last executing test programs: 5.260012494s ago: executing program 3 (id=472): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000100008000f0001000000", 0x24) socket$netlink(0x10, 0x3, 0x400000000000004) epoll_create1(0x0) 5.169680571s ago: executing program 3 (id=474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=@newtfilter={0xa4, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x9}, {0xa, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x74, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_police={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x80000001, 0x7, 0x5, {0xa, 0x1, 0x3, 0x8, 0x9, 0x5}, {0x7, 0x0, 0xaace, 0x2, 0x7, 0x2ca61935}, 0x2, 0x4, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x240008f4) 5.169453393s ago: executing program 3 (id=475): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0)="e0a5ef074e233bd8424b8c9ef01e9f1d8d7c8a49e0b3bb3b49f034ec4af003ce8bb4b658eed662f1b24f55b381b2100c5fc4413c75da657cc5f0959616849599ced63f9e12c988bc18c25542f27fb98e63728e2a474a4c1af37c785bde2c12984f20ceee823ea6bb69adaba0ed5630298617574c653110a1f615732d315e5733bf9a09b01ee4f6f5d74bf0b0ee2c744cd08c8716259ae051a0b824db2b", 0x9d, r0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f0000000040)=""/72, 0x48, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.029809781s ago: executing program 3 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x4, 0x1804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001, 0x100000}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000440)={0x0, 0x7f}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x58, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x817}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb2f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x58}}, 0x44841) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.830044456s ago: executing program 0 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (fail_nth: 4) 4.719755442s ago: executing program 0 (id=480): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000500)={0x1, 0xc}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000001000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000e5ff0086fab7d10000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x2, 0x0) rt_sigprocmask(0x3, &(0x7f00000019c0)={[0x3, 0xf]}, &(0x7f0000001a00), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x10000) recvmmsg(r5, &(0x7f0000001980)=[{{&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000280)=""/128, 0x80}], 0x4, &(0x7f0000000380)=""/56, 0x38}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000600)=""/144, 0x90}], 0x3}, 0x2}], 0x2, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 4.15961485s ago: executing program 3 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x71d3, &(0x7f0000001300)={0x0, 0x969f, 0x0, 0x0, 0x1}, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) ioctl$TUNGETVNETLE(r6, 0x400454de, &(0x7f0000001940)) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x4161, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = syz_io_uring_setup(0x23b, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000a00)) splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000140), 0x4) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r4, 0x0) 3.819933682s ago: executing program 3 (id=489): r0 = socket(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) setrlimit(0x8, &(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0xc00}, 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r7, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair(0xa, 0x1, 0x100, &(0x7f0000000080)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x2b, 'cpuset'}]}, 0x8) 3.640047112s ago: executing program 0 (id=490): io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$alg(0x26, 0x5, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0xa8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7f, 0x1, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x3c, 0x7d, 0x3, 0x10, 0x5}, 0x25, &(0x7f0000000240)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x0, 0xe, 0x47a, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0xb, 0x8, 0xfff9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x4, 0x1, 0x6bc}]}, 0x5, [{0x4b, &(0x7f0000000300)=@string={0x4b, 0x3, "241067d5fd363c6c5a39c2fca37edcaec66e6052b098325d4e6c93474ef59af604b0abaf75342daf31f0160bcef889f6155609ef02b3cfa567a443d16d97d3268293a03c8cb1915696"}}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "1f9ffc0560104b19d386f08ee5e6c2a32284b897c66658a0b4ff5e2e262e126edc06bebeaad4d132509a09c086d1c3b411949cd485d3e38a6d08dd8e2bb830433258bbf57879c7c50579db7115c15df8bf79540fd33b38cce2e21a4ed3820d"}}, {0xcf, &(0x7f0000000400)=@string={0xcf, 0x3, "47f57df5f2545313aba7a1c73e62f16a19831b1fddb232f7993ae1bda66d99f44b849913b558f8d74832f993aa103df370776f8992c5b5cfdc288cdf761460ee2c50a4e6f184d774f668c74210a2a72b5e7617f3677f7a21f30b4d4b88cc1f32315c4852e31b8006bf800c78f4f338e29580c143029e6f765696cc347d052797fbf9735881a130c6b61512fdb096894d3841401370e7eee7319d2fda839368d10478e06d67c40eced0b63e51948a9af5fa1ff155b5a06a2b61c1230efd171ec30f00ef83377103500d54829579"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}]}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000340)='9', 0x1}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x4, &(0x7f00000000c0), 0xaaaaaaaaaaaaa48, 0x3, 0x71, 0x20, 0x60, 0x44}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000015000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cd7e027e5191e36a975500cd52b39a7d00007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba991c3116776458d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab978f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d126f019a94fbacf1492cb5e80a29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a016852ccd0000007c3d60c9807d4bd5a97393a50000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f602d19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbda0f31f00a8ce6e973a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda907f976dee2651fb6da4435497a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff9402b0949a7097b9cf8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139cad54b65b90009950000006b420701800000cb2717e21f8f187b1866108b6e8c71e202321760666d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a420c08dd810"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x2}, 0x20) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) 2.93009244s ago: executing program 1 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000000103000000000000000000020000010c000d8008000200e000000134001880080003400001300008000340000000070800034000000006080002400000000508000240000000000800014000000fff08001a4000000005980002802c0001801400030000000000000000000000ffffac1414aa14000c00fc0100000000000000000000000000001400018008000100ac14142708000200ac1e2a01060003"], 0x150}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001200f3"], 0x14c}}, 0xf0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @broadcast, @device_b}, 0x0, 0x45, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000000)=ANY=[@ANYRES32], 0xb, 0x0) msgrcv(r8, 0x0, 0x0, 0x3, 0x4800) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x9]}) listen(r5, 0x0) 2.758178712s ago: executing program 1 (id=492): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='=', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2802100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x8840) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000480)) r7 = dup(r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendfile(r9, r7, 0x0, 0x8a022) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000799000/0x2000)=nil}) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000200)=0x8) 2.560067954s ago: executing program 1 (id=495): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfe, @loopback}, 0x1c) 1.840077415s ago: executing program 0 (id=497): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r1, 0x2) 1.650046264s ago: executing program 1 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000cd0b000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x6a98047402e98331}, 0x14}}, 0x0) 619.97179ms ago: executing program 0 (id=501): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) 619.395994ms ago: executing program 0 (id=502): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x20100) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(r1, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000036c0)={&(0x7f00000035c0), 0xc, &(0x7f0000003680)={&(0x7f0000003600)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000002400)="92bdaa9836da1ab211bf56222301b22b556483203e7d4bb6b79f2ed980aa2f0789b29dc923c5c94580eb47cba3710f14e068c1067c4bed6f0175027ddd19ebfccaca6bba569dc987e4bf9771f58cfd46fe8a8583319813927332eb8e14cefa2a52b937af3b060771b370296121acc8633344f2c6f76e9863aee0075fa9a8575b0bf5b78c9633ae2f9529e40e20de2e6b2c55b5fe05623d982e307428c5908e68f52500ec9dd30140bfa0305995a3112f3ea9", 0xb2}, {&(0x7f00000024c0)="31f5b0439829a70d2c4db9f9d069a62694d10b60a78eceb2a8f03fd8df3ab97459bd9039b42810faa62238dc3ac63f0c6ee3bc1854fbd9599e02d7d7914ed9c8bdbab89914efc7d518c1aef6bbde8967b7401773e6112ce5ef533e5d948c94001b6a43557a32a567bb95497738a24c5435bfa56b44ddbdb2bc963cabd9cbdcd042ddc2f4a69884d4235cef3d3dcf28b6364ff2079e9d1bb606238c558c77d3e8336325e8ef612c9092b7f8596455e577b47458f0e1944cc51c3d221c2f64396f12d998d9ec4390fdcbfc6abacb56ec2d5509ca15953bacbe6bb419cfa6806119d1ea62962f9bc7b0b0470da56d75a0fe210d25ac07c67e8574e03e0327aafea46634a4f43d775cb0be6d547d3ff91dcb96636b144713ec3b7696a3ea33cfdb9efd6e992a238ee74863242dccb2f0fc66276dda0001ca7be312c90f2274936502b8d86c00730033912a48f12a258b4cca0fdba6b5b85c3007dbcc3a52a7133937b10f9e0c077d5278becca48f215af3fc94532b6da2725d86905d8834723446ad502ac173beee55a472c7fc839d0154d927e48c65611a3d50cb6df619bc007f20f00c66c5909ac5fe0fb9b64a0025adad03e674e43f12842e42be0c5cdd859363c36b2bf71ebb14f7f423c7d4baf988ff3958598420b8e7010ddfdcd37cd2d3381bc50a40171319c5aa677ee33a60d7fee259cf212ea09153adf645972af0a63912b481589795db4c7f9e33f83ad7e505acd8e8141e9e99087821a0997006f18b64f9124c1ca6bd9493d2a198a1bf650f4d2c04c20f31afc676ce518381b0f55ea3c09b0a752a8f0b727abf352261313804f9970d30cd95d6a25a879af5b18f7ebfbf1f3edf5f6a5d5594c50abc4e3ace08bd6f459bd62ffb68fda484cadace4cb9258de095b26d03a9c839c3fab140b4910d42156e9848f3a74a9f8ed176c91294e07da15529ef56127a63b1f74667376107804cd7bc80b5514d164bd79426c918463bef17e47940c38c3545ff29dac92368d670d5db6dd18d31cfa0a096cacadcfb4d001da48d0b5dfc1d1aa3a48909880dcca9de32c920e937bd0b5b0e490a610841bf835a31240aa650aaed10685bae6aa463ece45bf78aa1bb635c7447f8df44b1d558ae9c6404e2dc6cf05c3346952e0ea788c9642849aca1481902d937faafc3345ed6e25f0d8374bef822af176cc96ca2d1f3af04ecb07de7df2105986da8eed4858c7d5344f7d7c794127d26e12ad46651cb9be1f3f87ef9d997ed373da2e893d4821e921f96ca5674c641f5b994258eab11967fcdb9eaae575fb3f98dfe0db615a229723c9874c4191e40d8ed3a9536fd8530cb224ccc0bc4317d1946ff1488ca2a353f81f6dc37a5ca91ba1c44b4de62756b099d4cc0a77a45d72af3e4dc955f2a80df988ab46ca2f56ff1af6961ae1a5af558785315d91a22c57915eed35c44a431d9d9a081bd3109bb4cf0d6ec80d2088973e217022d3081742cc6da62c31e00db501b5176755de573805138c9d28e3fafa944e1b5593fc3954e0b9f6f26bba18e0f8fc790dca9f000bc90cad1f1d5ef298f56531b9faf9f5bc1cbed220438ac402ea31fa8b8bec426b17056bc0c721e94f675e59047cd859ee120f377f10d0e602eb3949120b93fa73b644164f7c58348946171194c076a25e5b5559f9bb83a1d08fa8dee0c108998b8f2240c3e84ab79cccdc3326a76a99c00980c79759668e3855fe8568959feff86d6b645af5ef9259e3d267aa71174164be0aa244a90cf7914d2d710ba58bbfa693836f94b2ea71e2829371886e36b0703d22d0ab6d80ab008d3dc050d1f825a2781963baa19c4598226efeb585157d2d3932cc604654b484cff175d01570a4a97959d4a379f8bd26982eaf2170c27af507b9e39e7771b4b0ca662fb58fec8cd1d5bd8484e5884c178464cd3eceaf2fb62c4d289554c06143435a7fd08b017fa0a2b6f510ee893a4cad05e83052c06bd06f6222c14ba0e8399d8525180a401cc33102f9bffba7237a9db55dcaa229376a1ea2776c3cda7e35618d52f126eb78192ae22f8708e683f0ab97874cd2d16210660e0f891cb02febdc3a48ac77df3d07d2b6d73ca403249d67edee22f2047363c28bf4a19327d8c4535077dee6d536ad0df0638cf5b274e47cdbc86681a0cb4876745ed0fed581a5ac19efc32a52444f53e6763083c08d5d3549fe7c93f9d9ba026961e05d54e04db7803269123e212ef17470a2879d055e599bfbed7472e353e7c7132a961206b6af33657940c7b195eb9dc4d54416d74c360bb3b167bc342e30b2f348cf2895e9b18c70904f5a63eec39b1525c5dd57af64c38d52d892443c0e48e326f0fc4e4bf1c47d3e0eaa0860f3ec0f5ba5469b8c77a8eac91433a4fd8d3805556a14981c6716c32859b234f076cbc194bb2f73639a93375deb1ca784c7fd026311cce96e2296230339254c8925c1cec6baf60f874a254ec584c1bd4f070a25e80d9a060fc6b0fff9b6fc8829a7e8db70f9d7b12edb64f538459933820267ea1f10a782f48d4bcc996f1b2c4a6ac748471ba6624e71ef40972db4124dc01b7ddfa701f8e35bbaa2841c83e2372576c467cfefaed4201f3aa3806392ef2993c919bf7f2e527bdaa7a179242976d7476bc61517f4895a20bbd3a00147feb8bc493255ef275479f65c95b98d5ebc47946d94d514b0c848a04205b5cc879d119ffb5b7a7a522790da93a2c38d3bcd95d2ec5d1fbe12d66a90e5edf079af002ae78a76dd59f765e2975e7aa591057abb01cceaedb62c1c71344591d78978613d9f6116652c62c6ce0a63b25f6abd4a4bcd1df0fc5c0996740ad685d3a505abfb58831a77a32f9d1c7f4d49159194fe51f0ba219f3104a3c5247ba212fe5696dc2f45084b680d12ac3e561c23bdb25e7421eee2f594982e9c04989f7ad13b82587a5054f73b924e88ca9bb8665abbf504a75821d2cb9f50c149eda4988fe7b4c32a18578fa8b4022497ee2188b700a0df8d20cedc24539b3e44312942346caffb36185aab96bda09349e3d625e4509be53efcccf2e34c5c9e7862e08f93476115a974cae9c56268587b196433e6eb7911924272e88fd8bbc39cc80815b6d11384a90d727f1664c219d01a36b5b21f9a9defbcce9db4962d61a658b636e9cc03839fed98f1c494fc3b683bfc52b526f3bccbd78a4b5d4c54a396cb832ee40efd3a980b5ae148d53fdc05f997fab43851132fa735f738618cba9f122657561436274d7bba984cd55457eedd529dc40037cedb97b5d39c4128cb428a5b868500bfef02bac4cf17d1c4c75a615427410b5af6b2dc73c790107a23a9c30f3a9f65bbe8cb6601b133a49110a99f9d9e9b122f40c79f7719d033babc490308c9ac31666f28e0e6fadda0346e8ed767337d33f11de53f8fd3d1019a483220b7530e93cefbc69817410c8f7471ca7ce7da0144aa98998287831ea9c7d6c6151cdabbf1e216d254866b4e312c4f2db86ae07f228a73afcee2c5a3ba480db0d856d71212bdb5090023ce4c1243959606da9b432fa0b45bd88deb078a5173d889cbf7ae3f9145e45ca21dfe20d990713cae6f8c03bd0010f2ac40df495ededc20d1227181824879124e9471de0292354a13e33243ca6243cea0002a145edcb92c7cb3b4292caa95a9a22995fbabe6159e476977815cc97586c59b44eb76ca7345b9e731b8ae8a93cf5bc110a5a21f11fbb3c95c2e96c08c908a8d535692f7b775cee2a6e67a2c6363cdcd25f3e16d1abd24f7bc91d60e9dc4f57f9a58717ff0d741b798646f836c7dfa2b8c376c463d46c80f84e15f6e5c87e1f4f5950f6c369d97003190ed6e9abe2a75a49760c887a5a23da9982645b21098c784806598ef28ee834b2ab948143308d6abd99e9899a61743a41505fa11a77896becba58af6aba04f563ce5132ca443a74f4b614cfcea2c0e6a96bf7a01a7f96a1603d7bab405d5abe20b2a21d22ad2b687850b6e697a109df10f362875eab8a74ab8b7c1d862f87e7f35d75a4fecb07495165fc718a58f21daa7e5e8721ff50f75ea9f42b198cd3b7874bbe4c4c0681e7074c78cb41b406e1f82cbde21c9c68422ad603121384319dd8255d43c3738c762b7ae81d51a1382e2dea555c419476a1e5ecf33e77633b9f86c80d8c962840d415f1fdbd144fe92b2e36b226fd0459a3c066b06193c71576530ca2ac46e49259996b5a8fbd43c221250d1a4fe01d7faa96f53a9db806f4e7f1ff75f36991b7667c8fee460466c5bb73c48ae77a416d9e84611d0b950f915d77300cc9238f87516234d7ff7ee85a18400c58e95a43762411712375209c4d8005cbd91ce8813379b425305631ef654ce7c7ec9e0c4f07660cf82cc46b05132b0aec44f2899b8f4c99e4e4dc8a30e3b9e2fea2332ddc7b7fef69a2850e49d2d617bfdca45143de3204f8b007f5008494f3584dce771013757cf53a3ad953db1ffa1db44e0706e4862253f958b451b756da7e499a2dc4762ebc18457be41ddc7ac0f793aff7642dd55ba44d4d23eefbb3b4535f65f8f0dc8f8c82983118b3c204b616dfee1bba1564fee157cf1dcf5dd860c0146cb4eeb9c7c3c9e7d2ebab6d3089c8d4518cbdf0dfe9acc7e56f0881bd0451e95142c18a5ded948efbbb20df4b016cfa51c71dfa311449c5f1781607e0736d15d54842dfe1a158f840d8eeec742717f604cc019dc09b1efa9dcf4476e7026a26fb2675fa7c800db322e4192318f87b4930ce9abac500f682c625e040547b6a8d5f6a13067c06f1934f978f26478833316d7767516f3603387127cf307c420e5ff723e8e43e707fa3f0654fbfa4469675707ca2798cc632dcd1dce332eb135ca412fa917b8f119f707f873b39aab350234765350dc893b889d0d3d73b87f91f7eb5ae475b8c7e4fcf67d9f6a582ff73a0ac6c7ad7e4db044ed9e51f94bb3074f9fc8b84fc3f3a02f46a544e6d36fdbe04d8df4165e442abe6397423da9a1bde2416e5025fd5ccdceb3e49aba7088512dd7f798296a04eea51a34aa44b0d82b392f85521c0bb97c5aa59b98d8d5bec15195bb9da9c784dfce8b5849b1011814166d7214cab33b6d5bbb3a3c32b67e6775d908cdedb770b6f54b888aad596dc8263c4723c383e261e0218d6b73db7848834b0eff26468b1def11238f2a76753e11d8bb0ed8c63e15978590e754f36471c2b487857629963a0d5d4dfca9ca66c333481c083088585f2f648d7ef0e3dd7574f2ead8add1473f67cfbaf6bf51ba955845024e1b4fd31363e971aa5ad5346d5c3d0f88c7a5f842f56c4685e8a98da4d4217bd80ef53d9153f272dc13e8ed8e5c301026f0a1f93335aa8bc0ba448b54658329c556f21fd8826ca56519e9b91ae8e1b7a13d7ba7a1a2a0e2d445e5c5be578d67056122222e71c6a560da9022461a2aeb26b85bf9dee95c7291665ed1c0181ce4a72a25f4135cfd461f1cb99d95693f295112c95e07dbb2bbb258130b9d0c99f51173bc90b9a6a0fd867f6d703d6d42be16c6d4d87ec0f7b2edd97b1249a5d7cf3ced406c1a91fca002466ce7e4ae5e98d4ead2781dcf6479d855c52a06d1751bd72d3e3a717c2baee03e39421b564031c7a49097c07b81c2817438aa765b7ba42b407e4060746138ad6b27e4fdac2fbb87551ea0069a766664a21f062a6cce6b9ddcbeade2820bb142703d12f50bdbeb9360db686b5e71b0b5fac51eb7df7be937dff1cbe04b3e2e4f5b65799d88ebd67aa1d03da8758f9a192d897ba10643c63d5a0560949810305d20000000000", 0x1000}, {&(0x7f00000034c0)="fb91e450483aed2771c10289ebc8d9771e5d2e32afabbfc19159e915964c63ab20da610fb057e40a276e43f83b8be677fe6c79f5f4e7f872ccbc04d6632d064397504222e7b88ab45d3eb5b42375788a95ce2a4ca12704123245c808bb3983c63ef6165790472203aa5ea3651036e810e4220636398263fd3c8f9a0bc9ec43cafdfda43099e9df52fbcf4b64c399bf178579d63f54b970277f1f8ed366cec812dc16a7ada61db8c2f7197e05323d065f6c6673e944d9334479c3b5dcb680690c8def453e1b762f8ab4fc0086b0cd6f", 0xcf}, {&(0x7f0000008180)="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", 0x1000}, {&(0x7f00000045c0)="e99aa877afb52540288551561277a243bde3dfd54507fe06b85e7d1cc55ba0facad88ed15d5b05a2216b6899afb03d1910e2a6ca2f8bbddc016f55776d4474686dd1b20574ef6748e70053925336e8ca208b7e94274dd3da8341f9774f46dd7ffc1fae8b4ad14538f432dee9c6571ab649b5f0aa9b3125030f0660325bbe88eec560463db52f52f08c43e9fb9c41e238de4ac7f2eb5803a99f0f04cc4bf7a348491946a9c43c919223bd9a9bc068b4162cde95c120bebd71b0a364cfa6072b4074acdbe20602c1195ab08b8238d356d4ad890c170aca", 