last executing test programs: 7.247566167s ago: executing program 1 (id=366): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x2f, 0xff, 0x0, 0x7, 0x29, @empty, @loopback, 0x40, 0x8000, 0x2, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x446000, 0x273, 0x1a}, 0x18) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000240)={0x1, 0xffffffff, 0x7fffffff}) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000280)={0x3, 0x1, 0x80000001}) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="2df519e4cfc86753b59424757bf9d6a1e35b76fb52c64819094faff90d6496f4871c57b380e54e4aaff2f240080f7897741a319b1ab65a58a98990d550f7db68bc275f2ba6bae106c34cef3ff3bf672f6b2af0b85eda7d8c9cc6798bcb018533ef1f60c00fb05aa4778e8c2813e16cad22f3859bd5322d08e70b18ad42e8aa04b6f3c136034dee425d5dcd0e5a0605369a026b5bbb285befb6a97a3e0e983d21a9cf", 0xa2, r5) openat$kvm(0xffffff9c, &(0x7f0000000480), 0x111822, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x269}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x20000088) write$P9_RREMOVE(r3, &(0x7f0000000600)={0x7, 0x7b, 0x1}, 0x7) r6 = socket(0x1d, 0x5, 0x2) fcntl$setpipe(r3, 0x407, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000001880)=[{}, {}], 0x10, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0x50, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) r8 = openat$btrfs_control(0xffffff9c, &(0x7f0000001ac0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r3, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)=r3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1, 0x1b, &(0x7f0000000640)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b6e}}, @call={0x85, 0x0, 0x0, 0xa5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x8, 0xb, 0xd, 0x80, 0x1}, @jmp={0x5, 0x0, 0x5, 0x3, 0x2, 0x100}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000740)='GPL\x00', 0x6, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x0, '\x00', r2, @fallback=0xc, r3, 0x8, &(0x7f0000001780)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r3, 0x2, &(0x7f0000001bc0)=[r3, r8, r9, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000001c00)=[{0x4, 0x5, 0x10, 0x2}, {0x2, 0x5, 0xf, 0xa}], 0x10, 0xa2c7, @void, @value}, 0x94) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000001d00)=0x37) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000001d40)={0x79, {{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x1, 0x2, [{{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}}]}, 0x18c) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xac, r10, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004844}, 0x20008001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8c}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1) syz_usb_connect(0x1, 0x497, &(0x7f0000002240)={{0x12, 0x1, 0x110, 0xc7, 0x1c, 0x67, 0x20, 0x1631, 0xc019, 0xc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x485, 0x1, 0x5, 0xac, 0x80, 0x5, [{{0x9, 0x4, 0xef, 0x1, 0xd, 0x9e, 0x14, 0x9b, 0x7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "a26f930d82"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xb, 0xa, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x0, 0x36}}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe7, 0x2, 0x6, "22735541d5dd"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x48, 0x1, 0x6, 0x27}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0xff, '{'}, @as_header={0x7, 0x24, 0x1, 0x2c, 0x9, 0x100e}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0x4, 0x2, "25f9d4", "d91a5b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xb, 0xd4, 0x80, "e53162"}]}], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0x7, 0x7f, 0x8}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x7, 0x4, 0xad}}, {{0x9, 0x5, 0x5, 0x18, 0x8, 0x10, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xdba2}, @generic={0x4e, 0x24, "7a620dc63576e3f4af07791ab9d9adb888fb5271726b44a5de2e55be15e3d484c8f48b0de95d66ab103a8fa152d678ad6b6d20b6dcaff8bad51be33fbc4f6547a6605b8343528440fd1eb299"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xd, 0xd, 0xf, [@generic={0xad, 0xb, "66227cbd92de37736a0b70dff8f23d41674fb293ea210b9e550a8f0fe7be61f6b56e8fb2bba470970b073dae83ed002a369bcdd0cef41b6da852ae5cc02f931b8a252c572a0ead3cb06da7a6ee9485f740f6a28eb6f1b3320851d9a5320415eb30ea1559bbf08b31655f4bad9c1c66499fb18e17eb75378e20d02b8bd0ab9a18d42fcaed13eb08e2ee976fef2ce93baa992a4ba16d8af1c4c09c3ce88f69fa05f63a4fb23de218c82a926c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x2, 0x9, 0xf7, [@generic={0x2f, 0x21, "67e4114c46d8ad855efc0193e17504333a8a22ae74953b20d38ebeb3d6c2a8dfd3e904bbbf89192f242b2f5427"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x9, 0x0, 0xc4}}, {{0x9, 0x5, 0x88, 0x10, 0x40, 0x81, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x92, 0x9}, @generic={0xca, 0x8, "5daef2eaec7ac7df2afa3c865f2caf0103c0b63753d2694b5a36aae955eef755fa205a21a91fb6d852ada0d40ba17567f4b3f5172869c6732ca7e18a25bff76f041252d8c2e00d85b5106c214a40c094abd7c98ec212134b0537f0f549e4a350592a9a401735dfa28c970ef02538bebdca9c9610abec720b94ce7f8bae539ee2fb41f0b19a5b90bd0ce743aaaac606ad8c17339ce12b80bdc3a76eccaf4b96028c8ad7408fb66edfc12fb2de4130515fefa336dd7c9d96cf239f3a6746e45827acaa2ae49e11d48c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x18, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}, @generic={0xab, 0x10, "733ab68aca537f86a9e111bdbe2e07964c52001069965b8486cf1dd87e2a8689624acfd48eaa53c17bbbf9b7f7d97c70781d81514b68cfe6cf2380f89c345903e16b0a836ae7ca5a71174dd1d9e69f11f0e1845dcd4264f4456cd062ac898893df7223c3c33fc55033e47790089c8f62b9d31b473d8549fa2476127bc3f82ccfd1e9096b0a200170ad0f477c5ee985b449d932ae7fd3c96385222aec3ac7025b7398a885bab9ed842b"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xa0, 0xc, 0x7b}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x4, 0xa, 0xff}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x80, 0x3, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xec, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x7}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x81, 0x8, 0x1, [@generic={0xcb, 0x7, "1a21795e8a86b7b3f37568e7a500d37723b24fcf99a136c69dfe833289c8e3d9b6280684a97c234eeb848642b3d6e83a32970d8507c3f01f7072137ccb01cf306a5584721f1c17a524c700e63fadbddeb8e33db4f04e116ded630b795ee7d31ecc33c09ad3dfd665f71460d867ea6051f65a63488982c2860005f81ae9617eba02e8c1212c6924b7cb5156a702c58e68f6cbe7a95d2ad99a6bcaffd17955a06f687ebdbd25dd34fb434e83a93a612b1d99dfc8851c4d338055b8a166efa5a4dab24021266ed099dfd8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xce, 0x6}]}}]}}]}}]}}, &(0x7f00000029c0)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x250, 0x3, 0x9, 0x7, 0x20, 0x7}, 0xe4, &(0x7f0000002740)={0x5, 0xf, 0xe4, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xeca1c5c11fc8a5c7, 0x6, 0x28, 0x4}, @ptm_cap={0x3}, @generic={0xcc, 0x10, 0xb, "a9d27a0c404908e64d8dfae030ab8f0ea695995ea8abb8c7eb36f943b99dde209618e73513e333b2d9cdfee547c073f113d5d8ef32ec614d4ae06323d05a7bdc6a84c2371bd9f7840dea0bf71b9a2a1d454e1db8081376e7293bed0c8b3d312166a3fc1b6a0bbbbee69e1494e44a2b233ae7776352769a5b24c254e662b6858377fc007ba795393c7499035254a454fffdb18e9358a9815add4c7e6f42d537a14599163604dc8e778227e7001ece2421f448991113f5f1f84074e66f6e3cc3a497a028771e4af5a632"}]}, 0x3, [{0xbc, &(0x7f0000002840)=@string={0xbc, 0x3, "dc7419914da25c6e3e1c16608f14cf88f0226ef19aa705abd12cb728401bc96859ebba8e2e0bc25c441d917656431875248c69ddb14d45df8f6b4dd7f80692540e27edda53577c405b21ef6b1acfee22088c2a17e7ef1ff47384170b69abc686ead6cdadcb68edde4ac408698c00693ad17c998d8ce3a85549f34ab3da4782aa4a760bba88d51a5c2a0ed6cee5ad43a1afc6c2716ba48d9ab89b0024283f224bb6292a941c8bdd1f388ae76e44fe39ce9e4257ff1d881976819a"}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x2409}}, {0x4f, &(0x7f0000002940)=@string={0x4f, 0x3, "680ba1b39a5c6d211f8864eed3dc88f38b6c0a5ac2c7accf669d38802ac75b9c370ad4a860e3a6a202068f454e5e6c50dd654c98fa05024f6539236c01c17ac3e3e949c71f870a814e2ab14a01"}}]}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r12, &(0x7f0000002c00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x130, r13, 0x622, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0xac, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x12, 0x1, '#&&+)$/-*%*-\x10\xff'}, {0x5, 0x1, 'r'}]}, {0x50, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x7, 0x1, '}!-'}, {0x12, 0x1, 'veth0_to_bond\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xd, 0x1, '/dev/kvm\x00'}, {0x9, 0x1, 'user\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'keyring\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xc, 0x1, 'batadv0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'vlan0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x9, 0x1, 'user\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0xc, 0x1, '-/#[-%-\xe0'}, {0x17, 0x1, '/dev/btrfs-control\x00'}, {0x5, 0x1, '['}, {0x4}, {0x12, 0x1, '+@^\\$#{/\x9e-)[-\\'}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x44000}, 0x4) 5.865184363s ago: executing program 2 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6tnl0\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001040)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x86, 0x2}}}}}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.958568339s ago: executing program 2 (id=379): socket$kcm(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffd46}}, 0x40800) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syslog(0x2, &(0x7f0000000000)=""/182, 0xb6) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', '', [{}, {0x20, '/dev/snd/midiC#D#\x00'}, {}, {0x20, '$%@%^\xc0/:\''}, {0x20, '[@+$\''}, {0x20, '}%.'}, {0x20, '%}'}, {0x20, ')G^@!{$&^L{'}], 0xa, "cbab6bb86d94f9e7437a53217821bb"}, 0x4b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 4.190013525s ago: executing program 1 (id=383): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f00000008c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffd, r4, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0xffff, r4, 0x0}]) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x133002) ioctl$I2C_TIMEOUT(r8, 0x702, 0x5) ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 4.126261811s ago: executing program 2 (id=386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x2, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x6, 0x4, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x20, 0x8, 0x2, 0x1}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2080) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000007c0)="d10cc160ea718c5b89133ede5e8427718f92f2c5e836140451d85f055cbbecac55af0d55989f28976dea8fc729008000000000000087de176d987f6a54bed136391acbd5313e48860245c1cdb1d6ae8ab9d55085b9bb4153eb3bf3947fcc3280f4854a19152667bbc7788811dfd54b99c81ee1c2267dbab77fdc63f6d43367e7b7d1bbd53992af57ac56dadd3ba92d", &(0x7f0000000880)="9ff98b30e633ff6262e296fdcb6d539af53f28"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@deltclass={0x58, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x4, 0xfff2}, {0xa, 0x10}, {0xf, 0x1}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xf0, 0x2}}]}, 0x58}}, 0x4000011) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb10088a8086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r10}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000006800040025bd7059780200000000000000900000000005ef", @ANYRES32=r2, @ANYBLOB="1400060000000000000000000000ffff0000000008000500", @ANYRES32=r4, @ANYBLOB="08000100010000000600070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x10024) fremovexattr(r1, &(0x7f0000000540)=@random={'osx.', '\x00'}) 3.939983337s ago: executing program 1 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) fstat(r5, &(0x7f0000000300)) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4e3, &(0x7f0000000280)={0x0, 0xc, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) write$cgroup_type(r3, 0x0, 0x0) r9 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r9, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmsg(r10, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r11}}) socket$netlink(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.189924128s ago: executing program 2 (id=392): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xfc, 0x30, 0x10, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ct={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x5a, 0x6, "b0e72e67ae250373219256d8427179a8b5f2cf3b9f6dae0c60ca9f9bb9e63f98f3fbe2e2f9f0d07410804951035fab5ced4b251e61cc7c700c89defe2e9432b07bbbbaba97c4a1cf26ba39d67ed1576f261100000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 3.089565502s ago: executing program 1 (id=395): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f00000002c0)={&(0x7f00000001c0)=""/54, 0x36, 0x0, &(0x7f0000000480)=""/242, 0xf2}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r1, 0x0, 0x0, @val=@tracing={r2, 0x9}}, 0x1c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.349212991s ago: executing program 0 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000980)=[{0x0, 0x1f}, {&(0x7f0000001980)="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", 0x1ab}, {0x0}], 0x3, 0x5, 0xa, 0x14) (async) pwritev2(r2, &(0x7f0000000980)=[{0x0, 0x1f}, {&(0x7f0000001980)="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", 0x1ab}, {0x0}], 0x3, 0x5, 0xa, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000010000100000000000000005ab82320310e64", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000005c0)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000005c0)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003980), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24591500", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd22000000efb668fd69ce0e51000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x4000090) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000002c0)={{0x1, 0x0, 0xb7e, 0xf9, 'syz0\x00', 0xffffff42}, 0x1, [0x1, 0x8000000000000000, 0x7fff, 0x7, 0x4de, 0x7, 0x7, 0x7, 0x0, 0xfffff985, 0xca6, 0x80000000, 0x8000000000000001, 0x100, 0x3, 0x4, 0xb, 0x70c, 0x6, 0x1, 0x1, 0x2, 0xe, 0x8000001, 0x6, 0x7, 0x0, 0x8, 0xd, 0xffffffff80000001, 0x4, 0x1000, 0x9, 0x2, 0x58, 0x7fff, 0x0, 0x7, 0x5, 0x4, 0x6, 0x8000000000000001, 0x8, 0x9, 0x6e1, 0x10, 0x616, 0x3, 0x4, 0x400, 0xe, 0x4, 0x9, 0x200000000000000, 0x80000001, 0xa519, 0x6, 0x22, 0xfffffa62, 0x7, 0x9, 0xf, 0x6, 0x7, 0x3, 0x7fff, 0x0, 0xc8b, 0x80000001, 0x402, 0x0, 0x6, 0x3, 0x400, 