last executing test programs: 1m3.819274143s ago: executing program 2 (id=10): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x6, {0x764ce3c9, 0xffffffc0, 0x2, 0x200}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) 1m3.730336496s ago: executing program 2 (id=11): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f0000000880), 0x40, 0x185280) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setresgid(0xee00, r5, 0x0) setgroups(0x2, &(0x7f0000000080)=[r5, 0xee00]) sendmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="d7d5a0ef20c083db7310881694cf2461a0c9e838eb1d7800bf1bd23e301b907e3353cadcf0bdd0e331743b43b949833fa16f045fad8799282931fadd0f30aba4d987f574df97683b7e866efcb8043aed52f65140463331c8177f973a909c916f02c8bb17d369f7f45f8bcfcc1d7f6441ff25ffa474df7730960f51c890f14de3fd2cfc75b564f329be97e651a32db48fcb7c9436a6878bc32e1aca78e35689a1ffbd9b0e74983cda06", 0xa9}, {&(0x7f00000001c0)="f5f4830dbe89813741bff524bc6bf41032f427220ffa8aa62913d66de4d9adc2badf586369914694fe78cb5780a0bc4b8f6b60ce3ebb2bc76240039af2f5babfb4363b350d774fb1cb929c18611441beed67c9a38d6e27546626d9c496583f560f2b7018fa60b355e5e301d92b75c48c67949cd7c2730576e9491ba29d3951e63bf27d90826a93d1a0b909b1e55b05c0c0b654a5ce91e679b242d66e", 0x9c}, {&(0x7f0000000300)="5c666ad66b11e80908b36f618c2b88620fcad8bd5e8ec7bb4bf349e2c2866c9d564baacb647f5b2ddac168dc6fa98514b43f2208074aca2cfcdac8957864da7ecd7d86c832b13e15822e8385efb62400d4c0a2f748", 0x55}, {&(0x7f0000000380)="c7702f8baf8a92d14b30eea09375982ad02d2fe4f10f000374a705636eaa07731c5a85ae091d485a5a5e42da9223f0d47f7a11299a2404948c9a7fd32969c00392e5477995c4eae7d56449e2c28e266b4f7656e273ede44673f63c4084205085a93270152b08cfb825f67a16b69515", 0x6f}, {&(0x7f0000000280)="fd0378082460b32533dcc68b583e9bda18edba26d5d1778201cb89937e56cd2d42818d1fe6", 0x25}], 0x5, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, r3, r5}}}], 0x18, 0x4000}}, {{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000005c0)="6a2983c1fa9942779c6174bb4348d97ba2c73aaeeb89867a091c68b57a", 0x1d}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000600)="981c087abfdb174c766fe4d5331ffcf2c33295682e8a5e64b7860fde56dba3b0b206d613247967971ddfa576bc24f32eacda649c8877761e025e5e209a90a7c560d256610b1a14077abac7b2efd0b916f681ee71ef63c3c532ec72c81f07cbf7fd97cb2f826af8b7ef308fd32829f58e74e2b785dd28d10688fe530511af780c17647a27c64805a25362b0f9b5508259fbbbff008767be5d68ffa9096130d104a3e922f116fca91f75a3d89c7f3179185a148fe6b94c768532c0163a69b9a6eee9dfa4569328cf83a985735a55625f2ae242a69ab2b5781ffac62651b74cef676994ccaca474b9e6b0a2a686e6", 0xed}, {&(0x7f0000000700)="83a860c11acc7c72d3317831b2c09fc549faa306b3a57fe5cea264343ae4a695bda112cfd113dbeb4b0ab792e5e464046bc13ce33c82e00fc2372fcf2920e10f34a38e326c7c79c7807b1b08b868e1442e0909642b90422998063ec3e53a26d1a744ffac786ca94120fac4186f506ac5455839a4510b7f6ede52102b48c38bc8dab09d1c4ce5", 0x86}, {&(0x7f00000007c0)="bd5718c0047ef6a596f9f7b0a269e53c07111ea9b1d8efeafb8453683856e2b334efe3c5aff0115e9f19cb5f80a725d6f3194ab09dcd2ae48ad4c711cc457d2d7ab46215994dc472c0948186f207a7479684d2580289301d5dbdcee8ee8f28278adc9cbe4247b60cb8502e7b6f8c4b10ffa37ff6c02fe577ea50a437e2323eb365", 0x81}, {&(0x7f00000019c0)="24c75890c1a221e435f7ec21b69e6a55abf6c03ae07d28fd3cf3f797a6154d1ecd6ee3520bb73f49d2cb306aca59b376387da229cc6b718a8938f1ed5997a1c024a85ab4ff05b163829a81a19777c50e49704084ad403ec903cb3e068ecd325a3228beeeb0bfbf8890b91fb105cff8376b432df7dbc1672faf6f37f5ed306607eb743eceb1c3c296b47d70752733143cb4332ad10933826e26c06b449b28abaf507638c1405d906d7d3fd19d7be6deb37ec5e6924d10082e2245da1148bc38527b95cbc1b0b9573209", 0xc9}], 0x6, 0x0, 0x0, 0xc040}}], 0x2, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x4e21, @loopback}}) 1m2.295477765s ago: executing program 2 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xe8, 0x2b8, 0x182, 0xe8, 0x1c00, 0x208, 0x3a8, 0x3a8, 0x208, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xec, 0x120, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x1}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x4}, 0x67a7, 0x9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x32c) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 1m1.06088883s ago: executing program 2 (id=18): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) 1m0.995116167s ago: executing program 2 (id=19): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000050000000000170100000000690076000030613000"], &(0x7f0000000580)=""/73, 0x2d, 0x49, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r4, 0x20, &(0x7f00000004c0)={&(0x7f0000001000)=""/107, 0x6b, 0x0, &(0x7f0000001080)=""/79, 0x4f}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) close(r6) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 1m0.731366099s ago: executing program 2 (id=20): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000100)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1000100) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) iopl(0x3) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x8}, 0x90) ioctl$RTC_PIE_ON(r2, 0x7005) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) fstat(r2, &(0x7f0000000240)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{}, 0x100, './file0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x7e0bb8f7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x5, 0x0, 0x8}, 0x20) r4 = openat$hpet(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"d9f205b1692c7c1427afb7a07628fc10cbedb04aa99c0941671d2005984240e8", r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m0.693624375s ago: executing program 32 (id=20): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000100)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1000100) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) iopl(0x3) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x8}, 0x90) ioctl$RTC_PIE_ON(r2, 0x7005) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) fstat(r2, &(0x7f0000000240)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{}, 0x100, './file0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x7e0bb8f7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x5, 0x0, 0x8}, 0x20) r4 = openat$hpet(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"d9f205b1692c7c1427afb7a07628fc10cbedb04aa99c0941671d2005984240e8", r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 20.75102339s ago: executing program 1 (id=294): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x21) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x15bd, 0x81, 0x20203843, 0x0, [0x2]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f048}) bind$alg(r5, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000540)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 20.380326675s ago: executing program 1 (id=297): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 7) 20.379258296s ago: executing program 1 (id=298): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) mknod(0x0, 0x1000, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 19.871011083s ago: executing program 1 (id=304): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0xd6, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x700, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x47, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "ccf0294e2a3bdb4aa4"}]}, @ssrr={0x89, 0xb, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "a811a23da43974ff"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x40000000015, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0x3]}) 13.040308448s ago: executing program 1 (id=304): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0xd6, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x700, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x47, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "ccf0294e2a3bdb4aa4"}]}, @ssrr={0x89, 0xb, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "a811a23da43974ff"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x40000000015, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0x3]}) 5.316953629s ago: executing program 1 (id=304): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0xd6, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x700, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x47, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "ccf0294e2a3bdb4aa4"}]}, @ssrr={0x89, 0xb, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "a811a23da43974ff"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x40000000015, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0x3]}) 3.130985008s ago: executing program 4 (id=409): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(r9, 0x0, 0x4, &(0x7f0000000380)=""/209, &(0x7f0000000780)=0xd1) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xa}, {0xfff2, 0x4}, {0xa, 0x1}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x200}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb6e3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x800) 3.011174066s ago: executing program 4 (id=410): dup(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c001000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x9, {"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", 0x1000}}, 0x1006) r10 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) unshare(0x22020600) ioctl$LOOP_SET_DIRECT_IO(r10, 0x4c08, 0x591) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r12, 0x400, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$setlease(r13, 0x400, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000"], 0x184}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @random="6a177a00", @val={@void, {0x8100, 0x1, 0x1, 0xfff}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @rand_addr=0xac1e0001, @random="8ec66f350ba6", @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x73) 2.807224729s ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000900000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="e1c7e47d541d7363e60500000004004000030000000b000000000000003875250fa7bccb9272ed61f2010f1b4e0a3e3611f907330e2a7d248fc463dfbf8f228e60c1bd39bee37ffe4f51e59a486e8e4be55133af0774212975f1cffaf25eebf08877e3eabad22c08613ae013ee529c588f1976c4a0983e77a98e6c39b27d6d4f4f74a18e6bd0008f3f4c2889fc41bba53fa9fa9749c00bf8e6e322c9ee511ad6176261cba74f866dba95055b1d4160e7d9cd8a6a38eda3a948c0767d30435c35a9b00f9c75bb443aab93ae40ade111d85d2f28d0ed17", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x2, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xfffd}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) epoll_create1(0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x25549000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e059a0020c69837fa9380a6a017661158c399cebc4537af31f875c17f787101ff69e10ec9f87cb6e0832fff0c716a1ee7ca9954b9b92731a6c830d35a8c103eee281403b543f6c67fa41bbe7b0fc4d936ada431fbc9ce7ec78471fd9f0e5427081fcd3282785ce578b65cdb8418ffc54999bc48c0e94d887ff7eca08674175a858fe6ea7a42577c480dd5c5c974b92c5f7f9832c6c438d5fdb0a23c3d783dd76ffc3456eaec468448640d11d8e08b28"], 0x8) syz_io_uring_setup(0x238, &(0x7f0000000400)={0x0, 0xffffffff, 0x200, 0x0, 0x367}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) 2.297623676s ago: executing program 3 (id=416): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) stat64(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) 2.211469265s ago: executing program 3 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x20004000) 1.951258123s ago: executing program 3 (id=418): request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)='.$/\x00', 0xfffffffffffffffa) 1.82014029s ago: executing program 3 (id=422): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000020000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x39, &(0x7f00000003c0)=""/57, 0x0, 0xd, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r3, r0, r0, r1], 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0x15bd, 0x81, 0x20203843, 0x0, [0x2]}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f048}) bind$alg(r7, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000540)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 1.544225766s ago: executing program 4 (id=423): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x121}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) close_range(r2, 0xffffffffffffffff, 0xd007) 1.410692241s ago: executing program 3 (id=425): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) stat64(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) 1.410166951s ago: executing program 0 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x20004000) 1.40973807s ago: executing program 0 (id=427): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000900), 0x14, r0}, 0x38) 1.361197606s ago: executing program 0 (id=428): r0 = syz_open_dev$cec(&(0x7f00000011c0), 0x0, 0x80) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000001200)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001500)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000001280)=ANY=[@ANYBLOB="0100000000000000e100000078d6671af8e90ff25fff17c0000003000000000000000000ec1633671071fd1cb1d65eed4f695ffdd25221e2251a970d14d1dc8bf7bc8a0bfbe95ceb9217a9a09a59e30ee10f80df7284cbcb8f7395aed4b3c6525ba8"]) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001300)=0x407) r7 = add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000001400)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a318546a0982f8938caa52dd8d39af14c31ed56ad59300", 0x8}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f893d56ad59300", 0x29}, 0x48, r7) keyctl$KEYCTL_MOVE(0x4, r7, r7, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006"], 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x0, 0x0) (async) r9 = epoll_create(0xb) (async) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x1}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000100)) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (async) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) (async) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000040)=0xffffff7f, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="49d77cfce4d6ffbc16070000e15215cc5c9dc0e4a5cb2a42f594c2573245eef41d41e8bd9d5d0cb2db781b7c3114f394dca8f4ba2c7af8b928a6c3821281fa2c5efaad23bf4337a2bc6f87b005f1b25eb88735becc08a491886ea12c21c09000fb3a0a664568df55c6f8a4566bc0fbd8b58b6d91eb", @ANYRES32, @ANYRES64=0x0], 0x10) 1.360896103s ago: executing program 3 (id=429): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYBLOB="0000000000000000001d000000008f6403d194d433562546a65fe8589b2d19a9e86738da9b1e6d337e3727cf9ba92789ed12d0be956a986d479516e90335c81839fbce9088a9a014801bbb9d06f40bbdc6606bb87bf70abf171f26d6fb2162edc8b2ca963dd7cf1d7858834d9da58074d214ca6955f8f9e6ed92862f881528d83c4cbdbb50706a5840c47eb1436968fe5f5e897fdbc12a881bb2950c04f561779960f530eb98078873b028e2741c41e3c918cf654836ee103b21d5b6156ff9162ce9314e001719dacd9fadbc74b32e"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYBLOB="8b7ab53af12dc3afae51aa85122027b869e8b04555ef4654c406cc9514a1c515d52a71d54d18ec400d68e6b260322cc7cc50989c561651653ff792d837b9f1229ae65b89bf8694ac7eba03264ea9b832e77f15c5752be01e0b3c1cbffa5e9e587224b272ef96b1c293f0cbbe1de6dc582a23400a8cd7e5ce3a93e564b9415043ac7d8e67e048e5f1e7bf499c6cc24e53ebf803e2e300bcfa98cf1c3ca95c88a7ea3f1b67776134a716b8f1315b992bd70bfaa5d957f5392129de189b784b160d62afb46ba00920069ecb8684fe83c8fd9a1dd652ba7101b40152d120a393b75e8ca0fb599e56a27bd62907fca3eef5cf3b57"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) 1.3606469s ago: executing program 0 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000046c76119223f450200000000"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYBLOB="34ff79470d8d77e1ee58bc530ec5d7c5828d4702ba3c764b5f911eae0e345206e0a299e7dbd2d9915fd4f0513f1685477fb0335feeb89c4dba6ad8164d93e624151edc58808c89be7b87448c"], &(0x7f0000000440)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x80035, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f0000000380)=[{0x9, 0x10, 0x9, 0x7}, {0x13, 0x4, 0x1}, {0x275, 0x0, 0xc, 0xa9d}, {0x4, 0x7, 0x8, 0x1000}, {0x4, 0x4, 0xf}, {0x8, 0x9, 0x63, 0x4}, {0x4, 0x10, 0x6, 0xfff}, {0xf73, 0x1, 0x5d, 0x8}, {0x9, 0x3, 0x2, 0x800}]}, 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x2e0d01) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000400)={0x0, 0x7, 0x7, &(0x7f0000000340)={0x9, "f4e1a230be8f463a3fb1a5f1b44f44eaa65e485b747aa95d0000000007677d18bc"}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x7, &(0x7f0000000300)=[{0x8f22, 0x0, 0x0, 0x7ffffffd}, {0xfffc, 0xdc, 0x9}, {0x8, 0x43, 0x71, 0x3}, {0xfffe, 0x4, 0x2, 0xfff}, {0xd, 0x0, 0x1, 0x7}, {0x5, 