last executing test programs: 3.757270488s ago: executing program 0 (id=2799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @private2, 0x3}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000380)="1228be25ff8fadf57c63a3533e83d3d62a8849b5a57bb1758262ae62f3c302f8c1e58441767e3a700443308e00af9bde47834e9e1d47900288cb1500d518f098c2f87b0d5d749bfe23c76aac50444c0becc114e66ae8b460349c1385e4c7b00456146553c47af9e8599dccc528f54634949bf4623b765048bbb8be6212591e7d94ad5fb090", 0x85}, {&(0x7f0000000680)="3762b6644a7e6baf2445570e66c11abeb206f27acf77d013dadc46f186f24d27cf7f43f3", 0x24}, {&(0x7f00000006c0)="96da7e336a627c73d50d50400cc158dd81050163ac6d0fa8f56dd54845402b41afcbf63a", 0x24}, {&(0x7f0000000700)="bc3a4be9ae4ac50799ff94b526c1651ca557a6e6e046edc471d06b56f6c85145410a6b0c142f", 0x26}], 0x4, &(0x7f0000000780)=[@hoplimit={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x4}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x32, 0x4, 0x0, 0x5, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts={{0x1c, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}], 0x70}}], 0x1, 0x4040001) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f08e2a8f004"], 0x7) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0xe8}}, 0x0) 3.756152175s ago: executing program 2 (id=2800): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000017c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x8000, 0x0, 0x0, r4, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.611532417s ago: executing program 1 (id=2802): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r3, @ANYRES32, @ANYRES16=r0, @ANYRESHEX=r1], 0x58}, 0x1, 0xba01}, 0x0) 3.535699938s ago: executing program 1 (id=2804): socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = syz_open_procfs(r1, &(0x7f0000000040)='timers\x00') r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6a5}}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) r5 = memfd_secret(0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ecf3000040"]) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="360f01c80f011b660f070f20c06635000000800f22c00fc77dd8660ff34119f61b99d92e2eb80500000066b9002000000f01c16766c7442400e2c54baa6766c7442402006800006766c744240600000000670f011c24", 0x56}], 0x1, 0x10, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x37, 0x1, 0x8, 0x6, 0x0) socket$inet6(0xa, 0x4, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) (fail_nth: 14) 3.535449565s ago: executing program 2 (id=2805): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000128009000100626f6e64000000000c0002800800140009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) setresuid(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x419}}}, 0x7) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001001e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x20, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.382905363s ago: executing program 2 (id=2806): socket(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000380), 0x210d40, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) 2.812950518s ago: executing program 1 (id=2807): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xc84}, 0x1c) listen(0xffffffffffffffff, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xe}}]}, {0xfffffdbb}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x40000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.696072707s ago: executing program 1 (id=2808): r0 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000080), 0x22982, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="ffca04af2e07d5"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x46) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0xe0, 0x2c, 0x1, 0x0, 0x0, "", [@generic="8b2672641fdee602bd1ced9351ba93b2990c1543b33e11b52e54e3160cf949a0a897df725386365b0501b31e6ee746d9c7b7a9f68d23c245af083bc7eca6c373bc2ce00c02a611e531c073f6e2dba05965479e8b76913759f697baee99b480449eb57ad0dd56e7585b9e23af9ace7fc9c15dbf374fc3872e30cdaf3680b553c312b27c39a4f855b4a00ea48325ec9dab55aaa2d5f0e9ceb3b2d9279ed18d68ed8aac62fd2043", @nested={0x13, 0x0, 0x0, 0x1, [@generic="00000000000000fdeb90bd49938d56"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d93c21bc9625a2dbfe0c2e000408b4c"]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x190}, 0x0) r9 = getpid() r10 = msgget(0x0, 0x100) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') read$FUSE(r11, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe84) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r12) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000300)={{0x1, 0x0, r12, 0x0, 0x0, 0x202, 0x4}, 0x0, 0x0, 0x7, 0xa0000000, 0x200, 0x9, 0x26, 0x5, 0x1, 0x7fff, r9, r9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r8, r12}}, './file0\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a84ad24f10e9f19d944bcf7ae4a3635de0768da1cb54637845dd4f868baa7c9b0c6c9b41ef5663d73fbd38af263833a59d8c57f1b6e8ac283eb199f51a6ac484003e7276256a24ee4577eb04db0e8a376b244697e9042e0a448b2b0db78a75c6d5e84432784faf9bdcd59dbd7367", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat(r13, &(0x7f0000000200)='./file1\x00', 0x1c1000, 0x2) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x120, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0xe8, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x10}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0x40}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_IKEY={0x8, 0x2, 0x80}, @IFLA_VTI_IKEY={0x8, 0x2, 0xf}, @IFLA_VTI_LINK={0x8, 0x1, r15}, @IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}], @IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6884}, @IFLA_VTI_OKEY={0x8, 0x3, 0x100}]]}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x120}}, 0x0) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r20 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r19, @ANYBLOB="08001f0005000000050011000100000008001f000800000008002300010000000a"], 0x70}}, 0x0) 2.682550811s ago: executing program 3 (id=2809): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8420c}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x174, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_USERDATA={0xe3, 0x7, 0x1, 0x0, "fd03bc04e5a62eea0c13abe9127209dac110fc54bed5aee9eb08b763c38670574ba765c42812dcfee935244de3d96048eb268b4aebf600460fd1f87640c750f3590e712b413bfea6738d10be543eed947d899083ace7bcd0707a0864b08c9f7a4174d19c78264f5c4346cbecf1a615c0c6cabb276b5e15414cb437696f638306c58c3905a9449cee3f759e31faddf2229379b323cba39fe91ebee234aa393fbf40b997e48379e297a227e4260216fb6b3d9cbe177c5f58b13e6670d307cfd30c3f9ec8aa9c102ea954aabf973129bddc9464e8183bf7cec9489902360025e2"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x74, 0x7, 0x1, 0x0, "0a95f1086cd93937e661b0d134f0ffc32de4a8a2eae8782ac0693cd7e4aa26a746de255bc525b3d714fedd3c213fbfb9d96cd81c008572f3f354815a58c31bf08716293e8b3ea3d16eeb7793eba1727faf54777e290c40d5ba0885c477ebae7c53fedb64e8abf2dccfa09a55af776f64"}]}, @NFT_MSG_DELSET={0x12c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x100, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xd3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x2c8}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$SIOCX25SDTEFACILITIES(r0, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) 2.482738638s ago: executing program 1 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) (async) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0xd3) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0xd3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x9, 0x0) (async) clock_getres(0x9, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x0, 0x0, 0x7}}) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 2.480087827s ago: executing program 0 (id=2811): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) bind$pptp(r1, 0x0, 0x0) io_setup(0x3, 0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) syz_clone(0x4040000, &(0x7f00000003c0)="e7dd5577bc0c1f2c0ab15d25cb3d2cedd00750b3ce", 0x15, 0x0, &(0x7f0000000100), &(0x7f0000000500)="f3eb4d9205a1c041212acf91762447ae4cdb162fecc9d6dbea19c5e3581182ad3e4bc7e305f6a100a63dc1849e8739302be4eab62eebf18070bb7330bcd4f20172b51834cee660735f9528c1d82f9cb8a2539a1d500dc482f5965a9ebe1db90612ad3d40") sync() tee(r1, r0, 0x4d, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2008, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f00000000c0), 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) io_pgetevents(r4, 0x5, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000240)={[0xfffffffa, 0xffffff00]}, 0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00", 0x4c}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x9, 0x1) 2.479814551s ago: executing program 3 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x642da, 0xb5c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) 2.39497801s ago: executing program 3 (id=2813): socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000002640)) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x9d8d2a5017a9ed00) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.190089901s ago: executing program 1 (id=2814): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) io_setup(0xff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='exfat\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000a0ca82a73780f9cf2c8800000079100000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x0, 0x800) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000002480)=ANY=[@ANYBLOB="0100ffff0a004e200000000dfe8000000000000000000000000000230800000000000000000000000000000000000000000000000000000000000000000000000000b0f09092603a8be200000000000000000000000000000000000000000000000000000000005525c05a1b58b91a000000b24b090000000000000000009a1d600000000000000000000000000000000000000000000000000001000000010000000a004e2300000009fe8000000000000000000000000000aa000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000200"/282], 0x10c) r4 = userfaultfd(0x80001) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x2, 0xffff, 0x0, 0x0, {[@nop, @mss={0x2, 0x0, 0xff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0xc, "657b2a4458bbcf3934cf"}, @exp_fastopen={0xfe, 0xf, 0xf989, "0b1861eef0f5d8be29809d"}]}}}}}}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000, 0x0, 0x40000000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = dup2(r2, r2) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0xffffffffffffff32) 2.18884674s ago: executing program 3 (id=2815): socket(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000380), 0x210d40, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) 1.732827017s ago: executing program 2 (id=2816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.73243285s ago: executing program 0 (id=2817): socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = syz_open_procfs(r1, &(0x7f0000000040)='timers\x00') r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6a5}}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r3}, 0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x65e982, 0x0) syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) r4 = memfd_secret(0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ecf3000040"]) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="360f01c80f011b660f070f20c06635000000800f22c00fc77dd8660ff34119f61b99d92e2eb80500000066b9002000000f01c16766c7442400e2c54baa6766c7442402006800006766c744240600000000670f011c24", 0x56}], 0x1, 0x10, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x37, 0x1, 0x8, 0x6, 0x0) socket$inet6(0xa, 0x4, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.730798883s ago: executing program 2 (id=2818): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) close(r0) 1.322907099s ago: executing program 0 (id=2819): socket(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) 872.84649ms ago: executing program 3 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @private2, 0x3}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000380)="1228be25ff8fadf57c63a3533e83d3d62a8849b5a57bb1758262ae62f3c302f8c1e58441767e3a700443308e00af9bde47834e9e1d47900288cb1500d518f098c2f87b0d5d749bfe23c76aac50444c0becc114e66ae8b460349c1385e4c7b00456146553c47af9e8599dccc528f54634949bf4623b765048bbb8be6212591e7d94ad5fb090", 0x85}, {&(0x7f0000000680)="3762b6644a7e6baf2445570e66c11abeb206f27acf77d013dadc46f186f24d27cf7f43f3", 0x24}, {&(0x7f00000006c0)="96da7e336a627c73d50d50400cc158dd81050163ac6d0fa8f56dd54845402b41afcbf63a", 0x24}, {&(0x7f0000000700)="bc3a4be9ae4ac50799ff94b526c1651ca557a6e6e046edc471d06b56f6c85145410a6b0c142f", 0x26}], 0x4, &(0x7f0000000780)=[@hoplimit={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x4}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x32, 0x4, 0x0, 0x5, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts={{0x1c, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}], 0x70}}], 0x1, 0x4040001) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f08e2a8f004"], 0x7) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0xe8}}, 0x0) 428.344813ms ago: executing program 2 (id=2821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x8, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000014000905000000fdeddbdb25020800cb", @ANYRES32=r9, @ANYBLOB="080004007f000001080008001000000008000900b5fdffff08000200ac1e01010800090031000000"], 0x40}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x208200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 143.00357ms ago: executing program 0 (id=2822): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.227787ms ago: executing program 0 (id=2823): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x5, 0x6, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000180)={r4, 0x4, 0x7, 0x800, 0x3, [0x0, 0x0, 0x0, 0x0], [0x8, 0xfffffff7, 0xe87d, 0x3], [0x800, 0x958e, 0x2, 0xfffffff9], [0x6, 0x6, 0x41, 0x10001]}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000280)={r7}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, {0x101, 0x2, 0x4, 0xa}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, {0x101, 0x2, 0x4, 0xa}}) openat$userio(0xffffff9c, &(0x7f0000000300), 0x420700, 0x0) (async) openat$userio(0xffffff9c, &(0x7f0000000300), 0x420700, 0x0) fchdir(r1) (async) fchdir(r1) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x100000000}}, 0x18) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r1) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/42) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000003c0)=0x7f) (async) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000003c0)=0x7f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000400), 0x9, 0x400000) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06464ce, &(0x7f0000000440)={r4, 0x3, 0x97, 0x400, 0x2, [0x0, 0x0, 0x0], [0xdb00, 0x80000000, 0x10001, 0x1699], [0xfffff7a9, 0x4], [0x100000001, 0x3, 0xd1e, 0xfffffffffffffff9]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4008641c, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=""/94}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4008641c, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=""/94}) io_uring_enter(r2, 0x57cc, 0xf92b, 0x8, &(0x7f0000000580)={[0x400, 0x3]}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000005c0)=""/157, &(0x7f0000000680)=0x9d) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000005c0)=""/157, &(0x7f0000000680)=0x9d) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000006c0)=@ccm_128={{0x304}, "172201ff9d46ca15", "ea3674172e3f3c060fc029d7f2b393be", "59fa97a3", "74b8937d1c57a681"}, 0x28) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, &(0x7f0000000700)={r3, 0x80000000, 0x1, 0x5, 0x3, [r6, r10, r6, r5], [0xfffffffc, 0x4, 0x7, 0x2], [0x8, 0x100, 0x2, 0x7], [0xfffffffffffffffb, 0x9, 0x8000, 0x5]}) read(r1, &(0x7f0000000780)=""/236, 0xec) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'vxcan1\x00'}) syz_open_dev$dri(&(0x7f00000008c0), 0xf4f6, 0x1) (async) r12 = syz_open_dev$dri(&(0x7f00000008c0), 0xf4f6, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r12, 0xc00c642d, &(0x7f0000000900)={r11}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r12, 0xc00c642d, &(0x7f0000000900)={r11}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000a40)=@hsc={0x1, 0x0, "4b700151ebf21997ae8a"}) 0s ago: executing program 3 (id=2824): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 98.667925][T14187] ? __pfx___nla_validate_parse+0x10/0x10 [ 398.667950][T14187] ? rcu_is_watching+0x12/0xc0 [ 398.667966][T14187] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 398.667989][T14187] ? __nla_parse+0x40/0x60 [ 398.668037][T14187] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 398.668064][T14187] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 398.668094][T14187] genl_family_rcv_msg_doit+0x202/0x2f0 [ 398.668111][T14187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.668137][T14187] ? trace_cap_capable+0x1a2/0x210 [ 398.668159][T14187] ? bpf_lsm_capable+0x9/0x10 [ 398.668175][T14187] ? security_capable+0x7e/0x260 [ 398.668196][T14187] genl_rcv_msg+0x565/0x800 [ 398.668213][T14187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.668226][T14187] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 398.668247][T14187] ? __pfx___lock_acquire+0x10/0x10 [ 398.668269][T14187] netlink_rcv_skb+0x16b/0x440 [ 398.668288][T14187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.668302][T14187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.668334][T14187] ? down_read+0xc9/0x330 [ 398.668353][T14187] ? __pfx_down_read+0x10/0x10 [ 398.668373][T14187] ? netlink_deliver_tap+0x1ae/0xd30 [ 398.668398][T14187] genl_rcv+0x28/0x40 [ 398.668419][T14187] netlink_unicast+0x53c/0x7f0 [ 398.668442][T14187] ? __pfx_netlink_unicast+0x10/0x10 [ 398.668463][T14187] ? __phys_addr_symbol+0x30/0x80 [ 398.668478][T14187] ? __check_object_size+0x488/0x710 [ 398.668496][T14187] netlink_sendmsg+0x8b8/0xd70 [ 398.668520][T14187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.668550][T14187] ____sys_sendmsg+0xaaf/0xc90 [ 398.668571][T14187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.668587][T14187] ? get_compat_msghdr+0x11b/0x170 [ 398.668616][T14187] ___sys_sendmsg+0x135/0x1e0 [ 398.668640][T14187] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.668673][T14187] ? __pfx_lock_release+0x10/0x10 [ 398.668694][T14187] ? trace_lock_acquire+0x14e/0x1f0 [ 398.668720][T14187] ? __fget_files+0x206/0x3a0 [ 398.668747][T14187] __sys_sendmsg+0x16e/0x220 [ 398.668779][T14187] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.668817][T14187] __do_fast_syscall_32+0x73/0x120 [ 398.668842][T14187] do_fast_syscall_32+0x32/0x80 [ 398.668862][T14187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.668888][T14187] RIP: 0023:0xf73de579 [ 398.668901][T14187] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 398.668917][T14187] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 398.668933][T14187] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 398.668943][T14187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.668952][T14187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.668961][T14187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 398.668970][T14187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.668990][T14187] [ 398.689761][ T5959] Bluetooth: hci2: unexpected event for opcode 0x04f0 [ 398.949787][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 399.124485][T14194] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 400.332022][T14205] fuse: Unknown parameter '±„¡6' [ 401.752907][ T40] audit: type=1804 audit(1742212492.479:177): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2003" name="/newroot/511/bus/bus" dev="overlay" ino=3060 res=1 errno=0 [ 402.389014][T14230] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.879342][T14241] wireguard0: entered promiscuous mode [ 402.881643][T14241] wireguard0: entered allmulticast mode [ 404.796313][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 405.030060][ T40] audit: type=1804 audit(1742212495.719:178): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2015" name="/newroot/516/bus/bus" dev="overlay" ino=3066 res=1 errno=0 [ 405.739879][ T5959] Bluetooth: hci3: command 0x0405 tx timeout [ 409.553971][T14390] FAULT_INJECTION: forcing a failure. [ 409.553971][T14390] name failslab, interval 1, probability 0, space 0, times 0 [ 409.563017][T14390] CPU: 2 UID: 0 PID: 14390 Comm: syz.2.2037 Not tainted 6.14.0-rc7-syzkaller #0 [ 409.563033][T14390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 409.563049][T14390] Call Trace: [ 409.563053][T14390] [ 409.563057][T14390] dump_stack_lvl+0x16c/0x1f0 [ 409.563088][T14390] should_fail_ex+0x50a/0x650 [ 409.563102][T14390] ? fs_reclaim_acquire+0xae/0x150 [ 409.563117][T14390] should_failslab+0xc2/0x120 [ 409.563128][T14390] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 409.563144][T14390] ? alloc_vfsmnt+0x23/0x6f0 [ 409.563158][T14390] alloc_vfsmnt+0x23/0x6f0 [ 409.563170][T14390] clone_mnt+0x6d/0xf90 [ 409.563185][T14390] copy_tree+0x39e/0x9c0 [ 409.563205][T14390] copy_mnt_ns+0x1b5/0xa70 [ 409.563214][T14390] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 409.563230][T14390] ? create_new_namespaces+0x30/0xad0 [ 409.563251][T14390] create_new_namespaces+0xd3/0xad0 [ 409.563267][T14390] ? bpf_lsm_capable+0x9/0x10 [ 409.563279][T14390] ? security_capable+0x7e/0x260 [ 409.563293][T14390] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 409.563311][T14390] ksys_unshare+0x45d/0xa40 [ 409.563322][T14390] ? __pfx_ksys_unshare+0x10/0x10 [ 409.563333][T14390] ? ksys_write+0x1ba/0x250 [ 409.563352][T14390] __ia32_sys_unshare+0x30/0x40 [ 409.563363][T14390] __do_fast_syscall_32+0x73/0x120 [ 409.563379][T14390] do_fast_syscall_32+0x32/0x80 [ 409.563394][T14390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.563412][T14390] RIP: 0023:0xf7f80579 [ 409.563421][T14390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 409.563431][T14390] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 409.563442][T14390] RAX: ffffffffffffffda RBX: 0000000020020680 RCX: 0000000000000000 [ 409.563449][T14390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.563455][T14390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.563461][T14390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 409.563467][T14390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.563479][T14390] [ 409.650799][T14393] IPVS: Error connecting to the multicast addr [ 409.891940][T14376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 409.940769][T14397] 9pnet_virtio: no channels available for device syz [ 412.038517][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 412.065902][T14446] fuse: Unknown parameter '0x0000000000000003' [ 412.098675][T14448] sp0: Synchronizing with TNC [ 412.637880][T14461] sp0: Synchronizing with TNC [ 412.734080][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 412.743594][T14469] FAULT_INJECTION: forcing a failure. [ 412.743594][T14469] name failslab, interval 1, probability 0, space 0, times 0 [ 412.747268][T14469] CPU: 3 UID: 0 PID: 14469 Comm: syz.0.2059 Not tainted 6.14.0-rc7-syzkaller #0 [ 412.747284][T14469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 412.747290][T14469] Call Trace: [ 412.747294][T14469] [ 412.747299][T14469] dump_stack_lvl+0x16c/0x1f0 [ 412.747319][T14469] should_fail_ex+0x50a/0x650 [ 412.747332][T14469] should_failslab+0xc2/0x120 [ 412.747342][T14469] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 412.747359][T14469] ? skb_clone+0x190/0x3f0 [ 412.747371][T14469] skb_clone+0x190/0x3f0 [ 412.747381][T14469] netlink_deliver_tap+0xabd/0xd30 [ 412.747400][T14469] netlink_unicast+0x6b4/0x7f0 [ 412.747417][T14469] ? __pfx_netlink_unicast+0x10/0x10 [ 412.747431][T14469] ? genl_rcv_msg+0x4bd/0x800 [ 412.747445][T14469] netlink_ack+0x6ac/0xb80 [ 412.747464][T14469] netlink_rcv_skb+0x348/0x440 [ 412.747479][T14469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.747490][T14469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.747511][T14469] ? down_read+0xc9/0x330 [ 412.747527][T14469] ? __pfx_down_read+0x10/0x10 [ 412.747542][T14469] ? netlink_deliver_tap+0x1ae/0xd30 [ 412.747559][T14469] genl_rcv+0x28/0x40 [ 412.747574][T14469] netlink_unicast+0x53c/0x7f0 [ 412.747591][T14469] ? __pfx_netlink_unicast+0x10/0x10 [ 412.747607][T14469] ? __phys_addr_symbol+0x30/0x80 [ 412.747618][T14469] ? __check_object_size+0x488/0x710 [ 412.747631][T14469] netlink_sendmsg+0x8b8/0xd70 [ 412.747648][T14469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.747668][T14469] ____sys_sendmsg+0xaaf/0xc90 [ 412.747682][T14469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.747694][T14469] ? get_compat_msghdr+0x11b/0x170 [ 412.747714][T14469] ___sys_sendmsg+0x135/0x1e0 [ 412.747731][T14469] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.747753][T14469] ? __pfx_lock_release+0x10/0x10 [ 412.747767][T14469] ? trace_lock_acquire+0x14e/0x1f0 [ 412.747784][T14469] ? __fget_files+0x206/0x3a0 [ 412.747802][T14469] __sys_sendmsg+0x16e/0x220 [ 412.747819][T14469] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.747844][T14469] __do_fast_syscall_32+0x73/0x120 [ 412.747860][T14469] do_fast_syscall_32+0x32/0x80 [ 412.747896][T14469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.747914][T14469] RIP: 0023:0xf745e579 [ 412.747923][T14469] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 412.747934][T14469] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 412.747944][T14469] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000480 [ 412.747950][T14469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.747956][T14469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.747962][T14469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 412.747968][T14469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.747980][T14469] [ 413.137491][T14479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.706041][T14491] 9pnet_virtio: no channels available for device syz [ 414.000323][T14498] 9pnet_virtio: no channels available for device syz [ 414.290385][T14511] random: crng reseeded on system resumption [ 414.361050][T14519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.389910][T14519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2070'. [ 415.041071][T14524] wireguard0: entered promiscuous mode [ 415.042788][T14524] wireguard0: entered allmulticast mode [ 416.674152][T14557] wireguard0: entered promiscuous mode [ 416.675856][T14557] wireguard0: entered allmulticast mode [ 417.020569][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 417.417959][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 417.621526][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 418.005007][T14603] wireguard1: entered promiscuous mode [ 418.006533][T14603] wireguard1: entered allmulticast mode [ 418.139041][ T5953] Bluetooth: hci3: unexpected event for opcode 0x04f0 [ 418.164641][T14609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.320738][T14638] Can't find a SQUASHFS superblock on nullb0 [ 420.586718][T14642] wireguard1: entered promiscuous mode [ 420.588373][T14642] wireguard1: entered allmulticast mode [ 421.286096][T14656] wireguard1: entered promiscuous mode [ 421.287714][T14656] wireguard1: entered allmulticast mode [ 421.469856][ T5953] Bluetooth: hci3: unexpected event for opcode 0x04f0 [ 421.556527][T14663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 421.701250][T14666] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 421.703585][T14666] bond_slave_0: left promiscuous mode [ 421.707648][T14666] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 421.712442][T14666] bond_slave_1: left promiscuous mode [ 421.726430][T14666] team0: Port device team_slave_0 removed [ 421.731491][T14666] team0: Port device team_slave_1 removed [ 421.733391][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.735552][T14666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.738852][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.741213][T14666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.827025][T14668] wireguard1: entered promiscuous mode [ 421.828653][T14668] wireguard1: entered allmulticast mode [ 422.815901][T14677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.899889][T14677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.957474][T14677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.015717][T14677] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.168403][T14677] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.188770][T14677] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.193949][T14677] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.198563][T14677] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.375127][ T40] audit: type=1326 audit(1742212514.099:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.1.2105" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0 [ 424.481976][T14721] wireguard0: entered promiscuous mode [ 424.483642][T14721] wireguard0: entered allmulticast mode [ 424.872962][T14732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.360544][T14758] netlink: 'syz.3.2116': attribute type 9 has an invalid length. [ 425.362998][T14758] netlink: 'syz.3.2116': attribute type 7 has an invalid length. [ 425.365151][T14758] netlink: 'syz.3.2116': attribute type 8 has an invalid length. [ 425.369864][T14758] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 426.579775][ T36] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 426.729692][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 426.733884][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.737136][ T36] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 426.739785][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.743185][ T36] usb 6-1: config 0 descriptor?? [ 426.952277][ T36] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 427.155457][ T6243] usb 6-1: USB disconnect, device number 22 [ 427.499277][T14797] wireguard1: entered promiscuous mode [ 427.501076][T14797] wireguard1: entered allmulticast mode [ 427.778815][ T5953] Bluetooth: hci3: unexpected event for opcode 0x04f0 [ 427.812552][T14809] syzkaller0 speed is unknown, defaulting to 1000 [ 427.847087][T14809] »»»»»»7 speed is unknown, defaulting to 1000 [ 429.287625][T14844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.292775][T14844] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 429.353128][T14874] tmpfs: Bad value for 'mpol' [ 430.072475][ T5953] Bluetooth: hci3: unexpected event for opcode 0x04f0 [ 430.093606][T14884] wireguard1: entered promiscuous mode [ 430.095255][T14884] wireguard1: entered allmulticast mode [ 430.654157][T14913] syzkaller0 speed is unknown, defaulting to 1000 [ 430.719111][T14913] »»»»»»7 speed is unknown, defaulting to 1000 [ 430.867047][T14909] sp0: Synchronizing with TNC [ 431.389942][T14936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2147'. [ 431.531956][T14945] syzkaller0 speed is unknown, defaulting to 1000 [ 431.576724][T14945] »»»»»»7 speed is unknown, defaulting to 1000 [ 431.758180][T14945] FAULT_INJECTION: forcing a failure. [ 431.758180][T14945] name failslab, interval 1, probability 0, space 0, times 0 [ 431.761739][T14945] CPU: 2 UID: 0 PID: 14945 Comm: syz.3.2149 Not tainted 6.14.0-rc7-syzkaller #0 [ 431.761753][T14945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 431.761759][T14945] Call Trace: [ 431.761763][T14945] [ 431.761767][T14945] dump_stack_lvl+0x16c/0x1f0 [ 431.761786][T14945] should_fail_ex+0x50a/0x650 [ 431.761797][T14945] ? fs_reclaim_acquire+0xae/0x150 [ 431.761813][T14945] should_failslab+0xc2/0x120 [ 431.761824][T14945] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 431.761840][T14945] ? __alloc_skb+0x2b1/0x380 [ 431.761857][T14945] __alloc_skb+0x2b1/0x380 [ 431.761872][T14945] ? __pfx___alloc_skb+0x10/0x10 [ 431.761889][T14945] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 431.761907][T14945] netlink_alloc_large_skb+0x69/0x130 [ 431.761923][T14945] netlink_sendmsg+0x689/0xd70 [ 431.761940][T14945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.761960][T14945] ____sys_sendmsg+0xaaf/0xc90 [ 431.761974][T14945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.761986][T14945] ? get_compat_msghdr+0x11b/0x170 [ 431.762004][T14945] ___sys_sendmsg+0x135/0x1e0 [ 431.762022][T14945] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.762043][T14945] ? __pfx_lock_release+0x10/0x10 [ 431.762058][T14945] ? trace_lock_acquire+0x14e/0x1f0 [ 431.762075][T14945] ? __fget_files+0x206/0x3a0 [ 431.762093][T14945] __sys_sendmsg+0x16e/0x220 [ 431.762110][T14945] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.762134][T14945] __do_fast_syscall_32+0x73/0x120 [ 431.762150][T14945] do_fast_syscall_32+0x32/0x80 [ 431.762165][T14945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.762183][T14945] RIP: 0023:0xf7fc6579 [ 431.762191][T14945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 431.762202][T14945] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 431.762212][T14945] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 431.762229][T14945] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.762237][T14945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.762243][T14945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 431.762249][T14945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.762261][T14945] [ 431.876630][T14955] IPv6: syztnl0: Disabled Multicast RS [ 431.920846][T14922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.961917][T14959] syzkaller0 speed is unknown, defaulting to 1000 [ 432.022452][T14959] »»»»»»7 speed is unknown, defaulting to 1000 [ 432.854983][T15000] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 432.857173][T15000] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2160'. [ 432.859559][T15000] team0: entered promiscuous mode [ 432.861293][T15000] bridge0: port 1(team0) entered blocking state [ 432.863053][T15000] bridge0: port 1(team0) entered disabled state [ 432.864793][T15000] team0: entered allmulticast mode [ 432.924053][T15004] IPv6: syztnl0: Disabled Multicast RS [ 433.216919][T15020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2167'. [ 433.259662][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 433.383419][T15032] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 433.406917][ T40] audit: type=1800 audit(1742212524.129:180): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2165" name="bus" dev="overlay" ino=3288 res=0 errno=0 [ 433.763551][T15041] )Š\: renamed from ip6tnl0 [ 434.542468][T15049] wireguard1: entered promiscuous mode [ 434.544093][T15049] wireguard1: entered allmulticast mode [ 434.661050][T15053] IPv6: syztnl0: Disabled Multicast RS [ 435.341642][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 437.797114][T15117] syz_tun: entered allmulticast mode [ 439.500890][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.010211][T15166] netlink: 'syz.0.2205': attribute type 4 has an invalid