0x80000000, 0x0, 0x9, 0x2, 0x4000000000000000, 0xa, 0x4, 0x0, 0x0, 0x100000001, 0x1, 0x5, 0x4, 0x6, 0x1, 0x3, 0x7, 0x8000, 0x9, 0x2, 0x3, 0x7, 0xa000000000000, 0xc, 0x33ad, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0x84, 0x7, 0x6, 0x8000000000000001, 0x0, 0x2, 0x590, 0x9, 0x9, 0x1, 0x5, 0x5, 0xc, 0x7, 0x7, 0xdc, 0x2, 0x7df, 0x800, 0x101, 0x9, 0x80000000, 0x5a4, 0x21, 0x6]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000002c0)={{0x1, 0x0, 0xb7e, 0xf9, 'syz0\x00', 0xffffff42}, 0x1, [0x1, 0x8000000000000000, 0x7fff, 0x7, 0x4de, 0x7, 0x7, 0x7, 0x0, 0xfffff985, 0xca6, 0x80000000, 0x8000000000000001, 0x100, 0x3, 0x4, 0xb, 0x70c, 0x6, 0x1, 0x1, 0x2, 0xe, 0x8000001, 0x6, 0x7, 0x0, 0x8, 0xd, 0xffffffff80000001, 0x4, 0x1000, 0x9, 0x2, 0x58, 0x7fff, 0x0, 0x7, 0x5, 0x4, 0x6, 0x8000000000000001, 0x8, 0x9, 0x6e1, 0x10, 0x616, 0x3, 0x4, 0x400, 0xe, 0x4, 0x9, 0x200000000000000, 0x80000001, 0xa519, 0x6, 0x22, 0xfffffa62, 0x7, 0x9, 0xf, 0x6, 0x7, 0x3, 0x7fff, 0x0, 0xc8b, 0x80000001, 0x402, 0x0, 0x6, 0x3, 0x400, 0x80000000, 0x0, 0x9, 0x2, 0x4000000000000000, 0xa, 0x4, 0x0, 0x0, 0x100000001, 0x1, 0x5, 0x4, 0x6, 0x1, 0x3, 0x7, 0x8000, 0x9, 0x2, 0x3, 0x7, 0xa000000000000, 0xc, 0x33ad, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0x84, 0x7, 0x6, 0x8000000000000001, 0x0, 0x2, 0x590, 0x9, 0x9, 0x1, 0x5, 0x5, 0xc, 0x7, 0x7, 0xdc, 0x2, 0x7df, 0x800, 0x101, 0x9, 0x80000000, 0x5a4, 0x21, 0x6]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000001d042f930000000500030005000000100004006c6f616462616c616e63650085ae246baf0757f1a4fc65e3aad591e11126e89def31841e597b2b253d20fc044526011716a97f11c55df781514e84a5564a6a6a1cc6d641930bbd95c5d54a63fd6fddad30212d2c684c376ef05ed84cd24d864019f6f4fb4237c7bca54e3eb52302c07cb11ecd6de42bcfc4d8e4d4"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4000000) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r12, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x4, 0x1, 0xf}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x5, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0xc2, 0xd}}], 0x70) openat$cgroup_subtree(r12, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_subtree(r12, &(0x7f00000000c0), 0x2, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f00000006c0)={[0x0, 0xf]}, 0x8) (async) rt_sigsuspend(&(0x7f00000006c0)={[0x0, 0xf]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) 2.099977756s ago: executing program 1 (id=399): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x8, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xc4, 0x30, 0x100, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_ct={0x64, 0x2, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000500000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r5, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, r6, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x48}}, 0x844) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x0, &(0x7f00000023c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.940132698s ago: executing program 1 (id=400): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.709819831s ago: executing program 3 (id=402): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0xbb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8eR_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96\xdf\r5\x9a', 0x1) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x810) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002080)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000000340)={0x0}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={r9, 0x1000, &(0x7f0000002a80)=""/4096}) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) 1.469417593s ago: executing program 3 (id=403): clock_gettime(0xc427ef2364748ce6, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt(r3, 0x8b, 0x2, &(0x7f0000000140)=""/201, &(0x7f00000002c0)=0xc9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0x9, 0x8001, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r4, 0xfffffe38}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000004c0)={r0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, r6, 0x8, 0x70bd2a, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x171, 0x4080) setresuid(0x0, 0xee01, 0xee00) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) read$midi(r7, &(0x7f0000000380)=""/77, 0x4d) 1.469115942s ago: executing program 3 (id=404): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x1, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x1, 0x4, 0x0, @tick, {}, {0xfd}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x2, 0x0, @time={0x4, 0x8}, {}, {}, @time=@time={0x4, 0xc5}}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r3, 0x0, 0xffffffbf) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x40, 0x43) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0x4c09, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000013bb71a82218d8c9205115902dccea5c028c95e0000050092b9ba497be800e802633d6f01545ee7f004ca0d58d13ea37b2571b30d374d8a5fc202105725c690d926af"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.457981099s ago: executing program 0 (id=405): socket$kcm(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffd46}}, 0x40800) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syslog(0x2, &(0x7f0000000000)=""/182, 0xb6) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', '', [{}, {0x20, '/dev/snd/midiC#D#\x00'}, {}, {0x20, '$%@%^\xc0/:\''}, {0x20, '[@+$\''}, {0x20, '}%.'}, {0x20, '%}'}, {0x20, ')G^@!{$&^L{'}], 0xa, "cbab6bb86d94f9e7437a53217821bb"}, 0x4b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 1.282533295s ago: executing program 3 (id=406): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000890) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3d0, 0xffffffff, 0xf4, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vlan0\x00', 'vcan0\x00'}, 0x2f2, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa249d58e1a3ce506}}]}, @REJECT={0x24}}, {{@ipv6={@remote, @empty, [], [], 'gretap0\x00', 'batadv_slave_1\x00'}, 0x0, 0xd4, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1655e7b191395139620734d46e52f71c1747c6110a6d555946752e989951"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x42c) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0e238a86b018e04", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0x81}], 0x1}}], 0x2, 0x44401) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1}, 0x42) 1.189337179s ago: executing program 0 (id=407): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7", 0x17}, {&(0x7f0000000900)}], 0x2}, 0x0) 1.18906123s ago: executing program 0 (id=408): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0x640100fc, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.02821812s ago: executing program 0 (id=409): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb702000000000000b703000001000100850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6973000647713802b94c4b95df94e70b420000002d4000da2eb0c5719a699216b9b2821408cb2d7a276978eac6dcf409a198a9b12d40d8f44d606993d45b0241775b9010101c6fe2122ef356142d2d5d0e2d1426a9e24216aec9b352a59ebea84e20b5f248763acd9beab8109d7c795ac95ce684da48193024764307d83d899f70dd0860d495d452941ed2b5c38c6ec1677fea90e023b0a5429b3d00805fd88cb25820b781ce1e0111f2af4e9515ef6d437f7a9fb4148496f399b9ae48ed34b4154e02c2525f160ee22d27df7015474f10fdd44abe406592ec811129c134d8a71d90fc898530fbd6e27ef595bcb1b3379c510814991703a083fdec1d223795656eebe87da9b2a0ffaffdcb"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r6, &(0x7f0000000580)=ANY=[@ANYRES8=r6, @ANYRES8=r6], 0xb0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80000, 0x0) dup3(r7, r6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="024666f774c71ffb1cb2f98f10e9823dbc7ed3449830bca5c557ced93624e27801a1058304", @ANYRES32=0x0, @ANYBLOB="0008000007500500280012800b00010062726964676500001800028005001900020000000c0023000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 620.099735ms ago: executing program 0 (id=410): syz_usb_connect(0x6, 0x7a, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x280880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x84}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) r9 = io_uring_setup(0x14f9, &(0x7f00000003c0)={0x0, 0xd31, 0x100, 0x7, 0x1d2}) futex(&(0x7f0000000b40)=0x1, 0xb, 0x1, 0x0, &(0x7f0000000bc0), 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xffff, 0xf}, {0xffe0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_RATE={0x6, 0x5, {0x6, 0xfb}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x0, 0x9, 0x1, 0xc, 0xc, 0x4}}, {0xc, 0x2, [0xfffb, 0x7, 0x5, 0x40]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) mount$afs(&(0x7f00000002c0)=@cell={0x23, 'syz0:', 'syz0', '.readonly'}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x20000, &(0x7f0000000400)={[{@flock_openafs}], [{@appraise_type}, {@dont_appraise}]}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 410.035023ms ago: executing program 3 (id=411): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0xbb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8eR_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96\xdf\r5\x9a', 0x1) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x810) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002080)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000000340)={0x0}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={r9, 0x1000, &(0x7f0000002a80)=""/4096}) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) 169.949262ms ago: executing program 3 (id=412): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x800039e, 0x4000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000002640)=0x8) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x7, 0x149101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) lseek(r4, 0x100, 0x1) syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000340)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="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", 0xffffffffffffffaa) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000002680)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on}, {@verity_require}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x5df002, 0x1fb) writev(r6, &(0x7f0000000140)=[{&(0x7f00000003c0)="10", 0x1}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 49.565903ms ago: executing program 2 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x2, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x300}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 0s ago: executing program 2 (id=414): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44080) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x1ac, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_ct={0xcc, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xfffffffe, 0xf}}]}, {0x8c, 0x6, "9c1314044d81036666f262f8373419d83bfab2b11e212e5a3e002e36a263d02e79df5ad13ab141de397690197fb2a092970468d635828a36e72264cc0ed508dd2f673d43a2de8a36babe4f0600b87322c23826691e7ec22211bb5bf7c456913e30a67375453571853c6dc6f6c6134aa8711ba6c0143f8ddeab60e91bb60927626b16958151e99ffa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x38, 0x6, 0x3, "000000010034b52ba75066c27891ca55e21f0000000000e7ffffff000200", 0x30323950}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x29, &(0x7f0000005fc0), &(0x7f0000006000)=0xc) read$dsp(r6, &(0x7f0000000000)=""/40, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000000c0)={0x1, 0x42, 0x101}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58786' (ED25519) to the list of known hosts. [ 42.048071][ T5860] cgroup: Unknown subsys name 'net' [ 42.213573][ T5860] cgroup: Unknown subsys name 'cpuset' [ 42.218709][ T5860] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.065738][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.251567][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.255156][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.257502][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.260329][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.262925][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.265259][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.268484][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.268567][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.271448][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.271520][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.272422][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.272820][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.273666][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.274564][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.274928][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.275522][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.275911][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.278902][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.290570][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.299818][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.541251][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.547933][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 46.700348][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.791293][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 46.799318][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.802307][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.804706][ T5949] bridge_slave_0: entered allmulticast mode [ 46.807331][ T5949] bridge_slave_0: entered promiscuous mode [ 46.827422][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.829745][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.833091][ T5954] bridge_slave_0: entered allmulticast mode [ 46.835651][ T5954] bridge_slave_0: entered promiscuous mode [ 46.865748][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.868017][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.870253][ T5949] bridge_slave_1: entered allmulticast mode [ 46.872953][ T5949] bridge_slave_1: entered promiscuous mode [ 46.892714][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.894936][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.897147][ T5954] bridge_slave_1: entered allmulticast mode [ 46.899724][ T5954] bridge_slave_1: entered promiscuous mode [ 46.973673][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.975963][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.978204][ T5944] bridge_slave_0: entered allmulticast mode [ 46.980911][ T5944] bridge_slave_0: entered promiscuous mode [ 46.988512][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.993015][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.996126][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.998485][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.000823][ T5944] bridge_slave_1: entered allmulticast mode [ 47.003429][ T5944] bridge_slave_1: entered promiscuous mode [ 47.020522][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.024899][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.103159][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.148678][ T5954] team0: Port device team_slave_0 added [ 47.152058][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.171141][ T5949] team0: Port device team_slave_0 added [ 47.174604][ T5954] team0: Port device team_slave_1 added [ 47.204049][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.206373][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.208720][ T5948] bridge_slave_0: entered allmulticast mode [ 47.212638][ T5948] bridge_slave_0: entered promiscuous mode [ 47.216448][ T5949] team0: Port device team_slave_1 added [ 47.233840][ T5944] team0: Port device team_slave_0 added [ 47.236156][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.239168][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.242229][ T5948] bridge_slave_1: entered allmulticast mode [ 47.245836][ T5948] bridge_slave_1: entered promiscuous mode [ 47.277799][ T5944] team0: Port device team_slave_1 added [ 47.336026][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.338251][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.346310][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.377287][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.379688][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.388064][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.392288][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.394596][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.402977][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.406926][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.409658][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.420170][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.427051][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.433978][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.437407][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.439654][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.447726][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.456214][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.458381][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.466430][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.519726][ T5948] team0: Port device team_slave_0 added [ 47.523187][ T5948] team0: Port device team_slave_1 added [ 47.620056][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.622534][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.630918][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.652020][ T5954] hsr_slave_0: entered promiscuous mode [ 47.654393][ T5954] hsr_slave_1: entered promiscuous mode [ 47.659250][ T5949] hsr_slave_0: entered promiscuous mode [ 47.661540][ T5949] hsr_slave_1: entered promiscuous mode [ 47.663618][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.666102][ T5949] Cannot create hsr debugfs directory [ 47.668242][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.670502][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.678700][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.705416][ T5944] hsr_slave_0: entered promiscuous mode [ 47.707734][ T5944] hsr_slave_1: entered promiscuous mode [ 47.709782][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.712259][ T5944] Cannot create hsr debugfs directory [ 47.874679][ T5948] hsr_slave_0: entered promiscuous mode [ 47.876876][ T5948] hsr_slave_1: entered promiscuous mode [ 47.879001][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.882271][ T5948] Cannot create hsr debugfs directory [ 48.111332][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.118885][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.124511][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.133199][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.155324][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.160346][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.168198][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.172600][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.206026][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.210325][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.216704][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.220709][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.281309][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.286000][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.297620][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.302324][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.314202][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.321510][ T67] Bluetooth: hci3: command tx timeout [ 48.331805][ T67] Bluetooth: hci1: command tx timeout [ 48.331845][ T5303] Bluetooth: hci0: command tx timeout [ 48.331883][ T5960] Bluetooth: hci2: command tx timeout [ 48.350546][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.358538][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.360960][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.371348][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.374238][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.385303][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.411131][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.444379][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.450267][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.467447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.469700][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.473087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.475324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.491087][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.493347][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.496455][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.498728][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.507729][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.530884][ T5954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.534178][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.560387][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.570395][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.572911][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.585265][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.587577][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.612842][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.638223][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.675593][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.681939][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.692653][ T5949] veth0_vlan: entered promiscuous mode [ 48.706380][ T5949] veth1_vlan: entered promiscuous mode [ 48.742657][ T5954] veth0_vlan: entered promiscuous mode [ 48.748302][ T5948] veth0_vlan: entered promiscuous mode [ 48.754461][ T5949] veth0_macvtap: entered promiscuous mode [ 48.765365][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.768989][ T5949] veth1_macvtap: entered promiscuous mode [ 48.774069][ T5954] veth1_vlan: entered promiscuous mode [ 48.782326][ T5948] veth1_vlan: entered promiscuous mode [ 48.794096][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.805288][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.810684][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.814415][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.817172][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.819882][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.843395][ T5954] veth0_macvtap: entered promiscuous mode [ 48.852837][ T5944] veth0_vlan: entered promiscuous mode [ 48.858078][ T5954] veth1_macvtap: entered promiscuous mode [ 48.867746][ T5948] veth0_macvtap: entered promiscuous mode [ 48.887882][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.888028][ T5944] veth1_vlan: entered promiscuous mode [ 48.890450][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.894332][ T5948] veth1_macvtap: entered promiscuous mode [ 48.908849][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.913968][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.919002][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.934372][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.937687][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.941602][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.945582][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.948903][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.952198][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.955409][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.961011][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.967314][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.972359][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.976101][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.980085][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.985259][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.988493][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.991533][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.994251][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.996972][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.001419][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.004147][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.006458][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.009925][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013690][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.016656][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.035983][ T5944] veth0_macvtap: entered promiscuous mode [ 49.043666][ T5944] veth1_macvtap: entered promiscuous mode [ 49.067813][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.071775][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.075032][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.078514][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.082145][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.085615][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.090181][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.100104][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.107681][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.111759][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.115005][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.118522][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.122431][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.125814][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.129927][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.136119][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.136298][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.138747][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.142459][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.147808][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.150944][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.172873][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.175654][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.202287][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.205362][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.228806][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.229429][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.231802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.238755][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.264336][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.267513][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.570827][ T6010] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.723846][ T6010] usb 7-1: config 0 has no interfaces? [ 49.725866][ T6010] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.729097][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.752168][ T6010] usb 7-1: config 0 descriptor?? [ 49.756925][ T6036] bridge0: port 3(netdevsim0) entered blocking state [ 49.760230][ T6036] bridge0: port 3(netdevsim0) entered disabled state [ 49.764192][ T6036] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 49.773714][ T6036] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 49.778200][ T6036] bridge0: port 3(netdevsim0) entered blocking state [ 49.780619][ T6036] bridge0: port 3(netdevsim0) entered forwarding state [ 49.967035][ T6010] usb 7-1: USB disconnect, device number 2 [ 50.400864][ T5303] Bluetooth: hci0: command tx timeout [ 50.401279][ T5960] Bluetooth: hci1: command tx timeout [ 50.401300][ T5957] Bluetooth: hci2: command tx timeout [ 50.406332][ T67] Bluetooth: hci3: command tx timeout [ 50.656773][ T6047] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 50.706893][ T6047] Zero length message leads to an empty skb [ 51.268042][ T6063] syz.3.15: attempt to access beyond end of device [ 51.268042][ T6063] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 51.272721][ T6063] syz.3.15: attempt to access beyond end of device [ 51.272721][ T6063] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 51.277261][ T6063] Mount JFS Failure: -5 [ 51.392287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.472293][ T6050] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 51.688918][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.716345][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 51.870602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.991168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.031227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.480899][ T67] Bluetooth: hci2: command tx timeout [ 52.481094][ T5960] Bluetooth: hci3: command tx timeout [ 52.481104][ T5303] Bluetooth: hci1: command tx timeout [ 52.485158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.490878][ T5960] Bluetooth: hci0: command tx timeout [ 53.161222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.351779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.355052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.357896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.360691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.519577][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 53.968307][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 54.562155][ T5960] Bluetooth: hci0: command tx timeout [ 54.562582][ T67] Bluetooth: hci2: command tx timeout [ 54.563899][ T5960] Bluetooth: hci1: command tx timeout [ 54.565663][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 54.634972][ T6126] netlink: 'syz.1.27': attribute type 23 has an invalid length. [ 54.908077][ T6138] 9pnet_fd: Insufficient options for proto=fd [ 55.618503][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 55.622018][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33'. [ 55.625262][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 55.628583][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 56.204975][ T6165] random: crng reseeded on system resumption [ 56.296965][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 56.575297][ T6178] lo speed is unknown, defaulting to 1000 [ 56.577976][ T6178] lo speed is unknown, defaulting to 1000 [ 56.586870][ T6178] lo speed is unknown, defaulting to 1000 [ 56.611104][ T6178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.642457][ T6178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.653705][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 56.676659][ T6178] lo speed is unknown, defaulting to 1000 [ 56.679454][ T6178] lo speed is unknown, defaulting to 1000 [ 56.689741][ T6178] lo speed is unknown, defaulting to 1000 [ 56.693478][ T6178] lo speed is unknown, defaulting to 1000 [ 56.698113][ T6178] lo speed is unknown, defaulting to 1000 [ 57.523954][ T6193] 9pnet_fd: p9_fd_create_unix (6193): problem connecting socket: ./file0/file0: -2 [ 57.705072][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 57.864644][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 58.016343][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'. [ 58.020567][ T6194] bridge0: port 3(netdevsim0) entered disabled state [ 58.023025][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.026120][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.522499][ T40] audit: type=1326 audit(1744912720.578:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.532321][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.50'. [ 58.551184][ T40] audit: type=1326 audit(1744912720.588:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.558368][ T40] audit: type=1326 audit(1744912720.588:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.604601][ T40] audit: type=1326 audit(1744912720.588:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.611745][ T40] audit: type=1326 audit(1744912720.588:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.618465][ T40] audit: type=1326 audit(1744912720.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.629395][ T40] audit: type=1326 audit(1744912720.588:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.638348][ T40] audit: type=1326 audit(1744912720.588:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.645731][ T40] audit: type=1326 audit(1744912720.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 58.654704][ T40] audit: type=1326 audit(1744912720.588:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.50" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 59.485180][ T6220] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 59.943964][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55'. [ 60.034342][ T6241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.138546][ T6241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.214182][ T6241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.281940][ T6241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.387392][ T6241] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.396151][ T6241] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.403585][ T6241] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.409943][ T6241] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.609798][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.019166][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 61.784584][ T6266] syz.0.64: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.790248][ T6266] CPU: 3 UID: 0 PID: 6266 Comm: syz.0.64 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 61.790266][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.790272][ T6266] Call Trace: [ 61.790278][ T6266] [ 61.790283][ T6266] dump_stack_lvl+0x16c/0x1f0 [ 61.790303][ T6266] warn_alloc+0x248/0x3a0 [ 61.790322][ T6266] ? __pfx_warn_alloc+0x10/0x10 [ 61.790342][ T6266] ? find_held_lock+0x2b/0x80 [ 61.790358][ T6266] ? __might_fault+0xe3/0x190 [ 61.790374][ T6266] ? __might_fault+0xe3/0x190 [ 61.790389][ T6266] ? __might_fault+0x13b/0x190 [ 61.790408][ T6266] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 61.790424][ T6266] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 61.790441][ T6266] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 61.790460][ T6266] ? compat_do_replace+0x1af/0x7c0 [ 61.790482][ T6266] ? __asan_memcpy+0x3c/0x60 [ 61.790500][ T6266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.790518][ T6266] ? compat_do_replace+0x1af/0x7c0 [ 61.790535][ T6266] vmalloc_noprof+0x6b/0x90 [ 61.790548][ T6266] ? compat_do_replace+0x1af/0x7c0 [ 61.790565][ T6266] compat_do_replace+0x1af/0x7c0 [ 61.790584][ T6266] ? __pfx_compat_do_replace+0x10/0x10 [ 61.790600][ T6266] ? aa_get_newest_label+0x375/0x680 [ 61.790613][ T6266] ? __pfx_aa_get_newest_label+0x10/0x10 [ 61.790629][ T6266] ? bpf_lsm_capable+0x9/0x10 [ 61.790644][ T6266] ? security_capable+0x7e/0x260 [ 61.790656][ T6266] do_ebt_set_ctl+0x429/0x4d0 [ 61.790672][ T6266] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 61.790689][ T6266] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 61.790704][ T6266] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 61.790720][ T6266] nf_setsockopt+0x8a/0xf0 [ 61.790752][ T6266] ip_setsockopt+0xcb/0xf0 [ 61.790766][ T6266] tcp_setsockopt+0xa4/0x100 [ 61.790783][ T6266] smc_setsockopt+0x1b3/0xa00 [ 61.790795][ T6266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 61.790816][ T6266] ? __pfx_smc_setsockopt+0x10/0x10 [ 61.790828][ T6266] ? kfree+0x252/0x4d0 [ 61.790844][ T6266] ? __pfx_smc_setsockopt+0x10/0x10 [ 61.790855][ T6266] do_sock_setsockopt+0x221/0x470 [ 61.790870][ T6266] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 61.790893][ T6266] __sys_setsockopt+0x1a0/0x230 [ 61.790909][ T6266] __ia32_sys_setsockopt+0xbc/0x160 [ 61.790921][ T6266] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.790936][ T6266] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 61.790952][ T6266] __do_fast_syscall_32+0x73/0x120 [ 61.790968][ T6266] do_fast_syscall_32+0x32/0x80 [ 61.790983][ T6266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.790997][ T6266] RIP: 0023:0xf7fe7579 [ 61.791006][ T6266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.791016][ T6266] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 61.791027][ T6266] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 61.791033][ T6266] RDX: 0000000000000080 RSI: 0000000080000180 RDI: 00000000000000e0 [ 61.791039][ T6266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.791045][ T6266] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 61.791050][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.791062][ T6266] [ 61.904453][ C3] vkms_vblank_simulate: vblank timer overrun [ 61.909762][ T6266] Mem-Info: [ 61.928389][ T6266] active_anon:5805 inactive_anon:0 isolated_anon:0 [ 61.928389][ T6266] active_file:1271 inactive_file:38165 isolated_file:0 [ 61.928389][ T6266] unevictable:1768 dirty:367 writeback:0 [ 61.928389][ T6266] slab_reclaimable:9743 slab_unreclaimable:53878 [ 61.928389][ T6266] mapped:24507 shmem:2485 pagetables:840 [ 61.928389][ T6266] sec_pagetables:301 bounce:0 [ 61.928389][ T6266] kernel_misc_reclaimable:0 [ 61.928389][ T6266] free:62341 free_pcp:2287 free_cma:0 [ 61.943275][ T6266] Node 0 active_anon:3028kB inactive_anon:0kB active_file:60kB inactive_file:16460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5988kB dirty:12kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9024kB pagetables:824kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 61.957118][ T6266] Node 1 active_anon:20192kB inactive_anon:0kB active_file:5024kB inactive_file:136200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92040kB dirty:1456kB writeback:0kB shmem:5764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2856kB pagetables:2436kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB [ 61.973370][ T6266] Node 0 DMA free:3336kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 62.009704][ T6266] lowmem_reserve[]: 0 290 290 290 290 [ 62.017351][ T6266] Node 0 DMA32 free:26188kB boost:8192kB min:21528kB low:24860kB high:28192kB reserved_highatomic:4096KB active_anon:3028kB inactive_anon:0kB active_file:60kB inactive_file:16460kB unevictable:3536kB writepending:12kB present:1032196kB managed:297472kB mlocked:0kB bounce:0kB free_pcp:1292kB local_pcp:296kB free_cma:0kB [ 62.046441][ T6266] lowmem_reserve[]: 0 0 0 0 0 [ 62.050696][ T6266] Node 1 DMA32 free:198452kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:34324kB inactive_anon:0kB active_file:5024kB inactive_file:136200kB unevictable:3536kB writepending:1456kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:14644kB local_pcp:2712kB free_cma:0kB [ 62.054199][ T6274] lo speed is unknown, defaulting to 1000 [ 62.064317][ T6274] lo speed is unknown, defaulting to 1000 [ 62.068217][ T6274] lo speed is unknown, defaulting to 1000 [ 62.086174][ T6274] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.111462][ T6266] lowmem_reserve[]: 0 0 0 0 0 [ 62.113065][ T6266] Node 0 DMA: 62*4kB (UE) 40*8kB (U) 21*16kB (U) 14*32kB (UE) 3*64kB (UE) 2*128kB (UE) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 3336kB [ 62.118010][ T6266] Node 0 DMA32: 773*4kB (UEH) 163*8kB (UMEH) 62*16kB (UMH) 222*32kB (UMEH) 76*64kB (UMEH) 29*128kB (UMEH) 6*256kB (UM) 7*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26188kB [ 62.126406][ T6266] Node 1 DMA32: 3*4kB (UM) 22*8kB (UME) 18*16kB (UME) 43*32kB (UME) 54*64kB (UME) 27*128kB (UME) 31*256kB (UM) 21*512kB (UME) 13*1024kB (UME) 6*2048kB (UME) 37*4096kB (M) = 204604kB [ 62.135085][ T6266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.136595][ T6274] lo speed is unknown, defaulting to 1000 [ 62.139641][ T6266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.144270][ T6274] lo speed is unknown, defaulting to 1000 [ 62.145310][ T6266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.150069][ T6266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.150275][ T6274] lo speed is unknown, defaulting to 1000 [ 62.155378][ T6266] 44776 total pagecache pages [ 62.157571][ T6266] 0 pages in swap cache [ 62.159071][ T6266] Free swap = 124996kB [ 62.159236][ T6274] lo speed is unknown, defaulting to 1000 [ 62.160584][ T6266] Total swap = 124996kB [ 62.167420][ T6266] 524155 pages RAM [ 62.168751][ T6266] 0 pages HighMem/MovableOnly [ 62.170491][ T6266] 208876 pages reserved [ 62.172801][ T6266] 0 pages cma reserved [ 62.467105][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 62.916155][ T6293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.920121][ T6293] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 62.946241][ T6293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.948314][ T6293] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 62.972035][ T6293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.975074][ T6293] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 62.988544][ T6293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.990539][ T6293] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 63.512585][ T6320] ALSA: mixer_oss: invalid OSS volume '' [ 64.172347][ T6347] netlink: 48 bytes leftover after parsing attributes in process `syz.1.75'. [ 64.427543][ T6355] efs: device does not support 512 byte blocks [ 64.430181][ T6355] device does not support 512 byte blocks [ 64.430181][ T6355] [ 64.890610][ T6365] input: syz1 as /devices/virtual/input/input12 [ 64.906552][ T6365] bridge0: port 3(vlan2) entered blocking state [ 64.908717][ T6365] bridge0: port 3(vlan2) entered disabled state [ 64.911317][ T6365] vlan2: entered allmulticast mode [ 64.913021][ T6365] bridge0: entered allmulticast mode [ 64.916061][ T6365] vlan2: left allmulticast mode [ 64.917634][ T6365] bridge0: left allmulticast mode [ 65.136288][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 65.399190][ T6381] netlink: 'syz.3.85': attribute type 8 has an invalid length. [ 66.039075][ T6388] ALSA: seq fatal error: cannot create timer (-19) [ 66.940108][ T6400] netlink: 244 bytes leftover after parsing attributes in process `syz.0.90'. [ 66.979934][ T6402] lo speed is unknown, defaulting to 1000 [ 66.987702][ T6402] lo speed is unknown, defaulting to 1000 [ 67.185030][ T6407] lo speed is unknown, defaulting to 1000 [ 67.187651][ T6407] lo speed is unknown, defaulting to 1000 [ 67.684190][ T6413] siw: device registration error -23 [ 68.341488][ T6430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.388562][ T6430] No such timeout policy "syz1" [ 68.969107][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.97'. [ 69.400504][ T6444] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 69.487521][ T6444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.491815][ T6444] bond1: (slave bond2): making interface the new active one [ 69.495278][ T6444] bond1: (slave bond2): Enslaving as an active interface with an up link [ 69.516900][ T6444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 69.530463][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 69.796193][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 70.256536][ T6454] siw: device registration error -23 [ 70.307257][ T6456] capability: warning: `syz.1.101' uses 32-bit capabilities (legacy support in use) [ 70.730553][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 71.339294][ T6485] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.620890][ T5950] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.794402][ T5950] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 71.797723][ T5950] usb 5-1: config 0 has no interface number 0 [ 71.806747][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.817404][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 71.826907][ T5950] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 71.831993][ T5950] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 71.836569][ T5950] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.842673][ T5950] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.846318][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.961384][ T5950] usb 5-1: config 0 descriptor?? [ 71.964307][ T6490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.992081][ T5950] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 72.075360][ T6500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.112'. [ 72.144009][ T6500] wireguard0: entered promiscuous mode [ 72.146502][ T6500] wireguard0: entered allmulticast mode [ 72.428657][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 73.025927][ T6010] IPVS: starting estimator thread 0... [ 73.121031][ T6506] IPVS: using max 42 ests per chain, 100800 per kthread [ 74.229864][ T6518] lo speed is unknown, defaulting to 1000 [ 74.233098][ T6518] lo speed is unknown, defaulting to 1000 [ 74.503994][ T29] usb 5-1: USB disconnect, device number 2 [ 74.535182][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 74.607142][ T6516] mkiss: ax0: crc mode is auto. [ 74.706984][ T6524] mkiss: ax0: crc mode is auto. [ 75.059580][ T6537] wireguard0: entered promiscuous mode [ 75.062119][ T6537] wireguard0: entered allmulticast mode [ 75.747456][ T6566] netlink: 'syz.0.125': attribute type 8 has an invalid length. [ 75.813659][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 76.015333][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.018469][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.486123][ T6578] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 76.488323][ T6578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.492499][ T6578] vhci_hcd vhci_hcd.0: Device attached [ 76.501845][ T6579] usbip_core: unknown command [ 76.503338][ T6579] vhci_hcd: unknown pdu 67108864 [ 76.504898][ T6579] usbip_core: unknown command [ 76.508083][ T46] vhci_hcd: stop threads [ 76.509597][ T46] vhci_hcd: release socket [ 76.511561][ T46] vhci_hcd: disconnect device [ 76.765265][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 77.095769][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 77.175885][ T6601] netlink: 'syz.1.134': attribute type 8 has an invalid length. [ 78.102791][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.230323][ T6625] 9pnet_virtio: no channels available for device syz [ 78.493001][ T6630] Invalid ELF header type: 3 != 1 [ 78.639963][ T6634] warning: `syz.2.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.707273][ T6638] FAULT_INJECTION: forcing a failure. [ 78.707273][ T6638] name failslab, interval 1, probability 0, space 0, times 1 [ 78.716376][ T6638] CPU: 2 UID: 0 PID: 6638 Comm: syz.2.144 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 78.716407][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.716415][ T6638] Call Trace: [ 78.716420][ T6638] [ 78.716424][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 78.716447][ T6638] should_fail_ex+0x512/0x640 [ 78.716461][ T6638] ? fs_reclaim_acquire+0xae/0x150 [ 78.716477][ T6638] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 78.716494][ T6638] should_failslab+0xc2/0x120 [ 78.716506][ T6638] __kmalloc_noprof+0xd2/0x510 [ 78.716528][ T6638] tomoyo_realpath_from_path+0xc2/0x6e0 [ 78.716545][ T6638] ? tomoyo_profile+0x47/0x60 [ 78.716565][ T6638] tomoyo_path_number_perm+0x245/0x580 [ 78.716592][ T6638] ? tomoyo_path_number_perm+0x237/0x580 [ 78.716613][ T6638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.716632][ T6638] ? find_held_lock+0x2b/0x80 [ 78.716676][ T6638] ? find_held_lock+0x2b/0x80 [ 78.716696][ T6638] ? hook_file_ioctl_common+0x145/0x410 [ 78.716718][ T6638] ? __fget_files+0x20e/0x3c0 [ 78.716748][ T6638] security_file_ioctl_compat+0x9b/0x240 [ 78.716772][ T6638] __do_compat_sys_ioctl+0x4e/0x2c0 [ 78.716796][ T6638] __do_fast_syscall_32+0x73/0x120 [ 78.716822][ T6638] do_fast_syscall_32+0x32/0x80 [ 78.716848][ T6638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.716869][ T6638] RIP: 0023:0xf7f05579 [ 78.716882][ T6638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.716899][ T6638] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 78.716917][ T6638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b04 [ 78.716928][ T6638] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.716937][ T6638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.716947][ T6638] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.716957][ T6638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.716979][ T6638] [ 78.718514][ T6638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.745322][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 79.110187][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 79.260907][ T6652] dccp_close: ABORT with 1 bytes unread [ 79.323324][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 79.408354][ T40] kauditd_printk_skb: 775 callbacks suppressed [ 79.408368][ T40] audit: type=1326 audit(1744912741.458:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.420838][ T40] audit: type=1326 audit(1744912741.458:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.429397][ T40] audit: type=1326 audit(1744912741.458:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.438600][ T40] audit: type=1326 audit(1744912741.458:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.446237][ T40] audit: type=1326 audit(1744912741.458:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.455268][ T40] audit: type=1326 audit(1744912741.458:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.464440][ T40] audit: type=1326 audit(1744912741.458:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.473891][ T40] audit: type=1326 audit(1744912741.458:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.482643][ T40] audit: type=1326 audit(1744912741.458:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.490909][ T40] audit: type=1326 audit(1744912741.458:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.152" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 79.586583][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.732699][ T63] usb 8-1: device descriptor read/64, error -71 [ 79.967996][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 80.001000][ T63] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.023300][ T6677] lo speed is unknown, defaulting to 1000 [ 80.026760][ T6677] lo speed is unknown, defaulting to 1000 [ 80.131720][ T63] usb 8-1: device descriptor read/64, error -71 [ 80.251153][ T63] usb usb8-port1: attempt power cycle [ 80.377610][ T6690] FAULT_INJECTION: forcing a failure. [ 80.377610][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 80.382727][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.1.160 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 80.382749][ T6690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.382758][ T6690] Call Trace: [ 80.382762][ T6690] [ 80.382781][ T6690] dump_stack_lvl+0x16c/0x1f0 [ 80.382813][ T6690] should_fail_ex+0x512/0x640 [ 80.382834][ T6690] ? fs_reclaim_acquire+0xae/0x150 [ 80.382855][ T6690] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.382876][ T6690] should_failslab+0xc2/0x120 [ 80.382892][ T6690] __kmalloc_noprof+0xd2/0x510 [ 80.382922][ T6690] tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.382946][ T6690] ? tomoyo_profile+0x47/0x60 [ 80.382974][ T6690] tomoyo_path_perm+0x274/0x460 [ 80.382992][ T6690] ? tomoyo_path_perm+0x260/0x460 [ 80.383013][ T6690] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 80.383059][ T6690] ? hook_file_truncate+0xc7/0x250 [ 80.383083][ T6690] security_file_truncate+0x84/0x1e0 [ 80.383107][ T6690] do_ftruncate+0x218/0x960 [ 80.383130][ T6690] ? __pfx_do_ftruncate+0x10/0x10 [ 80.383150][ T6690] ? __fput_deferred+0x320/0x370 [ 80.383172][ T6690] do_sys_ftruncate+0x61/0xa0 [ 80.383196][ T6690] __ia32_compat_sys_ftruncate+0x5b/0x80 [ 80.383219][ T6690] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 80.383244][ T6690] __do_fast_syscall_32+0x73/0x120 [ 80.383269][ T6690] do_fast_syscall_32+0x32/0x80 [ 80.383291][ T6690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.383311][ T6690] RIP: 0023:0xf70ee579 [ 80.383332][ T6690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.383348][ T6690] RSP: 002b:00000000f50bd55c EFLAGS: 00000296 ORIG_RAX: 000000000000005d [ 80.383363][ T6690] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 80.383373][ T6690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.383382][ T6690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.383392][ T6690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.383401][ T6690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.383417][ T6690] [ 80.383441][ T6690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.601893][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.622389][ T63] usb 8-1: device descriptor read/8, error -71 [ 80.859943][ T6711] lo speed is unknown, defaulting to 1000 [ 80.864873][ T6711] lo speed is unknown, defaulting to 1000 [ 80.871038][ T63] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.892371][ T63] usb 8-1: device descriptor read/8, error -71 [ 81.001517][ T63] usb usb8-port1: unable to enumerate USB device [ 81.679095][ T6734] ALSA: mixer_oss: invalid OSS volume '' [ 81.902956][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 81.998400][ T6748] siw: device registration error -23 [ 82.094946][ T6754] ALSA: mixer_oss: invalid OSS volume '' [ 82.707142][ T6776] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 82.960931][ T63] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 83.113774][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.123227][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 83.128169][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 83.137792][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.143729][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.151948][ T63] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 83.155044][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.158573][ T63] usb 5-1: Product: syz [ 83.160634][ T63] usb 5-1: Manufacturer: syz [ 83.166491][ T63] usb 5-1: SerialNumber: syz [ 83.173934][ T63] usb 5-1: config 0 descriptor?? [ 83.190148][ T63] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 83.392804][ T6784] ALSA: mixer_oss: invalid OSS volume '' [ 83.568513][ T6792] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 83.760585][ T6775] ======================================================= [ 83.760585][ T6775] WARNING: The mand mount option has been deprecated and [ 83.760585][ T6775] and is ignored by this kernel. Remove the mand [ 83.760585][ T6775] option from the mount to silence this warning. [ 83.760585][ T6775] ======================================================= [ 83.811487][ T834] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 83.903670][ T6782] syz.2.184: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.909133][ T6782] CPU: 3 UID: 0 PID: 6782 Comm: syz.2.184 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 83.909170][ T6782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.909181][ T6782] Call Trace: [ 83.909187][ T6782] [ 83.909194][ T6782] dump_stack_lvl+0x16c/0x1f0 [ 83.909224][ T6782] warn_alloc+0x248/0x3a0 [ 83.909252][ T6782] ? __pfx_warn_alloc+0x10/0x10 [ 83.909276][ T6782] ? psi_group_change+0x6dc/0xd20 [ 83.909307][ T6782] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 83.909332][ T6782] ? psi_memstall_leave+0x1e1/0x2d0 [ 83.909357][ T6782] ? psi_memstall_leave+0x1e6/0x2d0 [ 83.909383][ T6782] __alloc_frozen_pages_noprof+0x141a/0x23a0 [ 83.909418][ T6782] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 83.909448][ T6782] ? irqentry_exit+0x3b/0x90 [ 83.909468][ T6782] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.909490][ T6782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.909506][ T6782] ? policy_nodemask+0xea/0x4e0 [ 83.909521][ T6782] alloc_pages_mpol+0x1fb/0x550 [ 83.909535][ T6782] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.909553][ T6782] alloc_pages_noprof+0x131/0x390 [ 83.909566][ T6782] kimage_alloc_pages+0x75/0x300 [ 83.909586][ T6782] kimage_alloc_control_pages+0x15d/0x910 [ 83.909607][ T6782] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 83.909628][ T6782] do_kexec_load+0x480/0x8d0 [ 83.909645][ T6782] ? __pfx_do_kexec_load+0x10/0x10 [ 83.909692][ T6782] __do_compat_sys_kexec_load+0x2cd/0x320 [ 83.909711][ T6782] ? __pfx___do_compat_sys_kexec_load+0x10/0x10 [ 83.909727][ T6782] ? rcu_is_watching+0x12/0xc0 [ 83.909746][ T6782] ? rcu_is_watching+0x12/0xc0 [ 83.909764][ T6782] __do_fast_syscall_32+0x73/0x120 [ 83.909786][ T6782] do_fast_syscall_32+0x32/0x80 [ 83.909806][ T6782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.909823][ T6782] RIP: 0023:0xf7f05579 [ 83.909835][ T6782] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.909848][ T6782] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 83.909863][ T6782] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 83.909871][ T6782] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 83.909879][ T6782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.909887][ T6782] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 83.909896][ T6782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.909913][ T6782] [ 83.909939][ T6782] Mem-Info: [ 83.971654][ T834] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.973223][ T6782] active_anon:9425 inactive_anon:4104 isolated_anon:0 [ 83.973223][ T6782] active_file:1409 inactive_file:35628 isolated_file:0 [ 83.973223][ T6782] unevictable:1768 dirty:446 writeback:0 [ 83.973223][ T6782] slab_reclaimable:9850 slab_unreclaimable:53489 [ 83.973223][ T6782] mapped:31254 shmem:10042 pagetables:862 [ 83.973223][ T6782] sec_pagetables:302 bounce:0 [ 83.973223][ T6782] kernel_misc_reclaimable:0 [ 83.973223][ T6782] free:25397 free_pcp:1039 free_cma:0 [ 83.975119][ T834] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 83.976542][ T6782] Node 0 active_anon:3856kB inactive_anon:736kB active_file:716kB inactive_file:9248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6388kB dirty:12kB writeback:0kB shmem:5648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9000kB pagetables:792kB sec_pagetables:1124kB all_unreclaimable? no Balloon:0kB [ 83.983826][ T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 83.986470][ T6782] Node 1 active_anon:33844kB inactive_anon:15680kB active_file:4920kB inactive_file:133264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118628kB dirty:1772kB writeback:0kB shmem:34520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3156kB pagetables:2656kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB [ 83.988979][ T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.992311][ T6782] Node 0 DMA free:3336kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.992346][ T6782] lowmem_reserve[]: 0 290 [ 84.020875][ T834] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.021265][ T6782] 290 [ 84.032404][ T834] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 84.035008][ T6782] 290 [ 84.038110][ T834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048730][ T6782] 290 [ 84.077250][ T6782] Node 0 DMA32 free:25212kB boost:0kB min:13336kB low:16668kB high:20000kB reserved_highatomic:2048KB active_anon:1176kB inactive_anon:4720kB active_file:7152kB inactive_file:2312kB unevictable:3536kB writepending:12kB present:1032196kB managed:297472kB mlocked:0kB bounce:0kB free_pcp:3460kB local_pcp:0kB free_cma:0kB [ 84.080965][ T834] usb 8-1: Product: syz [ 84.090799][ T6782] lowmem_reserve[]: 0 0 0 0 0 [ 84.093119][ T6782] Node 1 DMA32 free:79728kB boost:22528kB min:69676kB low:81460kB high:93244kB reserved_highatomic:0KB active_anon:36644kB inactive_anon:15680kB active_file:5620kB inactive_file:127164kB unevictable:3536kB writepending:1772kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:540kB local_pcp:8kB free_cma:0kB [ 84.096145][ T834] usb 8-1: Manufacturer: syz [ 84.103547][ T6782] lowmem_reserve[]: 0 0 0 0 0 [ 84.105842][ T6782] Node 0 DMA: 61*4kB (UE) 40*8kB (U) 22*16kB (U) 15*32kB (UE) 3*64kB (UE) 2*128kB (UE) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 3380kB [ 84.112850][ T834] usb 8-1: SerialNumber: syz [ 84.115036][ T6782] Node 0 DMA32: 30*4kB (H) 23*8kB (UH) 70*16kB [ 84.115671][ T834] usb 8-1: config 0 descriptor?? [ 84.119542][ T6782] (UH) 204*32kB (UMH) 93*64kB (UM) 36*128kB (UMH) 12*256kB (UM) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 27216kB [ 84.122472][ T834] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 84.126272][ T6782] Node 1 DMA32: 70*4kB (UME) 33*8kB (UME) 14*16kB (UME) 196*32kB (UME) 322*64kB (UME) 81*128kB (UM) 48*256kB (UM) 26*512kB (UM) 13*1024kB (UM) 4*2048kB (UM) 1*4096kB (M) = 89216kB [ 84.135270][ T6782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.138446][ T6782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.142449][ T6782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.145709][ T6782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.149504][ T6782] 44402 total pagecache pages [ 84.151326][ T6782] 0 pages in swap cache [ 84.152659][ T6782] Free swap = 124572kB [ 84.154068][ T6782] Total swap = 124996kB [ 84.156948][ T6782] 524155 pages RAM [ 84.158220][ T6782] 0 pages HighMem/MovableOnly [ 84.161487][ T6782] 208876 pages reserved [ 84.162919][ T6782] 0 pages cma reserved [ 84.735598][ T6782] kexec: Could not allocate control_code_buffer [ 84.765953][ T10] usb 5-1: USB disconnect, device number 3 [ 85.260946][ T6817] ALSA: mixer_oss: invalid OSS volume '' [ 85.373854][ T1332] usb 8-1: USB disconnect, device number 6 [ 85.899040][ T6821] siw: device registration error -23 [ 86.251900][ T1325] cfg80211: failed to load regulatory.db [ 86.325966][ T6842] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.330069][ T6842] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.342928][ T6844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.202'. [ 86.392862][ T6844] wireguard0: entered promiscuous mode [ 86.395015][ T6844] wireguard0: entered allmulticast mode [ 86.972906][ T6855] lo speed is unknown, defaulting to 1000 [ 86.975586][ T6855] lo speed is unknown, defaulting to 1000 [ 87.020450][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 87.327869][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 88.194947][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 88.596931][ T6887] 9pnet_virtio: no channels available for device syz [ 88.612590][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 88.735851][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 88.735861][ T40] audit: type=1326 audit(1744912750.788:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.764572][ T40] audit: type=1326 audit(1744912750.788:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.871706][ T40] audit: type=1326 audit(1744912750.788:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.878106][ T40] audit: type=1326 audit(1744912750.788:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.896588][ T40] audit: type=1326 audit(1744912750.788:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.910929][ T40] audit: type=1326 audit(1744912750.788:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.921009][ T40] audit: type=1326 audit(1744912750.788:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.939216][ T40] audit: type=1326 audit(1744912750.788:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.945783][ T40] audit: type=1326 audit(1744912750.788:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 88.955360][ T40] audit: type=1326 audit(1744912750.788:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.216" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 89.069389][ T6899] tipc: Started in network mode [ 89.071299][ T6899] tipc: Node identity 4, cluster identity 4711 [ 89.073246][ T6899] tipc: Node number set to 4 [ 89.112976][ T6901] lo speed is unknown, defaulting to 1000 [ 89.116149][ T6901] lo speed is unknown, defaulting to 1000 [ 89.404272][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'. [ 90.034817][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 90.135493][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.3.220'. [ 90.153062][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 90.156663][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.337202][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.707678][ T6935] team0 (unregistering): Port device team_slave_0 removed [ 90.729613][ T6935] team0 (unregistering): Port device team_slave_1 removed [ 90.796027][ T6955] ALSA: mixer_oss: invalid OSS volume '' [ 91.187023][ T6963] ALSA: mixer_oss: invalid OSS volume '' [ 91.718737][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'. [ 91.734733][ T6974] ALSA: seq fatal error: cannot create timer (-19) [ 92.419971][ T6986] ALSA: seq fatal error: cannot create timer (-19) [ 92.572167][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 92.819491][ T7006] ALSA: mixer_oss: invalid OSS volume '' [ 93.145520][ T7017] process 'syz.0.243' launched './file0' with NULL argv: empty string added [ 93.784710][ T7037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 93.786829][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.789204][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 93.791164][ T7038] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(19) [ 93.793424][ T7038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.795781][ T7038] vhci_hcd vhci_hcd.0: Device attached [ 94.021843][ T7050] block device autoloading is deprecated and will be removed. [ 94.302974][ T7040] vhci_hcd: connection closed [ 94.303062][ T7039] vhci_hcd: connection closed [ 94.304316][ T1053] vhci_hcd: stop threads [ 94.309398][ T1053] vhci_hcd: release socket [ 94.311037][ T1053] vhci_hcd: disconnect device [ 94.313394][ T1053] vhci_hcd: stop threads [ 94.315179][ T1053] vhci_hcd: release socket [ 94.316753][ T1053] vhci_hcd: disconnect device [ 95.062922][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 95.105890][ T7068] ALSA: mixer_oss: invalid OSS volume '' [ 95.300254][ T7072] ALSA: mixer_oss: invalid OSS volume '' [ 95.349987][ T7066] ALSA: seq fatal error: cannot create timer (-19) [ 95.874686][ T7085] lo speed is unknown, defaulting to 1000 [ 95.877535][ T7085] lo speed is unknown, defaulting to 1000 [ 98.302828][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 98.398422][ T7148] FAULT_INJECTION: forcing a failure. [ 98.398422][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 98.402885][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.2.273 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 98.402900][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.402906][ T7148] Call Trace: [ 98.402910][ T7148] [ 98.402914][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 98.402933][ T7148] should_fail_ex+0x512/0x640 [ 98.402945][ T7148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 98.402963][ T7148] should_failslab+0xc2/0x120 [ 98.402973][ T7148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.402988][ T7148] ? __page_table_check_zero+0x32d/0x5b0 [ 98.403006][ T7148] ? vm_area_dup+0x25/0x760 [ 98.403028][ T7148] vm_area_dup+0x25/0x760 [ 98.403048][ T7148] __split_vma+0x17f/0x1030 [ 98.403066][ T7148] ? __pfx___split_vma+0x10/0x10 [ 98.403087][ T7148] vms_gather_munmap_vmas+0x1c2/0x1310 [ 98.403105][ T7148] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 98.403122][ T7148] ? mas_walk+0x6a6/0x910 [ 98.403141][ T7148] __mmap_region+0x314/0x27c0 [ 98.403158][ T7148] ? __pfx___mmap_region+0x10/0x10 [ 98.403179][ T7148] ? __lock_acquire+0x5ca/0x1ba0 [ 98.403190][ T7148] ? __lock_acquire+0xaa4/0x1ba0 [ 98.403198][ T7148] ? _parse_integer_limit+0x17f/0x1d0 [ 98.403230][ T7148] ? __lock_acquire+0xaa4/0x1ba0 [ 98.403243][ T7148] mmap_region+0x1ab/0x3f0 [ 98.403261][ T7148] do_mmap+0xd8e/0x11b0 [ 98.403275][ T7148] ? __pfx_do_mmap+0x10/0x10 [ 98.403288][ T7148] ? __pfx_down_write_killable+0x10/0x10 [ 98.403306][ T7148] vm_mmap_pgoff+0x281/0x450 [ 98.403325][ T7148] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 98.403340][ T7148] ? __fget_files+0x20e/0x3c0 [ 98.403358][ T7148] ksys_mmap_pgoff+0x32c/0x5c0 [ 98.403369][ T7148] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 98.403383][ T7148] __do_fast_syscall_32+0x73/0x120 [ 98.403400][ T7148] do_fast_syscall_32+0x32/0x80 [ 98.403416][ T7148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.403429][ T7148] RIP: 0023:0xf7f05579 [ 98.403438][ T7148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.403448][ T7148] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 98.403458][ T7148] RAX: ffffffffffffffda RBX: 0000000080002000 RCX: 0000000000002000 [ 98.403464][ T7148] RDX: 0000000000000001 RSI: 0000000000000012 RDI: 0000000000000004 [ 98.403470][ T7148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.403475][ T7148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.403481][ T7148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.403493][ T7148] [ 98.526626][ T7152] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.560626][ T7154] FAULT_INJECTION: forcing a failure. [ 98.560626][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.565193][ T7154] CPU: 3 UID: 0 PID: 7154 Comm: syz.2.276 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 98.565207][ T7154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.565214][ T7154] Call Trace: [ 98.565217][ T7154] [ 98.565222][ T7154] dump_stack_lvl+0x16c/0x1f0 [ 98.565241][ T7154] should_fail_ex+0x512/0x640 [ 98.565255][ T7154] _copy_from_user+0x2e/0xd0 [ 98.565268][ T7154] get_compat_msghdr+0xa7/0x170 [ 98.565283][ T7154] ? __pfx_get_compat_msghdr+0x10/0x10 [ 98.565300][ T7154] ___sys_sendmsg+0x1ae/0x1d0 [ 98.565315][ T7154] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.565342][ T7154] __sys_sendmsg+0x16d/0x220 [ 98.565356][ T7154] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.565373][ T7154] ? rcu_is_watching+0x12/0xc0 [ 98.565388][ T7154] ? rcu_is_watching+0x12/0xc0 [ 98.565402][ T7154] __do_fast_syscall_32+0x73/0x120 [ 98.565419][ T7154] do_fast_syscall_32+0x32/0x80 [ 98.565435][ T7154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.565448][ T7154] RIP: 0023:0xf7f05579 [ 98.565457][ T7154] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.565467][ T7154] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 98.565477][ T7154] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 98.565483][ T7154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.565489][ T7154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.565494][ T7154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.565500][ T7154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.565511][ T7154] [ 98.663852][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 98.668067][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 98.910191][ T7163] FAULT_INJECTION: forcing a failure. [ 98.910191][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 98.939913][ T7163] CPU: 3 UID: 0 PID: 7163 Comm: syz.2.280 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 98.939930][ T7163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.939936][ T7163] Call Trace: [ 98.939940][ T7163] [ 98.939944][ T7163] dump_stack_lvl+0x16c/0x1f0 [ 98.939963][ T7163] should_fail_ex+0x512/0x640 [ 98.939975][ T7163] ? fs_reclaim_acquire+0xae/0x150 [ 98.939989][ T7163] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.940004][ T7163] should_failslab+0xc2/0x120 [ 98.940014][ T7163] __kmalloc_noprof+0xd2/0x510 [ 98.940033][ T7163] tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.940049][ T7163] ? tomoyo_profile+0x47/0x60 [ 98.940066][ T7163] tomoyo_path_number_perm+0x245/0x580 [ 98.940078][ T7163] ? tomoyo_path_number_perm+0x237/0x580 [ 98.940091][ T7163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.940104][ T7163] ? find_held_lock+0x2b/0x80 [ 98.940129][ T7163] ? find_held_lock+0x2b/0x80 [ 98.940141][ T7163] ? hook_file_ioctl_common+0x145/0x410 [ 98.940156][ T7163] ? __fget_files+0x20e/0x3c0 [ 98.940174][ T7163] security_file_ioctl_compat+0x9b/0x240 [ 98.940189][ T7163] __do_compat_sys_ioctl+0x4e/0x2c0 [ 98.940203][ T7163] __do_fast_syscall_32+0x73/0x120 [ 98.940220][ T7163] do_fast_syscall_32+0x32/0x80 [ 98.940236][ T7163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.940249][ T7163] RIP: 0023:0xf7f05579 [ 98.940258][ T7163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.940268][ T7163] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 98.940278][ T7163] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040047457 [ 98.940285][ T7163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.940290][ T7163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.940296][ T7163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.940301][ T7163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.940314][ T7163] [ 98.940318][ T7163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.085944][ T7155] ALSA: mixer_oss: invalid OSS volume '' [ 99.134149][ T7174] lo speed is unknown, defaulting to 1000 [ 99.136620][ T7174] lo speed is unknown, defaulting to 1000 [ 100.014475][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 100.124575][ T7209] wg1: entered promiscuous mode [ 100.126453][ T7209] wg1: entered allmulticast mode [ 100.195689][ T7211] tipc: Started in network mode [ 100.197289][ T7211] tipc: Node identity 4, cluster identity 4711 [ 100.199271][ T7211] tipc: Node number set to 4 [ 100.214816][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 100.302478][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'. [ 100.861320][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 102.423627][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 102.423790][ T40] audit: type=1326 audit(1744912764.478:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.448120][ T40] audit: type=1326 audit(1744912764.488:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.465279][ T40] audit: type=1326 audit(1744912764.488:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.484296][ T40] audit: type=1326 audit(1744912764.488:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.513053][ T40] audit: type=1326 audit(1744912764.488:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.519877][ T40] audit: type=1326 audit(1744912764.488:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.534626][ T40] audit: type=1326 audit(1744912764.488:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.541750][ T40] audit: type=1326 audit(1744912764.488:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.548541][ T40] audit: type=1326 audit(1744912764.488:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 102.556489][ T40] audit: type=1326 audit(1744912764.488:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.302" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 103.628658][ T7266] syz.3.308: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.634184][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.3.308 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 103.634209][ T7266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.634217][ T7266] Call Trace: [ 103.634221][ T7266] [ 103.634225][ T7266] dump_stack_lvl+0x16c/0x1f0 [ 103.634245][ T7266] warn_alloc+0x248/0x3a0 [ 103.634262][ T7266] ? __pfx_warn_alloc+0x10/0x10 [ 103.634278][ T7266] ? alloc_pages_mpol+0x25a/0x550 [ 103.634289][ T7266] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.634299][ T7266] ? trace_kmalloc+0x2b/0xd0 [ 103.634314][ T7266] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 103.634333][ T7266] ? create_io_thread+0xbe/0x100 [ 103.634352][ T7266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.634365][ T7266] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 103.634379][ T7266] ? rcu_is_watching+0x12/0xc0 [ 103.634393][ T7266] ? create_io_thread+0xbe/0x100 [ 103.634408][ T7266] __vmalloc_node_noprof+0x74/0xa0 [ 103.634422][ T7266] ? create_io_thread+0xbe/0x100 [ 103.634437][ T7266] copy_process+0x2ead/0x91a0 [ 103.634452][ T7266] ? do_raw_spin_lock+0x12c/0x2b0 [ 103.634467][ T7266] ? mark_held_locks+0x49/0x80 [ 103.634484][ T7266] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.634498][ T7266] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.634515][ T7266] ? __pfx_copy_process+0x10/0x10 [ 103.634531][ T7266] ? kasan_save_stack+0x42/0x60 [ 103.634546][ T7266] ? kasan_save_stack+0x33/0x60 [ 103.634560][ T7266] ? kasan_save_track+0x14/0x30 [ 103.634574][ T7266] ? __kasan_kmalloc+0xaa/0xb0 [ 103.634587][ T7266] ? create_io_worker+0xc9/0x5b0 [ 103.634596][ T7266] ? io_wq_enqueue+0x5c4/0xa10 [ 103.634605][ T7266] ? io_queue_iowq+0x28a/0x5b0 [ 103.634619][ T7266] ? io_queue_async+0x1e7/0x420 [ 103.634633][ T7266] ? io_submit_sqes+0x1720/0x25d0 [ 103.634649][ T7266] ? __do_sys_io_uring_enter+0xd6a/0x1630 [ 103.634658][ T7266] ? __do_fast_syscall_32+0x73/0x120 [ 103.634673][ T7266] ? do_fast_syscall_32+0x32/0x80 [ 103.634688][ T7266] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.634706][ T7266] ? __pfx_io_wq_worker+0x10/0x10 [ 103.634716][ T7266] create_io_thread+0xbe/0x100 [ 103.634731][ T7266] ? __pfx_create_io_thread+0x10/0x10 [ 103.634750][ T7266] ? __pfx_io_wq_worker+0x10/0x10 [ 103.634760][ T7266] ? lockdep_init_map_type+0x5c/0x280 [ 103.634771][ T7266] ? lockdep_init_map_type+0x5c/0x280 [ 103.634781][ T7266] ? __init_swait_queue_head+0xca/0x150 [ 103.634798][ T7266] ? create_io_worker+0x1f/0x5b0 [ 103.634811][ T7266] create_io_worker+0x1d0/0x5b0 [ 103.634825][ T7266] io_wq_enqueue+0x5c4/0xa10 [ 103.634841][ T7266] ? __pfx_io_wq_enqueue+0x10/0x10 [ 103.634852][ T7266] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 103.634868][ T7266] ? io_prep_async_work+0x54c/0x770 [ 103.634891][ T7266] io_queue_iowq+0x28a/0x5b0 [ 103.634908][ T7266] io_queue_async+0x1e7/0x420 [ 103.634923][ T7266] io_submit_sqes+0x1720/0x25d0 [ 103.634947][ T7266] __do_sys_io_uring_enter+0xd6a/0x1630 [ 103.634959][ T7266] ? __pfx___schedule+0x10/0x10 [ 103.634972][ T7266] ? __fget_files+0x20e/0x3c0 [ 103.634987][ T7266] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 103.635006][ T7266] ? xfd_validate_state+0x5d/0x180 [ 103.635020][ T7266] ? rcu_is_watching+0x12/0xc0 [ 103.635033][ T7266] ? rcu_is_watching+0x12/0xc0 [ 103.635048][ T7266] __do_fast_syscall_32+0x73/0x120 [ 103.635065][ T7266] do_fast_syscall_32+0x32/0x80 [ 103.635080][ T7266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.635093][ T7266] RIP: 0023:0xf7fc2579 [ 103.635102][ T7266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.635114][ T7266] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 103.635124][ T7266] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000000047f6 [ 103.635130][ T7266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.635135][ T7266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.635141][ T7266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.635147][ T7266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.635159][ T7266] [ 103.635188][ T7266] Mem-Info: [ 103.766109][ T7266] active_anon:22013 inactive_anon:60 isolated_anon:0 [ 103.766109][ T7266] active_file:6431 inactive_file:29344 isolated_file:0 [ 103.766109][ T7266] unevictable:1768 dirty:395 writeback:0 [ 103.766109][ T7266] slab_reclaimable:5626 slab_unreclaimable:55769 [ 103.766109][ T7266] mapped:33849 shmem:19143 pagetables:841 [ 103.766109][ T7266] sec_pagetables:306 bounce:0 [ 103.766109][ T7266] kernel_misc_reclaimable:0 [ 103.766109][ T7266] free:50367 free_pcp:4450 free_cma:0 [ 103.780083][ T7266] Node 0 active_anon:7812kB inactive_anon:16kB active_file:576kB inactive_file:1744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6532kB dirty:12kB writeback:0kB shmem:10532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9228kB pagetables:1060kB sec_pagetables:1136kB all_unreclaimable? no Balloon:0kB [ 103.790886][ T7266] Node 1 active_anon:80240kB inactive_anon:224kB active_file:25148kB inactive_file:115632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128864kB dirty:1568kB writeback:0kB shmem:66040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3100kB pagetables:2304kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB [ 103.801266][ T7266] Node 0 DMA free:2024kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:436kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:184kB free_cma:0kB [ 103.809797][ T7266] lowmem_reserve[]: 0 290 290 290 290 [ 103.811643][ T7266] Node 0 DMA32 free:21736kB boost:4096kB min:17432kB low:20764kB high:24096kB reserved_highatomic:2048KB active_anon:7376kB inactive_anon:16kB active_file:576kB inactive_file:1728kB unevictable:3536kB writepending:12kB present:1032196kB managed:297472kB mlocked:0kB bounce:0kB free_pcp:1088kB local_pcp:880kB free_cma:0kB [ 103.820995][ T7266] lowmem_reserve[]: 0 0 0 0 0 [ 103.822657][ T7266] Node 1 DMA32 free:177556kB boost:22528kB min:69676kB low:81460kB high:93244kB reserved_highatomic:0KB active_anon:80240kB inactive_anon:224kB active_file:25148kB inactive_file:115632kB unevictable:3536kB writepending:1568kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:16364kB local_pcp:9480kB free_cma:0kB [ 103.832163][ T7266] lowmem_reserve[]: 0 0 0 0 0 [ 103.833834][ T7266] Node 0 DMA: 32*4kB (UM) 13*8kB (UM) 4*16kB (UM) 14*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2024kB [ 103.838634][ T7266] Node 0 DMA32: 409*4kB (UH) 36*8kB (UME) 57*16kB (UMEH) 154*32kB (UMEH) 70*64kB (UMEH) 34*128kB (UMEH) 8*256kB (MEH) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 21716kB [ 103.844008][ T7266] Node 1 DMA32: 49*4kB (UE) 138*8kB (UME) 198*16kB (UE) 445*32kB (UE) 190*64kB (UME) 68*128kB (UME) 32*256kB (UE) 36*512kB (UME) 31*1024kB (UM) 15*2048kB (UM) 12*4096kB (UME) = 177812kB [ 103.849752][ T7266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.852809][ T7266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.855874][ T7266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.858953][ T7266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.862180][ T7266] 54980 total pagecache pages [ 103.863819][ T7266] 62 pages in swap cache [ 103.865294][ T7266] Free swap = 122208kB [ 103.866768][ T7266] Total swap = 124996kB [ 103.868242][ T7266] 524155 pages RAM [ 103.869599][ T7266] 0 pages HighMem/MovableOnly [ 103.871214][ T7266] 208876 pages reserved [ 103.872624][ T7266] 0 pages cma reserved [ 103.967176][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'. [ 104.880860][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.121011][ T5303] Bluetooth: hci5: command 0x1003 tx timeout [ 105.121149][ T67] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.992453][ T7293] ALSA: mixer_oss: invalid OSS volume '' [ 106.462231][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 106.469289][ T7310] siw: device registration error -23 [ 107.241229][ T7360] FAULT_INJECTION: forcing a failure. [ 107.241229][ T7360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.303621][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.1.322 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 107.303638][ T7360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.303656][ T7360] Call Trace: [ 107.303661][ T7360] [ 107.303665][ T7360] dump_stack_lvl+0x16c/0x1f0 [ 107.303684][ T7360] should_fail_ex+0x512/0x640 [ 107.303699][ T7360] strncpy_from_user+0x3b/0x2e0 [ 107.303712][ T7360] getname_flags.part.0+0x8f/0x550 [ 107.303724][ T7360] ? __pfx_ksys_write+0x10/0x10 [ 107.303740][ T7360] getname_flags+0x93/0xf0 [ 107.303754][ T7360] __ia32_sys_symlinkat+0x86/0xc0 [ 107.303772][ T7360] __do_fast_syscall_32+0x73/0x120 [ 107.303790][ T7360] do_fast_syscall_32+0x32/0x80 [ 107.303810][ T7360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.303823][ T7360] RIP: 0023:0xf70ee579 [ 107.303831][ T7360] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.303841][ T7360] RSP: 002b:00000000f509c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 107.303852][ T7360] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000009 [ 107.303859][ T7360] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.303865][ T7360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.303870][ T7360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.303876][ T7360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.303888][ T7360] [ 107.422352][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 107.951001][ T7372] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 108.873031][ T7391] 9pnet_virtio: no channels available for device syz [ 109.060613][ T7393] FAULT_INJECTION: forcing a failure. [ 109.060613][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.064873][ T7393] CPU: 2 UID: 0 PID: 7393 Comm: syz.1.332 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 109.064888][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.064894][ T7393] Call Trace: [ 109.064898][ T7393] [ 109.064902][ T7393] dump_stack_lvl+0x16c/0x1f0 [ 109.064921][ T7393] should_fail_ex+0x512/0x640 [ 109.064935][ T7393] _copy_from_user+0x2e/0xd0 [ 109.064948][ T7393] __do_compat_sys_socketcall+0x148/0x720 [ 109.064963][ T7393] ? __fget_files+0x20e/0x3c0 [ 109.064980][ T7393] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 109.064995][ T7393] ? xfd_validate_state+0x5d/0x180 [ 109.065008][ T7393] ? rcu_is_watching+0x12/0xc0 [ 109.065022][ T7393] ? rcu_is_watching+0x12/0xc0 [ 109.065036][ T7393] __do_fast_syscall_32+0x73/0x120 [ 109.065053][ T7393] do_fast_syscall_32+0x32/0x80 [ 109.065069][ T7393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.065082][ T7393] RIP: 0023:0xf70ee579 [ 109.065090][ T7393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.065100][ T7393] RSP: 002b:00000000f50dd430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 109.065110][ T7393] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50dd444 [ 109.065116][ T7393] RDX: 0000000000000000 RSI: 00000000f50dd560 RDI: 00000000f7452ff4 [ 109.065122][ T7393] RBP: 00000000f50dd560 R08: 0000000000000000 R09: 0000000000000000 [ 109.065128][ T7393] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 109.065133][ T7393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.065145][ T7393] [ 109.302376][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 110.391589][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 110.391601][ T40] audit: type=1326 audit(1744912772.448:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.419417][ T40] audit: type=1326 audit(1744912772.448:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.436102][ T40] audit: type=1326 audit(1744912772.448:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.456982][ T40] audit: type=1326 audit(1744912772.448:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.468950][ T40] audit: type=1326 audit(1744912772.448:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.477785][ T40] audit: type=1326 audit(1744912772.448:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.486140][ T40] audit: type=1326 audit(1744912772.448:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.493556][ T40] audit: type=1326 audit(1744912772.448:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.500436][ T40] audit: type=1326 audit(1744912772.448:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 110.507637][ T40] audit: type=1326 audit(1744912772.448:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 111.091824][ T7432] netlink: 'syz.0.342': attribute type 2 has an invalid length. [ 111.117592][ T7435] FAULT_INJECTION: forcing a failure. [ 111.117592][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 111.121783][ T7435] CPU: 3 UID: 0 PID: 7435 Comm: syz.0.343 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 111.121800][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.121807][ T7435] Call Trace: [ 111.121811][ T7435] [ 111.121815][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 111.121834][ T7435] should_fail_ex+0x512/0x640 [ 111.121846][ T7435] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 111.121864][ T7435] should_failslab+0xc2/0x120 [ 111.121874][ T7435] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 111.121890][ T7435] ? __alloc_skb+0x2b2/0x380 [ 111.121906][ T7435] __alloc_skb+0x2b2/0x380 [ 111.121919][ T7435] ? __pfx___alloc_skb+0x10/0x10 [ 111.121933][ T7435] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 111.121951][ T7435] netlink_alloc_large_skb+0x69/0x130 [ 111.121968][ T7435] netlink_sendmsg+0x6a1/0xdd0 [ 111.121985][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.122001][ T7435] ? __import_iovec+0x1c8/0x660 [ 111.122018][ T7435] ____sys_sendmsg+0xa95/0xc70 [ 111.122029][ T7435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.122038][ T7435] ? get_compat_msghdr+0x11a/0x170 [ 111.122056][ T7435] ___sys_sendmsg+0x134/0x1d0 [ 111.122071][ T7435] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.122098][ T7435] __sys_sendmsg+0x16d/0x220 [ 111.122112][ T7435] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.122131][ T7435] ? rcu_is_watching+0x12/0xc0 [ 111.122146][ T7435] __do_fast_syscall_32+0x73/0x120 [ 111.122163][ T7435] do_fast_syscall_32+0x32/0x80 [ 111.122179][ T7435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.122193][ T7435] RIP: 0023:0xf7fe7579 [ 111.122201][ T7435] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.122211][ T7435] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 111.122221][ T7435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 111.122228][ T7435] RDX: 0000000000004090 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.122233][ T7435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.122239][ T7435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.122245][ T7435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.122256][ T7435] [ 111.634697][ T7440] xt_recent: Unsupported userspace flags (000000fe) [ 113.074900][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 113.634440][ T7476] netlink: 92 bytes leftover after parsing attributes in process `syz.3.355'. [ 114.488508][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'. [ 114.796467][ T7513] overlayfs: failed to resolve './file1': -2 [ 118.460732][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 119.163223][ T7621] syz.0.391: attempt to access beyond end of device [ 119.163223][ T7621] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.460813][ T63] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 119.613068][ T63] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 119.615763][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.619860][ T63] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 119.623201][ T63] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 119.625879][ T63] usb 7-1: Manufacturer: syz [ 119.629195][ T63] usb 7-1: config 0 descriptor?? [ 119.681704][ T63] rc_core: IR keymap rc-hauppauge not found [ 119.683778][ T63] Registered IR keymap rc-empty [ 119.693576][ T63] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 119.706261][ T63] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 119.831450][ T7646] ALSA: mixer_oss: invalid OSS volume '' [ 120.110981][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.119323][ T7654] team0: No ports can be present during mode change [ 120.928388][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 121.017767][ T7670] loop4: detected capacity change from 0 to 524255232 [ 121.128696][ T7678] ip6t_srh: unknown srh match flags E506 [ 121.240254][ T7687] pimreg: entered allmulticast mode [ 121.244104][ T7687] pimreg: left allmulticast mode [ 121.574801][ T7691] ALSA: mixer_oss: invalid OSS volume '' [ 121.774456][ T7693] lo speed is unknown, defaulting to 1000 [ 121.777031][ T7693] lo speed is unknown, defaulting to 1000 [ 122.235863][ T6007] usb 7-1: USB disconnect, device number 3 [ 122.562232][ T7710] [ 122.563073][ T7710] ====================================================== [ 122.565255][ T7710] WARNING: possible circular locking dependency detected [ 122.567498][ T7710] 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 Not tainted [ 122.570923][ T7710] ------------------------------------------------------ [ 122.573393][ T7710] syz.2.414/7710 is trying to acquire lock: [ 122.575236][ T7710] ffffffff9012e7e8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 122.578118][ T7710] [ 122.578118][ T7710] but task is already holding lock: [ 122.580434][ T7710] ffff88806cde8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 122.583566][ T7710] [ 122.583566][ T7710] which lock already depends on the new lock. [ 122.583566][ T7710] [ 122.586812][ T7710] [ 122.586812][ T7710] the existing dependency chain (in reverse order) is: [ 122.589600][ T7710] [ 122.589600][ T7710] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 122.592260][ T7710] __mutex_lock+0x199/0xb90 [ 122.593899][ T7710] smc_switch_to_fallback+0x2d/0x9f0 [ 122.595719][ T7710] smc_sendmsg+0x13d/0x520 [ 122.597319][ T7710] __sys_sendto+0x495/0x510 [ 122.598919][ T7710] __ia32_sys_sendto+0xdd/0x1b0 [ 122.600601][ T7710] __do_fast_syscall_32+0x73/0x120 [ 122.602378][ T7710] do_fast_syscall_32+0x32/0x80 [ 122.604397][ T7710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.607100][ T7710] [ 122.607100][ T7710] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 122.609524][ T7710] lock_sock_nested+0x41/0xf0 [ 122.611273][ T7710] sockopt_lock_sock+0x54/0x70 [ 122.612934][ T7710] do_ip_setsockopt+0xfe/0x3240 [ 122.614616][ T7710] ip_setsockopt+0x59/0xf0 [ 122.616166][ T7710] raw_setsockopt+0xb7/0x2a0 [ 122.617829][ T7710] do_sock_setsockopt+0x221/0x470 [ 122.619956][ T7710] __sys_setsockopt+0x1a0/0x230 [ 122.621639][ T7710] __ia32_sys_setsockopt+0xbc/0x160 [ 122.623429][ T7710] __do_fast_syscall_32+0x73/0x120 [ 122.625185][ T7710] do_fast_syscall_32+0x32/0x80 [ 122.627040][ T7710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.629195][ T7710] [ 122.629195][ T7710] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 122.631486][ T7710] __lock_acquire+0x1173/0x1ba0 [ 122.633177][ T7710] lock_acquire+0x179/0x350 [ 122.634784][ T7710] __mutex_lock+0x199/0xb90 [ 122.636402][ T7710] do_ip_getsockopt+0x1843/0x2220 [ 122.638182][ T7710] ip_getsockopt+0x9b/0x1e0 [ 122.639781][ T7710] tcp_getsockopt+0x9e/0x100 [ 122.641409][ T7710] smc_getsockopt+0x162/0x370 [ 122.643172][ T7710] do_sock_getsockopt+0x3fc/0x800 [ 122.645390][ T7710] __sys_getsockopt+0x12f/0x260 [ 122.647074][ T7710] __ia32_sys_getsockopt+0xbc/0x160 [ 122.648849][ T7710] __do_fast_syscall_32+0x73/0x120 [ 122.650630][ T7710] do_fast_syscall_32+0x32/0x80 [ 122.652316][ T7710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.654461][ T7710] [ 122.654461][ T7710] other info that might help us debug this: [ 122.654461][ T7710] [ 122.657651][ T7710] Chain exists of: [ 122.657651][ T7710] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 122.657651][ T7710] [ 122.661876][ T7710] Possible unsafe locking scenario: [ 122.661876][ T7710] [ 122.664191][ T7710] CPU0 CPU1 [ 122.665887][ T7710] ---- ---- [ 122.667575][ T7710] lock(&smc->clcsock_release_lock); [ 122.669251][ T7710] lock(sk_lock-AF_INET); [ 122.671410][ T7710] lock(&smc->clcsock_release_lock); [ 122.673856][ T7710] lock(rtnl_mutex); [ 122.675116][ T7710] [ 122.675116][ T7710] *** DEADLOCK *** [ 122.675116][ T7710] [ 122.677632][ T7710] 1 lock held by syz.2.414/7710: [ 122.679203][ T7710] #0: ffff88806cde8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 122.682421][ T7710] [ 122.682421][ T7710] stack backtrace: [ 122.685016][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.2.414 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 122.685032][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.685039][ T7710] Call Trace: [ 122.685043][ T7710] [ 122.685048][ T7710] dump_stack_lvl+0x116/0x1f0 [ 122.685066][ T7710] print_circular_bug+0x275/0x350 [ 122.685084][ T7710] check_noncircular+0x14c/0x170 [ 122.685104][ T7710] __lock_acquire+0x1173/0x1ba0 [ 122.685118][ T7710] lock_acquire+0x179/0x350 [ 122.685127][ T7710] ? do_ip_getsockopt+0x1843/0x2220 [ 122.685139][ T7710] ? __pfx___might_resched+0x10/0x10 [ 122.685155][ T7710] __mutex_lock+0x199/0xb90 [ 122.685171][ T7710] ? do_ip_getsockopt+0x1843/0x2220 [ 122.685180][ T7710] ? __might_fault+0xe3/0x190 [ 122.685195][ T7710] ? __might_fault+0xe3/0x190 [ 122.685210][ T7710] ? __might_fault+0x13b/0x190 [ 122.685225][ T7710] ? do_ip_getsockopt+0x1843/0x2220 [ 122.685237][ T7710] ? __pfx___mutex_lock+0x10/0x10 [ 122.685254][ T7710] ? _copy_from_user+0x59/0xd0 [ 122.685267][ T7710] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 122.685283][ T7710] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.685314][ T7710] ? finish_task_switch.isra.0+0x221/0xc10 [ 122.685332][ T7710] ? do_ip_getsockopt+0x1843/0x2220 [ 122.685342][ T7710] ? rtnl_lock+0x9/0x20 [ 122.685353][ T7710] do_ip_getsockopt+0x1843/0x2220 [ 122.685367][ T7710] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 122.685378][ T7710] ? register_lock_class+0x41/0x4c0 [ 122.685390][ T7710] ? __lock_acquire+0xaa4/0x1ba0 [ 122.685401][ T7710] ? aa_label_sk_perm+0x19b/0x5a0 [ 122.685415][ T7710] ? __mutex_trylock_common+0xe9/0x250 [ 122.685427][ T7710] ? __pfx___mutex_trylock_common+0x10/0x10 [ 122.685438][ T7710] ? __pfx___might_resched+0x10/0x10 [ 122.685451][ T7710] ? rcu_is_watching+0x12/0xc0 [ 122.685463][ T7710] ? trace_contention_end+0xdd/0x130 [ 122.685473][ T7710] ? __mutex_lock+0x1ca/0xb90 [ 122.685487][ T7710] ip_getsockopt+0x9b/0x1e0 [ 122.685496][ T7710] ? __pfx___mutex_lock+0x10/0x10 [ 122.685510][ T7710] ? __pfx_ip_getsockopt+0x10/0x10 [ 122.685521][ T7710] tcp_getsockopt+0x9e/0x100 [ 122.685533][ T7710] smc_getsockopt+0x162/0x370 [ 122.685544][ T7710] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 122.685559][ T7710] ? __pfx_smc_getsockopt+0x10/0x10 [ 122.685569][ T7710] ? percpu_counter_add_batch+0xb8/0x1f0 [ 122.685579][ T7710] ? errseq_sample+0x53/0x70 [ 122.685592][ T7710] ? __pfx_smc_getsockopt+0x10/0x10 [ 122.685602][ T7710] do_sock_getsockopt+0x3fc/0x800 [ 122.685618][ T7710] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 122.685636][ T7710] ? __fget_files+0x204/0x3c0 [ 122.685663][ T7710] __sys_getsockopt+0x12f/0x260 [ 122.685677][ T7710] __ia32_sys_getsockopt+0xbc/0x160 [ 122.685691][ T7710] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.685706][ T7710] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 122.685724][ T7710] __do_fast_syscall_32+0x73/0x120 [ 122.685741][ T7710] do_fast_syscall_32+0x32/0x80 [ 122.685758][ T7710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.685771][ T7710] RIP: 0023:0xf7f05579 [ 122.685780][ T7710] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.685790][ T7710] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 122.685800][ T7710] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 122.685806][ T7710] RDX: 0000000000000029 RSI: 0000000080005fc0 RDI: 0000000080006000 [ 122.685812][ T7710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.685817][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.685823][ T7710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.685831][ T7710] [ 122.685889][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.802596][ C1] vkms_vblank_simulate: vblank timer overrun VM DIAGNOSIS: 17:59:44 Registers: info registers vcpu 0 CPU#0 RAX=00000000002d802d RBX=0000000000000000 RCX=ffffffff8b703439 RDX=0000000000000000 RSI=ffffffff8dbeb567 RDI=ffffffff8bf45100 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90868110 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3c609a CR3=000000005212c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bdb65 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc900034bf128 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=000000000000006f R14=ffffffff9ae12b00 R15=ffffffff854bdb00 RIP=ffffffff854bdb8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3da5bf CR3=000000002a00e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000012e5a4 RBX=0000000000000002 RCX=ffffffff8b703439 RDX=ffffed10056865be RSI=ffffffff8bf45080 RDI=ffffffff8191a751 RBP=ffffed1003ada910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000001 R12=0000000000000002 R13=ffff88801d6d4880 R14=ffffffff90868110 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fafee324ba0 CR3=000000004fc22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7392ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b3414a0 RCX=ffffffff81af2589 RDX=ffff88802586c880 RSI=ffffffff81af2563 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006f67938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=ffffed1005668295 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b53b180 RIP=ffffffff81af2565 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5025880 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000