5cfc130808d83c106b7970634a9f9756c2dc875ab5f57a6ce0914535b1f1550c29711b8b0befbc512cd59e554753cd21b32528ccf013e59331a0b0466bea9a64be4429b64217e37dbed4c53ccc9a9e2aaa57be1d0dbccf02c9f6340d19a52b2ae1e7739e822e6cd38633a2313f48358732264e258d54a163828073e292929803ceb613c77a08fd40d47da3930f383c0199b7f31034da0316c82a743787eaa5f2d0e116546352e3f4f26f0c7704c70c9c"}, {0xf4, 0x104, 0x9, "72229a0e66b4a204c8d00093c3e61a1f4792405b047f7a9d5e2cefddf4172a56cc28452c40fd06d01bde6fdf57a58039ae6d23d7f0b63cc9b5282b0147987c16db2806a57d734ad32b89294c62c042e26197b755a763f9afd8c312c148e2f8063fc2c9ad28ea31b53d61e5ca431287154fe7f1e20a1ae78ae488c79dc731650e788c05af541e7b3b61434687884d71821d7353547ba6e30c9f1b3798eb0ecad756a386b9fefaf473749a6a4f581ebb8146deda9dedbec379762508a11ecc59fec7759fc6ed89295cb778e0820932bb2d52010b17f8d80bb95dcf87b605f50444f91b56b4c058"}], 0x2ec}}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)="2af55f833d4c1e3fad5f5b9f31c0442c7265384fb8983d462b88ce389e1f1b455e5b6a5c56c645019c458b5ade803113f4ec81d252efd5c1ceb2801cf6531a5266633a2a50e1eb63f5fe4bf46fa84fc895ac936828ec288b4fb944b890f15c9081ec0fa87bc8c8ecb1ef3921970c566d1ebb95a0befbd371", 0x78}, {&(0x7f0000001c80)="567de5e8a22bbf9c9ed961bd5494ee6ed9d63bd9e2cbaba31d2b697b1b3bae9d9cb4306d52dc24328eaa136a8c36936fd7a2f715a7f473a857873a3aa1431e0fc1d77bce298fe4bc39b001b7f8d02faa1730de058214c5f24aa1f8530fc96de7a1af5129a88bc5153ad36b73beeca67cb71c356f9fe76a34c4c9c980c6b6f4df6ab01c0b3b79f9a14d3a599e868eae4eb7df95e9baa797c8e6b6df7d5e88e3e68ec57fe6d18013c9bbcf2c7bcfd9c38b", 0xb0}], 0x2, &(0x7f0000001d80)=[{0xe4, 0x84, 0x7f, "462511d29065eef8034afcc6265dac74a451fe0da77da44a572d9a5c59f02a029a2ffd44fd1c1bc174bd4e9a0fc39ab56de7bd59c25d2344d22ac7c35b0848b56fb4bef539454b12d3c0f68a23199e0dfbb62798c3578182641cd788cee02c85a4aba28c6404e413431f34069282c0b821e770e0ba979f3ee575700caa21e1def668877aba27683d56a15ec7fd044f6b09407714ddb3f3d3f7434f00e8a8dbda4a91a11466cc1fdcf658591a8459be1d8b63dc10956f30131387bdf1dfc613684c60c3bc51a637d279fe9b206d077fb5efd3de24b6758ad2"}], 0xe4}}, {{&(0x7f0000001e80)=@generic={0x6, "3156baf15bc66321e57e541d25766d0feb7df7c7538a4684e8222d87e7d29c97564c806e4c5251a083d316b009f931a4123f90ba04723b28db69afa981826cc59b3685d27304cd9579b99c074f86a1ccef41706f8254112d568be13b4b68ee0c06d99e20b88da129f00dc4f84ed4104e34ef092d32cce425afcc4cf2cb1f"}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000001f40)=[{0x84, 0x115, 0x7, "7b6c0c5c92e13b0571b2d9cd713b83afe7603e39f95b111bff8d75dde8d8e2fedd149d3239ca02ffc186265fb609729071d1a40c547d9649b421cd7af73278c2f922c2d536bf085cb940934a63719362a1be9a277d15598240ef57d963451ae02a0039d6c1b0268f76c64fac4e4659470cc85e867908a9"}, {0x28, 0x111, 0x9, "398d1d8a0d171c611425838d69c51af05ce11a2d6389b9ccc6"}, {0xf8, 0x113, 0x8000, "64e2c01d7a09b4a6c075817af03d58d0394b5b85f12d693bea8474f71725eb3515664cd613f1834c0fe159d15bbafed605debeee6eec7d53cc7b244a62fed095f92220c455f8253616e0ecd62af8676f7028feb1bf8f7413e9481158b317c679a77758500e70bb2535ca061c202c97a9ec2e0c9b2a948056d9ae239942421180cfbe83ae2333ebb5bfd49ec14bd7d8feb6e81feab7388cd7ac495973ed80033bf557ad317fdc46bce22e295457f7782a432a214de103af78d712ca45495ff450eac76a1200cc82708288c836db101b2fd0eddb2c604219518b5bc8472f54e3f35f35b15703f7acada7"}, {0x3c, 0x116, 0x6, "f6835596a0f1820bcf23f4827ac34d751d6d233a527fb23cd60b1a8194bc4206779305dccd038ff6b9f414b9c5"}, {0xdc, 0x10e, 0x5, "02c9153c9c584400e3449e677bcad1f8038658428c9b6d5b2b3f5cbb3ecff44f4e3bfb6cf802390c61b07f596b615ef24a9b80ac7ad3350c5f8484329342a86301ae5f029e684697b9c9c091c4cc528b56e8576b9485b6f307abbce2222180c9bbe891901622cf03ae8ddc5600cfda6fa1eab416f702efc02a0a1472f4398caa0c4638ccf87d4f4949022b3053c128ef8abb3593fde9dd1df7928965b297d9164bc4a15a7af4de60a453ebe2cb5f851fba0101de10ddb6f64d9235d2d28b222f671dc4c69e97152dafa98a7bbaa6cf"}, {0x74, 0x11, 0xd3, "17b8385e8caa89e57d76c26a1a26d96287046453b989fd8732a9f85b0bef55bdec4ce89561156fc19de24c62d2a179e52e9b06d3760890e79f4ab375a51509c72bd141e4c155e4a186a61554392217a6353c55ea5d53e907a0555ce4f92adbba33ff2bd6df6d3b"}, {0x8c, 0x103, 0x8001, "c61d5a19d34b37b3ce926dcdbb44ddd4adab5cb2a25642996374e176973936ee9ca5141ee662251044f0c70385028c17b0c746cbe31b86672bee72e99a8986dd819d02bf5dfe469ff5a89a5872e655898c2f0baae8cc3de918e9b8212609bc8b45fdaf8d06b3db4ab2610fc886d6988b3423e105d9dadcc6c6d5e104cac1"}], 0x3bc}}, {{&(0x7f0000002300)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="681cf712f590346cf8b8d5e280f0b304876fe38d2df324d9a646d81c74212e8ea48bf69c5e710f0fcde50c0f45c98902cbda3fb66e6c4f5784532e29eb4c12b580d37d1be61f21e0013f19bb406539547b0e62576da0d85e9b7e41fa9b5846704490732d9d5507e2bd09658b13bf50bdef1cab3f952553319fa6028ad630f79dc8b43bde7dfc9138336c0ea637d7524bc7587aef2b9bdc8ee541e24de4f26677ae21527758851257bceae38d77a050126de1e75e20bad78526bd629fb4f6067dc4c8737da61a69fd37d6", 0xca}, {&(0x7f0000003480)="e6724000aee67de6bb36e6e5f4549adc095e8f210322edc0ee2ee49ef410db1951345de2d69d3d12dc7c1ae61ef21631138507a489db15e5ea8181c8ffa716552a3f28741fc6e1e229bd3b93a30f49f363b030d8b74212296dac2c43ab38e1b309d72f4f9b89d626b47af1ef441095ed55d408f01fbefdada02a1af69e964a4ec8107394e010bbafb6cdae2ba6a045faf45c30e81461e4b7a96e68db0c2251e09e041f65659ed441a7ed92a5517ac007994715a3c47f39de1e406179458b2d2ee3f90e8bdcc0accb015ca5df6a9a45cd7aadd32d8a6452f625617a9a05ade9a0d28de849fe", 0xe5}, {&(0x7f0000003580)="75345278ae69f38022224eb5085b62ccf064206946016e045d42f34f0a4a2c09a993caa34f40112f17cfa0316deb1ec692a01c0d13049f0d0ac36882f1079837f7d7f5ed7f9bd72c90e9dcbe7b99a1419b15ab33e40b4cee97423465277d94a90aaf791a880e67d59e94d33be31fc5ac18", 0x71}, {&(0x7f0000003600)="5ada97606d6df0bd2edf6f0f0090fcc87b8cf8654a2fee6ba0fe82f51f296ab6b1209e2b6e9214ef6dde9f2e517880e3105630e59a93798f8bf3064ce323c56600892136aef8e49fcca28fd8dc8314afb42897730e2ca8aa5b01fd4551b7bb77b161c08a909b13efe27aeea52d75c4b4a86e7679409879e109f7a7ccede15ee5f925daaa07ce28e18fe1d1f2cf83fdf8dbff4942e643d278bd2c491f7957f25bde397cb2d0df126a6147f0871f2204c66bd1d89efcfb0ba78be9c8289ae1c736b1f578e9826396f9", 0xc8}, {&(0x7f0000003700)="baa221855df060e8927481718ad569601e494e94e0d00c", 0x17}, {&(0x7f0000003740)="a257bea6d9ba5c19213c699683c043f41407fcd9a523ae1307e650f804f34d48de958221600580e3ffee321cf4b7a1befc8ef3df1ca05e3ee42ff0d956a64a9aa812c408de115e713a1089a9c852b1b076369eca83c48ab0d3407f8a27ab5a25c20798556cd62f091fb669764a7d85e6dfd19be2dfccfd8408c7c0e7", 0x7c}, {&(0x7f00000037c0)="4b3e7c43333128b1c042a6ff88474e165e998b33ade0288fd0486b634bf3bc3f8ab32d5af1c4a65d999b0c05863f20cf0737b73d4374997b61385f091b2ddfe74605a83817926ef10d0cfd44d69e4115fae682d6ea9a250ec8809c49529900bc970a87e86737b5c98540c131d1f7c3f2965590205dfd523c1b1cbb8a0bda00bb205ccb70369fdbd5529cc74249c48d349bcb58601a08a5abc1398a836a04881e", 0xa0}, {&(0x7f0000003880)="124705aecc42ddaa35900a330b1ce80f026d40269820ff0d0136bc02c165277e7ffb7853973534d1ae8bb183363477678d5eaa1fac741d6df494f6b7e9f4e5dc5e1b5f2dce392aedc88ef2fc49eff9fdeab81b19ee3946e710440eaaeaf2d69cff7b51", 0x63}], 0x9, &(0x7f0000003980)=[{0x50, 0x0, 0x8001, "b62647db2af958202672bda87388f9114c0f7a07502c7cba7cd956d30343b84df7118a805f020d8ea775cfc8ebd783dfd34c75fe75e71332b2a0ee14eeb0033a14d7"}], 0x50}}, {{&(0x7f0000003a00)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003a80)}, {&(0x7f0000003ac0)="11ec91df0e03a2abe326bb57aba2cac1be3720022ef022c019159789541ce7fff2d5899d7fbf542d45f7a57cc5775e14ad35b9a70a90c5cdc500f65443a384199290eefb0f2e49ae09145c2b08f3b56eb3e1ba5e84", 0x55}, {&(0x7f0000003b40)="a55dfe621f4e7643d7b153e95c969de6c914a2bb9e29ffd98c360d67190738cdb08604785439abfdfbe1b5033f0d40d51f7be6cd823f4528847b1f4bbe9bfcee27780404fbaf69e680ca7b1b1baf2db1bd71ab9af42b96cfe3feb2fb53159882ebb4a32072d82333df11537dd5d7c04d48d0b6a366d6fe19db9c992523271aaa37c879570b2c5cae9987ba63acd1d17ec636cfa90e52eb2c9132e43562c597024fc80cf7f4ad876b3c4182467967109ceff0803773089df4826b", 0xba}, {&(0x7f0000003c00)="6c9d3eb7e8acfa777ba90279fc7b959ba9515a202330c4693c62eda72aec1b0c70cc612b8acd44bddb714496831f53cd185945690e528f54ff3a8ea17af826b0d9b38a703ae553eefb890bffd43eb8b1c116e5763068d862db6ed30e47e7f3c432e839ad0c5e6648d2c4ca32ec50160dc4c9725833f1090172c094600e28bbb20c4f1e80550b", 0x86}], 0x4, &(0x7f0000003d00)=[{0xbc, 0x88, 0x50e, "c007bc14906400c6f36fb3e562836cfc5c1d2a600d36715d5d1bff89b5efe04899d75bcc08103d2db3aaa410eb3a115ea9a0b0c5f717c654b43e12606091470c8701f51e324a98030b52785f52500984b0a5352325d6ae749a5baaa1c2fca7e93369b255faf43652cf55f36e60c86caafc10cadca0373bb9d56710edfd40c5775470464395d9fddc4ee111a8c6423455e2655850509dab6500f3cc1995e5da30646c908c7f19fcd4f893219de67bae"}], 0xbc}}], 0x5, 0x80) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000003e80)) r7 = openat$zero(0xffffff9c, &(0x7f0000003ec0), 0xa0840, 0x0) sendmsg$tipc(r7, &(0x7f0000005100)={&(0x7f0000003f00)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000003f40)="fc100ff1e46d593b126258fa8bcf0e7e00eb42b8e9238a0c99af7725279a861d04ec4444d8766554cc3a3cf4599dd38359c8eac6406cc0eb7a306621dee1e9e5d84973361113503a0188d9964c08366adb9ffdc6b41ebb80291dc3fba378db3b05062488aac7aff42c8c769fc85c0b8de6340c48b328a61541b7307f1011d30fe4b73cd060dcfd81bb24c5b91c8380ccf4dc1d93608820b38f6efd11dd64355184e28381e0c7c68bce685df1d12511f3fbc8c09c424e60", 0xb7}, {&(0x7f0000004000)="d7fbe63a24408ad7b75889e073c8913c805d26090d9fba3644beb57217f92ea2522bd324f85637828c95b4f1d87e7a8bb8fe9745ff4fea7df5203f61730018fb9dc5dedd34e7142ecc1c75ba129e862b94192f6e106ec2fbe44ea9962f70218992c1d2eeaa7d510e332aabad55724646bbd58c6f6d4ae736d9945ae53b2ec6246e2efe5a109417bad71381f378", 0x8d}], 0x2, &(0x7f0000004100)="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", 0x1000, 0x4008844}, 0x20000840) r8 = openat$snapshot(0xffffff9c, &(0x7f0000005140), 0x40000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000005180)={0x8, 0x9}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000051c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7ff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000054c0)={'tunl0\x00', &(0x7f0000005400)={'sit0\x00', r2, 0x40, 0x700, 0x0, 0xfffffffc, {{0x25, 0x4, 0x1, 0x22, 0x94, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x32, 0x1, 0x7, [{@multicast1, 0xfbca}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff0}, {@rand_addr=0x64010102, 0x101}, {@rand_addr=0x64010101, 0x9}]}, @noop, @end, @lsrr={0x83, 0x1b, 0x13, [@dev={0xac, 0x14, 0x14, 0xe}, @local, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback]}, @cipso={0x86, 0x22, 0x3, [{0x5, 0x5, "7de820"}, {0x0, 0xa, "4860e8d6e4e6e10d"}, {0x3, 0xd, "53725711e8df4c7433ebca"}]}, @rr={0x7, 0x13, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @local]}]}}}}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005500), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005640)={0x9, 0x13, &(0x7f0000005240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x865}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}, @generic={0x7f, 0xd, 0x7, 0x6, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005300)='syzkaller\x00', 0x4, 0xaf, &(0x7f0000005340)=""/175, 0x41100, 0xc, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000005540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000005580)={0x3, 0x8, 0x7, 0x6c93}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000055c0)=[r1, r3, 0xffffffffffffffff, r7, r1], &(0x7f0000005600)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x7}, {0x4, 0x5, 0x4, 0xc}], 0x10, 0x2}, 0x94) sendmsg$nl_route(r7, &(0x7f0000005900)={&(0x7f0000005700), 0xc, &(0x7f00000058c0)={&(0x7f0000005740)=@mpls_getroute={0x164, 0x1a, 0x100, 0x70bd25, 0x25dfdbff, {0x1c, 0x14, 0x80, 0x6, 0xfe, 0x0, 0xc8, 0x6, 0x3600}, [@RTA_DST={0x8, 0x1, {0xec, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x23, "2a6a1311b20af1aa2cc92abb0df3"}}, @RTA_VIA={0x14, 0x12, {0x18, "04203480ee1b9e40a5f0bfe402d3"}}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x8}, {0xae5, 0x0, 0x1}, {0x3}, {0x1000}, {0x400}, {0x3}, {0x1ff, 0x0, 0x1}, {0x17}, {0x73b9}, {0x7, 0x0, 0x1}, {0xf8e07, 0x0, 0x1}, {0x1000}, {0x303, 0x0, 0x1}, {0x9}, {0xbb}, {0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xa2}, {0x7}, {0xde4}, {0x8, 0x0, 0x1}, {0x2}, {0x5}, {0x3, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1800}, {0x7, 0x0, 0x1}, {0xc6c, 0x0, 0x1}, {0xce, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x3}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_NEWDST={0x84, 0x13, [{0xfff7f}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xff2b4}, {0x8, 0x0, 0x1}, {0x5}, {0x446}, {0x6, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x6000, 0x0, 0x1}, {0x7}, {0xfff}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x37fa, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}, {0x8}, {0x93a}, {0x6, 0x0, 0x1}, {0x1aa, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}, {0xb4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x715, 0x0, 0x1}, {0x6}, {0xc, 0x0, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendto$packet(r1, &(0x7f0000005940)="f804e690c3fd5c205252c316c07e5ec0153a102944bc0456ec0d2f05c2dcb95da00a4d8b4703ac5a73cd55b7deeb69b2fddcac6fa6d5756df3942aa61381780ca96f9f325610d4bcb77ed65a9b9828672c7714a8ae4c8688cf990c2efea2b1c65357651365a295bcbd78d80c858efe64f3251ec5e9dc076be2de0891e7aae1fd128eac101aecdd112965b1822de98a738df1cefbc3a730b5522a3dbfb1e7ae845dd1136617bfafdc19d3ba49d00640e30e9d0db529eb56543402f8c6073bb83ae0ee5915ca4c8805aa", 0xc9, 0x20000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000005a40)=0x6, 0x4) 0s ago: executing program 2 (id=740): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (fail_nth: 1) kernel console output (not intermixed with test programs): T5953] kobject_add+0x16e/0x240 [ 106.224224][ T5953] ? __pfx_kobject_add+0x10/0x10 [ 106.224237][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 106.224254][ T5953] ? kobject_put+0xab/0x5a0 [ 106.224270][ T5953] device_add+0x288/0x1a70 [ 106.224285][ T5953] ? __pfx_dev_set_name+0x10/0x10 [ 106.224301][ T5953] ? __pfx_device_add+0x10/0x10 [ 106.224316][ T5953] ? mgmt_send_event_skb+0x2fb/0x460 [ 106.224331][ T5953] hci_conn_add_sysfs+0x17e/0x230 [ 106.224344][ T5953] le_conn_complete_evt+0x1075/0x1d70 [ 106.224367][ T5953] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.224384][ T5953] ? hci_event_packet+0x459/0x11c0 [ 106.224405][ T5953] hci_le_conn_complete_evt+0x23c/0x370 [ 106.224427][ T5953] hci_le_meta_evt+0x357/0x5e0 [ 106.224440][ T5953] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 106.224460][ T5953] hci_event_packet+0x682/0x11c0 [ 106.224471][ T5953] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.224484][ T5953] ? __pfx_hci_event_packet+0x10/0x10 [ 106.224497][ T5953] ? kcov_remote_start+0x3c9/0x6d0 [ 106.224513][ T5953] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.224528][ T5953] hci_rx_work+0x2c5/0x16b0 [ 106.224541][ T5953] ? rcu_is_watching+0x12/0xc0 [ 106.224569][ T5953] process_one_work+0x9cc/0x1b70 [ 106.224594][ T5953] ? __pfx_process_one_work+0x10/0x10 [ 106.224616][ T5953] ? assign_work+0x1a0/0x250 [ 106.224634][ T5953] worker_thread+0x6c8/0xf10 [ 106.224659][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 106.224676][ T5953] kthread+0x3c5/0x780 [ 106.224693][ T5953] ? __pfx_kthread+0x10/0x10 [ 106.224709][ T5953] ? rcu_is_watching+0x12/0xc0 [ 106.224720][ T5953] ? __pfx_kthread+0x10/0x10 [ 106.224736][ T5953] ret_from_fork+0x5d4/0x6f0 [ 106.224751][ T5953] ? __pfx_kthread+0x10/0x10 [ 106.224767][ T5953] ret_from_fork_asm+0x1a/0x30 [ 106.224786][ T5953] [ 106.224913][ T5953] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.312843][ T5953] Bluetooth: hci0: failed to register connection device [ 107.140126][ T6664] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 107.142282][ T6664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.144801][ T6664] vhci_hcd vhci_hcd.0: Device attached [ 107.243146][ T6667] vhci_hcd: connection closed [ 107.245057][ T1144] vhci_hcd: stop threads [ 107.247971][ T1144] vhci_hcd: release socket [ 107.253276][ T1144] vhci_hcd: disconnect device [ 120.285957][ T6713] Bluetooth: MGMT ver 1.23 [ 121.402236][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 122.671015][ T6760] fuse: Bad value for 'group_id' [ 122.672636][ T6760] fuse: Bad value for 'group_id' [ 123.139562][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 123.940462][ T6775] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 127.028798][ T6831] syz.1.172 uses obsolete (PF_INET,SOCK_PACKET) [ 127.216898][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 127.222418][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 127.851388][ T40] audit: type=1800 audit(1753647810.696:2): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="bus" dev="overlay" ino=262 res=0 errno=0 [ 129.408991][ T6859] PKCS7: Unknown OID: [5] 0.0 [ 129.411042][ T6859] PKCS7: Only support pkcs7_signedData type [ 131.841087][ T40] audit: type=1800 audit(1753647814.686:3): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="bus" dev="overlay" ino=313 res=0 errno=0 [ 132.352773][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.355445][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.895914][ T6878] fuse: Unknown parameter 'gro' [ 134.008028][ T6882] fuse: Bad value for 'fd' [ 134.422625][ T6886] Zero length message leads to an empty skb [ 138.633566][ T6925] fuse: Bad value for 'user_id' [ 138.635164][ T6925] fuse: Bad value for 'user_id' [ 143.048936][ T63] Bluetooth: Wrong link type (-57) [ 143.296409][ T6962] fuse: Bad value for 'user_id' [ 143.298120][ T6962] fuse: Bad value for 'user_id' [ 144.214371][ T40] audit: type=1326 audit(1753647827.056:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.228512][ T40] audit: type=1326 audit(1753647827.056:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.235128][ T40] audit: type=1326 audit(1753647827.066:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.241644][ T40] audit: type=1326 audit(1753647827.066:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.248163][ T40] audit: type=1326 audit(1753647827.066:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.254691][ T40] audit: type=1326 audit(1753647827.066:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.262349][ T40] audit: type=1326 audit(1753647827.066:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.270671][ T40] audit: type=1326 audit(1753647827.066:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.277819][ T40] audit: type=1326 audit(1753647827.066:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 144.288676][ T40] audit: type=1326 audit(1753647827.066:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.0.