last executing test programs: 6.923118028s ago: executing program 0 (id=640): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4004af61, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0xc00}, 0x1c) sendto$inet6(r0, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a119c748ccb5", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f0000000280)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x10000, &(0x7f0000000780)='\x00\\\x97:h\x93eX\xfe\xb3\xee\xb4\x9f\xb4>\x81\x16\x84Xa\x89C\xfe\xbe\x9c:\x0f\xc7p\vP\xb1>\xc7nR\\\x1f\xb0I\x1f\x00\xd7\xdf\xcf\xbd\xbb\x84\xcd\xcdc\xa0\x1c\xbbs\xd1\xfeO\xa2HZ\xcd\x1c\x7f\x87\xed\xb3Mv\xa5\x0e\x89\xba\xe1\xacL\x18\xfd\xb0\x1a\x93<\xd7\xda\xb7\xd1~\xc9\x0f\xb1s\xa4\xeeJ\x027\xd9\xa9\xf5\x16\x96\xb1@NtD\xc2A\x13\xff\xa6\x13\xea3\x10i\x896\xa3\xa5\xdcw\xbd\x8e]\xc8\x7f\xa7\xfe\xfd^\x97\xa0G\xef\x1f') syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x6ed) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x149a02, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x27c, 0x12c, 0x600, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xcc, 0x12c, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffe}}, @common=@inet=@socket3={{0x24}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x9c, 0xbc, 0x0, {}, [@common=@ah={{0x2c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x30, r4, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}, @chandef_params, @NL80211_ATTR_PBSS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r8 = getpid() r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='tlb_flush\x00', r9}, 0x10) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) 3.296433247s ago: executing program 0 (id=658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f0000000480)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r0}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) ioctl$TCSETAF(r2, 0x4bfb, &(0x7f0000000080)={0x0, 0x0, 0xfff9, 0x0, 0x10, "5f8fb4bcbd7c4c2f"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a931"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0xfff) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r5, 0x10000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045eaff78000000000011907800000000e000000100004e21006490780200000004000000000000007d3b331a312edd8bcc36dc36e12b49e0b393e8bf81058ddb0cbe668f444cff0d1c64ed0b4a59ae1c119ddbc71b0930d8d23dd644021a65f4b2db00f46fda586172997824b931d497927989ebef22a608"], 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x240) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 2.892566589s ago: executing program 0 (id=659): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x1, r2, 0x10000, r3}, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r4, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.762213845s ago: executing program 0 (id=660): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000f"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x68, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xcb, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3}, 0xffffffff}, {@remote}, {@multicast2}, {@loopback}, {@private=0xa010102}, {@multicast2, 0x52b1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @noop, @noop, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xb, 0xc9}}}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x80e05411) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2.711916325s ago: executing program 2 (id=661): r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) stat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x5c, r5, 0xe17, 0x0, 0x2, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$cgroup_pressure(r6, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtaction={0x1a4, 0x30, 0x0, 0x0, 0x0, {}, [{0x190, 0x1, [@m_mirred={0x18c, 0x16, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x100, 0x1, 0x434, 0xb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000000, 0x3, 0x8, 0x9}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x3ff, 0x3, 0x1, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x1, 0x8, 0x6, 0x8d00}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x2, 0x7, 0x0, 0x7fff}, 0x3}}]}, {0xbe, 0x6, "20635090be69061d94519a0e2d5df959ee81d382e0dfa0926f65084588cbe0080e1575369d104b4c8489c2cb1290bcc5516ad663acf641a42f95494d414c6f942b7976919ab28643d5afa95b18c031f33660432b017537f3abea24fb9c04c79bd609a2d5ff8b0ede47880262823bb8f053a746c623ef0734b151ff6bf1ae43490fe459b9a0efc76956f55422605cc13f231e24c38c4111421b7cdb70ff401ee36c07a8c75323a257fc319b5000a1c3eccd1c04839c95d0302bc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1a4}}, 0x20000880) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$CAPI_NCCI_GETUNIT(r6, 0x80044327, &(0x7f0000000240)=0x10001) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.581688816s ago: executing program 0 (id=666): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab59fc179fd1f80600000000000000c6a4b4e00d9683dda1af1ea89df2bb0000000300000000000000000000fdec00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) write$UHID_CREATE(r1, &(0x7f0000001580)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$I2C_PEC(r3, 0x708, 0x6) 2.508464702s ago: executing program 0 (id=667): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffb, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2.442271231s ago: executing program 1 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r5, r4, 0x0, 0x80009) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x3, 0xb38}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000440)={r7, 0x25, 0x6, [0x3634, 0x4, 0x4, 0x0, 0x2, 0x8000]}, &(0x7f0000000480)=0x14) r8 = syz_open_pts(r1, 0x0) r9 = dup3(r8, r1, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000010a03000000000000000000020000000900010073797a30000000004d00bc867e53d54fade5f8cbdeae519999aebf91a18dbc8974608ac8694b02e0d13746acdd9eda551a32128f6c5a6e77b9bf9f025767e340a68352071bc6b2edf65555ca2a87b6e275390451f5bd026b1f26699c8d2a5745521f1bba1781b26b0ab235b8f8d2d00f70f6241119e3ab480b23feeabfaaebef4e2e81f9f8fb7917bc4852fdcf28b779d60aba45b7e56a57e299e0b04521773941db63b896a5b11c99cea6d9dc297110b5fe85c7d5f613fd0408db92e80fbd6ae46d02fa5dcecade2f152494c4ca00f23cf0"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 1.83157349s ago: executing program 2 (id=669): r0 = socket(0x2c, 0x80003, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) 1.480574505s ago: executing program 3 (id=671): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000f"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x68, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xcb, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3}, 0xffffffff}, {@remote}, {@multicast2}, {@loopback}, {@private=0xa010102}, {@multicast2, 0x52b1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @noop, @noop, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xb, 0xc9}}}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x80e05411) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 1.215705266s ago: executing program 3 (id=672): r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) recvfrom$netrom(r0, &(0x7f0000000000)=""/177, 0xb1, 0x1, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000180)={0x10c8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x10a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "c5c07ffb0c2d3ee124727f9179be817084d6a8c12641f8656a47a863478e5b9a4199a69aa15260306c6a695fc9924850a54fc16ca89240508795e9f259a6a4ed436f11b1f5e574a4"}, @ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "913b587be1b89fe5b54a437310e762e3432174eadc9854695606b73797ea"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "dc45de35b423ce8cca38f55d5200f68b2e34b8bd0d0c6caf84ef326d76c9893f4b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x20004011}, 0x81) io_setup(0x8, &(0x7f0000001300)=0x0) io_destroy(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001340)={{0x2, 0x0, 0x80, {0x2, 0x6000, 0x2}}, "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", "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"}) socket$inet_dccp(0x2, 0x6, 0x0) r2 = eventfd2(0xb, 0x0) io_submit(r1, 0x1, &(0x7f0000003440)=[&(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f00000033c0)="79b5811a195cca2111f4cc41e8b282ecd74ca0fb1f61d214d1d56d88", 0x1c, 0x2, 0x0, 0x1, r2}]) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) io_pgetevents(r1, 0x8, 0x5, &(0x7f0000003480)=[{}, {}, {}, {}, {}], &(0x7f0000003580)={r3, r4+10000000}, &(0x7f0000003600)={&(0x7f00000035c0)={[0xc, 0x7fff]}, 0x8}) r5 = syz_open_dev$audion(&(0x7f0000003640), 0xf2, 0x103000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003680)=@buf) io_submit(r1, 0x3, &(0x7f0000003940)=[&(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0xfffa, r5, &(0x7f00000036c0)="94c8850434fef0112218beb5a53741e7292f6a9133b4569a6da6d1b85c17ce7e63bc471f2efa4558720fce49d061267e99ed31801857d75f63cb8ebee5bf6f6341da", 0x42, 0x0, 0x0, 0x1, r0}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000003780)="58974d812736f03725677cbfe518a4d76ebf138c719ed87c16718a9b22bb817b0e250a70499437cf59ca2e21756e4c5145acd7027f5450b6d426d9d5bb7b3e963612e7f5870fe65405c67af0dede2c206281842a86c51a24ad80d813cca2251cb49b36231ed75a5fe3d18410afeb7d1f5d864b2b702342cab7c76980aa2132e3d681a3d3dd88d7", 0x87, 0x3, 0x0, 0x3}, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000003880)="5a0274eeb5720b438e057913b9bcd8190585f20050138a6328858213e4540454ca0bea992ef789d9a97b2e3ee85a436d8ae167ac8fde3687c0fa97a576af32bea929ac", 0x43, 0xfff, 0x0, 0x0, r5}]) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000003980)=[{}, {}, {}], 0x3, &(0x7f0000003a00)={r6, r7+60000000}, &(0x7f0000003a40)={[0x2, 0xa9f5]}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000003ac0)=0x0, &(0x7f0000003b00)=0x4) sendmsg$nl_route_sched(r8, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xa, 0x6}, {0x7, 0x1}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000003c00)=[{r2, 0x10}, {r10, 0x10}, {r8, 0x7158cf8c4e6901a3}], 0x3, &(0x7f0000003c40)={0x77359400}, &(0x7f0000003c80)={[0x4, 0x4]}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x10) getsockname$netrom(r0, &(0x7f0000003dc0)={{0x3, @default}, [@netrom, @default, @remote, @default, @remote, @netrom, @rose, @null]}, &(0x7f0000003e40)=0x48) r11 = openat$iommufd(0xffffff9c, &(0x7f0000003e80), 0x20180, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000003ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f0000004000)={0x28, 0x6624bb1e37cd1fa6, 0x0, r12, 0x0, 0x0, 0x0, 0xf6, &(0x7f0000003f00)="f99b305bba120acedd7ff1da53f2b76a8f6c66e65f905af9fcf375e2e8451e49dc216f48699fec7c51d6eb19bc68fb1494dbbb8ae8424b1f7313fb3d36c0d7367165a86dbc5d53396262ebe349aa42886bbe7263e205781686649776d8e0f51c47025e26daafe9519dc86bbbb2af1bd690c60797b19743f4a174c0947c36e1fbd6a3f0ce34dcda74e6768a6cc6dd5b7cb5c385c1a600c3c8e85522b3454f7c603d2422770ec666f6fa0fff13dbdc5fc06edb9e93228a78f29edbdf8df1093295999ee2d5a47129ca1e18ff9611bdac40be08aaba2a6e1111b37e8753070fe5c40d090aae468b8712e87b8a598397f16c8455d90bf1dd"}) pwrite64(r0, &(0x7f0000004040)="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", 0x1000, 0x22) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) 1.200701851s ago: executing program 1 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 1.090676016s ago: executing program 1 (id=674): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 1.00352291s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.00309156s ago: executing program 3 (id=676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x145, 0x805, 0x0, 0x0) 1.001689756s ago: executing program 1 (id=677): r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) stat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x5c, r6, 0xe17, 0x0, 0x2, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$cgroup_pressure(r7, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtaction={0x1a4, 0x30, 0x0, 0x0, 0x0, {}, [{0x190, 0x1, [@m_mirred={0x18c, 0x16, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x100, 0x1, 0x434, 0xb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000000, 0x3, 0x8, 0x9}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x3ff, 0x3, 0x1, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x1, 0x8, 0x6, 0x8d00}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x2, 0x7, 0x0, 0x7fff}, 0x3}}]}, {0xbe, 0x6, "20635090be69061d94519a0e2d5df959ee81d382e0dfa0926f65084588cbe0080e1575369d104b4c8489c2cb1290bcc5516ad663acf641a42f95494d414c6f942b7976919ab28643d5afa95b18c031f33660432b017537f3abea24fb9c04c79bd609a2d5ff8b0ede47880262823bb8f053a746c623ef0734b151ff6bf1ae43490fe459b9a0efc76956f55422605cc13f231e24c38c4111421b7cdb70ff401ee36c07a8c75323a257fc319b5000a1c3eccd1c04839c95d0302bc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1a4}}, 0x20000880) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$CAPI_NCCI_GETUNIT(r7, 0x80044327, &(0x7f0000000240)=0x10001) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 911.176341ms ago: executing program 3 (id=678): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@generic={0xf, 0x7, 0x6, 0x8d9, 0x7}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xa1, &(0x7f0000000140)=""/161, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xe, 0x6, 0x1ff}, 0x10, 0x2c1f7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x100}, 0x90) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000380)={0x7, 0x8, 0x0, 0x80800, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x14) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x100, 0x0, 0x4}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000024c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0x10, 0x820000, 0xfffe, 0x8, 0xfffff001, 0x7}}, 0x50) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000002540)={0x0, 0x0, 0x8}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000002580)=0xf) landlock_create_ruleset(&(0x7f00000025c0)={0x4010, 0x2}, 0x10, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002640), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002740)={'syztnl2\x00', &(0x7f0000002680)={'gre0\x00', 0x0, 0x7fc9, 0x20, 0xffffffff, 0x6, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x64, 0x0, 0xea, 0x4, 0x0, @local, @private=0xa010101, {[@end, @rr={0x7, 0x13, 0xf2, [@empty, @rand_addr=0x64010101, @empty, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0x51, 0x3, 0x9, [{@broadcast, 0xfffffbff}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff}, {@broadcast, 0x79b7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1ff}, {@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1710e327}, {@broadcast}, {@remote}]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000002840)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x44400000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000002880)={0x18, 0x0, r3, {0x9}}, 0x18) r8 = openat$ptmx(0xffffff9c, &(0x7f00000028c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000002900)={0xe, 0xc, 0x1, 0x1, 0x7, "f31e12f0d38b180a6c7571c1c004d4224dcb86", 0x9, 0x77d}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000002940)={0x8, 0x2, 0x7, 0x9, 0x13, "a968140ec347ac08c012c4f4374cbaefb8a9fd"}) mq_open(&(0x7f0000002980)='/dev/ptmx\x00', 0x80, 0x80, &(0x7f00000029c0)={0x8, 0x9a, 0x9, 0x2d}) syz_open_dev$I2C(&(0x7f0000002a00), 0x6, 0x40) syz_open_dev$sndpcmp(&(0x7f0000002a40), 0x4, 0x24800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x2c, r9, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000002bc0)={0x19}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000002f00)={0x0, @in6={{0xa, 0x4e24, 0x7f, @private1, 0x5}}, [0x7f, 0x65b7, 0x7, 0x8001, 0x2, 0x4, 0x7, 0x5, 0x400, 0x5, 0xfffffffffffffffb, 0x9685, 0x6, 0x4, 0x4]}, &(0x7f0000003000)=0xfc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000003040)={r10, 0x101}, 0x8) recvmsg$can_bcm(r2, &(0x7f0000003180)={&(0x7f0000003080)=@x25={0x9, @remote}, 0x80, &(0x7f0000003140)=[{&(0x7f0000003100)=""/27, 0x1b}], 0x1}, 0x3) sendmsg$kcm(r2, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000031c0)="ab0313ff1fb5882129cf1d0e26ee0a2b47816f77ad6bd43eef4d747524e133672e54ecdfc9d0e78daa0cc149d2ee3dfafaa7379f43472151b42de220ab12d227907a50ca46f2a0074953c74255b3e4140419b153fc60a301d4d736b6c242a535a4ea032e1d329fcab4ac6c225db59f3c1fcd52738f4241d07b721ccd9b5a45ec65c570aa1a94d19388cdea27018f9a6f0709a377bf9e8dce57fdcb3d15120cd6a62fc83a1604e1d33898cd76efe90f", 0xaf}, {&(0x7f0000003280)="cc2b07f8c415f2606814dc43eb45afa7a6bfc34e6edd5613980464c67f1d4c04fcf9b60fc00f16bd2621799ed69758e13bede64a243197c4685ddc79a25243a04cd1897181ded1050212b25d9abb590168a12c4616e82f73dcd5322c084dc5768657aaf46f8a1c1d3eacec54300883962ee8f80db2", 0x75}, {&(0x7f0000003300)="ba5695585c00bec9ecb64e841441f9afd5ecdebc5e465338373f3d2757d038052e786d2809421b3d5bec0741adead9bdf9468699768254d56bac9fdc918b822bea27169e58efb50e421255a608893e32f8ef1a888b5cd4f8bc67", 0x5a}, {&(0x7f0000003380)="56fc9f737dcf740b63eaec5498a54b7fde9aba07e83657218cba7b21180758136d2e0341411db939e4306d37ec16990c847f48318ededf4eed469f07acadf9e83f63528b79e7c9e24325cee6973c2a8bff8d4bc4607c3ab49310a6677f75d0c07e0cb3504f76640977f000bad2ac9cec4d8ef1b135164a8dbaa138931ddfc79550157eef030195d2b0713b329020d6bcd36387ff42fa218e246f39c4e25ecfb5c3fc2b55d197568c9a5d3c7f25caf891d5369498c7efbf305caab86c0841307566450e92ad7a5f864582827bdbef8a82752e410ed5c800d7b4452f3d7ba19062d6b9f7cb203490c5be04c44d181874", 0xef}, {&(0x7f0000003480)="f6a00f0949058744a1ee0be33c33b395007bcadd578285030b9800afbbf6a483dec01f8fa19b9cde3ab79b8b4552c83262fc5c9b1b6b26a66bce1e79aa59e84565ba0484c2efddce339b551fb563c131ec6b8e437e1c6ebb991397efefca64b27f1f27d42cb648099678012b0ebd13cc7772c5f017aabb9db31e271d029f187bd7f16662823ab0a7b83ad0d78e6f24e65c68a01f25f764306e639b15a4dc88b07e93cc46ecda815718fbf5de8fb412e6fc8b6309793fda296b327bf21fdfcb81234dce706eede57c9829666fef2a289a9ef27440921273fdf7", 0xd9}, {&(0x7f0000003580)="c20f476c4820450b141adf46ea23a7220672b1e90a164101d14d9d2bcc87e76f111a7ff3f8a4b7746499485432ac4525ca0894da934d3667664ac45130573d90f77d2d626aed59873b9dd6be3b4bd527068c2eaab2562d4798e3b7d93a27bedd382f2c852ca883f6129ec0fc11176efa0a36db13308cd1a2ddb2", 