0xd6}, {&(0x7f0000003740)="fab9a7482efc71f11c58613a8b20d0dcae4890680756a0d473d20b90b5949d200948efcc2c5389b04271c4eff3e60cb1736678a7fcce7ee1a98758bbe6b32f852e87e19f3e378d3f4b6ce3fd8f732a94a9ca3480c90ac3edf3b4589f50e86993dbaf1fd9f42cc004a9068e3f7170a071feeafea83d5894a0db8b962504ee6119586bcf1e3303", 0x86}], 0x6, &(0x7f00000038c0)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="100000000100000001000000", @ANYRES32=r1, @ANYRESDEC=r5, @ANYRES32, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r2], 0x4c, 0x800}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x300000d, 0x40010, r8, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="450a00000000000061111000000000001800000021000000000000000000000095000000000000003284feb7c861a2b37dd62b5629ca434d0150523f92317564037bc294686955303afe72f8d6dac81fc3e75879b07b3d8dda11c1adb3131d6fc71553d31723ece998599fc3ac2988445bac38b7d0aaee534d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r10, &(0x7f0000000340)={0x2020}, 0x2020) 382.635608ms ago: executing program 1 (id=503): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0xfffffffffffffc23, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a"], 0x118) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x100010, r1, 0x0) read$msr(r1, &(0x7f0000000100)=""/255, 0xff) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0f7a28524468ef58851063c836c99ad18d45ec6ccc4366e2bfba95469e6d2e1c624d96bdfecb7854125c2e7e2e6afc8ca4", 0x31, r0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x6, 0xff, 0x1000, 0x3, 0x3a]}, &(0x7f0000000280)=0x54) 329.662055ms ago: executing program 1 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1]}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0xfffffffffffffffb}) pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000140)="98b301c26ffd5bf9aa1b84a3ab8e21c0854af1d5a28163ccc992a48f9d04c9cd42be34e69a84a77165aad4d7e3722c4fb159b41dd3aa9e3a9f630bad73e5bf0702566425a25550c66b29428c55e9b19a4008756decc59bbf27b368e3a412dda8ce3b6b1ccb947a8c79424576c7d8acd970320104abbf19cb8dc784529aec5c5ce34c179d2854b5dd2ab053b04f9cbbb2d18d6794e56f15e5def709044b1367ec", &(0x7f0000000240)=""/87, &(0x7f0000000540)="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", &(0x7f00000002c0), 0xa, r3}, 0x38) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6e8d, &(0x7f00000000c0)) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) ftruncate(r7, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 268.209535ms ago: executing program 2 (id=506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000004d40)={0xa, 0x0, 0x7ffffff7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008040) 208.986787ms ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1={0xff, 0x2}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 204.893791ms ago: executing program 2 (id=508): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) open(0x0, 0x181b83, 0x48) mkdir(&(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc71, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x9) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80104132, &(0x7f0000000300)) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x81, 0x3a, 'syz2', 0x3a, '!', 0x3a, './file0/file0', 0x3a, [0x50]}, 0x24) 79.878577ms ago: executing program 2 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0xff, 0x0, 0x0, 0x0, 0x1fffffe], [0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x2, 0xfffffffb, 0xfffffffe, 0x5]], '\x00', [{}, {0xfffffffd}, {}, {0xfffffffc, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x480000}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r3 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x2000}) 79.713032ms ago: executing program 2 (id=510): r0 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) 0s ago: executing program 2 (id=511): add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xfffffffffffffce6, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e968781", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) setsockopt$inet6_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xc6, 0x43, &(0x7f00000004c0)="9e171a7508adfee0b27a977d789b9959824d2b2184347f5aebe80b1333d11dfe0a497cdf1ce65ea56c76221a7c57f2bbebbf6117f973a114673a2804cfdfdd2d91a0e89fbbaa26b09b82daba58ccdb13e980ba12b20c029a4278fa392cc7d6fa259de25d74ed1f88285525325ca1f00f7bccc37074fe08e96bec27cb0020741e2868174cec001a3d0e8223ffd91c6a6e753564b3810fc524fc6005368da705105edfd72f85729b9dbfd2a14a02426eb759e7b26c193bf663b4bd56b3f7cdd0366c89ea094ac6", &(0x7f0000000280)=""/67, 0x10001, 0x0, 0xca, 0xc9, &(0x7f00000005c0)="268d2520e1642fd37fc49386baf4bffd5200ff1db271de94b63f5d290f9d8ba5639e79f8f77382be7d2dd41edc358535252174d827756c176c22b48ff1c4158174ff771a3fea96a87b39c21419e461f579f57c3b01b99bac21327b641bbd4571837ea2a8fb920e83b8435db615b48a5910b4c82e66dc2b7f9f71f77d4bf3cbf651af1776eb9b9e26e3d3f4bc6dc0b5a94274ff39340d6e7a662e65b0839f51506b9838e363955612881596d6108a82ea1c30f24a60e4d3efbe198f2a3377aa6e7a528e1fd61f9fc31b4b", &(0x7f00000006c0)="c24cff2db2ec86b3f905c8f1a23664f1b6ab286322b258e093f113d8c470672ee303d2946984b840b243e3e497c2d08f0a84be879c53c5c9402503dd45d1170f8b88a3d350eac6d9108c4c172aaa4253abb01d4f33abae0cc39b01d0b28721df6ec52b85280ad87a18b9159aa3a23435d6fda95719df140119159b250b038a8bf1067732a84a780850019d6b80baec5b202907bee75bcdce6c5b8312e471eadacc53c15e9b4e4a98aae9a6ab5df557ee0379f55345271480eacadfc7cf0e2c43ea0ae66c5a5c15579e", 0x4, 0x0, 0x7}, 0x4c) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000240)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_create(0x0, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r5, &(0x7f0000000040)='\f', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000480140004800800020000000000080001"], 0x3c}}, 0x0) r7 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) 0s ago: executing program 2 (id=512): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x7, 0x11, r4, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x8001, &(0x7f0000000080)=[{0x401, 0xaa, 0x5}, {0x0, 0x10000, 0x5}, {0x1, 0xa20be71, 0x8e4}, {0xe, 0x2, 0x7fffffffffffffff}], 0x4, 0x3, 0x0, 0x20, 0x60, 0x44}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) fstat(r6, &(0x7f0000000c00)) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=@newtfilter={0xd10, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x9}, {0xa, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xce0, 0x2, [@TCA_BASIC_ACT={0xcdc, 0x3, [@m_police={0xcd8, 0xf, 0x0, 0x0, {{0xb}, {0xcac, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x80000001, 0x7, 0x5, {0xa, 0x1, 0x3, 0x8, 0x9, 0x5}, {0x7, 0x0, 0xaace, 0x2, 0x7, 0x2ca61935}, 0x2, 0x4, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x690a, 0xb, 0x7ff, 0x3, 0x0, 0x5, 0x42, 0x6e, 0x3, 0xed, 0x8, 0x7, 0x3ff, 0x8, 0x2, 0x8, 0xffff, 0x7, 0xa, 0xaa, 0x3, 0x4, 0x6, 0x3, 0x3, 0xd7, 0x9, 0xf, 0x29681ee0, 0x3, 0x8, 0x796, 0x3, 0xf, 0xfffffff9, 0x401, 0x6, 0x1, 0x9, 0x9c81f8ac, 0x10000, 0x7, 0x800, 0x9, 0x80000001, 0xffffff00, 0x4, 0x7, 0x3, 0x401, 0x80, 0x6, 0xfffffff8, 0x9, 0x8cbd, 0xfff, 0x80000000, 0x9, 0x5, 0x4, 0x70, 0x2, 0xff, 0x1, 0x6, 0x8f3d, 0x3, 0x3, 0x6, 0x5, 0x82ef, 0x1, 0x3, 0x112, 0x7, 0xc, 0x1, 0xf49b, 0x6b3, 0x40, 0x3, 0x6, 0xffffffff, 0xa67, 0x96, 0xfffffff7, 0x5, 0x77f, 0x0, 0xff, 0x3, 0x10001, 0x1, 0xa, 0x7fff, 0x8a, 0xfffffff9, 0x483, 0x5, 0x3, 0x57987eda, 0x6, 0x2, 0x5, 0x80, 0xce8, 0x4, 0x1b6568b2, 0x4b, 0x4, 0x2, 0x6, 0xf, 0x100, 0x3, 0x4, 0x6, 0x25, 0x10001, 0x4, 0x9, 0x4, 0x609e, 0x5, 0x2, 0xd6, 0x0, 0x4, 0x1, 0x3, 0x8, 0x4, 0x2d4645cd, 0x65, 0x6, 0x80, 0x3, 0x6, 0x2, 0x0, 0xb, 0x4, 0x1, 0x3, 0x5, 0x3, 0x5, 0xb, 0x7, 0x2, 0x7, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0x61ea, 0x5, 0x2, 0x9, 0x4, 0x0, 0x6, 0x2, 0x9, 0x3, 0x4a, 0x8, 0x3, 0x3, 0x4, 0x6, 0x8, 0x78, 0x7, 0x1ff, 0x5, 0xc, 0x2, 0x0, 0x7c, 0x6, 0xff, 0x1, 0x8, 0xaa32, 0x3, 0x8, 0xf7, 0x400, 0x80000000, 0x2, 0x4499, 0x3842, 0x8, 0x8, 0x0, 0x2, 0x9, 0x1, 0xa, 0x10001, 0xa, 0x3, 0x4, 0x8, 0x4, 0x4, 0xffff, 0x1, 0x3, 0xfffffffc, 0x1, 0x9, 0x92, 0x9713, 0xfffffffe, 0x8, 0x1ff, 0x0, 0xbbf, 0x6d, 0x70ce, 0x2, 0xa5, 0x80000001, 0x8, 0xf, 0xa8, 0x5, 0x7, 0x40, 0x7, 0x3, 0xff, 0x9, 0x3, 0x6, 0x9, 0x9, 0xf2, 0x7ff, 0x194fa32b, 0x1000, 0x3a, 0xffffffff, 0xa, 0x3, 0x9, 0xa, 0x6, 0x8, 0x400, 0x1, 0x34]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x8c267e54a2291332, 0x3, 0x8001, 0x16, {0x40, 0x1, 0x182d, 0x9, 0x52a, 0x6}, {0xff, 0x0, 0xfffc, 0x1, 0x4, 0xbb57d8e}, 0x0, 0x0, 0x7fb}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf0}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x0, 0x80, 0xfffffffe, 0x5, 0x81, 0x10, 0x100, 0x6, 0xcf, 0x7fff, 0x0, 0x4, 0x1, 0x1ff, 0x5, 0x4, 0x7, 0x9, 0x80, 0x6, 0x3, 0x1, 0x80000000, 0x7fff, 0xd, 0x0, 0x2, 0x5, 0x71c, 0x7, 0x203, 0x744, 0x40, 0x786, 0x7, 0x9, 0x0, 0x745, 0x6, 0x8, 0x1, 0x7fffffff, 0x9, 0x942, 0xf3a4, 0x5, 0x7, 0x4, 0x8, 0xffffff01, 0x3, 0xa, 0x7, 0x8000, 0xfffffffe, 0x7, 0x15dd, 0x4, 0x8001, 0xffffeffe, 0x7, 0x3, 0x6, 0x3, 0x81, 0x5c389f6c, 0x9, 0x17e, 0x1, 0x80000001, 0x72, 0x6, 0x1, 0x1ff, 0x200, 0xfffffffc, 0x6, 0x9, 0xa0, 0x0, 0x4, 0x81, 0x8, 0x4, 0x1, 0x5d2, 0x1, 0xffff0001, 0xd35, 0xf, 0x0, 0x34, 0x9, 0xd9, 0x6, 0x6, 0x6, 0x5, 0x81, 0x2, 0x6, 0x66f, 0x7ff, 0x4, 0x25f0, 0xa, 0x0, 0xf4, 0x2, 0x1, 0xff, 0x6, 0xff, 0xffffffff, 0x83, 0x8, 0x5, 0x3fc0, 0x1ff, 0x4, 0x3, 0x6ea, 0x4, 0x4, 0x2, 0x8, 0x7, 0x7, 0x4, 0x0, 0xfe, 0x3, 0xfffffffe, 0x3, 0x3, 0x7f, 0x623, 0xfb6a, 0xfffffff7, 0x94, 0x26a8cda3, 0x401, 0xcfc, 0x8, 0xbade, 0x4, 0xffff6747, 0x800, 0x1a9, 0x7, 0x2, 0x5, 0x8, 0xda50, 0x0, 0xff, 0x1, 0x6, 0x0, 0x6, 0x8ea, 0x2a, 0x7f, 0x2, 0x3, 0x7fff, 0x1, 0x0, 0xe, 0x2, 0x4, 0x10000, 0x80000001, 0x2, 0x3, 0xb7, 0x8, 0x4, 0x5, 0x2, 0x81, 0x9, 0x7, 0x267, 0x1, 0x80000001, 0x0, 0x6, 0x97, 0x9, 0x7fff, 0xb7, 0x7fff, 0x2, 0x9185, 0x2, 0x6, 0x101, 0x5, 0x5, 0x3, 0xfffffff7, 0x6, 0x1, 0xd86, 0x3, 0x3, 0x5f8, 0x534, 0xf5, 0x2, 0x8, 0x7fffffff, 0x0, 0xd, 0x200, 0xe, 0x0, 0x9, 0xffff, 0xfffff4a4, 0x190c, 0x5, 0x1, 0x4, 0x9, 0x5, 0xfff, 0xb, 0x1, 0x10001, 0x2, 0x4, 0x3, 0x5, 0x0, 0xea, 0x7, 0x9, 0x6, 0x5, 0x2, 0x81, 0xc34b, 0x2, 0x9, 0x0, 0x5, 0x30000000, 0x0, 0xfb, 0x200, 0x2, 0x7, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4d, 0x1, 0xc231f91b, 0x800, 0x2, 0xffff8001, 0x9, 0xadea, 0x7, 0x8, 0x6, 0x4, 0x7, 0x0, 0x6, 0x2, 0x1, 0x200, 0xe, 0xaa53, 0x7, 0x3, 0x8, 0x3e, 0x1d, 0x4, 0xffffffff, 0x0, 0x2, 0x1, 0x10, 0x0, 0xd, 0x7, 0xffffff3d, 0x3, 0xeb7, 0x0, 0x97c, 0x3b, 0x8, 0x9, 0x2, 0x5, 0x5, 0x6, 0x8000, 0xffff85c7, 0x6, 0x7, 0x5, 0x5, 0xfffffffa, 0x400, 0xdde4beef, 0x9, 0x5, 0x4, 0x2101, 0x5, 0x3b, 0x4, 0x6, 0x4, 0x9, 0x2, 0x9b4, 0x6, 0x0, 0xc464, 0x3, 0xc2, 0x0, 0x2, 0x4, 0x10, 0x6, 0x8, 0x5, 0xb, 0x0, 0xb, 0x733, 0x2964, 0x401, 0xffff, 0x5, 0x100, 0xffffff7f, 0x8001, 0xe585, 0xfffffffb, 0x5, 0x81, 0x400, 0x1fbd8a61, 0x5, 0x9, 0x1, 0x3, 0x6, 0x800, 0x1, 0x1, 0x9, 0x3093, 0x51, 0x6, 0x9, 0x80, 0xd, 0x48a, 0x4, 0x81, 0x849, 0x0, 0x5, 0x5, 0x7, 0x9, 0x10001, 0x1000, 0x5, 0x80, 0x2, 0x2, 0x5, 0x8, 0x2, 0xb, 0x3ff, 0x1, 0x401, 0x3, 0x7, 0x75, 0x8, 0xffffffff, 0x8, 0x9, 0xfffffffb, 0x2e, 0x9, 0xd, 0x4d, 0x7, 0x10, 0x7fff, 0xfffffc01, 0x1, 0x8, 0x9, 0x100, 0x2b09, 0x9, 0xb77, 0x3, 0x9, 0x9, 0x5, 0x1cff, 0x51, 0x5, 0x0, 0x58, 0xfffffff9, 0x69d8d9fa, 0x2, 0x7, 0xd0c0, 0x9, 0x4, 0x5, 0x8, 0x2, 0x80000000, 0x2, 0xb3, 0x2, 0xffb4, 0x0, 0x8, 0x4, 0x80000001, 0x6, 0x9, 0xffffffff, 0x9000, 0x3235, 0xffffffff, 0x5, 0x5, 0x80000000, 0x81, 0x5, 0xfffffffe, 0x2, 0x1, 0x9, 0x8, 0x8000, 0x6, 0xffffff7f, 0x4, 0x7f, 0x10, 0x4, 0xfffffffe, 0x9, 0x0, 0x8, 0x380, 0x6, 0x3ff, 0xd, 0xfffffff7, 0x1000, 0x2, 0x6, 0x1, 0x800, 0x9, 0x1, 0x6, 0xfffffff8, 0x8, 0x10000, 0x9, 0x4, 0x0, 0x1, 0x4, 0x8001, 0x2, 0x7fc0, 0x4300, 0xd4f, 0x8001, 0x7fffffff, 0x101, 0x5, 0x3, 0x401, 0x2, 0x5, 0x6, 0xa, 0xa6, 0x5, 0x9, 0x5, 0x3, 0x5, 0x6, 0x8, 0x3]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xd10}, 0x1, 0x0, 0x0, 0x80}, 0x240008f4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="f0128000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12f0}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) kernel console output (not intermixed with test programs): d=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 46.481502][ T39] audit: type=1326 audit(1727511277.607:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 46.488984][ T39] audit: type=1326 audit(1727511277.607:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 46.496629][ T5532] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 46.498912][ T5532] netlink: 15382 bytes leftover after parsing attributes in process `syz.3.39'. [ 46.618903][ T8] usb 6-1: USB disconnect, device number 2 [ 46.694142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.697334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.699858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.705217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.708140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.714381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.742730][ T5544] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 46.745135][ T5544] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 46.747243][ T5544] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.43'. [ 46.750862][ T5542] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 46.752919][ T5542] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.42'. [ 46.819099][ T5548] program syz.1.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.885384][ T5550] process 'syz.1.45' launched '/dev/fd/4' with NULL argv: empty string added [ 47.031516][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 47.273584][ T5390] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.423561][ T5390] usb 6-1: Using ep0 maxpacket: 16 [ 47.427010][ T5390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 47.429575][ T5390] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 47.432041][ T5390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.437169][ T5390] usb 6-1: config 0 descriptor?? [ 47.439987][ T5390] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 47.878380][ T5569] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 47.880408][ T5569] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 47.882398][ T5569] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.52'. [ 47.931052][ T5571] netlink: 'syz.3.53': attribute type 7 has an invalid length. [ 47.933071][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 48.004427][ T5575] hfs: unable to parse mount options [ 48.354170][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.358258][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.649541][ T5560] syz.1.45 (5560): drop_caches: 1 [ 49.367626][ T5598] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 49.370077][ T5598] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 49.372072][ T5598] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.61'. [ 49.522907][ T5602] FAULT_INJECTION: forcing a failure. [ 49.522907][ T5602] name failslab, interval 1, probability 0, space 0, times 1 [ 49.543618][ T5602] CPU: 3 UID: 0 PID: 5602 Comm: syz.3.63 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 49.546305][ T5602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.549756][ T5602] Call Trace: [ 49.550710][ T5602] [ 49.551721][ T5602] dump_stack_lvl+0x16c/0x1f0 [ 49.553337][ T5602] should_fail_ex+0x497/0x5b0 [ 49.554790][ T5602] ? fs_reclaim_acquire+0xae/0x160 [ 49.556521][ T5602] should_failslab+0xc2/0x120 [ 49.558135][ T5602] __kmalloc_noprof+0xcb/0x410 [ 49.559762][ T5602] inotify_handle_inode_event+0x1c7/0x600 [ 49.561720][ T5602] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 49.563765][ T5602] fsnotify_handle_inode_event.isra.0+0x1d0/0x360 [ 49.565902][ T5602] fsnotify+0x110a/0x1b00 [ 49.567382][ T5602] ? __pfx_fsnotify+0x10/0x10 [ 49.568987][ T5602] do_splice+0x190e/0x1f60 [ 49.570504][ T5602] ? __pfx_do_splice+0x10/0x10 [ 49.572140][ T5602] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 49.573599][ T5602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 49.575573][ T5602] __do_splice+0x159/0x360 [ 49.577067][ T5602] ? __pfx___do_splice+0x10/0x10 [ 49.578591][ T5602] __ia32_sys_splice+0x1ce/0x270 [ 49.579916][ T5602] __do_fast_syscall_32+0x73/0x120 [ 49.581342][ T5602] do_fast_syscall_32+0x32/0x80 [ 49.583181][ T5602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.585068][ T5602] RIP: 0023:0xf742e579 [ 49.586460][ T5602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 49.592766][ T5602] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 49.595464][ T5602] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 49.598126][ T5602] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.600759][ T5602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.603429][ T5602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 49.606098][ T5602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.608736][ T5602] [ 49.665436][ T5604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.686869][ T5604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.938334][ T1281] usb 6-1: USB disconnect, device number 3 [ 50.085034][ T5618] afs: Unknown parameter '00000000000000000000012' [ 50.205359][ T5628] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 50.207666][ T5628] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.70'. [ 50.287714][ T5633] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.299436][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.473123][ T5640] binfmt_misc: register: failed to install interpreter file ./file0 [ 50.571171][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 50.727865][ T5652] No buffer was provided with the request [ 50.867053][ T105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.870029][ T105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.951631][ T105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.955207][ T105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.021598][ T105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.033558][ T105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.075130][ T5351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.078028][ T5351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.080167][ T5351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.082497][ T5351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.084858][ T5351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.087285][ T5351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.092264][ T5663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.156519][ T105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.159231][ T105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.203557][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.307657][ T105] bridge_slave_1: left allmulticast mode [ 51.309500][ T105] bridge_slave_1: left promiscuous mode [ 51.312658][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.335279][ T105] bridge_slave_0: left allmulticast mode [ 51.343531][ T105] bridge_slave_0: left promiscuous mode [ 51.345592][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.353776][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 51.357428][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.361281][ T35] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 51.368606][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.372425][ T35] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.376000][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 51.382197][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.385554][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.388449][ T35] usb 7-1: Product: syz [ 51.391227][ T35] usb 7-1: Manufacturer: syz [ 51.392969][ T35] usb 7-1: SerialNumber: syz [ 51.486059][ T5351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.489368][ T5351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.496616][ T5351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.499855][ T5351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.502392][ T5351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.508991][ T5351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.621415][ T5654] FAULT_INJECTION: forcing a failure. [ 51.621415][ T5654] name failslab, interval 1, probability 0, space 0, times 0 [ 51.626446][ T5654] CPU: 0 UID: 0 PID: 5654 Comm: syz.2.81 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 51.630040][ T5654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.633773][ T5654] Call Trace: [ 51.634951][ T5654] [ 51.636018][ T5654] dump_stack_lvl+0x16c/0x1f0 [ 51.637769][ T5654] should_fail_ex+0x497/0x5b0 [ 51.639457][ T5654] ? fs_reclaim_acquire+0xae/0x160 [ 51.641191][ T5654] should_failslab+0xc2/0x120 [ 51.642852][ T5654] __kmalloc_noprof+0xcb/0x410 [ 51.644574][ T5654] ? __pfx_d_absolute_path+0x10/0x10 [ 51.646413][ T5654] tomoyo_encode2+0x100/0x3e0 [ 51.648041][ T5654] tomoyo_realpath_from_path+0x1a7/0x710 [ 51.650064][ T5654] tomoyo_path_number_perm+0x245/0x5b0 [ 51.652035][ T5654] ? tomoyo_path_number_perm+0x232/0x5b0 [ 51.654056][ T5654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.656227][ T5654] ? __fget_files+0x244/0x3f0 [ 51.657940][ T5654] ? __fget_files+0x244/0x3f0 [ 51.659647][ T5654] security_file_ioctl_compat+0x9b/0x240 [ 51.661754][ T5654] __do_compat_sys_ioctl+0x52/0x2b0 [ 51.663224][ T5654] __do_fast_syscall_32+0x73/0x120 [ 51.664726][ T5654] do_fast_syscall_32+0x32/0x80 [ 51.666024][ T5654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.667688][ T5654] RIP: 0023:0xf73de579 [ 51.668768][ T5654] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 51.673802][ T5654] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 51.675967][ T5654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000041015500 [ 51.678044][ T5654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.680098][ T5654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.682116][ T5654] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 51.684050][ T5654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.686095][ T5654] [ 51.687464][ T5654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.704735][ T35] cdc_ncm 7-1:1.0: bind() failure [ 51.720713][ T35] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 51.722744][ T35] cdc_ncm 7-1:1.1: bind() failure [ 51.726477][ T35] usb 7-1: USB disconnect, device number 2 [ 51.741025][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.747293][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.751207][ T105] bond0 (unregistering): Released all slaves [ 51.866004][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 51.975891][ T5689] fuse: Bad value for 'rootmode' [ 51.995746][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.997423][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.999184][ T5668] bridge_slave_0: entered allmulticast mode [ 52.000974][ T5668] bridge_slave_0: entered promiscuous mode [ 52.019491][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.021314][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.023117][ T5668] bridge_slave_1: entered allmulticast mode [ 52.027952][ T5668] bridge_slave_1: entered promiscuous mode [ 52.055509][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.076124][ T105] hsr_slave_0: left promiscuous mode [ 52.078155][ T105] hsr_slave_1: left promiscuous mode [ 52.080113][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.081859][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.084926][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.087169][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.106524][ T105] veth1_macvtap: left promiscuous mode [ 52.107999][ T105] veth0_macvtap: left promiscuous mode [ 52.109560][ T105] veth1_vlan: left promiscuous mode [ 52.110853][ T105] veth0_vlan: left promiscuous mode [ 52.346449][ T5704] nbd: illegal input index -748760761 [ 52.723704][ T105] team0 (unregistering): Port device team_slave_1 removed [ 52.791472][ T105] team0 (unregistering): Port device team_slave_0 removed [ 53.226083][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.250116][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 53.278400][ T5719] Unsupported ieee802154 address type: 0 [ 53.338719][ T5668] team0: Port device team_slave_0 added [ 53.341884][ T5668] team0: Port device team_slave_1 added [ 53.378300][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.380089][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.388002][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.395021][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.404570][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.411262][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.463035][ T5731] Unsupported ieee802154 address type: 0 [ 53.507225][ T5668] hsr_slave_0: entered promiscuous mode [ 53.512534][ T5668] hsr_slave_1: entered promiscuous mode [ 53.517359][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.519372][ T5668] Cannot create hsr debugfs directory [ 53.543590][ T5353] Bluetooth: hci2: command tx timeout [ 53.596737][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 54.089615][ T5668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.096232][ T5668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.102356][ T5668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.110738][ T5668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.191468][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.224007][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.239357][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.241277][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.247427][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.249399][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.487606][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.547546][ T5668] veth0_vlan: entered promiscuous mode [ 54.583739][ T5668] veth1_vlan: entered promiscuous mode [ 54.615828][ T5668] veth0_macvtap: entered promiscuous mode [ 54.625080][ T5668] veth1_macvtap: entered promiscuous mode [ 54.636296][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.638975][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.641479][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.644482][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.647054][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.649836][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.653019][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.657940][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.660697][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.663193][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.676902][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.679722][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.682541][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.689792][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.704030][ T5668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.706361][ T5668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.708630][ T5668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.710903][ T5668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.771706][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.774163][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.792057][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.794204][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.948697][ T5790] validate_nla: 1 callbacks suppressed [ 54.948709][ T5790] netlink: 'syz.0.103': attribute type 2 has an invalid length. [ 55.458565][ T5819] FAULT_INJECTION: forcing a failure. [ 55.458565][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.462045][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz.0.107 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 55.464705][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.467472][ T5819] Call Trace: [ 55.468349][ T5819] [ 55.469135][ T5819] dump_stack_lvl+0x16c/0x1f0 [ 55.470277][ T5819] should_fail_ex+0x497/0x5b0 [ 55.471496][ T5819] _copy_from_user+0x30/0xf0 [ 55.472715][ T5819] get_compat_msghdr+0xa8/0x170 [ 55.474035][ T5819] ? __pfx_get_compat_msghdr+0x10/0x10 [ 55.475505][ T5819] ? __pfx___lock_acquire+0x10/0x10 [ 55.476940][ T5819] ___sys_sendmsg+0x1b0/0x1e0 [ 55.478223][ T5819] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.479599][ T5819] ? ksys_write+0x21e/0x260 [ 55.480818][ T5819] ? __pfx_lock_release+0x10/0x10 [ 55.482176][ T5819] ? fdget+0x176/0x210 [ 55.483406][ T5819] __sys_sendmsg+0x117/0x1f0 [ 55.484984][ T5819] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.486731][ T5819] ? __fget_files+0x244/0x3f0 [ 55.488349][ T5819] __do_fast_syscall_32+0x73/0x120 [ 55.490087][ T5819] do_fast_syscall_32+0x32/0x80 [ 55.491738][ T5819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.493939][ T5819] RIP: 0023:0xf7f35579 [ 55.495330][ T5819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.501787][ T5819] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 55.504730][ T5819] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 55.507416][ T5819] RDX: 00000000240008f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.510301][ T5819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.512974][ T5819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 55.515730][ T5819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.518421][ T5819] [ 55.633749][ T5353] Bluetooth: hci2: command tx timeout [ 55.699038][ T5828] FAULT_INJECTION: forcing a failure. [ 55.699038][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 55.702724][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.0.110 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 55.705412][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.708274][ T5828] Call Trace: [ 55.709163][ T5828] [ 55.709980][ T5828] dump_stack_lvl+0x16c/0x1f0 [ 55.711292][ T5828] should_fail_ex+0x497/0x5b0 [ 55.712548][ T5828] ? fs_reclaim_acquire+0xae/0x160 [ 55.713912][ T5828] should_failslab+0xc2/0x120 [ 55.715166][ T5828] __kmalloc_noprof+0xcb/0x410 [ 55.716419][ T5828] ? __pfx_lock_acquire+0x10/0x10 [ 55.717808][ T5828] tomoyo_realpath_from_path+0xbf/0x710 [ 55.719265][ T5828] ? tomoyo_profile+0x47/0x60 [ 55.720557][ T5828] tomoyo_path_number_perm+0x245/0x5b0 [ 55.722350][ T5828] ? tomoyo_path_number_perm+0x232/0x5b0 [ 55.724347][ T5828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.725958][ T5828] ? irqentry_exit+0x3b/0x90 [ 55.727193][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.728505][ T5828] ? security_file_ioctl_compat+0x21c/0x240 [ 55.730095][ T5828] security_file_ioctl_compat+0x9b/0x240 [ 55.731633][ T5828] __do_compat_sys_ioctl+0x52/0x2b0 [ 55.732996][ T5828] __do_fast_syscall_32+0x73/0x120 [ 55.734366][ T5828] do_fast_syscall_32+0x32/0x80 [ 55.735662][ T5828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.737244][ T5828] RIP: 0023:0xf7f35579 [ 55.738352][ T5828] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.743564][ T5828] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 55.745773][ T5828] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae90 [ 55.747883][ T5828] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.749979][ T5828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.752133][ T5828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 55.754220][ T5828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.756310][ T5828] [ 55.759211][ T5828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.850067][ T5831] gfs2: not a GFS2 filesystem [ 55.938613][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 56.052108][ T5843] bridge_slave_0: left allmulticast mode [ 56.055707][ T5843] bridge_slave_0: left promiscuous mode [ 56.058007][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.480939][ T5867] FAULT_INJECTION: forcing a failure. [ 56.480939][ T5867] name failslab, interval 1, probability 0, space 0, times 0 [ 56.485801][ T5867] CPU: 3 UID: 0 PID: 5867 Comm: syz.3.124 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 56.489275][ T5867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.492953][ T5867] Call Trace: [ 56.494148][ T5867] [ 56.495176][ T5867] dump_stack_lvl+0x16c/0x1f0 [ 56.496809][ T5867] should_fail_ex+0x497/0x5b0 [ 56.498463][ T5867] ? fs_reclaim_acquire+0xae/0x160 [ 56.500241][ T5867] should_failslab+0xc2/0x120 [ 56.501908][ T5867] kmem_cache_alloc_node_noprof+0x71/0x310 [ 56.503949][ T5867] ? __alloc_skb+0x2b3/0x380 [ 56.505566][ T5867] __alloc_skb+0x2b3/0x380 [ 56.507127][ T5867] ? __pfx___alloc_skb+0x10/0x10 [ 56.508857][ T5867] ? __mutex_trylock_common+0xea/0x250 [ 56.510767][ T5867] netlink_dump+0x6af/0xcc0 [ 56.512322][ T5867] ? trace_contention_end+0xea/0x140 [ 56.514121][ T5867] ? __pfx_netlink_dump+0x10/0x10 [ 56.515889][ T5867] ? __mutex_lock+0x1a6/0x9c0 [ 56.517528][ T5867] ? find_held_lock+0x2d/0x110 [ 56.519220][ T5867] __netlink_dump_start+0x6d9/0x980 [ 56.521031][ T5867] ? __pfx_rtnl_dump_all+0x10/0x10 [ 56.522830][ T5867] rtnetlink_rcv_msg+0xb44/0xea0 [ 56.524565][ T5867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.526467][ T5867] ? __pfx_rtnl_dumpit+0x10/0x10 [ 56.528167][ T5867] ? __pfx_rtnl_dump_all+0x10/0x10 [ 56.529939][ T5867] netlink_rcv_skb+0x165/0x410 [ 56.531607][ T5867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.533493][ T5867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.535353][ T5867] ? netlink_deliver_tap+0x1ae/0xcf0 [ 56.537188][ T5867] netlink_unicast+0x53c/0x7f0 [ 56.538860][ T5867] ? __pfx_netlink_unicast+0x10/0x10 [ 56.540684][ T5867] ? __phys_addr_symbol+0x30/0x80 [ 56.542452][ T5867] ? __check_object_size+0x488/0x710 [ 56.544321][ T5867] netlink_sendmsg+0x8b8/0xd70 [ 56.545998][ T5867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.547849][ T5867] sock_write_iter+0x4fe/0x5b0 [ 56.549530][ T5867] ? __pfx_sock_write_iter+0x10/0x10 [ 56.551376][ T5867] ? bpf_lsm_file_permission+0x9/0x10 [ 56.553215][ T5867] ? security_file_permission+0x71/0x210 [ 56.555131][ T5867] vfs_write+0x6b5/0x1140 [ 56.556659][ T5867] ? __pfx_sock_write_iter+0x10/0x10 [ 56.558647][ T5867] ? __pfx_vfs_write+0x10/0x10 [ 56.560331][ T5867] ksys_write+0x1fa/0x260 [ 56.561857][ T5867] ? __pfx_ksys_write+0x10/0x10 [ 56.563460][ T5867] __do_fast_syscall_32+0x73/0x120 [ 56.564810][ T5867] do_fast_syscall_32+0x32/0x80 [ 56.566103][ T5867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.568193][ T5867] RIP: 0023:0xf742e579 [ 56.569644][ T5867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.576182][ T5867] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 56.579052][ T5867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 56.581806][ T5867] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.584520][ T5867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.587196][ T5867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.589870][ T5867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.592592][ T5867] [ 56.593798][ C3] vkms_vblank_simulate: vblank timer overrun [ 56.702562][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.714790][ T25] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 56.732808][ T5875] overlayfs: conflicting options: userxattr,metacopy=on [ 57.284208][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 57.708070][ T5353] Bluetooth: hci2: command tx timeout [ 58.053221][ T5923] veth1_macvtap: left promiscuous mode [ 58.055211][ T5923] macsec0: entered promiscuous mode [ 58.056840][ T5923] macsec0: entered allmulticast mode [ 58.149380][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 58.296282][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 59.813712][ T5353] Bluetooth: hci2: command tx timeout [ 60.878772][ T6013] syz.2.175 (6013): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.144286][ T5390] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.324925][ T5390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.337079][ T5390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.340602][ T5390] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.353833][ T5390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.358823][ T5390] usb 7-1: config 0 descriptor?? [ 61.415050][ T6017] overlayfs: failed to clone lowerpath [ 61.489878][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 61.500663][ T6031] nbd: couldn't find a device at index 123 [ 61.632178][ T6040] No buffer was provided with the request [ 61.684923][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 61.742058][ T6048] netlink: 188 bytes leftover after parsing attributes in process `syz.3.188'. [ 61.744590][ T6048] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 61.814126][ T6053] FAULT_INJECTION: forcing a failure. [ 61.814126][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.818587][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.3.189 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 61.821595][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.825167][ T6053] Call Trace: [ 61.826059][ T6053] [ 61.826836][ T6053] dump_stack_lvl+0x16c/0x1f0 [ 61.828067][ T6053] should_fail_ex+0x497/0x5b0 [ 61.829326][ T6053] _copy_from_user+0x30/0xf0 [ 61.830550][ T6053] vmci_host_unlocked_ioctl+0xe8b/0x1fb0 [ 61.832010][ T6053] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 61.833601][ T6053] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.834931][ T6053] ? __fget_files+0x244/0x3f0 [ 61.836145][ T6053] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 61.837729][ T6053] compat_ptr_ioctl+0x6b/0xa0 [ 61.839008][ T6053] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 61.840410][ T6053] __do_compat_sys_ioctl+0x259/0x2b0 [ 61.841819][ T6053] __do_fast_syscall_32+0x73/0x120 [ 61.843149][ T6053] do_fast_syscall_32+0x32/0x80 [ 61.844419][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.846056][ T6053] RIP: 0023:0xf742e579 [ 61.847120][ T6053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.852086][ T6053] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 61.854167][ T6053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ab [ 61.856207][ T6053] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.858290][ T6053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.860295][ T6053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.862366][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.864301][ T6053] [ 61.881846][ T5390] usbhid 7-1:0.0: can't add hid device: -71 [ 61.883622][ T5390] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 61.974236][ T6050] block nbd1: shutting down sockets [ 62.014419][ T5390] usb 7-1: USB disconnect, device number 3 [ 62.664700][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 63.035926][ T6092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 63.054523][ T6103] FAULT_INJECTION: forcing a failure. [ 63.054523][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.068056][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.3.202 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 63.070765][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.073676][ T6103] Call Trace: [ 63.074548][ T6103] [ 63.075322][ T6103] dump_stack_lvl+0x16c/0x1f0 [ 63.076563][ T6103] should_fail_ex+0x497/0x5b0 [ 63.077811][ T6103] _copy_from_user+0x30/0xf0 [ 63.079022][ T6103] evdev_do_ioctl+0xce9/0x1ad0 [ 63.080277][ T6103] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 63.082004][ T6103] ? evdev_ioctl_compat+0x80/0x1a0 [ 63.083851][ T6103] evdev_ioctl_compat+0x16d/0x1a0 [ 63.085899][ T6103] ? __pfx_evdev_ioctl_compat+0x10/0x10 [ 63.087827][ T6103] __do_compat_sys_ioctl+0x259/0x2b0 [ 63.089700][ T6103] __do_fast_syscall_32+0x73/0x120 [ 63.091456][ T6103] do_fast_syscall_32+0x32/0x80 [ 63.093170][ T6103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.095389][ T6103] RIP: 0023:0xf742e579 [ 63.096817][ T6103] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.103459][ T6103] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 63.106306][ T6103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080104592 [ 63.108987][ T6103] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.111727][ T6103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.114438][ T6103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.117110][ T6103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.119831][ T6103] [ 63.322319][ T6109] autofs: Bad value for 'fd' [ 63.443081][ T6115] FAULT_INJECTION: forcing a failure. [ 63.443081][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.448543][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.206 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 63.451309][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.454579][ T6115] Call Trace: [ 63.455818][ T6115] [ 63.456617][ T6115] dump_stack_lvl+0x16c/0x1f0 [ 63.457874][ T6115] should_fail_ex+0x497/0x5b0 [ 63.459149][ T6115] _copy_to_user+0x30/0xc0 [ 63.460330][ T6115] simple_read_from_buffer+0xd0/0x160 [ 63.461810][ T6115] proc_fail_nth_read+0x198/0x270 [ 63.463108][ T6115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.464633][ T6115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.466351][ T6115] vfs_read+0x1ce/0xbd0 [ 63.467451][ T6115] ? __fget_files+0x23a/0x3f0 [ 63.468720][ T6115] ? fdget_pos+0x24c/0x360 [ 63.469901][ T6115] ? __pfx_lock_release+0x10/0x10 [ 63.471254][ T6115] ? __pfx_vfs_read+0x10/0x10 [ 63.472486][ T6115] ? __pfx___mutex_lock+0x10/0x10 [ 63.474194][ T6115] ? __fget_files+0x244/0x3f0 [ 63.475926][ T6115] ksys_read+0x12f/0x260 [ 63.477049][ T6115] ? __pfx_ksys_read+0x10/0x10 [ 63.478343][ T6115] __do_fast_syscall_32+0x73/0x120 [ 63.479726][ T6115] do_fast_syscall_32+0x32/0x80 [ 63.481002][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.482751][ T6115] RIP: 0023:0xf73de579 [ 63.483939][ T6115] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.489136][ T6115] RSP: 002b:00000000f56c65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 63.491318][ T6115] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56c6620 [ 63.493631][ T6115] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 63.496503][ T6115] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 63.498599][ T6115] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 63.500729][ T6115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.502842][ T6115] [ 64.015799][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 64.018845][ T6129] netlink: 'syz.0.211': attribute type 11 has an invalid length. [ 64.032493][ T6129] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.034974][ T6129] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.037202][ T6129] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.039448][ T6129] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.043892][ T6129] vxlan0: entered promiscuous mode [ 64.411802][ T6138] netlink: 'syz.1.214': attribute type 4 has an invalid length. [ 64.593755][ T39] kauditd_printk_skb: 53 callbacks suppressed [ 64.593765][ T39] audit: type=1800 audit(1727511295.777:65): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.214" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 64.928557][ T6145] FAULT_INJECTION: forcing a failure. [ 64.928557][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 64.933266][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.0.215 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 64.936141][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.939321][ T6145] Call Trace: [ 64.940177][ T6145] [ 64.940991][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 64.942253][ T6145] should_fail_ex+0x497/0x5b0 [ 64.943574][ T6145] should_failslab+0xc2/0x120 [ 64.944974][ T6145] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 64.946498][ T6145] ? skb_clone+0x190/0x3f0 [ 64.947740][ T6145] skb_clone+0x190/0x3f0 [ 64.948884][ T6145] netlink_deliver_tap+0xb26/0xcf0 [ 64.950402][ T6145] netlink_unicast+0x5e1/0x7f0 [ 64.951707][ T6145] ? __pfx_netlink_unicast+0x10/0x10 [ 64.953259][ T6145] ? const_folio_flags.constprop.0+0x56/0x150 [ 64.955125][ T6145] ? __phys_addr_symbol+0x30/0x80 [ 64.956515][ T6145] ? __check_object_size+0x488/0x710 [ 64.957976][ T6145] netlink_sendmsg+0x8b8/0xd70 [ 64.959531][ T6145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.961110][ T6145] sock_sendmsg+0x369/0x410 [ 64.962414][ T6145] ? pipe_lock+0x64/0x80 [ 64.963590][ T6145] ? __pfx_sock_sendmsg+0x10/0x10 [ 64.965016][ T6145] splice_to_socket+0xaac/0x1040 [ 64.966266][ T6145] ? find_held_lock+0x2d/0x110 [ 64.967721][ T6145] ? __pfx_splice_to_socket+0x10/0x10 [ 64.969252][ T6145] ? apparmor_file_permission+0x251/0x400 [ 64.970908][ T6145] ? bpf_lsm_file_permission+0x9/0x10 [ 64.972350][ T6145] ? security_file_permission+0x71/0x210 [ 64.974030][ T6145] ? rw_verify_area+0xd0/0x700 [ 64.975332][ T6145] ? __pfx_splice_to_socket+0x10/0x10 [ 64.976732][ T6145] do_splice+0x145c/0x1f60 [ 64.977930][ T6145] ? find_held_lock+0x2d/0x110 [ 64.979200][ T6145] ? __pfx_do_splice+0x10/0x10 [ 64.980409][ T6145] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 64.981866][ T6145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.983399][ T6145] __do_splice+0x327/0x360 [ 64.984861][ T6145] ? __pfx___do_splice+0x10/0x10 [ 64.986261][ T6145] __ia32_sys_splice+0x1ce/0x270 [ 64.987802][ T6145] __do_fast_syscall_32+0x73/0x120 [ 64.989283][ T6145] do_fast_syscall_32+0x32/0x80 [ 64.990643][ T6145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.992264][ T6145] RIP: 0023:0xf7f35579 [ 64.993233][ T6145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.998391][ T6145] RSP: 002b:00000000f569556c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 65.000675][ T6145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 65.002854][ T6145] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2 [ 65.004946][ T6145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.007150][ T6145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.009288][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.011416][ T6145] [ 65.012427][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.100039][ T6147] FAULT_INJECTION: forcing a failure. [ 65.100039][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 65.103343][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.3.216 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 65.105903][ T6147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.108615][ T6147] Call Trace: [ 65.109496][ T6147] [ 65.110544][ T6147] dump_stack_lvl+0x16c/0x1f0 [ 65.112074][ T6147] should_fail_ex+0x497/0x5b0 [ 65.113749][ T6147] ? fs_reclaim_acquire+0xae/0x160 [ 65.115476][ T6147] should_failslab+0xc2/0x120 [ 65.116850][ T6147] __kmalloc_cache_noprof+0x6b/0x310 [ 65.118218][ T6147] ? do_vfs_ioctl+0x513/0x1950 [ 65.119457][ T6147] ? snd_pcm_ioctl_hw_params_compat+0x84/0x320 [ 65.121015][ T6147] snd_pcm_ioctl_hw_params_compat+0x84/0x320 [ 65.122608][ T6147] snd_pcm_ioctl_compat+0x881/0x12b0 [ 65.123973][ T6147] ? __pfx_snd_pcm_ioctl_compat+0x10/0x10 [ 65.125409][ T6147] ? __fget_files+0x244/0x3f0 [ 65.126808][ T6147] ? __fget_files+0x244/0x3f0 [ 65.128125][ T6147] ? __pfx_snd_pcm_ioctl_compat+0x10/0x10 [ 65.129614][ T6147] __do_compat_sys_ioctl+0x259/0x2b0 [ 65.130988][ T6147] __do_fast_syscall_32+0x73/0x120 [ 65.132371][ T6147] do_fast_syscall_32+0x32/0x80 [ 65.133683][ T6147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.135313][ T6147] RIP: 0023:0xf742e579 [ 65.136381][ T6147] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.141845][ T6147] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 65.144688][ T6147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c25c4110 [ 65.147378][ T6147] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.150097][ T6147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.152875][ T6147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.155894][ T6147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.158815][ T6147] [ 65.322922][ T6156] tmpfs: Unknown parameter 'nr_inodes97e' [ 65.389585][ T6165] netlink: 188 bytes leftover after parsing attributes in process `syz.1.223'. [ 65.393078][ T6165] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 65.678273][ T6183] 9pnet_fd: Insufficient options for proto=fd [ 65.686218][ T6186] netlink: 188 bytes leftover after parsing attributes in process `syz.1.232'. [ 65.688506][ T6186] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 65.753290][ T6193] FAULT_INJECTION: forcing a failure. [ 65.753290][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 65.757245][ T6193] CPU: 2 UID: 0 PID: 6193 Comm: syz.3.235 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 65.760475][ T6193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.764394][ T6193] Call Trace: [ 65.765419][ T6193] [ 65.766474][ T6193] dump_stack_lvl+0x16c/0x1f0 [ 65.768154][ T6193] should_fail_ex+0x497/0x5b0 [ 65.769973][ T6193] ? fs_reclaim_acquire+0xae/0x160 [ 65.771854][ T6193] should_failslab+0xc2/0x120 [ 65.773594][ T6193] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 65.775644][ T6193] ? alloc_inode+0xba/0x230 [ 65.777394][ T6193] alloc_inode+0xba/0x230 [ 65.778978][ T6193] iget_locked+0x2ee/0x970 [ 65.780605][ T6193] ? __pfx___lock_acquire+0x10/0x10 [ 65.782521][ T6193] ? __pfx_iget_locked+0x10/0x10 [ 65.784359][ T6193] ? __pfx_mark_lock+0x10/0x10 [ 65.786011][ T6193] ? lock_acquire+0x1b1/0x560 [ 65.787402][ T6193] ? find_held_lock+0x2d/0x110 [ 65.788959][ T6193] kernfs_get_inode+0x48/0x460 [ 65.790442][ T6193] cgroup_may_write+0x89/0x120 [ 65.791977][ T6193] cgroup_attach_permissions+0x1bb/0x7b0 [ 65.793868][ T6193] __cgroup_procs_write+0x265/0x540 [ 65.795599][ T6193] ? __pfx___cgroup_procs_write+0x10/0x10 [ 65.797353][ T6193] cgroup_procs_write+0x26/0x60 [ 65.798631][ T6193] cgroup_file_write+0x211/0x7d0 [ 65.799911][ T6193] ? __pfx_cgroup_procs_write+0x10/0x10 [ 65.801597][ T6193] ? __pfx_cgroup_file_write+0x10/0x10 [ 65.803122][ T6193] kernfs_fop_write_iter+0x33d/0x500 [ 65.804405][ T6193] ? __pfx_cgroup_file_write+0x10/0x10 [ 65.805767][ T6193] vfs_write+0x6b5/0x1140 [ 65.806840][ T6193] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 65.808417][ T6193] ? __pfx_vfs_write+0x10/0x10 [ 65.809611][ T6193] ? __pfx___mutex_lock+0x10/0x10 [ 65.810861][ T6193] ksys_write+0x12f/0x260 [ 65.812195][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 65.813419][ T6193] __do_fast_syscall_32+0x73/0x120 [ 65.814662][ T6193] do_fast_syscall_32+0x32/0x80 [ 65.815826][ T6193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.817327][ T6193] RIP: 0023:0xf742e579 [ 65.818312][ T6193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.823151][ T6193] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 65.825222][ T6193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 65.827475][ T6193] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.829339][ T6193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.831245][ T6193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.833466][ T6193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.835341][ T6193] [ 65.868238][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 65.883626][ T5412] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.033542][ T5412] usb 7-1: Using ep0 maxpacket: 16 [ 66.036186][ T5412] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 66.038296][ T5412] usb 7-1: config 0 has no interface number 0 [ 66.039997][ T5412] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.042869][ T5412] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 66.046745][ T5412] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 66.049095][ T5412] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 66.051197][ T5412] usb 7-1: Product: syz [ 66.052323][ T5412] usb 7-1: SerialNumber: syz [ 66.058177][ T5412] usb 7-1: config 0 descriptor?? [ 66.060817][ T5412] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 66.068127][ T5412] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input5 [ 66.262838][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 66.278405][ T6175] bridge_slave_1: left allmulticast mode [ 66.279935][ T6175] bridge_slave_1: left promiscuous mode [ 66.281524][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.494033][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 66.496200][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 66.498687][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 66.500534][ T5412] usb 7-1: USB disconnect, device number 4 [ 66.502150][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 66.502161][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 66.516025][ T5412] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 66.746020][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 66.777883][ T6232] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.562964][ T6252] FAULT_INJECTION: forcing a failure. [ 67.562964][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.566506][ T6252] CPU: 2 UID: 0 PID: 6252 Comm: syz.0.255 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 67.569179][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.571973][ T6252] Call Trace: [ 67.572863][ T6252] [ 67.573660][ T6252] dump_stack_lvl+0x16c/0x1f0 [ 67.574915][ T6252] should_fail_ex+0x497/0x5b0 [ 67.576158][ T6252] _copy_to_user+0x30/0xc0 [ 67.577334][ T6252] simple_read_from_buffer+0xd0/0x160 [ 67.578744][ T6252] proc_fail_nth_read+0x198/0x270 [ 67.580059][ T6252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.581535][ T6252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.582917][ T6252] vfs_read+0x1ce/0xbd0 [ 67.584013][ T6252] ? __fget_files+0x23a/0x3f0 [ 67.585192][ T6252] ? fdget_pos+0x24c/0x360 [ 67.586579][ T6252] ? __pfx_lock_release+0x10/0x10 [ 67.588258][ T6252] ? __pfx_vfs_read+0x10/0x10 [ 67.589918][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 67.591659][ T6252] ? do_compat_pselect+0x166/0x240 [ 67.593532][ T6252] ? __fget_files+0x244/0x3f0 [ 67.595164][ T6252] ksys_read+0x12f/0x260 [ 67.596422][ T6252] ? __pfx_ksys_read+0x10/0x10 [ 67.597724][ T6252] __do_fast_syscall_32+0x73/0x120 [ 67.599409][ T6252] do_fast_syscall_32+0x32/0x80 [ 67.601116][ T6252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.603188][ T6252] RIP: 0023:0xf7f35579 [ 67.604277][ T6252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.610424][ T6252] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.613043][ T6252] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f56b6620 [ 67.615153][ T6252] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 67.617243][ T6252] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 67.619332][ T6252] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 67.621429][ T6252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.623536][ T6252] [ 67.779151][ T6269] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 67.793916][ T6269] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 68.252996][ T6287] can: request_module (can-proto-0) failed. [ 68.869836][ T6305] FAULT_INJECTION: forcing a failure. [ 68.869836][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 68.876585][ T6305] CPU: 2 UID: 0 PID: 6305 Comm: syz.1.271 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 68.879910][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.883541][ T6305] Call Trace: [ 68.884730][ T6305] [ 68.885753][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 68.887368][ T6305] should_fail_ex+0x497/0x5b0 [ 68.888935][ T6305] ? fs_reclaim_acquire+0xae/0x160 [ 68.890658][ T6305] should_failslab+0xc2/0x120 [ 68.892252][ T6305] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 68.894056][ T6305] ? getname_flags.part.0+0x4c/0x550 [ 68.895823][ T6305] getname_flags.part.0+0x4c/0x550 [ 68.897545][ T6305] getname_flags+0x93/0xf0 [ 68.899026][ T6305] user_path_at+0x24/0x60 [ 68.900459][ T6305] __do_sys_move_mount+0x1e5/0xe40 [ 68.902113][ T6305] ? fput+0x30/0x390 [ 68.903425][ T6305] ? __pfx___do_sys_move_mount+0x10/0x10 [ 68.905306][ T6305] ? ksys_write+0x1ad/0x260 [ 68.906832][ T6305] ? __pfx_ksys_write+0x10/0x10 [ 68.908488][ T6305] __do_fast_syscall_32+0x73/0x120 [ 68.910564][ T6305] do_fast_syscall_32+0x32/0x80 [ 68.912508][ T6305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.914628][ T6305] RIP: 0023:0xf7f73579 [ 68.915983][ T6305] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.922399][ T6305] RSP: 002b:00000000f56d556c EFLAGS: 00000296 ORIG_RAX: 00000000000001ad [ 68.924897][ T6305] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000140 [ 68.927011][ T6305] RDX: 00000000ffffff9c RSI: 0000000020000180 RDI: 0000000000000000 [ 68.929067][ T6305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.931135][ T6305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.933119][ T6305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.935198][ T6305] [ 69.122034][ T6316] kAFS: unparsable volume name [ 69.187092][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 69.189390][ T6321] netlink: 'syz.0.275': attribute type 11 has an invalid length. [ 69.670795][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'. [ 69.674603][ T6332] FAULT_INJECTION: forcing a failure. [ 69.674603][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 69.679335][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.2.279 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 69.682149][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.684944][ T6332] Call Trace: [ 69.685833][ T6332] [ 69.686566][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 69.687882][ T6332] should_fail_ex+0x497/0x5b0 [ 69.689213][ T6332] ? fs_reclaim_acquire+0xae/0x160 [ 69.690608][ T6332] should_failslab+0xc2/0x120 [ 69.691846][ T6332] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 69.693252][ T6332] ? fib_insert_alias+0x43c/0xe30 [ 69.694742][ T6332] fib_insert_alias+0x43c/0xe30 [ 69.696025][ T6332] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 69.697520][ T6332] ? lockdep_rtnl_is_held+0x26/0x40 [ 69.698932][ T6332] ? fib_table_insert+0x80d/0x1d70 [ 69.700298][ T6332] fib_table_insert+0xaab/0x1d70 [ 69.701631][ T6332] ? __pfx___lock_acquire+0x10/0x10 [ 69.703010][ T6332] ? __pfx_fib_table_insert+0x10/0x10 [ 69.704527][ T6332] ? fib_magic+0x1a8/0x5c0 [ 69.705828][ T6332] ? __pfx_lock_release+0x10/0x10 [ 69.707208][ T6332] ? __schedule+0xede/0x5920 [ 69.708493][ T6332] ? __queue_work+0x431/0x1070 [ 69.709897][ T6332] ? fib_magic+0x4d6/0x5c0 [ 69.711328][ T6332] fib_magic+0x4d6/0x5c0 [ 69.712528][ T6332] ? __pfx_fib_magic+0x10/0x10 [ 69.713987][ T6332] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.715391][ T6332] ? queue_work_on+0x9d/0x140 [ 69.716669][ T6332] fib_add_ifaddr+0x174/0x560 [ 69.718063][ T6332] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 69.719741][ T6332] fib_inetaddr_event+0x174/0x2c0 [ 69.721019][ T6332] notifier_call_chain+0xb9/0x410 [ 69.722361][ T6332] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 69.723788][ T6332] blocking_notifier_call_chain+0x69/0xa0 [ 69.725243][ T6332] __inet_insert_ifa+0x93f/0xc30 [ 69.726504][ T6332] ? __pfx___inet_insert_ifa+0x10/0x10 [ 69.727871][ T6332] inet_rtm_newaddr+0x565/0xae0 [ 69.729144][ T6332] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 69.730508][ T6332] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 69.731921][ T6332] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 69.733328][ T6332] rtnetlink_rcv_msg+0x3c7/0xea0 [ 69.734689][ T6332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.736145][ T6332] ? __pfx___dev_queue_xmit+0x10/0x10 [ 69.737634][ T6332] netlink_rcv_skb+0x165/0x410 [ 69.738936][ T6332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.740454][ T6332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.742037][ T6332] ? netlink_deliver_tap+0x1ae/0xcf0 [ 69.743441][ T6332] netlink_unicast+0x53c/0x7f0 [ 69.744706][ T6332] ? __pfx_netlink_unicast+0x10/0x10 [ 69.746101][ T6332] ? __phys_addr_symbol+0x30/0x80 [ 69.747430][ T6332] ? __check_object_size+0x488/0x710 [ 69.748821][ T6332] netlink_sendmsg+0x8b8/0xd70 [ 69.750099][ T6332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.751487][ T6332] ____sys_sendmsg+0x9ae/0xb40 [ 69.752746][ T6332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.754181][ T6332] ? get_compat_msghdr+0x11b/0x170 [ 69.755540][ T6332] ? __pfx___lock_acquire+0x10/0x10 [ 69.756964][ T6332] ___sys_sendmsg+0x135/0x1e0 [ 69.758257][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.759744][ T6332] ? ksys_write+0x21e/0x260 [ 69.760975][ T6332] ? __pfx_lock_release+0x10/0x10 [ 69.762386][ T6332] ? fdget+0x176/0x210 [ 69.763512][ T6332] __sys_sendmsg+0x117/0x1f0 [ 69.764754][ T6332] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.766135][ T6332] ? __fget_files+0x244/0x3f0 [ 69.767342][ T6332] __do_fast_syscall_32+0x73/0x120 [ 69.768715][ T6332] do_fast_syscall_32+0x32/0x80 [ 69.770011][ T6332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.771623][ T6332] RIP: 0023:0xf73de579 [ 69.772864][ T6332] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 69.779267][ T6332] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 69.782215][ T6332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 69.784307][ T6332] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.786999][ T6332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.789168][ T6332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 69.791344][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.793421][ T6332] [ 69.794371][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.829861][ T6334] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 69.832383][ T6334] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 69.834994][ T6334] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.280'. [ 70.577444][ T6363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 70.668596][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.671127][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.771432][ T6375] mmap: syz.3.296 (6375) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.027246][ T6390] netlink: 188 bytes leftover after parsing attributes in process `syz.2.302'. [ 71.029641][ T6390] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 71.067552][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.554351][ T6397] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 71.556381][ T6397] netlink: 'syz.0.304': attribute type 4 has an invalid length. [ 71.559195][ T6397] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.304'. [ 71.763100][ T6404] FAULT_INJECTION: forcing a failure. [ 71.763100][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 71.768795][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.0.307 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 71.771477][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.774259][ T6404] Call Trace: [ 71.775140][ T6404] [ 71.775917][ T6404] dump_stack_lvl+0x16c/0x1f0 [ 71.777158][ T6404] should_fail_ex+0x497/0x5b0 [ 71.778406][ T6404] ? fs_reclaim_acquire+0xae/0x160 [ 71.779739][ T6404] should_failslab+0xc2/0x120 [ 71.780983][ T6404] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 71.782501][ T6404] ? __d_alloc+0x35/0x8c0 [ 71.783643][ T6404] ? __pfx___lock_acquire+0x10/0x10 [ 71.785015][ T6404] __d_alloc+0x35/0x8c0 [ 71.786133][ T6404] d_alloc+0x4a/0x1e0 [ 71.787192][ T6404] d_alloc_parallel+0xe9/0x12b0 [ 71.788472][ T6404] ? __d_lookup+0x25c/0x4a0 [ 71.789666][ T6404] ? lookup_open.isra.0+0x229/0x14c0 [ 71.791045][ T6404] ? __pfx_lock_release+0x10/0x10 [ 71.792371][ T6404] ? __pfx_d_alloc_parallel+0x10/0x10 [ 71.793795][ T6404] ? __d_lookup+0x266/0x4a0 [ 71.794997][ T6404] lookup_open.isra.0+0xab5/0x14c0 [ 71.796342][ T6404] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 71.797884][ T6404] ? __startup_64+0x120/0x2a0 [ 71.799136][ T6404] ? __startup_64+0x120/0x2a0 [ 71.800415][ T6404] ? lookup_fast+0x155/0x540 [ 71.801664][ T6404] path_openat+0x904/0x2d60 [ 71.802884][ T6404] ? __pfx_path_openat+0x10/0x10 [ 71.804186][ T6404] ? kasan_save_stack+0x42/0x60 [ 71.805463][ T6404] ? kasan_save_stack+0x33/0x60 [ 71.806758][ T6404] ? kasan_save_track+0x14/0x30 [ 71.808032][ T6404] ? __kasan_slab_alloc+0x89/0x90 [ 71.809358][ T6404] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 71.810835][ T6404] ? getname_kernel+0x52/0x370 [ 71.812059][ T6404] do_filp_open+0x1dc/0x430 [ 71.813179][ T6404] ? __pfx_do_filp_open+0x10/0x10 [ 71.814529][ T6404] do_open_execat+0xfa/0x330 [ 71.815756][ T6404] ? __pfx_do_open_execat+0x10/0x10 [ 71.817126][ T6404] open_exec+0x45/0x80 [ 71.818222][ T6404] bm_register_write+0x106a/0x1780 [ 71.819571][ T6404] ? __pfx_bm_register_write+0x10/0x10 [ 71.821003][ T6404] vfs_write+0x28e/0x1140 [ 71.822177][ T6404] ? __fget_files+0x23a/0x3f0 [ 71.823426][ T6404] ? fdget_pos+0x24c/0x360 [ 71.824620][ T6404] ? __pfx_lock_release+0x10/0x10 [ 71.825963][ T6404] ? __pfx_vfs_write+0x10/0x10 [ 71.827226][ T6404] ? __pfx___mutex_lock+0x10/0x10 [ 71.828624][ T6404] ? __fget_files+0x244/0x3f0 [ 71.830084][ T6404] ksys_write+0x12f/0x260 [ 71.831238][ T6404] ? __pfx_ksys_write+0x10/0x10 [ 71.832523][ T6404] __do_fast_syscall_32+0x73/0x120 [ 71.833895][ T6404] do_fast_syscall_32+0x32/0x80 [ 71.835175][ T6404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.836827][ T6404] RIP: 0023:0xf7f35579 [ 71.837919][ T6404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.842917][ T6404] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 71.845070][ T6404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 71.847129][ T6404] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 71.849164][ T6404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.851215][ T6404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.853256][ T6404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.855317][ T6404] [ 71.856266][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.860186][ T6404] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.460193][ T6440] fuse: Bad value for 'fd' [ 72.461533][ T6440] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.318'. [ 72.624245][ T6444] kvm: user requested TSC rate below hardware speed [ 72.674720][ T6449] Unsupported ieee802154 address type: 0 [ 72.792935][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 73.070703][ T6467] Illegal XDP return value 4294967294 on prog (id 38) dev N/A, expect packet loss! [ 73.121496][ T6468] can: request_module (can-proto-0) failed. [ 73.692333][ T5353] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 73.695540][ T5353] CPU: 1 UID: 0 PID: 5353 Comm: kworker/u33:3 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 73.698290][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.701049][ T5353] Workqueue: hci1 hci_rx_work [ 73.702312][ T5353] Call Trace: [ 73.703189][ T5353] [ 73.703975][ T5353] dump_stack_lvl+0x16c/0x1f0 [ 73.705214][ T5353] sysfs_warn_dup+0x7f/0xa0 [ 73.706344][ T5353] sysfs_create_dir_ns+0x24d/0x2b0 [ 73.707689][ T5353] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.709166][ T5353] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 73.710557][ T5353] ? do_raw_spin_unlock+0x172/0x230 [ 73.711919][ T5353] kobject_add_internal+0x2c8/0x990 [ 73.713324][ T5353] kobject_add+0x16f/0x240 [ 73.714522][ T5353] ? __pfx_kobject_add+0x10/0x10 [ 73.715842][ T5353] ? do_raw_spin_unlock+0x172/0x230 [ 73.717214][ T5353] ? kobject_put+0xab/0x5a0 [ 73.718431][ T5353] device_add+0x289/0x1a70 [ 73.719625][ T5353] ? __pfx_dev_set_name+0x10/0x10 [ 73.720952][ T5353] ? __pfx_device_add+0x10/0x10 [ 73.722291][ T5353] ? mgmt_send_event_skb+0x2f2/0x460 [ 73.723698][ T5353] hci_conn_add_sysfs+0x17e/0x230 [ 73.725018][ T5353] le_conn_complete_evt+0xfc7/0x1cf0 [ 73.726437][ T5353] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 73.727929][ T5353] ? trace_contention_end+0xea/0x140 [ 73.729266][ T5353] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 73.730797][ T5353] ? skb_pull_data+0x166/0x210 [ 73.732033][ T5353] hci_le_meta_evt+0x2e2/0x5d0 [ 73.733215][ T5353] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 73.734805][ T5353] hci_event_packet+0x666/0x1190 [ 73.736053][ T5353] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 73.737358][ T5353] ? __pfx_hci_event_packet+0x10/0x10 [ 73.738701][ T5353] ? mark_held_locks+0x9f/0xe0 [ 73.739876][ T5353] ? kcov_remote_start+0x3cf/0x6e0 [ 73.741218][ T5353] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.742524][ T5353] hci_rx_work+0x2c6/0x1610 [ 73.743708][ T5353] process_one_work+0x958/0x1b30 [ 73.744975][ T5353] ? __pfx_lock_acquire+0x10/0x10 [ 73.746266][ T5353] ? __pfx_process_one_work+0x10/0x10 [ 73.747800][ T5353] ? assign_work+0x1a0/0x250 [ 73.748990][ T5353] worker_thread+0x6c8/0xf00 [ 73.750152][ T5353] ? __pfx_worker_thread+0x10/0x10 [ 73.751430][ T5353] kthread+0x2c1/0x3a0 [ 73.752480][ T5353] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.753808][ T5353] ? __pfx_kthread+0x10/0x10 [ 73.754993][ T5353] ret_from_fork+0x45/0x80 [ 73.756145][ T5353] ? __pfx_kthread+0x10/0x10 [ 73.757313][ T5353] ret_from_fork_asm+0x1a/0x30 [ 73.758555][ T5353] [ 73.759704][ T5353] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.763195][ T5353] Bluetooth: hci1: failed to register connection device [ 73.981523][ T6493] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 73.991075][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.993148][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.073574][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 74.216289][ T39] audit: type=1800 audit(1727511305.407:66): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.339" name="bus" dev="9p" ino=36574947 res=0 errno=0 [ 74.225561][ T6505] netfs: Couldn't get user pages (rc=-14) [ 74.624120][ T6527] capability: warning: `syz.2.346' uses deprecated v2 capabilities in a way that may be insecure [ 74.680491][ T39] audit: type=1326 audit(1727511305.817:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.687858][ T39] audit: type=1326 audit(1727511305.817:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.695503][ T39] audit: type=1326 audit(1727511305.817:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.703066][ T39] audit: type=1326 audit(1727511305.817:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.711592][ T39] audit: type=1326 audit(1727511305.817:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.718837][ T39] audit: type=1326 audit(1727511305.817:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.718854][ T39] audit: type=1326 audit(1727511305.817:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.718869][ T39] audit: type=1326 audit(1727511305.817:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.718884][ T39] audit: type=1326 audit(1727511305.817:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.2.346" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 74.805185][ T6540] netlink: 188 bytes leftover after parsing attributes in process `syz.2.350'. [ 74.807565][ T6540] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 74.990317][ T6550] loop7: detected capacity change from 0 to 16384 [ 75.173530][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.196603][ T6555] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 75.198641][ T6555] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 75.200607][ T6555] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.357'. [ 75.242827][ T6557] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.267404][ T6561] netlink: 80 bytes leftover after parsing attributes in process `syz.0.360'. [ 75.269633][ T6561] netlink: 80 bytes leftover after parsing attributes in process `syz.0.360'. [ 75.272410][ T6561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.335069][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.338099][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.340440][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.355781][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.358175][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.360237][ T35] usb 7-1: Product: syz [ 75.361264][ T35] usb 7-1: Manufacturer: syz [ 75.362499][ T35] usb 7-1: SerialNumber: syz [ 75.384786][ T35] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 