0x3, 0x9, 0x5}, {0x38, 0xef, 0x80, 0x3}]}) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e1e, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3484d97a}}, 0x9, 0x7, 0x3, 0x3, 0xb6, 0xe400}, 0xfffffffffffffed6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast1}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3c30}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 596.12703ms ago: executing program 4 (id=431): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) 595.558616ms ago: executing program 4 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r8 = dup(r3) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB]) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="eb9ff4f8ce66abfe7bf2928ed4ee78cf10b32ce299a58f28b81c77f9cabe14dc", @ANYRES16=r1, @ANYBLOB="32e35bb6bf01e5678c68fbf268867735d2c1f4757bb47afe64315b4338534ca070332dda112eed4212caa783113fa36cd9e8b4dc314e2678c293ae5f44abe7facad8d6a62855cf5c7a1b96b7be", @ANYRESHEX=0x0, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRESHEX=r7]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setregid(0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000d40), 0x4000001, 0x7917c0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r9, 0xc04064aa, &(0x7f0000000400)={0x0, 0x0}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x800) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7) 411.216177ms ago: executing program 0 (id=433): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000020000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x39, &(0x7f00000003c0)=""/57, 0x0, 0xd, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r3, r0, r0, r1], 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0x15bd, 0x81, 0x20203843, 0x0, [0x2]}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f048}) bind$alg(r7, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000540)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=434): mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x6) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x0, r4}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r5, 0xab02, 0xffffff00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r7 = eventfd(0x2) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000180)={0x0, r7}) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000004240)='devpts\x00', 0x2000480, 0x0) r8 = dup2(r0, r1) read$FUSE(r8, &(0x7f0000004280)={0x2020}, 0x2020) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0xb, 0x2, 0x5000000, 0x4ed, 0x0, 0x27f, 0x0, 0x401, 0x5, 0x6, 0x5, 0x8, 0x2, 0x3, 0x8000, 0x1, 0x200, 0x5, 0x8001, 0x80, 0x9, 0x0, 0x7ff, 0xfffffffb, 0xfff, 0x81a, 0xfffffffc, 0x3, 0x7, 0x3, 0xea61, 0x6, 0x0, 0x7, 0x100, 0x8, 0x7fffffff, 0x7, 0x12000000, 0x9f8, 0x3, 0x2, 0xca, 0x6, 0xfffffffe, 0x2552, 0x4, 0x4, 0x80, 0x48, 0x3ff, 0x3, 0xfffffff7, 0x9, 0x3, 0x8, 0xf, 0x6, 0x1, 0x9, 0x8, 0x6, 0x4, 0x4, 0x7, 0xfffffffb, 0x5ec4, 0x6, 0x10000, 0xe, 0xfffffffc, 0x6, 0x7df, 0x7, 0x80000001, 0xbc5, 0xd2, 0x0, 0xfffffff9, 0x80, 0xfffff1f1, 0x1bb40000, 0xc74, 0xf641, 0x1, 0x578, 0x18, 0xd, 0x2, 0x0, 0x8, 0xaeb, 0xb, 0x0, 0x3, 0xe8, 0x0, 0x2, 0x3, 0xe0, 0xc4, 0x9, 0xb9c7, 0x74, 0xfffffff9, 0x7, 0x6, 0x9, 0x7, 0x3, 0x5, 0x4, 0x5, 0x3, 0xfe, 0x1, 0x7f, 0x8, 0xa, 0x400, 0x2, 0x100, 0x9, 0x24, 0x56f, 0x0, 0x4], "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"}}) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000d40)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000280)=0x7) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r11}, 0x8) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) kernel console output (not intermixed with test programs): 58.328659][ T6398] __sys_bpf+0x5677/0x57a0 [ 58.330007][ T6398] ? __pfx_lock_release+0x10/0x10 [ 58.331684][ T6398] ? __pfx___sys_bpf+0x10/0x10 [ 58.333265][ T6398] ? vfs_write+0x306/0x1150 [ 58.334608][ T6398] ? __mutex_unlock_slowpath+0x164/0x690 [ 58.336227][ T6398] ? fput+0x67/0x440 [ 58.337527][ T6398] ? ksys_write+0x1ba/0x250 [ 58.339073][ T6398] ? __pfx_ksys_write+0x10/0x10 [ 58.340806][ T6398] __ia32_sys_bpf+0x76/0xe0 [ 58.342428][ T6398] __do_fast_syscall_32+0x73/0x120 [ 58.344233][ T6398] do_fast_syscall_32+0x32/0x80 [ 58.345939][ T6398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.348137][ T6398] RIP: 0023:0xf7f82579 [ 58.349584][ T6398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 58.356027][ T6398] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 58.358903][ T6398] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000a80 [ 58.361664][ T6398] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.364412][ T6398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.367152][ T6398] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 58.369962][ T6398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.372751][ T6398] [ 58.379348][ T6398] Mem-Info: [ 58.384985][ T6398] active_anon:5017 inactive_anon:337 isolated_anon:0 [ 58.384985][ T6398] active_file:10936 inactive_file:33283 isolated_file:0 [ 58.384985][ T6398] unevictable:1768 dirty:419 writeback:0 [ 58.384985][ T6398] slab_reclaimable:7207 slab_unreclaimable:55996 [ 58.384985][ T6398] mapped:24019 shmem:2443 pagetables:829 [ 58.384985][ T6398] sec_pagetables:301 bounce:0 [ 58.384985][ T6398] kernel_misc_reclaimable:0 [ 58.384985][ T6398] free:62427 free_pcp:1251 free_cma:0 [ 58.424448][ T6398] Node 0 active_anon:4304kB inactive_anon:1348kB active_file:7964kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5072kB dirty:88kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9680kB pagetables:760kB sec_pagetables:1148kB all_unreclaimable? yes [ 58.433843][ T6398] Node 1 active_anon:15964kB inactive_anon:0kB active_file:35780kB inactive_file:133132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91156kB dirty:1588kB writeback:0kB shmem:4588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2760kB pagetables:2580kB sec_pagetables:56kB all_unreclaimable? no [ 58.445058][ T6398] Node 0 DMA free:2988kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:432kB inactive_anon:124kB active_file:356kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:188kB free_cma:0kB [ 58.452502][ T6398] lowmem_reserve[]: 0 273 0 0 0 [ 58.453860][ T6398] Node 0 DMA32 free:19924kB boost:2048kB min:15952kB low:19428kB high:22904kB reserved_highatomic:4096KB active_anon:3872kB inactive_anon:1224kB active_file:7608kB inactive_file:0kB unevictable:3536kB writepending:88kB present:1032196kB managed:306336kB mlocked:0kB bounce:0kB free_pcp:688kB local_pcp:140kB free_cma:0kB [ 58.462903][ T6398] lowmem_reserve[]: 0 0 0 0 0 [ 58.464895][ T6398] Node 1 DMA32 free:226184kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:16064kB inactive_anon:0kB active_file:35780kB inactive_file:133132kB unevictable:3536kB writepending:1588kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:4088kB local_pcp:772kB free_cma:0kB [ 58.473709][ T6398] lowmem_reserve[]: 0 0 0 0 0 [ 58.475339][ T6398] Node 0 DMA: 9*4kB (U) 49*8kB (U) 62*16kB (UE) 49*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2988kB [ 58.484626][ T6398] Node 0 DMA32: 22*4kB (UMEH) 159*8kB (UMEH) 54*16kB (UMEH) 182*32kB (UMEH) 74*64kB (UMEH) 17*128kB (UME) 7*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 19824kB [ 58.496733][ T6398] Node 1 DMA32: 52*4kB (UME) 376*8kB (UME) 308*16kB (UM) 268*32kB (UME) 202*64kB (UME) 26*128kB (UME) 17*256kB (UME) 11*512kB (M) 9*1024kB (UM) 6*2048kB (UM) 40*4096kB (M) = 228304kB [ 58.516582][ T6398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.523185][ T6398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.526490][ T6398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.529293][ T6398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 58.532201][ T6398] 46662 total pagecache pages [ 58.533485][ T6398] 0 pages in swap cache [ 58.534639][ T6398] Free swap = 124996kB [ 58.535729][ T6398] Total swap = 124996kB [ 58.536818][ T6398] 524155 pages RAM [ 58.537811][ T6398] 0 pages HighMem/MovableOnly [ 58.539048][ T6398] 206668 pages reserved [ 58.540090][ T6398] 0 pages cma reserved [ 58.844991][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.016464][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.019353][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.021840][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.025589][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.030744][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.036660][ T8] usb 5-1: config 0 descriptor?? [ 59.091845][ T6436] IPv6: NLM_F_REPLACE set, but no existing node found! [ 59.443044][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.449389][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.451318][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.453262][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.462314][ T30] usb 6-1: USB disconnect, device number 3 [ 59.465583][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.467531][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.469460][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.473266][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.475304][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.477260][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.479170][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 59.482189][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 59.491797][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 59.551759][ T6461] warning: `syz.3.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.674402][ T6466] sp0: Synchronizing with TNC [ 59.820478][ T25] usb 5-1: USB disconnect, device number 5 [ 59.901810][ T6486] FAULT_INJECTION: forcing a failure. [ 59.901810][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 59.905626][ T6486] CPU: 2 UID: 0 PID: 6486 Comm: syz.0.93 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 59.908432][ T6486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.911329][ T6486] Call Trace: [ 59.912217][ T6486] [ 59.913019][ T6486] dump_stack_lvl+0x16c/0x1f0 [ 59.914477][ T6486] should_fail_ex+0x497/0x5b0 [ 59.915757][ T6486] ? fs_reclaim_acquire+0xae/0x150 [ 59.917138][ T6486] should_failslab+0xc2/0x120 [ 59.918425][ T6486] __kmalloc_node_noprof+0xd1/0x520 [ 59.920193][ T6486] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 59.922330][ T6486] __kvmalloc_node_noprof+0xad/0x1a0 [ 59.924203][ T6486] alloc_netdev_mqs+0xe4f/0x1320 [ 59.925792][ T6486] ldisc_open+0x153/0x980 [ 59.927056][ T6486] ? tty_ldisc_reinit+0x185/0x360 [ 59.928405][ T6486] ? __pfx_ldisc_open+0x10/0x10 [ 59.929712][ T6486] ? down_write+0x14e/0x200 [ 59.930910][ T6486] ? __pfx_ldisc_open+0x10/0x10 [ 59.932213][ T6486] tty_ldisc_open+0x9c/0x120 [ 59.933484][ T6486] tty_ldisc_reinit+0x214/0x360 [ 59.934814][ T6486] tty_reopen+0x242/0x2a0 [ 59.936015][ T6486] tty_open+0xa86/0xf80 [ 59.937188][ T6486] ? chrdev_open+0x10e/0x6a0 [ 59.938469][ T6486] ? __pfx_tty_open+0x10/0x10 [ 59.939792][ T6486] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.941481][ T6486] ? lock_acquire+0x2f/0xb0 [ 59.942703][ T6486] ? chrdev_open+0x80/0x6a0 [ 59.943970][ T6486] ? __pfx_tty_open+0x10/0x10 [ 59.945192][ T6486] chrdev_open+0x237/0x6a0 [ 59.946370][ T6486] ? __pfx_apparmor_file_open+0x10/0x10 [ 59.947813][ T6486] ? __pfx_chrdev_open+0x10/0x10 [ 59.949112][ T6486] do_dentry_open+0xf59/0x1ea0 [ 59.950400][ T6486] ? __pfx_chrdev_open+0x10/0x10 [ 59.951702][ T6486] ? inode_permission+0xdd/0x5f0 [ 59.953012][ T6486] vfs_open+0x82/0x3f0 [ 59.954275][ T6486] ? may_open+0x1f2/0x400 [ 59.955788][ T6486] path_openat+0x1e6a/0x2d60 [ 59.957406][ T6486] ? __pfx_path_openat+0x10/0x10 [ 59.959110][ T6486] ? __pfx___lock_acquire+0x10/0x10 [ 59.960896][ T6486] ? lock_acquire.part.0+0x11b/0x380 [ 59.962720][ T6486] ? find_held_lock+0x2d/0x110 [ 59.964380][ T6486] do_filp_open+0x20c/0x470 [ 59.965961][ T6486] ? __pfx_do_filp_open+0x10/0x10 [ 59.967712][ T6486] ? find_held_lock+0x2d/0x110 [ 59.969415][ T6486] ? alloc_fd+0x41f/0x760 [ 59.970932][ T6486] do_sys_openat2+0x17a/0x1e0 [ 59.972564][ T6486] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.974161][ T6486] ? __fget_files+0x206/0x3a0 [ 59.975418][ T6486] __ia32_compat_sys_openat+0x16e/0x210 [ 59.976905][ T6486] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 59.978922][ T6486] ? ksys_write+0x1ba/0x250 [ 59.980569][ T6486] __do_fast_syscall_32+0x73/0x120 [ 59.982317][ T6486] do_fast_syscall_32+0x32/0x80 [ 59.983958][ T6486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.986158][ T6486] RIP: 0023:0xf744e579 [ 59.987581][ T6486] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 59.994256][ T6486] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 59.997204][ T6486] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 60.000063][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.002928][ T6486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.005793][ T6486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.008686][ T6486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.011440][ T6486] [ 60.084019][ T6491] FAULT_INJECTION: forcing a failure. [ 60.084019][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 60.087839][ T6491] CPU: 3 UID: 0 PID: 6491 Comm: syz.0.95 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 60.090623][ T6491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.094038][ T6491] Call Trace: [ 60.095255][ T6491] [ 60.096269][ T6491] dump_stack_lvl+0x16c/0x1f0 [ 60.097978][ T6491] should_fail_ex+0x497/0x5b0 [ 60.099479][ T6491] should_failslab+0xc2/0x120 [ 60.101050][ T6491] __kmalloc_cache_noprof+0x68/0x420 [ 60.102833][ T6491] rfcomm_dlc_alloc+0x82/0x280 [ 60.104485][ T6491] rfcomm_sock_alloc.constprop.0+0x22/0x280 [ 60.106483][ T6491] rfcomm_sock_create+0xed/0x160 [ 60.108238][ T6491] bt_sock_create+0x182/0x350 [ 60.109995][ T6491] __sock_create+0x335/0x8d0 [ 60.111461][ T6491] __sys_socket+0x14f/0x260 [ 60.112987][ T6491] ? __ia32_compat_sys_openat+0x16e/0x210 [ 60.114945][ T6491] ? __pfx___sys_socket+0x10/0x10 [ 60.116279][ T6491] ? ksys_write+0x1ba/0x250 [ 60.117555][ T6491] __ia32_sys_socket+0x72/0xb0 [ 60.118869][ T6491] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 60.120641][ T6491] __do_fast_syscall_32+0x73/0x120 [ 60.122101][ T6491] do_fast_syscall_32+0x32/0x80 [ 60.123433][ T6491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.125166][ T6491] RIP: 0023:0xf744e579 [ 60.126312][ T6491] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.131551][ T6491] RSP: 002b:00000000f513652c EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 60.134198][ T6491] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000001 [ 60.136280][ T6491] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00000000f513658c [ 60.138347][ T6491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.140401][ T6491] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.142580][ T6491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.144733][ T6491] [ 60.190898][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 60.664732][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.786739][ T6509] lo speed is unknown, defaulting to 1000 [ 61.231293][ T6522] cgroup: subsys name conflicts with all [ 61.375294][ T6522] Zero length message leads to an empty skb [ 61.907409][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.155101][ T5981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.314942][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 62.322086][ T5981] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 62.325725][ T5981] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 62.328291][ T5981] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 62.331431][ T5981] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 62.336027][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 62.339759][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 62.343181][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.348244][ T5981] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 62.351246][ T5981] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 62.353950][ T5981] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 62.360228][ T5981] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 62.369588][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 62.372544][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 62.376901][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.386480][ T5981] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 62.388848][ T5981] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 62.399797][ T5981] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 62.403052][ T5981] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 62.407775][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 62.411405][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 62.415721][ T5981] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.441638][ T5981] usb 5-1: string descriptor 0 read error: -22 [ 62.443943][ T5981] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.449470][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.480685][ T5981] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 63.336091][ T39] kauditd_printk_skb: 76 callbacks suppressed [ 63.336131][ T39] audit: type=1326 audit(1733385840.971:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.3.