last executing test programs: 5.081242071s ago: executing program 1 (id=522): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x17a1d6c2f57114d3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x9d9, 0x40c) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x5, 0x0, 0x0, 0x6, 0x408c74e7]}, &(0x7f00000001c0)=0x54) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d80), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000004280)={0x9, @pix={0x804, 0xaea, 0x4745504d, 0x9, 0x80000001, 0xb, 0x2, 0x3, 0x1, 0x8, 0x1}}) listen(r0, 0x0) r4 = dup(r0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = userfaultfd(0x800) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) umount2(&(0x7f0000000280)='./file0\x00', 0xe) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="4c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11], 0x4c}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x14) 4.500376278s ago: executing program 1 (id=526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 3.85035472s ago: executing program 2 (id=529): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x10}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="4ba72c3bfd9c685544f46d3f06f42a374cf3352ea2b8400800", 0x19}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.80182314s ago: executing program 2 (id=530): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=ANY=[@ANYBLOB="18000000010100000000000001010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) sched_getscheduler(r4) connect$phonet_pipe(r3, &(0x7f0000000200), 0x10) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d8000000180081054e81f782db44b904021d005c060000000000000006001540c0c1a4fff21c72ca1929a30600142603605e2488ba7dfe9cb27ac76a0e1208000b0000000401d13e1600a4000140b0fd0200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2efea7cef4090000001fb7916ed9f373e26170d0d930dfe1d9d3221f7d9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xe3}], 0x1}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r5, r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0xae, 0x0, 0x7ffc0000}]}) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 3.535550856s ago: executing program 1 (id=532): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x20022, 0x0) close(r4) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000280)="fa", 0x1}], 0x1) syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 3.360333303s ago: executing program 2 (id=533): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) msgget(0x0, 0x110) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff0000"], 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000000010000000c00ffe3100000000000000001000000fcffffff1000000000000000010000000a0000000d00000000000000010000007d000000180000000000000008000080", @ANYRES32=r7, @ANYBLOB="00000000ac1414bb180000000000000008000000", @ANYRES32=r7, @ANYBLOB="7f000001640101010d000000000000000100000004000000100000000000000001000000800000000d00000000000000010000000c0000004c000000000000000700000086220000000302083a7c240cb95c050e693a579d9a425b8de58a6f5b060200040fe2441cae01e000000200005d44ac1414130000001eac1414bb000000050000"], 0xec}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=@newqdisc={0x144, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x3, 0xfffffffd}}}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xb8, 0x4047, 0x10001, 0x1, 0x1, 0x800, 0x7}}, {0x12, 0x2, [0xab3, 0x9cf, 0x2, 0x40, 0x4, 0x3, 0xd04]}}, {{0x1c, 0x1, {0x7f, 0x4, 0xdb1, 0x100, 0x1, 0x6, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}, {{0x1c, 0x1, {0x0, 0xa, 0xc, 0xff, 0x0, 0x40, 0x918, 0x1}}, {0x6, 0x2, [0xaf2]}}, {{0x1c, 0x1, {0x25, 0x3, 0x7, 0x3ff, 0x0, 0xc, 0xff, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0xff, 0x3]}}, {{0x1c, 0x1, {0x2, 0x9, 0x3ff, 0x100, 0x1, 0x80bb, 0x3, 0x3}}, {0xa, 0x2, [0x5, 0x3, 0x6ce4]}}]}]}, 0x144}}, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000180), 0x268203, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x440, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x414, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0xb82, 0x2, 0x8, 0xf675, 0x80000000, 0x6, 0x1, 0x0, 0xfab, 0x0, 0x9, 0x3, 0xc, 0x1, 0x9, 0x0, 0x2ee96139, 0x0, 0x6, 0x10, 0xe, 0x2, 0x1000, 0x8001, 0x2, 0x7fff, 0x0, 0x8, 0xc5f, 0x4c, 0xfff, 0x1, 0xfffffff8, 0xfffffff7, 0xc, 0x2, 0x5, 0x88ed, 0x480d, 0x3ff, 0x6, 0x6a, 0xe24, 0x7, 0x3, 0x81, 0x0, 0x5, 0xc, 0x2, 0xd, 0xcc, 0x65b, 0x1, 0x80, 0x9, 0x0, 0x1ab, 0x6, 0x3, 0x0, 0x7, 0x7fff, 0x8001, 0x464e, 0x4, 0x9a5, 0x200, 0x4, 0x46ad36a8, 0x7fffffff, 0x4, 0x8, 0x5834ef66, 0x7, 0x3, 0x1, 0x5, 0x6, 0x5, 0x9, 0x4, 0x5b7, 0x0, 0x9, 0x5, 0x2, 0x7, 0xf5a2f243, 0x2, 0x9, 0x8, 0x5, 0xe0000, 0x10000, 0x8, 0x3, 0x5, 0x5, 0xfffffff7, 0x8, 0xae98, 0x5, 0xadba, 0xfe, 0x5, 0x3, 0x7f, 0x8, 0x401, 0x3, 0x8, 0x6, 0x9a, 0x4, 0x7, 0x7, 0x1, 0x80000001, 0x4, 0x7f, 0x0, 0x3, 0x22, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x6, 0x3000000, 0x1, 0x8, 0x0, 0x5, 0x2, 0x7, 0x80, 0x5, 0x1, 0x8000, 0xfffffffd, 0xbd8a, 0x2, 0x102b6fff, 0x3, 0x10000, 0x7f, 0xfff, 0x62c8e2ca, 0xd8, 0x7, 0x0, 0x1ff, 0xffff, 0x37, 0xae75, 0x0, 0xf40e, 0x7, 0x3, 0xfffffff2, 0x8, 0x6, 0x5, 0x7, 0x6, 0x3, 0x0, 0x9, 0xff, 0x8, 0x7fffffff, 0x1, 0x3, 0x0, 0xff, 0x9, 0xffffae4a, 0x2, 0xc59c, 0x8, 0x7fff, 0x3, 0xab2, 0x8, 0xd79, 0xb8, 0x3, 0x2, 0xf76c, 0x7fff, 0x5, 0x1, 0x4, 0xc, 0x0, 0xa76, 0xffffffff, 0x8, 0x8, 0x76, 0xf, 0x0, 0x4ac, 0x9, 0x5, 0x7, 0x7d7, 0xfff, 0x8, 0xfc37, 0xff, 0x1, 0x6, 0x11, 0x8, 0x6c7, 0x7, 0x7, 0xa, 0x49da8000, 0x9, 0xcea, 0x2, 0x0, 0x40, 0x4ca5, 0xffffff00, 0x0, 0x9, 0x8, 0x7, 0x8, 0xd7, 0x9, 0x9, 0x2fc8, 0x9, 0x5, 0x1, 0x4, 0x1df4, 0xf51, 0x170, 0x6, 0xd31e, 0x7, 0x0, 0x6, 0x5, 0x3, 0x1, 0x8000]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x5}}]}}]}, 0x440}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2a, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$ppp(0xffffff9c, &(0x7f0000000540), 0x301100, 0x0) 3.250591269s ago: executing program 3 (id=534): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=ANY=[@ANYBLOB="18000000010100000000000001010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sched_getscheduler(0x0) connect$phonet_pipe(r3, &(0x7f0000000200), 0x10) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d8000000180081054e81f782db44b904021d005c060000000000000006001540c0c1a4fff21c72ca1929a30600142603605e2488ba7dfe9cb27ac76a0e1208000b0000000401d13e1600a4000140b0fd0200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2efea7cef4090000001fb7916ed9f373e26170d0d930dfe1d9d3221f7d9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xe3}], 0x1}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r4, r6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0xae, 0x0, 0x7ffc0000}]}) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 2.880915138s ago: executing program 0 (id=535): r0 = socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2f4, @empty}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0], 0x2e) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201500200005f27a22308003700100905820200048105003bc0c458968f8216f7f12ec59b150638855fb6c0cba06693127a89b7afc3da02791dc8e708754b45b764f5fd0d2469fc929383a39238d4da6f1a184ef3fc2fecc1b972ad554be0b8d6fbc56e1b33dfa97751edf6fc16ab46332ea818541384c2eb07b550feeb"], &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0x3, 0x0, 0x20}, 0x138, &(0x7f0000000b40)={0x5, 0xf, 0x138, 0x4, [@generic={0xfc, 0x10, 0x2, "036b53617b9f6b1b01f5633eb69ce5a17f976e4ad14cf9f33c5b797eed8d91c6efeb54f05a71c93b5575606f4e824da07a051a4bfafaff0eb2f3bf50e2758c3659f4db159409039b9cf01cd5349c167a1a84695960461d8b54f29b1a53f22f8e8a33117ee74be23b4f7f9a55ce9c072cc73e53d0c78e39c4009c5059f491068867c40880637be1d8b15c47393fdb8f26eb4c93dc0f072e84177e87eb3bf5713626daf36450fe0d5e09768ca28692cec97c7fe27d7c87de5e47e93c29f84169ffd2f60c6afdabedb6fe53051062204ef3bd54729e2a91bd23df6459710c71012ebf1667abdeb34e255ac230e993b1e8f8e4ab9249147ecb5811"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0xa, 0x3ff}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7ff8fc0, 0xf000, 0xfff2, [0xff0000, 0x30, 0xff00c0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8f, "e4fa9157ee5b3f05ebd992871230f0c1"}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x458}}, {0xf0, &(0x7f0000000180)=@string={0xf0, 0x3, "5e1dd99d024432c790110f84f22aa9cc34926363d1e7efd5c402b3cb50c73af32f598071b92dfb6c594cbf36ae540c236a8dbe094175889ceabde664fd3d4b20a474e5b0fe2948ea2192bf32cd1926e6f36f40077723b1eeb16387b860de844e33205d315bc107876ce2204d9152bc499e76b827398cb248b9587ee1d06656c115301e55daa590007607cf729ccbca8307ce706c6c9946a042e29f72f7d1fef9c5773f76f86072acac135af910aacbb2008d5f7aeb7cfa24341f92e84ab05b00decf9e2952353de9294c0aee1e8f47770d959dd90833230abd8536696c33be88cad52f83e00112d69eb5734623fd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41e}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_GROUP={0x8, 0x1b, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r2, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x811) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000014000000000200000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00%'], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r11, 0xf220f0d556dd75d6, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x24040000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x1, 'pimreg0\x00', {}, 0x101}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000020000001832000003000000000000000000000018420000f8ffffff0000000000000000929000010800000018270000", @ANYRES32=0x1, @ANYBLOB="00000900000018000000040000000000000004000000950000000000000095000200000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x48, &(0x7f00000004c0)=""/72, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0xa00, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x1, 0x3, 0x2, 0x7}, {0x3, 0x5, 0x9, 0x1}, {0x3, 0x3, 0xf, 0x1}, {0x2, 0x2, 0x9, 0xc}], 0x10, 0xcbde, @void, @value}, 0x94) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0327f6", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], "5a74cffa30d41cd96f0319b2"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='afs_silly_rename\x00', r14, 0x0, 0x6}, 0x18) 2.650120363s ago: executing program 1 (id=536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f0000b2c000), 0x0, 