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 145.409304][ T6996] fuse: Bad value for 'user_id' [ 145.411176][ T6996] fuse: Bad value for 'user_id' [ 145.705226][ T6998] support for cryptoloop has been removed. Use dm-crypt instead. [ 145.790140][ T7002] ======================================================= [ 145.790140][ T7002] WARNING: The mand mount option has been deprecated and [ 145.790140][ T7002] and is ignored by this kernel. Remove the mand [ 145.790140][ T7002] option from the mount to silence this warning. [ 145.790140][ T7002] ======================================================= [ 146.171467][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 147.070782][ T1325] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 147.818241][ T7040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.502119][ T7052] fuse: Bad value for 'user_id' [ 148.504122][ T7052] fuse: Bad value for 'user_id' [ 154.161172][ T7081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.408912][ T838] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 154.572218][ T838] usb 6-1: config 0 has no interfaces? [ 154.578817][ T838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=e7.40 [ 154.587212][ T838] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 154.592126][ T838] usb 6-1: Product: syz [ 154.594683][ T838] usb 6-1: SerialNumber: syz [ 154.602208][ T838] usb 6-1: config 0 descriptor?? [ 154.772124][ T7098] fuse: Bad value for 'user_id' [ 154.774271][ T7098] fuse: Bad value for 'user_id' [ 155.265121][ T7111] FAULT_INJECTION: forcing a failure. [ 155.265121][ T7111] name failslab, interval 1, probability 0, space 0, times 1 [ 155.270192][ T7111] CPU: 2 UID: 0 PID: 7111 Comm: syz.2.256 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 155.270214][ T7111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.270225][ T7111] Call Trace: [ 155.270232][ T7111] [ 155.270238][ T7111] dump_stack_lvl+0x16c/0x1f0 [ 155.270259][ T7111] should_fail_ex+0x512/0x640 [ 155.270275][ T7111] ? __kernel_text_address+0xd/0x40 [ 155.270302][ T7111] should_failslab+0xc2/0x120 [ 155.270325][ T7111] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 155.270343][ T7111] ? skb_clone+0x190/0x3f0 [ 155.270364][ T7111] skb_clone+0x190/0x3f0 [ 155.270381][ T7111] dev_queue_xmit_nit+0x3e7/0xca0 [ 155.270408][ T7111] dev_hard_start_xmit+0x5c3/0x740 [ 155.270436][ T7111] ? skb_clone+0x190/0x3f0 [ 155.270456][ T7111] __dev_queue_xmit+0x7eb/0x43e0 [ 155.270488][ T7111] ? __pfx___dev_queue_xmit+0x10/0x10 [ 155.270532][ T7111] ? __asan_memcpy+0x3c/0x60 [ 155.270558][ T7111] ? __asan_memcpy+0x3c/0x60 [ 155.270580][ T7111] ? __skb_clone+0x570/0x760 [ 155.270610][ T7111] netlink_deliver_tap+0xa87/0xd30 [ 155.270637][ T7111] netlink_unicast+0x62f/0x850 [ 155.270662][ T7111] ? __pfx_netlink_unicast+0x10/0x10 [ 155.270688][ T7111] netlink_sendmsg+0x8d1/0xdd0 [ 155.270710][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.270734][ T7111] ? __import_iovec+0x1dd/0x650 [ 155.270760][ T7111] ____sys_sendmsg+0xa95/0xc70 [ 155.270784][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.270803][ T7111] ? get_compat_msghdr+0x11a/0x170 [ 155.270833][ T7111] ___sys_sendmsg+0x134/0x1d0 [ 155.270855][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.270886][ T7111] ? find_held_lock+0x2b/0x80 [ 155.270922][ T7111] __sys_sendmsg+0x16d/0x220 [ 155.270942][ T7111] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.270973][ T7111] ? rcu_is_watching+0x12/0xc0 [ 155.270999][ T7111] __do_fast_syscall_32+0x7c/0x3a0 [ 155.271017][ T7111] do_fast_syscall_32+0x32/0x80 [ 155.271035][ T7111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.271055][ T7111] RIP: 0023:0xf7f96579 [ 155.271070][ T7111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.271086][ T7111] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 155.271100][ T7111] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000100 [ 155.271110][ T7111] RDX: 0000000024008094 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.271118][ T7111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.271127][ T7111] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.271136][ T7111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.271158][ T7111] [ 155.301838][ T838] usb 6-1: USB disconnect, device number 2 [ 156.783534][ T7118] Illegal XDP return value 4294967294 on prog (id 66) dev N/A, expect packet loss! [ 157.040340][ T7123] /dev/sr0: Can't open blockdev [ 158.394005][ T7140] fuse: Bad value for 'user_id' [ 158.396068][ T7140] fuse: Bad value for 'user_id' [ 158.741879][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.978801][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 158.982463][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 158.985024][ T10] usb 5-1: config 0 has no interface number 0 [ 158.986948][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.991144][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 158.994760][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.998150][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.003152][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.006000][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.014797][ T10] usb 5-1: config 0 descriptor?? [ 159.043010][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.231311][ T7146] FAULT_INJECTION: forcing a failure. [ 159.231311][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.235420][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.0.268 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 159.235436][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.235442][ T7146] Call Trace: [ 159.235446][ T7146] [ 159.235451][ T7146] dump_stack_lvl+0x16c/0x1f0 [ 159.235465][ T7146] should_fail_ex+0x512/0x640 [ 159.235479][ T7146] strncpy_from_user+0x3b/0x2e0 [ 159.235498][ T7146] strncpy_from_user_nofault+0x7f/0x180 [ 159.235512][ T7146] bpf_bprintf_prepare+0xede/0x14b0 [ 159.235528][ T7146] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 159.235539][ T7146] ? __pfx_bstr_printf+0x10/0x10 [ 159.235553][ T7146] ? bpf_trace_run2+0x3db/0x590 [ 159.235568][ T7146] bpf_trace_printk+0xda/0x190 [ 159.235581][ T7146] ? __pfx_bpf_trace_printk+0x10/0x10 [ 159.235597][ T7146] ? bpf_trace_run2+0x3db/0x590 [ 159.235616][ T7146] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 159.235626][ T7146] bpf_trace_run2+0x233/0x590 [ 159.235641][ T7146] ? __pfx_bpf_trace_run2+0x10/0x10 [ 159.235660][ T7146] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 159.235677][ T7146] __bpf_trace_contention_begin+0xc9/0x110 [ 159.235692][ T7146] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 159.235711][ T7146] ? lock_acquire+0x179/0x350 [ 159.235727][ T7146] __traceiter_contention_begin+0x5a/0xa0 [ 159.235743][ T7146] trace_contention_begin+0xc1/0x130 [ 159.235758][ T7146] __mutex_lock+0x1a6/0xb90 [ 159.235769][ T7146] ? __do_sys_io_uring_enter+0xd5f/0x1630 [ 159.235787][ T7146] ? __do_sys_io_uring_enter+0xd5f/0x1630 [ 159.235804][ T7146] ? __pfx___mutex_lock+0x10/0x10 [ 159.235816][ T7146] ? __io_uring_add_tctx_node+0xbd/0x500 [ 159.235832][ T7146] ? __fget_files+0x20e/0x3c0 [ 159.235851][ T7146] ? __do_sys_io_uring_enter+0xd5f/0x1630 [ 159.235867][ T7146] __do_sys_io_uring_enter+0xd5f/0x1630 [ 159.235888][ T7146] ? __fget_files+0x20e/0x3c0 [ 159.235905][ T7146] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 159.235923][ T7146] ? fput+0x70/0xf0 [ 159.235936][ T7146] ? ksys_write+0x1ac/0x250 [ 159.235946][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 159.235957][ T7146] ? rcu_is_watching+0x12/0xc0 [ 159.235970][ T7146] __do_fast_syscall_32+0x7c/0x3a0 [ 159.235983][ T7146] do_fast_syscall_32+0x32/0x80 [ 159.235994][ T7146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.236008][ T7146] RIP: 0023:0xf7f66579 [ 159.236016][ T7146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.236026][ T7146] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 159.236037][ T7146] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000007277 [ 159.236043][ T7146] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000000 [ 159.236049][ T7146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.236054][ T7146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.236060][ T7146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.236073][ T7146] [ 159.241274][ T10] usb 5-1: USB disconnect, device number 2 [ 159.242291][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 159.364869][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 160.186792][ T7187] lo speed is unknown, defaulting to 1000 [ 160.188971][ T7187] lo speed is unknown, defaulting to 1000 [ 160.192293][ T7187] lo speed is unknown, defaulting to 1000 [ 160.197600][ T7187] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.203972][ T7187] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 160.221100][ T7187] lo speed is unknown, defaulting to 1000 [ 160.224944][ T7187] lo speed is unknown, defaulting to 1000 [ 160.227715][ T7187] lo speed is unknown, defaulting to 1000 [ 160.230972][ T7187] lo speed is unknown, defaulting to 1000 [ 160.700192][ T7197] lo speed is unknown, defaulting to 1000 [ 161.402723][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 161.402734][ T40] audit: type=1800 audit(1753647844.246:69): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.288" name="bus" dev="overlay" ino=422 res=0 errno=0 [ 162.403883][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 162.851741][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 164.887639][ T7249] block device autoloading is deprecated and will be removed. [ 164.972050][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.253227][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.306'. [ 165.262619][ T6041] IPVS: starting estimator thread 0... [ 165.348973][ T7261] IPVS: using max 44 ests per chain, 105600 per kthread [ 165.623199][ T7272] 9pnet_fd: Insufficient options for proto=fd [ 165.803909][ T1457] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.948989][ T1457] usb 6-1: Using ep0 maxpacket: 8 [ 165.952292][ T1457] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 165.954877][ T1457] usb 6-1: config 0 has no interface number 0 [ 165.956807][ T1457] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.962676][ T1457] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 165.966402][ T1457] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.970845][ T1457] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.974854][ T1457] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 165.977738][ T1457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.983136][ T1457] usb 6-1: config 0 descriptor?? [ 166.008366][ T1457] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 166.347793][ T24] usb 6-1: USB disconnect, device number 3 [ 166.370086][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 167.272715][ T7303] 9pnet_fd: Insufficient options for proto=fd [ 167.561644][ T7305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 167.563825][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.569623][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 167.590679][ T7306] vhci_hcd: connection closed [ 167.592335][ T12] vhci_hcd: stop threads [ 167.596265][ T12] vhci_hcd: release socket [ 167.598378][ T12] vhci_hcd: disconnect device [ 168.385633][ T73] Bluetooth: hci4: Frame reassembly failed (-84) [ 168.404764][ T7312] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 170.769827][ T5956] Bluetooth: hci0: command 0x0406 tx timeout [ 170.771766][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 170.773181][ T5969] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.773673][ T5316] Bluetooth: hci1: command 0x0406 tx timeout [ 170.777606][ T5969] Bluetooth: hci3: command 0x0406 tx timeout [ 172.022148][ T7328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 172.024480][ T7328] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.027717][ T7328] vhci_hcd vhci_hcd.0: Device attached [ 172.289125][ T6008] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 172.603174][ T7331] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 172.714315][ T1149] vhci_hcd: stop threads [ 172.716140][ T1149] vhci_hcd: release socket [ 172.739403][ T1149] vhci_hcd: disconnect device [ 178.576366][ T7384] FAULT_INJECTION: forcing a failure. [ 178.576366][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.580526][ T7384] CPU: 2 UID: 0 PID: 7384 Comm: syz.2.344 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 178.580541][ T7384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.580548][ T7384] Call Trace: [ 178.580553][ T7384] [ 178.580557][ T7384] dump_stack_lvl+0x16c/0x1f0 [ 178.580572][ T7384] should_fail_ex+0x512/0x640 [ 178.580586][ T7384] _copy_from_user+0x2e/0xd0 [ 178.580599][ T7384] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 178.580621][ T7384] snd_rawmidi_write+0x26e/0xc10 [ 178.580641][ T7384] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 178.580657][ T7384] ? __pfx_default_wake_function+0x10/0x10 [ 178.580670][ T7384] ? bpf_lsm_file_permission+0x9/0x10 [ 178.580684][ T7384] ? security_file_permission+0x71/0x210 [ 178.580701][ T7384] ? rw_verify_area+0xcf/0x680 [ 178.580718][ T7384] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 178.580733][ T7384] vfs_write+0x29d/0x1150 [ 178.580745][ T7384] ? __pfx_vfs_write+0x10/0x10 [ 178.580754][ T7384] ? find_held_lock+0x2b/0x80 [ 178.580765][ T7384] ? __fget_files+0x204/0x3c0 [ 178.580785][ T7384] ? __fget_files+0x20e/0x3c0 [ 178.580805][ T7384] ksys_write+0x1f8/0x250 [ 178.580815][ T7384] ? __pfx_ksys_write+0x10/0x10 [ 178.580826][ T7384] ? rcu_is_watching+0x12/0xc0 [ 178.580840][ T7384] __do_fast_syscall_32+0x7c/0x3a0 [ 178.580852][ T7384] do_fast_syscall_32+0x32/0x80 [ 178.580863][ T7384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.580877][ T7384] RIP: 0023:0xf7f96579 [ 178.580885][ T7384] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.580895][ T7384] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 178.580905][ T7384] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 178.580912][ T7384] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 178.580918][ T7384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.580923][ T7384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.580929][ T7384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.580943][ T7384] [ 178.752290][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 178.846685][ T6008] vhci_hcd: vhci_device speed not set [ 178.919389][ T7382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 178.921449][ T7382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.923951][ T7382] vhci_hcd vhci_hcd.0: Device attached [ 179.064052][ T7388] vhci_hcd: connection closed [ 179.065040][ T46] vhci_hcd: stop threads [ 179.067950][ T46] vhci_hcd: release socket [ 179.069524][ T46] vhci_hcd: disconnect device [ 181.233240][ T1325] libceph: connect (1)[c::]:6789 error -101 [ 181.236090][ T1325] libceph: mon0 (1)[c::]:6789 connect error [ 181.255237][ T7414] ceph: No mds server is up or the cluster is laggy [ 181.704964][ T7414] vxfs: WRONG superblock magic 00000000 at 1 [ 181.708244][ T7414] vxfs: WRONG superblock magic 00000000 at 8 [ 181.712710][ T7414] vxfs: can't find superblock. [ 182.715765][ T7427] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.505332][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.356'. [ 184.509671][ T53] IPVS: starting estimator thread 0... [ 184.561964][ T40] audit: type=1800 audit(1753647867.396:70): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.357" name="file0" dev="9p" ino=35913906 res=0 errno=0 [ 184.599575][ T7431] IPVS: using max 44 ests per chain, 105600 per kthread [ 185.852092][ T7440] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 185.855059][ T7440] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 185.864246][ T7440] 9pnet_fd: Insufficient options for proto=fd [ 186.500716][ T7445] lo speed is unknown, defaulting to 1000 [ 187.370750][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 187.373714][ T7451] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 187.376069][ T7451] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 187.378443][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 187.453372][ T7452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.615620][ T6041] hid (null): unknown global tag 0xe [ 187.618160][ T6041] hid (null): unknown global tag 0xc [ 187.621185][ T6041] hid (null): unknown global tag 0xe [ 187.622856][ T6041] hid (null): unknown global tag 0xe [ 187.626623][ T6041] hid-generic 0005:B18D:0007.0002: unknown global tag 0xe [ 187.634500][ T6041] hid-generic 0005:B18D:0007.0002: item 0 4 1 14 parsing failed [ 187.644212][ T6041] hid-generic 0005:B18D:0007.0002: probe with driver hid-generic failed with error -22 [ 187.944860][ T40] audit: type=1326 audit(1753647870.786:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 187.958714][ T40] audit: type=1326 audit(1753647870.786:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 187.996439][ T40] audit: type=1326 audit(1753647870.836:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.003081][ T40] audit: type=1326 audit(1753647870.836:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.010283][ T40] audit: type=1326 audit(1753647870.856:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.010983][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 