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 63.356634][ T39] audit: type=1326 audit(1733385840.971:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.3.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 63.363070][ T39] audit: type=1326 audit(1733385840.971:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.3.119" exe="/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 63.377214][ T39] audit: type=1326 audit(1733385840.971:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.3.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 63.392274][ T39] audit: type=1326 audit(1733385840.971:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.3.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 63.397653][ T5999] usb 5-1: USB disconnect, device number 6 [ 63.534984][ T6579] FAULT_INJECTION: forcing a failure. [ 63.534984][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 63.539913][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.1.122 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 63.543607][ T6579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.547342][ T6579] Call Trace: [ 63.548533][ T6579] [ 63.549645][ T6579] dump_stack_lvl+0x16c/0x1f0 [ 63.551357][ T6579] should_fail_ex+0x497/0x5b0 [ 63.553064][ T6579] ? fs_reclaim_acquire+0xae/0x150 [ 63.554860][ T6579] should_failslab+0xc2/0x120 [ 63.556470][ T6579] __kmalloc_cache_noprof+0x68/0x420 [ 63.558299][ T6579] ? lockdep_init_map_type+0x16d/0x7d0 [ 63.560165][ T6579] ? lockdep_init_map_type+0x16d/0x7d0 [ 63.562058][ T6579] nfc_allocate_device+0x15b/0x5e0 [ 63.563850][ T6579] ? __init_swait_queue_head+0xca/0x150 [ 63.565814][ T6579] nci_allocate_device+0x23b/0x430 [ 63.567684][ T6579] virtual_ncidev_open+0x6f/0x220 [ 63.569486][ T6579] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 63.571495][ T6579] misc_open+0x35a/0x420 [ 63.573019][ T6579] ? __pfx_misc_open+0x10/0x10 [ 63.574700][ T6579] chrdev_open+0x237/0x6a0 [ 63.576276][ T6579] ? __pfx_apparmor_file_open+0x10/0x10 [ 63.578229][ T6579] ? __pfx_chrdev_open+0x10/0x10 [ 63.579947][ T6579] do_dentry_open+0xf59/0x1ea0 [ 63.581619][ T6579] ? __pfx_chrdev_open+0x10/0x10 [ 63.583340][ T6579] ? inode_permission+0xdd/0x5f0 [ 63.585167][ T6579] vfs_open+0x82/0x3f0 [ 63.586618][ T6579] ? may_open+0x1f2/0x400 [ 63.588157][ T6579] path_openat+0x1e6a/0x2d60 [ 63.589814][ T6579] ? __pfx_path_openat+0x10/0x10 [ 63.591567][ T6579] ? __pfx___lock_acquire+0x10/0x10 [ 63.593404][ T6579] ? lock_acquire.part.0+0x11b/0x380 [ 63.595222][ T6579] ? find_held_lock+0x2d/0x110 [ 63.596923][ T6579] do_filp_open+0x20c/0x470 [ 63.598529][ T6579] ? __pfx_do_filp_open+0x10/0x10 [ 63.600242][ T6579] ? find_held_lock+0x2d/0x110 [ 63.601951][ T6579] ? alloc_fd+0x41f/0x760 [ 63.603449][ T6579] do_sys_openat2+0x17a/0x1e0 [ 63.605112][ T6579] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.606960][ T6579] ? __fget_files+0x206/0x3a0 [ 63.608601][ T6579] __ia32_compat_sys_openat+0x16e/0x210 [ 63.610457][ T6579] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 63.612532][ T6579] ? ksys_write+0x1ba/0x250 [ 63.614202][ T6579] __do_fast_syscall_32+0x73/0x120 [ 63.616000][ T6579] do_fast_syscall_32+0x32/0x80 [ 63.617712][ T6579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.620002][ T6579] RIP: 0023:0xf7fc2579 [ 63.621480][ T6579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.628036][ T6579] RSP: 002b:00000000f514657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 63.630840][ T6579] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 63.633226][ T6579] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.635635][ T6579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.638033][ T6579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.640387][ T6579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.642976][ T6579] [ 64.743941][ T6591] input: syz1 as /devices/virtual/input/input7 [ 64.787060][ T6598] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 64.790178][ T6598] netlink: 'syz.1.127': attribute type 9 has an invalid length. [ 64.792854][ T6598] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.127'. [ 64.805424][ T5999] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 64.808888][ T5999] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 64.818300][ T6598] syz.1.127 uses obsolete (PF_INET,SOCK_PACKET) [ 64.830981][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 64.934400][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 64.948297][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 65.053837][ T6611] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 65.232091][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 65.797303][ T6623] capability: warning: `syz.4.135' uses deprecated v2 capabilities in a way that may be insecure [ 66.181125][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 66.363359][ T6647] FAULT_INJECTION: forcing a failure. [ 66.363359][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.367851][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.4.142 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 66.371583][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.375390][ T6647] Call Trace: [ 66.376601][ T6647] [ 66.377660][ T6647] dump_stack_lvl+0x16c/0x1f0 [ 66.379318][ T6647] should_fail_ex+0x497/0x5b0 [ 66.380575][ T6647] _copy_from_user+0x2e/0xd0 [ 66.381836][ T6647] move_addr_to_kernel+0x68/0x160 [ 66.383180][ T6647] __sys_bind+0x11c/0x260 [ 66.384384][ T6647] ? __pfx___sys_bind+0x10/0x10 [ 66.385685][ T6647] ? __fget_files+0x206/0x3a0 [ 66.386942][ T6647] ? __pfx_ksys_write+0x10/0x10 [ 66.388261][ T6647] __ia32_sys_bind+0x71/0xb0 [ 66.389506][ T6647] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 66.391279][ T6647] __do_fast_syscall_32+0x73/0x120 [ 66.392634][ T6647] do_fast_syscall_32+0x32/0x80 [ 66.393940][ T6647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.396234][ T6647] RIP: 0023:0xf7f82579 [ 66.397545][ T6647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.402562][ T6647] RSP: 002b:00000000f50c457c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 66.405072][ T6647] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000040 [ 66.407977][ T6647] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 66.410365][ T6647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.412448][ T6647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.414657][ T6647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.416618][ T6647] [ 66.627858][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 66.641470][ T6655] FAULT_INJECTION: forcing a failure. [ 66.641470][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 66.646364][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.4.146 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 66.649274][ T6655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.652148][ T6655] Call Trace: [ 66.653382][ T6655] [ 66.654278][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 66.655653][ T6655] should_fail_ex+0x497/0x5b0 [ 66.656978][ T6655] ? rcu_is_watching+0x12/0xc0 [ 66.658352][ T6655] should_failslab+0xc2/0x120 [ 66.659612][ T6655] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 66.661096][ T6655] ? lock_acquire+0x2f/0xb0 [ 66.662643][ T6655] ? sctp_get_port_local+0x3af/0x1650 [ 66.664256][ T6655] ? sctp_get_port_local+0xba4/0x1650 [ 66.665743][ T6655] sctp_get_port_local+0xba4/0x1650 [ 66.667198][ T6655] ? __pfx_sctp_get_port_local+0x10/0x10 [ 66.668746][ T6655] ? lock_acquire+0x2f/0xb0 [ 66.670348][ T6655] ? sctp_bind_addr_match+0x43/0x300 [ 66.672198][ T6655] ? sctp_bind_addr_match+0x19d/0x300 [ 66.674145][ T6655] sctp_do_bind+0x223/0x700 [ 66.675787][ T6655] sctp_connect_new_asoc+0x5ff/0x790 [ 66.677703][ T6655] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 66.679810][ T6655] ? mark_held_locks+0x9f/0xe0 [ 66.681514][ T6655] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 66.683492][ T6655] sctp_sendmsg+0x162a/0x1f10 [ 66.685195][ T6655] ? __pfx___lock_acquire+0x10/0x10 [ 66.687028][ T6655] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.688805][ T6655] ? __pfx___might_resched+0x10/0x10 [ 66.690683][ T6655] ? __pfx_aa_sk_perm+0x10/0x10 [ 66.692151][ T6655] ? __import_iovec+0x1f2/0x6d0 [ 66.693526][ T6655] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.695281][ T6655] inet_sendmsg+0x119/0x140 [ 66.696964][ T6655] ____sys_sendmsg+0x907/0xb40 [ 66.698707][ T6655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.700676][ T6655] ? get_compat_msghdr+0x11b/0x170 [ 66.702459][ T6655] ___sys_sendmsg+0x135/0x1e0 [ 66.704119][ T6655] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.705768][ T6655] ? trace_lock_acquire+0x14e/0x1f0 [ 66.707553][ T6655] __sys_sendmmsg+0x2fa/0x420 [ 66.708951][ T6655] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.710656][ T6655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.712469][ T6655] ? fput+0x67/0x440 [ 66.713613][ T6655] ? ksys_write+0x1ba/0x250 [ 66.715091][ T6655] ? __pfx_ksys_write+0x10/0x10 [ 66.716364][ T6655] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 66.717840][ T6655] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 66.719892][ T6655] __do_fast_syscall_32+0x73/0x120 [ 66.721744][ T6655] do_fast_syscall_32+0x32/0x80 [ 66.723259][ T6655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.724938][ T6655] RIP: 0023:0xf7f82579 [ 66.726383][ T6655] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.731744][ T6655] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 66.734285][ T6655] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020003c40 [ 66.736997][ T6655] RDX: 0000000000000001 RSI: 0000000000000044 RDI: 0000000000000000 [ 66.739685][ T6655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.742429][ T6655] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.745247][ T6655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.748087][ T6655] [ 67.309334][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.152'. [ 67.312804][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 67.316704][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.152'. [ 67.334418][ T6675] FAULT_INJECTION: forcing a failure. [ 67.334418][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 67.338051][ T6675] CPU: 2 UID: 0 PID: 6675 Comm: syz.0.153 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 67.341045][ T6675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.344757][ T6675] Call Trace: [ 67.345977][ T6675] [ 67.346875][ T6675] dump_stack_lvl+0x16c/0x1f0 [ 67.348531][ T6675] should_fail_ex+0x497/0x5b0 [ 67.350176][ T6675] ? fs_reclaim_acquire+0xae/0x150 [ 67.351881][ T6675] should_failslab+0xc2/0x120 [ 67.353139][ T6675] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 67.354680][ T6675] ? __alloc_skb+0x2b3/0x380 [ 67.355967][ T6675] __alloc_skb+0x2b3/0x380 [ 67.357519][ T6675] ? __pfx___alloc_skb+0x10/0x10 [ 67.359233][ T6675] ? genl_rcv_msg+0x4bd/0x800 [ 67.360674][ T6675] netlink_ack+0x164/0xb20 [ 67.361873][ T6675] netlink_rcv_skb+0x327/0x410 [ 67.363416][ T6675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.365346][ T6675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.366937][ T6675] ? down_read+0xc9/0x330 [ 67.368353][ T6675] ? __pfx_down_read+0x10/0x10 [ 67.369912][ T6675] ? netlink_deliver_tap+0x1ae/0xca0 [ 67.371607][ T6675] genl_rcv+0x28/0x40 [ 67.372775][ T6675] netlink_unicast+0x53c/0x7f0 [ 67.374220][ T6675] ? __pfx_netlink_unicast+0x10/0x10 [ 67.375961][ T6675] ? __phys_addr_symbol+0x30/0x80 [ 67.377553][ T6675] ? __check_object_size+0x4a1/0x710 [ 67.379028][ T6675] netlink_sendmsg+0x8b8/0xd70 [ 67.380489][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.381923][ T6675] __sys_sendto+0x488/0x4f0 [ 67.383154][ T6675] ? __pfx___sys_sendto+0x10/0x10 [ 67.384653][ T6675] ? __might_fault+0x13b/0x190 [ 67.386143][ T6675] __do_compat_sys_socketcall+0x5e2/0x700 [ 67.388230][ T6675] ? __fget_files+0x206/0x3a0 [ 67.389933][ T6675] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 67.392153][ T6675] ? fput+0x67/0x440 [ 67.393675][ T6675] __do_fast_syscall_32+0x73/0x120 [ 67.395464][ T6675] do_fast_syscall_32+0x32/0x80 [ 67.397201][ T6675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.399416][ T6675] RIP: 0023:0xf744e579 [ 67.400722][ T6675] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.406917][ T6675] RSP: 002b:00000000f5135450 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 67.409963][ T6675] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5135464 [ 67.412782][ T6675] RDX: 0000000000000000 RSI: 00000000f5135580 RDI: 00000000f743fff4 [ 67.415646][ T6675] RBP: 00000000f5135580 R08: 0000000000000000 R09: 0000000000000000 [ 67.418221][ T6675] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 67.420264][ T6675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.422334][ T6675] [ 67.492770][ T39] audit: type=1326 audit(1733385845.121:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.1.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 67.499688][ T39] audit: type=1326 audit(1733385845.121:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.1.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 67.505485][ T39] audit: type=1326 audit(1733385845.121:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.1.151" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 67.511309][ T39] audit: type=1326 audit(1733385845.121:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.1.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 67.516866][ T39] audit: type=1326 audit(1733385845.121:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.1.