length. [ 440.102700][T15170] FAULT_INJECTION: forcing a failure. [ 440.102700][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.106736][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.3.2202 Not tainted 6.14.0-rc7-syzkaller #0 [ 440.106760][T15170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.106768][T15170] Call Trace: [ 440.106771][T15170] [ 440.106776][T15170] dump_stack_lvl+0x16c/0x1f0 [ 440.106795][T15170] should_fail_ex+0x50a/0x650 [ 440.106809][T15170] _copy_to_user+0x32/0xd0 [ 440.106822][T15170] simple_read_from_buffer+0xd0/0x160 [ 440.106837][T15170] proc_fail_nth_read+0x198/0x270 [ 440.106852][T15170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.106865][T15170] ? rw_verify_area+0xcf/0x680 [ 440.106878][T15170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.106891][T15170] vfs_read+0x1df/0xbf0 [ 440.106906][T15170] ? __fget_files+0x1fc/0x3a0 [ 440.106921][T15170] ? __pfx___mutex_lock+0x10/0x10 [ 440.106936][T15170] ? __pfx_vfs_read+0x10/0x10 [ 440.106954][T15170] ? __fget_files+0x206/0x3a0 [ 440.106972][T15170] ksys_read+0x12b/0x250 [ 440.106986][T15170] ? __pfx_ksys_read+0x10/0x10 [ 440.107004][T15170] __do_fast_syscall_32+0x73/0x120 [ 440.107020][T15170] do_fast_syscall_32+0x32/0x80 [ 440.107035][T15170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.107052][T15170] RIP: 0023:0xf7fc6579 [ 440.107060][T15170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 440.107072][T15170] RSP: 002b:00000000f50a4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 440.107082][T15170] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f50a4620 [ 440.107088][T15170] RDX: 000000000000000f RSI: 00000000f744cff4 RDI: 0000000000000000 [ 440.107094][T15170] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 440.107100][T15170] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 440.107106][T15170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.107118][T15170] [ 441.296614][T15192] wireguard1: entered promiscuous mode [ 441.298268][T15192] wireguard1: entered allmulticast mode [ 442.551131][T15224] netlink: 'syz.3.2218': attribute type 10 has an invalid length. [ 442.556586][T15224] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2218'. [ 442.612062][T15227] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 442.929355][T15240] wireguard1: entered promiscuous mode [ 442.936339][T15240] wireguard1: entered allmulticast mode [ 443.060132][ T6243] IPVS: starting estimator thread 0... [ 443.160179][T15248] IPVS: using max 37 ests per chain, 88800 per kthread [ 443.673252][T15260] x_tables: duplicate underflow at hook 2 [ 443.675555][ T40] audit: type=1326 audit(1742212534.399:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.0.2227" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 444.349173][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 444.355504][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 444.514171][T15285] FAULT_INJECTION: forcing a failure. [ 444.514171][T15285] name failslab, interval 1, probability 0, space 0, times 0 [ 444.518205][T15285] CPU: 3 UID: 0 PID: 15285 Comm: syz.0.2234 Not tainted 6.14.0-rc7-syzkaller #0 [ 444.518219][T15285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.518225][T15285] Call Trace: [ 444.518229][T15285] [ 444.518233][T15285] dump_stack_lvl+0x16c/0x1f0 [ 444.518252][T15285] should_fail_ex+0x50a/0x650 [ 444.518262][T15285] ? fs_reclaim_acquire+0xae/0x150 [ 444.518277][T15285] should_failslab+0xc2/0x120 [ 444.518287][T15285] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 444.518304][T15285] ? __d_alloc+0x31/0xaa0 [ 444.518315][T15285] __d_alloc+0x31/0xaa0 [ 444.518326][T15285] d_alloc_pseudo+0x1c/0xc0 [ 444.518338][T15285] alloc_file_pseudo+0xd0/0x230 [ 444.518351][T15285] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 444.518366][T15285] ? do_raw_spin_unlock+0x172/0x230 [ 444.518379][T15285] __anon_inode_getfile+0xf8/0x370 [ 444.518396][T15285] anon_inode_getfd+0x52/0xb0 [ 444.518411][T15285] __ia32_sys_fsopen+0x18f/0x240 [ 444.518423][T15285] __do_fast_syscall_32+0x73/0x120 [ 444.518439][T15285] do_fast_syscall_32+0x32/0x80 [ 444.518454][T15285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.518471][T15285] RIP: 0023:0xf745e579 [ 444.518480][T15285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 444.518491][T15285] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ae [ 444.518501][T15285] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000001 [ 444.518511][T15285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.518520][T15285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.518529][T15285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 444.518537][T15285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.518557][T15285] [ 445.003784][T15292] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.735596][T15313] wireguard1: entered promiscuous mode [ 445.737230][T15313] wireguard1: entered allmulticast mode [ 446.524927][T15343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 447.350604][T15357] xt_bpf: check failed: parse error [ 447.438296][T15360] netlink: 'syz.2.2251': attribute type 28 has an invalid length. [ 448.343872][T15392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 449.638747][T15413] block device autoloading is deprecated and will be removed. [ 449.705428][T15413] syz.2.2260: attempt to access beyond end of device [ 449.705428][T15413] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 449.828774][T15417] wireguard0: entered promiscuous mode [ 449.831810][T15417] wireguard0: entered allmulticast mode [ 452.064951][T15455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 452.553029][T15465] sp1: Synchronizing with TNC [ 452.555912][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 452.645560][T15471] FAULT_INJECTION: forcing a failure. [ 452.645560][T15471] name failslab, interval 1, probability 0, space 0, times 0 [ 452.649377][T15471] CPU: 2 UID: 0 PID: 15471 Comm: syz.0.2274 Not tainted 6.14.0-rc7-syzkaller #0 [ 452.649392][T15471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.649398][T15471] Call Trace: [ 452.649402][T15471] [ 452.649406][T15471] dump_stack_lvl+0x16c/0x1f0 [ 452.649426][T15471] should_fail_ex+0x50a/0x650 [ 452.649438][T15471] ? sctp_add_bind_addr+0x9a/0x3d0 [ 452.649450][T15471] should_failslab+0xc2/0x120 [ 452.649461][T15471] __kmalloc_cache_noprof+0x68/0x410 [ 452.649479][T15471] sctp_add_bind_addr+0x9a/0x3d0 [ 452.649493][T15471] sctp_copy_local_addr_list+0x39e/0x5a0 [ 452.649509][T15471] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 452.649526][T15471] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 452.649544][T15471] ? sctp_bind_addr_copy+0xe0/0x530 [ 452.649555][T15471] sctp_bind_addr_copy+0xe0/0x530 [ 452.649579][T15471] sctp_connect_new_asoc+0x1d8/0x790 [ 452.649600][T15471] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 452.649618][T15471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.649638][T15471] __sctp_connect+0x3f5/0xc60 [ 452.649654][T15471] ? __might_fault+0x13b/0x190 [ 452.649665][T15471] ? trace_lock_acquire+0x14e/0x1f0 [ 452.649679][T15471] ? __pfx___sctp_connect+0x10/0x10 [ 452.649694][T15471] ? lock_acquire+0x2f/0xb0 [ 452.649708][T15471] ? __might_fault+0xe3/0x190 [ 452.649719][T15471] ? __might_fault+0xe3/0x190 [ 452.649732][T15471] __sctp_setsockopt_connectx+0xfc/0x170 [ 452.649750][T15471] sctp_getsockopt+0x2d1e/0x74a0 [ 452.649760][T15471] ? hlock_class+0x4e/0x130 [ 452.649771][T15471] ? mark_lock+0xb5/0xc60 [ 452.649784][T15471] ? aa_label_sk_perm+0x19d/0x5a0 [ 452.649799][T15471] ? __pfx_sctp_getsockopt+0x10/0x10 [ 452.649808][T15471] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 452.649824][T15471] ? find_held_lock+0x2d/0x110 [ 452.649841][T15471] ? __pfx___might_resched+0x10/0x10 [ 452.649861][T15471] ? aa_sk_perm+0x2f5/0xb20 [ 452.649874][T15471] ? ksys_write+0x191/0x250 [ 452.649888][T15471] ? __pfx_aa_sk_perm+0x10/0x10 [ 452.649902][T15471] ? find_held_lock+0x2d/0x110 [ 452.649913][T15471] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 452.649927][T15471] ? do_sock_getsockopt+0x3fe/0x800 [ 452.649939][T15471] do_sock_getsockopt+0x3fe/0x800 [ 452.649952][T15471] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 452.649964][T15471] ? lock_acquire+0x2f/0xb0 [ 452.649977][T15471] ? __fget_files+0x40/0x3a0 [ 452.649994][T15471] ? __fget_files+0x206/0x3a0 [ 452.650011][T15471] __sys_getsockopt+0x12f/0x260 [ 452.650030][T15471] __ia32_sys_getsockopt+0xbc/0x160 [ 452.650045][T15471] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.650060][T15471] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 452.650075][T15471] __do_fast_syscall_32+0x73/0x120 [ 452.650090][T15471] do_fast_syscall_32+0x32/0x80 [ 452.650105][T15471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.650123][T15471] RIP: 0023:0xf745e579 [ 452.650131][T15471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.650141][T15471] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 452.650152][T15471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 452.650158][T15471] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100 [ 452.650164][T15471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.650170][T15471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 452.650176][T15471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.650188][T15471] [ 452.670815][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'. [ 452.702617][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 454.589621][T15508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 455.927145][T15548] syz.1.2291: attempt to access beyond end of device [ 455.927145][T15548] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 456.603004][T15566] 9pnet_virtio: no channels available for device syz [ 457.152073][T15576] FAULT_INJECTION: forcing a failure. [ 457.152073][T15576] name failslab, interval 1, probability 0, space 0, times 0 [ 457.155608][T15576] CPU: 2 UID: 0 PID: 15576 Comm: syz.0.2298 Not tainted 6.14.0-rc7-syzkaller #0 [ 457.155622][T15576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.155628][T15576] Call Trace: [ 457.155632][T15576] [ 457.155636][T15576] dump_stack_lvl+0x16c/0x1f0 [ 457.155656][T15576] should_fail_ex+0x50a/0x650 [ 457.155667][T15576] ? fs_reclaim_acquire+0xae/0x150 [ 457.155682][T15576] ? tomoyo_realpath_from_path+0xb9/0x720 [ 457.155697][T15576] should_failslab+0xc2/0x120 [ 457.155708][T15576] __kmalloc_noprof+0xcb/0x510 [ 457.155724][T15576] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 457.155742][T15576] tomoyo_realpath_from_path+0xb9/0x720 [ 457.155757][T15576] ? tomoyo_path_number_perm+0x235/0x590 [ 457.155771][T15576] ? tomoyo_path_number_perm+0x235/0x590 [ 457.155786][T15576] tomoyo_path_number_perm+0x248/0x590 [ 457.155798][T15576] ? tomoyo_path_number_perm+0x235/0x590 [ 457.155812][T15576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 457.155836][T15576] ? __pfx_lock_release+0x10/0x10 [ 457.155851][T15576] ? trace_lock_acquire+0x14e/0x1f0 [ 457.155864][T15576] ? lock_acquire+0x2f/0xb0 [ 457.155878][T15576] ? __fget_files+0x40/0x3a0 [ 457.155895][T15576] ? __fget_files+0x206/0x3a0 [ 457.155912][T15576] security_file_ioctl_compat+0x9b/0x240 [ 457.155928][T15576] __do_compat_sys_ioctl+0x4e/0x2c0 [ 457.155943][T15576] __do_fast_syscall_32+0x73/0x120 [ 457.155959][T15576] do_fast_syscall_32+0x32/0x80 [ 457.155974][T15576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.155992][T15576] RIP: 0023:0xf745e579 [ 457.156000][T15576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.156010][T15576] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 457.156020][T15576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828 [ 457.156027][T15576] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.156033][T15576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.156038][T15576] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 457.156044][T15576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.156056][T15576] [ 457.156060][T15576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.357273][T15612] syz.0.2305: attempt to access beyond end of device [ 458.357273][T15612] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 458.563377][T15626] wireguard1: entered promiscuous mode [ 458.567718][T15626] wireguard1: entered allmulticast mode [ 458.852513][ T5953] Bluetooth: hci3: unexpected event for opcode 0x735f [ 459.210388][T15656] 9pnet_virtio: no channels available for device syz [ 459.754683][ T40] audit: type=1326 audit(1742212550.479:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.760670][ T40] audit: type=1326 audit(1742212550.479:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.766334][ T40] audit: type=1326 audit(1742212550.489:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.772217][ T40] audit: type=1326 audit(1742212550.489:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.777931][ T40] audit: type=1326 audit(1742212550.489:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.783589][ T40] audit: type=1326 audit(1742212550.489:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.789228][ T40] audit: type=1326 audit(1742212550.489:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.795117][ T40] audit: type=1326 audit(1742212550.489:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.801124][ T40] audit: type=1326 audit(1742212550.489:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 459.806831][ T40] audit: type=1326 audit(1742212550.489:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.2.2313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 460.178081][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 460.188375][T15684] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2318'. [ 460.910780][T15708] loop6: detected capacity change from 0 to 524287999 [ 460.965747][T15712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.138282][T15714] FAULT_INJECTION: forcing a failure. [ 461.138282][T15714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.141963][T15714] CPU: 1 UID: 0 PID: 15714 Comm: syz.3.2323 Not tainted 6.14.0-rc7-syzkaller #0 [ 461.141987][T15714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.141995][T15714] Call Trace: [ 461.141999][T15714] [ 461.142004][T15714] dump_stack_lvl+0x16c/0x1f0 [ 461.142023][T15714] should_fail_ex+0x50a/0x650 [ 461.142036][T15714] _copy_to_user+0x32/0xd0 [ 461.142049][T15714] simple_read_from_buffer+0xd0/0x160 [ 461.142065][T15714] proc_fail_nth_read+0x198/0x270 [ 461.142079][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.142093][T15714] ? rw_verify_area+0xcf/0x680 [ 461.142106][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.142119][T15714] vfs_read+0x1df/0xbf0 [ 461.142133][T15714] ? __fget_files+0x1fc/0x3a0 [ 461.142149][T15714] ? __pfx___mutex_lock+0x10/0x10 [ 461.142164][T15714] ? __pfx_vfs_read+0x10/0x10 [ 461.142182][T15714] ? __fget_files+0x206/0x3a0 [ 461.142200][T15714] ksys_read+0x12b/0x250 [ 461.142214][T15714] ? __pfx_ksys_read+0x10/0x10 [ 461.142232][T15714] __do_fast_syscall_32+0x73/0x120 [ 461.142251][T15714] do_fast_syscall_32+0x32/0x80 [ 461.142267][T15714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.142285][T15714] RIP: 0023:0xf7fc6579 [ 461.142293][T15714] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 461.142303][T15714] RSP: 002b:00000000f50a4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 461.142313][T15714] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f50a4620 [ 461.142319][T15714] RDX: 000000000000000f RSI: 00000000f744cff4 RDI: 0000000000000000 [ 461.142325][T15714] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 461.142331][T15714] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 461.142337][T15714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.142349][T15714] [ 461.221829][T15716] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2326'. [ 461.259860][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 461.264190][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.267897][ C3] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 461.501971][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.506152][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.510434][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.514144][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.516401][ T5959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 461.518333][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.544321][T15725] syzkaller0 speed is unknown, defaulting to 1000 [ 461.594052][T15725] »»»»»»7 speed is unknown, defaulting to 1000 [ 461.778237][T15725] chnl_net:caif_netlink_parms(): no params data found [ 461.852252][T15725] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.854206][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.856246][T15725] bridge_slave_0: entered allmulticast mode [ 461.858361][T15725] bridge_slave_0: entered promiscuous mode [ 461.861521][T15725] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.863524][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.865580][T15725] bridge_slave_1: entered allmulticast mode [ 461.868393][T15725] bridge_slave_1: entered promiscuous mode [ 461.898883][T15725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.903824][T15725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.935185][T15725] team0: Port device team_slave_0 added [ 461.944156][T15725] team0: Port device team_slave_1 added [ 