188.016819][ T40] audit: type=1326 audit(1753647870.856:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.026971][ T40] audit: type=1326 audit(1753647870.856:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.033841][ T40] audit: type=1326 audit(1753647870.856:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.042027][ T40] audit: type=1326 audit(1753647870.856:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.1.367" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 188.408820][ T7474] FAULT_INJECTION: forcing a failure. [ 188.408820][ T7474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.413055][ T7474] CPU: 3 UID: 0 PID: 7474 Comm: syz.2.370 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 188.413070][ T7474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.413077][ T7474] Call Trace: [ 188.413081][ T7474] [ 188.413091][ T7474] dump_stack_lvl+0x16c/0x1f0 [ 188.413106][ T7474] should_fail_ex+0x512/0x640 [ 188.413120][ T7474] strncpy_from_user+0x3b/0x2e0 [ 188.413139][ T7474] strncpy_from_user_nofault+0x7f/0x180 [ 188.413157][ T7474] bpf_bprintf_prepare+0xede/0x14b0 [ 188.413172][ T7474] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 188.413184][ T7474] ? __pfx_bstr_printf+0x10/0x10 [ 188.413198][ T7474] ? bpf_trace_run2+0x3db/0x590 [ 188.413212][ T7474] bpf_trace_printk+0xda/0x190 [ 188.413225][ T7474] ? __pfx_bpf_trace_printk+0x10/0x10 [ 188.413237][ T7474] ? is_bpf_text_address+0x8a/0x1a0 [ 188.413255][ T7474] ? bpf_trace_run2+0x3db/0x590 [ 188.413274][ T7474] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 188.413283][ T7474] bpf_trace_run2+0x233/0x590 [ 188.413299][ T7474] ? __pfx_bpf_trace_run2+0x10/0x10 [ 188.413318][ T7474] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 188.413334][ T7474] __bpf_trace_contention_begin+0xc9/0x110 [ 188.413350][ T7474] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 188.413368][ T7474] ? lock_acquire+0x179/0x350 [ 188.413385][ T7474] __traceiter_contention_begin+0x5a/0xa0 [ 188.413401][ T7474] trace_contention_begin+0xc1/0x130 [ 188.413416][ T7474] __mutex_lock+0x1a6/0xb90 [ 188.413427][ T7474] ? rtnl_newlink+0x600/0x2000 [ 188.413439][ T7474] ? __pfx_aa_get_newest_label+0x10/0x10 [ 188.413455][ T7474] ? rcu_is_watching+0x12/0xc0 [ 188.413465][ T7474] ? rtnl_newlink+0x600/0x2000 [ 188.413478][ T7474] ? __pfx___mutex_lock+0x10/0x10 [ 188.413493][ T7474] ? ns_capable+0xd7/0x110 [ 188.413507][ T7474] ? rtnl_newlink+0x600/0x2000 [ 188.413518][ T7474] rtnl_newlink+0x600/0x2000 [ 188.413534][ T7474] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.413548][ T7474] ? kmem_cache_free+0x2d1/0x4d0 [ 188.413558][ T7474] ? kfree_skbmem+0x1a4/0x1f0 [ 188.413581][ T7474] ? rcu_is_watching+0x12/0xc0 [ 188.413592][ T7474] ? trace_cap_capable+0x18d/0x200 [ 188.413613][ T7474] ? find_held_lock+0x2b/0x80 [ 188.413624][ T7474] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.413635][ T7474] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.413646][ T7474] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 188.413658][ T7474] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.413671][ T7474] rtnetlink_rcv_msg+0x95b/0xe90 [ 188.413684][ T7474] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.413701][ T7474] ? ref_tracker_free+0x37c/0x830 [ 188.413714][ T7474] netlink_rcv_skb+0x158/0x420 [ 188.413728][ T7474] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.413741][ T7474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.413759][ T7474] ? netlink_deliver_tap+0x1ae/0xd30 [ 188.413775][ T7474] netlink_unicast+0x58a/0x850 [ 188.413790][ T7474] ? __pfx_netlink_unicast+0x10/0x10 [ 188.413807][ T7474] netlink_sendmsg+0x8d1/0xdd0 [ 188.413822][ T7474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.413837][ T7474] ? __import_iovec+0x1dd/0x650 [ 188.413852][ T7474] ____sys_sendmsg+0xa95/0xc70 [ 188.413869][ T7474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.413882][ T7474] ? get_compat_msghdr+0x11a/0x170 [ 188.413900][ T7474] ___sys_sendmsg+0x134/0x1d0 [ 188.413913][ T7474] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.413931][ T7474] ? find_held_lock+0x2b/0x80 [ 188.413950][ T7474] __sys_sendmsg+0x16d/0x220 [ 188.413962][ T7474] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.413979][ T7474] ? rcu_is_watching+0x12/0xc0 [ 188.413992][ T7474] __do_fast_syscall_32+0x7c/0x3a0 [ 188.414005][ T7474] do_fast_syscall_32+0x32/0x80 [ 188.414016][ T7474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.414030][ T7474] RIP: 0023:0xf7f96579 [ 188.414039][ T7474] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.414049][ T7474] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 188.414058][ T7474] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 188.414065][ T7474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.414070][ T7474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.414076][ T7474] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.414082][ T7474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.414095][ T7474] [ 188.733003][ T7479] fuse: Bad value for 'user_id' [ 188.734703][ T7479] fuse: Bad value for 'user_id' [ 189.709971][ T7488] netlink: 72 bytes leftover after parsing attributes in process `syz.2.375'. [ 190.998901][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 191.002309][ T7500] bridge_slave_1: left allmulticast mode [ 191.004430][ T7500] bridge_slave_1: left promiscuous mode [ 191.007713][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.146455][ T7500] bridge_slave_0: left allmulticast mode [ 191.149165][ T7500] bridge_slave_0: left promiscuous mode [ 191.151616][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.441871][ T5967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.446084][ T5967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.452735][ T5967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.456593][ T5967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.461736][ T5967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.595770][ T7509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.626611][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 191.639666][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 191.640481][ T7504] lo speed is unknown, defaulting to 1000 [ 191.690478][ T7509] vlan2: entered allmulticast mode [ 191.714132][ T7511] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 191.743496][ T7513] lo speed is unknown, defaulting to 1000 [ 191.846541][ T7504] chnl_net:caif_netlink_parms(): no params data found [ 192.219149][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.221531][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.224349][ T7504] bridge_slave_0: entered allmulticast mode [ 192.226999][ T7504] bridge_slave_0: entered promiscuous mode [ 192.234806][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.237130][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.239563][ T7504] bridge_slave_1: entered allmulticast mode [ 192.242192][ T7504] bridge_slave_1: entered promiscuous mode [ 192.293606][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.296326][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.305912][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.315349][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.369999][ T7504] team0: Port device team_slave_0 added [ 192.375579][ T7504] team0: Port device team_slave_1 added [ 192.420453][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.423035][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.431983][ T7504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.437396][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.439903][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.447562][ T7504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.542813][ T7504] hsr_slave_0: entered promiscuous mode [ 192.546277][ T7504] hsr_slave_1: entered promiscuous mode [ 192.548840][ T7504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.551954][ T7504] Cannot create hsr debugfs directory [ 193.116164][ T7504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.171773][ T7504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.196461][ T7504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.201356][ T7545] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 193.235589][ T7504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.549018][ T63] Bluetooth: hci4: command tx timeout [ 193.702748][ T7504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.727284][ T7504] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.734660][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.737543][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.769306][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.771608][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.781918][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.783909][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.833303][ T7504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.155071][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.339058][ T5967] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.633351][ T7504] veth0_vlan: entered promiscuous mode [ 194.673115][ T7504] veth1_vlan: entered promiscuous mode [ 194.740848][ T7504] veth0_macvtap: entered promiscuous mode [ 194.752465][ T7504] veth1_macvtap: entered promiscuous mode [ 194.779659][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.817527][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.822750][ T7504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.850968][ T7504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.869996][ T7504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.872762][ T7504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.974297][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.976742][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.020855][ T7580] XFS (nullb0): Invalid superblock magic number [ 195.029470][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.038044][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.122617][ T7580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.619840][ T63] Bluetooth: hci4: command tx timeout [ 196.040798][ T7595] fuse: Unknown parameter 'grou' [ 196.258781][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 196.258791][ T40] audit: type=1326 audit(1753647879.096:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.2.401" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 196.293215][ T7601] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 196.296808][ T7601] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 196.302246][ T7601] 9pnet_fd: Insufficient options for proto=fd [ 196.598517][ T7617] FAULT_INJECTION: forcing a failure. [ 196.598517][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 196.611889][ T7617] CPU: 3 UID: 0 PID: 7617 Comm: syz.1.407 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 196.611906][ T7617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.611913][ T7617] Call Trace: [ 196.611917][ T7617] [ 196.611921][ T7617] dump_stack_lvl+0x16c/0x1f0 [ 196.611937][ T7617] should_fail_ex+0x512/0x640 [ 196.611948][ T7617] ? __kmalloc_noprof+0xbf/0x510 [ 196.611960][ T7617] ? video_usercopy+0x139/0x1440 [ 196.611970][ T7617] should_failslab+0xc2/0x120 [ 196.611983][ T7617] __kmalloc_noprof+0xd2/0x510 [ 196.611996][ T7617] video_usercopy+0x139/0x1440 [ 196.612008][ T7617] ? __pfx___video_do_ioctl+0x10/0x10 [ 196.612019][ T7617] ? __pfx_video_usercopy+0x10/0x10 [ 196.612035][ T7617] ? hook_file_ioctl_common+0x145/0x410 [ 196.612070][ T7617] v4l2_ioctl+0x1bd/0x250 [ 196.612082][ T7617] ? __pfx_fput+0x1/0x10 [ 196.612096][ T7617] v4l2_compat_ioctl32+0x214/0x2c0 [ 196.612112][ T7617] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 196.612128][ T7617] __ia32_compat_sys_ioctl+0x23f/0x370 [ 196.612145][ T7617] __do_fast_syscall_32+0x7c/0x3a0 [ 196.612158][ T7617] do_fast_syscall_32+0x32/0x80 [ 196.612170][ T7617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.612183][ T7617] RIP: 0023:0xf7f75579 [ 196.612191][ T7617] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 196.612202][ T7617] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 196.612212][ T7617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5605 [ 196.612219][ T7617] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.612225][ T7617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.612230][ T7617] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 196.612236][ T7617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.612249][ T7617] [ 196.688323][ T7617] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 196.691876][ T7617] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 196.740383][ T7619] 9pnet_fd: Insufficient options for proto=fd [ 197.208682][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 197.358903][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 197.400508][ T53] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 197.404187][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.407510][ T53] usb 6-1: Product: syz [ 197.422136][ T53] usb 6-1: Manufacturer: syz [ 197.424137][ T53] usb 6-1: SerialNumber: syz [ 197.442348][ T53] usb 6-1: config 0 descriptor?? [ 197.513052][ T7629] fuse: Unknown parameter 'grou' [ 197.670659][ T53] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 197.673282][ T53] peak_usb 6-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 197.708878][ T63] Bluetooth: hci4: command tx timeout [ 197.759921][ T53] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 197.783227][ T53] usb 6-1: USB disconnect, device number 4 [ 198.390786][ T7637] netlink: 3 bytes leftover after parsing attributes in process `syz.2.412'. [ 198.420865][ T7637] batadv1: entered promiscuous mode [ 198.422577][ T7637] batadv1: entered allmulticast mode [ 198.671211][ T7645] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 198.681854][ T40] audit: type=1804 audit(1753647881.516:83): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.415" name="/newroot/7/file0" dev="tmpfs" ino=55 res=1 errno=0 [ 198.688931][ T7645] ref_ctr increment failed for inode: 0x37 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888013afbc00 [ 198.984690][ T7647] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 198.987211][ T7647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.998774][ T7647] vhci_hcd vhci_hcd.0: Device attached [ 199.468767][ T6008] usb 40-1: SetAddress Request (2) to port 0 [ 199.470895][ T6008] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 199.493237][ T7648] vhci_hcd: connection closed [ 199.499989][ T7649] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 199.534829][ T7659] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 199.778672][ T5967] Bluetooth: hci4: command tx timeout [ 199.792749][ T13] vhci_hcd: stop threads [ 199.794185][ T13] vhci_hcd: release socket [ 199.795739][ T13] vhci_hcd: disconnect device [ 201.538764][ T5967] Bluetooth: hci5: command 0x1003 tx timeout [ 201.676326][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.042548][ T7671] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 204.019732][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 204.023437][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 204.028127][ T7693] batadv_slave_1: entered promiscuous mode [ 204.033022][ T7694] 9pnet_fd: Insufficient options for proto=fd [ 204.229196][ T7693] batadv_slave_1: left promiscuous mode [ 204.579139][ T6008] usb 40-1: device descriptor read/8, error -110 [ 204.970979][ T6008] usb usb40-port1: attempt power cycle [ 205.689708][ T6008] usb usb40-port1: unable to enumerate USB device [ 206.610251][ T7724] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 207.681940][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 207.686768][ T7731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'. [ 207.784762][ T7732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.641660][ T7775] tipc: Started in network mode [ 210.643901][ T7775] tipc: Node identity ac1414aa, cluster identity 4711 [ 210.649283][ T7775] tipc: Enabled bearer , priority 10 [ 211.422572][ T7787] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 211.609754][ T7789] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 211.695256][ T7791] FAULT_INJECTION: forcing a failure. [ 211.695256][ T7791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.699616][ T7791] CPU: 1 UID: 0 PID: 7791 Comm: syz.2.462 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 211.699632][ T7791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.699639][ T7791] Call Trace: [ 211.699642][ T7791] [ 211.699646][ T7791] dump_stack_lvl+0x16c/0x1f0 [ 211.699725][ T7791] should_fail_ex+0x512/0x640 [ 211.699757][ T7791] strncpy_from_user+0x3b/0x2e0 [ 211.699776][ T7791] strncpy_from_user_nofault+0x7f/0x180 [ 211.699790][ T7791] bpf_bprintf_prepare+0xede/0x14b0 [ 211.699805][ T7791] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 211.699817][ T7791] ? __pfx_bstr_printf+0x10/0x10 [ 211.699826][ T7791] ? __lock_acquire+0xb8a/0x1c90 [ 211.699844][ T7791] ? bpf_trace_run2+0x3db/0x590 [ 211.699859][ T7791] bpf_trace_printk+0xda/0x190 [ 211.699872][ T7791] ? __pfx_bpf_trace_printk+0x10/0x10 [ 211.699887][ T7791] ? bpf_trace_run2+0x3db/0x590 [ 211.699906][ T7791] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 211.699916][ T7791] bpf_trace_run2+0x233/0x590 [ 211.699957][ T7791] ? __pfx_bpf_trace_run2+0x10/0x10 [ 211.699973][ T7791] ? kasan_save_stack+0x33/0x60 [ 211.699983][ T7791] ? kasan_save_track+0x14/0x30 [ 211.699994][ T7791] ? fifo_open+0x25e/0xb30 [ 211.700007][ T7791] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 211.700022][ T7791] __bpf_trace_contention_begin+0xc9/0x110 [ 211.700038][ T7791] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 211.700056][ T7791] ? lock_acquire+0x179/0x350 [ 211.700072][ T7791] __traceiter_contention_begin+0x5a/0xa0 [ 211.700088][ T7791] trace_contention_begin+0xc1/0x130 [ 211.700103][ T7791] __mutex_lock+0x1a6/0xb90 [ 211.700113][ T7791] ? fifo_open+0x13a/0xb30 [ 211.700124][ T7791] ? __lock_acquire+0xb8a/0x1c90 [ 211.700142][ T7791] ? fifo_open+0x13a/0xb30 [ 211.700154][ T7791] ? __pfx___mutex_lock+0x10/0x10 [ 211.700168][ T7791] ? find_held_lock+0x2b/0x80 [ 211.700179][ T7791] ? fifo_open+0x2f3/0xb30 [ 211.700192][ T7791] ? fifo_open+0x13a/0xb30 [ 211.700202][ T7791] fifo_open+0x13a/0xb30 [ 211.700212][ T7791] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 211.700231][ T7791] do_dentry_open+0x744/0x1c10 [ 211.700243][ T7791] ? __pfx_fifo_open+0x10/0x10 [ 211.700257][ T7791] vfs_open+0x82/0x3f0 [ 211.700272][ T7791] path_openat+0x1de4/0x2cb0 [ 211.700287][ T7791] ? __pfx_path_openat+0x10/0x10 [ 211.700301][ T7791] do_filp_open+0x20b/0x470 [ 211.700311][ T7791] ? __pfx_do_filp_open+0x10/0x10 [ 211.700331][ T7791] ? _raw_spin_unlock+0x28/0x50 [ 211.700346][ T7791] ? alloc_fd+0x471/0x7d0 [ 211.700366][ T7791] do_sys_openat2+0x11b/0x1d0 [ 211.700380][ T7791] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.700395][ T7791] ? __fget_files+0x20e/0x3c0 [ 211.700410][ T7791] ? handle_mm_fault+0x230/0xd10 [ 211.700428][ T7791] __ia32_compat_sys_openat+0x16d/0x210 [ 211.700444][ T7791] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 211.700458][ T7791] ? ksys_write+0x1ac/0x250 [ 211.700470][ T7791] ? rcu_is_watching+0x12/0xc0 [ 211.700483][ T7791] __do_fast_syscall_32+0x7c/0x3a0 [ 211.700496][ T7791] do_fast_syscall_32+0x32/0x80 [ 211.700507][ T7791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.700520][ T7791] RIP: 0023:0xf7f96579 [ 211.700528][ T7791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.700538][ T7791] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 211.700548][ T7791] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 211.700554][ T7791] RDX: 0000000000024c01 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.700560][ T7791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.700566][ T7791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.700572][ T7791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.700585][ T7791] [ 211.826727][ T5995] tipc: Node number set to 2886997162 [ 212.173008][ T7785] overlayfs: statfs failed on './file0' [ 212.563239][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 212.631168][ T7802] capability: warning: `syz.1.466' uses deprecated v2 capabilities in a way that may be insecure [ 213.287647][ T7811] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 213.443479][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 213.446499][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 216.023022][ T7847] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 217.700305][ T7866] FAULT_INJECTION: forcing a failure. [ 217.700305][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.704943][ T7866] CPU: 3 UID: 0 PID: 7866 Comm: syz.3.486 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 217.704958][ T7866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.704964][ T7866] Call Trace: [ 217.704968][ T7866] [ 217.704973][ T7866] dump_stack_lvl+0x16c/0x1f0 [ 217.705058][ T7866] should_fail_ex+0x512/0x640 [ 217.705091][ T7866] strncpy_from_user+0x3b/0x2e0 [ 217.705109][ T7866] strncpy_from_user_nofault+0x7f/0x180 [ 217.705123][ T7866] bpf_bprintf_prepare+0xede/0x14b0 [ 217.705139][ T7866] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 217.705150][ T7866] ? __pfx_bstr_printf+0x10/0x10 [ 217.705164][ T7866] ? bpf_trace_run2+0x3db/0x590 [ 217.705178][ T7866] bpf_trace_printk+0xda/0x190 [ 217.705191][ T7866] ? __pfx_bpf_trace_printk+0x10/0x10 [ 217.705207][ T7866] ? bpf_trace_run2+0x3db/0x590 [ 217.705226][ T7866] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 217.705236][ T7866] bpf_trace_run2+0x233/0x590 [ 217.705251][ T7866] ? __pfx_bpf_trace_run2+0x10/0x10 [ 217.705265][ T7866] ? kernel_text_address+0x8d/0x100 [ 217.705283][ T7866] ? __kernel_text_address+0xd/0x40 [ 217.705301][ T7866] ? arch_stack_walk+0xa6/0x100 [ 217.705313][ T7866] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 217.705329][ T7866] __bpf_trace_contention_begin+0xc9/0x110 [ 217.705344][ T7866] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 217.705367][ T7866] ? lock_acquire+0x179/0x350 [ 217.705383][ T7866] __traceiter_contention_begin+0x5a/0xa0 [ 217.705399][ T7866] trace_contention_begin+0xc1/0x130 [ 217.705414][ T7866] __mutex_lock+0x1a6/0xb90 [ 217.705424][ T7866] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 217.705436][ T7866] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 217.705446][ T7866] ? __pfx___mutex_lock+0x10/0x10 [ 217.705457][ T7866] ? find_held_lock+0x2b/0x80 [ 217.705471][ T7866] ? consume_obj_stock+0x203/0x380 [ 217.705490][ T7866] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 217.705499][ T7866] pcpu_alloc_noprof+0xb4c/0x1470 [ 217.705512][ T7866] ? kasan_save_track+0x14/0x30 [ 217.705524][ T7866] bpf_prog_alloc_no_stats+0x152/0x5c0 [ 217.705541][ T7866] bpf_prog_alloc+0x3b/0x230 [ 217.705553][ T7866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.705571][ T7866] bpf_prog_load+0x1a04/0x2490 [ 217.705590][ T7866] ? __pfx_bpf_prog_load+0x10/0x10 [ 217.705621][ T7866] __sys_bpf+0x4d1a/0x4ea0 [ 217.705637][ T7866] ? __pfx___sys_bpf+0x10/0x10 [ 217.705651][ T7866] ? ksys_write+0x190/0x250 [ 217.705669][ T7866] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 217.705693][ T7866] ? fput+0x70/0xf0 [ 217.705705][ T7866] ? ksys_write+0x1ac/0x250 [ 217.705715][ T7866] ? __pfx_ksys_write+0x10/0x10 [ 217.705727][ T7866] __ia32_sys_bpf+0x76/0xe0 [ 217.705738][ T7866] __do_fast_syscall_32+0x7c/0x3a0 [ 217.705750][ T7866] do_fast_syscall_32+0x32/0x80 [ 217.705762][ T7866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.705775][ T7866] RIP: 0023:0xf70fe579 [ 217.705784][ T7866] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.705794][ T7866] RSP: 002b:00000000f50cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 217.705804][ T7866] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 217.705811][ T7866] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.705817][ T7866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.705822][ T7866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.705828][ T7866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.705841][ T7866] [ 218.879465][ T7884] netlink: 'syz.3.490': attribute type 17 has an invalid length. [ 219.594982][ T215] Bluetooth: hci5: Frame reassembly failed (-84) [ 219.872124][ T7910] binder: BINDER_SET_CONTEXT_MGR already set [ 219.874842][ T7910] binder: 7909:7910 ioctl 4018620d 80000040 returned -16 [ 219.879611][ T7910] binder: 7909:7910 ioctl c0306201 80000240 returned -11 [ 220.226361][ T7926] binder_alloc: 7923: binder_alloc_buf, no vma [ 220.461041][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 220.464037][ T7934] netlink: 'syz.4.505': attribute type 2 has an invalid length. [ 220.466601][ T7934] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 220.471417][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 220.531574][ T7937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.437047][ T40] audit: type=1326 audit(1753647904.276:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.461709][ T40] audit: type=1326 audit(1753647904.276:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.488698][ T40] audit: type=1326 audit(1753647904.286:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.500424][ T40] audit: type=1326 audit(1753647904.286:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.590608][ T40] audit: type=1326 audit(1753647904.286:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.600745][ T40] audit: type=1326 audit(1753647904.286:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.610057][ T40] audit: type=1326 audit(1753647904.286:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.617324][ T40] audit: type=1326 audit(1753647904.286:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.624564][ T5967] Bluetooth: hci5: command 0x1003 tx timeout [ 221.628779][ T40] audit: type=1326 audit(1753647904.286:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.628835][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 221.635422][ T40] audit: type=1326 audit(1753647904.286:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.4.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 221.778687][ T63] Bluetooth: hci4: command tx timeout [ 221.945574][ T7966] binder_alloc: 7965: binder_alloc_buf size 12312 failed, no address space [ 221.948795][ T7966] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 222.612868][ T7986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.651147][ T7986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.518'. [ 222.772839][ T1144] Bluetooth: hci5: Frame reassembly failed (-84) [ 224.818759][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.558718][ T1457] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 225.708698][ T1457] usb 8-1: Using ep0 maxpacket: 32 [ 225.719907][ T1457] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.723266][ T1457] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.726250][ T1457] usb 8-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 225.738648][ T1457] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 225.741462][ T1457] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.434779][ T1457] usbhid 8-1:32.0: can't add hid device: -71 [ 226.436765][ T1457] usbhid 8-1:32.0: probe with driver usbhid failed with error -71 [ 226.489283][ T1457] usb 8-1: USB disconnect, device number 2 [ 226.623588][ T8010] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 226.679409][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.274773][ T8028] vlan1: entered promiscuous mode [ 227.276776][ T8028] vlan1: entered allmulticast mode [ 227.278522][ T8028] veth0_vlan: entered allmulticast mode [ 229.790679][ T8068] fuse: Unknown parameter 'g' [ 232.502685][ T8101] tmpfs: Unknown parameter 'grpquota 0 [ 232.502685][ T8101] ' [ 232.889006][ T8106] FAULT_INJECTION: forcing a failure. [ 232.889006][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 232.917039][ T8106] CPU: 3 UID: 0 PID: 8106 Comm: syz.2.560 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 232.917067][ T8106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.917076][ T8106] Call Trace: [ 232.917082][ T8106] [ 232.917089][ T8106] dump_stack_lvl+0x16c/0x1f0 [ 232.917112][ T8106] should_fail_ex+0x512/0x640 [ 232.917131][ T8106] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 232.917154][ T8106] should_failslab+0xc2/0x120 [ 232.917176][ T8106] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 232.917194][ T8106] ? __alloc_skb+0x2b2/0x380 [ 232.917216][ T8106] __alloc_skb+0x2b2/0x380 [ 232.917234][ T8106] ? __pfx___alloc_skb+0x10/0x10 [ 232.917254][ T8106] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 232.917281][ T8106] netlink_alloc_large_skb+0x69/0x130 [ 232.917305][ T8106] netlink_sendmsg+0x6a1/0xdd0 [ 232.917332][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.917365][ T8106] sock_write_iter+0x4ff/0x5b0 [ 232.917390][ T8106] ? __pfx_sock_write_iter+0x10/0x10 [ 232.917426][ T8106] ? __lock_acquire+0x622/0x1c90 [ 232.917454][ T8106] do_iter_readv_writev+0x657/0x950 [ 232.917483][ T8106] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 232.917514][ T8106] ? bpf_lsm_file_permission+0x9/0x10 [ 232.917537][ T8106] ? security_file_permission+0x71/0x210 [ 232.917564][ T8106] ? rw_verify_area+0xcf/0x680 [ 232.917592][ T8106] vfs_writev+0x35f/0xde0 [ 232.917626][ T8106] ? __pfx_vfs_writev+0x10/0x10 [ 232.917652][ T8106] ? find_held_lock+0x2b/0x80 [ 232.917686][ T8106] ? __fget_files+0x20e/0x3c0 [ 232.917712][ T8106] ? __fget_files+0x1b0/0x3c0 [ 232.917744][ T8106] ? do_writev+0x28c/0x340 [ 232.917768][ T8106] do_writev+0x28c/0x340 [ 232.917794][ T8106] ? __pfx_do_writev+0x10/0x10 [ 232.917822][ T8106] ? rcu_is_watching+0x12/0xc0 [ 232.917845][ T8106] __do_fast_syscall_32+0x7c/0x3a0 [ 232.917867][ T8106] do_fast_syscall_32+0x32/0x80 [ 232.917885][ T8106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.917907][ T8106] RIP: 0023:0xf7f96579 [ 232.917920][ T8106] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.917936][ T8106] RSP: 002b:00000000f509555c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 232.917954][ T8106] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 232.917970][ T8106] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.917979][ T8106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.917989][ T8106] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 232.917999][ T8106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.918024][ T8106] [ 233.599277][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 233.649946][ T8121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.996158][ T8134] lo speed is unknown, defaulting to 1000 [ 235.000184][ T8146] openvswitch: netlink: Flow key attr not present in new flow. [ 235.524101][ T8160] tmpfs: Unknown parameter 'grpquota 0 [ 235.524101][ T8160] ' [ 235.781213][ T8168] 9pnet: Could not find request transport: fd0x0000000000000004 [ 235.951846][ T8175] overlayfs: missing 'lowerdir' [ 235.973122][ T8176] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 235.975213][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.982791][ T8176] vhci_hcd vhci_hcd.0: Device attached [ 236.249070][ T1457] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 236.454659][ T8182] FAULT_INJECTION: forcing a failure. [ 236.454659][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 236.474867][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 236.474877][ T40] audit: type=1804 audit(1753647919.296:97): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.580" name="/newroot/121/file0" dev="tmpfs" ino=673 res=1 errno=0 [ 236.489398][ T8182] CPU: 3 UID: 0 PID: 8182 Comm: syz.3.580 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 236.489415][ T8182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.489422][ T8182] Call Trace: [ 236.489425][ T8182] [ 236.489430][ T8182] dump_stack_lvl+0x16c/0x1f0 [ 236.489459][ T8182] should_fail_ex+0x512/0x640 [ 236.489476][ T8182] ? fs_reclaim_acquire+0xae/0x150 [ 236.489493][ T8182] should_failslab+0xc2/0x120 [ 236.489506][ T8182] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 236.489519][ T8182] ? ima_alloc_tfm+0x21a/0x2e0 [ 236.489530][ T8182] ? ima_collect_measurement+0x4b5/0xa40 [ 236.489546][ T8182] krealloc_noprof+0x1fc/0x370 [ 236.489558][ T8182] ima_collect_measurement+0x4b5/0xa40 [ 236.489576][ T8182] ? __pfx_ima_collect_measurement+0x10/0x10 [ 236.489600][ T8182] ? do_raw_read_unlock+0x44/0xe0 [ 236.489611][ T8182] ? _raw_read_unlock+0x28/0x50 [ 236.489630][ T8182] ? vfs_getxattr_alloc+0xec/0x340 [ 236.489651][ T8182] ? ima_get_hash_algo+0x27c/0x400 [ 236.489661][ T8182] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 236.489674][ T8182] ? process_measurement+0x11fa/0x23e0 [ 236.489685][ T8182] process_measurement+0x11fa/0x23e0 [ 236.489701][ T8182] ? __pfx_process_measurement+0x10/0x10 [ 236.489731][ T8182] ? get_pid_task+0x106/0x250 [ 236.489746][ T8182] ? proc_fail_nth_write+0x9f/0x250 [ 236.489762][ T8182] ? find_held_lock+0x2b/0x80 [ 236.489775][ T8182] ima_file_mmap+0x1b1/0x1d0 [ 236.489786][ T8182] ? __pfx_ima_file_mmap+0x10/0x10 [ 236.489797][ T8182] ? __lock_acquire+0x622/0x1c90 [ 236.489814][ T8182] security_mmap_file+0x88c/0x990 [ 236.489832][ T8182] vm_mmap_pgoff+0xec/0x450 [ 236.489846][ T8182] ? find_held_lock+0x2b/0x80 [ 236.489857][ T8182] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 236.489872][ T8182] ? __fget_files+0x20e/0x3c0 [ 236.489892][ T8182] ksys_mmap_pgoff+0x32c/0x5c0 [ 236.489906][ T8182] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 236.489922][ T8182] __do_fast_syscall_32+0x7c/0x3a0 [ 236.489935][ T8182] do_fast_syscall_32+0x32/0x80 [ 236.489946][ T8182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.489959][ T8182] RIP: 0023:0xf70fe579 [ 236.489968][ T8182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 236.489978][ T8182] RSP: 002b:00000000f50ee55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 236.489989][ T8182] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000002000 [ 236.489995][ T8182] RDX: 000000000000001f RSI: 0000000000000012 RDI: 0000000000000004 [ 236.490001][ T8182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.490007][ T8182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 236.490013][ T8182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.490026][ T8182] [ 236.508714][ T40] audit: type=1800 audit(1753647919.336:98): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.580" name="file0" dev="tmpfs" ino=673 res=0 errno=0 [ 236.744438][ T8177] vhci_hcd: connection reset by peer [ 236.756563][ T215] vhci_hcd: stop threads [ 236.757970][ T215] vhci_hcd: release socket [ 236.771571][ T215] vhci_hcd: disconnect device [ 237.961302][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.039988][ T8199] 9pnet: Could not find request transport: fd0x0000000000000004 [ 238.130230][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.206330][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.339966][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.672865][ T13] bridge_slave_1: left allmulticast mode [ 238.674881][ T13] bridge_slave_1: left promiscuous mode [ 238.677691][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.682999][ T6041] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 238.692092][ T13] bridge_slave_0: left allmulticast mode [ 238.694014][ T13] bridge_slave_0: left promiscuous mode [ 238.696723][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.852495][ T6041] usb 7-1: config 0 has no interfaces? [ 238.891764][ T6041] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=e7.40 [ 238.904068][ T6041] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 238.914139][ T6041] usb 7-1: Product: syz [ 238.919841][ T6041] usb 7-1: SerialNumber: syz [ 238.940671][ T6041] usb 7-1: config 0 descriptor?? [ 239.545200][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.550226][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.560423][ T13] bond0 (unregistering): Released all slaves [ 240.035619][ T13] hsr_slave_0: left promiscuous mode [ 240.038218][ T13] hsr_slave_1: left promiscuous mode [ 240.042026][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.047018][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.099493][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.104222][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.116580][ T5995] usb 7-1: USB disconnect, device number 2 [ 240.154916][ T13] veth1_macvtap: left promiscuous mode [ 240.156926][ T13] veth0_macvtap: left promiscuous mode [ 240.158957][ T13] veth1_vlan: left promiscuous mode [ 240.160909][ T13] veth0_vlan: left promiscuous mode [ 240.916447][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 241.380140][ T1457] vhci_hcd: vhci_device speed not set [ 243.564043][ T13] team0 (unregistering): Port device team_slave_1 removed [ 243.791172][ T13] team0 (unregistering): Port device team_slave_0 removed [ 244.026529][ T215] Bluetooth: hci3: Frame reassembly failed (-84) [ 244.095866][ T8255] fuse: Bad value for 'fd' [ 244.403873][ T8242] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 244.406847][ T8242] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 244.409971][ T8242] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 245.360452][ T40] audit: type=1804 audit(1753647928.206:99): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.604" name="/newroot/167/file0" dev="tmpfs" ino=925 res=1 errno=0 [ 245.443344][ T8300] kvm: kvm [8296]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0xffffffff00000000 [ 245.508085][ T8314] FAULT_INJECTION: forcing a failure. [ 245.508085][ T8314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.514166][ T8314] CPU: 3 UID: 0 PID: 8314 Comm: syz.1.609 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 245.514188][ T8314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.514199][ T8314] Call Trace: [ 245.514205][ T8314] [ 245.514212][ T8314] dump_stack_lvl+0x16c/0x1f0 [ 245.514234][ T8314] should_fail_ex+0x512/0x640 [ 245.514256][ T8314] strncpy_from_user+0x3b/0x2e0 [ 245.514287][ T8314] strncpy_from_user_nofault+0x7f/0x180 [ 245.514310][ T8314] bpf_bprintf_prepare+0xede/0x14b0 [ 245.514337][ T8314] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 245.514365][ T8314] ? bpf_trace_run2+0x3db/0x590 [ 245.514389][ T8314] bpf_trace_printk+0xda/0x190 [ 245.514410][ T8314] ? __pfx_bpf_trace_printk+0x10/0x10 [ 245.514437][ T8314] ? bpf_trace_run2+0x3db/0x590 [ 245.514470][ T8314] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 245.514486][ T8314] bpf_trace_run2+0x233/0x590 [ 245.514510][ T8314] ? __pfx_bpf_trace_run2+0x10/0x10 [ 245.514534][ T8314] ? __pfx_bstr_printf+0x10/0x10 [ 245.514558][ T8314] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 245.514588][ T8314] __bpf_trace_contention_begin+0xc9/0x110 [ 245.514612][ T8314] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 245.514643][ T8314] ? lock_acquire+0x179/0x350 [ 245.514674][ T8314] __traceiter_contention_begin+0x5a/0xa0 [ 245.514700][ T8314] trace_contention_begin+0xc1/0x130 [ 245.514725][ T8314] __mutex_lock+0x1a6/0xb90 [ 245.514741][ T8314] ? comedi_device_attach+0xd3/0x900 [ 245.514763][ T8314] ? comedi_device_attach+0xd3/0x900 [ 245.514778][ T8314] ? __lock_acquire+0xb8a/0x1c90 [ 245.514801][ T8314] ? __pfx___mutex_lock+0x10/0x10 [ 245.514836][ T8314] ? comedi_device_attach+0xd3/0x900 [ 245.514857][ T8314] comedi_device_attach+0xd3/0x900 [ 245.514882][ T8314] do_devconfig_ioctl+0x1a7/0x580 [ 245.514905][ T8314] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 245.514940][ T8314] ? kasan_save_stack+0x42/0x60 [ 245.514956][ T8314] ? kasan_save_stack+0x33/0x60 [ 245.514972][ T8314] ? kasan_save_track+0x14/0x30 [ 245.514988][ T8314] ? kasan_save_free_info+0x3b/0x60 [ 245.515011][ T8314] ? __kasan_slab_free+0x51/0x70 [ 245.515027][ T8314] ? kfree+0x2b4/0x4d0 [ 245.515050][ T8314] ? tomoyo_path_number_perm+0x470/0x580 [ 245.515081][ T8314] comedi_unlocked_ioctl+0x165d/0x2f00 [ 245.515115][ T8314] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 245.515158][ T8314] ? kasan_quarantine_put+0x10a/0x240 [ 245.515175][ T8314] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.515195][ T8314] ? find_held_lock+0x2b/0x80 [ 245.515213][ T8314] ? tomoyo_path_number_perm+0x295/0x580 [ 245.515242][ T8314] ? tomoyo_path_number_perm+0x18d/0x580 [ 245.515269][ T8314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.515298][ T8314] comedi_compat_ioctl+0x1d0/0x990 [ 245.515323][ T8314] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 245.515369][ T8314] ? find_held_lock+0x2b/0x80 [ 245.515386][ T8314] ? hook_file_ioctl_common+0x145/0x410 [ 245.515415][ T8314] ? __fget_files+0x20e/0x3c0 [ 245.515441][ T8314] ? __fput_deferred+0x480/0x480 [ 245.515466][ T8314] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 245.515493][ T8314] __ia32_compat_sys_ioctl+0x23f/0x370 [ 245.515521][ T8314] __do_fast_syscall_32+0x7c/0x3a0 [ 245.515542][ T8314] do_fast_syscall_32+0x32/0x80 [ 245.515560][ T8314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.515581][ T8314] RIP: 0023:0xf7f75579 [ 245.515594][ T8314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.515634][ T8314] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 245.515651][ T8314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 245.515662][ T8314] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.515672][ T8314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.515682][ T8314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.515692][ T8314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.515716][ T8314] [ 245.652663][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.099278][ T5967] Bluetooth: hci3: command 0x1003 tx timeout [ 246.099297][ T63] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 248.108508][ T8374] FAULT_INJECTION: forcing a failure. [ 248.108508][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 248.118442][ T8374] CPU: 3 UID: 0 PID: 8374 Comm: syz.2.616 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 248.118470][ T8374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.118477][ T8374] Call Trace: [ 248.118481][ T8374] [ 248.118486][ T8374] dump_stack_lvl+0x16c/0x1f0 [ 248.118501][ T8374] should_fail_ex+0x512/0x640 [ 248.118512][ T8374] ? fs_reclaim_acquire+0xae/0x150 [ 248.118529][ T8374] ? tomoyo_encode2+0x100/0x3e0 [ 248.118538][ T8374] should_failslab+0xc2/0x120 [ 248.118551][ T8374] __kmalloc_noprof+0xd2/0x510 [ 248.118564][ T8374] ? find_held_lock+0x2b/0x80 [ 248.118587][ T8374] tomoyo_encode2+0x100/0x3e0 [ 248.118601][ T8374] tomoyo_encode+0x29/0x50 [ 248.118610][ T8374] tomoyo_mount_acl+0x144/0x850 [ 248.118627][ T8374] ? __kernel_text_address+0xd/0x40 [ 248.118644][ T8374] ? unwind_get_return_address+0x59/0xa0 [ 248.118661][ T8374] ? arch_stack_walk+0xa6/0x100 [ 248.118673][ T8374] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 248.118705][ T8374] ? tomoyo_domain+0xbb/0x150 [ 248.118717][ T8374] ? tomoyo_profile+0x47/0x60 [ 248.118729][ T8374] tomoyo_mount_permission+0x16d/0x420 [ 248.118745][ T8374] ? tomoyo_mount_permission+0x14f/0x420 [ 248.118763][ T8374] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 248.118788][ T8374] security_sb_mount+0x9b/0x260 [ 248.118804][ T8374] path_mount+0x128/0x2020 [ 248.118816][ T8374] ? kmem_cache_free+0x2d1/0x4d0 [ 248.118826][ T8374] ? __pfx_path_mount+0x10/0x10 [ 248.118837][ T8374] ? getname_flags.part.0+0x1c5/0x550 [ 248.118852][ T8374] ? putname+0x154/0x1a0 [ 248.118866][ T8374] __ia32_sys_mount+0x28b/0x310 [ 248.118878][ T8374] ? __pfx___ia32_sys_mount+0x10/0x10 [ 248.118891][ T8374] ? rcu_is_watching+0x12/0xc0 [ 248.118905][ T8374] __do_fast_syscall_32+0x7c/0x3a0 [ 248.118918][ T8374] do_fast_syscall_32+0x32/0x80 [ 248.118929][ T8374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.118942][ T8374] RIP: 0023:0xf7f96579 [ 248.118951][ T8374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 248.118961][ T8374] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 248.118971][ T8374] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 248.118978][ T8374] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000080000200 [ 248.118984][ T8374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.118990][ T8374] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 248.118995][ T8374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.119009][ T8374] [ 248.202351][ C3] vkms_vblank_simulate: vblank timer overrun [ 248.487189][ T40] audit: type=1326 audit(1753647931.326:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.497952][ T40] audit: type=1326 audit(1753647931.326:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.505298][ T40] audit: type=1326 audit(1753647931.336:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.514078][ T40] audit: type=1326 audit(1753647931.336:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.520747][ T40] audit: type=1326 audit(1753647931.336:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.531869][ T40] audit: type=1326 audit(1753647931.336:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.538494][ T40] audit: type=1326 audit(1753647931.336:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.555282][ T40] audit: type=1326 audit(1753647931.336:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 248.562433][ T40] audit: type=1326 audit(1753647931.346:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.618" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 252.178956][ T8434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 252.181774][ T8434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.191313][ T8434] vhci_hcd vhci_hcd.0: Device attached [ 252.226360][ T8435] vhci_hcd: connection closed [ 252.227014][ T1243] vhci_hcd: stop threads [ 252.230912][ T1243] vhci_hcd: release socket [ 252.232375][ T1243] vhci_hcd: disconnect device [ 252.656140][ T8443] input: syz1 as /devices/virtual/input/input7 [ 253.038759][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.042075][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 253.847877][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 253.847889][ T40] audit: type=1326 audit(1753647936.686:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.2.640" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x80000000 [ 253.939714][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.943043][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.946327][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.949479][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.954833][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.967143][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.975082][ T1457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.493211][ T8483] 9pnet_fd: Insufficient options for proto=fd [ 254.893011][ T8497] binder: 8495:8497 unknown command 0 [ 254.894808][ T8497] binder: 8495:8497 ioctl c0306201 80000080 returned -22 [ 254.899212][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.068929][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.222431][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.224965][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.289611][ T8509] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 255.598325][ T1243] Bluetooth: hci3: Frame reassembly failed (-84) [ 255.605256][ T1243] Bluetooth: hci3: Frame reassembly failed (-84) [ 255.619643][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.624345][ T8513] bridge_slave_1: left allmulticast mode [ 255.626154][ T8513] bridge_slave_1: left promiscuous mode [ 255.628100][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.640409][ T8513] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.830788][ T8519] FAULT_INJECTION: forcing a failure. [ 255.830788][ T8519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.835793][ T8519] CPU: 2 UID: 0 PID: 8519 Comm: syz.2.650 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 255.835808][ T8519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.835815][ T8519] Call Trace: [ 255.835819][ T8519] [ 255.835824][ T8519] dump_stack_lvl+0x16c/0x1f0 [ 255.835839][ T8519] should_fail_ex+0x512/0x640 [ 255.835853][ T8519] _copy_from_user+0x2e/0xd0 [ 255.835866][ T8519] get_compat_msghdr+0xa7/0x170 [ 255.835878][ T8519] ? __pfx_get_compat_msghdr+0x10/0x10 [ 255.835891][ T8519] ? __pfx__kstrtoull+0x10/0x10 [ 255.835909][ T8519] ___sys_sendmsg+0x1ae/0x1d0 [ 255.835922][ T8519] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.835932][ T8519] ? __lock_acquire+0x622/0x1c90 [ 255.835966][ T8519] __sys_sendmmsg+0x2f9/0x420 [ 255.835979][ T8519] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.835995][ T8519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.836013][ T8519] ? fput+0x70/0xf0 [ 255.836025][ T8519] ? ksys_write+0x1ac/0x250 [ 255.836035][ T8519] ? __pfx_ksys_write+0x10/0x10 [ 255.836066][ T8519] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 255.836081][ T8519] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 255.836093][ T8519] __do_fast_syscall_32+0x7c/0x3a0 [ 255.836106][ T8519] do_fast_syscall_32+0x32/0x80 [ 255.836117][ T8519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.836131][ T8519] RIP: 0023:0xf7f96579 [ 255.836139][ T8519] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 255.836149][ T8519] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 255.836159][ T8519] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001980 [ 255.836166][ T8519] RDX: 0000000000000001 RSI: 0000000000040000 RDI: 0000000000000000 [ 255.836171][ T8519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.836177][ T8519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 255.836183][ T8519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.836196][ T8519] [ 255.969586][ T8520] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 257.214677][ T8544] 9pnet_fd: Insufficient options for proto=fd [ 257.272415][ T1149] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.628808][ T5953] Bluetooth: hci3: command 0x1003 tx timeout [ 257.628998][ T63] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 258.038416][ T8565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 258.041131][ T8565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.045200][ T8565] vhci_hcd vhci_hcd.0: Device attached [ 258.189553][ T6040] net_ratelimit: 3 callbacks suppressed [ 258.189567][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.521990][ T1457] usb 46-1: SetAddress Request (2) to port 0 [ 258.523996][ T1457] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 258.888094][ T8566] vhci_hcd: connection reset by peer [ 258.899123][ T1243] vhci_hcd: stop threads [ 258.900514][ T1243] vhci_hcd: release socket [ 258.902068][ T1243] vhci_hcd: disconnect device [ 258.988995][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.993040][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.997972][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.058906][ T1243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.061993][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.078384][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.138906][ T5967] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.211722][ T8601] overlayfs: missing 'lowerdir' [ 259.638857][ T7428] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 259.788722][ T7428] usb 7-1: Using ep0 maxpacket: 8 [ 259.799344][ T7428] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 259.802668][ T7428] usb 7-1: config 0 has no interface number 0 [ 259.806827][ T7428] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.814783][ T7428] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 259.818693][ T7428] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.822488][ T7428] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.826380][ T7428] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.848751][ T7428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.853750][ T7428] usb 7-1: config 0 descriptor?? [ 259.890835][ T7428] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 260.109104][ T6040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.157166][ T8612] KVM: debugfs: duplicate directory 8612-13 [ 260.248440][ T8634] FAULT_INJECTION: forcing a failure. [ 260.248440][ T8634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.252788][ T8634] CPU: 1 UID: 0 PID: 8634 Comm: syz.1.673 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 260.252803][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.252810][ T8634] Call Trace: [ 260.252814][ T8634] [ 260.252818][ T8634] dump_stack_lvl+0x16c/0x1f0 [ 260.252833][ T8634] should_fail_ex+0x512/0x640 [ 260.252847][ T8634] strncpy_from_user+0x3b/0x2e0 [ 260.252866][ T8634] strncpy_from_user_nofault+0x7f/0x180 [ 260.252881][ T8634] bpf_bprintf_prepare+0xede/0x14b0 [ 260.252896][ T8634] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 260.252907][ T8634] ? __pfx_bstr_printf+0x10/0x10 [ 260.252921][ T8634] ? bpf_trace_run2+0x3db/0x590 [ 260.252936][ T8634] bpf_trace_printk+0xda/0x190 [ 260.252949][ T8634] ? __pfx_bpf_trace_printk+0x10/0x10 [ 260.252965][ T8634] ? bpf_trace_run2+0x3db/0x590 [ 260.252984][ T8634] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 260.252994][ T8634] bpf_trace_run2+0x233/0x590 [ 260.253008][ T8634] ? look_up_lock_class+0x59/0x150 [ 260.253018][ T8634] ? __pfx_bpf_trace_run2+0x10/0x10 [ 260.253038][ T8634] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 