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 67.525143][ T6683] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.056287][ T835] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 68.183931][ T6695] nfs4: Unknown parameter 'ud¿î+õNßݧ‰¡Þåƒæ' [ 68.187060][ T5947] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 68.220061][ T835] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.223127][ T835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.227274][ T835] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.233129][ T835] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.490782][ T835] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.493506][ T835] usb 9-1: Product: syz [ 68.496239][ T835] usb 9-1: Manufacturer: syz [ 68.515665][ T835] cdc_wdm 9-1:1.0: skipping garbage [ 68.517641][ T835] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 68.726224][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 68.726240][ T39] audit: type=1326 audit(1733385846.361:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.747416][ T5947] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 68.765155][ T39] audit: type=1326 audit(1733385846.361:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.785008][ T39] audit: type=1326 audit(1733385846.361:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.792007][ T39] audit: type=1326 audit(1733385846.381:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.797668][ T39] audit: type=1326 audit(1733385846.381:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.804198][ T39] audit: type=1326 audit(1733385846.381:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.815119][ T39] audit: type=1326 audit(1733385846.381:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.824258][ T39] audit: type=1326 audit(1733385846.381:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.825931][ T6715] FAULT_INJECTION: forcing a failure. [ 68.825931][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 68.830643][ T39] audit: type=1326 audit(1733385846.381:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.833233][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.3.166 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 68.839430][ T39] audit: type=1326 audit(1733385846.381:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.3.164" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 68.841451][ T6715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.841461][ T6715] Call Trace: [ 68.841465][ T6715] [ 68.851446][ T6715] dump_stack_lvl+0x16c/0x1f0 [ 68.852654][ T6715] should_fail_ex+0x497/0x5b0 [ 68.853858][ T6715] ? fs_reclaim_acquire+0xae/0x150 [ 68.855219][ T6715] should_failslab+0xc2/0x120 [ 68.856471][ T6715] __kmalloc_node_noprof+0xd1/0x520 [ 68.857870][ T6715] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 68.859322][ T6715] __kvmalloc_node_noprof+0xad/0x1a0 [ 68.860736][ T6715] check_cfg+0xb4/0x840 [ 68.861863][ T6715] ? check_subprogs+0x58f/0x7e0 [ 68.863160][ T6715] bpf_check+0x7401/0xc9b0 [ 68.864344][ T6715] ? hlock_class+0x4e/0x130 [ 68.865566][ T6715] ? __pfx_bpf_check+0x10/0x10 [ 68.866838][ T6715] ? find_held_lock+0x2d/0x110 [ 68.868127][ T6715] ? bpf_prog_load+0xd45/0x2670 [ 68.869430][ T6715] ? __pfx_lock_release+0x10/0x10 [ 68.870770][ T6715] ? trace_lock_acquire+0x14e/0x1f0 [ 68.872156][ T6715] ? bpf_prog_load+0xd45/0x2670 [ 68.873521][ T6715] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.874900][ T6715] ? read_tsc+0x9/0x20 [ 68.876006][ T6715] ? ktime_get_with_offset+0x20f/0x3a0 [ 68.877424][ T6715] ? bpf_obj_name_cpy+0x156/0x1b0 [ 68.878758][ T6715] bpf_prog_load+0xe3f/0x2670 [ 68.879987][ T6715] ? __pfx_bpf_prog_load+0x10/0x10 [ 68.881318][ T6715] ? find_held_lock+0x2d/0x110 [ 68.882609][ T6715] ? __might_fault+0x13b/0x190 [ 68.883857][ T6715] ? __might_fault+0xe3/0x190 [ 68.885006][ T6715] __sys_bpf+0x5677/0x57a0 [ 68.886192][ T6715] ? __pfx_lock_release+0x10/0x10 [ 68.887529][ T6715] ? __pfx___sys_bpf+0x10/0x10 [ 68.888814][ T6715] ? vfs_write+0x306/0x1150 [ 68.890033][ T6715] ? __mutex_unlock_slowpath+0x164/0x690 [ 68.891521][ T6715] ? fput+0x67/0x440 [ 68.892570][ T6715] ? ksys_write+0x1ba/0x250 [ 68.893730][ T6715] ? __pfx_ksys_write+0x10/0x10 [ 68.895131][ T6715] __ia32_sys_bpf+0x76/0xe0 [ 68.896680][ T6715] __do_fast_syscall_32+0x73/0x120 [ 68.898075][ T6715] do_fast_syscall_32+0x32/0x80 [ 68.899392][ T6715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.901162][ T6715] RIP: 0023:0xf744e579 [ 68.902306][ T6715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.907462][ T6715] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 68.909697][ T6715] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 68.911775][ T6715] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.913852][ T6715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.915926][ T6715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.918023][ T6715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.920126][ T6715] [ 68.921065][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.979401][ T6715] NILFS (loop3): device size too small [ 69.137374][ T5947] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 69.141004][ T5947] Bluetooth: hci3: Injecting HCI hardware error event [ 69.144744][ T67] Bluetooth: hci3: hardware error 0x00 [ 69.424436][ T6732] mmap: syz.0.170 (6732) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.709673][ T6746] NILFS (loop3): device size too small [ 69.786149][ T6688] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 69.796039][ T5981] usb 9-1: USB disconnect, device number 4 [ 69.815235][ T6753] FAULT_INJECTION: forcing a failure. [ 69.815235][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.819311][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.3.175 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 69.822201][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.824974][ T6753] Call Trace: [ 69.825887][ T6753] [ 69.826681][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 69.827962][ T6753] should_fail_ex+0x497/0x5b0 [ 69.829241][ T6753] strncpy_from_user+0x3b/0x2d0 [ 69.830598][ T6753] getname_flags.part.0+0x8f/0x550 [ 69.831966][ T6753] getname+0x8d/0xe0 [ 69.833007][ T6753] do_sys_openat2+0x104/0x1e0 [ 69.834285][ T6753] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.835670][ T6753] ? __fget_files+0x206/0x3a0 [ 69.836932][ T6753] __ia32_compat_sys_openat+0x16e/0x210 [ 69.838432][ T6753] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 69.840046][ T6753] ? ksys_write+0x1ba/0x250 [ 69.841299][ T6753] __do_fast_syscall_32+0x73/0x120 [ 69.842642][ T6753] do_fast_syscall_32+0x32/0x80 [ 69.843845][ T6753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.845529][ T6753] RIP: 0023:0xf744e579 [ 69.846617][ T6753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 69.851746][ T6753] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 69.854308][ T6753] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 69.856372][ T6753] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 69.858489][ T6753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.860595][ T6753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 69.862699][ T6753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.864763][ T6753] [ 69.865777][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.898850][ T6753] lo speed is unknown, defaulting to 1000 [ 69.981139][ T6769] lo speed is unknown, defaulting to 1000 [ 70.343403][ T6782] __nla_validate_parse: 3 callbacks suppressed [ 70.343420][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 70.356596][ T6734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.358366][ T6734] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 70.594729][ T30] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 70.659456][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.661859][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.744684][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 70.749746][ T30] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 70.752076][ T30] usb 9-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 70.757047][ T30] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 70.759447][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.761537][ T30] usb 9-1: Product: syz [ 70.762692][ T30] usb 9-1: Manufacturer: syz [ 70.763902][ T30] usb 9-1: SerialNumber: syz [ 70.774099][ T30] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 70.778043][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 70.789130][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 70.807216][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.810263][ T30] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 70.813283][ T30] usb 9-1: media controller created [ 70.820304][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.828794][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 70.830377][ T30] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 70.834900][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input8 [ 70.840527][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 70.842365][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 70.854671][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 70.986898][ T6059] usb 9-1: USB disconnect, device number 5 [ 71.005441][ T6059] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 71.044665][ T5999] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.102443][ T6779] 9pnet_fd: p9_fd_create_tcp (6779): problem connecting socket to 127.0.0.1 [ 71.188973][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.191958][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.195169][ T5999] usb 8-1: Using ep0 maxpacket: 8 [ 71.196942][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.199605][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.203173][ T5999] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 71.205600][ T5999] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 71.209484][ T5999] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 71.211843][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.213863][ T5999] usb 8-1: Product: syz [ 71.215039][ T5999] usb 8-1: Manufacturer: syz [ 71.216304][ T5999] usb 8-1: SerialNumber: syz [ 71.220659][ T5999] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 71.223574][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 71.224759][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.257146][ T5999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.260611][ T5999] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 71.263566][ T5999] usb 8-1: media controller created [ 71.264816][ T6734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.266936][ T6734] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 71.269520][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.275024][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 71.276542][ T5999] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 71.280988][ T5999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input9 [ 71.284963][ T5999] dvb-usb: schedule remote query interval to 150 msecs. [ 71.286844][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 71.304764][ T5999] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 71.446225][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 71.447879][ T5999] dvb-usb: error while querying for an remote control event. [ 71.453446][ T6059] usb 8-1: USB disconnect, device number 5 [ 71.475924][ T6059] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 71.591603][ T6806] NILFS (nullb0): couldn't find nilfs on the device [ 71.635293][ T6808] NILFS (loop1): device size too small [ 71.767663][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.190'. [ 71.770600][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.190'. [ 71.774093][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.190'. [ 71.777893][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.190'. [ 72.114059][ T6826] process 'syz.0.194' launched './file2' with NULL argv: empty string added [ 72.159385][ T30] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 72.334641][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 72.339561][ T30] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 72.341975][ T30] usb 9-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 72.353906][ T30] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 72.356386][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.358530][ T30] usb 9-1: Product: syz [ 72.359656][ T30] usb 9-1: Manufacturer: syz [ 72.360912][ T30] usb 9-1: SerialNumber: syz [ 72.372308][ T30] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 72.375247][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 72.410995][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.414840][ T30] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 72.424971][ T30] usb 9-1: media controller created [ 72.547337][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.594643][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 72.601481][ T30] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 72.618412][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input10 [ 72.625292][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 72.628166][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 72.654807][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 72.659556][ T30] usb 9-1: USB disconnect, device number 6 [ 72.679316][ T6831] NILFS (nullb0): couldn't find nilfs on the device [ 72.687138][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 72.848519][ T6832] FAULT_INJECTION: forcing a failure. [ 72.848519][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 72.852420][ T6832] CPU: 2 UID: 0 PID: 6832 Comm: syz.1.195 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 72.855177][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.857967][ T6832] Call Trace: [ 72.858853][ T6832] [ 72.859640][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 72.860888][ T6832] should_fail_ex+0x497/0x5b0 [ 72.862155][ T6832] ? fs_reclaim_acquire+0xae/0x150 [ 72.863526][ T6832] should_failslab+0xc2/0x120 [ 72.865031][ T6832] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 72.866425][ T6832] ? __kernfs_new_node+0xd3/0x890 [ 72.868096][ T6832] __kernfs_new_node+0xd3/0x890 [ 72.869520][ T6832] ? __pfx___kernfs_new_node+0x10/0x10 [ 72.871221][ T6832] ? __pfx_lock_release+0x10/0x10 [ 72.872546][ T6832] ? kernfs_add_one+0x39d/0x520 [ 72.873860][ T6832] ? up_write+0x1b2/0x520 [ 72.875008][ T6832] kernfs_new_node+0x186/0x240 [ 72.876272][ T6832] __kernfs_create_file+0x53/0x350 [ 72.877639][ T6832] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 72.879065][ T6832] sysfs_merge_group+0x1b1/0x340 [ 72.880377][ T6832] ? __pfx_sysfs_merge_group+0x10/0x10 [ 72.881825][ T6832] ? __pfx_dev_add_physical_location+0x10/0x10 [ 72.883457][ T6832] ? bus_to_subsys+0x12d/0x160 [ 72.884716][ T6832] dpm_sysfs_add+0x237/0x280 [ 72.885952][ T6832] device_add+0x9a8/0x1a70 [ 72.887129][ T6832] ? __pfx_device_add+0x10/0x10 [ 72.888429][ T6832] ? __init_waitqueue_head+0xca/0x150 [ 72.889851][ T6832] tty_register_device_attr+0x38f/0x7c0 [ 72.891293][ T6832] ? __pfx_tty_register_device_attr+0x10/0x10 [ 72.892900][ T6832] rfcomm_dev_ioctl+0x1849/0x1e70 [ 72.894242][ T6832] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 72.895659][ T6832] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.897109][ T6832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.898674][ T6832] rfcomm_sock_compat_ioctl+0xb0/0xd0 [ 72.900093][ T6832] compat_sock_ioctl+0x17b/0x7e0 [ 72.901414][ T6832] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 72.903016][ T6832] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 72.904466][ T6832] ? __fget_files+0x206/0x3a0 [ 72.905723][ T6832] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 72.907158][ T6832] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 72.908556][ T6832] __do_fast_syscall_32+0x73/0x120 [ 72.909927][ T6832] do_fast_syscall_32+0x32/0x80 [ 72.911237][ T6832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.912921][ T6832] RIP: 0023:0xf7fc2579 [ 72.914021][ T6832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.918991][ T6832] RSP: 002b:00000000f510c57c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.921123][ T6832] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000400452c8 [ 72.923179][ T6832] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.925316][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.927715][ T6832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.929757][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.932014][ T6832] [ 72.982590][ T6836] sctp: [Deprecated]: syz.3.196 (pid 6836) Use of int in max_burst socket option. [ 72.982590][ T6836] Use struct sctp_assoc_value instead [ 73.340932][ T6856] NILFS (loop4): device size too small [ 74.194748][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 74.345026][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 74.348112][ T8] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 74.350565][ T8] usb 9-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 74.358056][ T8] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 74.360832][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.363766][ T8] usb 9-1: Product: syz [ 74.365391][ T8] usb 9-1: Manufacturer: syz [ 74.367206][ T8] usb 9-1: SerialNumber: syz [ 74.371432][ T8] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 74.375381][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 74.376976][ T6879] batadv1: entered promiscuous mode [ 74.378538][ T6879] batadv1: entered allmulticast mode [ 74.395995][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.400245][ T8] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 74.403768][ T8] usb 9-1: media controller created [ 74.411868][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.420454][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 74.422546][ T8] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 74.427526][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input11 [ 74.432193][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 74.435499][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 74.464652][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 74.500614][ T6886] mkiss: ax0: crc mode is auto. [ 74.589675][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.593269][ T5981] usb 9-1: USB disconnect, device number 7 [ 74.618296][ T5981] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 74.625146][ T6008] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.775206][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 