0x7a}, {&(0x7f0000003600)="45f1fb273fa2f329db8617cfdaf0677801", 0x11}, {&(0x7f0000003640)="45c60325fdef9bdf90a0345e2e1d4caaec58cdd460a91d11a36437becc25803170cd1cbd190e209b666a1ddfa4516ae412ef6d17ea47806e133e03371a1195fee340db3bf87a962830004f3eaf381f698f425eaa5c089ebd0d4f8191eba74cb29deb7fd172c3337ae5dee5366bd6025b3cb91a4bd309bfce4db4ac901469bd0f1325c55c4b22dadec48b1b797b447eded9d639e94d116390f6bdd6f0aee5b725d417ab48ca3b0d01fff785d358773eb7a03f29735a3cf698c2f57cbd39996d055ec33bf51867b80d801f5839173b5faa7cba70b8881f2d1f4d29e616b5c84e", 0xdf}, {&(0x7f0000003740)="23504cdd13bcd0a38449292fe2168b0fd2b33f961ba864f746db1d292d2edad4a36ff4b9dd9a54defcff78b0693383c9a5c3458c90367c6fdbecf9ba639e731fbaca31fcc589374acf06dc45d0d919b532d6c19dd11079359eb934c407cda544dbd9a62dc59cdcced816ce0a005f6295c0fb63cca74c703a96c83fdb46dd7c5cbad1704c1f4879aa03a0b808aaebca19c37038d5456d2b8c96200643647280231583ecf32eb6327e22102c2a0d9a98c3a35828910fb55f1ca3166f59d432f0c0d2c54c578aa26a2029096ca10496f1563bf8173ba9fbe77b90af3ac76668e03add1ce79bcf080bbfec", 0xe9}, {&(0x7f0000003840)="5b7d4dca0b5c3a247bd2edc70a7ce13941d25c66c586f98af07bbd78f56efd25da69bf02e2c808c141ad0425d6318f4ffaebab66a31feaa7fc656cb5279d18ad20ab5c3d3f90c97bf57a70131a47d5a0b7f5622d7cfbf18d2574ed55a902abd6f293caf84b634d270e634a335be774d75007b52de5bfa8637a83b46647e4ab2feb4670996db75fbdfca08c4347d9c40be9462666bbbdeafeac37eda598c5e68b8633354a301a7b8e5ec3acb169d0c6383a1ab9", 0xb3}], 0xa}, 0x5) fchownat(r2, &(0x7f00000039c0)='./file0\x00', r4, r5, 0x1000) rename(&(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)='./file0\x00') 861.919368ms ago: executing program 3 (id=679): socket$inet6_udplite(0xa, 0x2, 0x88) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="030003000b0000000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 360.049343ms ago: executing program 2 (id=680): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000f"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x68, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xcb, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3}, 0xffffffff}, {@remote}, {@multicast2}, {@loopback}, {@private=0xa010102}, {@multicast2, 0x52b1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @noop, @noop, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xb, 0xc9}}}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 191.81251ms ago: executing program 2 (id=681): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc0100"}]}, 0x3c}}, 0x0) 118.04693ms ago: executing program 2 (id=682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 111.59717ms ago: executing program 1 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r5, r4, 0x0, 0x80009) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x3, 0xb38}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000440)={r7, 0x25, 0x6, [0x3634, 0x4, 0x4, 0x0, 0x2, 0x8000]}, &(0x7f0000000480)=0x14) r8 = syz_open_pts(r1, 0x0) r9 = dup3(r8, r1, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000010a03000000000000000000020000000900010073797a30000000004d00bc867e53d54fade5f8cbdeae519999aebf91a18dbc8974608ac8694b02e0d13746acdd9eda551a32128f6c5a6e77b9bf9f025767e340a68352071bc6b2edf65555ca2a87b6e275390451f5bd026b1f26699c8d2a5745521f1bba1781b26b0ab235b8f8d2d00f70f6241119e3ab480b23feeabfaaebef4e2e81f9f8fb7917bc4852fdcf28b779d60aba45b7e56a57e299e0b04521773941db63b896a5b11c99cea6d9dc297110b5fe85c7d5f613fd0408db92e80fbd6ae46d02fa5dcecade2f152494c4ca00f23cf0"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 192.862µs ago: executing program 2 (id=684): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a843500140600fe8057865075000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x9}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000780)={r4, 0x1, 0xae, 0x7fff}, 0x10) r5 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r5) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file1\x00', 0x400002, 0x1d5) r8 = openat(r7, &(0x7f0000000180)='./file1/file1\x00', 0x840, 0x0) r9 = fspick(r8, &(0x7f00000001c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, 0x0, 0x0) keyctl$search(0xa, r6, 0x0, &(0x7f0000000540)={'syz', 0x1}, r5) unshare(0x0) socket(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r12, 0x400454ca, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x5c, 0x0, 0xe17, 0x0, 0x2, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): p time greater than 23:59:59 [ 81.108383][ T5897] FAULT_INJECTION: forcing a failure. [ 81.108383][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 81.113595][ T5897] CPU: 2 UID: 0 PID: 5897 Comm: syz.0.144 Not tainted 6.11.0-rc1-syzkaller #0 [ 81.116742][ T5897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.121074][ T5897] Call Trace: [ 81.122432][ T5897] [ 81.123736][ T5897] dump_stack_lvl+0x16c/0x1f0 [ 81.125559][ T5897] should_fail_ex+0x497/0x5b0 [ 81.127305][ T5897] ? fs_reclaim_acquire+0xae/0x160 [ 81.129124][ T5897] should_failslab+0xc2/0x120 [ 81.130704][ T5897] kmem_cache_alloc_node_noprof+0x71/0x310 [ 81.133215][ T5897] ? __alloc_skb+0x2b3/0x380 [ 81.135360][ T5897] __alloc_skb+0x2b3/0x380 [ 81.137156][ T5897] ? __pfx___alloc_skb+0x10/0x10 [ 81.139236][ T5897] ? __pfx___might_resched+0x10/0x10 [ 81.141489][ T5897] netlink_alloc_large_skb+0x69/0x130 [ 81.143749][ T5897] netlink_sendmsg+0x689/0xd70 [ 81.145793][ T5897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.148058][ T5897] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 81.150278][ T5897] ____sys_sendmsg+0x9b4/0xb50 [ 81.152308][ T5897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.154490][ T5897] ? get_compat_msghdr+0x11b/0x170 [ 81.156656][ T5897] ? __pfx___lock_acquire+0x10/0x10 [ 81.158865][ T5897] ___sys_sendmsg+0x135/0x1e0 [ 81.160857][ T5897] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.163054][ T5897] ? ksys_write+0x21c/0x260 [ 81.164930][ T5897] ? __fget_light+0x173/0x210 [ 81.166864][ T5897] __sys_sendmsg+0x117/0x1f0 [ 81.168813][ T5897] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.171044][ T5897] __do_fast_syscall_32+0x73/0x120 [ 81.173236][ T5897] do_fast_syscall_32+0x32/0x80 [ 81.175311][ T5897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.177865][ T5897] RIP: 0023:0xf749e579 [ 81.179395][ T5897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.187420][ T5897] RSP: 002b:00000000f57b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 81.190900][ T5897] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 81.194231][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.197523][ T5897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.200840][ T5897] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.204155][ T5897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.207465][ T5897] [ 81.325801][ T5907] FAULT_INJECTION: forcing a failure. [ 81.325801][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 81.331948][ T5907] CPU: 2 UID: 0 PID: 5907 Comm: syz.1.149 Not tainted 6.11.0-rc1-syzkaller #0 [ 81.335905][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.340753][ T5907] Call Trace: [ 81.340761][ T5907] [ 81.340766][ T5907] dump_stack_lvl+0x16c/0x1f0 [ 81.340783][ T5907] should_fail_ex+0x497/0x5b0 [ 81.340795][ T5907] ? fs_reclaim_acquire+0xae/0x160 [ 81.340806][ T5907] should_failslab+0xc2/0x120 [ 81.340818][ T5907] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 81.340830][ T5907] ? io_submit_one+0x123/0x1df0 [ 81.340843][ T5907] io_submit_one+0x123/0x1df0 [ 81.340858][ T5907] ? __pfx_io_submit_one+0x10/0x10 [ 81.340871][ T5907] ? __might_fault+0x13b/0x190 [ 81.340890][ T5907] ? __pfx___might_resched+0x10/0x10 [ 81.340908][ T5907] ? __ia32_compat_sys_io_submit+0x1af/0x390 [ 81.340919][ T5907] __ia32_compat_sys_io_submit+0x1af/0x390 [ 81.340932][ T5907] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 81.340950][ T5907] __do_fast_syscall_32+0x73/0x120 [ 81.340966][ T5907] do_fast_syscall_32+0x32/0x80 [ 81.340981][ T5907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.340995][ T5907] RIP: 0023:0xf7fa1579 [ 81.341004][ T5907] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.341013][ T5907] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 81.341023][ T5907] RAX: ffffffffffffffda RBX: 00000000f7f9c000 RCX: 0000000000000001 [ 81.341030][ T5907] RDX: 00000000200015c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.341036][ T5907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.341041][ T5907] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.341047][ T5907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.341059][ T5907] [ 81.390909][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 81.437224][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.560684][ T5916] CIFS: Unable to determine destination address [ 81.587417][ T25] cfg80211: failed to load regulatory.db [ 83.009704][ T5929] overlay: Unknown parameter 'hash' [ 83.028296][ T5929] 9pnet_fd: Insufficient options for proto=fd [ 83.034319][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.552070][ T5925] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 84.887010][ T5959] FAULT_INJECTION: forcing a failure. [ 84.887010][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 84.893074][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.1.164 Not tainted 6.11.0-rc1-syzkaller #0 [ 84.896170][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.899960][ T5959] Call Trace: [ 84.901120][ T5959] [ 84.902152][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 84.903804][ T5959] should_fail_ex+0x497/0x5b0 [ 84.905507][ T5959] ? fs_reclaim_acquire+0xae/0x160 [ 84.907289][ T5959] should_failslab+0xc2/0x120 [ 84.908951][ T5959] kmem_cache_alloc_node_noprof+0x71/0x310 [ 84.911251][ T5959] ? __alloc_skb+0x2b3/0x380 [ 84.913302][ T5959] __alloc_skb+0x2b3/0x380 [ 84.915069][ T5959] ? __pfx___alloc_skb+0x10/0x10 [ 84.917163][ T5959] ? __pfx___might_resched+0x10/0x10 [ 84.919303][ T5959] netlink_alloc_large_skb+0x69/0x130 [ 84.921287][ T5959] netlink_sendmsg+0x689/0xd70 [ 84.922933][ T5959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.924813][ T5959] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.926648][ T5959] ____sys_sendmsg+0x9b4/0xb50 [ 84.928304][ T5959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.930063][ T5959] ? get_compat_msghdr+0x11b/0x170 [ 84.932053][ T5959] ? __pfx___lock_acquire+0x10/0x10 [ 84.934008][ T5959] ___sys_sendmsg+0x135/0x1e0 [ 84.935799][ T5959] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.937755][ T5959] ? ksys_write+0x21c/0x260 [ 84.939292][ T5959] ? __fget_light+0x173/0x210 [ 84.941096][ T5959] __sys_sendmsg+0x117/0x1f0 [ 84.942963][ T5959] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.944750][ T5959] __do_fast_syscall_32+0x73/0x120 [ 84.946475][ T5959] do_fast_syscall_32+0x32/0x80 [ 84.948153][ T5959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.950272][ T5959] RIP: 0023:0xf7fa1579 [ 84.951968][ T5959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.958420][ T5959] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 84.961279][ T5959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 84.963935][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.966762][ T5959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.970076][ T5959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.973370][ T5959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.976055][ T5959] [ 85.117542][ T5969] FAULT_INJECTION: forcing a failure. [ 85.117542][ T5969] name failslab, interval 1, probability 0, space 0, times 0 [ 85.122821][ T5969] CPU: 3 UID: 0 PID: 5969 Comm: syz.1.168 Not tainted 6.11.0-rc1-syzkaller #0 [ 85.126082][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.129935][ T5969] Call Trace: [ 85.131093][ T5969] [ 85.132122][ T5969] dump_stack_lvl+0x16c/0x1f0 [ 85.133775][ T5969] should_fail_ex+0x497/0x5b0 [ 85.135368][ T5969] ? fs_reclaim_acquire+0xae/0x160 [ 85.137149][ T5969] should_failslab+0xc2/0x120 [ 85.138863][ T5969] __kmalloc_node_noprof+0xd1/0x440 [ 85.140867][ T5969] ? seq_read_iter+0xde/0x12c0 [ 85.142894][ T5969] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 85.145191][ T5969] __kvmalloc_node_noprof+0x9d/0x1a0 [ 85.147037][ T5969] traverse.part.0.constprop.0+0x392/0x640 [ 85.149542][ T5969] ? __pfx_lock_release+0x10/0x10 [ 85.151569][ T5969] ? __pfx___lock_acquire+0x10/0x10 [ 85.153329][ T5969] seq_read_iter+0x93a/0x12c0 [ 85.155422][ T5969] ? aa_file_perm+0x4f2/0x1010 [ 85.157463][ T5969] seq_read+0x390/0x4d0 [ 85.159065][ T5969] ? __pfx_seq_read+0x10/0x10 [ 85.160678][ T5969] ? copy_compat_iovec_from_user+0x138/0x180 [ 85.163217][ T5969] ? import_ubuf+0x1a4/0x200 [ 85.165066][ T5969] ? __pfx_seq_read+0x10/0x10 [ 85.166649][ T5969] proc_reg_read+0x243/0x340 [ 85.168606][ T5969] ? __pfx_proc_reg_read+0x10/0x10 [ 85.170775][ T5969] vfs_readv+0x6cb/0x8a0 [ 85.172234][ T5969] ? __pfx_vfs_readv+0x10/0x10 [ 85.174086][ T5969] ? find_held_lock+0x2d/0x110 [ 85.176142][ T5969] ? __pfx_lock_release+0x10/0x10 [ 85.177967][ T5969] ? do_preadv+0x1b2/0x260 [ 85.179562][ T5969] do_preadv+0x1b2/0x260 [ 85.181383][ T5969] ? __pfx_do_preadv+0x10/0x10 [ 85.183350][ T5969] __do_fast_syscall_32+0x73/0x120 [ 85.185000][ T5969] do_fast_syscall_32+0x32/0x80 [ 85.187057][ T5969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.189757][ T5969] RIP: 0023:0xf7fa1579 [ 85.191179][ T5969] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.198530][ T5969] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 85.202112][ T5969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 85.205027][ T5969] RDX: 0000000000000001 RSI: 000000000000004c RDI: 0000000000000000 [ 85.208353][ T5969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.211727][ T5969] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.214878][ T5969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.218084][ T5969] [ 85.634819][ T5981] FAULT_INJECTION: forcing a failure. [ 85.634819][ T5981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.649373][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.0.173 Not tainted 6.11.0-rc1-syzkaller #0 [ 85.653129][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.657750][ T5981] Call Trace: [ 85.659155][ T5981] [ 85.660426][ T5981] dump_stack_lvl+0x16c/0x1f0 [ 85.662453][ T5981] should_fail_ex+0x497/0x5b0 [ 85.664483][ T5981] _copy_from_user+0x30/0xf0 [ 85.666490][ T5981] get_compat_msghdr+0xa8/0x170 [ 85.668618][ T5981] ? __pfx_get_compat_msghdr+0x10/0x10 [ 85.670948][ T5981] ? __pfx___lock_acquire+0x10/0x10 [ 85.673179][ T5981] ___sys_sendmsg+0x1b0/0x1e0 [ 85.675255][ T5981] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.677450][ T5981] ? ksys_write+0x21c/0x260 [ 85.679444][ T5981] ? __fget_light+0x173/0x210 [ 85.681501][ T5981] __sys_sendmsg+0x117/0x1f0 [ 85.683499][ T5981] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.685697][ T5981] __do_fast_syscall_32+0x73/0x120 [ 85.687933][ T5981] do_fast_syscall_32+0x32/0x80 [ 85.690027][ T5981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.692753][ T5981] RIP: 0023:0xf749e579 [ 85.694499][ T5981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.702441][ T5981] RSP: 002b:00000000f57b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 85.705986][ T5981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 85.709360][ T5981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.712738][ T5981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.716104][ T5981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.719489][ T5981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.722864][ T5981] [ 86.247559][ T5993] mmap: syz.3.177 (5993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.617147][ T5999] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.180'. [ 86.671803][ T39] audit: type=1326 audit(1722236451.974:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.183" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 86.843519][ T6004] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.182'. [ 88.961988][ T6034] FAULT_INJECTION: forcing a failure. [ 88.961988][ T6034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.973234][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.1.190 Not tainted 6.11.0-rc1-syzkaller #0 [ 88.976420][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.980732][ T6034] Call Trace: [ 88.982242][ T6034] [ 88.983540][ T6034] dump_stack_lvl+0x16c/0x1f0 [ 88.985576][ T6034] should_fail_ex+0x497/0x5b0 [ 88.987343][ T6034] _copy_from_user+0x30/0xf0 [ 88.989036][ T6034] get_compat_msghdr+0xa8/0x170 [ 88.991047][ T6034] ? __pfx_get_compat_msghdr+0x10/0x10 [ 88.993368][ T6034] ? find_held_lock+0x2d/0x110 [ 88.995377][ T6034] ___sys_recvmsg+0x193/0x1a0 [ 88.997360][ T6034] ? __pfx____sys_recvmsg+0x10/0x10 [ 88.999631][ T6034] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 89.002119][ T6034] ? __fget_light+0x173/0x210 [ 89.004199][ T6034] do_recvmmsg+0x51a/0x750 [ 89.006166][ T6034] ? __pfx_do_recvmmsg+0x10/0x10 [ 89.008352][ T6034] ? __pfx___might_resched+0x10/0x10 [ 89.010628][ T6034] ? vfs_write+0x14d/0x1140 [ 89.012657][ T6034] ? __might_fault+0xe3/0x190 [ 89.014736][ T6034] ? __pfx_get_old_timespec32+0x10/0x10 [ 89.017153][ T6034] __sys_recvmmsg+0x111/0x280 [ 89.019091][ T6034] ? __pfx___sys_recvmmsg+0x10/0x10 [ 89.021290][ T6034] ? __pfx_ksys_write+0x10/0x10 [ 89.023443][ T6034] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 89.026039][ T6034] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.028264][ T6034] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 89.030981][ T6034] __do_fast_syscall_32+0x73/0x120 [ 89.033163][ T6034] do_fast_syscall_32+0x32/0x80 [ 89.035214][ T6034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.037850][ T6034] RIP: 0023:0xf7fa1579 [ 89.039439][ T6034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.046542][ T6034] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 89.049565][ T6034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200037c0 [ 89.052505][ T6034] RDX: 00000000000003b4 RSI: 0000000000000002 RDI: 0000000020003700 [ 89.055408][ T6034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.058694][ T6034] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.061873][ T6034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.064650][ T6034] [ 89.321097][ T6040] sock: sock_timestamping_bind_phc: sock not bind to device [ 89.324881][ T6040] warning: `syz.0.