260.253054][ T8634] __bpf_trace_contention_begin+0xc9/0x110 [ 260.253069][ T8634] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 260.253088][ T8634] ? lock_acquire+0x179/0x350 [ 260.253104][ T8634] __traceiter_contention_begin+0x5a/0xa0 [ 260.253120][ T8634] trace_contention_begin+0xc1/0x130 [ 260.253136][ T8634] __mutex_lock+0x1a6/0xb90 [ 260.253147][ T8634] ? __netlink_dump_start+0x150/0x990 [ 260.253161][ T8634] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 260.253174][ T8634] ? __netlink_dump_start+0x150/0x990 [ 260.253188][ T8634] ? __pfx___mutex_lock+0x10/0x10 [ 260.253198][ T8634] ? netlink_lookup+0x24e/0x520 [ 260.253213][ T8634] ? __pfx_netlink_lookup+0x10/0x10 [ 260.253224][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.253237][ T8634] ? __netlink_dump_start+0x150/0x990 [ 260.253249][ T8634] __netlink_dump_start+0x150/0x990 [ 260.253263][ T8634] inet_diag_handler_cmd+0x282/0x2e0 [ 260.253279][ T8634] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 260.253292][ T8634] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 260.253305][ T8634] ? __pfx_inet_diag_dump+0x10/0x10 [ 260.253317][ T8634] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 260.253331][ T8634] ? sock_diag_lock_handler+0x10f/0x2e0 [ 260.253352][ T8634] sock_diag_rcv_msg+0x435/0x790 [ 260.253371][ T8634] netlink_rcv_skb+0x158/0x420 [ 260.253384][ T8634] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 260.253402][ T8634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.253420][ T8634] ? netlink_deliver_tap+0x1ae/0xd30 [ 260.253435][ T8634] netlink_unicast+0x58a/0x850 [ 260.253450][ T8634] ? __pfx_netlink_unicast+0x10/0x10 [ 260.253467][ T8634] netlink_sendmsg+0x8d1/0xdd0 [ 260.253483][ T8634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.253502][ T8634] sock_write_iter+0x4ff/0x5b0 [ 260.253517][ T8634] ? __pfx_sock_write_iter+0x10/0x10 [ 260.253538][ T8634] ? __lock_acquire+0x622/0x1c90 [ 260.253554][ T8634] do_iter_readv_writev+0x657/0x950 [ 260.253572][ T8634] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 260.253591][ T8634] ? bpf_lsm_file_permission+0x9/0x10 [ 260.253605][ T8634] ? security_file_permission+0x71/0x210 [ 260.253622][ T8634] ? rw_verify_area+0xcf/0x680 [ 260.253639][ T8634] vfs_writev+0x35f/0xde0 [ 260.253659][ T8634] ? __pfx_vfs_writev+0x10/0x10 [ 260.253676][ T8634] ? find_held_lock+0x2b/0x80 [ 260.253695][ T8634] ? __fget_files+0x20e/0x3c0 [ 260.253716][ T8634] ? __fget_files+0x1b0/0x3c0 [ 260.253735][ T8634] ? do_writev+0x28c/0x340 [ 260.253751][ T8634] do_writev+0x28c/0x340 [ 260.253767][ T8634] ? __pfx_do_writev+0x10/0x10 [ 260.253785][ T8634] ? rcu_is_watching+0x12/0xc0 [ 260.253798][ T8634] __do_fast_syscall_32+0x7c/0x3a0 [ 260.253811][ T8634] do_fast_syscall_32+0x32/0x80 [ 260.253822][ T8634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.253835][ T8634] RIP: 0023:0xf7f75579 [ 260.253844][ T8634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.253854][ T8634] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 260.253864][ T8634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 260.253871][ T8634] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.253877][ T8634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.253883][ T8634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 260.253890][ T8634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.253902][ T8634] [ 260.401304][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.507508][ T8640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.676'. [ 260.517618][ T6040] IPVS: starting estimator thread 0... [ 260.579466][ T8638] block nbd0: server does not support multiple connections per device. [ 260.587973][ T8638] block nbd0: shutting down sockets [ 260.648836][ T8641] IPVS: using max 45 ests per chain, 108000 per kthread [ 260.760451][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 260.826635][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 261.139183][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.142611][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.219269][ T5967] Bluetooth: hci4: command 0x0405 tx timeout [ 261.343934][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 261.346725][ T8658] netlink: 268 bytes leftover after parsing attributes in process `syz.1.679'. [ 261.834148][ T53] usb 7-1: USB disconnect, device number 3 [ 261.834167][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 261.857252][ T53] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 261.945298][ T8671] 9pnet_virtio: no channels available for device syz [ 261.961460][ T8671] 9pnet_virtio: no channels available for device syz [ 261.964100][ T8671] 9pnet_virtio: no channels available for device syz [ 261.966360][ T8671] 9pnet_virtio: no channels available for device syz [ 262.008787][ T8671] 9pnet_virtio: no channels available for device syz [ 262.855670][ T40] audit: type=1804 audit(1753647945.696:145): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.687" name="/newroot/79/file0" dev="tmpfs" ino=426 res=1 errno=0 [ 262.868006][ T8691] FAULT_INJECTION: forcing a failure. [ 262.868006][ T8691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.873370][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.2.685 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 262.873386][ T8691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.873393][ T8691] Call Trace: [ 262.873396][ T8691] [ 262.873400][ T8691] dump_stack_lvl+0x16c/0x1f0 [ 262.873416][ T8691] should_fail_ex+0x512/0x640 [ 262.873430][ T8691] strncpy_from_user+0x3b/0x2e0 [ 262.873449][ T8691] strncpy_from_user_nofault+0x7f/0x180 [ 262.873464][ T8691] bpf_bprintf_prepare+0xede/0x14b0 [ 262.873479][ T8691] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 262.873490][ T8691] ? __pfx_bstr_printf+0x10/0x10 [ 262.873504][ T8691] ? bpf_trace_run2+0x3db/0x590 [ 262.873519][ T8691] bpf_trace_printk+0xda/0x190 [ 262.873532][ T8691] ? __pfx_bpf_trace_printk+0x10/0x10 [ 262.873548][ T8691] ? bpf_trace_run2+0x3db/0x590 [ 262.873567][ T8691] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 262.873576][ T8691] bpf_trace_run2+0x233/0x590 [ 262.873590][ T8691] ? mark_held_locks+0x49/0x80 [ 262.873605][ T8691] ? __pfx_bpf_trace_run2+0x10/0x10 [ 262.873620][ T8691] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 262.873633][ T8691] ? rcu_is_watching+0x12/0xc0 [ 262.873646][ T8691] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 262.873662][ T8691] __bpf_trace_contention_begin+0xc9/0x110 [ 262.873677][ T8691] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 262.873696][ T8691] ? lock_acquire+0x179/0x350 [ 262.873716][ T8691] __traceiter_contention_begin+0x5a/0xa0 [ 262.873732][ T8691] trace_contention_begin+0xc1/0x130 [ 262.873747][ T8691] __mutex_lock+0x1a6/0xb90 [ 262.873758][ T8691] ? __lru_add_drain_all+0x69/0x6f0 [ 262.873768][ T8691] ? find_held_lock+0x2b/0x80 [ 262.873779][ T8691] ? schedule+0x2d7/0x3a0 [ 262.873794][ T8691] ? __lru_add_drain_all+0x69/0x6f0 [ 262.873805][ T8691] ? __pfx___mutex_lock+0x10/0x10 [ 262.873819][ T8691] ? __pfx_autoremove_wake_function+0x10/0x10 [ 262.873836][ T8691] ? __lru_add_drain_all+0x69/0x6f0 [ 262.873846][ T8691] __lru_add_drain_all+0x69/0x6f0 [ 262.873859][ T8691] do_mbind+0x74e/0xf30 [ 262.873878][ T8691] ? __pfx_do_mbind+0x10/0x10 [ 262.873891][ T8691] ? find_held_lock+0x2b/0x80 [ 262.873902][ T8691] ? ksys_write+0x190/0x250 [ 262.873918][ T8691] ? __pfx_get_nodes+0x10/0x10 [ 262.873929][ T8691] ? __fget_files+0x20e/0x3c0 [ 262.873944][ T8691] ? handle_mm_fault+0x230/0xd10 [ 262.873965][ T8691] kernel_mbind+0x1e3/0x1f0 [ 262.873980][ T8691] ? __pfx_kernel_mbind+0x10/0x10 [ 262.873996][ T8691] ? rcu_is_watching+0x12/0xc0 [ 262.874009][ T8691] __do_fast_syscall_32+0x7c/0x3a0 [ 262.874022][ T8691] do_fast_syscall_32+0x32/0x80 [ 262.874033][ T8691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.874047][ T8691] RIP: 0023:0xf7f96579 [ 262.874055][ T8691] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.874065][ T8691] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000112 [ 262.874076][ T8691] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000 [ 262.874082][ T8691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.874088][ T8691] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 262.874094][ T8691] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.874100][ T8691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.874113][ T8691] [ 262.988793][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.227891][ T5995] net_ratelimit: 1 callbacks suppressed [ 263.227908][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.628839][ T1457] usb 46-1: device descriptor read/8, error -110 [ 264.051750][ T1457] usb usb46-port1: attempt power cycle [ 264.179251][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.260544][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.530084][ T8720] FAULT_INJECTION: forcing a failure. [ 264.530084][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 264.534426][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.3.694 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 264.534441][ T8720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.534449][ T8720] Call Trace: [ 264.534452][ T8720] [ 264.534457][ T8720] dump_stack_lvl+0x16c/0x1f0 [ 264.534473][ T8720] should_fail_ex+0x512/0x640 [ 264.534484][ T8720] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 264.534497][ T8720] should_failslab+0xc2/0x120 [ 264.534510][ T8720] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.534521][ T8720] ? __pfx_stack_trace_save+0x10/0x10 [ 264.534534][ T8720] ? vm_area_dup+0x27/0x8d0 [ 264.534552][ T8720] vm_area_dup+0x27/0x8d0 [ 264.534570][ T8720] __split_vma+0x18e/0x1070 [ 264.534582][ T8720] ? __pfx___split_vma+0x10/0x10 [ 264.534591][ T8720] ? mas_next_slot+0x12d3/0x21b0 [ 264.534610][ T8720] vms_gather_munmap_vmas+0x392/0x1310 [ 264.534624][ T8720] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 264.534635][ T8720] ? mas_walk+0x6a6/0x910 [ 264.534657][ T8720] __mmap_region+0x3c7/0x25e0 [ 264.534670][ T8720] ? __pfx___mmap_region+0x10/0x10 [ 264.534681][ T8720] ? trace_event_buffer_commit+0x204/0xa50 [ 264.534696][ T8720] ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260 [ 264.534713][ T8720] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 264.534735][ T8720] ? __lock_acquire+0x622/0x1c90 [ 264.534751][ T8720] ? process_measurement+0x1e6/0x23e0 [ 264.534782][ T8720] ? rcu_is_watching+0x12/0xc0 [ 264.534798][ T8720] mmap_region+0x32b/0x3f0 [ 264.534812][ T8720] do_mmap+0xa3e/0x1210 [ 264.534829][ T8720] ? __pfx_do_mmap+0x10/0x10 [ 264.534843][ T8720] ? __pfx_down_write_killable+0x10/0x10 [ 264.534859][ T8720] vm_mmap_pgoff+0x281/0x450 [ 264.534875][ T8720] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 264.534897][ T8720] ? __fget_files+0x20e/0x3c0 [ 264.534917][ T8720] ksys_mmap_pgoff+0x32c/0x5c0 [ 264.534932][ T8720] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 264.534947][ T8720] __do_fast_syscall_32+0x7c/0x3a0 [ 264.534960][ T8720] do_fast_syscall_32+0x32/0x80 [ 264.534972][ T8720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.534986][ T8720] RIP: 0023:0xf70fe579 [ 264.534994][ T8720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 264.535005][ T8720] RSP: 002b:00000000f50ee55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 264.535015][ T8720] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 264.535022][ T8720] RDX: 00000000027fffff RSI: 0000000004002011 RDI: 0000000000000003 [ 264.535028][ T8720] RBP: 00000000f0555000 R08: 0000000000000000 R09: 0000000000000000 [ 264.535034][ T8720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 264.535040][ T8720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.535054][ T8720] [ 264.620620][ T1457] usb usb46-port1: unable to enumerate USB device [ 264.829192][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.834727][ T1457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.867396][ T8725] fuse: Unknown parameter 'gr' [ 265.163488][ T8729] FAULT_INJECTION: forcing a failure. [ 265.163488][ T8729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.167784][ T8729] CPU: 3 UID: 0 PID: 8729 Comm: syz.2.698 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 265.167799][ T8729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.167806][ T8729] Call Trace: [ 265.167810][ T8729] [ 265.167814][ T8729] dump_stack_lvl+0x16c/0x1f0 [ 265.167830][ T8729] should_fail_ex+0x512/0x640 [ 265.167843][ T8729] strncpy_from_user+0x3b/0x2e0 [ 265.167862][ T8729] strncpy_from_user_nofault+0x7f/0x180 [ 265.167877][ T8729] bpf_bprintf_prepare+0xede/0x14b0 [ 265.167892][ T8729] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 265.167903][ T8729] ? __pfx_bstr_printf+0x10/0x10 [ 265.167917][ T8729] ? bpf_trace_run2+0x3db/0x590 [ 265.167932][ T8729] bpf_trace_printk+0xda/0x190 [ 265.167945][ T8729] ? __pfx_bpf_trace_printk+0x10/0x10 [ 265.167960][ T8729] ? bpf_trace_run2+0x3db/0x590 [ 265.167979][ T8729] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 265.167989][ T8729] bpf_trace_run2+0x233/0x590 [ 265.168003][ T8729] ? __dev_queue_xmit+0x896/0x43e0 [ 265.168020][ T8729] ? __pfx_bpf_trace_run2+0x10/0x10 [ 265.168034][ T8729] ? __local_bh_enable_ip+0xa4/0x120 [ 265.168048][ T8729] ? __dev_queue_xmit+0x896/0x43e0 [ 265.168064][ T8729] ? __dev_queue_xmit+0x8b7/0x43e0 [ 265.168082][ T8729] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 265.168098][ T8729] __bpf_trace_contention_begin+0xc9/0x110 [ 265.168114][ T8729] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 265.168133][ T8729] ? lock_acquire+0x179/0x350 [ 265.168149][ T8729] __traceiter_contention_begin+0x5a/0xa0 [ 265.168165][ T8729] trace_contention_begin+0xc1/0x130 [ 265.168181][ T8729] __mutex_lock+0x1a6/0xb90 [ 265.168191][ T8729] ? xfrm_netlink_rcv+0x62/0x90 [ 265.168204][ T8729] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.168217][ T8729] ? xfrm_netlink_rcv+0x62/0x90 [ 265.168231][ T8729] ? __pfx___mutex_lock+0x10/0x10 [ 265.168243][ T8729] ? find_held_lock+0x2b/0x80 [ 265.168260][ T8729] ? xfrm_netlink_rcv+0x62/0x90 [ 265.168272][ T8729] xfrm_netlink_rcv+0x62/0x90 [ 265.168285][ T8729] netlink_unicast+0x58a/0x850 [ 265.168301][ T8729] ? __pfx_netlink_unicast+0x10/0x10 [ 265.168318][ T8729] netlink_sendmsg+0x8d1/0xdd0 [ 265.168334][ T8729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.168348][ T8729] ? __import_iovec+0x1dd/0x650 [ 265.168364][ T8729] ____sys_sendmsg+0xa95/0xc70 [ 265.168380][ T8729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.168394][ T8729] ? get_compat_msghdr+0x11a/0x170 [ 265.168412][ T8729] ___sys_sendmsg+0x134/0x1d0 [ 265.168425][ T8729] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.168442][ T8729] ? find_held_lock+0x2b/0x80 [ 265.168462][ T8729] __sys_sendmsg+0x16d/0x220 [ 265.168473][ T8729] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.168506][ T8729] ? rcu_is_watching+0x12/0xc0 [ 265.168520][ T8729] __do_fast_syscall_32+0x7c/0x3a0 [ 265.168533][ T8729] do_fast_syscall_32+0x32/0x80 [ 265.168544][ T8729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.168558][ T8729] RIP: 0023:0xf7f96579 [ 265.168566][ T8729] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.168588][ T8729] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 265.168600][ T8729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 265.168607][ T8729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.168613][ T8729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.168620][ T8729] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.168629][ T8729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.168643][ T8729] [ 265.300398][ T1457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.380255][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 265.547493][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.558734][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.561319][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.578864][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.080057][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.138670][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 266.288737][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 266.292744][ T53] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 266.295463][ T53] usb 8-1: config 0 has no interface number 0 [ 266.297523][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.305627][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 266.310612][ T53] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.315026][ T53] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.320197][ T53] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 266.323870][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.336870][ T53] usb 8-1: config 0 descriptor?? [ 266.353590][ T53] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 266.619151][ T8739] KVM: debugfs: duplicate directory 8739-13 [ 267.450578][ T8757] input: syz1 as /devices/virtual/input/input8 [ 267.502214][ T8754] lo speed is unknown, defaulting to 1000 [ 268.610146][ C2] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 268.612121][ T7428] usb 8-1: USB disconnect, device number 3 [ 268.620330][ T7428] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 268.834437][ T5995] net_ratelimit: 9 callbacks suppressed [ 268.834451][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.195608][ T8766] fuse: Unknown parameter 'gr' [ 269.858856][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.079665][ T8770] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 270.081927][ T8770] netlink: 'syz.3.711': attribute type 4 has an invalid length. [ 270.084133][ T8770] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.711'. [ 270.087257][ T8770] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 270.089545][ T8770] netlink: 'syz.3.711': attribute type 4 has an invalid