74.779165][ T6008] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 74.781895][ T6008] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.785707][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.788784][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.791816][ T6008] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.796532][ T6008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.799526][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.844612][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 74.996287][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 74.999471][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 75.001904][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 75.003657][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 75.004908][ T63] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.006366][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 75.011338][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 75.014366][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 75.017484][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.021125][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 75.023521][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 75.025608][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 75.028012][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 75.030957][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 75.033869][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 75.037042][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.042342][ T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 75.044796][ T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 75.046858][ T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 75.049304][ T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 75.052329][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 75.055450][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 75.058320][ T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.058465][ T6892] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 75.063370][ T6892] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 75.063634][ T8] usb 5-1: string descriptor 0 read error: -22 [ 75.067342][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.069746][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.070306][ T6008] usb 6-1: GET_CAPABILITIES returned 0 [ 75.073791][ T6008] usbtmc 6-1:16.0: can't read capabilities [ 75.082408][ T8] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 75.134890][ T63] usb 8-1: device descriptor read/64, error -71 [ 75.203080][ T6894] openvswitch: netlink: Missing valid actions attribute. [ 75.205794][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.294948][ T6887] program syz.0.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.375178][ T63] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 75.489492][ T6008] usb 5-1: USB disconnect, device number 7 [ 75.515241][ T63] usb 8-1: device descriptor read/64, error -71 [ 75.625509][ T63] usb usb8-port1: attempt power cycle [ 75.964697][ T63] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 75.985451][ T63] usb 8-1: device descriptor read/8, error -71 [ 76.041970][ T6903] NILFS (nullb0): couldn't find nilfs on the device [ 76.224668][ T63] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 76.245828][ T63] usb 8-1: device descriptor read/8, error -71 [ 76.267066][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.269046][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.270993][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.272976][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.275197][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.277132][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.279084][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.281561][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.284198][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.287108][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.289704][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.292229][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.300138][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.303112][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.305329][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.313358][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.319207][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.329166][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.332880][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.335840][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.338146][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.339996][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.341956][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.343889][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.345794][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.347721][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.349655][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.351572][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.353494][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.356713][ T63] usb usb8-port1: unable to enumerate USB device [ 76.358447][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.360379][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.362315][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.364231][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.366085][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.367928][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.369862][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.371924][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.373821][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.375797][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.377717][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.379567][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.381529][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.383443][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.385584][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.387518][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.389463][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.391378][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.393304][ T835] hid-generic 0000:0000:0003.0004: unknown main item tag 0x0 [ 76.398410][ T835] hid-generic 0000:0000:0003.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.505197][ T6008] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 76.657067][ T6008] usb 9-1: config 0 has no interfaces? [ 76.658972][ T6008] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 76.662000][ T6008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.666679][ T6008] usb 9-1: config 0 descriptor?? [ 76.886135][ T30] usb 9-1: USB disconnect, device number 8 [ 77.230411][ T6915] __nla_validate_parse: 15 callbacks suppressed [ 77.230427][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 77.339786][ T835] usb 6-1: USB disconnect, device number 4 [ 77.515092][ T6008] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.665322][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 77.668510][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.671329][ T6008] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.673629][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.676801][ T6008] usb 5-1: config 0 descriptor?? [ 77.744117][ T6936] FAULT_INJECTION: forcing a failure. [ 77.744117][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.748832][ T6936] CPU: 2 UID: 0 PID: 6936 Comm: syz.4.231 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 77.751445][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.754189][ T6936] Call Trace: [ 77.755157][ T6936] [ 77.755898][ T6936] dump_stack_lvl+0x16c/0x1f0 [ 77.757449][ T6936] should_fail_ex+0x497/0x5b0 [ 77.759131][ T6936] __fpu_restore_sig+0xf5/0x1430 [ 77.760846][ T6936] ? lock_acquire.part.0+0x11b/0x380 [ 77.762626][ T6936] ? __pfx___fpu_restore_sig+0x10/0x10 [ 77.764168][ T6936] ? lock_acquire+0x2f/0xb0 [ 77.765633][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 77.767885][ T6936] ? __might_fault+0xe3/0x190 [ 77.767908][ T6936] fpu__restore_sig+0x113/0x190 [ 77.767926][ T6936] ia32_restore_sigcontext+0x40f/0x5d0 [ 77.767938][ T6936] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 77.767949][ T6936] ? __pfx_lock_release+0x10/0x10 [ 77.767962][ T6936] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.778904][ T6936] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.780758][ T6936] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 77.782597][ T6936] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 77.784555][ T6936] do_int80_emulation+0x104/0x200 [ 77.786122][ T6936] asm_int80_emulation+0x1a/0x20 [ 77.787659][ T6936] RIP: 0023:0xf7f82577 [ 77.788925][ T6936] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 77.794678][ T6936] RSP: 002b:00000000f510657c EFLAGS: 00000292 [ 77.796495][ T6936] RAX: 000000000000014d RBX: 0000000000000003 RCX: 0000000020001e00 [ 77.798908][ T6936] RDX: 000000000000005b RSI: 0000000000000000 RDI: 0000000000000000 [ 77.801330][ T6936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.803736][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.806245][ T6936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.808660][ T6936] [ 77.879304][ T6947] FAULT_INJECTION: forcing a failure. [ 77.879304][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 77.882867][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.3.236 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 77.885627][ T6947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.885633][ T6008] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 77.888414][ T6947] Call Trace: [ 77.892669][ T6947] [ 77.893471][ T6947] dump_stack_lvl+0x16c/0x1f0 [ 77.894716][ T6947] should_fail_ex+0x497/0x5b0 [ 77.895959][ T6947] ? fs_reclaim_acquire+0xae/0x150 [ 77.897319][ T6947] should_failslab+0xc2/0x120 [ 77.898561][ T6947] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 77.900051][ T6947] ? alloc_inode+0xbf/0x230 [ 77.901430][ T6947] alloc_inode+0xbf/0x230 [ 77.902618][ T6947] iget_locked+0x2ee/0x8a0 [ 77.903801][ T6947] ? __pfx_iget_locked+0x10/0x10 [ 77.905112][ T6947] ? __pfx_mark_lock+0x10/0x10 [ 77.906387][ T6947] ? lock_acquire.part.0+0x11b/0x380 [ 77.907781][ T6947] ? find_held_lock+0x2d/0x110 [ 77.909047][ T6947] kernfs_get_inode+0x48/0x460 [ 77.910315][ T6947] cgroup_may_write+0x89/0x120 [ 77.911581][ T6947] cgroup_attach_permissions+0x1bb/0x7b0 [ 77.913053][ T6947] __cgroup_procs_write+0x265/0x540 [ 77.914425][ T6947] ? __pfx___cgroup_procs_write+0x10/0x10 [ 77.915937][ T6947] cgroup_procs_write+0x26/0x60 [ 77.917233][ T6947] cgroup_file_write+0x211/0x7d0 [ 77.918630][ T6947] ? __pfx_cgroup_procs_write+0x10/0x10 [ 77.920080][ T6947] ? __pfx_cgroup_file_write+0x10/0x10 [ 77.921440][ T6947] ? lock_acquire+0x2f/0xb0 [ 77.922658][ T6947] kernfs_fop_write_iter+0x33d/0x500 [ 77.924044][ T6947] ? __pfx_cgroup_file_write+0x10/0x10 [ 77.925476][ T6947] vfs_write+0x5ae/0x1150 [ 77.926611][ T6947] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 77.928152][ T6947] ? __pfx___mutex_lock+0x10/0x10 [ 77.929455][ T6947] ? __pfx_vfs_write+0x10/0x10 [ 77.930682][ T6947] ksys_write+0x12b/0x250 [ 77.931804][ T6947] ? __pfx_ksys_write+0x10/0x10 [ 77.933059][ T6947] __do_fast_syscall_32+0x73/0x120 [ 77.934374][ T6947] do_fast_syscall_32+0x32/0x80 [ 77.935661][ T6947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.937320][ T6947] RIP: 0023:0xf744e579 [ 77.938396][ T6947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.943355][ T6947] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 77.945523][ T6947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200001c0 [ 77.947579][ T6947] RDX: 0000000000000074 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.949637][ T6947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.951682][ T6947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.953718][ T6947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.955776][ T6947] [ 77.967107][ T6950] NILFS (nullb0): couldn't find nilfs on the device [ 78.092116][ T8] usb 5-1: USB disconnect, device number 8 [ 78.094368][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 78.512675][ T6968] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.711772][ T6974] FAULT_INJECTION: forcing a failure. [ 78.711772][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 78.715809][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.1.244 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 78.718645][ T6974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.721429][ T6974] Call Trace: [ 78.722320][ T6974] [ 78.723106][ T6974] dump_stack_lvl+0x16c/0x1f0 [ 78.724354][ T6974] should_fail_ex+0x497/0x5b0 [ 78.725645][ T6974] ? fs_reclaim_acquire+0xae/0x150 [ 78.727001][ T6974] should_failslab+0xc2/0x120 [ 78.728270][ T6974] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 78.729726][ T6974] ? vma_merge_new_range+0x3f0/0xb70 [ 78.731109][ T6974] ? vm_area_alloc+0x1f/0x1c0 [ 78.732341][ T6974] vm_area_alloc+0x1f/0x1c0 [ 78.733551][ T6974] __mmap_region+0x101b/0x2670 [ 78.734874][ T6974] ? __pfx___mmap_region+0x10/0x10 [ 78.736227][ T6974] ? hlock_class+0x4e/0x130 [ 78.737455][ T6974] ? mark_lock+0xb5/0xc60 [ 78.738631][ T6974] ? cap_mmap_addr+0x53/0x320 [ 78.739930][ T6974] mmap_region+0x270/0x320 [ 78.741120][ T6974] do_mmap+0xc00/0xfc0 [ 78.742211][ T6974] vm_mmap_pgoff+0x1ba/0x360 [ 78.743409][ T6974] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 78.744766][ T6974] ? __fget_files+0x206/0x3a0 [ 78.746036][ T6974] ksys_mmap_pgoff+0x32c/0x5c0 [ 78.747310][ T6974] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 78.748738][ T6974] __do_fast_syscall_32+0x73/0x120 [ 78.750146][ T6974] do_fast_syscall_32+0x32/0x80 [ 78.751432][ T6974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.753085][ T6974] RIP: 0023:0xf7fc2579 [ 78.754175][ T6974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.759248][ T6974] RSP: 002b:00000000f514657c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 78.761407][ T6974] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000000e1000 [ 78.763468][ T6974] RDX: 000000000280000b RSI: 0000000000028011 RDI: 0000000000000003 [ 78.765596][ T6974] RBP: 0000000000002000 R08: 0000000000000000 R09: 0000000000000000 [ 78.767671][ T6974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.769765][ T6974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.771910][ T6974] [ 78.918107][ T6981] fuse: Bad value for 'group_id' [ 78.919441][ T6981] fuse: Bad value for 'group_id' [ 79.119371][ T6996] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 79.308455][ T7012] loop9: detected capacity change from 0 to 6 [ 79.318803][ T7012] Dev loop9: unable to read RDB block 6 [ 79.320339][ T7012] loop9: unable to read partition table [ 79.321993][ T7012] loop9: partition table beyond EOD, truncated [ 79.323760][ T7012] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 79.323760][ T7012] ) failed (rc=-5) [ 79.534672][ T6059] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.824728][ T6059] usb 6-1: Using ep0 maxpacket: 32 [ 79.827423][ T6059] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 79.829692][ T6059] usb 6-1: config 0 has no interface number 0 [ 79.831483][ T6059] usb 6-1: config 0 interface 219 has no altsetting 0 [ 79.833525][ T6059] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 79.836149][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.839159][ T6059] usb 6-1: config 0 descriptor?? [ 79.861090][ T7020] NILFS (nullb0): couldn't find nilfs on the device [ 80.397229][ T7027] lo speed is unknown, defaulting to 1000 [ 80.432695][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'. [ 80.497095][ T6059] usb 6-1: string descriptor 0 read error: -71 [ 80.508897][ T6059] usb 6-1: USB disconnect, device number 5 [ 80.609546][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 80.611867][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 80.646968][ T7045] input: syz1 as /devices/virtual/input/input12 [ 80.847954][ T7047] lo speed is unknown, defaulting to 1000 [ 81.423402][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 81.423413][ T39] audit: type=1326 audit(1733385859.051:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.266" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 