461.982155][T15725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.984396][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.992133][T15725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.995955][T15725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.997860][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.005491][T15725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.432328][T15725] hsr_slave_0: entered promiscuous mode [ 462.434717][T15725] hsr_slave_1: entered promiscuous mode [ 462.437211][T15725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.446420][T15725] Cannot create hsr debugfs directory [ 462.972459][ T1137] bond0 (unregistering): Released all slaves [ 463.130288][ T1137] bond1 (unregistering): Released all slaves [ 463.161040][ T1137] bond2 (unregistering): Released all slaves [ 463.218809][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 463.294754][ T1137] tipc: Disabling bearer [ 463.315076][ T1137] tipc: Left network mode [ 463.355960][ T1137] IPVS: stopping master sync thread 6562 ... [ 463.593189][ T5953] Bluetooth: hci2: command tx timeout [ 463.785975][ T1137] hsr_slave_0: left promiscuous mode [ 463.788248][ T1137] hsr_slave_1: left promiscuous mode [ 464.615793][ T5953] Bluetooth: hci3: unexpected event for opcode 0x73f0 [ 465.569547][T15793] wireguard1: entered promiscuous mode [ 465.571412][T15793] wireguard1: entered allmulticast mode [ 465.610492][T15725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.630440][T15725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.637328][T15725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.642208][T15725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.660738][ T5953] Bluetooth: hci2: command tx timeout [ 465.674219][T15725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.698428][T15725] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.703720][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.705713][T13443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.711319][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.713344][T13442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.864511][T15812] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 465.868398][T15725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.885429][T15725] veth0_vlan: entered promiscuous mode [ 465.890133][T15725] veth1_vlan: entered promiscuous mode [ 465.916081][T15725] veth0_macvtap: entered promiscuous mode [ 465.921827][T15725] veth1_macvtap: entered promiscuous mode [ 465.935425][T15725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.948261][T15725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.952276][T15725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.954796][T15725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.958943][T15725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.961396][T15725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.018551][T13442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.027759][T13442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.035278][T13443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.037531][T13443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.167290][ T1137] IPVS: stop unused estimator thread 0... [ 466.310240][T15833] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 466.312129][T15833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.314249][T15833] vhci_hcd vhci_hcd.0: Device attached [ 466.554266][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 466.559738][ T6243] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 467.378041][T15834] vhci_hcd: connection reset by peer [ 467.380686][ T12] vhci_hcd: stop threads [ 467.381948][ T12] vhci_hcd: release socket [ 467.384398][ T12] vhci_hcd: disconnect device [ 467.463987][T15854] wireguard0: entered promiscuous mode [ 467.465667][T15854] wireguard0: entered allmulticast mode [ 467.750186][ T5953] Bluetooth: hci2: command tx timeout [ 468.764279][T15866] virtio-fs: tag <(null)> not found [ 469.880460][ T5953] Bluetooth: hci2: command tx timeout [ 471.091426][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.096366][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.099272][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.103191][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.107250][ T5959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 471.109839][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.137408][T15947] syzkaller0 speed is unknown, defaulting to 1000 [ 471.212486][T15947] »»»»»»7 speed is unknown, defaulting to 1000 [ 471.367792][T15947] chnl_net:caif_netlink_parms(): no params data found [ 471.795275][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.797322][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.799363][T15947] bridge_slave_0: entered allmulticast mode [ 471.801613][T15947] bridge_slave_0: entered promiscuous mode [ 471.805743][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.807732][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.809839][T15947] bridge_slave_1: entered allmulticast mode [ 471.812036][T15947] bridge_slave_1: entered promiscuous mode [ 471.841585][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.882245][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.886037][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.899673][ T6243] vhci_hcd: vhci_device speed not set [ 471.909134][T15947] team0: Port device team_slave_0 added [ 471.914290][T15947] team0: Port device team_slave_1 added [ 471.934271][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.936195][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.943243][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.951770][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.957329][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.959287][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.966316][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.995047][T15947] hsr_slave_0: entered promiscuous mode [ 471.997171][T15947] hsr_slave_1: entered promiscuous mode [ 471.998972][T15947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.002428][T15947] Cannot create hsr debugfs directory [ 472.027582][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.111035][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.765426][ T12] $Hÿ (unregistering): Released all slaves [ 472.844124][ T12] tipc: Left network mode [ 473.179802][ T5959] Bluetooth: hci4: command tx timeout [ 473.228218][T15947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.231663][T15947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.235261][T15947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.277163][T15947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.381196][ T12] hsr_slave_0: left promiscuous mode [ 473.394555][ T12] veth1_macvtap: left promiscuous mode [ 473.397010][ T12] veth0_macvtap: left promiscuous mode [ 475.124065][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.130821][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.146555][T15947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.149652][T15947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.154358][T16043] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 475.157159][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.162185][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.175053][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.177055][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.260826][ T5959] Bluetooth: hci4: command tx timeout [ 475.267958][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.293631][T15947] veth0_vlan: entered promiscuous mode [ 475.297053][T15947] veth1_vlan: entered promiscuous mode [ 475.440447][T15947] veth0_macvtap: entered promiscuous mode [ 475.445007][T15947] veth1_macvtap: entered promiscuous mode [ 475.453434][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.457557][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.461426][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.466702][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.470617][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.475218][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.493099][T15947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.496402][T15947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.498723][T15947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.501548][T15947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.562921][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.565718][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.577435][T13443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.579880][T13443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.872411][T16071] team0: No ports can be present during mode change [ 476.374023][T16073] program syz.1.2382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.182840][T15027] syz_tun (unregistering): left allmulticast mode [ 477.349752][ T5959] Bluetooth: hci4: command tx timeout [ 477.370726][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.375518][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.378194][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.382870][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.385273][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 477.387441][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.445534][T13443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 477.479214][T16099] syzkaller0 speed is unknown, defaulting to 1000 [ 477.530797][T13443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 477.537362][T16099] »»»»»»7 speed is unknown, defaulting to 1000 [ 477.611342][T13443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 477.672234][T16099] chnl_net:caif_netlink_parms(): no params data found [ 477.688654][T13443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 477.840454][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.844264][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.846260][T16099] bridge_slave_0: entered allmulticast mode [ 477.856467][T16099] bridge_slave_0: entered promiscuous mode [ 477.875935][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.877826][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.879895][T16099] bridge_slave_1: entered allmulticast mode [ 477.884859][T16099] bridge_slave_1: entered promiscuous mode [ 478.132590][T13443] $Hÿ (unregistering): Released all slaves [ 478.148432][T13443] bond0 (unregistering): Released all slaves [ 478.183373][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.187067][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.250945][T16099] team0: Port device team_slave_0 added [ 478.267351][T16099] team0: Port device team_slave_1 added [ 478.300155][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.302397][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.309513][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.314549][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.316626][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.323736][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.348149][T16099] hsr_slave_0: entered promiscuous mode [ 478.353566][T16099] hsr_slave_1: entered promiscuous mode [ 478.776913][T13443] hsr_slave_0: left promiscuous mode [ 479.419786][ T5953] Bluetooth: hci4: command tx timeout [ 479.421425][ T5959] Bluetooth: hci0: command tx timeout [ 480.645615][T16099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.668437][T16099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.687643][T16099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.719420][T16099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.765048][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.776526][T16189] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 480.778741][T16189] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2403'. [ 480.788353][T16189] team0: entered promiscuous mode [ 480.790422][T16189] team_slave_0: entered promiscuous mode [ 480.792169][T16189] team_slave_1: entered promiscuous mode [ 480.796988][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.806592][T13443] IPVS: stop unused estimator thread 0... [ 480.820422][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.822479][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.825774][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.827790][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.933268][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.958200][T16099] veth0_vlan: entered promiscuous mode [ 480.972616][T16099] veth1_vlan: entered promiscuous mode [ 480.993350][T16099] veth0_macvtap: entered promiscuous mode [ 481.000439][T16099] veth1_macvtap: entered promiscuous mode [ 481.013023][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.015996][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.018662][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.030041][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.033313][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.043104][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.046016][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.048688][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.063596][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.066941][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.072708][T16099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.076255][T16099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.078672][T16099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.081463][T16099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.134666][T13443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.136893][T13443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.149008][T13443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.151359][T13443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.509698][ T5959] Bluetooth: hci0: command tx timeout [ 482.250733][T16239] team0: No ports can be present during mode change [ 483.457886][T16278] FAULT_INJECTION: forcing a failure. [ 483.457886][T16278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.523118][T16278] CPU: 1 UID: 0 PID: 16278 Comm: syz.1.2419 Not tainted 6.14.0-rc7-syzkaller #0 [ 483.523151][T16278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.523158][T16278] Call Trace: [ 483.523162][T16278] [ 483.523166][T16278] dump_stack_lvl+0x16c/0x1f0 [ 483.523186][T16278] should_fail_ex+0x50a/0x650 [ 483.523198][T16278] _copy_from_user+0x2e/0xd0 [ 483.523211][T16278] get_compat_msghdr+0xa8/0x170 [ 483.523238][T16278] ? __pfx_get_compat_msghdr+0x10/0x10 [ 483.523257][T16278] ___sys_recvmsg+0x193/0x1a0 [ 483.523274][T16278] ? __pfx____sys_recvmsg+0x10/0x10 [ 483.523291][T16278] ? __fget_files+0x1fc/0x3a0 [ 483.523307][T16278] ? trace_lock_acquire+0x14e/0x1f0 [ 483.523324][T16278] ? __fget_files+0x206/0x3a0 [ 483.523338][T16278] ? __pfx___might_resched+0x10/0x10 [ 483.523358][T16278] do_recvmmsg+0x55d/0x740 [ 483.523376][T16278] ? __pfx_do_recvmmsg+0x10/0x10 [ 483.523392][T16278] ? __schedule+0x3c6a/0x5890 [ 483.523412][T16278] ? __pfx___schedule+0x10/0x10 [ 483.523426][T16278] __sys_recvmmsg+0x21e/0x280 [ 483.523436][T16278] ? __pfx___sys_recvmmsg+0x10/0x10 [ 483.523450][T16278] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 483.523464][T16278] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.523478][T16278] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 483.523494][T16278] __do_fast_syscall_32+0x73/0x120 [ 483.523509][T16278] do_fast_syscall_32+0x32/0x80 [ 483.523524][T16278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.523542][T16278] RIP: 0023:0xf7fc2579 [ 483.523551][T16278] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 483.523561][T16278] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 483.523571][T16278] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000b40 [ 483.523578][T16278] RDX: 00000000000005df RSI: 0000000000000002 RDI: 0000000000000000 [ 483.523584][T16278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.523589][T16278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 483.523595][T16278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.523607][T16278] [ 483.582619][ T5959] Bluetooth: hci0: command tx timeout [ 483.942941][T16290] kvm: MWAIT instruction emulated as NOP! [ 484.303652][T16301] wireguard1: entered promiscuous mode [ 484.305453][T16301] wireguard1: entered allmulticast mode [ 484.451489][ T5959] Bluetooth: hci3: unexpected event for opcode 0x04f0 [ 484.994980][T16359] netlink: 'syz.2.2428': attribute type 11 has an invalid length. [ 485.211475][T16375] overlayfs: failed to resolve './file1': -2 [ 485.238814][T16377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.659847][ T5959] Bluetooth: hci0: command tx timeout [ 485.882642][T16392] ERROR: Out of memory at tomoyo_memory_ok. [ 486.129793][ T57] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 486.291180][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.294855][ T57] usb 6-1: config 0 has no interfaces? [ 486.296839][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.300460][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.304162][ T57] usb 6-1: config 0 descriptor?? [ 486.424146][T16418] overlayfs: conflicting lowerdir path [ 486.510823][ T57] usb 6-1: USB disconnect, device number 23 [ 