length. [ 270.091721][ T8770] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.711'. [ 270.259692][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.280599][ T40] audit: type=1326 audit(1753647953.126:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 270.342526][ T40] audit: type=1326 audit(1753647953.186:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 270.350424][ T40] audit: type=1326 audit(1753647953.186:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 270.357622][ T40] audit: type=1326 audit(1753647953.186:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 270.365348][ T40] audit: type=1326 audit(1753647953.186:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 270.373699][ T40] audit: type=1326 audit(1753647953.186:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 270.381371][ T40] audit: type=1326 audit(1753647953.186:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 270.388013][ T40] audit: type=1326 audit(1753647953.186:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 270.396556][ T40] audit: type=1326 audit(1753647953.186:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 270.403208][ T40] audit: type=1326 audit(1753647953.186:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 270.433877][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 270.436678][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.712'. [ 270.579323][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.900058][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.275507][ T5967] Bluetooth: Wrong link type (-71) [ 271.737218][ T8788] : entered promiscuous mode [ 271.948828][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.558703][ T6025] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 272.694893][ T8794] Bluetooth: Invalid byte 00 after esc byte [ 272.742536][ T6025] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.746274][ T6025] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.749860][ T6025] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.754285][ T6025] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.758660][ T6025] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.762863][ T6025] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 272.766440][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.772579][ T8792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.780387][ T6025] hub 7-1:1.0: bad descriptor, ignoring hub [ 272.782293][ T6025] hub 7-1:1.0: probe with driver hub failed with error -5 [ 272.786826][ T6025] cdc_wdm 7-1:1.0: skipping garbage [ 272.788506][ T6025] cdc_wdm 7-1:1.0: skipping garbage [ 272.792458][ T6025] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 272.794357][ T6025] cdc_wdm 7-1:1.0: Unknown control protocol [ 272.980418][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.204939][ T8797] FAULT_INJECTION: forcing a failure. [ 273.204939][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 273.210256][ T8797] CPU: 3 UID: 0 PID: 8797 Comm: syz.4.721 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 273.210281][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.210292][ T8797] Call Trace: [ 273.210299][ T8797] [ 273.210306][ T8797] dump_stack_lvl+0x16c/0x1f0 [ 273.210328][ T8797] should_fail_ex+0x512/0x640 [ 273.210347][ T8797] ? fs_reclaim_acquire+0xae/0x150 [ 273.210374][ T8797] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 273.210391][ T8797] should_failslab+0xc2/0x120 [ 273.210411][ T8797] __kmalloc_noprof+0xd2/0x510 [ 273.210436][ T8797] tomoyo_realpath_from_path+0xc2/0x6e0 [ 273.210456][ T8797] ? tomoyo_profile+0x47/0x60 [ 273.210477][ T8797] tomoyo_path_number_perm+0x245/0x580 [ 273.210500][ T8797] ? tomoyo_path_number_perm+0x237/0x580 [ 273.210527][ T8797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.210581][ T8797] ? find_held_lock+0x2b/0x80 [ 273.210599][ T8797] ? hook_file_ioctl_common+0x145/0x410 [ 273.210629][ T8797] ? __fget_files+0x20e/0x3c0 [ 273.210654][ T8797] ? __fput_deferred+0x480/0x480 [ 273.210679][ T8797] security_file_ioctl_compat+0x9b/0x240 [ 273.210708][ T8797] __ia32_compat_sys_ioctl+0xc3/0x370 [ 273.210737][ T8797] __do_fast_syscall_32+0x7c/0x3a0 [ 273.210763][ T8797] do_fast_syscall_32+0x32/0x80 [ 273.210782][ T8797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.210808][ T8797] RIP: 0023:0xf711e579 [ 273.210825][ T8797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 273.210844][ T8797] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 273.210860][ T8797] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 273.210872][ T8797] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.210882][ T8797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.210897][ T8797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 273.210908][ T8797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.210933][ T8797] [ 273.210940][ T8797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.309854][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.552265][ T8792] cdc_wdm 7-1:1.0: Error autopm - -16 [ 273.553075][ T838] usb 7-1: USB disconnect, device number 4 [ 273.688819][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 273.848659][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 273.851661][ T838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.854788][ T838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.857975][ T838] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.861682][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.865915][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.870258][ T838] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.873287][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.878053][ T8795] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.881900][ T838] hub 7-1:1.0: bad descriptor, ignoring hub [ 273.884308][ T838] hub 7-1:1.0: probe with driver hub failed with error -5 [ 273.889816][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 273.891630][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 273.895781][ T838] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 273.897787][ T838] cdc_wdm 7-1:1.0: Unknown control protocol [ 274.019695][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.199095][ T9] usb 7-1: USB disconnect, device number 5 [ 274.598756][ T7428] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 274.651231][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 274.654058][ T8803] netlink: 'syz.2.724': attribute type 5 has an invalid length. [ 274.656482][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.724'. [ 274.666069][ T8803] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 274.669941][ T8803] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 274.673475][ T8803] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 274.676843][ T8803] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 274.679728][ T8803] geneve2: entered promiscuous mode [ 274.681462][ T8803] geneve2: entered allmulticast mode [ 274.748690][ T5967] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 274.749442][ T7428] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 274.750081][ T5953] Bluetooth: hci3: command 0x1003 tx timeout [ 274.757295][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.760512][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.764038][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.767703][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.789722][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.798028][ T8810] FAULT_INJECTION: forcing a failure. [ 274.798028][ T8810] name failslab, interval 1, probability 0, space 0, times 0 [ 274.798089][ T8810] CPU: 1 UID: 0 PID: 8810 Comm: syz.1.726 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 274.798119][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.798127][ T8810] Call Trace: [ 274.798131][ T8810] [ 274.798135][ T8810] dump_stack_lvl+0x16c/0x1f0 [ 274.798150][ T8810] should_fail_ex+0x512/0x640 [ 274.798162][ T8810] ? fs_reclaim_acquire+0xae/0x150 [ 274.798178][ T8810] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 274.798189][ T8810] should_failslab+0xc2/0x120 [ 274.798202][ T8810] __kmalloc_noprof+0xd2/0x510 [ 274.798216][ T8810] tomoyo_realpath_from_path+0xc2/0x6e0 [ 274.798228][ T8810] ? tomoyo_profile+0x47/0x60 [ 274.798242][ T8810] tomoyo_path_number_perm+0x245/0x580 [ 274.798256][ T8810] ? tomoyo_path_number_perm+0x237/0x580 [ 274.798273][ T8810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.798303][ T8810] ? find_held_lock+0x2b/0x80 [ 274.798315][ T8810] ? hook_file_ioctl_common+0x145/0x410 [ 274.798333][ T8810] ? __fget_files+0x20e/0x3c0 [ 274.798349][ T8810] ? __fput_deferred+0x480/0x480 [ 274.798364][ T8810] security_file_ioctl_compat+0x9b/0x240 [ 274.798381][ T8810] __ia32_compat_sys_ioctl+0xc3/0x370 [ 274.798399][ T8810] __do_fast_syscall_32+0x7c/0x3a0 [ 274.798412][ T8810] do_fast_syscall_32+0x32/0x80 [ 274.798423][ T8810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.798436][ T8810] RIP: 0023:0xf7f75579 [ 274.798445][ T8810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 274.798456][ T8810] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 274.798480][ T8810] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 274.798488][ T8810] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.798497][ T8810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.798506][ T8810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 274.798515][ T8810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.798536][ T8810] [ 274.800078][ T8810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.811827][ T8812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.811966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.895696][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.898509][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.902078][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.905736][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.908793][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.911534][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.915193][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.918529][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.922108][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.925917][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.928941][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.931703][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.934998][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.937828][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.940749][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.944117][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.946947][ T7428] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.949869][ T7428] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.954052][ T7428] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.957649][ T7428] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 274.960644][ T7428] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 274.963727][ T7428] usb 8-1: Product: syz [ 274.965049][ T7428] usb 8-1: Manufacturer: syz [ 274.966534][ T7428] usb 8-1: SerialNumber: syz [ 274.969670][ T7428] usb 8-1: config 0 descriptor?? [ 274.985446][ T7428] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 275.058996][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.219209][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 275.232921][ C2] usb 8-1: yurex_control_callback - control failed: -71 [ 275.233414][ T53] usb 8-1: USB disconnect, device number 4 [ 275.242085][ T53] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 275.290020][ T8818] loop6: detected capacity change from 0 to 2560 [ 275.295926][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.298534][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.301432][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.303927][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.306499][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.309239][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.311735][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.314234][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.317005][ T8818] ldm_validate_partition_table(): Disk read failed. [ 275.319258][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.321754][ T8818] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.324385][ T8818] Dev loop6: unable to read RDB block 0 [ 275.326336][ T8818] loop6: unable to read partition table [ 275.328289][ T8818] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 276.349106][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.410471][ T1457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.818906][ T5967] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 276.821917][ T63] Bluetooth: hci3: command 0x1003 tx timeout [ 276.907133][ T8830] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 276.913033][ T8830] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 277.458923][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.459999][ T8861] FAULT_INJECTION: forcing a failure. [ 278.459999][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.460638][ T8861] [ 278.460644][ T8861] ====================================================== [ 278.460648][ T8861] WARNING: possible circular locking dependency detected [ 278.460652][ T8861] 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 Not tainted [ 278.460659][ T8861] ------------------------------------------------------ [ 278.460662][ T8861] syz.2.740/8861 is trying to acquire lock: [ 278.460667][ T8861] ffffffff8e4d2200 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 278.460693][ T8861] [ 278.460693][ T8861] but task is already holding lock: [ 278.460696][ T8861] ffff88802b33a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 278.460718][ T8861] [ 278.460718][ T8861] which lock already depends on the new lock. [ 278.460718][ T8861] [ 278.460722][ T8861] [ 278.460722][ T8861] the existing dependency chain (in reverse order) is: [ 278.460727][ T8861] [ 278.460727][ T8861] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 278.460739][ T8861] _raw_spin_lock_nested+0x31/0x40 [ 278.460756][ T8861] raw_spin_rq_lock_nested+0x29/0x130 [ 278.460766][ T8861] task_rq_lock+0xcf/0x490 [ 278.460776][ T8861] cgroup_move_task+0x81/0x2a0 [ 278.460787][ T8861] css_set_move_task+0x288/0x5f0 [ 278.460800][ T8861] cgroup_post_fork+0x201/0x9e0 [ 278.460809][ T8861] copy_process+0x5c82/0x7650 [ 278.460821][ T8861] kernel_clone+0xfc/0x960 [ 278.460833][ T8861] user_mode_thread+0xc7/0x110 [ 278.460845][ T8861] rest_init+0x23/0x2b0 [ 278.460857][ T8861] start_kernel+0x3ee/0x4d0 [ 278.460912][ T8861] x86_64_start_reservations+0x18/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.460928][ T8861] x86_64_start_kernel+0x130/0x190 [ 278.460942][ T8861] common_startup_64+0x13e/0x148 [ 278.460952][ T8861] [ 278.460952][ T8861] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 278.460965][ T8861] _raw_spin_lock_irqsave+0x3a/0x60 [ 278.460980][ T8861] try_to_wake_up+0xb2/0x1680 [ 278.460989][ T8861] __wake_up_common+0x132/0x1f0 [ 278.461002][ T8861] __wake_up+0x31/0x60 [ 278.461013][ T8861] tty_port_default_wakeup+0x2a/0x40 [ 278.461027][ T8861] serial8250_tx_chars+0x68e/0x860 [ 278.461039][ T8861] serial8250_handle_irq+0x761/0xcb0 [ 278.461052][ T8861] serial8250_default_handle_irq+0x9a/0x210 [ 278.461066][ T8861] serial8250_interrupt+0x106/0x210 [ 278.461080][ T8861] __handle_irq_event_percpu+0x229/0x7d0 [ 278.461090][ T8861] handle_irq_event+0xab/0x1e0 [ 278.461100][ T8861] handle_edge_irq+0x28e/0xab0 [ 278.461109][ T8861] __common_interrupt+0xdf/0x250 [ 278.461121][ T8861] common_interrupt+0xba/0xe0 [ 278.461133][ T8861] asm_common_interrupt+0x26/0x40 [ 278.461143][ T8861] pv_native_safe_halt+0xf/0x20 [ 278.461158][ T8861] default_idle+0x13/0x20 [ 278.461172][ T8861] default_idle_call+0x6d/0xb0 [ 278.461183][ T8861] do_idle+0x391/0x510 [ 278.461192][ T8861] cpu_startup_entry+0x4f/0x60 [ 278.461202][ T8861] start_secondary+0x21d/0x2b0 [ 278.461215][ T8861] common_startup_64+0x13e/0x148 [ 278.461223][ T8861] [ 278.461223][ T8861] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 278.461236][ T8861] _raw_spin_lock_irqsave+0x3a/0x60 [ 278.461252][ T8861] __wake_up+0x1c/0x60 [ 278.461263][ T8861] tty_port_default_wakeup+0x2a/0x40 [ 278.461275][ T8861] serial8250_tx_chars+0x68e/0x860 [ 278.461287][ T8861] __start_tx+0x3e9/0x4a0 [ 278.461298][ T8861] serial8250_start_tx+0x368/0x530 [ 278.461310][ T8861] __uart_start+0x295/0x4c0 [ 278.461325][ T8861] uart_write+0x218/0xb30 [ 278.461335][ T8861] n_tty_write+0x40f/0x1160 [ 278.461348][ T8861] file_tty_write.constprop.0+0x504/0x9b0 [ 278.461359][ T8861] redirected_tty_write+0xd4/0x150 [ 278.461370][ T8861] vfs_write+0x6c4/0x1150 [ 278.461379][ T8861] ksys_write+0x12a/0x250 [ 278.461387][ T8861] do_syscall_64+0xcd/0x490 [ 278.461396][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.461406][ T8861] [ 278.461406][ T8861] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 278.461418][ T8861] _raw_spin_lock_irqsave+0x3a/0x60 [ 278.461432][ T8861] serial8250_console_write+0x181/0x1890 [ 278.461447][ T8861] console_flush_all+0x801/0xc60 [ 278.461456][ T8861] console_unlock+0xd8/0x210 [ 278.461464][ T8861] vprintk_emit+0x418/0x6d0 [ 278.461473][ T8861] _printk+0xc7/0x100 [ 278.461486][ T8861] register_console+0xc2d/0x11b0 [ 278.461496][ T8861] univ8250_console_init+0x5f/0x90 [ 278.461511][ T8861] console_init+0x14f/0x680 [ 278.461525][ T8861] start_kernel+0x29f/0x4d0 [ 278.461539][ T8861] x86_64_start_reservations+0x18/0x30 [ 278.461554][ T8861] x86_64_start_kernel+0x130/0x190 [ 278.461569][ T8861] common_startup_64+0x13e/0x148 [ 278.461582][ T8861] [ 278.461582][ T8861] -> #0 (console_owner){-.-.