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.428410][ T6038] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.192'. [ 90.350893][ T6049] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.196'. [ 90.589393][ T39] audit: type=1326 audit(1722236455.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.197" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 92.137431][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 92.148096][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.151629][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.159304][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.167079][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.172886][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.176071][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.179107][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.182355][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.185707][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.189533][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.192623][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.195345][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.201845][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.205578][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.211261][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.214921][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.217836][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.220646][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.223876][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.227131][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.230248][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.233358][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.236231][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.239425][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.242683][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.245558][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.248913][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.251589][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.255227][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.258431][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.261054][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.264086][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.270419][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.273053][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.287807][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 92.640000][ T6072] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.203'. [ 92.726998][ T6078] FAULT_INJECTION: forcing a failure. [ 92.726998][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 92.732567][ T6078] CPU: 3 UID: 0 PID: 6078 Comm: syz.3.205 Not tainted 6.11.0-rc1-syzkaller #0 [ 92.736003][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.739990][ T6078] Call Trace: [ 92.741271][ T6078] [ 92.742394][ T6078] dump_stack_lvl+0x16c/0x1f0 [ 92.744180][ T6078] should_fail_ex+0x497/0x5b0 [ 92.746091][ T6078] ? fs_reclaim_acquire+0xae/0x160 [ 92.748318][ T6078] should_failslab+0xc2/0x120 [ 92.750354][ T6078] kmem_cache_alloc_node_noprof+0x71/0x310 [ 92.752754][ T6078] ? __alloc_skb+0x2b3/0x380 [ 92.754731][ T6078] __alloc_skb+0x2b3/0x380 [ 92.756666][ T6078] ? __pfx___alloc_skb+0x10/0x10 [ 92.758508][ T6078] ? __pfx___might_resched+0x10/0x10 [ 92.760593][ T6078] netlink_alloc_large_skb+0x69/0x130 [ 92.762827][ T6078] netlink_sendmsg+0x689/0xd70 [ 92.764471][ T6078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.766612][ T6078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 92.768850][ T6078] ____sys_sendmsg+0x9b4/0xb50 [ 92.770946][ T6078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.773296][ T6078] ? get_compat_msghdr+0x11b/0x170 [ 92.775517][ T6078] ? __pfx___lock_acquire+0x10/0x10 [ 92.777788][ T6078] ___sys_sendmsg+0x135/0x1e0 [ 92.779870][ T6078] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.782174][ T6078] ? ksys_write+0x21c/0x260 [ 92.784169][ T6078] ? __fget_light+0x173/0x210 [ 92.786245][ T6078] __sys_sendmsg+0x117/0x1f0 [ 92.788295][ T6078] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.790718][ T6078] __do_fast_syscall_32+0x73/0x120 [ 92.793007][ T6078] do_fast_syscall_32+0x32/0x80 [ 92.795090][ T6078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.797835][ T6078] RIP: 0023:0xf7f03579 [ 92.799610][ T6078] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.807389][ T6078] RSP: 002b:00000000f56b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.810308][ T6078] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 92.813653][ T6078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.816992][ T6078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.820312][ T6078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.823646][ T6078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.826959][ T6078] [ 93.504513][ T6085] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.207'. [ 93.695056][ T39] audit: type=1326 audit(1722236458.991:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.0.208" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 94.256649][ T6106] FAULT_INJECTION: forcing a failure. [ 94.256649][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 94.262131][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.3.214 Not tainted 6.11.0-rc1-syzkaller #0 [ 94.265947][ T6106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.270589][ T6106] Call Trace: [ 94.272066][ T6106] [ 94.273368][ T6106] dump_stack_lvl+0x16c/0x1f0 [ 94.275421][ T6106] should_fail_ex+0x497/0x5b0 [ 94.277483][ T6106] ? fs_reclaim_acquire+0xae/0x160 [ 94.279820][ T6106] should_failslab+0xc2/0x120 [ 94.281967][ T6106] __kmalloc_noprof+0xcb/0x410 [ 94.284079][ T6106] ? __pfx_lock_acquire+0x10/0x10 [ 94.286286][ T6106] tomoyo_realpath_from_path+0xbf/0x710 [ 94.288736][ T6106] ? tomoyo_profile+0x47/0x60 [ 94.290749][ T6106] tomoyo_path_number_perm+0x245/0x5b0 [ 94.293088][ T6106] ? tomoyo_path_number_perm+0x232/0x5b0 [ 94.295541][ T6106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.298102][ T6106] ? __pfx_lock_release+0x10/0x10 [ 94.300270][ T6106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.302830][ T6106] ? __fget_files+0x256/0x400 [ 94.304855][ T6106] security_file_ioctl_compat+0x75/0xc0 [ 94.307215][ T6106] __do_compat_sys_ioctl+0x5d/0x330 [ 94.309484][ T6106] __do_fast_syscall_32+0x73/0x120 [ 94.311737][ T6106] do_fast_syscall_32+0x32/0x80 [ 94.313880][ T6106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.316632][ T6106] RIP: 0023:0xf7f03579 [ 94.318422][ T6106] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.326623][ T6106] RSP: 002b:00000000f56b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 94.330282][ T6106] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c4301 [ 94.333542][ T6106] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.336998][ T6106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.340478][ T6106] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.343934][ T6106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.347387][ T6106] [ 94.352776][ T6106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.616833][ T6109] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.215'. [ 95.110340][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.299605][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 95.306329][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 95.310292][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.313308][ T10] usb 5-1: Product: syz [ 95.314891][ T10] usb 5-1: Manufacturer: syz [ 95.316707][ T10] usb 5-1: SerialNumber: syz [ 95.321577][ T10] usb 5-1: config 0 descriptor?? [ 95.327443][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 95.534892][ T5342] Bluetooth: hci1: Unknown advertising packet type: 0x74 [ 95.553132][ T6117] input: syz0 as /devices/virtual/input/input8 [ 96.190071][ T10] gp8psk: usb in 128 operation failed. [ 96.194962][ T10] gp8psk: usb in 137 operation failed. [ 96.197139][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 96.201915][ T10] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 96.207075][ T10] usb 5-1: USB disconnect, device number 6 [ 96.415391][ T6132] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.221'. [ 96.931913][ T5347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.939538][ T5347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.943720][ T5347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.964760][ T5347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.970586][ T5347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.987684][ T5347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.127089][ T6149] FAULT_INJECTION: forcing a failure. [ 97.127089][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.134171][ T6149] CPU: 3 UID: 0 PID: 6149 Comm: syz.1.226 Not tainted 6.11.0-rc1-syzkaller #0 [ 97.137220][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.140918][ T6149] Call Trace: [ 97.142060][ T6149] [ 97.143066][ T6149] dump_stack_lvl+0x16c/0x1f0 [ 97.144683][ T6149] should_fail_ex+0x497/0x5b0 [ 97.146280][ T6149] _copy_from_user+0x30/0xf0 [ 97.147858][ T6149] bpf_test_init.isra.0+0xf1/0x150 [ 97.149587][ T6149] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.151665][ T6149] bpf_prog_test_run_skb+0x250/0x2140 [ 97.153556][ T6149] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.155740][ T6149] ? fput+0x32/0x390 [ 97.157112][ T6149] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.159136][ T6149] __sys_bpf+0x141f/0x5600 [ 97.160705][ T6149] ? __pfx___sys_bpf+0x10/0x10 [ 97.162369][ T6149] ? ksys_write+0x12f/0x260 [ 97.163951][ T6149] ? find_held_lock+0x2d/0x110 [ 97.165608][ T6149] ? ksys_write+0x21c/0x260 [ 97.167193][ T6149] ? __pfx_lock_release+0x10/0x10 [ 97.168928][ T6149] ? vfs_write+0x14d/0x1140 [ 97.170510][ T6149] ? __mutex_unlock_slowpath+0x164/0x650 [ 97.172478][ T6149] ? fput+0x32/0x390 [ 97.173829][ T6149] ? ksys_write+0x1ab/0x260 [ 97.175408][ T6149] ? __pfx_ksys_write+0x10/0x10 [ 97.177104][ T6149] __ia32_sys_bpf+0x76/0xe0 [ 97.178669][ T6149] __do_fast_syscall_32+0x73/0x120 [ 97.180443][ T6149] do_fast_syscall_32+0x32/0x80 [ 97.182142][ T6149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.184412][ T6149] RIP: 0023:0xf7fa1579 [ 97.185822][ T6149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.192695][ T6149] RSP: 002b:00000000f573557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 97.195620][ T6149] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 97.198320][ T6149] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.201080][ T6149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.203782][ T6149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.206481][ T6149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.209203][ T6149] [ 97.221434][ T6149] No control pipe specified [ 97.247882][ T39] audit: type=1326 audit(1722236462.539:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.3.225" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 97.260695][ T5347] Bluetooth: hci3: command tx timeout [ 97.271232][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 97.566590][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.571523][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.576265][ T6140] bridge_slave_0: entered allmulticast mode [ 97.583973][ T6140] bridge_slave_0: entered promiscuous mode [ 97.593955][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.600418][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.608667][ T6140] bridge_slave_1: entered allmulticast mode [ 97.614641][ T6140] bridge_slave_1: entered promiscuous mode [ 97.698063][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.705115][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.780149][ T6140] team0: Port device team_slave_0 added [ 97.788406][ T6140] team0: Port device team_slave_1 added [ 97.820762][ T6156] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.227'. [ 97.869168][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.877010][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.889563][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.909777][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.914697][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.928308][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.949677][ T39] audit: type=1326 audit(1722236463.238:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.1.229" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x0 [ 98.005395][ T6140] hsr_slave_0: entered promiscuous mode [ 98.009599][ T6140] hsr_slave_1: entered promiscuous mode [ 98.013522][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.016748][ T6140] Cannot create hsr debugfs directory [ 98.213163][ T6140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.231889][ T6162] nbd1: detected capacity change from 0 to 12 [ 98.252455][ T5352] block nbd1: Send control failed (result -89) [ 98.260840][ T5352] block nbd1: Request send failed, requeueing [ 98.269127][ T5347] block nbd1: Receive control failed (result -32) [ 98.279568][ T5757] block nbd1: Dead connection, failed to find a fallback [ 98.283211][ T5757] block nbd1: shutting down sockets [ 98.285922][ T5757] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.290213][ T5757] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.301321][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.308721][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.326014][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.337570][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.340533][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.361162][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.363895][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.366031][ T6140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.367129][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.388671][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.395424][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.398969][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.402966][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.406475][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.414344][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.421197][ T5352] ldm_validate_partition_table(): Disk read failed. [ 98.425574][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.430662][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.434588][ T5352] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.438737][ T5352] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.442744][ T5352] Dev nbd1: unable to read RDB block 0 [ 98.446107][ T5352] nbd1: unable to read partition table [ 98.448889][ T5352] nbd1: partition table beyond EOD, truncated [ 98.454275][ T5352] ldm_validate_partition_table(): Disk read failed. [ 98.463047][ T5352] Dev nbd1: unable to read RDB block 0 [ 98.466854][ T5352] nbd1: unable to read partition table [ 98.471364][ T5352] nbd1: partition table beyond EOD, truncated [ 98.481303][ T981] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.544325][ T6140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.693543][ T6140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.701372][ T981] usb 8-1: Using ep0 maxpacket: 16 [ 98.725197][ T981] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 98.731404][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.734908][ T981] usb 8-1: Product: syz [ 98.736733][ T981] usb 8-1: Manufacturer: syz [ 98.738830][ T981] usb 8-1: SerialNumber: syz [ 98.776734][ T981] usb 8-1: config 0 descriptor?? [ 98.782692][ T981] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 98.888872][ T6140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.898114][ T6140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.906272][ T6140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.915618][ T6140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.015447][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 99.021606][ T5347] Bluetooth: hci4: command tx timeout [ 99.023096][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.042726][ T6165] input: syz0 as /devices/virtual/input/input9 [ 99.056477][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.073548][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.076072][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.090353][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.093071][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.269621][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.321465][ T6140] veth0_vlan: entered promiscuous mode [ 99.330148][ T6140] veth1_vlan: entered promiscuous mode [ 99.356736][ T6140] veth0_macvtap: entered promiscuous mode [ 99.362997][ T6140] veth1_macvtap: entered promiscuous mode [ 99.375869][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.379821][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.385917][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.390557][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.395338][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.399816][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.421731][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.426307][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.442852][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.469601][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.474291][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.478620][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.484166][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.489099][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.497138][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.501467][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.506175][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.513674][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.529102][ T6140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.534215][ T6140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.538136][ T6140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.542543][ T6140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.606292][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.613427][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.638835][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.645373][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.665563][ T981] gp8psk: usb in 128 operation failed. [ 99.668557][ T981] gp8psk: usb in 137 operation failed. [ 99.670412][ T981] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 99.675329][ T981] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 99.680181][ T981] usb 8-1: USB disconnect, device number 5 [ 99.761638][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.0.236'. [ 99.766638][ T6189] 0ªX¹¦D: renamed from gretap0 (while UP) [ 99.771716][ T6189] 0ªX¹¦D: entered allmulticast mode [ 99.774695][ T6189] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.069439][ T39] audit: type=1326 audit(1722236465.