0x0) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) 2.320918287s ago: executing program 0 (id=537): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r11 = userfaultfd(0x1) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r11, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$UFFDIO_CONTINUE(r12, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x686a, &(0x7f00000003c0)={0x0, 0x3, 0x200, 0x0, 0x166}, &(0x7f0000000200), &(0x7f0000000480)) fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2.320645499s ago: executing program 3 (id=538): socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x6000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.681086172s ago: executing program 1 (id=539): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000080)={"c13d88c89aa2e6b267b05c2cbc461236886067b753d6d767fa8081b70670", 0xf4b5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x3, 0x9, 0x0, 0x8, 0xffffff89}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x6b, &(0x7f00000001c0)=""/107, 0x41100, 0x78, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x8}}}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x1068) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x12, 0x0, "c7d504a4a0666b7d74d7b34c0ef1f8c095b222bb68b62f3135e5aa8e0054874d2212f0ced8b9d3e1eb41ba930e456e66028613ff90971740209480e71ce15bbafeeabb5869f878737ea7ca2019bb100d"}, 0xd8) write$binfmt_misc(r8, &(0x7f0000000000), 0xe09) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) 1.611139933s ago: executing program 2 (id=540): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bond_slave_1\x00'}}, 0x1e) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0x4c, 0x0, &(0x7f0000000480)) ioctl$PPPOEIOCSFWD(r7, 0x80047453, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d"], 0x184}}, 0x0) 1.505521581s ago: executing program 3 (id=541): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=ANY=[@ANYBLOB="18000000010100000000000001010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) sched_getscheduler(r4) connect$phonet_pipe(r3, &(0x7f0000000200), 0x10) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d8000000180081054e81f782db44b904021d005c060000000000000006001540c0c1a4fff21c72ca1929a30600142603605e2488ba7dfe9cb27ac76a0e1208000b0000000401d13e1600a4000140b0fd0200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2efea7cef4090000001fb7916ed9f373e26170d0d930dfe1d9d3221f7d9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xe3}], 0x1}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r5, r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0xae, 0x0, 0x7ffc0000}]}) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 1.489843485s ago: executing program 0 (id=542): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa", 0x2}], 0x1}, 0x0) 1.401253519s ago: executing program 0 (id=543): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000706050000000000000000000a00000205000100070000000900020073797a3000000000590c2753b83129bc13a24bd829bfb4604b07bd0781a339893db4db7f15322f2a1ddfce565eae550924bea94a8172f2cea74d48faf7625754ff25c12ca24bd4b38c2f3f3123bbfd62c22f7075e7c40627651716b3e0c042859352575a332d35e65da66f3599e0e9deef2647f43654af417240bcf36ecb73bd294915fbc71803ef253c4a04d3307705cb929f0153e4ccf1ba5375db2018ff4ec49972c3f8fc8ff41eefbc9b13a95034d8e68bca"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161f41) r2 = dup(r1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0xffff, 0x0, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2e69, &(0x7f0000000400)={0x0, 0xce7b, 0x200, 0x40000000, 0x27e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x2, 0x2) map_shadow_stack(&(0x7f0000241000/0x4000)=nil, 0x4000, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x401, 0x1, 0x3, 0x1, 0x1}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="5ecae6b8cedfb19353e3541895194c4125e25f414c88", @ANYRESOCT=r4], 0x48) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0x541b, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1.240901337s ago: executing program 3 (id=544): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) setuid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005500)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) socket$alg(0x26, 0x5, 0x0) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (fail_nth: 51) 791.052518ms ago: executing program 1 (id=545): r0 = fanotify_init(0x8, 0x0) r1 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$inet6(0xa, 0x3, 0x20) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="80000fdc2208", 0x6, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0xffffffffffffff8e, 0x2141, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x3f00, @multicast2}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd, 0x0, 0xfffffffc}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r8, 0x111, 0x2, 0x20000000, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) r9 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x21, 0x8000019, r9, 0x0) 710.990887ms ago: executing program 2 (id=546): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @remote}, 0x3}}, 0x2e) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @remote}, 0x3}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000480)={0x5, 0x0, [{}, {}, {}, {}, {}]}) (async) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000480)={0x5, 0x0, [{}, {}, {}, {}, {}]}) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r9, r7, 0x0) (async) dup3(r9, r7, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e9000000000000000000000000000a58000000160a03020000400000000000f6000000090002007379000000007a30000000002c000380080001400000000008000240000000001800038014000000140000001100010000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40080) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r11, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r11, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000bbbae81b4c523d518050100001040000", @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500240000000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x20308}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x0) 531.070788ms ago: executing program 0 (id=547): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x802) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x8, r8, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 352.3223ms ago: executing program 2 (id=548): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) msgget(0x0, 0x110) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff0000000000"], 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000000010000000c00ffe3100000000000000001000000fcffffff1000000000000000010000000a0000000d00000000000000010000007d000000180000000000000008000080", @ANYRES32=r7, @ANYBLOB="00000000ac1414bb180000000000000008000000", @ANYRES32=r7, @ANYBLOB="7f000001640101010d000000000000000100000004000000100000000000000001000000800000000d00000000000000010000000c0000004c000000000000000700000086220000000302083a7c240cb95c050e693a579d9a425b8de58a6f5b060200040fe2441cae01e000000200005d44ac1414130000001eac1414bb000000050000"], 0xec}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=@newqdisc={0x144, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x3, 0xfffffffd}}}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xb8, 0x4047, 0x10001, 0x1, 0x1, 0x800, 0x7}}, {0x12, 0x2, [0xab3, 0x9cf, 0x2, 0x40, 0x4, 0x3, 0xd04]}}, {{0x1c, 0x1, {0x7f, 0x4, 0xdb1, 0x100, 0x1, 0x6, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}, {{0x1c, 0x1, {0x0, 0xa, 0xc, 0xff, 0x0, 0x40, 0x918, 0x1}}, {0x6, 0x2, [0xaf2]}}, {{0x1c, 0x1, {0x25, 0x3, 0x7, 0x3ff, 0x0, 0xc, 0xff, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0xff, 0x3]}}, {{0x1c, 0x1, {0x2, 0x9, 0x3ff, 0x100, 0x1, 0x80bb, 0x3, 0x3}}, {0xa, 0x2, [0x5, 0x3, 0x6ce4]}}]}]}, 0x144}}, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000180), 0x268203, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x440, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x414, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0xb82, 0x2, 0x8, 0xf675, 0x80000000, 0x6, 0x1, 0x0, 0xfab, 0x0, 0x9, 0x3, 0xc, 0x1, 0x9, 0x0, 0x2ee96139, 0x0, 0x6, 0x10, 0xe, 0x2, 0x1000, 0x8001, 0x2, 0x7fff, 0x0, 0x8, 0xc5f, 0x4c, 0xfff, 0x1, 0xfffffff8, 0xfffffff7, 0xc, 0x2, 0x5, 0x88ed, 0x480d, 0x3ff, 0x6, 0x6a, 0xe24, 0x7, 0x3, 0x81, 0x0, 0x5, 0xc, 0x2, 0xd, 0xcc, 0x65b, 0x1, 0x80, 0x9, 0x0, 0x1ab, 0x6, 0x3, 0x0, 0x7, 0x7fff, 0x8001, 0x464e, 0x4, 0x9a5, 0x200, 0x4, 0x46ad36a8, 0x7fffffff, 0x4, 0x8, 0x5834ef66, 0x7, 0x3, 0x1, 0x5, 0x6, 0x5, 0x9, 0x4, 0x5b7, 0x0, 0x9, 0x5, 0x2, 0x7, 0xf5a2f243, 0x2, 0x9, 0x8, 0x5, 0xe0000, 0x10000, 0x8, 0x3, 0x5, 0x5, 0xfffffff7, 0x8, 0xae98, 0x5, 0xadba, 0xfe, 0x5, 0x3, 0x7f, 0x8, 0x401, 0x3, 0x8, 0x6, 0x9a, 0x4, 0x7, 0x7, 0x1, 0x80000001, 0x4, 0x7f, 0x0, 0x3, 0x22, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x6, 0x3000000, 0x1, 0x8, 0x0, 0x5, 0x2, 0x7, 0x80, 0x5, 0x1, 0x8000, 0xfffffffd, 0xbd8a, 0x2, 0x102b6fff, 0x3, 0x10000, 0x7f, 0xfff, 0x62c8e2ca, 0xd8, 0x7, 0x0, 0x1ff, 0xffff, 0x37, 0xae75, 0x0, 0xf40e, 0x7, 0x3, 0xfffffff2, 0x8, 0x6, 0x5, 0x7, 0x6, 0x3, 0x0, 0x9, 0xff, 0x8, 0x7fffffff, 0x1, 0x3, 0x0, 0xff, 0x9, 0xffffae4a, 0x2, 0xc59c, 0x8, 0x7fff, 0x3, 0xab2, 0x8, 0xd79, 0xb8, 0x3, 0x2, 0xf76c, 0x7fff, 0x5, 0x1, 0x4, 0xc, 0x0, 0xa76, 0xffffffff, 0x8, 0x8, 0x76, 0xf, 0x0, 0x4ac, 0x9, 0x5, 0x7, 0x7d7, 0xfff, 0x8, 0xfc37, 0xff, 0x1, 0x6, 0x11, 0x8, 0x6c7, 0x7, 0x7, 0xa, 0x49da8000, 0x9, 0xcea, 0x2, 0x0, 0x40, 0x4ca5, 0xffffff00, 0x0, 0x9, 0x8, 0x7, 0x8, 0xd7, 0x9, 0x9, 0x2fc8, 0x9, 0x5, 0x1, 0x4, 0x1df4, 0xf51, 0x170, 0x6, 0xd31e, 0x7, 0x0, 0x6, 0x5, 0x3, 0x1, 0x8000]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x5}}]}}]}, 0x440}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2a, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$ppp(0xffffff9c, &(0x7f0000000540), 0x301100, 0x0) 352.093631ms ago: executing program 3 (id=549): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbb3b86dd6012000800103afffffffffffffffff50000000000000000ff020000000000000000000000000001"], 0x0) 345.50189ms ago: executing program 3 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ftruncate(r1, 0xfff) ioctl$TCSBRKP(r1, 0x5425, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x900000d2) read(r3, 