81.631212][ T834] cfg80211: failed to load regulatory.db [ 81.830871][ T7074] netlink: 256 bytes leftover after parsing attributes in process `syz.4.272'. [ 81.852819][ T7077] lo speed is unknown, defaulting to 1000 [ 81.943970][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 81.954725][ T7091] unsupported nlmsg_type 40 [ 82.289739][ T7102] 9pnet_fd: Insufficient options for proto=fd [ 82.293046][ T7102] overlayfs: failed to resolve './file1': -2 [ 82.346072][ T7104] can: request_module (can-proto-0) failed. [ 82.844631][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 82.986447][ T7128] sp0: Synchronizing with TNC [ 83.062216][ T7134] binfmt_misc: register: failed to install interpreter file ./file0 [ 83.531459][ T7150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.535918][ T7150] nftables ruleset with unbound chain [ 83.956073][ T7157] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 84.220185][ T7171] netfs: Couldn't get user pages (rc=-14) [ 84.292339][ T7171] netfs: Couldn't get user pages (rc=-14) [ 84.337305][ T7171] 9pnet_fd: Insufficient options for proto=fd [ 84.662237][ T1213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.729851][ T1213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.801446][ T1213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.884235][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.889244][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.889328][ T1213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.892044][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.899254][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.925433][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.927655][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.938612][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.941760][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.944146][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.949418][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.951515][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.956470][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.982261][ T7190] lo speed is unknown, defaulting to 1000 [ 85.079976][ T1213] bridge_slave_1: left allmulticast mode [ 85.081510][ T1213] bridge_slave_1: left promiscuous mode [ 85.083031][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.092739][ T1213] bridge_slave_0: left allmulticast mode [ 85.094375][ T1213] bridge_slave_0: left promiscuous mode [ 85.096160][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.415641][ T7211] syz.3.308: attempt to access beyond end of device [ 85.415641][ T7211] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 85.729480][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.733680][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.737617][ T1213] bond0 (unregistering): Released all slaves [ 85.788634][ T7190] chnl_net:caif_netlink_parms(): no params data found [ 85.863120][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.865422][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.868619][ T7190] bridge_slave_0: entered allmulticast mode [ 85.870707][ T7190] bridge_slave_0: entered promiscuous mode [ 85.873269][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.875993][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.877877][ T7190] bridge_slave_1: entered allmulticast mode [ 85.879848][ T7190] bridge_slave_1: entered promiscuous mode [ 85.915196][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.918600][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.971009][ T7190] team0: Port device team_slave_0 added [ 85.976983][ T7190] team0: Port device team_slave_1 added [ 85.996287][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.998188][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.004949][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.008552][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.010373][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.018656][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.049667][ T7190] hsr_slave_0: entered promiscuous mode [ 86.052984][ T7190] hsr_slave_1: entered promiscuous mode [ 86.057827][ T7190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.059807][ T7190] Cannot create hsr debugfs directory [ 86.163016][ T7238] FAULT_INJECTION: forcing a failure. [ 86.163016][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 86.167220][ T7238] CPU: 2 UID: 0 PID: 7238 Comm: syz.3.311 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 86.169987][ T7238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.173002][ T7238] Call Trace: [ 86.173890][ T7238] [ 86.174669][ T7238] dump_stack_lvl+0x16c/0x1f0 [ 86.175909][ T7238] should_fail_ex+0x497/0x5b0 [ 86.177151][ T7238] ? fs_reclaim_acquire+0xae/0x150 [ 86.178448][ T7238] should_failslab+0xc2/0x120 [ 86.179652][ T7238] __kmalloc_cache_noprof+0x68/0x420 [ 86.181034][ T7238] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 86.182608][ T7238] ? __vmalloc_noprof+0x6d/0x90 [ 86.183897][ T7238] bpf_prog_alloc_no_stats+0x101/0x630 [ 86.185330][ T7238] bpf_prog_alloc+0x3b/0x230 [ 86.186543][ T7238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.188083][ T7238] bpf_prog_load+0x1758/0x2670 [ 86.189346][ T7238] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.190690][ T7238] ? find_held_lock+0x2d/0x110 [ 86.192017][ T7238] ? __might_fault+0x13b/0x190 [ 86.193412][ T7238] ? __might_fault+0xe3/0x190 [ 86.194651][ T7238] __sys_bpf+0x5677/0x57a0 [ 86.195818][ T7238] ? __pfx_lock_release+0x10/0x10 [ 86.197146][ T7238] ? __pfx___sys_bpf+0x10/0x10 [ 86.198412][ T7238] ? vfs_write+0x306/0x1150 [ 86.199617][ T7238] ? __mutex_unlock_slowpath+0x164/0x690 [ 86.201105][ T7238] ? fput+0x67/0x440 [ 86.202218][ T7238] ? ksys_write+0x1ba/0x250 [ 86.203407][ T7238] ? __pfx_ksys_write+0x10/0x10 [ 86.204692][ T7238] __ia32_sys_bpf+0x76/0xe0 [ 86.206075][ T7238] __do_fast_syscall_32+0x73/0x120 [ 86.207409][ T7238] do_fast_syscall_32+0x32/0x80 [ 86.208689][ T7238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.210363][ T7238] RIP: 0023:0xf744e579 [ 86.211441][ T7238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.216395][ T7238] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 86.218594][ T7238] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 86.220651][ T7238] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.222808][ T7238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.224901][ T7238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.226980][ T7238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.229077][ T7238] [ 86.247363][ T1213] hsr_slave_0: left promiscuous mode [ 86.249201][ T1213] hsr_slave_1: left promiscuous mode [ 86.251178][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.253312][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.275334][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.277280][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.295243][ T1213] veth1_macvtap: left promiscuous mode [ 86.296728][ T1213] veth0_macvtap: left promiscuous mode [ 86.298990][ T1213] veth1_vlan: left promiscuous mode [ 86.300405][ T1213] veth0_vlan: left promiscuous mode [ 86.522501][ T7246] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 86.691967][ T7250] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.974729][ T5947] Bluetooth: hci0: command tx timeout [ 87.198104][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 87.362908][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 87.967327][ T7240] FAULT_INJECTION: forcing a failure. [ 87.967327][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 87.970610][ T7240] CPU: 3 UID: 0 PID: 7240 Comm: syz.4.312 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 87.973300][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.976036][ T7240] Call Trace: [ 87.976948][ T7240] [ 87.977812][ T7240] dump_stack_lvl+0x16c/0x1f0 [ 87.979039][ T7240] should_fail_ex+0x497/0x5b0 [ 87.980293][ T7240] ? rwsem_read_trylock+0x12d/0x250 [ 87.981689][ T7240] should_failslab+0xc2/0x120 [ 87.982915][ T7240] __kmalloc_cache_noprof+0x68/0x420 [ 87.984275][ T7240] ? lock_acquire+0x2f/0xb0 [ 87.985535][ T7240] ? blocking_notifier_call_chain+0x53/0xa0 [ 87.987059][ T7240] nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 87.988417][ T7240] notifier_call_chain+0xb7/0x410 [ 87.989778][ T7240] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 87.991348][ T7240] blocking_notifier_call_chain+0x69/0xa0 [ 87.992809][ T7240] netlink_release+0x195e/0x2130 [ 87.994103][ T7240] ? netlink_release+0x1df/0x2130 [ 87.995408][ T7240] ? __pfx_netlink_release+0x10/0x10 [ 87.996776][ T7240] ? __pfx_locks_remove_file+0x10/0x10 [ 87.998197][ T7240] __sock_release+0xb0/0x270 [ 87.999411][ T7240] ? __pfx_sock_close+0x10/0x10 [ 88.000851][ T7240] sock_close+0x1c/0x30 [ 88.001975][ T7240] __fput+0x3f8/0xb60 [ 88.003037][ T7240] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.004379][ T7240] task_work_run+0x14e/0x250 [ 88.005575][ T7240] ? __pfx_task_work_run+0x10/0x10 [ 88.006974][ T7240] get_signal+0x1d3/0x2610 [ 88.008148][ T7240] ? kick_process+0xf6/0x1b0 [ 88.009370][ T7240] ? task_work_add+0x1ca/0x3b0 [ 88.010666][ T7240] ? __pfx_task_work_add+0x10/0x10 [ 88.011910][ T7240] ? __pfx___file_ref_put+0x10/0x10 [ 88.013305][ T7240] ? __pfx_get_signal+0x10/0x10 [ 88.014696][ T7240] arch_do_signal_or_restart+0x90/0x7e0 [ 88.016217][ T7240] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 88.017937][ T7240] syscall_exit_to_user_mode+0x150/0x2a0 [ 88.019385][ T7240] __do_fast_syscall_32+0x80/0x120 [ 88.020769][ T7240] do_fast_syscall_32+0x32/0x80 [ 88.022050][ T7240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.023674][ T7240] RIP: 0023:0xf7f82579 [ 88.024728][ T7240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.029719][ T7240] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 88.031930][ T7240] RAX: 0000000000000030 RBX: 0000000000000003 RCX: 0000000020000f80 [ 88.033954][ T7240] RDX: 0000000004040804 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.036010][ T7240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.038020][ T7240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.040074][ T7240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.042184][ T7240] [ 88.043068][ C3] vkms_vblank_simulate: vblank timer overrun [ 88.103860][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 88.135027][ T7258] FAULT_INJECTION: forcing a failure. [ 88.135027][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.138844][ T7258] CPU: 2 UID: 0 PID: 7258 Comm: syz.4.316 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 88.141610][ T7258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.145199][ T7258] Call Trace: [ 88.146129][ T7258] [ 88.146907][ T7258] dump_stack_lvl+0x16c/0x1f0 [ 88.148154][ T7258] should_fail_ex+0x497/0x5b0 [ 88.149421][ T7258] _copy_from_user+0x2e/0xd0 [ 88.150655][ T7258] snd_seq_oss_write+0x398/0x7b0 [ 88.151957][ T7258] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 88.153462][ T7258] ? apparmor_file_permission+0x251/0x400 [ 88.154944][ T7258] ? __pfx_odev_write+0x10/0x10 [ 88.156214][ T7258] odev_write+0x51/0xa0 [ 88.157312][ T7258] vfs_write+0x24c/0x1150 [ 88.158436][ T7258] ? __fget_files+0x1fc/0x3a0 [ 88.159670][ T7258] ? __pfx_lock_release+0x10/0x10 [ 88.161025][ T7258] ? __pfx_vfs_write+0x10/0x10 [ 88.162301][ T7258] ? lock_acquire+0x2f/0xb0 [ 88.164048][ T7258] ? __fget_files+0x40/0x3a0 [ 88.165750][ T7258] ? __fget_files+0x206/0x3a0 [ 88.167023][ T7258] ksys_write+0x12b/0x250 [ 88.168197][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 88.169502][ T7258] __do_fast_syscall_32+0x73/0x120 [ 88.170864][ T7258] do_fast_syscall_32+0x32/0x80 [ 88.172156][ T7258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.174026][ T7258] RIP: 0023:0xf7f82579 [ 88.175085][ T7258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.180046][ T7258] RSP: 002b:00000000f50e557c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 88.182228][ T7258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 88.184982][ T7258] RDX: 0000000000000239 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.187294][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.189356][ T7258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.191415][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.193699][ T7258] [ 88.364698][ T144] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.525814][ T144] usb 5-1: Using ep0 maxpacket: 8 [ 88.529960][ T144] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 88.532262][ T144] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 88.537664][ T144] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 88.540098][ T144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.542166][ T144] usb 5-1: Product: syz [ 88.543248][ T144] usb 5-1: Manufacturer: syz [ 88.544467][ T144] usb 5-1: SerialNumber: syz [ 88.548515][ T144] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 88.551474][ T144] dvb-usb: bulk message failed: -22 (3/0) [ 88.565921][ T144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.568757][ T144] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 88.571824][ T144] usb 5-1: media controller created [ 88.572786][ T1213] IPVS: stop unused estimator thread 0... [ 88.578323][ T144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.584614][ T144] dvb-usb: bulk message failed: -22 (6/0) [ 88.586156][ T144] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 88.592834][ T144] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input13 [ 88.598004][ T144] dvb-usb: schedule remote query interval to 150 msecs. [ 88.599938][ T144] dvb-usb: bulk message failed: -22 (3/0) [ 88.614635][ T144] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 88.723637][ T7190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.730912][ T7190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.736152][ T7190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.740764][ T7190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.754706][ T144] dvb-usb: bulk message failed: -22 (1/0) [ 88.756278][ T144] dvb-usb: error while querying for an remote control event. [ 88.776617][ T57] usb 5-1: USB disconnect, device number 9 [ 88.812811][ T57] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 88.848041][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.858508][ T7190] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.869385][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.871857][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.886898][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.889449][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.037492][ T7190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.051830][ T7190] veth0_vlan: entered promiscuous mode [ 89.054676][ T5947] Bluetooth: hci0: command tx timeout [ 89.055945][ T7190] veth1_vlan: entered promiscuous mode [ 89.066280][ T7190] veth0_macvtap: entered promiscuous mode [ 89.076283][ T7190] veth1_macvtap: entered promiscuous mode [ 89.097438][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.100222][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.103185][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.109108][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.112424][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.116210][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.119296][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.135842][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.138528][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.141079][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.144026][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.147109][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.149816][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.152908][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.157449][ T7190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.159771][ T7190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162029][ T7190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.164310][ T7190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.191178][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 89.194336][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.196646][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.218265][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.220328][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.279514][ T7316] overlayfs: missing 'workdir' [ 89.424613][ T57] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 89.596089][ T57] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.598306][ T57] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.600972][ T57] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.603320][ T57] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.608128][ T57] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.610508][ T57] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.612714][ T57] usb 9-1: Product: syz [ 89.613908][ T57] usb 9-1: Manufacturer: syz [ 89.623017][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 89.624438][ T57] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 89.882916][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 90.066736][ T6059] usb 9-1: USB disconnect, device number 9 [ 90.242288][ T7342] dlm: non-version read from control device 231 [ 90.281119][ T7344] netlink: 64 bytes leftover after parsing attributes in process `syz.0.329'. [ 90.283430][ T7344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.329'. [ 90.343606][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 90.454792][ T7351] block device autoloading is deprecated and will be removed. [ 90.602361][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 90.658732][ T7356] 9pnet_fd: Insufficient options for proto=fd [ 90.690888][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 91.458448][ T7354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.536306][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.585514][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.336'. [ 91.681123][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.684991][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.689926][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.693210][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.696107][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.699111][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.719478][ T7364] lo speed is unknown, defaulting to 1000 [ 91.802324][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 91.853634][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.855923][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.857902][ T7364] bridge_slave_0: entered allmulticast mode [ 91.859918][ T7364] bridge_slave_0: entered promiscuous mode [ 91.863673][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.869443][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.871502][ T7364] bridge_slave_1: entered allmulticast mode [ 91.873528][ T7364] bridge_slave_1: entered promiscuous mode [ 91.898407][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.901886][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.918708][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 91.928576][ T7364] team0: Port device team_slave_0 added [ 91.931251][ T7364] team0: Port device team_slave_1 added [ 91.952273][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.954115][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.961429][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.967309][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.969169][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.977449][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.024457][ T7364] hsr_slave_0: entered promiscuous mode [ 92.028860][ T7364] hsr_slave_1: entered promiscuous mode [ 92.033845][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.036670][ T7364] Cannot create hsr debugfs directory [ 92.111204][ T7391] overlayfs: missing 'lowerdir' [ 92.226252][ T7395] input: syz1 as /devices/virtual/input/input14 [ 92.259900][ T39] audit: type=1326 audit(1733385869.891:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.276933][ T39] audit: type=1326 audit(1733385869.891:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.282773][ T39] audit: type=1326 audit(1733385869.891:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.289095][ T39] audit: type=1326 audit(1733385869.891:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.295164][ T39] audit: type=1326 audit(1733385869.891:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.301376][ T39] audit: type=1326 audit(1733385869.891:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.308763][ T39] audit: type=1326 audit(1733385869.891:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.316234][ T39] audit: type=1326 audit(1733385869.901:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.323052][ T39] audit: type=1326 audit(1733385869.911:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.331851][ T39] audit: type=1326 audit(1733385869.911:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.0.343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 92.488000][ T7397] Process accounting resumed [ 93.372093][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 93.423913][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.491703][ T7414] bpf: Bad value for 'uid' [ 93.507947][ T7415] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 93.512893][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.579817][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.708064][ T7422] 9pnet_fd: Insufficient options for proto=fd [ 93.712745][ T11] bridge_slave_1: left allmulticast mode [ 93.714421][ T11] bridge_slave_1: left promiscuous mode [ 93.718046][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.721012][ T11] bridge_slave_0: left allmulticast mode [ 93.722500][ T11] bridge_slave_0: left promiscuous mode [ 93.724024][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.774662][ T67] Bluetooth: hci0: command tx timeout [ 93.978609][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.982501][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.986054][ T11] bond0 (unregistering): Released all slaves [ 94.259414][ T11] hsr_slave_0: left promiscuous mode [ 94.262619][ T11] hsr_slave_1: left promiscuous mode [ 94.264518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.267494][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.270414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.272350][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.306292][ T11] veth1_macvtap: left promiscuous mode [ 94.307758][ T11] veth0_macvtap: left promiscuous mode [ 94.309265][ T11] veth1_vlan: left promiscuous mode [ 94.310665][ T11] veth0_vlan: left promiscuous mode [ 95.003756][ T11] team0 (unregistering): Port device team_slave_1 removed [ 95.087300][ T11] team0 (unregistering): Port device team_slave_0 removed [ 95.625168][ T7364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.628899][ T7364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.632625][ T7364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.639371][ T7466] NILFS (loop4): device size too small [ 95.648037][ T7364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.702483][ T7471] ceph: Unknown parameter 'usrquota‹]}Tii\ŽˆÍ©ÔyÉOÄ/AõÕ9èqfÿŒ( â' [ 95.711221][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.727576][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.738572][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.741277][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.756059][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.757982][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.854659][ T67] Bluetooth: hci0: command tx timeout [ 95.861541][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.885586][ T7364] veth0_vlan: entered promiscuous mode [ 95.890221][ T7364] veth1_vlan: entered promiscuous mode [ 95.900897][ T7364] veth0_macvtap: entered promiscuous mode [ 95.904452][ T7364] veth1_macvtap: entered promiscuous mode [ 95.910844][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.913565][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.916360][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.919049][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.921426][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.924112][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.927579][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.932663][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.935792][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.938421][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.941107][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.943606][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.954919][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.957945][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.963110][ T7364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.965521][ T7364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.967793][ T7364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970051][ T7364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.033496][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.036009][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.067879][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.069982][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.083862][ T30] IPVS: starting estimator thread 0... [ 96.184700][ T7490] IPVS: using max 38 ests per chain, 91200 per kthread [ 96.459326][ T7493] netlink: 64 bytes leftover after parsing attributes in process `syz.3.368'. [ 96.462347][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.368'. [ 97.310219][ T7521] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.376641][ T7516] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 97.378658][ T7516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.372'. [ 97.445036][ T6059] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 97.462461][ T7521] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.548113][ T7521] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.643381][ T7521] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.674005][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 97.674016][ T39] audit: type=1326 audit(1733385875.301:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 97.683649][ T39] audit: type=1326 audit(1733385875.301:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 97.742274][ T7521] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.749539][ T7521] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756742][ T7521] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.764646][ T7521] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.806113][ T7530] random: crng reseeded on system resumption [ 97.920856][ T7550] Scaler: ================= START STATUS ================= [ 97.926060][ T7550] Scaler: ================== END STATUS ================== [ 97.989688][ T7555] fuse: Unknown parameter 'od' [ 98.377264][ T7578] overlayfs: missing 'lowerdir' [ 99.242179][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.348896][ T7602] FAULT_INJECTION: forcing a failure. [ 99.348896][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 99.351984][ T7605] 9pnet_virtio: no channels available for device syz [ 99.364670][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.3.391 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 99.367314][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.370813][ T7602] Call Trace: [ 99.371654][ T7602] [ 99.372408][ T7602] dump_stack_lvl+0x16c/0x1f0 [ 99.373593][ T7602] should_fail_ex+0x497/0x5b0 [ 99.374782][ T7602] ? fs_reclaim_acquire+0xae/0x150 [ 99.376055][ T7602] should_failslab+0xc2/0x120 [ 99.377232][ T7602] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 99.378535][ T7602] ? __pfx_mark_lock+0x10/0x10 [ 99.379721][ T7602] ? p9_tag_alloc+0x9c/0x870 [ 99.380872][ T7602] p9_tag_alloc+0x9c/0x870 [ 99.381949][ T7602] ? __pfx_p9_tag_alloc+0x10/0x10 [ 99.383172][ T7602] ? hlock_class+0x4e/0x130 [ 99.384319][ T7602] p9_client_prepare_req+0x19f/0x4d0 [ 99.385701][ T7602] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 99.387160][ T7602] ? __pfx___lock_acquire+0x10/0x10 [ 99.388456][ T7602] ? hlock_class+0x4e/0x130 [ 99.389607][ T7602] p9_client_zc_rpc.constprop.0+0x105/0x880 [ 99.391150][ T7602] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 99.392804][ T7602] ? rcu_read_unlock+0x17/0x60 [ 99.394113][ T7602] ? __pfx_lock_release+0x10/0x10 [ 99.395434][ T7602] ? trace_lock_acquire+0x14e/0x1f0 [ 99.396797][ T7602] ? __lruvec_stat_mod_folio+0xa4/0x380 [ 99.398250][ T7602] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 99.399739][ T7602] p9_client_readdir+0x46f/0x510 [ 99.401055][ T7602] ? __pfx_p9_client_readdir+0x10/0x10 [ 99.402468][ T7602] ? rcu_is_watching+0x12/0xc0 [ 99.403748][ T7602] ? v9fs_alloc_rdir_buf.isra.0+0x5d/0xb0 [ 99.405233][ T7602] v9fs_dir_readdir_dotl+0x3f5/0x5c0 [ 99.406605][ T7602] ? __pfx___lock_acquire+0x10/0x10 [ 99.407959][ T7602] ? __pfx_v9fs_dir_readdir_dotl+0x10/0x10 [ 99.409453][ T7602] ? __pfx_down_read_killable+0x10/0x10 [ 99.410872][ T7602] ? apparmor_file_permission+0x251/0x400 [ 99.412320][ T7602] iterate_dir+0x52f/0xb40 [ 99.413477][ T7602] __ia32_compat_sys_getdents+0x148/0x2c0 [ 99.414965][ T7602] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 99.416662][ T7602] ? __pfx_compat_filldir+0x10/0x10 [ 99.418031][ T7602] __do_fast_syscall_32+0x73/0x120 [ 99.419370][ T7602] do_fast_syscall_32+0x32/0x80 [ 99.420638][ T7602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.422188][ T7602] RIP: 0023:0xf744e579 [ 99.423250][ T7602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.428148][ T7602] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 000000000000008d [ 99.430296][ T7602] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 99.432297][ T7602] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.434314][ T7602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.436323][ T7602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.438360][ T7602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.440390][ T7602] [ 99.491787][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.496117][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.499080][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.502283][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.504425][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.506758][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.535466][ T7613] overlayfs: missing 'workdir' [ 99.536639][ T7609] lo speed is unknown, defaulting to 1000 [ 99.724176][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 100.010938][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.013323][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.015690][ T7609] bridge_slave_0: entered allmulticast mode [ 100.017890][ T7609] bridge_slave_0: entered promiscuous mode [ 100.020596][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.022644][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.024727][ T7609] bridge_slave_1: entered allmulticast mode [ 100.029926][ T7609] bridge_slave_1: entered promiscuous mode [ 100.075092][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.079872][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.124221][ T7609] team0: Port device team_slave_0 added [ 100.129109][ T7609] team0: Port device team_slave_1 added [ 100.153650][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.155575][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.162188][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.167455][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.169274][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.176187][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.208589][ T7609] hsr_slave_0: entered promiscuous mode [ 100.210728][ T7609] hsr_slave_1: entered promiscuous mode [ 100.213302][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.217006][ T7609] Cannot create hsr debugfs directory [ 100.622916][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 100.717261][ T7644] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 100.733180][ T7644] batman_adv: batadv0: Adding interface: team0 [ 100.735047][ T7644] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.741417][ T7644] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 100.745723][ T7644] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 100.747903][ T7644] netlink: 2 bytes leftover after parsing attributes in process `syz.3.401'. [ 100.757430][ T7644] team0: entered promiscuous mode [ 100.761666][ T7644] team_slave_0: entered promiscuous mode [ 100.764919][ T7644] team_slave_1: entered promiscuous mode [ 