487.133376][T16435] syzkaller0 speed is unknown, defaulting to 1000 [ 487.225162][T16438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 487.277050][T16435] »»»»»»7 speed is unknown, defaulting to 1000 [ 487.399666][ T1321] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 487.489384][T16443] FAULT_INJECTION: forcing a failure. [ 487.489384][T16443] name failslab, interval 1, probability 0, space 0, times 0 [ 487.493129][T16443] CPU: 2 UID: 0 PID: 16443 Comm: syz.0.2449 Not tainted 6.14.0-rc7-syzkaller #0 [ 487.493143][T16443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.493150][T16443] Call Trace: [ 487.493153][T16443] [ 487.493157][T16443] dump_stack_lvl+0x16c/0x1f0 [ 487.493176][T16443] should_fail_ex+0x50a/0x650 [ 487.493187][T16443] ? fs_reclaim_acquire+0xae/0x150 [ 487.493202][T16443] ? do_check_common+0x251/0xb960 [ 487.493215][T16443] should_failslab+0xc2/0x120 [ 487.493226][T16443] __kmalloc_cache_noprof+0x68/0x410 [ 487.493241][T16443] ? kasan_save_track+0x14/0x30 [ 487.493257][T16443] do_check_common+0x251/0xb960 [ 487.493270][T16443] ? raw_tp_prog_func_proto+0x87/0xa0 [ 487.493286][T16443] ? __pfx_raw_tp_prog_func_proto+0x10/0x10 [ 487.493301][T16443] ? mark_fastcall_pattern_for_call+0x12c/0xd90 [ 487.493316][T16443] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 487.493329][T16443] ? kfree+0x2c4/0x4d0 [ 487.493342][T16443] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 487.493358][T16443] ? __pfx_do_check_common+0x10/0x10 [ 487.493370][T16443] ? kvfree+0x47/0x50 [ 487.493382][T16443] ? check_cfg+0x403/0x8e0 [ 487.493395][T16443] bpf_check+0x77f7/0xb330 [ 487.493413][T16443] ? __pfx_bpf_check+0x10/0x10 [ 487.493425][T16443] ? find_held_lock+0x2d/0x110 [ 487.493439][T16443] ? bpf_prog_load+0xd42/0x2480 [ 487.493454][T16443] ? __pfx_lock_release+0x10/0x10 [ 487.493469][T16443] ? trace_lock_acquire+0x14e/0x1f0 [ 487.493481][T16443] ? bpf_prog_load+0xd42/0x2480 [ 487.493499][T16443] ? __asan_memset+0x23/0x50 [ 487.493512][T16443] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 487.493529][T16443] bpf_prog_load+0xe3c/0x2480 [ 487.493558][T16443] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.493575][T16443] ? find_held_lock+0x2d/0x110 [ 487.493587][T16443] ? __might_fault+0x13b/0x190 [ 487.493602][T16443] ? __might_fault+0xe3/0x190 [ 487.493615][T16443] __sys_bpf+0x4043/0x49c0 [ 487.493631][T16443] ? __pfx_lock_release+0x10/0x10 [ 487.493646][T16443] ? __pfx___sys_bpf+0x10/0x10 [ 487.493662][T16443] ? vfs_write+0x306/0x1150 [ 487.493679][T16443] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 487.493701][T16443] ? fput+0x67/0x440 [ 487.493711][T16443] ? ksys_write+0x1ba/0x250 [ 487.493725][T16443] ? __pfx_ksys_write+0x10/0x10 [ 487.493741][T16443] __ia32_sys_bpf+0x76/0xe0 [ 487.493751][T16443] __do_fast_syscall_32+0x73/0x120 [ 487.493767][T16443] do_fast_syscall_32+0x32/0x80 [ 487.493782][T16443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.493800][T16443] RIP: 0023:0xf745e579 [ 487.493808][T16443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 487.493818][T16443] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 487.493829][T16443] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 487.493835][T16443] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.493841][T16443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.493846][T16443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 487.493852][T16443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.493864][T16443] [ 487.559659][ T1321] usb 6-1: Using ep0 maxpacket: 32 [ 487.591402][ T1321] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 487.593761][ T1321] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 487.596163][ T1321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 487.598667][ T1321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 487.609654][ T1321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 487.612505][ T1321] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 487.616185][ T1321] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 487.619149][ T1321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.624958][ T1321] usb 6-1: config 0 descriptor?? [ 487.857570][ T1321] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 487.864547][ T1321] usb 6-1: USB disconnect, device number 24 [ 487.868141][ T1321] usblp0: removed [ 487.884446][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 487.884457][ T40] audit: type=1326 audit(1742212578.609:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.892945][ T40] audit: type=1326 audit(1742212578.609:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.898812][ T40] audit: type=1326 audit(1742212578.609:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.904912][ T40] audit: type=1326 audit(1742212578.609:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.910906][ T40] audit: type=1326 audit(1742212578.609:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.919623][ T40] audit: type=1326 audit(1742212578.609:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.925848][ T40] audit: type=1326 audit(1742212578.609:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.932190][ T40] audit: type=1326 audit(1742212578.609:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.938410][ T40] audit: type=1326 audit(1742212578.609:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 487.945326][ T40] audit: type=1326 audit(1742212578.609:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.2.2454" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 488.309666][ T6016] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 488.469641][ T6016] usb 6-1: Using ep0 maxpacket: 32 [ 488.472386][ T6016] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 488.474837][ T6016] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 488.477301][ T6016] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 488.479946][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 488.482674][ T6016] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 488.485433][ T6016] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 488.489081][ T6016] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 488.491696][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.494921][ T6016] usb 6-1: config 0 descriptor?? [ 488.809793][ T6016] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 489.095440][ T6016] usb 6-1: USB disconnect, device number 25 [ 489.106832][ T6016] usblp0: removed [ 489.857949][T16484] Bluetooth: MGMT ver 1.23 [ 491.310168][T16552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 491.312000][T16552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.319802][T16552] vhci_hcd vhci_hcd.0: Device attached [ 491.559886][ T5988] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 491.698877][T16563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2477'. [ 491.733463][T16566] netlink: 'syz.3.2478': attribute type 5 has an invalid length. [ 491.735632][T16566] netlink: 'syz.3.2478': attribute type 11 has an invalid length. [ 491.954579][T16571] overlayfs: overlapping lowerdir path [ 492.029239][T16554] vhci_hcd: connection reset by peer [ 492.042038][ T106] vhci_hcd: stop threads [ 492.043314][ T106] vhci_hcd: release socket [ 492.044641][ T106] vhci_hcd: disconnect device [ 492.530740][T16575] input: syz1 as /devices/virtual/input/input33 [ 493.339679][T14014] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 493.490067][T14014] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 493.492905][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.495309][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.498116][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.502224][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.504613][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.507657][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.510128][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.512667][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.515563][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.517960][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.520490][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.523435][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.525914][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.528222][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.531161][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.533582][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.535981][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.538749][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.541220][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.543554][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.546424][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.548881][T14014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.551360][T14014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.554233][T14014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.557382][T14014] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 493.559968][T14014] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 493.562247][T14014] usb 6-1: Product: syz [ 493.563382][T14014] usb 6-1: Manufacturer: syz [ 493.564609][T14014] usb 6-1: SerialNumber: syz [ 493.567268][T14014] usb 6-1: config 0 descriptor?? [ 493.571341][T14014] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 493.859857][T16600] trusted_key: syz.2.2486 sent an empty control message without MSG_MORE. [ 493.862774][ T1321] usb 6-1: USB disconnect, device number 26 [ 493.865095][ T1321] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 493.972922][T16612] random: crng reseeded on system resumption [ 494.071948][T16612] 9pnet: Could not find request transport: fd=0x000000000000000a [ 494.958220][T16631] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2493'. [ 495.442660][T16637] program syz.0.2495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.561973][T16652] trusted_key: encrypted_key: insufficient parameters specified [ 496.699753][ T5988] vhci_hcd: vhci_device speed not set [ 496.987196][T16677] can0: slcan on ptm0. [ 497.040416][T16676] can0 (unregistered): slcan off ptm0. [ 497.092558][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 497.095070][T16686] bridge_slave_1: left allmulticast mode [ 497.096702][T16686] bridge_slave_1: left promiscuous mode [ 497.098316][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.102582][T16686] bridge_slave_0: left allmulticast mode [ 497.105431][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.682454][T16697] FAULT_INJECTION: forcing a failure. [ 497.682454][T16697] name failslab, interval 1, probability 0, space 0, times 0 [ 497.686331][T16697] CPU: 0 UID: 0 PID: 16697 Comm: syz.1.2507 Not tainted 6.14.0-rc7-syzkaller #0 [ 497.686345][T16697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 497.686352][T16697] Call Trace: [ 497.686356][T16697] [ 497.686360][T16697] dump_stack_lvl+0x16c/0x1f0 [ 497.686380][T16697] should_fail_ex+0x50a/0x650 [ 497.686391][T16697] ? fs_reclaim_acquire+0xae/0x150 [ 497.686406][T16697] ? p9_fcall_init+0x97/0x260 [ 497.686417][T16697] should_failslab+0xc2/0x120 [ 497.686428][T16697] __kmalloc_noprof+0xcb/0x510 [ 497.686443][T16697] ? rcu_is_watching+0x12/0xc0 [ 497.686458][T16697] p9_fcall_init+0x97/0x260 [ 497.686470][T16697] p9_tag_alloc+0x17a/0x660 [ 497.686484][T16697] ? __pfx_p9_tag_alloc+0x10/0x10 [ 497.686497][T16697] ? __lock_acquire+0x15a9/0x3c40 [ 497.686516][T16697] p9_client_prepare_req+0x19f/0x4d0 [ 497.686530][T16697] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 497.686545][T16697] ? hlock_class+0x4e/0x130 [ 497.686556][T16697] ? mark_lock+0xb5/0xc60 [ 497.686572][T16697] p9_client_rpc+0x1c3/0xc10 [ 497.686586][T16697] ? __pfx_p9_client_rpc+0x10/0x10 [ 497.686601][T16697] ? idr_preload_end+0xc2/0x230 [ 497.686613][T16697] ? __pfx_lock_release+0x10/0x10 [ 497.686627][T16697] ? __pfx_lock_release+0x10/0x10 [ 497.686643][T16697] ? mark_held_locks+0x9f/0xe0 [ 497.686658][T16697] ? rcu_is_watching+0x12/0xc0 [ 497.686671][T16697] p9_client_walk+0x1ac/0x530 [ 497.686687][T16697] ? __pfx_p9_client_walk+0x10/0x10 [ 497.686703][T16697] ? v9fs_fid_lookup+0xe9/0xec0 [ 497.686718][T16697] v9fs_vfs_lookup+0x208/0x5c0 [ 497.686735][T16697] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 497.686750][T16697] ? lock_acquire+0x2f/0xb0 [ 497.686765][T16697] ? do_raw_spin_unlock+0x172/0x230 [ 497.686776][T16697] ? _raw_spin_unlock+0x28/0x50 [ 497.686790][T16697] lookup_one_qstr_excl+0x11d/0x190 [ 497.686803][T16697] ? mnt_want_write+0x161/0x450 [ 497.686817][T16697] filename_create+0x1ed/0x530 [ 497.686831][T16697] ? __pfx_filename_create+0x10/0x10 [ 497.686845][T16697] ? lock_acquire+0x2f/0xb0 [ 497.686859][T16697] ? __virt_addr_valid+0x1a4/0x590 [ 497.686872][T16697] ? __virt_addr_valid+0x5e/0x590 [ 497.686884][T16697] do_mknodat+0x18e/0x5d0 [ 497.686900][T16697] ? __pfx_do_mknodat+0x10/0x10 [ 497.686914][T16697] ? getname_flags.part.0+0x1c5/0x550 [ 497.686925][T16697] ? __pfx_ksys_write+0x10/0x10 [ 497.686942][T16697] __ia32_sys_mknodat+0xaa/0xe0 [ 497.686959][T16697] __do_fast_syscall_32+0x73/0x120 [ 497.686975][T16697] do_fast_syscall_32+0x32/0x80 [ 497.686989][T16697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.687007][T16697] RIP: 0023:0xf7fc2579 [ 497.687016][T16697] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 497.687026][T16697] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000129 [ 497.687037][T16697] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 497.687043][T16697] RDX: 0000000000002000 RSI: 0000000000000103 RDI: 0000000000000000 [ 497.687049][T16697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.687055][T16697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.687061][T16697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.687073][T16697] [ 498.047846][T16704] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 498.322274][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.327932][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.331345][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.334320][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.336570][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.338574][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.407222][T16711] syzkaller0 speed is unknown, defaulting to 1000 [ 498.460312][T16711] »»»»»»7 speed is unknown, defaulting to 1000 [ 498.661685][T16711] chnl_net:caif_netlink_parms(): no params data found [ 498.726876][T16711] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.729521][T16711] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.731725][T16711] bridge_slave_0: entered allmulticast mode [ 498.734065][T16711] bridge_slave_0: entered promiscuous mode [ 498.736739][T16711] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.739457][T16711] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.742383][T16711] bridge_slave_1: entered allmulticast mode [ 498.745562][T16711] bridge_slave_1: entered promiscuous mode [ 498.811639][T16711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.817685][T16711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.846927][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.878844][T16711] team0: Port device team_slave_0 added [ 498.883079][T16711] team0: Port device team_slave_1 added [ 498.903480][T16711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.905542][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.913683][T16711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.917471][T16711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.919419][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.932843][T16711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.952507][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.979828][T16711] hsr_slave_0: entered promiscuous mode [ 498.981631][T16711] hsr_slave_1: entered promiscuous mode [ 498.983290][T16711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.985372][T16711] Cannot create hsr debugfs directory [ 499.041289][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.175111][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.529227][ T12] team0: left allmulticast mode [ 499.532054][ T12] bridge0: port 1(team0) entered disabled state [ 499.880305][T16733] wireguard0: entered promiscuous mode [ 499.881938][T16733] wireguard0: entered allmulticast mode [ 499.945385][ T12] tipc: Disabling bearer [ 499.947387][ T12] tipc: Disabling bearer [ 499.948911][ T12] tipc: Left network mode [ 500.111736][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2516'. [ 500.224119][ T31] syzkaller0 speed is unknown, defaulting to 1000 [ 500.228149][ T31] syzkaller0 speed is unknown, defaulting to 1000 [ 500.228759][T13444] smc: removing ib device syz1 [ 500.390585][ T5959] Bluetooth: hci1: command tx timeout [ 500.390596][T14014] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 500.405684][T16711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.431053][T16711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.436427][T16711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.440485][T16711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.543421][T14014] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.545951][T14014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.548122][T16711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.548208][T14014] usb 