0x0, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000900)=0x15) writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1, 0x0, 0x0, 0x40000000}}], 0x1, 0xc0c0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd", 0x18, 0xa0c4, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc06, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x29, 0x5, 0x5, 0x5, 0x8001}]}, &(0x7f00000002c0)='GPL\x00', 0x10, 0x32, &(0x7f0000000340)=""/50, 0x40f00, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x9, 0x0, 0xfffffff8}, 0x10, 0x0, r4, 0x2, &(0x7f00000004c0)=[r4, r4, r4], &(0x7f0000000580)=[{0x4, 0x2, 0x8, 0x3}, {0x4, 0x5, 0x6, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x3ffffe, 0x1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x320, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, {}, {}, {}, {0x3, 0x200002}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x4, 0x4000, 0x0, 0x0, 0x10, 0x16, 0x0, 0x0, 0x5}) writev(r6, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ 75.144940][ T6659] delete_channel: no stack [ 75.315104][ T6665] FAULT_INJECTION: forcing a failure. [ 75.315104][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.318927][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.3.173 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 75.321623][ T6665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.324272][ T6665] Call Trace: [ 75.325128][ T6665] [ 75.326021][ T6665] dump_stack_lvl+0x16c/0x1f0 [ 75.327930][ T6665] should_fail_ex+0x497/0x5b0 [ 75.329389][ T6665] _copy_from_iter+0x29b/0x1400 [ 75.330661][ T6665] ? trace_lock_acquire+0x14e/0x1f0 [ 75.331996][ T6665] ? __alloc_skb+0x200/0x380 [ 75.333194][ T6665] ? __pfx__copy_from_iter+0x10/0x10 [ 75.334644][ T6665] ? __virt_addr_valid+0x1a4/0x590 [ 75.336055][ T6665] ? __virt_addr_valid+0x5e/0x590 [ 75.337587][ T6665] ? __phys_addr_symbol+0x30/0x80 [ 75.338922][ T6665] ? __check_object_size+0x488/0x710 [ 75.340381][ T6665] netlink_sendmsg+0x813/0xd70 [ 75.341670][ T6665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.343029][ T6665] ____sys_sendmsg+0x9ae/0xb40 [ 75.344463][ T6665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.346033][ T6665] ? get_compat_msghdr+0x11b/0x170 [ 75.348005][ T6665] ___sys_sendmsg+0x135/0x1e0 [ 75.349342][ T6665] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.350730][ T6665] ? __pfx_lock_release+0x10/0x10 [ 75.352025][ T6665] ? trace_lock_acquire+0x14e/0x1f0 [ 75.353373][ T6665] ? __fget_files+0x206/0x3a0 [ 75.354747][ T6665] __sys_sendmsg+0x16e/0x220 [ 75.356152][ T6665] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.358238][ T6665] __do_fast_syscall_32+0x73/0x120 [ 75.359681][ T6665] do_fast_syscall_32+0x32/0x80 [ 75.361146][ T6665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.362893][ T6665] RIP: 0023:0xf7f71579 [ 75.364141][ T6665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.370445][ T6665] RSP: 002b:00000000f50f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 75.372589][ T6665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 75.374872][ T6665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.378188][ T6665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.380196][ T6665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.382141][ T6665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.384210][ T6665] [ 75.565944][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 75.565958][ T39] audit: type=1326 audit(1733217251.185:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.1.176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 75.783477][ T6681] netlink: 180 bytes leftover after parsing attributes in process `syz.1.177'. [ 75.919355][ T39] audit: type=1326 audit(1733217251.535:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 75.925694][ T39] audit: type=1326 audit(1733217251.535:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 75.931236][ T39] audit: type=1326 audit(1733217251.535:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.177" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 75.938208][ T39] audit: type=1326 audit(1733217251.535:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 75.946897][ T39] audit: type=1326 audit(1733217251.535:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 76.387935][ T6699] input: syz1 as /devices/virtual/input/input7 [ 76.572517][ T6711] netlink: 180 bytes leftover after parsing attributes in process `syz.0.187'. [ 77.214192][ T39] audit: type=1326 audit(1733217252.815:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 77.220743][ T39] audit: type=1326 audit(1733217252.825:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 77.229888][ T39] audit: type=1326 audit(1733217252.825:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 77.237046][ T39] audit: type=1326 audit(1733217252.825:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.0.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 77.546057][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.190'. [ 77.550453][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.190'. [ 77.720286][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.722533][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.745676][ T6729] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 77.982660][ T6742] FAULT_INJECTION: forcing a failure. [ 77.982660][ T6742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.987422][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.2.196 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 77.991244][ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.995475][ T6742] Call Trace: [ 77.996642][ T6742] [ 77.997639][ T6742] dump_stack_lvl+0x16c/0x1f0 [ 77.999253][ T6742] should_fail_ex+0x497/0x5b0 [ 78.000858][ T6742] _copy_from_user+0x2e/0xd0 [ 78.002446][ T6742] get_compat_msghdr+0xa8/0x170 [ 78.004127][ T6742] ? __pfx_get_compat_msghdr+0x10/0x10 [ 78.006091][ T6742] ___sys_recvmsg+0x193/0x1a0 [ 78.007762][ T6742] ? __pfx____sys_recvmsg+0x10/0x10 [ 78.009567][ T6742] ? __fget_files+0x1fc/0x3a0 [ 78.011222][ T6742] ? trace_lock_acquire+0x14e/0x1f0 [ 78.013097][ T6742] ? __fget_files+0x206/0x3a0 [ 78.014145][ T1319] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.015084][ T6742] ? __pfx___might_resched+0x10/0x10 [ 78.019819][ T6742] do_recvmmsg+0x55d/0x740 [ 78.021435][ T6742] ? __pfx_do_recvmmsg+0x10/0x10 [ 78.023124][ T6742] ? vfs_write+0x306/0x1150 [ 78.024687][ T6742] ? __fget_files+0x206/0x3a0 [ 78.026302][ T6742] __sys_recvmmsg+0x21e/0x280 [ 78.027885][ T6742] ? __pfx___sys_recvmmsg+0x10/0x10 [ 78.029643][ T6742] ? __pfx_ksys_write+0x10/0x10 [ 78.031300][ T6742] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 78.033438][ T6742] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.035424][ T6742] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 78.038138][ T6742] __do_fast_syscall_32+0x73/0x120 [ 78.040267][ T6742] do_fast_syscall_32+0x32/0x80 [ 78.042149][ T6742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.044296][ T6742] RIP: 0023:0xf73de579 [ 78.045780][ T6742] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.052483][ T6742] RSP: 002b:00000000f50c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 78.055428][ T6742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002940 [ 78.058054][ T6742] RDX: 000000000000f000 RSI: 0000000000010002 RDI: 0000000000000000 [ 78.060682][ T6742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.063324][ T6742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.065908][ T6742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.069044][ T6742] [ 78.136252][ T6747] FAULT_INJECTION: forcing a failure. [ 78.136252][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.140582][ T6747] CPU: 1 UID: 0 PID: 6747 Comm: syz.1.198 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 78.143755][ T6747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.146786][ T6747] Call Trace: [ 78.147760][ T6747] [ 78.148562][ T6747] dump_stack_lvl+0x16c/0x1f0 [ 78.149826][ T6747] should_fail_ex+0x497/0x5b0 [ 78.151094][ T6747] _copy_to_user+0x32/0xd0 [ 78.152283][ T6747] generic_map_lookup_batch+0x70e/0xb90 [ 78.153741][ T6747] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 78.155365][ T6747] ? __fget_files+0x206/0x3a0 [ 78.156641][ T6747] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 78.158353][ T6747] bpf_map_do_batch+0x483/0x640 [ 78.159668][ T6747] __sys_bpf+0x55a2/0x57a0 [ 78.160833][ T6747] ? __pfx_lock_release+0x10/0x10 [ 78.162139][ T6747] ? __pfx___sys_bpf+0x10/0x10 [ 78.163361][ T6747] ? vfs_write+0x306/0x1150 [ 78.164658][ T6747] ? __mutex_unlock_slowpath+0x164/0x690 [ 78.165827][ T1319] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 78.166263][ T6747] ? fput+0x67/0x440 [ 78.166282][ T6747] ? ksys_write+0x1ba/0x250 [ 78.170446][ T1319] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.171390][ T6747] ? __pfx_ksys_write+0x10/0x10 [ 78.171409][ T6747] __ia32_sys_bpf+0x76/0xe0 [ 78.173645][ T1319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.174878][ T6747] __do_fast_syscall_32+0x73/0x120 [ 78.174896][ T6747] do_fast_syscall_32+0x32/0x80 [ 78.174909][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.174925][ T6747] RIP: 0023:0xf7f95579 [ 78.174935][ T6747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.174945][ T6747] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 78.174956][ T6747] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 78.174963][ T6747] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.174970][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.174976][ T6747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.174982][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.174994][ T6747] [ 78.177883][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 78.178755][ T1319] usb 8-1: Product: О [ 78.220610][ T1319] usb 8-1: Manufacturer: 씅盯ᤕ敏ၛᶡ﹉琹얎캪ᮡ瓝޼⍌箮刏삠ℱ﬉䑼澮ꋻ볬蘡ᩏ鳲孷΄黥깁ㄉ殱蠴솋癹䄟㕎䆋鹮㥆 [ 78.230074][ T1319] usb 8-1: SerialNumber: 錱可캾轓瀼륋횥㝙鐼䶎ﱨ᪉葾屧裉ᣴ墘퓭煭턕 [ 78.244751][ T6750] netlink: 176 bytes leftover after parsing attributes in process `syz.1.199'. [ 78.246606][ T77] Bluetooth: Error in BCSP hdr checksum [ 78.507126][ T68] Bluetooth: Error in BCSP hdr checksum [ 78.699928][ T1319] cdc_ncm 8-1:1.0: bind() failure [ 78.703318][ T1319] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 78.709417][ T1319] cdc_ncm 8-1:1.1: bind() failure [ 78.713577][ T1319] usb 8-1: USB disconnect, device number 3 [ 78.718307][ T5942] udevd[5942]: setting owner of /dev/bus/usb/008/003 to uid=0, gid=0 failed: No such file or directory [ 78.765425][ T68] Bluetooth: Error in BCSP hdr checksum [ 79.025755][ T77] Bluetooth: Error in BCSP hdr checksum [ 79.728268][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 79.873544][ T6789] FAULT_INJECTION: forcing a failure. [ 79.873544][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 79.879941][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.2.210 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 79.884454][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.888624][ T6789] Call Trace: [ 79.889809][ T6789] [ 79.890872][ T6789] dump_stack_lvl+0x16c/0x1f0 [ 79.892458][ T6789] should_fail_ex+0x497/0x5b0 [ 79.894291][ T6789] should_failslab+0xc2/0x120 [ 79.895927][ T6789] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 79.898104][ T6789] ? skb_clone+0x190/0x3f0 [ 79.899784][ T6789] skb_clone+0x190/0x3f0 [ 79.901576][ T6789] netlink_deliver_tap+0xafd/0xca0 [ 79.903873][ T6789] netlink_unicast+0x6b4/0x7f0 [ 79.905745][ T6789] ? __pfx_netlink_unicast+0x10/0x10 [ 79.907810][ T6789] ? genl_rcv_msg+0x4bd/0x800 [ 79.909623][ T6789] netlink_ack+0x6a5/0xb20 [ 79.911283][ T6789] netlink_rcv_skb+0x327/0x410 [ 79.913022][ T6789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 79.915246][ T6789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.917121][ T6789] ? down_read+0xc9/0x330 [ 79.918923][ T6789] ? __pfx_down_read+0x10/0x10 [ 79.921172][ T6789] ? rcu_is_watching+0x12/0xc0 [ 79.923199][ T6789] genl_rcv+0x28/0x40 [ 79.924835][ T6789] netlink_unicast+0x53c/0x7f0 [ 79.926672][ T6789] ? __pfx_netlink_unicast+0x10/0x10 [ 79.928606][ T6789] ? __phys_addr_symbol+0x30/0x80 [ 79.930438][ T6789] ? __check_object_size+0x488/0x710 [ 79.932350][ T6789] netlink_sendmsg+0x8b8/0xd70 [ 79.934236][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.936476][ T6789] ____sys_sendmsg+0x9ae/0xb40 [ 79.938444][ T6789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.940628][ T6789] ? get_compat_msghdr+0x11b/0x170 [ 79.942550][ T6789] ___sys_sendmsg+0x135/0x1e0 [ 79.944445][ T6789] ? irqentry_exit+0x3b/0x90 [ 79.946163][ T6789] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.948054][ T6789] ? __pfx_lock_release+0x10/0x10 [ 79.949893][ T6789] ? trace_lock_acquire+0x14e/0x1f0 [ 79.951349][ T6789] ? vfs_write+0xa9b/0x1150 [ 79.952539][ T6789] ? __fget_files+0x206/0x3a0 [ 79.953781][ T6789] __sys_sendmsg+0x16e/0x220 [ 79.955458][ T6789] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.956965][ T6789] __do_fast_syscall_32+0x73/0x120 [ 79.958432][ T6789] do_fast_syscall_32+0x32/0x80 [ 79.959816][ T6789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.962121][ T6789] RIP: 0023:0xf73de579 [ 79.963402][ T6789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.968693][ T6789] RSP: 002b:00000000f50c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 79.970905][ T6789] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000140 [ 79.973025][ T6789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.975490][ T6789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.977708][ T6789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.980194][ T6789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.982963][ T6789] [ 80.029426][ T6791] netlink: 'syz.2.211': attribute type 21 has an invalid length. [ 80.174088][ T6798] netlink: 'syz.0.214': attribute type 4 has an invalid length. [ 80.194088][ T6798] netlink: 'syz.0.214': attribute type 4 has an invalid length. [ 80.275279][ T6807] MINIX-fs: blocksize too small for device [ 80.305047][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.501143][ T6798] syz.0.214 (6798) used greatest stack depth: 20464 bytes left [ 80.622432][ T6807] 9pnet_fd: Insufficient options for proto=fd [ 80.628771][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.631269][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.688817][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 80.691567][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 80.850651][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 80.850663][ T39] audit: type=1326 audit(1733217256.465:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.859191][ T39] audit: type=1326 audit(1733217256.465:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.865192][ T39] audit: type=1326 audit(1733217256.465:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.872979][ T39] audit: type=1326 audit(1733217256.465:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.881135][ T39] audit: type=1326 audit(1733217256.465:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.887228][ T39] audit: type=1326 audit(1733217256.465:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.892873][ T39] audit: type=1326 audit(1733217256.465:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.900007][ T39] audit: type=1326 audit(1733217256.465:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.906030][ T39] audit: type=1326 audit(1733217256.465:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.913370][ T39] audit: type=1326 audit(1733217256.465:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.1.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 80.950102][ T63] cfg80211: failed to load regulatory.db [ 80.971883][ T6838] bridge1: entered promiscuous mode [ 80.973300][ T6838] bridge1: entered allmulticast mode [ 81.006203][ T6840] netlink: 76 bytes leftover after parsing attributes in process `syz.0.228'. [ 81.077059][ T6850] tipc: Started in network mode [ 81.084363][ T6850] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 81.086740][ T6850] tipc: Enabled bearer , priority 0 [ 81.117517][ T6850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.125663][ T6850] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.442427][ T6863] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[6863] [ 81.556233][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.237'. [ 81.683738][ T6881] process 'syz.3.240' launched '/dev/fd/5' with NULL argv: empty string added [ 81.721382][ T6881] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 81.725778][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.727872][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.730853][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.732757][ T6881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.737322][ T6881] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.853496][ T6897] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 81.861642][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 81.862933][ T6899] overlayfs: overlapping lowerdir path [ 81.957513][ T6907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 82.020092][ T6913] usb 2-1: USB disconnect, device number 2 [ 82.105951][ T3226] tipc: Node number set to 11578026 [ 82.144127][ T1327] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.294127][ T1327] usb 8-1: Using ep0 maxpacket: 32 [ 82.297856][ T1327] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.300946][ T1327] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.303569][ T1327] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.306092][ T1327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.308736][ T1327] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.311359][ T1327] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.316014][ T1327] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.319312][ T1327] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.324074][ T1327] usb 8-1: config 0 descriptor?? [ 82.459483][ T6919] netlink: 216 bytes leftover after parsing attributes in process `syz.2.253'. [ 82.462098][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'. [ 82.465264][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 82.475489][ T6919] FAULT_INJECTION: forcing a failure. [ 82.475489][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 82.480053][ T6919] CPU: 2 UID: 0 PID: 6919 Comm: syz.2.253 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 82.484320][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.488437][ T6919] Call Trace: [ 82.489354][ T6919] [ 82.490162][ T6919] dump_stack_lvl+0x16c/0x1f0 [ 82.491427][ T6919] should_fail_ex+0x497/0x5b0 [ 82.493030][ T6919] ? fs_reclaim_acquire+0xae/0x150 [ 82.494459][ T6919] should_failslab+0xc2/0x120 [ 82.495801][ T6919] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 82.497453][ T6919] ? __alloc_skb+0x2b3/0x380 [ 82.498691][ T6919] __alloc_skb+0x2b3/0x380 [ 82.499933][ T6919] ? __pfx___alloc_skb+0x10/0x10 [ 82.501411][ T6919] ? genl_rcv_msg+0x4bd/0x800 [ 82.503039][ T6919] netlink_ack+0x164/0xb20 [ 82.504456][ T6919] netlink_rcv_skb+0x327/0x410 [ 82.506317][ T6919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.508204][ T6919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.510146][ T6919] ? down_read+0xc9/0x330 [ 82.511713][ T6919] ? __pfx_down_read+0x10/0x10 [ 82.513447][ T6919] ? netlink_deliver_tap+0x1ae/0xca0 [ 82.515333][ T6919] genl_rcv+0x28/0x40 [ 82.516875][ T6919] netlink_unicast+0x53c/0x7f0 [ 82.518515][ T6919] ? __pfx_netlink_unicast+0x10/0x10 [ 82.520050][ T6919] ? __phys_addr_symbol+0x30/0x80 [ 82.521765][ T6919] ? __check_object_size+0x488/0x710 [ 82.523926][ T6919] netlink_sendmsg+0x8b8/0xd70 [ 82.525665][ T6919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.527567][ T6919] ____sys_sendmsg+0x9ae/0xb40 [ 82.529319][ T6919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.529738][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 82.531271][ T6919] ? get_compat_msghdr+0x11b/0x170 [ 82.531307][ T6919] ___sys_sendmsg+0x135/0x1e0 [ 82.538200][ T6919] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.539331][ T1327] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.539924][ T6919] ? __pfx_lock_release+0x10/0x10 [ 82.539939][ T6919] ? trace_lock_acquire+0x14e/0x1f0 [ 82.539958][ T6919] ? __fget_files+0x206/0x3a0 [ 82.546158][ T1327] usb 8-1: USB disconnect, device number 4 [ 82.546300][ T6919] __sys_sendmsg+0x16e/0x220 [ 