100.767289][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.770387][ T7644] batman_adv: batadv0: Interface activated: team0 [ 100.772221][ T7644] batman_adv: batadv0: Interface deactivated: team0 [ 100.774048][ T7644] batman_adv: batadv0: Removing interface: team0 [ 100.776398][ T7644] bridge0: port 3(team0) entered blocking state [ 100.778057][ T7644] bridge0: port 3(team0) entered disabled state [ 100.779644][ T7644] team0: entered allmulticast mode [ 100.780902][ T7644] team_slave_0: entered allmulticast mode [ 100.782316][ T7644] team_slave_1: entered allmulticast mode [ 100.785782][ T7644] bridge0: port 3(team0) entered blocking state [ 100.787567][ T7644] bridge0: port 3(team0) entered forwarding state [ 101.391364][ T7665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 101.393836][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 101.396916][ T7665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 101.399277][ T7665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 101.403302][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.416686][ T39] audit: type=1326 audit(1733385879.051:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.422191][ T39] audit: type=1326 audit(1733385879.051:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.431450][ T39] audit: type=1326 audit(1733385879.071:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.439727][ T39] audit: type=1326 audit(1733385879.071:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.445837][ T39] audit: type=1326 audit(1733385879.071:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.451285][ T39] audit: type=1326 audit(1733385879.071:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.460182][ T39] audit: type=1326 audit(1733385879.071:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.466019][ T39] audit: type=1326 audit(1733385879.071:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 101.539274][ T7672] bridge0: port 3(syz_tun) entered blocking state [ 101.541498][ T7672] bridge0: port 3(syz_tun) entered disabled state [ 101.543744][ T7672] syz_tun: entered allmulticast mode [ 101.547430][ T67] Bluetooth: hci0: command tx timeout [ 101.552571][ T7672] syz_tun: entered promiscuous mode [ 101.554289][ T7672] bridge0: port 3(syz_tun) entered blocking state [ 101.556598][ T7672] bridge0: port 3(syz_tun) entered forwarding state [ 101.647558][ T7670] netlink: 256 bytes leftover after parsing attributes in process `syz.4.410'. [ 101.649940][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'. [ 101.877140][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.930831][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.996209][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.036187][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.113394][ T1135] bridge_slave_1: left allmulticast mode [ 102.118886][ T1135] bridge_slave_1: left promiscuous mode [ 102.120503][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.139851][ T1135] bridge_slave_0: left allmulticast mode [ 102.141446][ T1135] bridge_slave_0: left promiscuous mode [ 102.144173][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.292252][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 102.482197][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.486699][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.490515][ T1135] bond0 (unregistering): Released all slaves [ 102.516688][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'. [ 103.037501][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 103.037511][ T39] audit: type=1326 audit(1733385880.671:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.4.423" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 103.159551][ T1135] hsr_slave_0: left promiscuous mode [ 103.164490][ T1135] hsr_slave_1: left promiscuous mode [ 103.166840][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.168781][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.175117][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.182632][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.204375][ T1135] veth1_macvtap: left promiscuous mode [ 103.205925][ T1135] veth0_macvtap: left promiscuous mode [ 103.207382][ T1135] veth1_vlan: left promiscuous mode [ 103.209363][ T1135] veth0_vlan: left promiscuous mode [ 103.624720][ T67] Bluetooth: hci0: command tx timeout [ 103.826251][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 103.910501][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 103.919777][ T39] audit: type=1326 audit(1733385881.551:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.926009][ T39] audit: type=1326 audit(1733385881.551:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.932263][ T39] audit: type=1326 audit(1733385881.561:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.938175][ T39] audit: type=1326 audit(1733385881.561:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.946084][ T39] audit: type=1326 audit(1733385881.561:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.951875][ T39] audit: type=1326 audit(1733385881.561:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.958230][ T39] audit: type=1326 audit(1733385881.561:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.963872][ T39] audit: type=1326 audit(1733385881.561:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 103.969659][ T39] audit: type=1326 audit(1733385881.561:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.4.432" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 104.703787][ T7754] ================================================================== [ 104.705846][ T7754] BUG: KASAN: vmalloc-out-of-bounds in push_insn_history+0x615/0x690 [ 104.707855][ T7754] Write of size 4 at addr ffffc90003151010 by task syz.4.432/7754 [ 104.710485][ T7754] [ 104.711737][ T7754] CPU: 2 UID: 0 PID: 7754 Comm: syz.4.432 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 104.714619][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.717325][ T7754] Call Trace: [ 104.718180][ T7754] [ 104.718936][ T7754] dump_stack_lvl+0x116/0x1f0 [ 104.720120][ T7754] print_report+0xc3/0x620 [ 104.721273][ T7754] ? __virt_addr_valid+0x5e/0x590 [ 104.722546][ T7754] kasan_report+0xd9/0x110 [ 104.723637][ T7754] ? push_insn_history+0x615/0x690 [ 104.724929][ T7754] ? push_insn_history+0x615/0x690 [ 104.726226][ T7754] push_insn_history+0x615/0x690 [ 104.727483][ T7754] do_check_common+0xb78/0xd540 [ 104.728736][ T7754] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.730012][ T7754] ? __pfx_do_check_common+0x10/0x10 [ 104.731303][ T7754] ? kvfree+0x47/0x50 [ 104.732315][ T7754] ? check_cfg+0x403/0x840 [ 104.733446][ T7754] bpf_check+0x77c2/0xc9b0 [ 104.734548][ T7754] ? hlock_class+0x4e/0x130 [ 104.735690][ T7754] ? __pfx_bpf_check+0x10/0x10 [ 104.736904][ T7754] ? find_held_lock+0x2d/0x110 [ 104.738091][ T7754] ? bpf_prog_load+0xd45/0x2670 [ 104.739275][ T7754] ? __pfx_lock_release+0x10/0x10 [ 104.740531][ T7754] ? trace_lock_acquire+0x14e/0x1f0 [ 104.741849][ T7754] ? bpf_prog_load+0xd45/0x2670 [ 104.743098][ T7754] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.744448][ T7754] ? read_tsc+0x9/0x20 [ 104.745505][ T7754] ? ktime_get_with_offset+0x20f/0x3a0 [ 104.746899][ T7754] ? bpf_obj_name_cpy+0x156/0x1b0 [ 104.748185][ T7754] bpf_prog_load+0xe3f/0x2670 [ 104.749405][ T7754] ? __pfx_bpf_prog_load+0x10/0x10 [ 104.750737][ T7754] ? find_held_lock+0x2d/0x110 [ 104.752076][ T7754] ? __might_fault+0x13b/0x190 [ 104.753304][ T7754] ? __might_fault+0xe3/0x190 [ 104.754494][ T7754] __sys_bpf+0x5677/0x57a0 [ 104.755614][ T7754] ? __pfx___sys_bpf+0x10/0x10 [ 104.756984][ T7754] ? do_futex+0x123/0x350 [ 104.758196][ T7754] ? __pfx_do_futex+0x10/0x10 [ 104.759426][ T7754] ? xfd_validate_state+0x5d/0x180 [ 104.760701][ T7754] ? rcu_is_watching+0x12/0xc0 [ 104.761932][ T7754] __ia32_sys_bpf+0x76/0xe0 [ 104.763213][ T7754] __do_fast_syscall_32+0x73/0x120 [ 104.764547][ T7754] do_fast_syscall_32+0x32/0x80 [ 104.765924][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.767575][ T7754] RIP: 0023:0xf7f82579 [ 104.768586][ T7754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.774640][ T7754] RSP: 002b:00000000f50e557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 104.777824][ T7754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 104.780685][ T7754] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.783558][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.786379][ T7754] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 104.789285][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.791877][ T7754] [ 104.792939][ T7754] [ 104.793757][ T7754] The buggy address belongs to the virtual mapping at [ 104.793757][ T7754] [ffffc90003131000, ffffc90003153000) created by: [ 104.793757][ T7754] kvrealloc_noprof+0xfc/0x150 [ 104.799873][ T7754] [ 104.800742][ T7754] The buggy address belongs to the physical page: [ 104.802972][ T7754] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x3ffca pfn:0x4bc22 [ 104.806133][ T7754] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 104.808676][ T7754] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 104.811403][ T7754] raw: 000000000003ffca 0000000000000000 00000001ffffffff 0000000000000000 [ 104.814206][ T7754] page dumped because: kasan: bad access detected [ 104.816388][ T7754] page_owner tracks the page as allocated [ 104.818312][ T7754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 7754, tgid 7752 (syz.4.432), ts 104703705164, free_ts 104262084992 [ 104.823867][ T7754] post_alloc_hook+0x2d1/0x350 [ 104.825533][ T7754] get_page_from_freelist+0xfce/0x2f80 [ 104.827331][ T7754] __alloc_pages_noprof+0x6a6/0x25b0 [ 104.829069][ T7754] alloc_pages_mpol_noprof+0x2c9/0x610 [ 104.830908][ T7754] __vmalloc_node_range_noprof+0x724/0x1530 [ 104.832870][ T7754] __kvmalloc_node_noprof+0x14f/0x1a0 [ 104.834700][ T7754] kvrealloc_noprof+0xfc/0x150 [ 104.836303][ T7754] push_insn_history+0x2ac/0x690 [ 104.837974][ T7754] do_check_common+0xb78/0xd540 [ 104.839638][ T7754] bpf_check+0x77c2/0xc9b0 [ 104.841171][ T7754] bpf_prog_load+0xe3f/0x2670 [ 104.842774][ T7754] __sys_bpf+0x5677/0x57a0 [ 104.844258][ T7754] __ia32_sys_bpf+0x76/0xe0 [ 104.845752][ T7754] __do_fast_syscall_32+0x73/0x120 [ 104.847496][ T7754] do_fast_syscall_32+0x32/0x80 [ 104.849170][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.851275][ T7754] page last free pid 114 tgid 114 stack trace: [ 104.853293][ T7754] free_unref_folios+0xa7b/0x14f0 [ 104.854953][ T7754] shrink_folio_list+0x3468/0x42d0 [ 104.856717][ T7754] evict_folios+0x6e3/0x19c0 [ 104.858260][ T7754] try_to_shrink_lruvec+0x61e/0xa80 [ 104.859961][ T7754] shrink_one+0x3e3/0x7b0 [ 104.861501][ T7754] shrink_node+0xbf0/0x3f20 [ 104.862669][ T7754] balance_pgdat+0xc1f/0x18f0 [ 104.863854][ T7754] kswapd+0x605/0xc00 [ 104.864914][ T7754] kthread+0x2c1/0x3a0 [ 104.865977][ T7754] ret_from_fork+0x45/0x80 [ 104.867112][ T7754] ret_from_fork_asm+0x1a/0x30 [ 104.868367][ T7754] [ 104.869009][ T7754] Memory state around the buggy address: [ 104.870472][ T7754] ffffc90003150f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.872503][ T7754] ffffc90003150f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.874495][ T7754] >ffffc90003151000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 104.876515][ T7754] ^ [ 104.877726][ T7754] ffffc90003151080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 104.879688][ T7754] ffffc90003151100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 104.881706][ T7754] ================================================================== [ 104.884747][ T7754] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.886611][ T7754] CPU: 2 UID: 0 PID: 7754 Comm: syz.4.432 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 104.889354][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.892020][ T7754] Call Trace: [ 104.892871][ T7754] [ 104.893660][ T7754] dump_stack_lvl+0x3d/0x1f0 [ 104.894933][ T7754] panic+0x71d/0x800 [ 104.895969][ T7754] ? __pfx_panic+0x10/0x10 [ 104.897152][ T7754] ? preempt_schedule_thunk+0x1a/0x30 [ 104.898560][ T7754] ? preempt_schedule_common+0x44/0xc0 [ 104.899931][ T7754] check_panic_on_warn+0xab/0xb0 [ 104.901195][ T7754] end_report+0x117/0x180 [ 104.902250][ T7754] kasan_report+0xe9/0x110 [ 104.903416][ T7754] ? push_insn_history+0x615/0x690 [ 104.904968][ T7754] ? push_insn_history+0x615/0x690 [ 104.906258][ T7754] push_insn_history+0x615/0x690 [ 104.907546][ T7754] do_check_common+0xb78/0xd540 [ 104.908800][ T7754] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.910107][ T7754] ? __pfx_do_check_common+0x10/0x10 [ 104.911464][ T7754] ? kvfree+0x47/0x50 [ 104.912813][ T7754] ? check_cfg+0x403/0x840 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.914429][ T7754] bpf_check+0x77c2/0xc9b0 [ 104.916209][ T7754] ? hlock_class+0x4e/0x130 [ 104.917845][ T7754] ? __pfx_bpf_check+0x10/0x10 [ 104.919528][ T7754] ? find_held_lock+0x2d/0x110 [ 104.921267][ T7754] ? bpf_prog_load+0xd45/0x2670 [ 104.923021][ T7754] ? __pfx_lock_release+0x10/0x10 [ 104.924787][ T7754] ? trace_lock_acquire+0x14e/0x1f0 [ 104.926633][ T7754] ? bpf_prog_load+0xd45/0x2670 [ 104.928407][ T7754] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.930277][ T7754] ? read_tsc+0x9/0x20 [ 104.931758][ T7754] ? ktime_get_with_offset+0x20f/0x3a0 [ 104.933701][ T7754] ? bpf_obj_name_cpy+0x156/0x1b0 [ 104.935032][ T7754] bpf_prog_load+0xe3f/0x2670 [ 104.936304][ T7754] ? __pfx_bpf_prog_load+0x10/0x10 [ 104.937687][ T7754] ? find_held_lock+0x2d/0x110 [ 104.938945][ T7754] ? __might_fault+0x13b/0x190 [ 104.940230][ T7754] ? __might_fault+0xe3/0x190 [ 104.941568][ T7754] __sys_bpf+0x5677/0x57a0 [ 104.942752][ T7754] ? __pfx___sys_bpf+0x10/0x10 [ 104.943978][ T7754] ? do_futex+0x123/0x350 [ 104.945067][ T7754] ? __pfx_do_futex+0x10/0x10 [ 104.946340][ T7754] ? xfd_validate_state+0x5d/0x180 [ 104.947751][ T7754] ? rcu_is_watching+0x12/0xc0 [ 104.949032][ T7754] __ia32_sys_bpf+0x76/0xe0 [ 104.950187][ T7754] __do_fast_syscall_32+0x73/0x120 [ 104.951503][ T7754] do_fast_syscall_32+0x32/0x80 [ 104.952732][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.954423][ T7754] RIP: 0023:0xf7f82579 [ 104.955499][ T7754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.960398][ T7754] RSP: 002b:00000000f50e557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 104.962526][ T7754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 104.964496][ T7754] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.966450][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.968412][ T7754] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 104.970379][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.972358][ T7754] [ 104.973627][ T7754] Kernel Offset: disabled [ 104.974759][ T7754] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:04:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffffffff96977c88 RCX=ffffffff817570dc RDX=0000000000000ed5 RSI=1ffffffff267506c RDI=0000000000000000 RBP=ffffffff93f033a0 RSP=ffffc90006a4f7c0 R8 =ffffffff933a8366 R9 =00000000000404fa R10=ffffffff96979bcf R11=0000000000000000 R12=ffffffff96959950 R13=00000000000404f3 R14=00000000000404f3 R15=dffffc0000000000 RIP=ffffffff81756f59 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5135e9c CR3=00000000496d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801f9eaf70 RCX=0000000000000003 RDX=dffffc0000000000 RSI=ffff88801f9eaf70 RDI=ffff88801f9ea440 RBP=ffffc900010af0c0 RSP=ffffc900010aef80 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff969b7d1f R11=0000000000000002 R12=ffff88801f9ea440 R13=ffff88801f9ea440 R14=0000000000000008 R15=1ffff92000215df6 RIP=ffffffff8175e655 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50f4da4 CR3=000000002565c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85153210 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc9000441efa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035373754 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cd0aa R15=dffffc0000000000 RIP=ffffffff85153237 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020025000 CR3=0000000049e2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000172afb RBX=0000000000000003 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb13700 RBP=ffffed1003a52488 RSP=ffffc9000049fdd8 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d292440 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b201530 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020027000 CR3=0000000049e2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000