}-{0:0}: [ 278.461594][ T8861] __lock_acquire+0x126f/0x1c90 [ 278.461607][ T8861] lock_acquire+0x179/0x350 [ 278.461620][ T8861] console_lock_spinning_enable+0xb0/0xd0 [ 278.461629][ T8861] console_flush_all+0x7aa/0xc60 [ 278.461638][ T8861] console_unlock+0xd8/0x210 [ 278.461647][ T8861] vprintk_emit+0x418/0x6d0 [ 278.461656][ T8861] _printk+0xc7/0x100 [ 278.461669][ T8861] should_fail_ex+0x4e7/0x640 [ 278.461679][ T8861] strncpy_from_user+0x3b/0x2e0 [ 278.461694][ T8861] strncpy_from_user_nofault+0x7f/0x180 [ 278.461706][ T8861] bpf_bprintf_prepare+0xede/0x14b0 [ 278.461715][ T8861] bpf_trace_printk+0xda/0x190 [ 278.461728][ T8861] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 278.461735][ T8861] bpf_trace_run2+0x233/0x590 [ 278.461748][ T8861] __bpf_trace_contention_begin+0xc9/0x110 [ 278.461762][ T8861] __traceiter_contention_begin+0x5a/0xa0 [ 278.461775][ T8861] trace_contention_begin.constprop.0+0xde/0x160 [ 278.461792][ T8861] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 278.461802][ T8861] do_raw_spin_lock+0x20e/0x2b0 [ 278.461817][ T8861] raw_spin_rq_lock_nested+0x7e/0x130 [ 278.461827][ T8861] __schedule+0x301/0x5dd0 [ 278.461841][ T8861] schedule+0xe7/0x3a0 [ 278.461855][ T8861] exit_to_user_mode_loop+0x67/0x110 [ 278.461871][ T8861] __do_fast_syscall_32+0x2ac/0x3a0 [ 278.461881][ T8861] do_fast_syscall_32+0x32/0x80 [ 278.461891][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.461903][ T8861] [ 278.461903][ T8861] other info that might help us debug this: [ 278.461903][ T8861] [ 278.461906][ T8861] Chain exists of: [ 278.461906][ T8861] console_owner --> &p->pi_lock --> &rq->__lock [ 278.461906][ T8861] [ 278.461920][ T8861] Possible unsafe locking scenario: [ 278.461920][ T8861] [ 278.461922][ T8861] CPU0 CPU1 [ 278.461925][ T8861] ---- ---- [ 278.461927][ T8861] lock(&rq->__lock); [ 278.461933][ T8861] lock(&p->pi_lock); [ 278.461940][ T8861] lock(&rq->__lock); [ 278.461946][ T8861] lock(console_owner); [ 278.461952][ T8861] [ 278.461952][ T8861] *** DEADLOCK *** [ 278.461952][ T8861] [ 278.461954][ T8861] 4 locks held by syz.2.740/8861: [ 278.461960][ T8861] #0: ffff88802b33a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 278.461983][ T8861] #1: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590 [ 278.462009][ T8861] #2: ffffffff8e5b2640 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 278.462035][ T8861] #3: ffffffff8e5b26b0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 278.462057][ T8861] [ 278.462057][ T8861] stack backtrace: [ 278.462062][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.2.740 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 278.462075][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.462082][ T8861] Call Trace: [ 278.462085][ T8861] [ 278.462090][ T8861] dump_stack_lvl+0x116/0x1f0 [ 278.462100][ T8861] print_circular_bug+0x275/0x350 [ 278.462114][ T8861] check_noncircular+0x14c/0x170 [ 278.462130][ T8861] __lock_acquire+0x126f/0x1c90 [ 278.462146][ T8861] lock_acquire+0x179/0x350 [ 278.462160][ T8861] ? console_lock_spinning_enable+0x9f/0xd0 [ 278.462170][ T8861] ? console_lock_spinning_enable+0x88/0xd0 [ 278.462182][ T8861] console_lock_spinning_enable+0xb0/0xd0 [ 278.462191][ T8861] ? console_lock_spinning_enable+0x9f/0xd0 [ 278.462201][ T8861] console_flush_all+0x7aa/0xc60 [ 278.462212][ T8861] ? __pfx_console_flush_all+0x10/0x10 [ 278.462224][ T8861] ? is_printk_cpu_sync_owner+0x32/0x40 [ 278.462237][ T8861] console_unlock+0xd8/0x210 [ 278.462247][ T8861] ? __pfx_console_unlock+0x10/0x10 [ 278.462256][ T8861] ? do_raw_spin_unlock+0x90/0x230 [ 278.462273][ T8861] ? _printk+0xc7/0x100 [ 278.462287][ T8861] ? __down_trylock_console_sem+0xb0/0x140 [ 278.462303][ T8861] vprintk_emit+0x418/0x6d0 [ 278.462313][ T8861] ? __pfx_vprintk_emit+0x10/0x10 [ 278.462324][ T8861] ? __pfx_stack_trace_save+0x10/0x10 [ 278.462340][ T8861] ? cmp_ex_search+0x8b/0xb0 [ 278.462350][ T8861] _printk+0xc7/0x100 [ 278.462364][ T8861] ? __pfx__printk+0x10/0x10 [ 278.462378][ T8861] ? strncpy_from_user+0x1d5/0x2e0 [ 278.462394][ T8861] ? __update_page_owner_handle+0x395/0x550 [ 278.462405][ T8861] ? __pfx____ratelimit+0x10/0x10 [ 278.462422][ T8861] ? __pfx_trace_clock_local+0x10/0x10 [ 278.462439][ T8861] should_fail_ex+0x4e7/0x640 [ 278.462450][ T8861] strncpy_from_user+0x3b/0x2e0 [ 278.462466][ T8861] strncpy_from_user_nofault+0x7f/0x180 [ 278.462479][ T8861] bpf_bprintf_prepare+0xede/0x14b0 [ 278.462491][ T8861] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 278.462503][ T8861] ? bpf_trace_run2+0x3db/0x590 [ 278.462517][ T8861] bpf_trace_printk+0xda/0x190 [ 278.462530][ T8861] ? __pfx_bpf_trace_printk+0x10/0x10 [ 278.462543][ T8861] ? bpf_trace_run2+0x3db/0x590 [ 278.462559][ T8861] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 278.462568][ T8861] bpf_trace_run2+0x233/0x590 [ 278.462586][ T8861] ? __pfx_bpf_trace_run2+0x10/0x10 [ 278.462601][ T8861] ? __lock_acquire+0x622/0x1c90 [ 278.462615][ T8861] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 278.462630][ T8861] __bpf_trace_contention_begin+0xc9/0x110 [ 278.462645][ T8861] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 278.462660][ T8861] ? _kstrtoull+0x145/0x200 [ 278.462674][ T8861] ? __pfx__kstrtoull+0x10/0x10 [ 278.462690][ T8861] __traceiter_contention_begin+0x5a/0xa0 [ 278.462705][ T8861] trace_contention_begin.constprop.0+0xde/0x160 [ 278.462722][ T8861] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 278.462733][ T8861] ? __lock_acquire+0xb8a/0x1c90 [ 278.462747][ T8861] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 278.462761][ T8861] do_raw_spin_lock+0x20e/0x2b0 [ 278.462777][ T8861] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.462793][ T8861] ? rcu_qs+0x2b/0xe0 [ 278.462802][ T8861] ? rcu_note_context_switch+0x192/0x1e00 [ 278.462814][ T8861] raw_spin_rq_lock_nested+0x7e/0x130 [ 278.462825][ T8861] ? schedule+0xe7/0x3a0 [ 278.462839][ T8861] ? schedule+0xe7/0x3a0 [ 278.462857][ T8861] __schedule+0x301/0x5dd0 [ 278.462872][ T8861] ? ksys_write+0x190/0x250 [ 278.462900][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.462911][ T8861] ? __pfx___schedule+0x10/0x10 [ 278.462927][ T8861] ? __fget_files+0x20e/0x3c0 [ 278.462943][ T8861] ? handle_mm_fault+0x230/0xd10 [ 278.462959][ T8861] ? fput+0x70/0xf0 [ 278.462971][ T8861] ? ksys_write+0x1ac/0x250 [ 278.462980][ T8861] schedule+0xe7/0x3a0 [ 278.462996][ T8861] exit_to_user_mode_loop+0x67/0x110 [ 278.463013][ T8861] __do_fast_syscall_32+0x2ac/0x3a0 [ 278.463024][ T8861] do_fast_syscall_32+0x32/0x80 [ 278.463035][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.463047][ T8861] RIP: 0023:0xf7f96579 [ 278.463055][ T8861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.463066][ T8861] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 278.463076][ T8861] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00000000f50b6610 [ 278.463082][ T8861] RDX: 0000000000000001 RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 278.463088][ T8861] RBP: 00000000f7454f80 R08: 0000000000000000 R09: 0000000000000000 [ 278.463094][ T8861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 278.463100][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.463109][ T8861] [ 278.854774][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.2.740 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 278.854798][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.854810][ T8861] Call Trace: [ 278.854816][ T8861] [ 278.854823][ T8861] dump_stack_lvl+0x116/0x1f0 [ 278.854845][ T8861] should_fail_ex+0x512/0x640 [ 278.854865][ T8861] strncpy_from_user+0x3b/0x2e0 [ 278.854893][ T8861] strncpy_from_user_nofault+0x7f/0x180 [ 278.854916][ T8861] bpf_bprintf_prepare+0xede/0x14b0 [ 278.854938][ T8861] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 278.854960][ T8861] ? bpf_trace_run2+0x3db/0x590 [ 278.854983][ T8861] bpf_trace_printk+0xda/0x190 [ 278.855004][ T8861] ? __pfx_bpf_trace_printk+0x10/0x10 [ 278.855027][ T8861] ? bpf_trace_run2+0x3db/0x590 [ 278.855054][ T8861] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 278.855069][ T8861] bpf_trace_run2+0x233/0x590 [ 278.855092][ T8861] ? __pfx_bpf_trace_run2+0x10/0x10 [ 278.855117][ T8861] ? __lock_acquire+0x622/0x1c90 [ 278.855141][ T8861] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 278.855165][ T8861] __bpf_trace_contention_begin+0xc9/0x110 [ 278.855190][ T8861] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 278.855213][ T8861] ? _kstrtoull+0x145/0x200 [ 278.855235][ T8861] ? __pfx__kstrtoull+0x10/0x10 [ 278.855261][ T8861] __traceiter_contention_begin+0x5a/0xa0 [ 278.855285][ T8861] trace_contention_begin.constprop.0+0xde/0x160 [ 278.855335][ T8861] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 278.855357][ T8861] ? __lock_acquire+0xb8a/0x1c90 [ 278.855378][ T8861] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 278.855400][ T8861] do_raw_spin_lock+0x20e/0x2b0 [ 278.855426][ T8861] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.855451][ T8861] ? rcu_qs+0x2b/0xe0 [ 278.855467][ T8861] ? rcu_note_context_switch+0x192/0x1e00 [ 278.855485][ T8861] raw_spin_rq_lock_nested+0x7e/0x130 [ 278.855502][ T8861] ? schedule+0xe7/0x3a0 [ 278.855522][ T8861] ? schedule+0xe7/0x3a0 [ 278.855545][ T8861] __schedule+0x301/0x5dd0 [ 278.855569][ T8861] ? ksys_write+0x190/0x250 [ 278.855593][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.855613][ T8861] ? __pfx___schedule+0x10/0x10 [ 278.855637][ T8861] ? __fget_files+0x20e/0x3c0 [ 278.855662][ T8861] ? handle_mm_fault+0x230/0xd10 [ 278.855688][ T8861] ? fput+0x70/0xf0 [ 278.855707][ T8861] ? ksys_write+0x1ac/0x250 [ 278.855723][ T8861] schedule+0xe7/0x3a0 [ 278.855749][ T8861] exit_to_user_mode_loop+0x67/0x110 [ 278.855777][ T8861] __do_fast_syscall_32+0x2ac/0x3a0 [ 278.855797][ T8861] do_fast_syscall_32+0x32/0x80 [ 278.855812][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.855826][ T8861] RIP: 0023:0xf7f96579 [ 278.855835][ T8861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.855845][ T8861] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 278.855856][ T8861] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00000000f50b6610 [ 278.855862][ T8861] RDX: 0000000000000001 RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 278.855868][ T8861] RBP: 00000000f7454f80 R08: 0000000000000000 R09: 0000000000000000 [ 278.855875][ T8861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 278.855881][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.855890][ T8861] [ 278.968505][ T8675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.985081][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.987028][ T8859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.020755][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.028682][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.031780][ T8859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.051989][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.053979][ T8859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.060597][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.062512][ T8859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 279.298729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.379030][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.382033][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.385065][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.404161][ T8681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.473312][ T8681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.552127][ T8681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.601226][ T8681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.708490][ T8681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.712153][ T8681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.716727][ T8681] bond0 (unregistering): Released all slaves [ 280.015916][ T8681] hsr_slave_0: left promiscuous mode [ 280.017712][ T8681] hsr_slave_1: left promiscuous mode [ 280.021250][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.023335][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.025765][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.027828][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.031940][ T8681] veth1_macvtap: left promiscuous mode [ 280.033539][ T8681] veth0_macvtap: left promiscuous mode [ 280.035280][ T8681] veth1_vlan: left promiscuous mode [ 280.112271][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.192583][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.196392][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.203886][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.227506][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 280.258121][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 280.341793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.696062][ T8681] IPVS: stop unused estimator thread 0... [ 280.755194][ T8681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.759613][ T8681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.813815][ T8681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.817887][ T8681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.873873][ T8681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.878142][ T8681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.942226][ T8681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.945461][ T8681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 281.026730][ T8681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.082356][ T8681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.144492][ T8681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.211979][ T8681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.284961][ T8681] bridge_slave_1: left allmulticast mode [ 281.287157][ T8681] bridge_slave_1: left promiscuous mode [ 281.289198][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.292132][ T8681] bridge_slave_0: left promiscuous mode [ 281.293950][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.297506][ T8681] bridge_slave_1: left allmulticast mode [ 281.300644][ T8681] bridge_slave_1: left promiscuous mode [ 281.302441][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.305337][ T8681] bridge_slave_0: left allmulticast mode [ 281.307433][ T8681] bridge_slave_0: left promiscuous mode [ 281.310257][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.463990][ T8681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.467921][ T8681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.472479][ T8681] bond0 (unregistering): Released all slaves [ 281.574016][ T8681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.577404][ T8681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.580690][ T8681] bond0 (unregistering): Released all slaves [ 281.631847][ T8681] bond1 (unregistering): Released all slaves [ 281.699273][ T8681] : left promiscuous mode [ 281.810206][ T8681] tipc: Disabling bearer [ 281.811895][ T8681] tipc: Left network mode [ 282.053566][ T8681] hsr_slave_0: left promiscuous mode [ 282.055542][ T8681] hsr_slave_1: left promiscuous mode [ 282.057436][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.060046][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.062552][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.064909][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.068857][ T8681] hsr_slave_0: left promiscuous mode [ 282.070897][ T8681] hsr_slave_1: left promiscuous mode [ 282.072755][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.075064][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.077872][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.080265][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.085385][ T8681] veth1_macvtap: left promiscuous mode [ 282.087154][ T8681] veth0_macvtap: left promiscuous mode [ 282.089011][ T8681] veth1_vlan: left promiscuous mode [ 282.090664][ T8681] veth0_vlan: left promiscuous mode [ 282.092566][ T8681] veth1_macvtap: left promiscuous mode [ 282.094310][ T8681] veth0_macvtap: left promiscuous mode [ 282.096098][ T8681] veth1_vlan: left promiscuous mode [ 282.097791][ T8681] veth0_vlan: left promiscuous mode [ 282.258070][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 282.292139][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 282.515749][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 282.552560][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 282.703661][ T6040] lo speed is unknown, defaulting to 1000 [ 282.705717][ T6040] infiniband syz0: ib_query_port failed (-19) [ 283.295649][ T8681] IPVS: stop unused estimator thread 0... [ 283.297945][ T8681] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 20:26:01 Registers: info registers vcpu 0 CPU#0 RAX=00000000002f1334 RBX=0000000000000000 RCX=ffffffff8b82bc69 RDX=ffffed1005646646 RSI=ffffffff8c155e60 RDI=ffffffff819197c1 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000066be5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556d185 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc90006e8f208 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b09f500 R15=ffffffff8556d120 RIP=ffffffff8556d1af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809762d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002841b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341f20 RCX=ffffffff81af491d RDX=ffff88802427c880 RSI=ffffffff81af48f9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900036174d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056683e5 R15=ffff88802b43b6c0 RIP=ffffffff81af48fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7434ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b341f60 RCX=ffffffff81af491d RDX=ffff888020252440 RSI=ffffffff81af48f9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000074f958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056683ed R15=ffff88802b53b6c0 RIP=ffffffff81af48fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000