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.237" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x0 [ 100.305096][ T6201] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.238'. [ 101.105671][ T5347] Bluetooth: hci4: command tx timeout [ 101.555533][ T6235] program syz.3.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.768636][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 101.781139][ T6243] Êü: entered promiscuous mode [ 101.813023][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 101.902318][ T6242] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.251'. [ 101.993663][ T6245] FAULT_INJECTION: forcing a failure. [ 101.993663][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 102.001209][ T6245] CPU: 3 UID: 0 PID: 6245 Comm: syz.1.252 Not tainted 6.11.0-rc1-syzkaller #0 [ 102.005643][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.010135][ T6245] Call Trace: [ 102.011605][ T6245] [ 102.012887][ T6245] dump_stack_lvl+0x16c/0x1f0 [ 102.013081][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 102.014890][ T6245] should_fail_ex+0x497/0x5b0 [ 102.014931][ T6245] ? fs_reclaim_acquire+0xae/0x160 [ 102.014950][ T6245] should_failslab+0xc2/0x120 [ 102.021082][ T30] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 102.021362][ T6245] __kmalloc_noprof+0xcb/0x410 [ 102.026452][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.026737][ T6245] ? __pfx_lock_acquire+0x10/0x10 [ 102.029012][ T30] usb 7-1: Product: syz [ 102.031569][ T6245] tomoyo_realpath_from_path+0xbf/0x710 [ 102.034070][ T30] usb 7-1: Manufacturer: syz [ 102.035560][ T6245] ? tomoyo_profile+0x47/0x60 [ 102.037801][ T30] usb 7-1: SerialNumber: syz [ 102.039912][ T6245] tomoyo_path_number_perm+0x245/0x5b0 [ 102.039944][ T6245] ? tomoyo_path_number_perm+0x232/0x5b0 [ 102.039973][ T6245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.046848][ T30] usb 7-1: config 0 descriptor?? [ 102.049106][ T6245] ? __pfx_lock_release+0x10/0x10 [ 102.055993][ T6245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.056208][ T30] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 102.058704][ T6245] ? __fget_files+0x256/0x400 [ 102.064492][ T6245] security_file_ioctl_compat+0x75/0xc0 [ 102.066948][ T6245] __do_compat_sys_ioctl+0x5d/0x330 [ 102.069362][ T6245] __do_fast_syscall_32+0x73/0x120 [ 102.071722][ T6245] do_fast_syscall_32+0x32/0x80 [ 102.073919][ T6245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.076809][ T6245] RIP: 0023:0xf7fa1579 [ 102.078682][ T6245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.087113][ T6245] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 102.090857][ T6245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 102.094449][ T6245] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.098020][ T6245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.101609][ T6245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.105128][ T6245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.108726][ T6245] [ 102.110305][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.120768][ T6245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.124346][ T6245] program syz.1.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.271956][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 102.311819][ T6233] input: syz0 as /devices/virtual/input/input10 [ 102.631606][ T6257] FAULT_INJECTION: forcing a failure. [ 102.631606][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 102.637601][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.3.256 Not tainted 6.11.0-rc1-syzkaller #0 [ 102.641216][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.645706][ T6257] Call Trace: [ 102.647197][ T6257] [ 102.648466][ T6257] dump_stack_lvl+0x16c/0x1f0 [ 102.650485][ T6257] should_fail_ex+0x497/0x5b0 [ 102.652515][ T6257] ? fs_reclaim_acquire+0xae/0x160 [ 102.654598][ T6257] should_failslab+0xc2/0x120 [ 102.656452][ T6257] kmem_cache_alloc_node_noprof+0x71/0x310 [ 102.658898][ T6257] ? __alloc_skb+0x2b3/0x380 [ 102.660854][ T6257] __alloc_skb+0x2b3/0x380 [ 102.662819][ T6257] ? __pfx___alloc_skb+0x10/0x10 [ 102.664936][ T6257] ? __pfx___might_resched+0x10/0x10 [ 102.667183][ T6257] netlink_alloc_large_skb+0x69/0x130 [ 102.669436][ T6257] netlink_sendmsg+0x689/0xd70 [ 102.671591][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.673547][ T6257] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 102.675797][ T6257] ____sys_sendmsg+0x9b4/0xb50 [ 102.677742][ T6257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.679989][ T6257] ? get_compat_msghdr+0x11b/0x170 [ 102.682105][ T6257] ? __pfx___lock_acquire+0x10/0x10 [ 102.684284][ T6257] ___sys_sendmsg+0x135/0x1e0 [ 102.686279][ T6257] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.688517][ T6257] ? ksys_write+0x21c/0x260 [ 102.690287][ T6257] ? __fget_light+0x173/0x210 [ 102.691954][ T6257] __sys_sendmsg+0x117/0x1f0 [ 102.693767][ T6257] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.695893][ T6257] __do_fast_syscall_32+0x73/0x120 [ 102.698055][ T6257] do_fast_syscall_32+0x32/0x80 [ 102.700037][ T6257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.702299][ T6257] RIP: 0023:0xf7f03579 [ 102.703932][ T6257] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.711506][ T6257] RSP: 002b:00000000f56b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 102.714971][ T6257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 102.717522][ T6257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.720358][ T6257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.723615][ T6257] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.726906][ T6257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.730003][ T6257] [ 102.962264][ T30] gp8psk: usb in 128 operation failed. [ 102.970247][ T30] gp8psk: usb in 137 operation failed. [ 102.972868][ T30] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 102.979287][ T30] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 102.989484][ T30] usb 7-1: USB disconnect, device number 3 [ 103.183667][ T5347] Bluetooth: hci4: command tx timeout [ 103.622875][ T6266] vivid-002: ================= START STATUS ================= [ 103.628133][ T6266] vivid-002: Radio HW Seek Mode: Bounded [ 103.640508][ T6266] vivid-002: Radio Programmable HW Seek: false [ 103.640703][ T6266] vivid-002: RDS Rx I/O Mode: Block I/O [ 103.640724][ T6266] vivid-002: Generate RBDS Instead of RDS: false [ 103.640746][ T6266] vivid-002: RDS Reception: true [ 103.640766][ T6266] vivid-002: RDS Program Type: 0 inactive [ 103.640794][ T6266] vivid-002: RDS PS Name: inactive [ 103.640819][ T6266] vivid-002: RDS Radio Text: inactive [ 103.640844][ T6266] vivid-002: RDS Traffic Announcement: false inactive [ 103.640871][ T6266] vivid-002: RDS Traffic Program: false inactive [ 103.674533][ T6266] vivid-002: RDS Music: false inactive [ 103.674561][ T6266] vivid-002: ================== END STATUS ================== [ 103.832249][ T6273] Cannot find set identified by id 0 to match [ 103.989891][ T6271] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.261'. [ 104.217026][ T6277] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.264'. [ 104.706877][ T6279] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.265'. [ 105.264724][ T5347] Bluetooth: hci4: command tx timeout [ 105.314716][ T1425] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 105.371049][ T6295] Cannot find set identified by id 0 to match [ 105.494876][ T1425] usb 8-1: Using ep0 maxpacket: 16 [ 105.512215][ T1425] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 105.516332][ T1425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.519724][ T1425] usb 8-1: Product: syz [ 105.521541][ T1425] usb 8-1: Manufacturer: syz [ 105.523560][ T1425] usb 8-1: SerialNumber: syz [ 105.530070][ T1425] usb 8-1: config 0 descriptor?? [ 105.536909][ T1425] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 105.795783][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 105.826446][ T5347] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 105.833494][ T5347] Bluetooth: hci1: Injecting HCI hardware error event [ 105.838143][ T5347] Bluetooth: hci1: hardware error 0x00 [ 105.874165][ T6291] input: syz0 as /devices/virtual/input/input11 [ 106.417588][ T6307] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.275'. [ 106.509979][ T1425] gp8psk: usb in 128 operation failed. [ 106.515309][ T1425] gp8psk: usb in 137 operation failed. [ 106.519869][ T1425] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 106.523852][ T1425] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 106.533463][ T1425] usb 8-1: USB disconnect, device number 6 [ 106.627040][ T6311] overlayfs: workdir and upperdir must be separate subtrees [ 106.647106][ T6309] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.276'. [ 107.421197][ T6321] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.281'. [ 107.906208][ T5347] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.270467][ T39] audit: type=1804 audit(1722236474.553:8): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.289" name="/newroot/95/file0/bus" dev="9p" ino=36701685 res=1 errno=0 [ 109.473217][ T6345] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.290'. [ 110.127870][ T6354] FAULT_INJECTION: forcing a failure. [ 110.127870][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 110.137203][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.2.294 Not tainted 6.11.0-rc1-syzkaller #0 [ 110.141064][ T6354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.145750][ T6354] Call Trace: [ 110.147253][ T6354] [ 110.148599][ T6354] dump_stack_lvl+0x16c/0x1f0 [ 110.150734][ T6354] should_fail_ex+0x497/0x5b0 [ 110.152796][ T6354] ? fs_reclaim_acquire+0xae/0x160 [ 110.155003][ T6354] should_failslab+0xc2/0x120 [ 110.157041][ T6354] __kmalloc_noprof+0xcb/0x410 [ 110.159071][ T6354] ? __pfx_lock_acquire+0x10/0x10 [ 110.161238][ T6354] tomoyo_realpath_from_path+0xbf/0x710 [ 110.163560][ T6354] ? tomoyo_profile+0x47/0x60 [ 110.165356][ T6354] tomoyo_path_number_perm+0x245/0x5b0 [ 110.167568][ T6354] ? tomoyo_path_number_perm+0x232/0x5b0 [ 110.170012][ T6354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 110.172742][ T6354] ? __pfx_lock_release+0x10/0x10 [ 110.174807][ T6354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.177197][ T6354] ? __fget_files+0x256/0x400 [ 110.179374][ T6354] security_file_ioctl_compat+0x75/0xc0 [ 110.181751][ T6354] __do_compat_sys_ioctl+0x5d/0x330 [ 110.184002][ T6354] __do_fast_syscall_32+0x73/0x120 [ 110.186224][ T6354] do_fast_syscall_32+0x32/0x80 [ 110.188393][ T6354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.191198][ T6354] RIP: 0023:0xf73de579 [ 110.192998][ T6354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.201510][ T6354] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 110.205190][ T6354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c4301 [ 110.208742][ T6354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.212208][ T6354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.216153][ T6354] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.219777][ T6354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.223225][ T6354] [ 110.228007][ T6354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.894983][ T6372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.924792][ T6372] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 111.288023][ T6376] fuse: Unknown parameter 'gr ' [ 111.330132][ T6376] 9pnet_fd: Insufficient options for proto=fd [ 111.401652][ T6378] Cannot find set identified by id 0 to match [ 111.744353][ T6380] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.302'. [ 112.782080][ T6392] random: crng reseeded on system resumption [ 113.455784][ T6394] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.308'. [ 113.478993][ T6396] tap0: tun_chr_ioctl cmd 1074025677 [ 113.481276][ T6396] tap0: linktype set to 825 [ 114.281422][ T25] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 114.367526][ T6409] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.312'. [ 114.450082][ T25] usb 8-1: device descriptor read/64, error -71 [ 114.739335][ T25] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 114.889413][ T25] usb 8-1: device descriptor read/64, error -71 [ 115.010533][ T25] usb usb8-port1: attempt power cycle [ 115.279620][ T5004] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.420082][ T25] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 115.451166][ T25] usb 8-1: device descriptor read/8, error -71 [ 115.459766][ T5004] usb 6-1: Using ep0 maxpacket: 16 [ 115.477376][ T5004] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 115.481500][ T5004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.485090][ T5004] usb 6-1: Product: syz [ 115.487011][ T5004] usb 6-1: Manufacturer: syz [ 115.489186][ T5004] usb 6-1: SerialNumber: syz [ 115.496729][ T5004] usb 6-1: config 0 descriptor?? [ 115.507216][ T5004] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 115.518797][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.719982][ T25] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 115.770882][ T25] usb 8-1: device descriptor read/8, error -71 [ 115.868136][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 115.894008][ T6415] input: syz0 as /devices/virtual/input/input12 [ 115.896185][ T25] usb usb8-port1: unable to enumerate USB device [ 115.939476][ T6420] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.520061][ T5004] gp8psk: usb in 128 operation failed. [ 116.530617][ T5004] gp8psk: usb in 137 operation failed. [ 116.533079][ T5004] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 116.537589][ T5004] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 116.548503][ T5004] usb 6-1: USB disconnect, device number 6 [ 116.823172][ T6434] random: crng reseeded on system resumption [ 116.877070][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 116.896374][ T6436] bond1: entered promiscuous mode [ 116.903418][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 116.909283][ T6436] bond1 (unregistering): Released all slaves [ 116.995048][ T6433] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.320'. [ 117.183592][ T6440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.828940][ T6444] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.324'. [ 119.231605][ T5004] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 119.397543][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.431755][ T5004] usb 7-1: Using ep0 maxpacket: 16 [ 119.441733][ T5004] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 119.445237][ T5004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.461707][ T5004] usb 7-1: Product: syz [ 119.463426][ T5004] usb 7-1: Manufacturer: syz [ 119.465193][ T5004] usb 7-1: SerialNumber: syz [ 119.469344][ T5004] usb 7-1: config 0 descriptor?? [ 119.483195][ T5004] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 119.709772][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 119.796293][ T6456] input: syz0 as /devices/virtual/input/input13 [ 119.882819][ T6463] 9pnet_fd: Insufficient options for proto=fd [ 119.899047][ T6463] FAULT_INJECTION: forcing a failure. [ 119.899047][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 119.914540][ T6463] CPU: 2 UID: 0 PID: 6463 Comm: syz.3.330 Not tainted 6.11.0-rc1-syzkaller #0 [ 119.918673][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.923557][ T6463] Call Trace: [ 119.925016][ T6463] [ 119.926246][ T6463] dump_stack_lvl+0x16c/0x1f0 [ 119.928321][ T6463] should_fail_ex+0x497/0x5b0 [ 119.930321][ T6463] ? fs_reclaim_acquire+0xae/0x160 [ 119.932535][ T6463] should_failslab+0xc2/0x120 [ 119.934596][ T6463] __kmalloc_cache_noprof+0x6b/0x310 [ 119.936911][ T6463] ? snd_seq_port_connect+0x61/0x550 [ 119.938972][ T6463] snd_seq_port_connect+0x61/0x550 [ 119.940842][ T6463] ? _raw_read_unlock+0x28/0x50 [ 119.942775][ T6463] ? check_subscription_permission.isra.0+0xf5/0x240 [ 119.945468][ T6463] snd_seq_ioctl_subscribe_port+0x1fe/0x3f0 [ 119.948017][ T6463] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 119.950667][ T6463] ? __pfx_lock_release+0x10/0x10 [ 119.952679][ T6463] ? mark_held_locks+0x9f/0xe0 [ 119.954738][ T6463] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 119.957089][ T6463] snd_seq_oss_midi_open+0x5c5/0x6b0 [ 119.959321][ T6463] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 