75.387206][ T35] cdc_ncm 7-1:1.0: bind() failure [ 75.481284][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 75.547488][ T6569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.663421][ T6579] syz.0.366[6579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.664443][ T6579] syz.0.366[6579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.667753][ T6579] syz.0.366[6579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.698169][ T6581] FAULT_INJECTION: forcing a failure. [ 75.698169][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 75.707053][ T6581] CPU: 3 UID: 0 PID: 6581 Comm: syz.1.367 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 75.709816][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.712667][ T6581] Call Trace: [ 75.713638][ T6581] [ 75.714459][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 75.715755][ T6581] should_fail_ex+0x497/0x5b0 [ 75.717025][ T6581] ? fs_reclaim_acquire+0xae/0x160 [ 75.718407][ T6581] should_failslab+0xc2/0x120 [ 75.719689][ T6581] __kmalloc_noprof+0xcb/0x410 [ 75.721006][ T6581] ? __pfx_lock_acquire+0x10/0x10 [ 75.722436][ T6581] bm_register_write+0xda/0x1780 [ 75.723788][ T6581] ? __pfx_bm_register_write+0x10/0x10 [ 75.725533][ T6581] vfs_write+0x28e/0x1140 [ 75.726808][ T6581] ? __fget_files+0x23a/0x3f0 [ 75.728182][ T6581] ? fdget_pos+0x24c/0x360 [ 75.729397][ T6581] ? __pfx_lock_release+0x10/0x10 [ 75.730798][ T6581] ? __pfx_vfs_write+0x10/0x10 [ 75.732120][ T6581] ? __pfx___mutex_lock+0x10/0x10 [ 75.733538][ T6581] ? __fget_files+0x244/0x3f0 [ 75.734792][ T6581] ksys_write+0x12f/0x260 [ 75.735951][ T6581] ? __pfx_ksys_write+0x10/0x10 [ 75.737272][ T6581] __do_fast_syscall_32+0x73/0x120 [ 75.738661][ T6581] do_fast_syscall_32+0x32/0x80 [ 75.740022][ T6581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.741746][ T6581] RIP: 0023:0xf7f73579 [ 75.742908][ T6581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.749558][ T6581] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 75.752595][ T6581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 75.755471][ T6581] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.757527][ T6581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.759573][ T6581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.761630][ T6581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.763823][ T6581] [ 75.793559][ T5353] Bluetooth: hci1: command tx timeout [ 75.794897][ T74] cfg80211: failed to load regulatory.db [ 75.844128][ T6588] FAULT_INJECTION: forcing a failure. [ 75.844128][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.847630][ T6588] CPU: 3 UID: 0 PID: 6588 Comm: syz.1.370 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 75.850217][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.853103][ T6588] Call Trace: [ 75.854070][ T6588] [ 75.854862][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 75.856205][ T6588] should_fail_ex+0x497/0x5b0 [ 75.857490][ T6588] _copy_to_user+0x30/0xc0 [ 75.858684][ T6588] simple_read_from_buffer+0xd0/0x160 [ 75.860168][ T6588] proc_fail_nth_read+0x198/0x270 [ 75.861646][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.863150][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.864504][ T6588] vfs_read+0x1ce/0xbd0 [ 75.865610][ T6588] ? __fget_files+0x23a/0x3f0 [ 75.866884][ T6588] ? fdget_pos+0x24c/0x360 [ 75.868075][ T6588] ? __pfx_lock_release+0x10/0x10 [ 75.869406][ T6588] ? __pfx_vfs_read+0x10/0x10 [ 75.870676][ T6588] ? __pfx___mutex_lock+0x10/0x10 [ 75.872083][ T6588] ? __fget_files+0x244/0x3f0 [ 75.873524][ T6588] ksys_read+0x12f/0x260 [ 75.874650][ T6588] ? __pfx_ksys_read+0x10/0x10 [ 75.875919][ T6588] __do_fast_syscall_32+0x73/0x120 [ 75.877277][ T6588] do_fast_syscall_32+0x32/0x80 [ 75.878638][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.880318][ T6588] RIP: 0023:0xf7f73579 [ 75.881482][ T6588] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.886875][ T6588] RSP: 002b:00000000f56f65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 75.890087][ T6588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f6620 [ 75.892927][ T6588] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 75.895628][ T6588] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 75.898348][ T6588] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 75.900880][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.903445][ T6588] [ 75.946443][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.949363][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.045123][ T6592] : renamed from pim6reg1 [ 76.072276][ T6596] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 76.074358][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.079943][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 76.255042][ T6597] vhci_hcd: connection closed [ 76.257045][ T1096] vhci_hcd: stop threads [ 76.259845][ T1096] vhci_hcd: release socket [ 76.261700][ T1096] vhci_hcd: disconnect device [ 76.274399][ T74] vhci_hcd: vhci_device speed not set [ 76.830305][ T6607] netlink: 112 bytes leftover after parsing attributes in process `syz.0.375'. [ 77.863730][ T5351] Bluetooth: hci2: command 0x0405 tx timeout [ 78.016140][ T5412] usb 7-1: USB disconnect, device number 5 [ 78.050574][ T6619] FAULT_INJECTION: forcing a failure. [ 78.050574][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.055307][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.2.380 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 78.058866][ T6619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.062395][ T6619] Call Trace: [ 78.063573][ T6619] [ 78.064620][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 78.066302][ T6619] should_fail_ex+0x497/0x5b0 [ 78.067953][ T6619] _copy_from_iter+0x29b/0x13e0 [ 78.069685][ T6619] ? __alloc_skb+0x200/0x380 [ 78.070937][ T6619] ? __pfx__copy_from_iter+0x10/0x10 [ 78.072753][ T6619] ? __virt_addr_valid+0x5e/0x590 [ 78.074508][ T6619] ? __phys_addr_symbol+0x30/0x80 [ 78.075846][ T6619] ? __check_object_size+0x488/0x710 [ 78.075863][ T6619] netlink_sendmsg+0x813/0xd70 [ 78.075875][ T6619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.075890][ T6619] ____sys_sendmsg+0x9ae/0xb40 [ 78.075901][ T6619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.075910][ T6619] ? get_compat_msghdr+0x11b/0x170 [ 78.085323][ T6619] ? __pfx___lock_acquire+0x10/0x10 [ 78.086709][ T6619] ___sys_sendmsg+0x135/0x1e0 [ 78.087940][ T6619] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.089320][ T6619] ? ksys_write+0x21e/0x260 [ 78.090632][ T6619] ? __pfx_lock_release+0x10/0x10 [ 78.091910][ T6619] ? fdget+0x176/0x210 [ 78.092981][ T6619] __sys_sendmsg+0x117/0x1f0 [ 78.094216][ T6619] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.095561][ T6619] ? __fget_files+0x244/0x3f0 [ 78.096804][ T6619] __do_fast_syscall_32+0x73/0x120 [ 78.098155][ T6619] do_fast_syscall_32+0x32/0x80 [ 78.099457][ T6619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.101132][ T6619] RIP: 0023:0xf73de579 [ 78.102603][ T6619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.109145][ T6619] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 78.111493][ T6619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 78.113834][ T6619] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.116878][ T6619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.119084][ T6619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.121177][ T6619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.123523][ T6619] [ 78.188550][ T6624] openvswitch: netlink: Missing key (keys=40, expected=100) [ 78.192577][ T6624] netlink: 'syz.1.383': attribute type 3 has an invalid length. [ 78.196371][ T6624] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.383'. [ 78.275548][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 78.277943][ T6630] netlink: 'syz.2.384': attribute type 11 has an invalid length. [ 78.282527][ T6630] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.285036][ T6630] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.287328][ T6630] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.290220][ T6630] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.293597][ T6630] vxlan0: entered promiscuous mode [ 78.640115][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 78.643128][ T6647] netlink: 'syz.1.389': attribute type 11 has an invalid length. [ 78.648333][ T6647] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.651323][ T6647] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.654303][ T6647] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.657177][ T6647] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.660293][ T6647] vxlan0: entered promiscuous mode [ 79.093917][ T6649] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.152776][ T6651] netlink: 'syz.2.391': attribute type 11 has an invalid length. [ 79.155477][ T6651] netlink: 211132 bytes leftover after parsing attributes in process `syz.2.391'. [ 79.228834][ T6653] netlink: 'syz.2.392': attribute type 11 has an invalid length. [ 79.334882][ T6656] FAULT_INJECTION: forcing a failure. [ 79.334882][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 79.338073][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.2.393 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 79.340607][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.343324][ T6656] Call Trace: [ 79.344151][ T6656] [ 79.344882][ T6656] dump_stack_lvl+0x16c/0x1f0 [ 79.346074][ T6656] should_fail_ex+0x497/0x5b0 [ 79.347307][ T6656] ? fs_reclaim_acquire+0xae/0x160 [ 79.348683][ T6656] should_failslab+0xc2/0x120 [ 79.349931][ T6656] __kmalloc_node_noprof+0xd1/0x440 [ 79.351322][ T6656] ? qdisc_alloc+0xb9/0xbe0 [ 79.352511][ T6656] qdisc_alloc+0xb9/0xbe0 [ 79.353603][ T6656] ? do_raw_read_unlock+0x44/0xe0 [ 79.354790][ T6656] ? _raw_read_unlock+0x28/0x50 [ 79.355983][ T6656] qdisc_create+0xcf/0x1100 [ 79.357100][ T6656] ? __pfx_qdisc_create+0x10/0x10 [ 79.358348][ T6656] tc_modify_qdisc+0xd55/0x1c40 [ 79.359698][ T6656] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 79.360988][ T6656] ? __mutex_lock+0x1a6/0x9c0 [ 79.362294][ T6656] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 79.364082][ T6656] rtnetlink_rcv_msg+0x3c7/0xea0 [ 79.365871][ T6656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.367806][ T6656] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.369686][ T6656] netlink_rcv_skb+0x165/0x410 [ 79.371413][ T6656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.373337][ T6656] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.375255][ T6656] ? netlink_deliver_tap+0x1ae/0xcf0 [ 79.377056][ T6656] netlink_unicast+0x53c/0x7f0 [ 79.378321][ T6656] ? __pfx_netlink_unicast+0x10/0x10 [ 79.379572][ T6656] ? const_folio_flags.constprop.0+0x56/0x150 [ 79.381051][ T6656] ? __phys_addr_symbol+0x30/0x80 [ 79.382371][ T6656] ? __check_object_size+0x488/0x710 [ 79.383638][ T6656] netlink_sendmsg+0x8b8/0xd70 [ 79.384801][ T6656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.386098][ T6656] sock_sendmsg+0x369/0x410 [ 79.387211][ T6656] ? pipe_lock+0x64/0x80 [ 79.388261][ T6656] ? __pfx_sock_sendmsg+0x10/0x10 [ 79.389622][ T6656] splice_to_socket+0xaac/0x1040 [ 79.390884][ T6656] ? find_held_lock+0x2d/0x110 [ 79.392061][ T6656] ? __pfx_splice_to_socket+0x10/0x10 [ 79.393443][ T6656] ? apparmor_file_permission+0x251/0x400 [ 79.394908][ T6656] ? bpf_lsm_file_permission+0x9/0x10 [ 79.396262][ T6656] ? security_file_permission+0x71/0x210 [ 79.397688][ T6656] ? rw_verify_area+0xd0/0x700 [ 79.398896][ T6656] ? __pfx_splice_to_socket+0x10/0x10 [ 79.400206][ T6656] do_splice+0x145c/0x1f60 [ 79.401315][ T6656] ? find_held_lock+0x2d/0x110 [ 79.402519][ T6656] ? __pfx_do_splice+0x10/0x10 [ 79.403722][ T6656] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 79.405040][ T6656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.406494][ T6656] __do_splice+0x327/0x360 [ 79.407585][ T6656] ? __pfx___do_splice+0x10/0x10 [ 79.408834][ T6656] __ia32_sys_splice+0x1ce/0x270 [ 79.410067][ T6656] __do_fast_syscall_32+0x73/0x120 [ 79.411370][ T6656] do_fast_syscall_32+0x32/0x80 [ 79.412710][ T6656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.414385][ T6656] RIP: 0023:0xf73de579 [ 79.415405][ T6656] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.420261][ T6656] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 79.422382][ T6656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 79.424396][ T6656] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2 [ 79.426399][ T6656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.428437][ T6656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.430433][ T6656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.432439][ T6656] [ 79.481967][ T6660] FAULT_INJECTION: forcing a failure. [ 79.481967][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.485381][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.3.395 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 79.487979][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.490799][ T6660] Call Trace: [ 79.491678][ T6660] [ 79.492456][ T6660] dump_stack_lvl+0x16c/0x1f0 [ 79.493710][ T6660] should_fail_ex+0x497/0x5b0 [ 79.494938][ T6660] _copy_from_user+0x30/0xf0 [ 79.496169][ T6660] cmsghdr_from_user_compat_to_kern+0x4f0/0x7c0 [ 79.497808][ T6660] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 79.499541][ T6660] ? __import_iovec+0x1fd/0x6e0 [ 79.500920][ T6660] ____sys_sendmsg+0x43d/0xb40 [ 79.502731][ T6660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.504450][ T6660] ? get_compat_msghdr+0x11b/0x170 [ 79.505789][ T6660] ? __pfx___lock_acquire+0x10/0x10 [ 79.507148][ T6660] ___sys_sendmsg+0x135/0x1e0 [ 79.508398][ T6660] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.509774][ T6660] ? __pfx_lock_release+0x10/0x10 [ 79.511114][ T6660] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 79.512602][ T6660] ? fdget+0x176/0x210 [ 79.513681][ T6660] __sys_sendmmsg+0x2a5/0x450 [ 79.514909][ T6660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.516264][ T6660] ? vfs_write+0x14d/0x1140 [ 79.517462][ T6660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.519024][ T6660] ? fput+0x30/0x390 [ 79.520050][ T6660] ? ksys_write+0x1ad/0x260 [ 79.521541][ T6660] ? __pfx_ksys_write+0x10/0x10 [ 79.522984][ T6660] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 79.524398][ T6660] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 79.526110][ T6660] __do_fast_syscall_32+0x73/0x120 [ 79.527445][ T6660] do_fast_syscall_32+0x32/0x80 [ 79.528671][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.530322][ T6660] RIP: 0023:0xf742e579 [ 79.531412][ T6660] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.536357][ T6660] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 79.538506][ T6660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001100 [ 79.540564][ T6660] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.542643][ T6660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.544680][ T6660] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.546732][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.548791][ T6660] [ 79.698932][ T6672] netlink: 'syz.1.398': attribute type 11 has an invalid length. [ 80.207913][ T6683] FAULT_INJECTION: forcing a failure. [ 80.207913][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.213436][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.2.403 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 80.216933][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.220596][ T6683] Call Trace: [ 80.221792][ T6683] [ 80.222832][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 80.224495][ T6683] should_fail_ex+0x497/0x5b0 [ 80.226105][ T6683] _copy_from_user+0x30/0xf0 [ 80.227703][ T6683] kvm_arch_vcpu_ioctl+0xfa7/0x4c70 [ 80.229501][ T6683] ? is_bpf_text_address+0x94/0x1a0 [ 80.231305][ T6683] ? kernel_text_address+0x8d/0x100 [ 80.233091][ T6683] ? hlock_class+0x4e/0x130 [ 80.234693][ T6683] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 80.236649][ T6683] ? __pfx_stack_trace_save+0x10/0x10 [ 80.238541][ T6683] ? __pfx_mark_lock+0x10/0x10 [ 80.240205][ T6683] ? stack_depot_save_flags+0x28/0x900 [ 80.242134][ T6683] ? lock_acquire+0x1b1/0x560 [ 80.243775][ T6683] ? __mutex_trylock_common+0xea/0x250 [ 80.245679][ T6683] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.247737][ T6683] ? rcu_is_watching+0x12/0xc0 [ 80.249452][ T6683] ? trace_contention_end+0xea/0x140 [ 80.251318][ T6683] ? __mutex_lock+0x1a6/0x9c0 [ 80.252945][ T6683] ? kvm_vcpu_ioctl+0x1de/0x1510 [ 80.254666][ T6683] ? __pfx___mutex_lock+0x10/0x10 [ 80.256408][ T6683] ? find_held_lock+0x2d/0x110 [ 80.258085][ T6683] ? kvm_vcpu_ioctl+0x9e1/0x1510 [ 80.259765][ T6683] kvm_vcpu_ioctl+0x9e1/0x1510 [ 80.261469][ T6683] ? tomoyo_path_number_perm+0x467/0x5b0 [ 80.263444][ T6683] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.265173][ T6683] ? tomoyo_path_number_perm+0x190/0x5b0 [ 80.267107][ T6683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.269167][ T6683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.271242][ T6683] ? do_vfs_ioctl+0x513/0x1950 [ 80.272869][ T6683] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.274602][ T6683] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 80.276421][ T6683] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 80.278399][ T6683] ? __fget_files+0x244/0x3f0 [ 80.280051][ T6683] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 80.282078][ T6683] __do_compat_sys_ioctl+0x259/0x2b0 [ 80.283898][ T6683] __do_fast_syscall_32+0x73/0x120 [ 80.285661][ T6683] do_fast_syscall_32+0x32/0x80 [ 80.287355][ T6683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.289534][ T6683] RIP: 0023:0xf73de579 [ 80.290959][ T6683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.297556][ T6683] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 80.300420][ T6683] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae8a [ 80.303167][ T6683] RDX: 0000000020000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.305878][ T6683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.308562][ T6683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.311077][ T6683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.313813][ T6683] [ 80.611409][ T6694] FAULT_INJECTION: forcing a failure. [ 80.611409][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 80.617243][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.1.406 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 80.620868][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.624508][ T6694] Call Trace: [ 80.625726][ T6694] [ 80.626809][ T6694] dump_stack_lvl+0x16c/0x1f0 [ 80.628519][ T6694] should_fail_ex+0x497/0x5b0 [ 80.630241][ T6694] ? fs_reclaim_acquire+0xae/0x160 [ 80.632075][ T6694] should_failslab+0xc2/0x120 [ 80.633799][ T6694] __kmalloc_node_noprof+0xd1/0x440 [ 80.635688][ T6694] ? __pfx_lock_release+0x10/0x10 [ 80.637518][ T6694] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 80.639364][ T6694] __kvmalloc_node_noprof+0xad/0x1a0 [ 80.641214][ T6694] vmemdup_user+0x25/0x100 [ 80.642857][ T6694] kvm_vcpu_ioctl_set_cpuid+0x91/0x680 [ 80.644830][ T6694] kvm_arch_vcpu_ioctl+0x18df/0x4c70 [ 80.646732][ T6694] ? is_bpf_text_address+0x94/0x1a0 [ 80.648187][ T6694] ? kernel_text_address+0x8d/0x100 [ 80.649672][ T6694] ? hlock_class+0x4e/0x130 [ 80.650955][ T6694] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 80.652624][ T6694] ? __pfx_stack_trace_save+0x10/0x10 [ 80.654568][ T6694] ? __pfx_mark_lock+0x10/0x10 [ 80.656301][ T6694] ? stack_depot_save_flags+0x28/0x900 [ 80.658061][ T6694] ? lock_acquire+0x1b1/0x560 [ 80.659417][ T6694] ? __mutex_trylock_common+0xea/0x250 [ 80.660890][ T6694] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.662803][ T6694] ? rcu_is_watching+0x12/0xc0 [ 80.664121][ T6694] ? trace_contention_end+0xea/0x140 [ 80.665734][ T6694] ? __mutex_lock+0x1a6/0x9c0 [ 80.667013][ T6694] ? kvm_vcpu_ioctl+0x1de/0x1510 [ 80.668439][ T6694] ? __pfx___mutex_lock+0x10/0x10 [ 80.670045][ T6694] ? find_held_lock+0x2d/0x110 [ 80.671351][ T6694] ? kvm_vcpu_ioctl+0x9e1/0x1510 [ 80.672936][ T6694] kvm_vcpu_ioctl+0x9e1/0x1510 [ 80.674629][ T6694] ? tomoyo_path_number_perm+0x467/0x5b0 [ 80.676609][ T6694] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.678112][ T6694] ? tomoyo_path_number_perm+0x190/0x5b0 [ 80.679848][ T6694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.681425][ T6694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.683115][ T6694] ? do_vfs_ioctl+0x513/0x1950 [ 80.684416][ T6694] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.686125][ T6694] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 80.687942][ T6694] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 80.689978][ T6694] ? __fget_files+0x244/0x3f0 [ 80.691485][ T6694] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 80.693075][ T6694] __do_compat_sys_ioctl+0x259/0x2b0 [ 80.694417][ T6694] __do_fast_syscall_32+0x73/0x120 [ 80.695970][ T6694] do_fast_syscall_32+0x32/0x80 [ 80.697594][ T6694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.699785][ T6694] RIP: 0023:0xf7f73579 [ 80.701241][ T6694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.707649][ T6694] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 80.710408][ T6694] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae8a [ 80.712838][ T6694] RDX: 0000000020000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.715376][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.718029][ T6694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.720787][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.723470][ T6694] [ 80.724642][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.109760][ T6705] __nla_validate_parse: 1 callbacks suppressed [ 81.109776][ T6705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.409'. [ 81.452540][ T6720] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 81.455986][ T6720] netlink: 'syz.3.413': attribute type 4 has an invalid length. [ 81.458683][ T6720] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.413'. [ 81.534604][ T1298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.568858][ T6721] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 81.572341][ T6721] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 81.620886][ T6724] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 81.624144][ T6724] netlink: 'syz.3.414': attribute type 4 has an invalid length. [ 81.627068][ T6724] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.414'. [ 81.676454][ T1298] usb 5-1: device descriptor read/64, error -71 [ 81.780027][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 81.869757][ T6735] fuse: Unknown parameter '0x0000000000000003ŪHߩ͙4)iZHB#xw36&Eu8`I' [ 81.916305][ T6737] netlink: 256 bytes leftover after parsing attributes in process `syz.1.419'. [ 81.922615][ T1298] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.994914][ T6742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.420'. [ 82.133548][ T1298] usb 5-1: device descriptor read/64, error -71 [ 82.247690][ T1298] usb usb5-port1: attempt power cycle [ 82.584810][ T1298] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.605488][ T1298] usb 5-1: device descriptor read/8, error -71 [ 82.664426][ T6764] syz.2.428[6764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.664545][ T6764] syz.2.428[6764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.668538][ T6764] syz.2.428[6764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.687187][ T6765] Bluetooth: MGMT ver 1.23 [ 82.853523][ T1298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.857632][ T6769] netlink: 256 bytes leftover after parsing attributes in process `syz.2.429'. [ 82.874906][ T1298] usb 5-1: device descriptor read/8, error -71 [ 82.958129][ T6775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'. [ 82.993862][ T1298] usb usb5-port1: unable to enumerate USB device [ 83.326829][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.331372][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.483823][ T6791] netlink: 'syz.2.436': attribute type 13 has an invalid length. [ 83.553549][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.706544][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.709856][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 83.712831][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.716049][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.720315][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.722827][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.728944][ T8] usb 6-1: config 0 descriptor?? [ 83.733715][ T6788] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 84.148069][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.150283][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.152476][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.155123][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.157307][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.159458][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.161543][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.163974][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.166308][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.168419][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.170584][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.172578][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.175162][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.180417][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.182521][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.188632][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 84.202637][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.289900][ T6803] netlink: 256 bytes leftover after parsing attributes in process `syz.2.439'. [ 84.506457][ T1281] usb 6-1: USB disconnect, device number 4 [ 84.643596][ T1298] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.793567][ T1298] usb 5-1: Using ep0 maxpacket: 16 [ 84.798329][ T1298] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 84.801073][ T1298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.803380][ T1298] usb 5-1: Product: syz [ 84.804859][ T1298] usb 5-1: Manufacturer: syz [ 84.806204][ T1298] usb 5-1: SerialNumber: syz [ 84.808821][ T1298] usb 5-1: config 0 descriptor?? [ 84.813123][ T1298] as10x_usb: device has been detected [ 84.814928][ T1298] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 84.825922][ T1298] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 84.840305][ T1298] as10x_usb: error during firmware upload part1 [ 84.842209][ T1298] Registered device Sky IT Digital Key (green led) [ 85.021637][ T6810] FAULT_INJECTION: forcing a failure. [ 85.021637][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.027958][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.0.442 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 85.030656][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.033446][ T6810] Call Trace: [ 85.034350][ T6810] [ 85.035135][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 85.036363][ T6810] should_fail_ex+0x497/0x5b0 [ 85.037615][ T6810] strncpy_from_user+0x3b/0x2a0 [ 85.038887][ T6810] getname_flags.part.0+0x8f/0x550 [ 85.040350][ T6810] getname+0x8d/0xe0 [ 85.041423][ T6810] do_sys_openat2+0x104/0x1e0 [ 85.042668][ T6810] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.044002][ T6810] ? __fget_files+0x244/0x3f0 [ 85.045244][ T6810] __ia32_compat_sys_openat+0x16e/0x210 [ 85.046708][ T6810] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 85.048289][ T6810] ? ksys_write+0x1ad/0x260 [ 85.049521][ T6810] __do_fast_syscall_32+0x73/0x120 [ 85.050850][ T6810] do_fast_syscall_32+0x32/0x80 [ 85.052117][ T6810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.053683][ T6810] RIP: 0023:0xf7f35579 [ 85.054756][ T6810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.059497][ T6810] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 85.060215][ T6821] netlink: 'syz.1.446': attribute type 4 has an invalid length. [ 85.061695][ T6810] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000200 [ 85.061704][ T6810] RDX: 0000000000080001 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.067862][ T6810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.069936][ T6810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.071992][ T6810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.074061][ T6810] [ 85.075966][ T74] usb 5-1: USB disconnect, device number 6 [ 85.086255][ T74] Unregistered device Sky IT Digital Key (green led) [ 85.086841][ T74] as10x_usb: device has been disconnected [ 85.837533][ T6859] netlink: 108 bytes leftover after parsing attributes in process `syz.1.458'. [ 85.944775][ T6864] QAT: failed to copy from user cfg_data. [ 86.735060][ T6876] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 86.737064][ T6876] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.463'. [ 86.739382][ T6876] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 86.828485][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 86.828880][ T39] audit: type=1326 audit(1727511318.017:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.861150][ T39] audit: type=1326 audit(1727511318.017:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867769][ T39] audit: type=1326 audit(1727511318.017:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867789][ T39] audit: type=1326 audit(1727511318.017:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867804][ T39] audit: type=1326 audit(1727511318.017:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867818][ T39] audit: type=1326 audit(1727511318.017:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867833][ T39] audit: type=1326 audit(1727511318.017:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867847][ T39] audit: type=1326 audit(1727511318.017:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867862][ T39] audit: type=1326 audit(1727511318.017:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.867877][ T39] audit: type=1326 audit(1727511318.017:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.0.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 86.913804][ T5390] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 87.053013][ T6887] syz.0.465: attempt to access beyond end of device [ 87.053013][ T6887] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 87.056717][ T6887] EXT4-fs (loop0): unable to read superblock [ 87.074100][ T6887] usb 2-1: USB disconnect, device number 2 [ 87.079674][ T5390] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.082533][ T5390] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.085613][ T5390] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.100412][ T5390] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.102885][ T5390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.108474][ T5390] usb 7-1: Product: syz [ 87.112900][ T5390] usb 7-1: Manufacturer: syz [ 87.115861][ T5390] usb 7-1: SerialNumber: syz [ 87.122918][ T5390] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 87.126502][ T5390] cdc_ncm 7-1:1.0: bind() failure [ 87.201301][ T6888] hub 2-0:1.0: USB hub found [ 87.205980][ T6888] hub 2-0:1.0: 6 ports detected [ 87.363597][ T5390] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 87.559799][ T6893] netlink: 'syz.1.467': attribute type 29 has an invalid length. [ 87.562155][ T5390] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 87.566058][ T5390] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 87.568493][ T5390] usb 2-1: Product: QEMU USB Tablet [ 87.570390][ T5390] usb 2-1: Manufacturer: QEMU [ 87.571814][ T5390] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 87.601037][ T5390] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input6 [ 87.670730][ T5390] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 87.679802][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.690287][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.872120][ T6905] Unsupported ieee802154 address type: 0 [ 88.957094][ T6911] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 88.963141][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.061144][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 89.125816][ T6922] netlink: 'syz.3.475': attribute type 10 has an invalid length. [ 89.456910][ T6936] FAULT_INJECTION: forcing a failure. [ 89.456910][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.473653][ T6936] CPU: 3 UID: 0 PID: 6936 Comm: syz.0.479 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 89.476461][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.479448][ T6936] Call Trace: [ 89.480367][ T6936] [ 89.481221][ T6936] dump_stack_lvl+0x16c/0x1f0 [ 89.482682][ T6936] should_fail_ex+0x497/0x5b0 [ 89.484052][ T6936] strncpy_from_user+0x3b/0x2a0 [ 89.485419][ T6936] getname_flags.part.0+0x8f/0x550 [ 89.486963][ T6936] getname_flags+0x93/0xf0 [ 89.488224][ T6936] __ia32_sys_renameat2+0xd4/0x130 [ 89.489755][ T6936] __do_fast_syscall_32+0x73/0x120 [ 89.491188][ T6936] do_fast_syscall_32+0x32/0x80 [ 89.493012][ T6936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.494841][ T6936] RIP: 0023:0xf7f35579 [ 89.496064][ T6936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.501251][ T6936] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 89.503454][ T6936] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 89.505949][ T6936] RDX: 00000000ffffff9c RSI: 0000000020000000 RDI: 0000000000000002 [ 89.508077][ T6936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.510223][ T6936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.512778][ T6936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.515142][ T6936] [ 89.805896][ T1298] usb 7-1: USB disconnect, device number 6 [ 90.149387][ T6959] FAULT_INJECTION: forcing a failure. [ 90.149387][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 90.154928][ T6959] CPU: 0 UID: 0 PID: 6959 Comm: syz.1.486 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 90.158649][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.162565][ T6959] Call Trace: [ 90.163816][ T6959] [ 90.164920][ T6959] dump_stack_lvl+0x16c/0x1f0 [ 90.166679][ T6959] should_fail_ex+0x497/0x5b0 [ 90.168378][ T6959] should_failslab+0xc2/0x120 [ 90.170124][ T6959] __kmalloc_cache_noprof+0x6b/0x310 [ 90.172024][ T6959] ? __sctp_v6_cmp_addr+0x206/0x530 [ 90.173882][ T6959] ? sctp_add_bind_addr+0x9d/0x3e0 [ 90.175691][ T6959] sctp_add_bind_addr+0x9d/0x3e0 [ 90.177530][ T6959] sctp_copy_local_addr_list+0x39e/0x5a0 [ 90.179574][ T6959] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 90.181830][ T6959] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 90.183980][ T6959] ? sctp_bind_addr_copy+0xe0/0x530 [ 90.185896][ T6959] sctp_bind_addr_copy+0xe0/0x530 [ 90.187759][ T6959] sctp_connect_new_asoc+0x1d8/0x790 [ 90.189699][ T6959] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 90.191767][ T6959] ? mark_held_locks+0x9f/0xe0 [ 90.193506][ T6959] ? sctp_sendmsg+0x112f/0x1f10 [ 90.195278][ T6959] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 90.197293][ T6959] sctp_sendmsg+0x162a/0x1f10 [ 90.199078][ T6959] ? __pfx_sctp_sendmsg+0x10/0x10 [ 90.200931][ T6959] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.202730][ T6959] ? __pfx_sctp_sendmsg+0x10/0x10 [ 90.204585][ T6959] inet_sendmsg+0x119/0x140 [ 90.206283][ T6959] __sys_sendto+0x426/0x4d0 [ 90.207954][ T6959] ? __pfx___sys_sendto+0x10/0x10 [ 90.209815][ T6959] ? ksys_write+0x1ad/0x260 [ 90.211476][ T6959] ? __pfx_ksys_write+0x10/0x10 [ 90.213253][ T6959] __ia32_sys_sendto+0xdd/0x1b0 [ 90.215047][ T6959] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.216926][ T6959] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 90.219658][ T6959] __do_fast_syscall_32+0x73/0x120 [ 90.221574][ T6959] do_fast_syscall_32+0x32/0x80 [ 90.223384][ T6959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.225712][ T6959] RIP: 0023:0xf7f73579 [ 90.227360][ T6959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.234363][ T6959] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 90.237396][ T6959] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020847fff [ 90.240232][ T6959] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000002005ffe4 [ 90.243298][ T6959] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 90.246346][ T6959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.249262][ T6959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.252395][ T6959] [ 90.283631][ T1298] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.438753][ T1298] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.442684][ T1298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.460538][ T1298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.478877][ T1298] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.483388][ T1298] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.493877][ T1298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.511008][ T1298] usb 7-1: config 0 descriptor?? [ 90.552159][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.736522][ T5351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.740338][ T5351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.743017][ T5351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.746153][ T5351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.748406][ T5351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.751136][ T5351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.913575][ T5390] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.935260][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.964935][ T6969] chnl_net:caif_netlink_parms(): no params data found [ 91.012935][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 91.027815][ T1298] usbhid 7-1:0.0: can't add hid device: -71 [ 91.029473][ T1298] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 91.044580][ T1298] usb 7-1: USB disconnect, device number 7 [ 91.063573][ T5390] usb 5-1: Using ep0 maxpacket: 8 [ 91.066259][ T5390] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 91.070464][ T5390] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.072862][ T5390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.075192][ T5390] usb 5-1: Product: 哲ፓꞫ잡戾櫱茙Ἓ닝㪙뷡润葋᎙墵ퟸ㉈鏹Ⴊ睰襯얒쾵⣜ᑶ倬蓱瓗棶䋇ꈐ⮧癞罧ⅺ௳䭍첈㈟就剈ᯣڀ肿砌肕䏁鸂癯陖㓌ս霧炙塳ꆁ옰ᖶﴒ隰䶉䄸ፀ鴱鎃텨砄淠쑧츎뛐儾誔Ὼ嗱ꂵ⭪셡ร៽쌞華焷倃名閂 [ 91.083535][ T5390] usb 5-1: Manufacturer: 鼟׼ၠ᥋蛓軰ꏂ萢鞸曆ꁘﾴ⹞⸦渒ۜ뺾풪㋑驐쀉톆듃鐑풜펅諣࡭軝렫䌰堲祸엇礅燛섕禿པ㯓참业苓 [ 91.090202][ T5390] usb 5-1: SerialNumber: Ⰺ [ 91.104527][ T6968] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.158106][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.206121][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.208046][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.209884][ T6969] bridge_slave_0: entered allmulticast mode [ 91.212029][ T6969] bridge_slave_0: entered promiscuous mode [ 91.215311][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.217181][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.219088][ T6969] bridge_slave_1: entered allmulticast mode [ 91.221184][ T6969] bridge_slave_1: entered promiscuous mode [ 91.244885][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.249556][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.273114][ T6969] team0: Port device team_slave_0 added [ 91.276005][ T6969] team0: Port device team_slave_1 added [ 91.338688][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.340526][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.346912][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.350251][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.351981][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.358646][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.393711][ T6979] netlink: 84 bytes leftover after parsing attributes in process `syz.0.490'. [ 91.398967][ T6969] hsr_slave_0: entered promiscuous mode [ 91.403684][ T6969] hsr_slave_1: entered promiscuous mode [ 91.413861][ T6969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.416250][ T6969] Cannot create hsr debugfs directory [ 91.445215][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.547480][ T6983] sctp: [Deprecated]: syz.1.492 (pid 6983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.547480][ T6983] Use struct sctp_sack_info instead [ 91.587060][ T45] bridge_slave_1: left allmulticast mode [ 91.588883][ T45] bridge_slave_1: left promiscuous mode [ 91.590680][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.597687][ T45] bridge_slave_0: left allmulticast mode [ 91.599682][ T45] bridge_slave_0: left promiscuous mode [ 91.602472][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.630583][ T6983] sctp: [Deprecated]: syz.1.492 (pid 6983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.630583][ T6983] Use struct sctp_sack_info instead [ 91.780682][ T5390] usb 5-1: USB disconnect, device number 7 [ 91.912783][ T45] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 92.072658][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.077345][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.081598][ T45] bond0 (unregistering): Released all slaves [ 92.088938][ T45] bond1 (unregistering): Released all slaves [ 92.536518][ T45] hsr_slave_0: left promiscuous mode [ 92.545781][ T45] hsr_slave_1: left promiscuous mode [ 92.558522][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.560467][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.564449][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.566629][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.586459][ T45] veth1_macvtap: left promiscuous mode [ 92.588026][ T45] veth0_macvtap: left promiscuous mode [ 92.593581][ T45] veth1_vlan: left promiscuous mode [ 92.595012][ T45] veth0_vlan: left promiscuous mode [ 92.676353][ T5361] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 92.834777][ T5353] Bluetooth: hci3: command tx timeout [ 92.850477][ T5361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 92.853418][ T5361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 92.866387][ T5361] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 92.874735][ T5361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.877173][ T5361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.879774][ T5361] usb 5-1: SerialNumber: syz [ 92.886763][ T7008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.888822][ T7008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.893180][ T5361] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 92.895374][ T5361] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 92.897070][ T5361] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 93.277255][ T45] team0 (unregistering): Port device team_slave_1 removed [ 93.358891][ T45] team0 (unregistering): Port device team_slave_0 removed [ 93.616655][ T57] usb 5-1: USB disconnect, device number 8 [ 93.927381][ T7038] syz.1.503: attempt to access beyond end of device [ 93.927381][ T7038] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 93.930715][ T7038] (syz.1.503,7038,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 93.932918][ T7038] (syz.1.503,7038,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 93.933769][ T6969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.935995][ T7038] (syz.1.503,7038,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 93.939345][ T7038] (syz.1.503,7038,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 93.954012][ T6969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.958794][ T6969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.971107][ T6969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.019154][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.029403][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.044253][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.046636][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.056938][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.058897][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.082600][ T6969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.092196][ T6969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.179985][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.197513][ T6969] veth0_vlan: entered promiscuous mode [ 94.202375][ T6969] veth1_vlan: entered promiscuous mode [ 94.214738][ T6969] veth0_macvtap: entered promiscuous mode [ 94.220320][ T6969] veth1_macvtap: entered promiscuous mode [ 94.232455][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.235843][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.239056][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.242496][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.247405][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.250913][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.255371][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.266720][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.269836][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.273350][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.276887][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.279328][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.282156][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.286155][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.290758][ T6969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294218][ T6969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.296922][ T6969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.299227][ T6969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.338666][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.342411][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.356290][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.358816][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.387631][ T7069] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 94.391869][ T7069] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 94.395977][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.2.512 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 94.399702][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.403124][ T7069] RIP: 0010:follow_pfnmap_start+0x115/0xdc0 [ 94.404792][ T7069] Code: 48 c1 ea 03 80 3c 02 00 0f 85 10 0b 00 00 4c 8b bd 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 0a 00 00 48 c7 c0 38 e3 1c 90 49 8b 57 58 48 [ 94.409950][ T7069] RSP: 0018:ffffc9000dfe7498 EFLAGS: 00010202 [ 94.411775][ T7069] RAX: dffffc0000000000 RBX: ffffc9000dfe7578 RCX: ffffc90003dd2000 [ 94.414295][ T7069] RDX: 000000000000000b RSI: ffffffff81d3a34a RDI: 0000000000000058 [ 94.416867][ T7069] RBP: ffff888043aee9b0 R08: 0000000000000007 R09: 0000000000000000 [ 94.419187][ T7069] R10: 0000000001000000 R11: 0000000000000000 R12: 0000000020371000 [ 94.421448][ T7069] R13: 1ffff92001bfce97 R14: ffff8880533af200 R15: 0000000000000000 [ 94.423578][ T7069] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f56c6b40 [ 94.426176][ T7069] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.428008][ T7069] CR2: 00000000f738afb4 CR3: 0000000000cfe000 CR4: 0000000000350ef0 [ 94.430072][ T7069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.432186][ T7069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.434712][ T7069] Call Trace: [ 94.435904][ T7069] [ 94.436961][ T7069] ? die_addr+0x3b/0xa0 [ 94.438503][ T7069] ? exc_general_protection+0x155/0x230 [ 94.440505][ T7069] ? asm_exc_general_protection+0x26/0x30 [ 94.442580][ T7069] ? follow_pfnmap_start+0x6a/0xdc0 [ 94.444551][ T7069] ? follow_pfnmap_start+0x115/0xdc0 [ 94.446454][ T7069] ? follow_pfnmap_start+0x6a/0xdc0 [ 94.448310][ T7069] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 94.450328][ T7069] get_pat_info+0x118/0x320 [ 94.451920][ T7069] ? __pfx_get_pat_info+0x10/0x10 [ 94.453681][ T7069] ? __pfx_mark_lock+0x10/0x10 [ 94.455386][ T7069] untrack_pfn+0xf7/0x4d0 [ 94.456778][ T7069] ? __pfx_untrack_pfn+0x10/0x10 [ 94.458561][ T7069] ? unmap_vmas+0x1d1/0x490 [ 94.460132][ T7069] ? __pfx_lock_release+0x10/0x10 [ 94.461710][ T7069] unmap_single_vma+0x1bd/0x2b0 [ 94.463291][ T7069] unmap_vmas+0x22f/0x490 [ 94.464750][ T7069] ? __pfx_unmap_vmas+0x10/0x10 [ 94.466358][ T7069] ? __pfx_lock_release+0x10/0x10 [ 94.468008][ T7069] ? lock_acquire+0x1b1/0x560 [ 94.469578][ T7069] ? lru_add_drain_cpu+0x428/0x810 [ 94.471318][ T7069] unmap_region+0x201/0x480 [ 94.472824][ T7069] ? __pfx_unmap_region+0x10/0x10 [ 94.474512][ T7069] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 94.476485][ T7069] mmap_region+0x1c00/0x2a50 [ 94.478016][ T7069] ? __pfx_mmap_region+0x10/0x10 [ 94.479316][ T7069] ? bpf_lsm_mmap_addr+0x9/0x10 [ 94.480576][ T7069] ? security_mmap_addr+0x6c/0x1e0 [ 94.482009][ T7069] ? __get_unmapped_area+0x26b/0x3a0 [ 94.483537][ T7069] do_mmap+0xc00/0xfc0 [ 94.484628][ T7069] vm_mmap_pgoff+0x1ba/0x360 [ 94.485801][ T7069] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 94.487194][ T7069] ? __fget_files+0x244/0x3f0 [ 94.488344][ T7069] ksys_mmap_pgoff+0x32c/0x5c0 [ 94.489531][ T7069] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 94.491050][ T7069] __do_fast_syscall_32+0x73/0x120 [ 94.492486][ T7069] do_fast_syscall_32+0x32/0x80 [ 94.493683][ T7069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.495210][ T7069] RIP: 0023:0xf73de579 [ 94.496455][ T7069] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.501524][ T7069] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 94.504024][ T7069] RAX: ffffffffffffffda RBX: 0000000020371000 RCX: 0000000000005000 [ 94.505944][ T7069] RDX: 0000000000000007 RSI: 0000000000000011 RDI: 0000000000000006 [ 94.507820][ T7069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.509709][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.511813][ T7069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.513892][ T7069] [ 94.514716][ T7069] Modules linked in: [ 94.516848][ T7069] ---[ end trace 0000000000000000 ]--- [ 94.521888][ T7069] RIP: 0010:follow_pfnmap_start+0x115/0xdc0 [ 94.524192][ T7069] Code: 48 c1 ea 03 80 3c 02 00 0f 85 10 0b 00 00 4c 8b bd 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d3 0a 00 00 48 c7 c0 38 e3 1c 90 49 8b 57 58 48 [ 94.532851][ T7069] RSP: 0018:ffffc9000dfe7498 EFLAGS: 00010202 [ 94.535348][ T7069] RAX: dffffc0000000000 RBX: ffffc9000dfe7578 RCX: ffffc90003dd2000 [ 94.538131][ T7069] RDX: 000000000000000b RSI: ffffffff81d3a34a RDI: 0000000000000058 [ 94.544743][ T7069] RBP: ffff888043aee9b0 R08: 0000000000000007 R09: 0000000000000000 [ 94.546749][ T7069] R10: 0000000001000000 R11: 0000000000000000 R12: 0000000020371000 [ 94.548631][ T7069] R13: 1ffff92001bfce97 R14: ffff8880533af200 R15: 0000000000000000 [ 94.550531][ T7069] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f56c6b40 [ 94.552693][ T7069] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.554731][ T7069] CR2: 00000000f7fc6e40 CR3: 0000000000cfe000 CR4: 0000000000352ef0 [ 94.556634][ T7069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.558513][ T7069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.560356][ T7069] Kernel panic - not syncing: Fatal exception [ 94.565309][ T7069] Kernel Offset: disabled [ 94.566341][ T7069] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:15:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000069a7c RCX=ffffffff81d469de RDX=ffff8880226c8000 RSI=00000000000132c0 RDI=0000000000000006 RBP=00000000000132c0 RSP=ffffc9000ecb77e8 R8 =0000000000000006 R9 =00000000000132c0 R10=0000000000069a7c R11=0000000000004f62 R12=1ffff92001d96efe R13=ffffea0001a69f00 R14=00000000f652a000 R15=0000000000000000 RIP=ffffffff818c29e2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff8a176c CR3=0000000048f4e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014c00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85027735 RDI=ffffffff9a62d260 RBP=ffffffff9a62d220 RSP=ffffc9000dfe6e70 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000035 R14=ffffffff850276d0 R15=0000000000000000 RIP=ffffffff8502775f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f738afb4 CR3=0000000000cfe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000003a46cf00d0 RCX=1ffffffff346f104 RDX=1ffff11004817ba9 RSI=ffffffff8bb11980 RDI=ffff8880240bdd48 RBP=0000003a46cee44e RSP=ffffc9000449fb40 R8 =0000000000000000 R9 =ffffed100fde8d18 R10=ffff88807ef468c7 R11=000000000000004d R12=0000000000000002 R13=00000000000032c9 R14=ffffffff9a3ac480 R15=ffffffff9a3ac480 RIP=ffffffff8b111f10 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f332d52c CR3=0000000065c34000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88802adb8000 RBX=ffff88806101d7c0 RCX=000000000000000a RDX=ffffc90006fbfa18 RSI=0000000000000cc0 RDI=ffffc90006fbfa18 RBP=0000000000000001 RSP=ffffc90006fbf978 R8 =0000000000000cc0 R9 =0000000000000000 R10=0000000000000002 R11=00000000000a2001 R12=dffffc0000000000 R13=0000000000000000 R14=1ffff92000df7f3d R15=ffff888011e1c000 RIP=ffffffff892a7c95 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1854ad6280 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057a4e99c CR3=0000000000726000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000002 Opmask01=0000000000000001 Opmask02=0000000000000001 Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557125951250 000055712590e830 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557125951250 000055712590e830 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff000000000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 93348ca9e38cf0c2 7373260701f15231 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727265006d25203a 7d73257b52545441 20676e6974697277 20726f727265000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e5e490041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000251 000000302f716d00 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e047ffda90ff83b1 0000000557125908 0000000000000241 0000000039326c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 000000000030bd01 00007f18547f1b00 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000