6-1: Product: syz [ 500.555743][T16711] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.559667][T14014] usb 6-1: Manufacturer: syz [ 500.561006][T14014] usb 6-1: SerialNumber: syz [ 500.561641][T13442] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.564201][T13442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.574150][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.576165][T13442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.592751][T14014] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.636988][ T5988] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.709992][T16711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.725715][T16711] veth0_vlan: entered promiscuous mode [ 500.729403][T16711] veth1_vlan: entered promiscuous mode [ 500.739968][T16711] veth0_macvtap: entered promiscuous mode [ 500.742803][T16711] veth1_macvtap: entered promiscuous mode [ 500.748264][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.751767][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.754429][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.757232][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.759965][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.762756][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.765818][T16711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.771591][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.774352][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.777227][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.780397][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.782858][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.785940][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.789209][T16711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.793113][T16711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.795533][T16711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.797931][T16711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.800394][T16711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.829025][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.835894][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.873432][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.875624][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.941167][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.058947][T14014] usb 6-1: USB disconnect, device number 27 [ 501.106992][ T12] hsr_slave_0: left promiscuous mode [ 501.109043][ T12] hsr_slave_1: left promiscuous mode [ 501.141024][ T12] veth1_macvtap: left promiscuous mode [ 501.142653][ T12] veth0_macvtap: left promiscuous mode [ 501.144345][ T12] veth1_vlan: left promiscuous mode [ 501.145929][ T12] veth0_vlan: left promiscuous mode [ 501.189970][ T12] pim6reg527 (unregistering): left allmulticast mode [ 501.656388][T16785] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 501.670395][ T5988] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 501.672792][ T5988] ath9k_htc: Failed to initialize the device [ 501.686666][T14014] usb 6-1: ath9k_htc: USB layer deinitialized [ 502.463574][ T5959] Bluetooth: hci1: command tx timeout [ 503.157249][T16802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2526'. [ 503.416173][T13443] smc: removing ib device sz1 [ 503.549234][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 503.839192][ T12] IPVS: stop unused estimator thread 0... [ 504.539959][ T5959] Bluetooth: hci1: command tx timeout [ 504.779742][T16829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 505.258256][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 505.261729][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 505.518090][T16855] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 505.520558][T16855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2541'. [ 505.650308][T16858] IPVS: Scheduler module ip_vs_sip not found [ 505.929901][T16867] wireguard0: entered promiscuous mode [ 505.931549][T16867] wireguard0: entered allmulticast mode [ 506.478197][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 506.480869][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 506.921393][T16893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 506.977142][T16895] exfat: Unknown parameter 'discardu/#/msr' [ 509.685867][T16927] xt_NFQUEUE: number of queues (257) out of range (got 65786) [ 510.284804][T16936] random: crng reseeded on system resumption [ 510.558630][T16951] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 510.836217][T16960] vlan2: entered promiscuous mode [ 510.837626][T16960] veth1_to_batadv: entered promiscuous mode [ 510.839327][T16960] vlan2: entered allmulticast mode [ 510.840881][T16960] veth1_to_batadv: entered allmulticast mode [ 510.845935][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 510.851103][T16960] FAULT_INJECTION: forcing a failure. [ 510.851103][T16960] name failslab, interval 1, probability 0, space 0, times 0 [ 510.854566][T16960] CPU: 2 UID: 0 PID: 16960 Comm: syz.2.2568 Not tainted 6.14.0-rc7-syzkaller #0 [ 510.854580][T16960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 510.854586][T16960] Call Trace: [ 510.854590][T16960] [ 510.854595][T16960] dump_stack_lvl+0x16c/0x1f0 [ 510.854613][T16960] should_fail_ex+0x50a/0x650 [ 510.854624][T16960] ? fs_reclaim_acquire+0xae/0x150 [ 510.854639][T16960] should_failslab+0xc2/0x120 [ 510.854649][T16960] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 510.854666][T16960] ? __alloc_skb+0x2b1/0x380 [ 510.854684][T16960] __alloc_skb+0x2b1/0x380 [ 510.854699][T16960] ? __pfx___alloc_skb+0x10/0x10 [ 510.854716][T16960] ? if_nlmsg_size+0x45d/0xa80 [ 510.854734][T16960] rtmsg_ifinfo_build_skb+0x81/0x280 [ 510.854747][T16960] rtmsg_ifinfo+0x9f/0x1a0 [ 510.854759][T16960] dev_close_many+0x318/0x6a0 [ 510.854773][T16960] ? __pfx_dev_close_many+0x10/0x10 [ 510.854784][T16960] ? __pfx_lock_release+0x10/0x10 [ 510.854803][T16960] unregister_netdevice_many_notify+0x48a/0x1f30 [ 510.854815][T16960] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.854830][T16960] ? __mutex_lock+0x1cc/0xb10 [ 510.854846][T16960] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 510.854860][T16960] ? unregister_netdevice_queue+0x22f/0x3f0 [ 510.854872][T16960] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 510.854888][T16960] rtnl_dellink+0x3d7/0xaa0 [ 510.854902][T16960] ? __pfx_veth_dellink+0x10/0x10 [ 510.854916][T16960] ? kasan_save_stack+0x33/0x60 [ 510.854931][T16960] ? kasan_save_track+0x14/0x30 [ 510.854946][T16960] ? kasan_save_free_info+0x3b/0x60 [ 510.854958][T16960] ? __kasan_slab_free+0x51/0x70 [ 510.854991][T16960] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.855007][T16960] ? nlmon_xmit+0xa5/0xe0 [ 510.855041][T16960] ? aa_get_newest_label+0x376/0x680 [ 510.855055][T16960] ? find_held_lock+0x2d/0x110 [ 510.855072][T16960] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 510.855088][T16960] ? __pfx_lock_release+0x10/0x10 [ 510.855102][T16960] ? trace_lock_acquire+0x14e/0x1f0 [ 510.855117][T16960] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.855132][T16960] rtnetlink_rcv_msg+0x95b/0xea0 [ 510.855150][T16960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.855174][T16960] netlink_rcv_skb+0x16b/0x440 [ 510.855190][T16960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.855207][T16960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.855229][T16960] ? netlink_deliver_tap+0x1ae/0xd30 [ 510.855247][T16960] netlink_unicast+0x53c/0x7f0 [ 510.855263][T16960] ? __pfx_netlink_unicast+0x10/0x10 [ 510.855279][T16960] ? __phys_addr_symbol+0x30/0x80 [ 510.855290][T16960] ? __check_object_size+0x488/0x710 [ 510.855303][T16960] netlink_sendmsg+0x8b8/0xd70 [ 510.855320][T16960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.855340][T16960] ____sys_sendmsg+0xaaf/0xc90 [ 510.855354][T16960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.855366][T16960] ? get_compat_msghdr+0x11b/0x170 [ 510.855385][T16960] ___sys_sendmsg+0x135/0x1e0 [ 510.855402][T16960] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.855423][T16960] ? __pfx_lock_release+0x10/0x10 [ 510.855437][T16960] ? trace_lock_acquire+0x14e/0x1f0 [ 510.855453][T16960] ? __fget_files+0x206/0x3a0 [ 510.855472][T16960] __sys_sendmsg+0x16e/0x220 [ 510.855488][T16960] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.855504][T16960] ? __pfx_lock_release+0x10/0x10 [ 510.855522][T16960] ? __might_fault+0xe3/0x190 [ 510.855534][T16960] ? rcu_is_watching+0x12/0xc0 [ 510.855547][T16960] __do_fast_syscall_32+0x73/0x120 [ 510.855562][T16960] do_fast_syscall_32+0x32/0x80 [ 510.855577][T16960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.855594][T16960] RIP: 0023:0xf73de579 [ 510.855603][T16960] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 510.855614][T16960] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 510.855624][T16960] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 510.855631][T16960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.855636][T16960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.855642][T16960] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 510.855648][T16960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.855660][T16960] [ 511.285196][T16960] hsr_slave_1 (unregistering): left promiscuous mode [ 511.486111][T16970] wireguard0: entered promiscuous mode [ 511.489710][T16970] wireguard0: entered allmulticast mode [ 512.308650][T17003] wireguard0: entered promiscuous mode [ 512.310619][T17003] wireguard0: entered allmulticast mode [ 512.434417][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 512.871173][T17024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2581'. [ 512.874071][T17024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2581'. [ 513.699916][T17032] wireguard0: entered promiscuous mode [ 513.701459][T17032] wireguard0: entered allmulticast mode [ 514.677755][T17073] fuse: Bad value for 'group_id' [ 514.679240][T17073] fuse: Bad value for 'group_id' [ 514.683759][T17068] overlayfs: failed to clone upperpath [ 514.974439][T17076] netlink: 'syz.2.2591': attribute type 10 has an invalid length. [ 514.976693][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2591'. [ 515.827180][T17091] FAULT_INJECTION: forcing a failure. [ 515.827180][T17091] name failslab, interval 1, probability 0, space 0, times 0 [ 515.831081][T17091] CPU: 2 UID: 0 PID: 17091 Comm: syz.1.2595 Not tainted 6.14.0-rc7-syzkaller #0 [ 515.831096][T17091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 515.831103][T17091] Call Trace: [ 515.831106][T17091] [ 515.831111][T17091] dump_stack_lvl+0x16c/0x1f0 [ 515.831130][T17091] should_fail_ex+0x50a/0x650 [ 515.831152][T17091] ? fs_reclaim_acquire+0xae/0x150 [ 515.831167][T17091] ? tomoyo_encode2+0x100/0x3e0 [ 515.831181][T17091] should_failslab+0xc2/0x120 [ 515.831192][T17091] __kmalloc_noprof+0xcb/0x510 [ 515.831209][T17091] ? rcu_is_watching+0x12/0xc0 [ 515.831222][T17091] tomoyo_encode2+0x100/0x3e0 [ 515.831238][T17091] tomoyo_encode+0x29/0x50 [ 515.831252][T17091] tomoyo_realpath_from_path+0x19d/0x720 [ 515.831269][T17091] ? tomoyo_path_number_perm+0x235/0x590 [ 515.831283][T17091] tomoyo_path_number_perm+0x248/0x590 [ 515.831295][T17091] ? tomoyo_path_number_perm+0x235/0x590 [ 515.831309][T17091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 515.831333][T17091] ? __pfx_lock_release+0x10/0x10 [ 515.831348][T17091] ? trace_lock_acquire+0x14e/0x1f0 [ 515.831362][T17091] ? lock_acquire+0x2f/0xb0 [ 515.831375][T17091] ? __fget_files+0x40/0x3a0 [ 515.831392][T17091] ? __fget_files+0x206/0x3a0 [ 515.831409][T17091] security_file_ioctl_compat+0x9b/0x240 [ 515.831424][T17091] __do_compat_sys_ioctl+0x4e/0x2c0 [ 515.831438][T17091] __do_fast_syscall_32+0x73/0x120 [ 515.831455][T17091] do_fast_syscall_32+0x32/0x80 [ 515.831470][T17091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.831487][T17091] RIP: 0023:0xf7fc2579 [ 515.831496][T17091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 515.831506][T17091] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 515.831516][T17091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 515.831523][T17091] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.831529][T17091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.831534][T17091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 515.831550][T17091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.831561][T17091] [ 515.831688][T17091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 516.601044][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'. [ 516.611218][T17106] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2599'. [ 516.876069][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 516.878552][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 516.885040][T17127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 516.888396][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2605'. [ 516.891762][T17125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 516.896151][T17125] netlink: 528 bytes leftover after parsing attributes in process `syz.1.2605'. [ 517.585239][T17137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 518.407781][T17164] 9pnet_virtio: no channels available for device syz [ 519.214106][T17185] erofs (device loop1): cannot find valid erofs superblock [ 520.297914][T17224] 9pnet_virtio: no channels available for device syz [ 521.051027][T17244] FAULT_INJECTION: forcing a failure. [ 521.051027][T17244] name failslab, interval 1, probability 0, space 0, times 0 [ 521.054567][T17244] CPU: 3 UID: 0 PID: 17244 Comm: syz.3.2631 Not tainted 6.14.0-rc7-syzkaller #0 [ 521.054580][T17244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 521.054587][T17244] Call Trace: [ 521.054591][T17244] [ 521.054595][T17244] dump_stack_lvl+0x16c/0x1f0 [ 521.054614][T17244] should_fail_ex+0x50a/0x650 [ 521.054625][T17244] ? fs_reclaim_acquire+0xae/0x150 [ 521.054640][T17244] should_failslab+0xc2/0x120 [ 521.054650][T17244] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 521.054666][T17244] ? __alloc_skb+0x2b1/0x380 [ 521.054684][T17244] __alloc_skb+0x2b1/0x380 [ 521.054699][T17244] ? __pfx___alloc_skb+0x10/0x10 [ 521.054715][T17244] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 521.054738][T17244] netlink_alloc_large_skb+0x69/0x130 [ 521.054754][T17244] netlink_sendmsg+0x689/0xd70 [ 521.054771][T17244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.054791][T17244] ____sys_sendmsg+0xaaf/0xc90 [ 521.054805][T17244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.054816][T17244] ? get_compat_msghdr+0x11b/0x170 [ 521.054836][T17244] ___sys_sendmsg+0x135/0x1e0 [ 521.054852][T17244] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.054874][T17244] ? __pfx_lock_release+0x10/0x10 [ 521.054905][T17244] ? trace_lock_acquire+0x14e/0x1f0 [ 521.054922][T17244] ? __fget_files+0x206/0x3a0 [ 521.054940][T17244] __sys_sendmsg+0x16e/0x220 [ 521.054957][T17244] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.054981][T17244] __do_fast_syscall_32+0x73/0x120 [ 521.054997][T17244] do_fast_syscall_32+0x32/0x80 [ 521.055013][T17244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.055030][T17244] RIP: 0023:0xf7fe8579 [ 521.055039][T17244] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 521.055049][T17244] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 521.055060][T17244] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 521.055066][T17244] RDX: 0000000020008850 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.055072][T17244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.055078][T17244] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 521.055084][T17244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.055096][T17244] [ 521.125191][T17247] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2631'. [ 521.126779][T17249] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2630'. [ 522.565986][T17279] ISOFS: Unable to identify CD-ROM format. [ 522.910537][T17294] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 524.045065][T17313] wireguard0: entered promiscuous mode [ 524.046667][T17313] wireguard0: entered allmulticast mode [ 524.116152][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 524.116163][ T40] audit: type=1326 audit(1742212614.839:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.156009][ T40] audit: type=1326 audit(1742212614.839:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.164937][ T40] audit: type=1326 audit(1742212614.839:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.172595][ T40] audit: type=1326 audit(1742212614.839:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.178524][ T40] audit: type=1326 audit(1742212614.839:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.184373][ T40] audit: type=1326 audit(1742212614.839:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.192659][ T40] audit: type=1326 audit(1742212614.839:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.198434][ T40] audit: type=1326 audit(1742212614.839:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.204505][ T40] audit: type=1326 audit(1742212614.839:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 524.225160][ T40] audit: type=1326 audit(1742212614.839:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.1.2648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 525.393904][T17358] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 526.506524][T17379] FAULT_INJECTION: forcing a failure. [ 526.506524][T17379] name failslab, interval 1, probability 0, space 0, times 0 [ 526.510013][T17379] CPU: 1 UID: 0 PID: 17379 Comm: syz.1.2660 Not tainted 6.14.0-rc7-syzkaller #0 [ 526.510026][T17379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 526.510033][T17379] Call Trace: [ 526.510036][T17379] [ 526.510040][T17379] dump_stack_lvl+0x16c/0x1f0 [ 526.510059][T17379] should_fail_ex+0x50a/0x650 [ 526.510070][T17379] ? fs_reclaim_acquire+0xae/0x150 [ 526.510085][T17379] ? rds_message_alloc+0x42/0x230 [ 526.510099][T17379] should_failslab+0xc2/0x120 [ 526.510110][T17379] __kmalloc_noprof+0xcb/0x510 [ 526.510128][T17379] rds_message_alloc+0x42/0x230 [ 526.510142][T17379] rds_sendmsg+0xb71/0x31a0 [ 526.510165][T17379] ? __pfx_rds_sendmsg+0x10/0x10 [ 526.510183][T17379] ? aa_sk_perm+0x2f5/0xb20 [ 526.510198][T17379] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.510211][T17379] ? trace_lock_acquire+0x14e/0x1f0 [ 526.510228][T17379] ? ____sys_sendmsg+0xaaf/0xc90 [ 526.510241][T17379] ____sys_sendmsg+0xaaf/0xc90 [ 526.510255][T17379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.510267][T17379] ? get_compat_msghdr+0x11b/0x170 [ 526.510286][T17379] ___sys_sendmsg+0x135/0x1e0 [ 526.510304][T17379] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.510325][T17379] ? __pfx_lock_release+0x10/0x10 [ 526.510340][T17379] ? trace_lock_acquire+0x14e/0x1f0 [ 526.510357][T17379] ? __fget_files+0x206/0x3a0 [ 526.510375][T17379] __sys_sendmsg+0x16e/0x220 [ 526.510392][T17379] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.510415][T17379] ? rcu_is_watching+0x12/0xc0 [ 526.510428][T17379] __do_fast_syscall_32+0x73/0x120 [ 526.510444][T17379] do_fast_syscall_32+0x32/0x80 [ 526.510459][T17379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.510478][T17379] RIP: 0023:0xf7fc2579 [ 526.510487][T17379] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 526.510498][T17379] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 526.510508][T17379] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 526.510515][T17379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.510521][T17379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.510527][T17379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 526.510533][T17379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.510545][T17379] [ 526.941450][T17389] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 526.943323][T17389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.946521][T17389] vhci_hcd vhci_hcd.0: Device attached [ 527.199779][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 527.724955][T17405] wireguard0: entered promiscuous mode [ 527.726568][T17405] wireguard0: entered allmulticast mode [ 528.063400][T17390] vhci_hcd: connection reset by peer [ 528.069863][ T12] vhci_hcd: stop threads [ 528.071085][ T12] vhci_hcd: release socket [ 528.073002][ T12] vhci_hcd: disconnect device [ 528.389260][T17413] __nla_validate_parse: 2 callbacks suppressed [ 528.389272][T17413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2667'. [ 528.394633][T17413] tipc: Enabling of bearer rejected, failed to enable media [ 528.397897][T17413] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 528.400081][T17413] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2667'. [ 528.403156][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 529.542565][T17445] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 529.812072][T17452] wireguard0: entered promiscuous mode [ 529.813833][T17452] wireguard0: entered allmulticast mode [ 530.637135][T17484] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 530.980459][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 531.321346][T17490] 9pnet_virtio: no channels available for device syz [ 531.760668][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 531.760681][ T40] audit: type=1800 audit(1742212622.489:298): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2688" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 531.769794][T17506] netlink: 'syz.1.2688': attribute type 9 has an invalid length. [ 532.282173][T17513] wireguard0: entered promiscuous mode [ 532.284266][T17513] wireguard0: entered allmulticast mode [ 532.388453][T17520] FAULT_INJECTION: forcing a failure. [ 532.388453][T17520] name failslab, interval 1, probability 0, space 0, times 0 [ 532.392195][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.3.2692 Not tainted 6.14.0-rc7-syzkaller #0 [ 532.392219][T17520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 532.392227][T17520] Call Trace: [ 532.392230][T17520] [ 532.392235][T17520] dump_stack_lvl+0x16c/0x1f0 [ 532.392254][T17520] should_fail_ex+0x50a/0x650 [ 532.392265][T17520] ? fs_reclaim_acquire+0xae/0x150 [ 532.392281][T17520] should_failslab+0xc2/0x120 [ 532.392292][T17520] __kmalloc_node_noprof+0xd1/0x510 [ 532.392310][T17520] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 532.392327][T17520] __kvmalloc_node_noprof+0xad/0x1a0 [ 532.392342][T17520] ? __pfx_geneve_setup+0x10/0x10 [ 532.392359][T17520] alloc_netdev_mqs+0xd9/0x15d0 [ 532.392380][T17520] rtnl_create_link+0xc10/0xfa0 [ 532.392398][T17520] rtnl_newlink+0x14c6/0x1d60 [ 532.392417][T17520] ? __pfx_rtnl_newlink+0x10/0x10 [ 532.392436][T17520] ? __pfx___lock_acquire+0x10/0x10 [ 532.392453][T17520] ? aa_get_newest_label+0x376/0x680 [ 532.392468][T17520] ? find_held_lock+0x2d/0x110 [ 532.392482][T17520] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 532.392498][T17520] ? __pfx_lock_release+0x10/0x10 [ 532.392513][T17520] ? trace_lock_acquire+0x14e/0x1f0 [ 532.392528][T17520] ? __pfx_rtnl_newlink+0x10/0x10 [ 532.392545][T17520] rtnetlink_rcv_msg+0x95b/0xea0 [ 532.392562][T17520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.392585][T17520] netlink_rcv_skb+0x16b/0x440 [ 532.392601][T17520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.392619][T17520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.392642][T17520] ? rcu_is_watching+0x12/0xc0 [ 532.392657][T17520] netlink_unicast+0x53c/0x7f0 [ 532.392674][T17520] ? __pfx_netlink_unicast+0x10/0x10 [ 532.392690][T17520] ? __phys_addr_symbol+0x30/0x80 [ 532.392702][T17520] ? __check_object_size+0x488/0x710 [ 532.392715][T17520] netlink_sendmsg+0x8b8/0xd70 [ 532.392733][T17520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.392754][T17520] ____sys_sendmsg+0xaaf/0xc90 [ 532.392768][T17520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.392784][T17520] ? get_compat_msghdr+0x11b/0x170 [ 532.392804][T17520] ___sys_sendmsg+0x135/0x1e0 [ 532.392822][T17520] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.392844][T17520] ? __pfx_lock_release+0x10/0x10 [ 532.392859][T17520] ? trace_lock_acquire+0x14e/0x1f0 [ 532.392875][T17520] ? __fget_files+0x206/0x3a0 [ 532.392894][T17520] __sys_sendmsg+0x16e/0x220 [ 532.392911][T17520] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.392937][T17520] __do_fast_syscall_32+0x73/0x120 [ 532.392953][T17520] do_fast_syscall_32+0x32/0x80 [ 532.392969][T17520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.392987][T17520] RIP: 0023:0xf7fe8579 [ 532.392996][T17520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 532.393007][T17520] RSP: 002b:00000000f50c455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 532.393017][T17520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 532.393024][T17520] RDX: 0000000024000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.393030][T17520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.393036][T17520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 532.393042][T17520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.393055][T17520] [ 532.489674][ T10] vhci_hcd: vhci_device speed not set [ 534.201436][T17551] 9pnet_fd: Insufficient options for proto=fd [ 534.599846][T17555] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2702'. [ 534.602406][T17555] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2702'. [ 534.978066][T17565] Cannot find add_set index 3 as target [ 536.829474][T17618] sp1: Synchronizing with TNC [ 536.934861][T17618] mkiss: ax0: crc mode is auto. [ 537.062672][T17616] [U] è [ 537.370091][T17645] 9pnet: Could not find request transport: vib [ 537.629406][T17655] syzkaller1: entered promiscuous mode [ 537.631298][T17655] syzkaller1: entered allmulticast mode [ 537.634339][T17655] FAULT_INJECTION: forcing a failure. [ 537.634339][T17655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.637959][T17655] CPU: 3 UID: 0 PID: 17655 Comm: syz.2.2726 Not tainted 6.14.0-rc7-syzkaller #0 [ 537.637973][T17655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.637980][T17655] Call Trace: [ 537.637984][T17655] [ 537.637989][T17655] dump_stack_lvl+0x16c/0x1f0 [ 537.638008][T17655] should_fail_ex+0x50a/0x650 [ 537.638021][T17655] _copy_from_iter+0x2a1/0x1560 [ 537.638035][T17655] ? _copy_from_iter+0x15e/0x1560 [ 537.638046][T17655] ? __pfx__copy_from_iter+0x10/0x10 [ 537.638059][T17655] ? __pfx__copy_from_iter+0x10/0x10 [ 537.638070][T17655] ? __virt_addr_valid+0x1a4/0x590 [ 537.638085][T17655] copy_page_from_iter+0xa5/0x120 [ 537.638098][T17655] skb_copy_datagram_from_iter+0x29b/0x710 [ 537.638119][T17655] tun_get_user+0x199c/0x3e50 [ 537.638136][T17655] ? __pfx_tun_get_user+0x10/0x10 [ 537.638146][T17655] ? find_held_lock+0x2d/0x110 [ 537.638161][T17655] ? __pfx_lock_release+0x10/0x10 [ 537.638183][T17655] tun_chr_write_iter+0xdc/0x210 [ 537.638195][T17655] vfs_write+0x5ae/0x1150 [ 537.638210][T17655] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 537.638223][T17655] ? __pfx_vfs_write+0x10/0x10 [ 537.638238][T17655] ? __fget_files+0x40/0x3a0 [ 537.638259][T17655] ksys_write+0x12b/0x250 [ 537.638274][T17655] ? __pfx_ksys_write+0x10/0x10 [ 537.638292][T17655] __do_fast_syscall_32+0x73/0x120 [ 537.638308][T17655] do_fast_syscall_32+0x32/0x80 [ 537.638323][T17655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.638341][T17655] RIP: 0023:0xf73de579 [ 537.638350][T17655] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.638361][T17655] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 537.638371][T17655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 537.638378][T17655] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 537.638384][T17655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.638390][T17655] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 537.638396][T17655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.638409][T17655] [ 538.306544][T17678] netlink: 'syz.1.2732': attribute type 29 has an invalid length. [ 538.315246][T17678] netlink: 'syz.1.2732': attribute type 29 has an invalid length. [ 538.658563][T17689] fuse: Bad value for 'fd' [ 539.462786][T17702] wireguard0: entered promiscuous mode [ 539.464926][T17702] wireguard0: entered allmulticast mode [ 540.148481][T17721] erspan1: entered promiscuous mode [ 540.150422][T17721] erspan1: entered allmulticast mode [ 541.296258][T17755] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 542.778837][T17787] trusted_key: encrypted_key: master key parameter 'defQæ_er:syz' is invalid [ 543.624531][T17801] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 543.626710][T17801] overlayfs: failed to set xattr on upper [ 543.628368][T17801] overlayfs: ...falling back to redirect_dir=nofollow. [ 543.634182][T17801] overlayfs: ...falling back to index=off. [ 543.635898][ T40] audit: type=1800 audit(1742212634.359:299): pid=17808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2762" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 543.642048][T17801] overlayfs: ...falling back to uuid=null. [ 543.934033][T17820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2767'. [ 544.680447][T17840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.317225][T17856] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2778'. [ 545.716976][T17879] JFS: charset not found [ 546.120048][ T1016] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 546.438573][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'. [ 547.179534][T17936] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2801'. [ 547.258303][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 547.261532][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 547.266073][T17941] vlan2: entered allmulticast mode [ 547.267550][T17941] gretap0: entered allmulticast mode [ 547.330036][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 547.332728][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2805'. [ 547.354794][T17947] batman_adv: batadv0: Adding interface: dummy0 [ 547.356643][T17947] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.363592][T17947] batman_adv: batadv0: Interface activated: dummy0 [ 547.367764][T17947] batadv0: mtu less than device minimum [ 547.370148][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.374050][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.377749][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.381362][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.384952][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.388519][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.392130][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.395681][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.399226][T17947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.421803][T17945] FAULT_INJECTION: forcing a failure. [ 547.421803][T17945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.426030][T17945] CPU: 3 UID: 0 PID: 17945 Comm: syz.1.2804 Not tainted 6.14.0-rc7-syzkaller #0 [ 547.426045][T17945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.426052][T17945] Call Trace: [ 547.426056][T17945] [ 547.426061][T17945] dump_stack_lvl+0x16c/0x1f0 [ 547.426081][T17945] should_fail_ex+0x50a/0x650 [ 547.426094][T17945] __kvm_read_guest_page+0x16b/0x210 [ 547.426109][T17945] kvm_fetch_guest_virt+0x128/0x1a0 [ 547.426129][T17945] __do_insn_fetch_bytes+0x420/0x6d0 [ 547.426147][T17945] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 547.426167][T17945] ? kvm_tdp_page_fault+0x295/0x3d0 [ 547.426180][T17945] x86_decode_insn+0xb91/0x5530 [ 547.426197][T17945] ? vmx_segment_cache_test_set+0x14b/0x400 [ 547.426214][T17945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.426232][T17945] ? __pfx_x86_decode_insn+0x10/0x10 [ 547.426245][T17945] ? vmx_cache_reg+0x333/0x5e0 [ 547.426259][T17945] ? kvm_register_read_raw+0xe9/0x240 [ 547.426276][T17945] ? init_decode_cache+0xd/0x210 [ 547.426289][T17945] ? init_emulate_ctxt+0x338/0x510 [ 547.426300][T17945] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 547.426313][T17945] ? mark_lock+0xb5/0xc60 [ 547.426330][T17945] x86_emulate_instruction+0x9c1/0x1a90 [ 547.426347][T17945] handle_ud+0x104/0x280 [ 547.426357][T17945] ? __pfx_handle_ud+0x10/0x10 [ 547.426374][T17945] handle_exception_nmi+0x83e/0x1410 [ 547.426391][T17945] ? trace_lock_acquire+0x14e/0x1f0 [ 547.426404][T17945] ? __pfx_handle_exception_nmi+0x10/0x10 [ 547.426447][T17945] vmx_handle_exit+0x6a4/0x1a30 [ 547.426471][T17945] vcpu_run+0x2af3/0x4cc0 [ 547.426488][T17945] ? __pfx_vcpu_run+0x10/0x10 [ 547.426498][T17945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 547.426514][T17945] ? rcu_is_watching+0x12/0xc0 [ 547.426526][T17945] ? trace_lock_acquire+0x14e/0x1f0 [ 547.426537][T17945] ? __local_bh_enable_ip+0xa4/0x120 [ 547.426553][T17945] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.426568][T17945] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 547.426581][T17945] ? lock_acquire+0x2f/0xb0 [ 547.426597][T17945] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 547.426610][T17945] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 547.426626][T17945] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 547.426658][T17945] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 547.426672][T17945] ? tomoyo_path_number_perm+0x190/0x590 [ 547.426688][T17945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.426701][T17945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.426718][T17945] ? do_vfs_ioctl+0x513/0x1990 [ 547.426732][T17945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 547.426752][T17945] ? __pfx_lock_release+0x10/0x10 [ 547.426766][T17945] ? trace_lock_acquire+0x14e/0x1f0 [ 547.426780][T17945] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 547.426794][T17945] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 547.426807][T17945] ? __fget_files+0x206/0x3a0 [ 547.426825][T17945] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 547.426839][T17945] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 547.426853][T17945] __do_fast_syscall_32+0x73/0x120 [ 547.426870][T17945] do_fast_syscall_32+0x32/0x80 [ 547.426884][T17945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.426903][T17945] RIP: 0023:0xf7fc2579 [ 547.426912][T17945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.426923][T17945] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 547.426934][T17945] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000000ae80 [ 547.426940][T17945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.426946][T17945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.426953][T17945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 547.426959][T17945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.426971][T17945] [ 547.623597][T17956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 547.628156][T17956] batman_adv: batadv0: Adding interface: gretap1 [ 547.629976][T17956] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.636778][T17956] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 547.813758][T17955] wireguard0: entered promiscuous mode [ 547.815680][T17955] wireguard0: entered allmulticast mode [ 548.216314][T17963] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2808'. [ 548.233848][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 550.185558][T18013] wireguard0: entered promiscuous mode [ 550.187119][T18013] wireguard0: entered allmulticast mode [ 550.878524][T18026] netlink: 'syz.3.2824': attribute type 10 has an invalid length. [ 550.885874][T18026] [ 550.886585][T18026] ====================================================== [ 550.888496][T18026] WARNING: possible circular locking dependency detected [ 550.890410][T18026] 6.14.0-rc7-syzkaller #0 Not tainted [ 550.891993][T18026] ------------------------------------------------------ [ 550.895060][T18026] syz.3.2824/18026 is trying to acquire lock: [ 550.896740][T18026] ffff888070790768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_open+0x132/0x210 [ 550.899264][T18026] [ 550.899264][T18026] but task is already holding lock: [ 550.901222][T18026] ffff888013634e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0x9c/0x2190 [ 550.903863][T18026] [ 550.903863][T18026] which lock already depends on the new lock. [ 550.903863][T18026] [ 550.907240][T18026] [ 550.907240][T18026] the existing dependency chain (in reverse order) is: [ 550.909590][T18026] [ 550.909590][T18026] -> #3 (team->team_lock_key#6){+.