119.961803][ T6463] ? lock_acquire+0x1b1/0x560 [ 119.963830][ T6463] snd_seq_oss_synth_reset+0x484/0x890 [ 119.965885][ T6463] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 119.968310][ T6463] ? rcu_is_watching+0x12/0xc0 [ 119.970269][ T6463] ? trace_contention_end+0xea/0x140 [ 119.972559][ T6463] snd_seq_oss_reset+0x73/0x290 [ 119.974604][ T6463] snd_seq_oss_ioctl+0xc06/0xd90 [ 119.976816][ T6463] ? __pfx___mutex_lock+0x10/0x10 [ 119.978926][ T6463] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 119.981113][ T6463] ? __fget_files+0x256/0x400 [ 119.982977][ T6463] odev_ioctl+0x9a/0x120 [ 119.984832][ T6463] ? __pfx_odev_ioctl_compat+0x10/0x10 [ 119.987312][ T6463] __do_compat_sys_ioctl+0x2c3/0x330 [ 119.989700][ T6463] __do_fast_syscall_32+0x73/0x120 [ 119.992258][ T6463] do_fast_syscall_32+0x32/0x80 [ 119.994542][ T6463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.997559][ T6463] RIP: 0023:0xf7f03579 [ 119.999357][ T6463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.006738][ T6463] RSP: 002b:00000000f56b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 120.010348][ T6463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005100 [ 120.013053][ T6463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.016531][ T6463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.020015][ T6463] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.023761][ T6463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.027741][ T6463] [ 120.423071][ T5004] gp8psk: usb in 128 operation failed. [ 120.442905][ T5004] gp8psk: usb in 137 operation failed. [ 120.447046][ T5004] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 120.451232][ T5004] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 120.475541][ T5004] usb 7-1: USB disconnect, device number 4 [ 120.602391][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 120.792492][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 120.799357][ T25] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 120.804516][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.807975][ T25] usb 8-1: Product: syz [ 120.809791][ T25] usb 8-1: Manufacturer: syz [ 120.811798][ T25] usb 8-1: SerialNumber: syz [ 120.834288][ T25] usb 8-1: config 0 descriptor?? [ 120.839447][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 121.092383][ T6458] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 121.098720][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 121.205941][ T6468] input: syz0 as /devices/virtual/input/input14 [ 121.299046][ T6471] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.332'. [ 121.909047][ T25] gp8psk: usb in 128 operation failed. [ 121.914942][ T25] gp8psk: usb in 137 operation failed. [ 121.917442][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 121.921605][ T25] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 121.929038][ T6488] 9pnet_fd: Insufficient options for proto=fd [ 121.943323][ T25] usb 8-1: USB disconnect, device number 11 [ 121.999142][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.010013][ T6485] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.335'. [ 122.577766][ T6497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.863421][ T981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.053495][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 123.064916][ T981] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 123.068869][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.072037][ T981] usb 6-1: Product: syz [ 123.073637][ T981] usb 6-1: Manufacturer: syz [ 123.075787][ T981] usb 6-1: SerialNumber: syz [ 123.084171][ T981] usb 6-1: config 0 descriptor?? [ 123.089462][ T981] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 123.143552][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.300405][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 123.303606][ T5383] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 123.314037][ T6499] input: syz0 as /devices/virtual/input/input15 [ 123.343676][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 123.356910][ T30] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 123.361834][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.372124][ T30] usb 5-1: Product: syz [ 123.375873][ T981] gp8psk: usb in 128 operation failed. [ 123.376045][ T30] usb 5-1: Manufacturer: syz [ 123.380039][ T981] gp8psk: usb in 137 operation failed. [ 123.380913][ T30] usb 5-1: SerialNumber: syz [ 123.383046][ T981] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 123.383099][ T981] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 123.392805][ T30] usb 5-1: config 0 descriptor?? [ 123.405849][ T30] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 123.406565][ T981] usb 6-1: USB disconnect, device number 7 [ 123.510274][ T5383] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.515750][ T5383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.520475][ T5383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.525275][ T5383] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.533043][ T5383] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.537236][ T5383] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.540749][ T5383] usb 7-1: Manufacturer: syz [ 123.545819][ T5383] usb 7-1: config 0 descriptor?? [ 123.655938][ T6501] input: syz0 as /devices/virtual/input/input16 [ 123.970038][ T5383] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 123.979401][ T5383] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 123.998160][ T5383] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 124.367199][ T30] gp8psk: usb in 128 operation failed. [ 124.370482][ T30] gp8psk: usb in 137 operation failed. [ 124.373039][ T30] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 124.383133][ T30] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 124.392056][ T30] usb 5-1: USB disconnect, device number 7 [ 124.608291][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.226957][ T6508] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 125.272238][ T6520] 9pnet_fd: Insufficient options for proto=fd [ 125.372865][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.380915][ T6518] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.346'. [ 125.704180][ T6525] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.348'. [ 126.089275][ T30] usb 7-1: USB disconnect, device number 5 [ 126.555258][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 126.593705][ T6531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.671508][ T6531] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 126.761550][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 126.790518][ T10] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 126.795539][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.798750][ T10] usb 8-1: Product: syz [ 126.815329][ T10] usb 8-1: Manufacturer: syz [ 126.817426][ T10] usb 8-1: SerialNumber: syz [ 126.826253][ T10] usb 8-1: config 0 descriptor?? [ 126.842092][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 127.044844][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 127.073903][ T10] gp8psk: usb in 128 operation failed. [ 127.085806][ T10] gp8psk: usb in 137 operation failed. [ 127.088277][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 127.092341][ T10] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 127.113616][ T10] usb 8-1: USB disconnect, device number 12 [ 127.195696][ T1166] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 127.396678][ T1166] usb 7-1: Using ep0 maxpacket: 16 [ 127.418622][ T6544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.423110][ T1166] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 127.428466][ T1166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.432131][ T1166] usb 7-1: Product: syz [ 127.433790][ T1166] usb 7-1: Manufacturer: syz [ 127.436432][ T1166] usb 7-1: SerialNumber: syz [ 127.442763][ T1166] usb 7-1: config 0 descriptor?? [ 127.449914][ T1166] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 127.734941][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 127.825438][ T39] audit: type=1804 audit(1722236493.104:9): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.357" name="/newroot/84/file0/bus" dev="hugetlbfs" ino=15537 res=1 errno=0 [ 127.835096][ T6540] input: syz0 as /devices/virtual/input/input18 [ 128.204025][ T6547] fuse: Bad value for 'group_id' [ 128.206274][ T6547] fuse: Bad value for 'group_id' [ 128.635492][ T1166] gp8psk: usb in 128 operation failed. [ 128.656823][ T1166] gp8psk: usb in 137 operation failed. [ 128.662310][ T1166] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 128.674792][ T1166] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 128.688700][ T1166] usb 7-1: USB disconnect, device number 6 [ 129.658926][ T6554] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.358'. [ 130.064433][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.320862][ T6561] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.360'. [ 130.387915][ T6556] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 131.197872][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.387827][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 131.401479][ T10] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 131.405744][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.409167][ T10] usb 8-1: Product: syz [ 131.411117][ T10] usb 8-1: Manufacturer: syz [ 131.413244][ T10] usb 8-1: SerialNumber: syz [ 131.417550][ T10] usb 8-1: config 0 descriptor?? [ 131.422189][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 131.629191][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 131.637736][ T10] gp8psk: usb in 128 operation failed. [ 131.652803][ T10] gp8psk: usb in 137 operation failed. [ 131.655716][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 131.660432][ T10] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 131.668106][ T10] usb 8-1: USB disconnect, device number 13 [ 131.807919][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.997961][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 132.011636][ T25] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 132.015468][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.020083][ T25] usb 6-1: Product: syz [ 132.026354][ T25] usb 6-1: Manufacturer: syz [ 132.028457][ T25] usb 6-1: SerialNumber: syz [ 132.034772][ T25] usb 6-1: config 0 descriptor?? [ 132.039710][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 132.276013][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 132.277160][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 132.343293][ T6580] input: syz0 as /devices/virtual/input/input19 [ 132.373743][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.484154][ T6586] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.369'. [ 132.514529][ T6593] sctp: failed to load transform for md5: -2 [ 132.801846][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805679][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823501][ T6603] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.372'. [ 132.932370][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.989867][ T25] gp8psk: usb in 128 operation failed. [ 132.997763][ T25] gp8psk: usb in 137 operation failed. [ 133.001018][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 133.005645][ T25] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 133.016569][ T25] usb 6-1: USB disconnect, device number 8 [ 133.364665][ T6588] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 134.411638][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 134.429233][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 134.629323][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 134.636981][ T25] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 134.641624][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.645174][ T25] usb 8-1: Product: syz [ 134.647195][ T25] usb 8-1: Manufacturer: syz [ 134.649112][ T25] usb 8-1: SerialNumber: syz [ 134.653962][ T25] usb 8-1: config 0 descriptor?? [ 134.659099][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 134.764597][ T6634] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.381'. [ 134.869219][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 134.892633][ T25] gp8psk: usb in 128 operation failed. [ 134.904772][ T25] gp8psk: usb in 137 operation failed. [ 134.907370][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 134.914568][ T25] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 134.920683][ T25] usb 8-1: USB disconnect, device number 14 [ 135.586358][ T6640] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.383'. [ 135.860457][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.968402][ T6653] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.387'. [ 137.029165][ T6647] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 137.752347][ T6667] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.392'. [ 137.910965][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 138.102636][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 138.117785][ T25] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 138.131174][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.134292][ T25] usb 7-1: Product: syz [ 138.135869][ T25] usb 7-1: Manufacturer: syz [ 138.137776][ T25] usb 7-1: SerialNumber: syz [ 138.151605][ T25] usb 7-1: config 0 descriptor?? [ 138.215615][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 138.255514][ T6675] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.395'. [ 138.449152][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 138.459685][ T25] gp8psk: usb in 128 operation failed. [ 138.481288][ T25] gp8psk: usb in 137 operation failed. [ 138.483619][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 138.487540][ T25] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 138.493305][ T25] usb 7-1: USB disconnect, device number 7 [ 139.518870][ T6697] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.404'. [ 139.561813][ T981] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 139.745320][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.750415][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.756151][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.766919][ T981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.770464][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.779486][ T981] usb 6-1: config 0 descriptor?? [ 140.094447][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.201681][ T6700] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.478317][ T6705] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.407'. [ 142.025613][ T1166] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 142.114952][ T981] usbhid 6-1:0.0: can't add hid device: -71 [ 142.117762][ T981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 142.123236][ T6711] FAULT_INJECTION: forcing a failure. [ 142.123236][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 142.128498][ T6711] CPU: 2 UID: 0 PID: 6711 Comm: syz.2.410 Not tainted 6.11.0-rc1-syzkaller #0 [ 142.132320][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.135325][ T981] usb 6-1: USB disconnect, device number 9 [ 142.136498][ T6711] Call Trace: [ 142.140142][ T6711] [ 142.141384][ T6711] dump_stack_lvl+0x16c/0x1f0 [ 142.143071][ T6711] should_fail_ex+0x497/0x5b0 [ 142.144734][ T6711] should_failslab+0xc2/0x120 [ 142.146726][ T6711] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 142.148535][ T6711] ? skb_clone+0x190/0x3f0 [ 142.150107][ T6711] skb_clone+0x190/0x3f0 [ 142.151658][ T6711] netlink_deliver_tap+0xb26/0xcf0 [ 142.153632][ T6711] netlink_unicast+0x6c2/0x830 [ 142.155484][ T6711] ? __pfx_netlink_unicast+0x10/0x10 [ 142.157507][ T6711] ? __pfx_nf_tables_abort+0x10/0x10 [ 142.159585][ T6711] netlink_ack+0x6a5/0xb20 [ 142.161433][ T6711] nfnetlink_rcv_batch+0x1622/0x24e0 [ 142.163556][ T6711] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 142.165553][ T6711] ? __pfx_lock_release+0x10/0x10 [ 142.167687][ T6711] ? __local_bh_enable_ip+0xa4/0x120 [ 142.169889][ T6711] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.172275][ T6711] ? __pfx___dev_queue_xmit+0x10/0x10 [ 142.174337][ T6711] ? bpf_lsm_capable+0x9/0x10 [ 142.176445][ T6711] ? __nla_parse+0x40/0x60 [ 142.177974][ T6711] nfnetlink_rcv+0x3c3/0x430 [ 142.179757][ T6711] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 142.181989][ T6711] netlink_unicast+0x544/0x830 [ 142.183855][ T6711] ? __pfx_netlink_unicast+0x10/0x10 [ 142.185625][ T6711] ? __phys_addr_symbol+0x30/0x80 [ 142.187642][ T6711] ? __check_object_size+0x497/0x720 [ 142.189741][ T6711] netlink_sendmsg+0x8b8/0xd70 [ 142.191879][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.194275][ T6711] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.196645][ T6711] ____sys_sendmsg+0x9b4/0xb50 [ 142.198523][ T6711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.200377][ T6711] ? get_compat_msghdr+0x11b/0x170 [ 142.202518][ T6711] ? __pfx___lock_acquire+0x10/0x10 [ 142.204306][ T6711] ___sys_sendmsg+0x135/0x1e0 [ 142.206284][ T6711] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.208431][ T6711] ? ksys_write+0x21c/0x260 [ 142.210264][ T6711] ? __fget_light+0x173/0x210 [ 142.212174][ T6711] __sys_sendmsg+0x117/0x1f0 [ 142.214016][ T6711] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.216055][ T6711] ? bpf_trace_run2+0x2a6/0x590 [ 142.218032][ T6711] ? rcu_is_watching+0x12/0xc0 [ 142.220121][ T6711] __do_fast_syscall_32+0x73/0x120 [ 142.222420][ T6711] do_fast_syscall_32+0x32/0x80 [ 142.224600][ T6711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.227420][ T6711] RIP: 0023:0xf73de579 [ 142.229230][ T6711] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.236609][ T6711] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 142.239500][ T6711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 142.242491][ T6711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.245991][ T6711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.249376][ T6711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.252698][ T6711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.256023][ T6711] [ 142.303137][ T1166] usb 8-1: Using ep0 maxpacket: 16 [ 142.309884][ T1166] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 142.314032][ T1166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.317458][ T1166] usb 8-1: Product: syz [ 142.319271][ T1166] usb 8-1: Manufacturer: syz [ 142.321252][ T1166] usb 8-1: SerialNumber: syz [ 142.333819][ T1166] usb 8-1: config 0 descriptor?? [ 142.338450][ T1166] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 142.556154][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 142.577689][ T1166] gp8psk: usb in 128 operation failed. [ 142.583356][ T1166] gp8psk: usb in 137 operation failed. [ 142.585693][ T1166] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 142.589770][ T1166] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 142.600903][ T1166] usb 8-1: USB disconnect, device number 15 [ 142.603407][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 142.809200][ T25] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 142.817825][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.826899][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.831095][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 142.837175][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 142.842795][ T25] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 142.845932][ T25] usb 7-1: Manufacturer: syz [ 142.863237][ T25] usb 7-1: config 0 descriptor?? [ 143.110355][ T6719] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.414'. [ 143.278431][ T25] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 143.281626][ T25] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 143.287865][ T25] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 143.785013][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.811207][ T981] usb 7-1: USB disconnect, device number 8 [ 143.990348][ T6732] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.418'. [ 144.185179][ T6725] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 144.239716][ T6735] fuse: Bad value for 'group_id' [ 144.241990][ T6735] fuse: Bad value for 'group_id' [ 144.673864][ T6737] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.420'. [ 145.104535][ T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.285496][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 145.291348][ T981] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 145.304700][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.307992][ T981] usb 5-1: Product: syz [ 145.309472][ T981] usb 5-1: Manufacturer: syz [ 145.311178][ T981] usb 5-1: SerialNumber: syz [ 145.314747][ T981] usb 5-1: config 0 descriptor?? [ 145.326118][ T981] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 145.544971][ T981] gp8psk: usb in 128 operation failed. [ 145.547692][ T981] gp8psk: usb in 137 operation failed. [ 145.549984][ T981] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 145.564831][ T981] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 145.585364][ T981] usb 5-1: USB disconnect, device number 8 [ 147.361029][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.576057][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 147.849079][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.853837][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.872489][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.886075][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.899017][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.933662][ T10] usb 7-1: config 0 descriptor?? [ 148.247848][ T6764] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.429'. [ 148.256148][ T1425] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.379815][ T6739] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 148.459364][ T1425] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.468663][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.484618][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.493932][ T1425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.501033][ T1425] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.505455][ T1425] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.510228][ T1425] usb 5-1: Manufacturer: syz [ 148.524187][ T1425] usb 5-1: config 0 descriptor?? [ 148.958465][ T1425] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 148.962257][ T1425] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 148.989023][ T1425] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 149.898169][ T6771] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.431'. [ 150.040875][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 150.043858][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 150.050412][ T10] usb 7-1: USB disconnect, device number 9 [ 150.077035][ T5379] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 150.267167][ T5379] usb 6-1: Using ep0 maxpacket: 16 [ 150.274194][ T5379] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 150.278971][ T5379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.282659][ T5379] usb 6-1: Product: syz [ 150.284614][ T5379] usb 6-1: Manufacturer: syz [ 150.286619][ T5379] usb 6-1: SerialNumber: syz [ 150.291342][ T5379] usb 6-1: config 0 descriptor?? [ 150.296609][ T5379] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 150.367437][ T6778] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.434'. [ 150.513377][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 150.538684][ T5379] gp8psk: usb in 128 operation failed. [ 150.551938][ T5379] gp8psk: usb in 137 operation failed. [ 150.554128][ T5379] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 150.561436][ T5379] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 150.577400][ T5379] usb 6-1: USB disconnect, device number 10 [ 151.014647][ T1425] usb 5-1: USB disconnect, device number 9 [ 151.329095][ T6791] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.438'. [ 151.775505][ T6797] fuse: Bad value for 'group_id' [ 151.780629][ T6797] fuse: Bad value for 'group_id' [ 152.469163][ T1425] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.493614][ T6813] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.445'. [ 152.675343][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.680504][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.684988][ T1425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.691226][ T1425] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.695360][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.706902][ T1425] usb 5-1: config 0 descriptor?? [ 152.742179][ T6815] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.446'. [ 153.469556][ T981] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 153.688809][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 153.689917][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 153.699642][ T981] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 153.703414][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.706748][ T981] usb 6-1: Product: syz [ 153.708444][ T981] usb 6-1: Manufacturer: syz [ 153.728823][ T981] usb 6-1: SerialNumber: syz [ 153.732803][ T981] usb 6-1: config 0 descriptor?? [ 153.738554][ T981] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 153.751453][ T1425] usbhid 5-1:0.0: can't add hid device: -71 [ 153.754161][ T1425] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.772016][ T1425] usb 5-1: USB disconnect, device number 10 [ 153.868935][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 153.876029][ T25] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 153.880410][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.883790][ T25] usb 8-1: Product: syz [ 153.885694][ T25] usb 8-1: Manufacturer: syz [ 153.887766][ T25] usb 8-1: SerialNumber: syz [ 153.893251][ T25] usb 8-1: config 0 descriptor?? [ 153.900309][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 153.945393][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 153.950455][ T981] gp8psk: usb in 128 operation failed. [ 153.959926][ T981] gp8psk: usb in 137 operation failed. [ 153.962372][ T981] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 153.967697][ T981] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 153.973032][ T981] usb 6-1: USB disconnect, device number 11 [ 154.123882][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 154.138983][ T25] gp8psk: usb in 128 operation failed. [ 154.153415][ T25] gp8psk: usb in 137 operation failed. [ 154.156650][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 154.174979][ T25] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 154.180995][ T25] usb 8-1: USB disconnect, device number 16 [ 154.422630][ T6827] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.451'. [ 154.908235][ T42] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.075909][ T6842] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.456'. [ 155.462387][ T6855] fuse: Bad value for 'group_id' [ 155.464845][ T6855] fuse: Bad value for 'group_id' [ 155.899925][ T981] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 156.080080][ T981] usb 7-1: Using ep0 maxpacket: 16 [ 156.088923][ T981] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 156.100270][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.105459][ T981] usb 7-1: Product: syz [ 156.110377][ T981] usb 7-1: Manufacturer: syz [ 156.114018][ T981] usb 7-1: SerialNumber: syz [ 156.121619][ T5378] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.129790][ T981] usb 7-1: config 0 descriptor?? [ 156.146019][ T981] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 156.334002][ T5378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.338565][ T5378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.360959][ T5378] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.375381][ T5342] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 156.376964][ T5378] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.383856][ T981] gp8psk: usb in 128 operation failed. [ 156.389154][ T981] gp8psk: usb in 137 operation failed. [ 156.395039][ T981] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 156.400928][ T5378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.405881][ T981] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 156.421668][ T5378] usb 5-1: config 0 descriptor?? [ 156.430212][ T981] usb 7-1: USB disconnect, device number 10 [ 156.970957][ T5342] Bluetooth: hci5: command 0x1003 tx timeout [ 156.975168][ T5347] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.290726][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 157.470750][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 157.485269][ T25] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 157.493512][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.497095][ T25] usb 7-1: Product: syz [ 157.498969][ T25] usb 7-1: Manufacturer: syz [ 157.501808][ T25] usb 7-1: SerialNumber: syz [ 157.513087][ T25] usb 7-1: config 0 descriptor?? [ 157.518969][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 157.888689][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 157.957595][ T6870] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.466'. [ 157.966259][ T25] gp8psk: usb in 128 operation failed. [ 157.969184][ T25] gp8psk: usb in 137 operation failed. [ 157.972662][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 157.977102][ T25] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 157.985657][ T25] usb 7-1: USB disconnect, device number 11 [ 158.485644][ T5378] usbhid 5-1:0.0: can't add hid device: -71 [ 158.488026][ T5378] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 158.507044][ T5378] usb 5-1: USB disconnect, device number 11 [ 159.571856][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.776366][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 159.790218][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 159.793239][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.795613][ T10] usb 5-1: Product: syz [ 159.797463][ T10] usb 5-1: Manufacturer: syz [ 159.799382][ T10] usb 5-1: SerialNumber: syz [ 159.813219][ T10] usb 5-1: config 0 descriptor?? [ 159.818976][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 159.882607][ T6900] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.476'. [ 160.030609][ T10] gp8psk: usb in 128 operation failed. [ 160.040998][ T10] gp8psk: usb in 137 operation failed. [ 160.043438][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 160.047158][ T10] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 160.052209][ T10] usb 5-1: USB disconnect, device number 12 [ 160.107799][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.122029][ T5378] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 160.180860][ T6898] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 160.312109][ T5378] usb 8-1: Using ep0 maxpacket: 16 [ 160.319889][ T5378] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 160.323625][ T5378] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.326881][ T5378] usb 8-1: Product: syz [ 160.328728][ T5378] usb 8-1: Manufacturer: syz [ 160.330787][ T5378] usb 8-1: SerialNumber: syz [ 160.335638][ T5378] usb 8-1: config 0 descriptor?? [ 160.340661][ T5378] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 160.602489][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 160.622142][ T5378] gp8psk: usb in 128 operation failed. [ 160.627719][ T5378] gp8psk: usb in 137 operation failed. [ 160.632100][ T5378] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 160.636938][ T5378] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 160.648524][ T5378] usb 8-1: USB disconnect, device number 17 [ 160.652733][ T5004] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 160.654633][ T5352] udevd[5352]: setting mode of /dev/bus/usb/008/017 to 020664 failed: No such file or directory [ 160.659681][ T5352] udevd[5352]: setting owner of /dev/bus/usb/008/017 to uid=0, gid=0 failed: No such file or directory [ 160.848749][ T5004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.854023][ T5004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.892612][ T5004] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.898769][ T5004] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.903607][ T5004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.911279][ T5004] usb 6-1: config 0 descriptor?? [ 161.590489][ T6926] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.485'. [ 162.031280][ T6935] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.488'. [ 162.623454][ T1425] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.763497][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 162.803575][ T1425] usb 5-1: Using ep0 maxpacket: 16 [ 162.818312][ T1425] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 162.822297][ T1425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.827469][ T1425] usb 5-1: Product: syz [ 162.829245][ T1425] usb 5-1: Manufacturer: syz [ 162.831097][ T1425] usb 5-1: SerialNumber: syz [ 162.838744][ T1425] usb 5-1: config 0 descriptor?? [ 162.851394][ T1425] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 162.943722][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 162.960659][ T10] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 162.973533][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.976845][ T10] usb 7-1: Product: syz [ 162.978630][ T10] usb 7-1: Manufacturer: syz [ 162.980524][ T10] usb 7-1: SerialNumber: syz [ 162.996523][ T10] usb 7-1: config 0 descriptor?? [ 163.007254][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 163.065337][ T1425] gp8psk: usb in 128 operation failed. [ 163.073825][ T1425] gp8psk: usb in 137 operation failed. [ 163.076105][ T1425] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 163.079833][ T1425] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 163.096691][ T1425] usb 5-1: USB disconnect, device number 13 [ 163.165325][ T5004] usbhid 6-1:0.0: can't add hid device: -71 [ 163.169180][ T5004] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 163.180832][ T5004] usb 6-1: USB disconnect, device number 12 [ 163.231986][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 163.241872][ T10] gp8psk: usb in 128 operation failed. [ 163.247436][ T10] gp8psk: usb in 137 operation failed. [ 163.249625][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 163.253154][ T10] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 163.257847][ T10] usb 7-1: USB disconnect, device number 12 [ 164.834403][ T5004] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 165.014444][ T5004] usb 7-1: Using ep0 maxpacket: 16 [ 165.023429][ T5004] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 165.046021][ T5004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.049102][ T5004] usb 7-1: Product: syz [ 165.050890][ T5004] usb 7-1: Manufacturer: syz [ 165.052789][ T5004] usb 7-1: SerialNumber: syz [ 165.085336][ T5004] usb 7-1: config 0 descriptor?? [ 165.090953][ T5004] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 165.194066][ T6979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.227241][ T6979] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 165.299482][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 165.300810][ T5004] gp8psk: usb in 128 operation failed. [ 165.310681][ T5004] gp8psk: usb in 137 operation failed. [ 165.314011][ T5004] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 165.321006][ T5004] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 165.331940][ T5004] usb 7-1: USB disconnect, device number 13 [ 165.565028][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.765161][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 165.797302][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 165.801115][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.803890][ T10] usb 5-1: Product: syz [ 165.808946][ T10] usb 5-1: Manufacturer: syz [ 165.810905][ T10] usb 5-1: SerialNumber: syz [ 165.826734][ T10] usb 5-1: config 0 descriptor?? [ 165.833764][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 166.121445][ T10] gp8psk: usb in 128 operation failed. [ 166.124181][ T10] gp8psk: usb in 137 operation failed. [ 166.130505][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 166.136975][ T10] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 166.142884][ T10] usb 5-1: USB disconnect, device number 14 [ 167.476040][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 167.695851][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 167.702223][ T10] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 167.706719][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.709567][ T10] usb 6-1: Product: syz [ 167.711074][ T10] usb 6-1: Manufacturer: syz [ 167.713077][ T10] usb 6-1: SerialNumber: syz [ 167.747026][ T10] usb 6-1: config 0 descriptor?? [ 167.752548][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 167.958052][ T5347] Bluetooth: hci0: Unknown advertising packet type: 0x74 [ 167.958935][ T10] gp8psk: usb in 128 operation failed. [ 167.970786][ T10] gp8psk: usb in 137 operation failed. [ 167.973346][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 167.986008][ T10] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 167.992259][ T10] usb 6-1: USB disconnect, device number 13 [ 169.072827][ T7057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.383114][ T7050] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 169.656812][ T1166] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 169.857493][ T1166] usb 8-1: Using ep0 maxpacket: 8 [ 169.874477][ T1166] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.883568][ T1166] usb 8-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 169.895388][ T1166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.902734][ T1166] usb 8-1: Product: syz [ 169.904590][ T1166] usb 8-1: Manufacturer: syz [ 169.906709][ T1166] usb 8-1: SerialNumber: syz [ 169.928790][ T1166] usb 8-1: config 0 descriptor?? [ 169.934943][ T1166] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 170.145725][ T1166] pwc: Failed to set LED on/off time (-71) [ 170.151098][ T1166] pwc: send_video_command error -71 [ 170.153441][ T1166] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 170.159082][ T1166] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 170.175624][ T1166] usb 8-1: USB disconnect, device number 18 [ 170.877410][ T5379] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 170.913761][ T7079] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.534'. [ 171.097505][ T5379] usb 7-1: Using ep0 maxpacket: 16 [ 171.107107][ T5379] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 171.111876][ T5379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.115528][ T5379] usb 7-1: Product: syz [ 171.117855][ T5379] usb 7-1: Manufacturer: syz [ 171.119994][ T5379] usb 7-1: SerialNumber: syz [ 171.124455][ T5379] usb 7-1: config 0 descriptor?? [ 171.131001][ T5379] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 171.339035][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 171.339831][ T5379] gp8psk: usb in 128 operation failed. [ 171.347213][ T5379] gp8psk: usb in 137 operation failed. [ 171.349867][ T5379] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 171.354184][ T5379] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 171.363525][ T5379] usb 7-1: USB disconnect, device number 14 [ 171.447728][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 171.630015][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 171.653747][ T25] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 171.658042][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.661634][ T25] usb 8-1: Product: syz [ 171.663566][ T25] usb 8-1: Manufacturer: syz [ 171.666190][ T25] usb 8-1: SerialNumber: syz [ 171.678545][ T25] usb 8-1: config 0 descriptor?? [ 171.682626][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 171.949328][ T5347] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 171.953077][ T25] gp8psk: usb in 128 operation failed. [ 171.958631][ T25] gp8psk: usb in 137 operation failed. [ 171.961141][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 171.965303][ T25] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 171.971337][ T25] usb 8-1: USB disconnect, device number 19 [ 172.553458][ T7113] FAULT_INJECTION: forcing a failure. [ 172.553458][ T7113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.568239][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.0.546 Not tainted 6.11.0-rc1-syzkaller #0 [ 172.571877][ T7113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.576348][ T7113] Call Trace: [ 172.577746][ T7113] [ 172.578983][ T7113] dump_stack_lvl+0x16c/0x1f0 [ 172.581076][ T7113] should_fail_ex+0x497/0x5b0 [ 172.583160][ T7113] _copy_from_user+0x30/0xf0 [ 172.585165][ T7113] bpf_test_init.isra.0+0xf1/0x150 [ 172.587398][ T7113] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.589937][ T7113] bpf_prog_test_run_skb+0x250/0x2140 [ 172.592237][ T7113] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.594697][ T7113] ? fput+0x32/0x390 [ 172.596403][ T7113] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.598975][ T7113] __sys_bpf+0x141f/0x5600 [ 172.600908][ T7113] ? __pfx___sys_bpf+0x10/0x10 [ 172.603055][ T7113] ? __schedule+0x3a31/0x5490 [ 172.605074][ T7113] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.607301][ T7113] ? __schedule+0x3a31/0x5490 [ 172.609377][ T7113] ? __pfx___schedule+0x10/0x10 [ 172.611512][ T7113] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.613856][ T7113] __ia32_sys_bpf+0x76/0xe0 [ 172.615880][ T7113] __do_fast_syscall_32+0x73/0x120 [ 172.618093][ T7113] do_fast_syscall_32+0x32/0x80 [ 172.620228][ T7113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.622970][ T7113] RIP: 0023:0xf749e579 [ 172.624729][ T7113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.632997][ T7113] RSP: 002b:00000000f579557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 172.636526][ T7113] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 172.639994][ T7113] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000 [ 172.643303][ T7113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.646365][ T7113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.649599][ T7113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.652948][ T7113] [ 174.099089][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 174.279277][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 174.287924][ T25] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 174.306671][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.316418][ T25] usb 6-1: Product: syz [ 174.318298][ T25] usb 6-1: Manufacturer: syz [ 174.321628][ T25] usb 6-1: SerialNumber: syz [ 174.330384][ T25] usb 6-1: config 0 descriptor?? [ 174.338375][ T25] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 174.437894][ T7128] netlink: 148 bytes leftover after parsing attributes in process `syz.3.551'. [ 174.450395][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.551'. [ 174.562511][ T25] gp8psk: usb in 128 operation failed. [ 174.571565][ T25] gp8psk: usb in 137 operation failed. [ 174.574232][ T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 174.578334][ T25] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 174.590168][ T25] usb 6-1: USB disconnect, device number 14 [ 174.651484][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.760650][ T7108] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 174.988383][ T7140] Cannot find set identified by id 0 to match [ 175.597044][ T7161] Cannot find set identified by id 0 to match [ 175.863905][ T5351] Bluetooth: hci0: command 0x0406 tx timeout [ 175.867179][ T5342] Bluetooth: hci2: command 0x0406 tx timeout [ 175.899958][ T5383] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 176.080107][ T5383] usb 8-1: Using ep0 maxpacket: 16 [ 176.086036][ T5383] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 176.090638][ T5383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.094959][ T5383] usb 8-1: Product: syz [ 176.100056][ T5383] usb 8-1: Manufacturer: syz [ 176.102613][ T5383] usb 8-1: SerialNumber: syz [ 176.107107][ T5383] usb 8-1: config 0 descriptor?? [ 176.112449][ T5383] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 176.338960][ T5383] gp8psk: usb in 128 operation failed. [ 176.347711][ T5383] gp8psk: usb in 137 operation failed. [ 176.360180][ T5383] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 176.364134][ T5383] dvb_usb_gp8psk 8-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 176.383541][ T5383] usb 8-1: USB disconnect, device number 20 [ 177.891836][ T7211] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.583'. [ 178.198376][ T7213] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.584'. [ 178.525140][ T7217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.022533][ T7214] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 179.111625][ T5379] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 179.315101][ T5379] usb 6-1: Using ep0 maxpacket: 16 [ 179.326382][ T5379] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 179.330670][ T5379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.345499][ T5379] usb 6-1: Product: syz [ 179.350560][ T5379] usb 6-1: Manufacturer: syz [ 179.367359][ T5379] usb 6-1: SerialNumber: syz [ 179.379821][ T5379] usb 6-1: config 0 descriptor?? [ 179.394061][ T5379] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 179.620308][ T5379] gp8psk: usb in 128 operation failed. [ 179.630333][ T5379] gp8psk: usb in 137 operation failed. [ 179.638598][ T5379] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 179.650272][ T5379] dvb_usb_gp8psk 6-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 179.683861][ T5379] usb 6-1: USB disconnect, device number 15 [ 180.415461][ T7240] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.593'. [ 180.698452][ T5347] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 181.025640][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.602'. [ 181.143838][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 181.152049][ T7273] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 181.156008][ T7273] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 181.273358][ T7274] 9pnet_fd: Insufficient options for proto=fd [ 181.286865][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 183.976725][ T7298] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.612'. [ 183.997876][ T7311] FAULT_INJECTION: forcing a failure. [ 183.997876][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.003548][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.2.619 Not tainted 6.11.0-rc1-syzkaller #0 [ 184.007138][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.011671][ T7311] Call Trace: [ 184.013128][ T7311] [ 184.014422][ T7311] dump_stack_lvl+0x16c/0x1f0 [ 184.016450][ T7311] should_fail_ex+0x497/0x5b0 [ 184.018482][ T7311] _copy_to_user+0x30/0xc0 [ 184.020392][ T7311] simple_read_from_buffer+0xd0/0x160 [ 184.022686][ T7311] proc_fail_nth_read+0x1b0/0x290 [ 184.024859][ T7311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.027219][ T7311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.029575][ T7311] vfs_read+0x1d4/0xbd0 [ 184.031381][ T7311] ? __fdget_pos+0xeb/0x180 [ 184.033325][ T7311] ? __pfx_vfs_read+0x10/0x10 [ 184.035330][ T7311] ? __pfx___mutex_lock+0x10/0x10 [ 184.037466][ T7311] ? __fget_files+0x256/0x400 [ 184.039495][ T7311] ksys_read+0x12f/0x260 [ 184.041309][ T7311] ? __pfx_ksys_read+0x10/0x10 [ 184.043362][ T7311] __do_fast_syscall_32+0x73/0x120 [ 184.045542][ T7311] do_fast_syscall_32+0x32/0x80 [ 184.047637][ T7311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.050322][ T7311] RIP: 0023:0xf73de579 [ 184.052075][ T7311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.060119][ T7311] RSP: 002b:00000000f56f65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 184.063614][ T7311] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6630 [ 184.066931][ T7311] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 184.070145][ T7311] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 184.073487][ T7311] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.076825][ T7311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.080160][ T7311] [ 184.161786][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.252969][ T7320] Cannot find set identified by id 0 to match [ 184.720957][ T7312] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.619804][ T7349] Cannot find set identified by id 0 to match [ 186.881635][ T7351] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.630'. [ 187.289585][ T7371] Cannot find set identified by id 0 to match [ 189.047584][ T7385] FAULT_INJECTION: forcing a failure. [ 189.047584][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 189.057186][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.1.643 Not tainted 6.11.0-rc1-syzkaller #0 [ 189.060890][ T7385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.064583][ T7385] Call Trace: [ 189.065766][ T7385] [ 189.066806][ T7385] dump_stack_lvl+0x16c/0x1f0 [ 189.068648][ T7385] should_fail_ex+0x497/0x5b0 [ 189.070722][ T7385] ? fs_reclaim_acquire+0xae/0x160 [ 189.073004][ T7385] should_failslab+0xc2/0x120 [ 189.075083][ T7385] __kmalloc_noprof+0xcb/0x410 [ 189.077203][ T7385] nla_strdup+0xc6/0x150 [ 189.079062][ T7385] nf_tables_addchain.constprop.0+0x469/0x1ab0 [ 189.081785][ T7385] ? nft_chain_lookup+0x404/0x8e0 [ 189.084118][ T7385] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 189.087075][ T7385] ? __pfx_nft_chain_lookup+0x10/0x10 [ 189.089578][ T7385] ? nla_strcmp+0xff/0x130 [ 189.091583][ T7385] ? nft_table_lookup.part.0+0x1e3/0x230 [ 189.093965][ T7385] nf_tables_newchain+0x1cd6/0x2810 [ 189.096013][ T7385] ? __nla_validate_parse+0x605/0x2b10 [ 189.098133][ T7385] ? __pfx_nf_tables_newchain+0x10/0x10 [ 189.100445][ T7385] ? __pfx___nla_validate_parse+0x10/0x10 [ 189.102953][ T7385] ? net_generic+0xea/0x2a0 [ 189.104980][ T7385] ? __pfx_lock_release+0x10/0x10 [ 189.107255][ T7385] ? __nla_parse+0x40/0x60 [ 189.109282][ T7385] nfnetlink_rcv_batch+0x1a19/0x24e0 [ 189.111677][ T7385] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 189.114142][ T7385] ? __pfx_lock_release+0x10/0x10 [ 189.116376][ T7385] ? __local_bh_enable_ip+0xa4/0x120 [ 189.118738][ T7385] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.121067][ T7385] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.123457][ T7385] ? bpf_lsm_capable+0x9/0x10 [ 189.125571][ T7385] ? __nla_parse+0x40/0x60 [ 189.127528][ T7385] nfnetlink_rcv+0x3c3/0x430 [ 189.129579][ T7385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.131862][ T7385] netlink_unicast+0x544/0x830 [ 189.133982][ T7385] ? __pfx_netlink_unicast+0x10/0x10 [ 189.136316][ T7385] ? __phys_addr_symbol+0x30/0x80 [ 189.138528][ T7385] ? __check_object_size+0x497/0x720 [ 189.140618][ T7385] netlink_sendmsg+0x8b8/0xd70 [ 189.142622][ T7385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.144885][ T7385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.147223][ T7385] ____sys_sendmsg+0x9b4/0xb50 [ 189.149348][ T7385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.151736][ T7385] ? get_compat_msghdr+0x11b/0x170 [ 189.153980][ T7385] ? __pfx___lock_acquire+0x10/0x10 [ 189.156322][ T7385] ___sys_sendmsg+0x135/0x1e0 [ 189.158428][ T7385] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.160754][ T7385] ? ksys_write+0x21c/0x260 [ 189.162831][ T7385] ? __fget_light+0x173/0x210 [ 189.164954][ T7385] __sys_sendmsg+0x117/0x1f0 [ 189.167018][ T7385] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.169302][ T7385] __do_fast_syscall_32+0x73/0x120 [ 189.171601][ T7385] do_fast_syscall_32+0x32/0x80 [ 189.173582][ T7385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.176299][ T7385] RIP: 0023:0xf7fa1579 [ 189.178206][ T7385] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.186275][ T7385] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 189.189226][ T7385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 189.192097][ T7385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.195003][ T7385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.198270][ T7385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.201569][ T7385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.204978][ T7385] [ 189.470115][ T7393] Zero length message leads to an empty skb [ 189.725318][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.800155][ T7400] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 189.809264][ T7398] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.649'. [ 189.841877][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.862855][ T7407] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 190.487611][ T5004] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 190.682648][ T5004] usb 7-1: Using ep0 maxpacket: 16 [ 190.730406][ T5004] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 190.734232][ T5004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.738051][ T5004] usb 7-1: Product: syz [ 190.739701][ T5004] usb 7-1: Manufacturer: syz [ 190.741611][ T5004] usb 7-1: SerialNumber: syz [ 190.748463][ T5004] usb 7-1: config 0 descriptor?? [ 190.753186][ T5004] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 190.990880][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 190.991357][ T5004] gp8psk: usb in 128 operation failed. [ 190.998827][ T5004] gp8psk: usb in 137 operation failed. [ 191.001131][ T5004] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 191.004924][ T5004] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 191.014439][ T5004] usb 7-1: USB disconnect, device number 15 [ 191.229852][ T7427] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.657'. [ 191.442689][ T7434] ax25_connect(): syz.0.659 uses autobind, please