+.}-{4:4}: [ 550.911829][T18026] __mutex_lock+0x19b/0xb10 [ 550.913220][T18026] team_set_mac_address+0x17f/0x290 [ 550.914825][T18026] dev_set_mac_address+0x301/0x4a0 [ 550.916366][T18026] dev_set_mac_address_user+0x30/0x50 [ 550.917987][T18026] do_setlink.constprop.0+0x7bf/0x3f80 [ 550.919643][T18026] rtnl_newlink+0x1306/0x1d60 [ 550.921080][T18026] rtnetlink_rcv_msg+0x95b/0xea0 [ 550.922577][T18026] netlink_rcv_skb+0x16b/0x440 [ 550.924064][T18026] netlink_unicast+0x53c/0x7f0 [ 550.925550][T18026] netlink_sendmsg+0x8b8/0xd70 [ 550.927025][T18026] __sys_sendto+0x488/0x4f0 [ 550.928414][T18026] __do_compat_sys_socketcall+0x5e2/0x700 [ 550.930121][T18026] __do_fast_syscall_32+0x73/0x120 [ 550.931686][T18026] do_fast_syscall_32+0x32/0x80 [ 550.933162][T18026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.935192][T18026] [ 550.935192][T18026] -> #2 (dev_addr_sem){++++}-{4:4}: [ 550.937207][T18026] down_read+0x9a/0x330 [ 550.938517][T18026] address_show+0x23/0x2a0 [ 550.939896][T18026] dev_attr_show+0x53/0xe0 [ 550.941266][T18026] sysfs_kf_seq_show+0x23e/0x410 [ 550.942777][T18026] seq_read_iter+0x4f4/0x12b0 [ 550.944233][T18026] kernfs_fop_read_iter+0x414/0x580 [ 550.945975][T18026] vfs_read+0x886/0xbf0 [ 550.947294][T18026] ksys_read+0x12b/0x250 [ 550.948617][T18026] do_syscall_64+0xcd/0x250 [ 550.949961][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.951732][T18026] [ 550.951732][T18026] -> #1 (kn->active#21){++++}-{0:0}: [ 550.953762][T18026] kernfs_drain+0x48f/0x590 [ 550.955225][T18026] __kernfs_remove+0x281/0x670 [ 550.956683][T18026] kernfs_remove_by_name_ns+0xb2/0x130 [ 550.958324][T18026] remove_files+0x96/0x1c0 [ 550.959698][T18026] sysfs_remove_group+0x8b/0x180 [ 550.961206][T18026] sysfs_remove_groups+0x60/0xa0 [ 550.962710][T18026] device_remove_attrs+0x204/0x290 [ 550.964236][T18026] device_del+0x38e/0x9f0 [ 550.965583][T18026] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 550.967475][T18026] unregister_netdevice_queue+0x307/0x3f0 [ 550.969256][T18026] _cfg80211_unregister_wdev+0x64b/0x830 [ 550.970951][T18026] ieee80211_remove_interfaces+0x34f/0x720 [ 550.972688][T18026] ieee80211_unregister_hw+0x55/0x3a0 [ 550.974354][T18026] mac80211_hwsim_netlink_notify+0x2ec/0x8e0 [ 550.976124][T18026] notifier_call_chain+0xb7/0x410 [ 550.977665][T18026] blocking_notifier_call_chain+0x69/0xa0 [ 550.979387][T18026] netlink_release+0x1838/0x1fe0 [ 550.980899][T18026] __sock_release+0xb0/0x270 [ 550.982287][T18026] sock_close+0x1c/0x30 [ 550.983597][T18026] __fput+0x3ff/0xb70 [ 550.984991][T18026] task_work_run+0x14e/0x250 [ 550.986397][T18026] syscall_exit_to_user_mode+0x27b/0x2a0 [ 550.988042][T18026] __do_fast_syscall_32+0x80/0x120 [ 550.989578][T18026] do_fast_syscall_32+0x32/0x80 [ 550.991059][T18026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.992927][T18026] [ 550.992927][T18026] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 550.995224][T18026] __lock_acquire+0x249e/0x3c40 [ 550.996695][T18026] lock_acquire.part.0+0x11b/0x380 [ 550.998235][T18026] __mutex_lock+0x19b/0xb10 [ 550.999626][T18026] ieee80211_open+0x132/0x210 [ 551.001049][T18026] __dev_open+0x2d4/0x540 [ 551.002389][T18026] dev_open+0xf4/0x160 [ 551.003674][T18026] team_add_slave+0xaf6/0x2190 [ 551.005133][T18026] do_set_master+0x1bc/0x230 [ 551.006531][T18026] do_setlink.constprop.0+0xb5b/0x3f80 [ 551.008041][T18026] rtnl_newlink+0x1306/0x1d60 [ 551.009469][T18026] rtnetlink_rcv_msg+0x95b/0xea0 [ 551.010984][T18026] netlink_rcv_skb+0x16b/0x440 [ 551.012455][T18026] netlink_unicast+0x53c/0x7f0 [ 551.013908][T18026] netlink_sendmsg+0x8b8/0xd70 [ 551.015431][T18026] ____sys_sendmsg+0xaaf/0xc90 [ 551.016891][T18026] ___sys_sendmsg+0x135/0x1e0 [ 551.018328][T18026] __sys_sendmsg+0x16e/0x220 [ 551.019752][T18026] __do_fast_syscall_32+0x73/0x120 [ 551.021294][T18026] do_fast_syscall_32+0x32/0x80 [ 551.022786][T18026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.024730][T18026] [ 551.024730][T18026] other info that might help us debug this: [ 551.024730][T18026] [ 551.027487][T18026] Chain exists of: [ 551.027487][T18026] &rdev->wiphy.mtx --> dev_addr_sem --> team->team_lock_key#6 [ 551.027487][T18026] [ 551.031097][T18026] Possible unsafe locking scenario: [ 551.031097][T18026] [ 551.033051][T18026] CPU0 CPU1 [ 551.034516][T18026] ---- ---- [ 551.035998][T18026] lock(team->team_lock_key#6); [ 551.037366][T18026] lock(dev_addr_sem); [ 551.039182][T18026] lock(team->team_lock_key#6); [ 551.041190][T18026] lock(&rdev->wiphy.mtx); [ 551.042434][T18026] [ 551.042434][T18026] *** DEADLOCK *** [ 551.042434][T18026] [ 551.044673][T18026] 2 locks held by syz.3.2824/18026: [ 551.046098][T18026] #0: ffffffff8fefa268 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 551.048562][T18026] #1: ffff888013634e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0x9c/0x2190 [ 551.051300][T18026] [ 551.051300][T18026] stack backtrace: [ 551.052914][T18026] CPU: 2 UID: 0 PID: 18026 Comm: syz.3.2824 Not tainted 6.14.0-rc7-syzkaller #0 [ 551.052928][T18026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 551.052935][T18026] Call Trace: [ 551.052939][T18026] [ 551.052944][T18026] dump_stack_lvl+0x116/0x1f0 [ 551.052960][T18026] print_circular_bug+0x490/0x760 [ 551.052976][T18026] check_noncircular+0x31a/0x400 [ 551.052991][T18026] ? __pfx_check_noncircular+0x10/0x10 [ 551.053005][T18026] ? hlock_class+0x4e/0x130 [ 551.053017][T18026] ? lockdep_lock+0xc6/0x200 [ 551.053028][T18026] ? __pfx_lockdep_lock+0x10/0x10 [ 551.053041][T18026] __lock_acquire+0x249e/0x3c40 [ 551.053058][T18026] ? __pfx___lock_acquire+0x10/0x10 [ 551.053073][T18026] ? __pfx___lock_acquire+0x10/0x10 [ 551.053088][T18026] lock_acquire.part.0+0x11b/0x380 [ 551.053104][T18026] ? ieee80211_open+0x132/0x210 [ 551.053117][T18026] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 551.053132][T18026] ? rcu_is_watching+0x12/0xc0 [ 551.053143][T18026] ? trace_lock_acquire+0x14e/0x1f0 [ 551.053155][T18026] ? __pfx_lock_release+0x10/0x10 [ 551.053169][T18026] ? ieee80211_open+0x132/0x210 [ 551.053181][T18026] ? lock_acquire+0x2f/0xb0 [ 551.053195][T18026] ? ieee80211_open+0x132/0x210 [ 551.053207][T18026] __mutex_lock+0x19b/0xb10 [ 551.053221][T18026] ? ieee80211_open+0x132/0x210 [ 551.053233][T18026] ? ib_device_get_by_netdev+0x1c3/0x520 [ 551.053251][T18026] ? ieee80211_open+0x132/0x210 [ 551.053262][T18026] ? __pfx___mutex_lock+0x10/0x10 [ 551.053277][T18026] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 551.053294][T18026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 551.053312][T18026] ? notifier_call_chain+0x36c/0x410 [ 551.053325][T18026] ? ieee80211_open+0x132/0x210 [ 551.053336][T18026] ieee80211_open+0x132/0x210 [ 551.053348][T18026] ? __pfx_ieee80211_open+0x10/0x10 [ 551.053360][T18026] __dev_open+0x2d4/0x540 [ 551.053374][T18026] ? ref_tracker_alloc+0x2ef/0x5b0 [ 551.053386][T18026] ? __pfx___dev_open+0x10/0x10 [ 551.053402][T18026] dev_open+0xf4/0x160 [ 551.053417][T18026] ? __pfx_dev_open+0x10/0x10 [ 551.053431][T18026] ? __kmalloc_noprof+0x23b/0x510 [ 551.053446][T18026] ? __pfx_netdev_has_upper_dev+0x10/0x10 [ 551.053459][T18026] team_add_slave+0xaf6/0x2190 [ 551.053471][T18026] ? __pfx_team_add_slave+0x10/0x10 [ 551.053483][T18026] ? __lock_acquire+0x15a9/0x3c40 [ 551.053497][T18026] ? __pfx_validate_linkmsg+0x10/0x10 [ 551.053513][T18026] ? __pfx_team_add_slave+0x10/0x10 [ 551.053524][T18026] do_set_master+0x1bc/0x230 [ 551.053537][T18026] do_setlink.constprop.0+0xb5b/0x3f80 [ 551.053553][T18026] ? vprintk_emit+0x39e/0x6f0 [ 551.053564][T18026] ? __pfx_vprintk_emit+0x10/0x10 [ 551.053576][T18026] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 551.053591][T18026] ? lock_acquire.part.0+0x11b/0x380 [ 551.053607][T18026] ? __mutex_trylock_common+0xea/0x250 [ 551.053623][T18026] ? __pfx___mutex_trylock_common+0x10/0x10 [ 551.053638][T18026] ? rtnl_newlink+0x5d9/0x1d60 [ 551.053658][T18026] ? rcu_is_watching+0x12/0xc0 [ 551.053668][T18026] ? trace_contention_end+0xee/0x140 [ 551.053684][T18026] ? __mutex_lock+0x1cc/0xb10 [ 551.053697][T18026] ? __pfx_aa_get_newest_label+0x10/0x10 [ 551.053709][T18026] ? rcu_is_watching+0x12/0xc0 [ 551.053719][T18026] ? rtnl_newlink+0x5d9/0x1d60 [ 551.053734][T18026] ? trace_cap_capable+0x1a2/0x210 [ 551.053746][T18026] ? __pfx___mutex_lock+0x10/0x10 [ 551.053764][T18026] rtnl_newlink+0x1306/0x1d60 [ 551.053781][T18026] ? __pfx_rtnl_newlink+0x10/0x10 [ 551.053797][T18026] ? __pfx___lock_acquire+0x10/0x10 [ 551.053811][T18026] ? kfree_skbmem+0x1a4/0x1f0 [ 551.053825][T18026] ? aa_get_newest_label+0x376/0x680 [ 551.053836][T18026] ? find_held_lock+0x2d/0x110 [ 551.053848][T18026] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 551.053864][T18026] ? __pfx_lock_release+0x10/0x10 [ 551.053878][T18026] ? trace_lock_acquire+0x14e/0x1f0 [ 551.053891][T18026] ? __pfx_rtnl_newlink+0x10/0x10 [ 551.053907][T18026] rtnetlink_rcv_msg+0x95b/0xea0 [ 551.053923][T18026] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.053942][T18026] netlink_rcv_skb+0x16b/0x440 [ 551.053958][T18026] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.053974][T18026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.053993][T18026] ? netlink_deliver_tap+0x1ae/0xd30 [ 551.054008][T18026] netlink_unicast+0x53c/0x7f0 [ 551.054024][T18026] ? __pfx_netlink_unicast+0x10/0x10 [ 551.054040][T18026] ? __phys_addr_symbol+0x30/0x80 [ 551.054051][T18026] ? __check_object_size+0x488/0x710 [ 551.054063][T18026] netlink_sendmsg+0x8b8/0xd70 [ 551.054079][T18026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.054096][T18026] ____sys_sendmsg+0xaaf/0xc90 [ 551.054109][T18026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.054121][T18026] ? get_compat_msghdr+0x11b/0x170 [ 551.054136][T18026] ___sys_sendmsg+0x135/0x1e0 [ 551.054153][T18026] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.054171][T18026] ? __pfx_lock_release+0x10/0x10 [ 551.054185][T18026] ? trace_lock_acquire+0x14e/0x1f0 [ 551.054199][T18026] ? __fget_files+0x206/0x3a0 [ 551.054215][T18026] __sys_sendmsg+0x16e/0x220 [ 551.054231][T18026] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.054252][T18026] ? __ia32_sys_futex_time32+0x1da/0x460 [ 551.054278][T18026] __do_fast_syscall_32+0x73/0x120 [ 551.054300][T18026] do_fast_syscall_32+0x32/0x80 [ 551.054320][T18026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.054345][T18026] RIP: 0023:0xf7fe8579 [ 551.054358][T18026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 551.054373][T18026] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 551.054389][T18026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 551.054400][T18026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.054410][T18026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.054420][T18026] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 551.054430][T18026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.054446][T18026] [ 551.220603][T18026] team0: Port device wlan1 added SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.649011][ T106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.722117][ T106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.782837][ T106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.832439][ T106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.920310][ T106] bridge_slave_1: left allmulticast mode [ 551.921965][ T106] bridge_slave_1: left promiscuous mode [ 551.923574][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.926188][ T106] bridge_slave_0: left allmulticast mode [ 551.927772][ T106] bridge_slave_0: left promiscuous mode [ 551.929541][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.938747][ T106] gretap0: left allmulticast mode [ 552.015698][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.018967][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.022392][ T106] bond0 (unregistering): Released all slaves [ 552.274466][ T106] hsr_slave_0: left promiscuous mode [ 552.276226][ T106] hsr_slave_1: left promiscuous mode [ 552.277838][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.279981][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.282190][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.284378][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.287498][ T106] veth1_macvtap: left promiscuous mode [ 552.289037][ T106] veth0_macvtap: left promiscuous mode [ 552.290637][ T106] veth1_vlan: left promiscuous mode [ 552.292133][ T106] veth0_vlan: left promiscuous mode [ 552.491267][ T106] team_slave_1 (unregistering): left promiscuous mode [ 552.493527][ T106] team0 (unregistering): Port device team_slave_1 removed [ 552.542109][ T106] team_slave_0 (unregistering): left promiscuous mode [ 552.544307][ T106] team0 (unregistering): Port device team_slave_0 removed [ 553.145586][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.202403][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.282478][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.351885][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.441522][ T46] bridge_slave_1: left allmulticast mode [ 553.443145][ T46] bridge_slave_1: left promiscuous mode [ 553.444758][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.447397][ T46] bridge_slave_0: left allmulticast mode [ 553.449133][ T46] bridge_slave_0: left promiscuous mode [ 553.450857][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.562347][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.565749][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.568572][ T46] bond0 (unregistering): Released all slaves [ 553.823008][ T46] hsr_slave_0: left promiscuous mode [ 553.824729][ T46] batman_adv: batadv0: Interface deactivated: dummy0 [ 553.826599][ T46] batman_adv: batadv0: Removing interface: dummy0 [ 553.828650][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.830952][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.833905][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.836007][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.839101][ T46] veth1_to_batadv: left allmulticast mode [ 553.840776][ T46] veth1_to_batadv: left promiscuous mode [ 553.842572][ T46] veth1_macvtap: left promiscuous mode [ 553.844146][ T46] veth0_macvtap: left promiscuous mode [ 553.845691][ T46] veth1_vlan: left promiscuous mode [ 553.847199][ T46] veth0_vlan: left promiscuous mode [ 554.002515][ T46] team0 (unregistering): Port device team_slave_1 removed [ 554.047859][ T46] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 11:44:33 Registers: info registers vcpu 0 CPU#0 RAX=00000000008e8724 RBX=0000000000000000 RCX=ffffffff8b556469 RDX=ffffed1005686f86 RSI=ffffffff8bd359e0 RDI=ffffffff819084a9 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72137f0 CR3=000000006daf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b33f4c RBX=0000000000000001 RCX=ffffffff8b556469 RDX=ffffed10056a6f86 RSI=ffffffff8bd359e0 RDI=ffffffff819084a9 RBP=ffffed1003768000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000001 R12=0000000000000001 R13=ffff88801bb40000 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080032000 CR3=000000002b67c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e91d5 RDI=ffffffff9ab71ea0 RBP=ffffffff9ab71e60 RSP=ffffc90025c664f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000002ed94 R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab71e60 R15=0000000000000000 RIP=ffffffff853e91ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000080 CR3=0000000025624000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003d91a4 RBX=0000000000000003 RCX=ffffffff8b556469 RDX=ffffed10056e6f86 RSI=ffffffff8bd359e0 RDI=ffffffff819084a9 RBP=ffffed1003768910 RSP=ffffc900004afe08 R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000001 R12=0000000000000003 R13=ffff88801bb44880 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74a6188 CR3=0000000067440000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000