contact jreuter@yaina.de [ 191.807127][ T7441] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.661'. [ 192.798369][ T35] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 192.978446][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 193.008205][ T35] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 193.028481][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.031929][ T35] usb 7-1: Product: syz [ 193.033753][ T35] usb 7-1: Manufacturer: syz [ 193.035774][ T35] usb 7-1: SerialNumber: syz [ 193.051795][ T35] usb 7-1: config 0 descriptor?? [ 193.060273][ T35] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 193.276431][ T5347] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 193.295345][ T35] gp8psk: usb in 128 operation failed. [ 193.303175][ T35] gp8psk: usb in 137 operation failed. [ 193.305609][ T35] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 193.309176][ T35] dvb_usb_gp8psk 7-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 193.319446][ T35] usb 7-1: USB disconnect, device number 16 [ 193.448844][ T7485] FAULT_INJECTION: forcing a failure. [ 193.448844][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 193.454706][ T7485] CPU: 2 UID: 0 PID: 7485 Comm: syz.3.679 Not tainted 6.11.0-rc1-syzkaller #0 [ 193.458640][ T7485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.463376][ T7485] Call Trace: [ 193.464887][ T7485] [ 193.466188][ T7485] dump_stack_lvl+0x16c/0x1f0 [ 193.468211][ T7485] should_fail_ex+0x497/0x5b0 [ 193.470310][ T7485] ? fs_reclaim_acquire+0xae/0x160 [ 193.472360][ T7485] should_failslab+0xc2/0x120 [ 193.474240][ T7485] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 193.476332][ T7485] ? security_file_alloc+0x41/0x260 [ 193.478431][ T7485] security_file_alloc+0x41/0x260 [ 193.480722][ T7485] init_file+0x99/0x260 [ 193.482608][ T7485] alloc_empty_file+0x91/0x1e0 [ 193.484755][ T7485] path_openat+0xe0/0x2d20 [ 193.486786][ T7485] ? hlock_class+0x4e/0x130 [ 193.488819][ T7485] ? __lock_acquire+0x1620/0x3cb0 [ 193.491062][ T7485] ? __pfx_path_openat+0x10/0x10 [ 193.493295][ T7485] ? __pfx___lock_acquire+0x10/0x10 [ 193.495646][ T7485] ? find_held_lock+0x2d/0x110 [ 193.497794][ T7485] do_filp_open+0x1dc/0x430 [ 193.499879][ T7485] ? __pfx_do_filp_open+0x10/0x10 [ 193.502186][ T7485] ? _raw_spin_unlock+0x28/0x50 [ 193.504374][ T7485] ? alloc_fd+0x2d7/0x6c0 [ 193.506338][ T7485] do_sys_openat2+0x17a/0x1e0 [ 193.508459][ T7485] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.510791][ T7485] __ia32_compat_sys_open+0x147/0x1e0 [ 193.513174][ T7485] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 193.515826][ T7485] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 193.518789][ T7485] __do_fast_syscall_32+0x73/0x120 [ 193.520951][ T7485] do_fast_syscall_32+0x32/0x80 [ 193.523004][ T7485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.525816][ T7485] RIP: 0023:0xf7f03579 [ 193.527678][ T7485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 193.536163][ T7485] RSP: 002b:00000000f569557c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 193.539858][ T7485] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 193.543359][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.546844][ T7485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.550337][ T7485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 193.553845][ T7485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.557346][ T7485] [ 193.574672][ T7480] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.677'. [ 194.272486][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275207][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.429542][ C0] ================================================================== [ 194.433368][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x429/0x4e0 [ 194.437271][ C0] Read of size 8 at addr ffffc9000754fa58 by task syz.2.684/7499 [ 194.441935][ C0] [ 194.443048][ C0] CPU: 0 UID: 0 PID: 7499 Comm: syz.2.684 Not tainted 6.11.0-rc1-syzkaller #0 [ 194.447203][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.452872][ C0] Call Trace: [ 194.454326][ C0] [ 194.455589][ C0] dump_stack_lvl+0x116/0x1f0 [ 194.457659][ C0] print_report+0xc3/0x620 [ 194.459664][ C0] ? __virt_addr_valid+0x5e/0x590 [ 194.461976][ C0] kasan_report+0xd9/0x110 [ 194.464047][ C0] ? xdp_do_check_flushed+0x429/0x4e0 [ 194.466487][ C0] ? xdp_do_check_flushed+0x429/0x4e0 [ 194.468930][ C0] xdp_do_check_flushed+0x429/0x4e0 [ 194.471318][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 194.473807][ C0] net_rx_action+0xa92/0x1010 [ 194.475993][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 194.478336][ C0] ? rcu_qs+0x70/0xe0 [ 194.480250][ C0] ? trace_rcu_utilization+0x100/0x160 [ 194.482832][ C0] handle_softirqs+0x216/0x8f0 [ 194.485031][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 194.487457][ C0] irq_exit_rcu+0xbb/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.489451][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 194.491982][ C0] [ 194.493182][ C0] [ 194.494438][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.496835][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 194.499639][ C0] Code: a9 0a 00 00 44 8b 0d 87 4f b5 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 49 8c 36 00 fb 65 48 8b 1d 30 fb a7 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 194.508307][ C0] RSP: 0018:ffffc9000754f8e0 EFLAGS: 00000206 [ 194.511065][ C0] RAX: 00000000000001eb RBX: ffff88801d344880 RCX: 1ffffffff2021749 [ 194.514788][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: ffffffff8bb04ba0 [ 194.518317][ C0] RBP: ffffc9000754f928 R08: 0000000000000001 R09: 0000000000000001 [ 194.521681][ C0] R10: ffffffff9010fe9f R11: 0000000000000000 R12: ffff88802c03fb98 [ 194.525292][ C0] R13: ffff888023c60000 R14: 0000000000000000 R15: ffff88802c03ee00 [ 194.528373][ C0] ? __switch_to+0x749/0x1180 [ 194.530196][ C0] __schedule+0xe3f/0x5490 [ 194.532133][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 194.534294][ C0] ? __pfx___schedule+0x10/0x10 [ 194.536246][ C0] ? schedule+0x298/0x350 [ 194.537880][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.540199][ C0] ? plist_check_prev_next+0x12a/0x1a0 [ 194.542613][ C0] ? futex_wait_queue+0x41/0x1f0 [ 194.544889][ C0] schedule+0xe7/0x350 [ 194.546679][ C0] futex_wait_queue+0xfc/0x1f0 [ 194.548560][ C0] __futex_wait+0x291/0x3c0 [ 194.550322][ C0] ? __pfx___futex_wait+0x10/0x10 [ 194.552534][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 194.554742][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 194.557110][ C0] futex_wait+0xe9/0x380 [ 194.558970][ C0] ? __pfx_futex_wait+0x10/0x10 [ 194.561011][ C0] ? vfs_write+0x917/0x1140 [ 194.562695][ C0] ? vfs_write+0x14d/0x1140 [ 194.564386][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 194.566590][ C0] do_futex+0x22b/0x350 [ 194.568281][ C0] ? __pfx_do_futex+0x10/0x10 [ 194.570395][ C0] ? __fget_files+0x256/0x400 [ 194.572394][ C0] __ia32_sys_futex_time32+0x1da/0x460 [ 194.574708][ C0] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 194.577357][ C0] ? ksys_write+0x1ab/0x260 [ 194.579438][ C0] ? __pfx_ksys_write+0x10/0x10 [ 194.581631][ C0] __do_fast_syscall_32+0x73/0x120 [ 194.583878][ C0] do_fast_syscall_32+0x32/0x80 [ 194.586008][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.588780][ C0] RIP: 0023:0xf73de579 [ 194.590557][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.598850][ C0] RSP: 002b:00000000f56f661c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 194.602135][ C0] RAX: ffffffffffffffda RBX: 00000000f7404f88 RCX: 0000000000000080 [ 194.605424][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 194.608886][ C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 194.612285][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.615653][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.618931][ C0] [ 194.620003][ C0] [ 194.620826][ C0] The buggy address belongs to stack of task syz.2.684/7499 [ 194.623554][ C0] and is located at offset 120 in frame: [ 194.625651][ C0] __schedule+0x0/0x5490 [ 194.627259][ C0] [ 194.628176][ C0] This frame has 3 objects: [ 194.629892][ C0] [48, 52) 'cid' [ 194.629902][ C0] [64, 80) 'rf' [ 194.632143][ C0] [96, 120) 'ac' [ 194.633725][ C0] [ 194.636334][ C0] The buggy address belongs to the virtual mapping at [ 194.636334][ C0] [ffffc90007548000, ffffc90007551000) created by: [ 194.636334][ C0] kernel_clone+0xfd/0x980 [ 194.643634][ C0] [ 194.644693][ C0] The buggy address belongs to the physical page: [ 194.647431][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805f644f80 pfn:0x5f644 [ 194.651606][ C0] memcg:ffff88801e7c1382 [ 194.653421][ C0] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 194.656571][ C0] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 194.660239][ C0] raw: ffff88805f644f80 0000000000000000 00000001ffffffff ffff88801e7c1382 [ 194.663824][ C0] page dumped because: kasan: bad access detected [ 194.666450][ C0] page_owner tracks the page as allocated [ 194.668827][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 7486, tgid 7486 (syz.2.680), ts 193900280106, free_ts 193059794256 [ 194.676288][ C0] post_alloc_hook+0x2d1/0x350 [ 194.678123][ C0] get_page_from_freelist+0x1351/0x2e50 [ 194.680525][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 194.682575][ C0] alloc_pages_mpol_noprof+0x275/0x610 [ 194.684758][ C0] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 194.687272][ C0] copy_process+0x29f5/0x6f50 [ 194.689078][ C0] kernel_clone+0xfd/0x980 [ 194.690994][ C0] __do_sys_clone3+0x1f5/0x270 [ 194.693106][ C0] do_int80_emulation+0x104/0x200 [ 194.695300][ C0] asm_int80_emulation+0x1a/0x20 [ 194.697335][ C0] page last free pid 4822 tgid 4822 stack trace: [ 194.700003][ C0] free_unref_page+0x64a/0xe40 [ 194.701919][ C0] qlist_free_all+0x4e/0x140 [ 194.703869][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 194.706021][ C0] __kasan_slab_alloc+0x69/0x90 [ 194.708336][ C0] __kmalloc_node_track_caller_noprof+0x1c1/0x440 [ 194.711224][ C0] kmalloc_reserve+0xef/0x2c0 [ 194.713233][ C0] __alloc_skb+0x164/0x380 [ 194.715134][ C0] alloc_skb_with_frags+0xe4/0x710 [ 194.717002][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 194.719034][ C0] unix_dgram_sendmsg+0x46c/0x19b0 [ 194.721166][ C0] __sys_sendto+0x47f/0x4e0 [ 194.723104][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 194.724932][ C0] do_syscall_64+0xcd/0x250 [ 194.726620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.728894][ C0] [ 194.729871][ C0] Memory state around the buggy address: [ 194.732321][ C0] ffffc9000754f900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.735658][ C0] ffffc9000754f980: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 194.739066][ C0] >ffffc9000754fa00: f1 f1 04 f2 00 00 f2 f2 00 00 00 f3 f3 f3 f3 f3 [ 194.742211][ C0] ^ [ 194.744675][ C0] ffffc9000754fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.747742][ C0] ffffc9000754fb00: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 [ 194.750903][ C0] ================================================================== [ 194.754124][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.756620][ C0] CPU: 0 UID: 0 PID: 7499 Comm: syz.2.684 Not tainted 6.11.0-rc1-syzkaller #0 [ 194.760347][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.764130][ C0] Call Trace: [ 194.765264][ C0] [ 194.766303][ C0] dump_stack_lvl+0x3d/0x1f0 [ 194.768132][ C0] panic+0x6f5/0x7a0 [ 194.769798][ C0] ? __pfx_panic+0x10/0x10 [ 194.771712][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 194.773780][ C0] check_panic_on_warn+0xab/0xb0 [ 194.775581][ C0] end_report+0x117/0x180 [ 194.777240][ C0] kasan_report+0xe9/0x110 [ 194.779164][ C0] ? xdp_do_check_flushed+0x429/0x4e0 [ 194.781413][ C0] ? xdp_do_check_flushed+0x429/0x4e0 [ 194.783667][ C0] xdp_do_check_flushed+0x429/0x4e0 [ 194.785828][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 194.788080][ C0] net_rx_action+0xa92/0x1010 [ 194.790039][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 194.791916][ C0] ? rcu_qs+0x70/0xe0 [ 194.793346][ C0] ? trace_rcu_utilization+0x100/0x160 [ 194.795225][ C0] handle_softirqs+0x216/0x8f0 [ 194.797259][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 194.799573][ C0] irq_exit_rcu+0xbb/0x120 [ 194.801497][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 194.804017][ C0] [ 194.805345][ C0] [ 194.806655][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.809330][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 194.812156][ C0] Code: a9 0a 00 00 44 8b 0d 87 4f b5 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 49 8c 36 00 fb 65 48 8b 1d 30 fb a7 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 194.820471][ C0] RSP: 0018:ffffc9000754f8e0 EFLAGS: 00000206 [ 194.822807][ C0] RAX: 00000000000001eb RBX: ffff88801d344880 RCX: 1ffffffff2021749 [ 194.825807][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: ffffffff8bb04ba0 [ 194.829160][ C0] RBP: ffffc9000754f928 R08: 0000000000000001 R09: 0000000000000001 [ 194.832511][ C0] R10: ffffffff9010fe9f R11: 0000000000000000 R12: ffff88802c03fb98 [ 194.836001][ C0] R13: ffff888023c60000 R14: 0000000000000000 R15: ffff88802c03ee00 [ 194.839444][ C0] ? __switch_to+0x749/0x1180 [ 194.841500][ C0] __schedule+0xe3f/0x5490 [ 194.843327][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 194.845313][ C0] ? __pfx___schedule+0x10/0x10 [ 194.847410][ C0] ? schedule+0x298/0x350 [ 194.849322][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.851597][ C0] ? plist_check_prev_next+0x12a/0x1a0 [ 194.853643][ C0] ? futex_wait_queue+0x41/0x1f0 [ 194.855642][ C0] schedule+0xe7/0x350 [ 194.857194][ C0] futex_wait_queue+0xfc/0x1f0 [ 194.858939][ C0] __futex_wait+0x291/0x3c0 [ 194.860564][ C0] ? __pfx___futex_wait+0x10/0x10 [ 194.862488][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 194.864372][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 194.866324][ C0] futex_wait+0xe9/0x380 [ 194.867852][ C0] ? __pfx_futex_wait+0x10/0x10 [ 194.869607][ C0] ? vfs_write+0x917/0x1140 [ 194.871568][ C0] ? vfs_write+0x14d/0x1140 [ 194.873555][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 194.875723][ C0] do_futex+0x22b/0x350 [ 194.877311][ C0] ? __pfx_do_futex+0x10/0x10 [ 194.879206][ C0] ? __fget_files+0x256/0x400 [ 194.881089][ C0] __ia32_sys_futex_time32+0x1da/0x460 [ 194.883535][ C0] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 194.886125][ C0] ? ksys_write+0x1ab/0x260 [ 194.888037][ C0] ? __pfx_ksys_write+0x10/0x10 [ 194.890197][ C0] __do_fast_syscall_32+0x73/0x120 [ 194.892492][ C0] do_fast_syscall_32+0x32/0x80 [ 194.894628][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.897420][ C0] RIP: 0023:0xf73de579 [ 194.899237][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.907117][ C0] RSP: 002b:00000000f56f661c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 194.910354][ C0] RAX: ffffffffffffffda RBX: 00000000f7404f88 RCX: 0000000000000080 [ 194.913789][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 194.917163][ C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 194.920734][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.923824][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.927225][ C0] [ 194.929239][ C0] Kernel Offset: disabled [ 194.930953][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:02:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa27d5 RDI=ffffffff951173c0 RBP=ffffffff95117380 RSP=ffffc90000007778 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=ffffffff84fa2770 R15=0000000000000000 RIP=ffffffff84fa27ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002008c000 CR3=000000005d15c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801a020ae0 RCX=0000000000000007 RDX=0000000000000002 RSI=ffff88801a020ae0 RDI=ffff88801a020ae0 RBP=ffffc900063275a8 RSP=ffffc90006327468 R8 =0000000000000000 R9 =fffffbfff28b60d8 R10=ffffffff945b06c7 R11=0000000000000002 R12=ffff88801a020000 R13=0000000000000200 R14=0000000000000009 R15=1ffff92000c64e94 RIP=ffffffff81684f90 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f740c13c CR3=0000000058566000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000041800000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc900031b6fb0 RCX=0000000000000001 RDX=1ffff92000636df8 RSI=ffffffff813c7bb2 RDI=ffffc900031b6fb0 RBP=ffffc900031b7438 RSP=ffffc900031b6ee8 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000001 R11=dffffc0000000000 R12=ffffc900031b6fb8 R13=ffffc900031b6fc0 R14=ffffc900031b0000 R15=0000000000000001 RIP=ffffffff813c7bea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fde6d51dd00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563bfa914000 CR3=0000000019f46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef 3048b2ef3048b2ef ZMM22=88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 88a41e5788a41e57 ZMM23=18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf 18440bdf18440bdf ZMM24=7838a6737838a673 7838a6737838a673 7838a6737838a673 7838a6737838a673 7838a6737838a673 7838a6737838a673 7838a6737838a673 7838a6737838a673 ZMM25=9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 9b0e79499b0e7949 ZMM26=de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 de5309b9de5309b9 ZMM27=b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 b109ba08b109ba08 ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=590b0000590b0000 590b0000590b0000 590b0000590b0000 590b0000590b0000 590b0000590b0000 590b0000590b0000 590b0000590b0000 590b0000590b0000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000000000003 RCX=ffffffff816935c9 RDX=1ffffffff1bb7134 RSI=ffffffff8b4cd280 RDI=ffffffff8bb04ba0 RBP=ffffffff90112f78 RSP=ffffc90000e6f2b8 R8 =0000000000000000 R9 =fffffbfff2021fd3 R10=ffffffff9010fe9f R11=0000000000000000 R12=ffffffff8ddb89a0 R13=0000000000000001 R14=ffff88801b998000 R15=dffffc0000000000 RIP=ffffffff8b05f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7334cd8 CR3=000000005f660000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000