82.550874][ T1327] usblp0: removed [ 82.551534][ T6919] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.554589][ T6919] __do_fast_syscall_32+0x73/0x120 [ 82.556275][ T6919] do_fast_syscall_32+0x32/0x80 [ 82.558095][ T6919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.560641][ T6919] RIP: 0023:0xf73de579 [ 82.562371][ T6919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 82.568614][ T6919] RSP: 002b:00000000f50c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 82.570789][ T6919] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000580 [ 82.572830][ T6919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.574970][ T6919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.577007][ T6919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 82.579227][ T6919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.581453][ T6919] [ 82.973924][ T3226] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.143889][ T3226] usb 8-1: Using ep0 maxpacket: 32 [ 83.150358][ T3226] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.159011][ T3226] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.163210][ T3226] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.166275][ T3226] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.168999][ T3226] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.171500][ T3226] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.175319][ T3226] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.178220][ T3226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.186133][ T3226] usb 8-1: config 0 descriptor?? [ 83.213727][ T6932] FAULT_INJECTION: forcing a failure. [ 83.213727][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 83.219928][ T6932] CPU: 2 UID: 0 PID: 6932 Comm: syz.0.257 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 83.220992][ T6934] FAULT_INJECTION: forcing a failure. [ 83.220992][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.224205][ T6932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.224261][ T6932] Call Trace: [ 83.224269][ T6932] [ 83.224278][ T6932] dump_stack_lvl+0x16c/0x1f0 [ 83.224308][ T6932] should_fail_ex+0x497/0x5b0 [ 83.235982][ T6932] ? fs_reclaim_acquire+0xae/0x150 [ 83.237503][ T6932] should_failslab+0xc2/0x120 [ 83.239221][ T6932] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 83.241099][ T6932] ? alloc_inode+0xbf/0x230 [ 83.242690][ T6932] alloc_inode+0xbf/0x230 [ 83.244138][ T6932] new_inode+0x22/0x210 [ 83.245430][ T6932] ? start_creating.part.0+0x25d/0x3a0 [ 83.247434][ T6932] debugfs_create_dir+0xdd/0x5f0 [ 83.249231][ T6932] bdi_register_va+0x2c1/0x820 [ 83.250990][ T6932] ? __pfx_bdi_register_va+0x10/0x10 [ 83.252720][ T6932] ? do_init_timer+0xc9/0x110 [ 83.254216][ T6932] super_setup_bdi_name+0x100/0x250 [ 83.256195][ T6932] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 83.258398][ T6932] ? shrinker_register+0x1a8/0x260 [ 83.260368][ T6932] afs_get_tree+0xc2d/0x14d0 [ 83.262201][ T6932] ? security_capable+0x7e/0x260 [ 83.264136][ T6932] vfs_get_tree+0x8f/0x380 [ 83.265772][ T6932] path_mount+0x6e1/0x1f10 [ 83.267507][ T6932] ? kmem_cache_free+0x152/0x4c0 [ 83.269757][ T6932] ? __pfx_path_mount+0x10/0x10 [ 83.271854][ T6932] ? putname+0x13c/0x180 [ 83.273687][ T6932] __ia32_sys_mount+0x292/0x310 [ 83.276067][ T6932] ? __pfx___ia32_sys_mount+0x10/0x10 [ 83.278295][ T6932] __do_fast_syscall_32+0x73/0x120 [ 83.280101][ T6932] do_fast_syscall_32+0x32/0x80 [ 83.281799][ T6932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.283754][ T6932] RIP: 0023:0xf73be579 [ 83.285213][ T6932] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.291335][ T6932] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 83.293594][ T6932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 83.296470][ T6932] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000020000500 [ 83.299173][ T6932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.301620][ T6932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.304880][ T6932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.308153][ T6932] [ 83.309230][ T6934] CPU: 3 UID: 0 PID: 6934 Comm: syz.1.258 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 83.310404][ T6932] debugfs: out of free dentries, can not create directory 'afs-7' [ 83.312001][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.312010][ T6934] Call Trace: [ 83.318715][ T6934] [ 83.319497][ T6934] dump_stack_lvl+0x16c/0x1f0 [ 83.320756][ T6934] should_fail_ex+0x497/0x5b0 [ 83.321972][ T6934] _copy_from_iter+0x29b/0x1400 [ 83.323223][ T6934] ? trace_lock_acquire+0x14e/0x1f0 [ 83.324649][ T6934] ? __alloc_skb+0x200/0x380 [ 83.325843][ T6934] ? __pfx__copy_from_iter+0x10/0x10 [ 83.327154][ T6934] ? __virt_addr_valid+0x1a4/0x590 [ 83.328508][ T6934] ? __virt_addr_valid+0x5e/0x590 [ 83.329926][ T6934] ? const_folio_flags.constprop.0+0x56/0x150 [ 83.331862][ T6934] ? __phys_addr_symbol+0x30/0x80 [ 83.333376][ T6934] ? __check_object_size+0x488/0x710 [ 83.335333][ T6934] tcp_sendmsg_locked+0x193b/0x3770 [ 83.337042][ T6934] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 83.338470][ T6934] ? tcp_sendmsg+0x20/0x50 [ 83.339641][ T6934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.341199][ T6934] ? mark_held_locks+0x9f/0xe0 [ 83.342604][ T6934] ? __local_bh_enable_ip+0xa4/0x120 [ 83.344096][ T6934] tcp_sendmsg+0x2e/0x50 [ 83.345232][ T6934] ? __pfx_tcp_sendmsg+0x10/0x10 [ 83.346555][ T6934] inet_sendmsg+0xb9/0x140 [ 83.347727][ T6934] __sys_sendto+0x42a/0x4f0 [ 83.348933][ T6934] ? __pfx___sys_sendto+0x10/0x10 [ 83.350289][ T6934] ? ksys_write+0x1ba/0x250 [ 83.351498][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 83.352799][ T6934] __ia32_sys_sendto+0xdd/0x1b0 [ 83.354090][ T6934] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.355468][ T6934] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 83.357533][ T6934] __do_fast_syscall_32+0x73/0x120 [ 83.359081][ T6934] do_fast_syscall_32+0x32/0x80 [ 83.360450][ T6934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.362239][ T6934] RIP: 0023:0xf7f95579 [ 83.363363][ T6934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.368627][ T6934] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 83.370813][ T6934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 83.372987][ T6934] RDX: 00000000000109e8 RSI: 0000000000000805 RDI: 0000000000000000 [ 83.376102][ T6934] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 83.378846][ T6934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.381292][ T6934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.383503][ T6934] [ 83.406208][ T3226] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.412771][ T3226] usb 8-1: USB disconnect, device number 5 [ 83.423413][ T3226] usblp0: removed [ 83.463001][ T6923] orangefs_mount: mount request failed with -4 [ 83.592214][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 83.595200][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 83.651694][ T6905] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.316306][ T6958] ntfs3(sr0): Primary boot signature is not NTFS. [ 84.319591][ T6958] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 84.462597][ T6965] FAULT_INJECTION: forcing a failure. [ 84.462597][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.466332][ T6965] CPU: 3 UID: 0 PID: 6965 Comm: syz.2.267 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 84.469097][ T6965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.471890][ T6965] Call Trace: [ 84.472783][ T6965] [ 84.473596][ T6965] dump_stack_lvl+0x16c/0x1f0 [ 84.475005][ T6965] should_fail_ex+0x497/0x5b0 [ 84.476331][ T6965] _copy_from_user+0x2e/0xd0 [ 84.477743][ T6965] copy_from_buffer+0x86/0xb0 [ 84.479173][ T6965] copy_uabi_to_xstate+0xb5/0x670 [ 84.480607][ T6965] ? find_held_lock+0x2d/0x110 [ 84.481906][ T6965] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 84.483555][ T6965] ? __pfx_lock_release+0x10/0x10 [ 84.484951][ T6965] ? trace_lock_acquire+0x14e/0x1f0 [ 84.486315][ T6965] ? __local_bh_enable_ip+0xa4/0x120 [ 84.487704][ T6965] __fpu_restore_sig+0x1062/0x1430 [ 84.489042][ T6965] ? __pfx___fpu_restore_sig+0x10/0x10 [ 84.490552][ T6965] ? lock_acquire+0x2f/0xb0 [ 84.491776][ T6965] ? __might_fault+0xe3/0x190 [ 84.493060][ T6965] fpu__restore_sig+0x113/0x190 [ 84.494522][ T6965] ia32_restore_sigcontext+0x40f/0x5d0 [ 84.496218][ T6965] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 84.498211][ T6965] ? __pfx_lock_release+0x10/0x10 [ 84.499720][ T6965] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.501447][ T6965] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.502954][ T6965] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 84.504572][ T6965] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 84.506269][ T6965] do_int80_emulation+0x104/0x200 [ 84.507609][ T6965] asm_int80_emulation+0x1a/0x20 [ 84.508924][ T6965] RIP: 0023:0xf73de577 [ 84.510091][ T6965] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 84.515788][ T6965] RSP: 002b:00000000f50c657c EFLAGS: 00000292 [ 84.517768][ T6965] RAX: 0000000000000091 RBX: 0000000000000004 RCX: 0000000020001380 [ 84.520359][ T6965] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.522623][ T6965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.524995][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.527147][ T6965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.529409][ T6965] [ 85.129586][ T6983] FAULT_INJECTION: forcing a failure. [ 85.129586][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 85.141694][ T6983] CPU: 2 UID: 0 PID: 6983 Comm: syz.3.273 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 85.145687][ T6983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.149583][ T6983] Call Trace: [ 85.150727][ T6983] [ 85.151730][ T6983] dump_stack_lvl+0x16c/0x1f0 [ 85.153310][ T6983] should_fail_ex+0x497/0x5b0 [ 85.155415][ T6983] ? fs_reclaim_acquire+0xae/0x150 [ 85.157270][ T6983] should_failslab+0xc2/0x120 [ 85.159209][ T6983] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 85.161388][ T6983] ? __pfx_mark_lock+0x10/0x10 [ 85.163310][ T6983] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 85.165667][ T6983] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 85.167479][ T6983] mmu_topup_memory_caches+0x22/0xd0 [ 85.168997][ T6983] kvm_mmu_load+0xda/0x21f0 [ 85.170295][ T6983] ? mark_held_locks+0x9f/0xe0 [ 85.171724][ T6983] ? kvm_guest_time_update+0x780/0xeb0 [ 85.173371][ T6983] ? kvm_deliver_exception_payload+0x47/0x200 [ 85.175101][ T6983] ? __pfx_kvm_mmu_load+0x10/0x10 [ 85.176451][ T6983] ? vmx_inject_exception+0x214/0x470 [ 85.177923][ T6983] ? kvm_check_and_inject_events+0x725/0x12e0 [ 85.179667][ T6983] vcpu_run+0x2e2e/0x4c00 [ 85.180853][ T6983] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 85.182339][ T6983] ? __pfx_vcpu_run+0x10/0x10 [ 85.183696][ T6983] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 85.185400][ T6983] ? rcu_is_watching+0x12/0xc0 [ 85.186724][ T6983] ? trace_lock_acquire+0x14e/0x1f0 [ 85.188127][ T6983] ? __local_bh_enable_ip+0xa4/0x120 [ 85.189653][ T6983] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.191392][ T6983] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 85.193521][ T6983] ? lock_acquire+0x2f/0xb0 [ 85.195645][ T6983] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 85.198079][ T6983] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 85.199809][ T6983] kvm_vcpu_ioctl+0x6ce/0x1520 [ 85.201600][ T6983] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 85.203385][ T6983] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.205041][ T6983] ? tomoyo_path_number_perm+0x190/0x5b0 [ 85.206746][ T6983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.208357][ T6983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.210077][ T6983] ? do_vfs_ioctl+0x513/0x1950 [ 85.211486][ T6983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.212894][ T6983] ? __pfx_lock_release+0x10/0x10 [ 85.214527][ T6983] ? trace_lock_acquire+0x14e/0x1f0 [ 85.216084][ T6983] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 85.217757][ T6983] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 85.220252][ T6983] ? __fget_files+0x206/0x3a0 [ 85.222169][ T6983] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 85.224637][ T6983] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 85.226747][ T6983] __do_fast_syscall_32+0x73/0x120 [ 85.228891][ T6983] do_fast_syscall_32+0x32/0x80 [ 85.230657][ T6983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.232782][ T6983] RIP: 0023:0xf7f71579 [ 85.234195][ T6983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.241317][ T6983] RSP: 002b:00000000f50f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 85.244351][ T6983] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 85.247071][ T6983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.249915][ T6983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.252407][ T6983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.254742][ T6983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.256900][ T6983] [ 85.474027][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.659173][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 85.662490][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 85.664908][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.667592][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.670190][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.678584][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.682494][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.685996][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.758168][ T7015] ip6_tunnel: non-ECT from fc00:0000:0300:0000:0000:0000:0000:0000 with DS=0x3 [ 85.896618][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 85.898787][ T30] usbtmc 6-1:16.0: can't read capabilities [ 86.098609][ T30] usb 6-1: USB disconnect, device number 3 [ 86.319598][ T39] kauditd_printk_skb: 99 callbacks suppressed [ 86.319612][ T39] audit: type=1326 audit(86.207:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.327258][ T39] audit: type=1326 audit(86.207:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.333061][ T39] audit: type=1326 audit(86.217:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.339538][ T39] audit: type=1326 audit(86.217:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.345660][ T39] audit: type=1326 audit(86.217:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.351381][ T39] audit: type=1326 audit(86.217:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.357974][ T39] audit: type=1326 audit(86.217:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.363956][ T39] audit: type=1326 audit(86.217:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.369265][ T39] audit: type=1326 audit(86.217:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.375221][ T39] audit: type=1326 audit(86.217:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 86.465454][ T7048] netlink: 'syz.0.284': attribute type 2 has an invalid length. [ 86.467598][ T7048] netlink: 244 bytes leftover after parsing attributes in process `syz.0.284'. [ 86.584432][ T7061] FAULT_INJECTION: forcing a failure. [ 86.584432][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 86.588024][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.0.286 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 86.591010][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.594464][ T7061] Call Trace: [ 86.595620][ T7061] [ 86.596650][ T7061] dump_stack_lvl+0x16c/0x1f0 [ 86.598091][ T7061] should_fail_ex+0x497/0x5b0 [ 86.599591][ T7061] ? fs_reclaim_acquire+0xae/0x150 [ 86.601353][ T7061] should_failslab+0xc2/0x120 [ 86.602790][ T7061] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 86.604367][ T7061] ? fput+0x67/0x440 [ 86.605442][ T7061] ? getname_flags.part.0+0x4c/0x550 [ 86.606830][ T7061] getname_flags.part.0+0x4c/0x550 [ 86.608164][ T7061] __ia32_sys_unlink+0xaf/0x110 [ 86.609439][ T7061] __do_fast_syscall_32+0x73/0x120 [ 86.610788][ T7061] do_fast_syscall_32+0x32/0x80 [ 86.612060][ T7061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.613711][ T7061] RIP: 0023:0xf73be579 [ 86.615208][ T7061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.620818][ T7061] RSP: 002b:00000000f508557c EFLAGS: 00000292 ORIG_RAX: 000000000000000a [ 86.623163][ T7061] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 86.625309][ T7061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.627409][ T7061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.629806][ T7061] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.632350][ T7061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.634804][ T7061] [ 87.307762][ T7075] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 88.231366][ T7102] FAULT_INJECTION: forcing a failure. [ 88.231366][ T7102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.236537][ T7102] CPU: 3 UID: 0 PID: 7102 Comm: syz.2.298 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 88.240211][ T7102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.243818][ T7102] Call Trace: [ 88.244943][ T7102] [ 88.245956][ T7102] dump_stack_lvl+0x16c/0x1f0 [ 88.247569][ T7102] should_fail_ex+0x497/0x5b0 [ 88.249309][ T7102] _copy_to_user+0x32/0xd0 [ 88.250847][ T7102] simple_read_from_buffer+0xd0/0x160 [ 88.252767][ T7102] proc_fail_nth_read+0x198/0x270 [ 88.254588][ T7102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.256586][ T7102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.258527][ T7102] vfs_read+0x1df/0xbe0 [ 88.259949][ T7102] ? __fget_files+0x1fc/0x3a0 [ 88.261561][ T7102] ? __pfx___mutex_lock+0x10/0x10 [ 88.263265][ T7102] ? __pfx_vfs_read+0x10/0x10 [ 88.264868][ T7102] ? __fget_files+0x206/0x3a0 [ 88.266466][ T7102] ksys_read+0x12b/0x250 [ 88.267906][ T7102] ? __pfx_ksys_read+0x10/0x10 [ 88.269532][ T7102] __do_fast_syscall_32+0x73/0x120 [ 88.271250][ T7102] do_fast_syscall_32+0x32/0x80 [ 88.272893][ T7102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.275036][ T7102] RIP: 0023:0xf73de579 [ 88.276422][ T7102] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.282975][ T7102] RSP: 002b:00000000f50c65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 88.285817][ T7102] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50c6620 [ 88.288479][ T7102] RDX: 000000000000000f RSI: 00000000f73cfff4 RDI: 0000000000000000 [ 88.291283][ T7102] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 88.294073][ T7102] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.296926][ T7102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.300149][ T7102] [ 88.669714][ T7124] FAULT_INJECTION: forcing a failure. [ 88.669714][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 88.674361][ T7124] CPU: 3 UID: 0 PID: 7124 Comm: syz.1.305 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 88.678150][ T7124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.681899][ T7124] Call Trace: [ 88.683095][ T7124] [ 88.684212][ T7124] dump_stack_lvl+0x16c/0x1f0 [ 88.686579][ T7124] should_fail_ex+0x497/0x5b0 [ 88.688538][ T7124] ? fs_reclaim_acquire+0xae/0x150 [ 88.690709][ T7124] should_failslab+0xc2/0x120 [ 88.692180][ T7124] __kmalloc_noprof+0xce/0x4f0 [ 88.693444][ T7124] ? nla_strdup+0xc6/0x150 [ 88.694644][ T7124] nla_strdup+0xc6/0x150 [ 88.695911][ T7124] nf_tables_newset+0x2319/0x4120 [ 88.697240][ T7124] ? __pfx_nf_tables_newset+0x10/0x10 [ 88.698679][ T7124] ? __pfx___lock_acquire+0x10/0x10 [ 88.700118][ T7124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.701830][ T7124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.703556][ T7124] ? __nla_validate_parse+0x605/0x2b10 [ 88.705205][ T7124] ? net_generic+0xea/0x2a0 [ 88.706548][ T7124] ? __pfx_lock_release+0x10/0x10 [ 88.708218][ T7124] ? __nla_parse+0x40/0x60 [ 88.709481][ T7124] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 88.711226][ T7124] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 88.713045][ T7124] ? __pfx_lock_release+0x10/0x10 [ 88.714498][ T7124] ? __local_bh_enable_ip+0xa4/0x120 [ 88.715896][ T7124] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.717265][ T7124] ? __pfx___dev_queue_xmit+0x10/0x10 [ 88.719108][ T7124] ? __nla_parse+0x40/0x60 [ 88.720637][ T7124] nfnetlink_rcv+0x3c3/0x430 [ 88.722082][ T7124] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.723413][ T7124] netlink_unicast+0x53c/0x7f0 [ 88.724657][ T7124] ? __pfx_netlink_unicast+0x10/0x10 [ 88.726222][ T7124] ? __phys_addr_symbol+0x30/0x80 [ 88.727814][ T7124] ? __check_object_size+0x488/0x710 [ 88.729298][ T7124] netlink_sendmsg+0x8b8/0xd70 [ 88.730796][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.732311][ T7124] ____sys_sendmsg+0x9ae/0xb40 [ 88.733634][ T7124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.735108][ T7124] ? get_compat_msghdr+0x11b/0x170 [ 88.736448][ T7124] ___sys_sendmsg+0x135/0x1e0 [ 88.737740][ T7124] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.739651][ T7124] ? __pfx_lock_release+0x10/0x10 [ 88.741428][ T7124] ? trace_lock_acquire+0x14e/0x1f0 [ 88.742824][ T7124] ? __fget_files+0x206/0x3a0 [ 88.744108][ T7124] __sys_sendmsg+0x16e/0x220 [ 88.745365][ T7124] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.747095][ T7124] __do_fast_syscall_32+0x73/0x120 [ 88.748649][ T7124] do_fast_syscall_32+0x32/0x80 [ 88.750006][ T7124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.751665][ T7124] RIP: 0023:0xf7f95579 [ 88.752752][ T7124] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.757845][ T7124] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 88.760037][ T7124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 88.762124][ T7124] RDX: 0000000024000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.764185][ T7124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.766259][ T7124] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.768333][ T7124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.770390][ T7124] [ 88.804932][ T7130] FAULT_INJECTION: forcing a failure. [ 88.804932][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 88.808277][ T7130] CPU: 3 UID: 0 PID: 7130 Comm: syz.1.307 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 88.811001][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.814517][ T7130] Call Trace: [ 88.815387][ T7130] [ 88.816167][ T7130] dump_stack_lvl+0x16c/0x1f0 [ 88.817395][ T7130] should_fail_ex+0x497/0x5b0 [ 88.818645][ T7130] should_failslab+0xc2/0x120 [ 88.819927][ T7130] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 88.821530][ T7130] ? __alloc_skb+0x2b3/0x380 [ 88.822884][ T7130] __alloc_skb+0x2b3/0x380 [ 88.824200][ T7130] ? __pfx___alloc_skb+0x10/0x10 [ 88.825843][ T7130] ? sctp_v4_to_addr_param+0x11/0x110 [ 88.827507][ T7130] ? sctp_bind_addrs_to_raw+0x1a0/0x330 [ 88.829338][ T7130] _sctp_make_chunk+0x51/0x270 [ 88.830784][ T7130] sctp_make_control+0x2f/0x2d0 [ 88.832066][ T7130] sctp_make_init+0x6fb/0xdd0 [ 88.833299][ T7130] ? __pfx_sctp_make_init+0x10/0x10 [ 88.834851][ T7130] ? kernel_text_address+0x8d/0x100 [ 88.836330][ T7130] ? ip_route_output_key_hash_rcu+0xdf7/0x2770 [ 88.838023][ T7130] ? unwind_get_return_address+0x59/0xa0 [ 88.839462][ T7130] ? arch_stack_walk+0xa7/0x100 [ 88.840741][ T7130] ? sctp_sm_lookup_event+0x15c/0x570 [ 88.842143][ T7130] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 88.843622][ T7130] sctp_sf_do_prm_asoc+0xbf/0x360 [ 88.844957][ T7130] ? __pfx_sctp_pname+0x10/0x10 [ 88.846235][ T7130] sctp_do_sm+0x17f/0x5c90 [ 88.847415][ T7130] ? kasan_save_stack+0x42/0x60 [ 88.848833][ T7130] ? kasan_save_stack+0x33/0x60 [ 88.850140][ T7130] ? kasan_save_track+0x14/0x30 [ 88.851466][ T7130] ? __pfx_sctp_do_sm+0x10/0x10 [ 88.852912][ T7130] ? sctp_sendmsg+0x129c/0x1f10 [ 88.854426][ T7130] ? __sys_sendto+0x42a/0x4f0 [ 88.855755][ T7130] ? __ia32_sys_sendto+0xdd/0x1b0 [ 88.857161][ T7130] ? __do_fast_syscall_32+0x73/0x120 [ 88.858610][ T7130] ? do_fast_syscall_32+0x32/0x80 [ 88.859937][ T7130] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.861676][ T7130] ? sk_leave_memory_pressure+0xdd/0x130 [ 88.863134][ T7130] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 88.864787][ T7130] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 88.866209][ T7130] sctp_sendmsg_to_asoc+0xa4d/0x1ad0 [ 88.867587][ T7130] ? sctp_assoc_add_peer+0x254/0x14b0 [ 88.869106][ T7130] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 88.870601][ T7130] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 88.872360][ T7130] ? mark_held_locks+0x9f/0xe0 [ 88.873631][ T7130] sctp_sendmsg+0x129c/0x1f10 [ 88.874943][ T7130] ? __pfx___lock_acquire+0x10/0x10 [ 88.876236][ T7130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.877540][ T7130] ? __pfx_aa_sk_perm+0x10/0x10 [ 88.878820][ T7130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.880156][ T7130] inet_sendmsg+0x119/0x140 [ 88.881451][ T7130] __sys_sendto+0x42a/0x4f0 [ 88.882740][ T7130] ? __pfx___sys_sendto+0x10/0x10 [ 88.884403][ T7130] ? ksys_write+0x1ba/0x250 [ 88.885759][ T7130] ? __pfx_ksys_write+0x10/0x10 [ 88.887529][ T7130] __ia32_sys_sendto+0xdd/0x1b0 [ 88.889021][ T7130] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.890394][ T7130] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 88.892108][ T7130] __do_fast_syscall_32+0x73/0x120 [ 88.893417][ T7130] do_fast_syscall_32+0x32/0x80 [ 88.894708][ T7130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.896373][ T7130] RIP: 0023:0xf7f95579 [ 88.897449][ T7130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.902221][ T7130] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 88.904228][ T7130] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 88.906243][ T7130] RDX: 0000000000000001 RSI: 0000000020000009 RDI: 0000000020000080 [ 88.908155][ T7130] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 88.910125][ T7130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.912100][ T7130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.914332][ T7130] [ 89.034848][ T7136] nbd: illegal input index -1 [ 89.053188][ T7136] mkiss: ax0: crc mode is auto. [ 89.067314][ T5990] libceph: connect (1)[c::]:6789 error -101 [ 89.069077][ T5990] libceph: mon0 (1)[c::]:6789 connect error [ 89.104357][ T7138] ceph: No mds server is up or the cluster is laggy [ 89.396067][ T7165] IPVS: set_ctl: invalid protocol: 25647 47.107.118.109:0 [ 90.636495][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 90.726910][ T7208] netlink: 176 bytes leftover after parsing attributes in process `syz.1.328'. [ 90.730672][ T68] Bluetooth: Error in BCSP hdr checksum [ 90.994459][ T45] Bluetooth: Error in BCSP hdr checksum [ 91.254131][ T1135] Bluetooth: Error in BCSP hdr checksum [ 91.515467][ T68] Bluetooth: Error in BCSP hdr checksum [ 91.835604][ T7222] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 91.925860][ T7228] tipc: Enabled bearer , priority 10 [ 92.087054][ T62] IPVS: starting estimator thread 0... [ 92.174001][ T7235] IPVS: using max 38 ests per chain, 91200 per kthread [ 92.254262][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 92.483979][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 92.492664][ T30] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.501646][ T30] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.504396][ T30] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.507127][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.509902][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.512875][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.523348][ T30] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.525878][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.529321][ T30] usb 7-1: config 0 descriptor?? [ 92.745987][ T30] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.752046][ T30] usb 7-1: USB disconnect, device number 2 [ 92.756864][ T30] usblp0: removed [ 92.784197][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 92.784418][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.145196][ T7251] netlink: 180 bytes leftover after parsing attributes in process `syz.3.341'. [ 93.194012][ T3226] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 93.260113][ T7254] FAULT_INJECTION: forcing a failure. [ 93.260113][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 93.263374][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.0.342 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 93.266305][ T7254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.268990][ T7254] Call Trace: [ 93.270143][ T7254] [ 93.270903][ T7254] dump_stack_lvl+0x16c/0x1f0 [ 93.272131][ T7254] should_fail_ex+0x497/0x5b0 [ 93.273348][ T7254] ? fs_reclaim_acquire+0xae/0x150 [ 93.275142][ T7254] should_failslab+0xc2/0x120 [ 93.276389][ T7254] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 93.278065][ T7254] ? __alloc_skb+0x2b3/0x380 [ 93.279340][ T7254] __alloc_skb+0x2b3/0x380 [ 93.280787][ T7254] ? __pfx___alloc_skb+0x10/0x10 [ 93.282276][ T7254] ? __pfx_tcp_call_bpf+0x10/0x10 [ 93.283662][ T7254] tcp_stream_alloc_skb+0x34/0x570 [ 93.284998][ T7254] tcp_connect+0xc70/0x4880 [ 93.286206][ T7254] ? tcp_fastopen_defer_connect+0x126/0x420 [ 93.287720][ T7254] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 93.289327][ T7254] ? get_random_u16+0x444/0x7e0 [ 93.290874][ T7254] ? __pfx_tcp_connect+0x10/0x10 [ 93.292160][ T7254] ? __pfx_secure_tcp_ts_off+0x10/0x10 [ 93.293669][ T7254] ? xfrm_lookup_route+0x6a/0x200 [ 93.295269][ T7254] tcp_v4_connect+0x14f7/0x1b80 [ 93.296650][ T7254] ? __pfx_tcp_v4_connect+0x10/0x10 [ 93.298341][ T7254] __inet_stream_connect+0x3c7/0x1020 [ 93.300098][ T7254] ? __pfx___inet_stream_connect+0x10/0x10 [ 93.302021][ T7254] tcp_sendmsg_fastopen+0x3d7/0x700 [ 93.303638][ T7254] tcp_sendmsg_locked+0x2037/0x3770 [ 93.305097][ T7254] ? hlock_class+0x4e/0x130 [ 93.306392][ T7254] ? mark_lock+0xb5/0xc60 [ 93.307560][ T7254] ? __pfx___lock_acquire+0x10/0x10 [ 93.308925][ T7254] ? __pfx_mark_lock+0x10/0x10 [ 93.310176][ T7254] ? lock_acquire.part.0+0x11b/0x380 [ 93.311584][ T7254] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 93.313049][ T7254] ? tcp_sendmsg+0x20/0x50 [ 93.314437][ T7254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.316130][ T7254] ? mark_held_locks+0x9f/0xe0 [ 93.317466][ T7254] ? __local_bh_enable_ip+0xa4/0x120 [ 93.318925][ T7254] tcp_sendmsg+0x2e/0x50 [ 93.320083][ T7254] ? __pfx_tcp_sendmsg+0x10/0x10 [ 93.321425][ T7254] inet_sendmsg+0xb9/0x140 [ 93.322609][ T7254] __sys_sendto+0x42a/0x4f0 [ 93.323807][ T7254] ? __pfx___sys_sendto+0x10/0x10 [ 93.325128][ T7254] ? ksys_write+0x1ba/0x250 [ 93.326381][ T7254] ? __pfx_ksys_write+0x10/0x10 [ 93.327763][ T7254] __ia32_sys_sendto+0xdd/0x1b0 [ 93.329087][ T7254] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.330623][ T7254] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 93.332645][ T7254] __do_fast_syscall_32+0x73/0x120 [ 93.334494][ T7254] do_fast_syscall_32+0x32/0x80 [ 93.335858][ T7254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.337745][ T7254] RIP: 0023:0xf73be579 [ 93.339010][ T7254] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.343987][ T3226] usb 7-1: Using ep0 maxpacket: 32 [ 93.344491][ T7254] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 93.344510][ T7254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 93.344517][ T7254] RDX: 0000000000000000 RSI: 00000000200007fd RDI: 0000000020000180 [ 93.344525][ T7254] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 93.347644][ T3226] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.348201][ T7254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.350927][ T3226] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.352850][ T7254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.352868][ T7254] [ 93.356143][ T3226] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.369387][ T3226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.372442][ T3226] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.375657][ T3226] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.379276][ T3226] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.381699][ T3226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.385214][ T3226] usb 7-1: config 0 descriptor?? [ 93.429956][ T39] kauditd_printk_skb: 103 callbacks suppressed [ 93.429968][ T39] audit: type=1326 audit(93.317:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 93.437854][ T39] audit: type=1326 audit(93.317:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 93.443525][ T39] audit: type=1326 audit(93.317:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 93.449737][ T39] audit: type=1326 audit(93.317:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 93.542722][ T7267] FAULT_INJECTION: forcing a failure. [ 93.542722][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 93.547488][ T7267] CPU: 3 UID: 0 PID: 7267 Comm: syz.3.348 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 93.550452][ T7267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.553160][ T7267] Call Trace: [ 93.554089][ T7267] [ 93.555018][ T7267] dump_stack_lvl+0x16c/0x1f0 [ 93.556281][ T7267] should_fail_ex+0x497/0x5b0 [ 93.557445][ T7267] ? fs_reclaim_acquire+0xae/0x150 [ 93.558721][ T7267] should_failslab+0xc2/0x120 [ 93.559851][ T7267] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 93.561112][ T7267] ? __kernfs_new_node+0xd3/0x890 [ 93.562303][ T7267] __kernfs_new_node+0xd3/0x890 [ 93.563463][ T7267] ? __pfx___kernfs_new_node+0x10/0x10 [ 93.564737][ T7267] ? __pfx_lock_release+0x10/0x10 [ 93.565956][ T7267] ? kernfs_add_one+0x39d/0x520 [ 93.567563][ T7267] ? up_write+0x1b2/0x520 [ 93.568651][ T7267] kernfs_new_node+0x186/0x240 [ 93.569847][ T7267] __kernfs_create_file+0x53/0x350 [ 93.571063][ T7267] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 93.572310][ T7267] internal_create_group+0x56c/0xf10 [ 93.573564][ T7267] ? __pfx_internal_create_group+0x10/0x10 [ 93.574937][ T7267] ? kernfs_create_link+0x1bd/0x240 [ 93.576393][ T7267] internal_create_groups+0x9d/0x150 [ 93.578157][ T7267] device_add+0xf33/0x1a70 [ 93.579488][ T7267] ? __pfx_device_add+0x10/0x10 [ 93.580688][ T7267] ? __init_waitqueue_head+0xca/0x150 [ 93.581992][ T7267] netdev_register_kobject+0x183/0x3a0 [ 93.583296][ T7267] register_netdevice+0x1473/0x1e20 [ 93.584754][ T7267] ? __pfx_register_netdevice+0x10/0x10 [ 93.586258][ T7267] ip_tunnel_newlink+0x2e6/0x920 [ 93.587616][ T7267] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 93.589060][ T7267] ? rcu_is_watching+0x12/0xc0 [ 93.590223][ T7267] ? trace_kmalloc+0x2d/0xd0 [ 93.591335][ T7267] ? __kmalloc_node_noprof+0x23d/0x520 [ 93.592614][ T7267] erspan_newlink+0x166/0x180 [ 93.594011][ T7267] ? validate_linkmsg+0x57d/0xb60 [ 93.595639][ T7267] ? __pfx_erspan_newlink+0x10/0x10 [ 93.597477][ T7267] ? __pfx_validate_linkmsg+0x10/0x10 [ 93.599288][ T7267] ? rtnl_create_link+0xa2e/0xf10 [ 93.600518][ T7267] rtnl_newlink+0x11ad/0x1c10 [ 93.601614][ T7267] ? __pfx_erspan_newlink+0x10/0x10 [ 93.602836][ T7267] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.604022][ T7267] ? __pfx___lock_acquire+0x10/0x10 [ 93.605238][ T7267] ? kmem_cache_free+0x152/0x4c0 [ 93.606644][ T7267] ? aa_get_newest_label+0x376/0x680 [ 93.608452][ T7267] ? find_held_lock+0x2d/0x110 [ 93.610373][ T7267] ? find_held_lock+0x2d/0x110 [ 93.611999][ T7267] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 93.613720][ T7267] ? __pfx_lock_release+0x10/0x10 [ 93.615552][ T7267] ? trace_lock_acquire+0x14e/0x1f0 [ 93.617386][ T7267] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.619129][ T7267] rtnetlink_rcv_msg+0x95b/0xea0 [ 93.620994][ T7267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.623325][ T7267] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.625623][ T7267] netlink_rcv_skb+0x165/0x410 [ 93.627412][ T7267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.629238][ T7267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.631032][ T7267] ? netlink_deliver_tap+0x1ae/0xca0 [ 93.632792][ T7267] netlink_unicast+0x53c/0x7f0 [ 93.634440][ T7267] ? __pfx_netlink_unicast+0x10/0x10 [ 93.636191][ T7267] ? __phys_addr_symbol+0x30/0x80 [ 93.637862][ T7267] ? __check_object_size+0x488/0x710 [ 93.639622][ T7267] netlink_sendmsg+0x8b8/0xd70 [ 93.641267][ T7267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.643040][ T7267] ____sys_sendmsg+0x9ae/0xb40 [ 93.644629][ T7267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.646359][ T7267] ? get_compat_msghdr+0x11b/0x170 [ 93.647990][ T7267] ___sys_sendmsg+0x135/0x1e0 [ 93.649687][ T7267] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.651690][ T7267] ? __pfx_lock_release+0x10/0x10 [ 93.653386][ T7267] ? trace_lock_acquire+0x14e/0x1f0 [ 93.655366][ T7267] ? __fget_files+0x206/0x3a0 [ 93.657103][ T7267] __sys_sendmsg+0x16e/0x220 [ 93.658206][ T7267] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.659372][ T7267] __do_fast_syscall_32+0x73/0x120 [ 93.660558][ T7267] do_fast_syscall_32+0x32/0x80 [ 93.661623][ T7267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.663127][ T7267] RIP: 0023:0xf7f71579 [ 93.664092][ T7267] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.670437][ T7267] RSP: 002b:00000000f50f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 93.673194][ T7267] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 93.676104][ T7267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.678697][ T7267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.681632][ T7267] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.684174][ T7267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.686602][ T7267] [ 93.704492][ T39] audit: type=1326 audit(93.587:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.710013][ T39] audit: type=1326 audit(93.587:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.715571][ T39] audit: type=1326 audit(93.597:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.721704][ T39] audit: type=1326 audit(93.597:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.727632][ T39] audit: type=1326 audit(93.597:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.735233][ T39] audit: type=1326 audit(93.597:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.347" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 93.766594][ T7273] nbd: illegal input index 808464432 [ 93.893263][ T3226] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 94.092598][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.098868][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.068574][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 95.072292][ T30] IPVS: starting estimator thread 0... [ 95.173916][ T7290] IPVS: using max 32 ests per chain, 76800 per kthread [ 95.284637][ T3226] usb 7-1: USB disconnect, device number 3 [ 95.287105][ T3226] usblp0: removed [ 95.308860][ T7299] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.357'. [ 95.311839][ T7299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.417622][ T7309] FAULT_INJECTION: forcing a failure. [ 95.417622][ T7309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.422419][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.1.360 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 95.424592][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 95.425529][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.430998][ T7309] Call Trace: [ 95.432054][ T7309] [ 95.432986][ T7309] dump_stack_lvl+0x16c/0x1f0 [ 95.434311][ T7309] should_fail_ex+0x497/0x5b0 [ 95.435673][ T7309] _copy_from_user+0x2e/0xd0 [ 95.436988][ T7309] generic_map_update_batch+0x391/0x5f0 [ 95.439002][ T7309] ? __pfx_generic_map_update_batch+0x10/0x10 [ 95.441388][ T7309] ? __fget_files+0x206/0x3a0 [ 95.443386][ T7309] ? __pfx_generic_map_update_batch+0x10/0x10 [ 95.446023][ T7309] bpf_map_do_batch+0x576/0x640 [ 95.447859][ T7309] __sys_bpf+0x1c9f/0x57a0 [ 95.449451][ T7309] ? __pfx_lock_release+0x10/0x10 [ 95.451233][ T7309] ? __pfx___sys_bpf+0x10/0x10 [ 95.452983][ T7309] ? vfs_write+0x306/0x1150 [ 95.454625][ T7309] ? __mutex_unlock_slowpath+0x164/0x690 [ 95.456626][ T7309] ? fput+0x67/0x440 [ 95.458057][ T7309] ? ksys_write+0x1ba/0x250 [ 95.459711][ T7309] ? __pfx_ksys_write+0x10/0x10 [ 95.461553][ T7309] __ia32_sys_bpf+0x76/0xe0 [ 95.463210][ T7309] __do_fast_syscall_32+0x73/0x120 [ 95.465046][ T7309] do_fast_syscall_32+0x32/0x80 [ 95.466787][ T7309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.469116][ T7309] RIP: 0023:0xf7f95579 [ 95.470549][ T7309] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.476846][ T7309] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 95.479033][ T7309] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000500 [ 95.481265][ T7309] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.483731][ T7309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.485725][ T7309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.487693][ T7309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.489624][ T7309] [ 95.535617][ T7318] FAULT_INJECTION: forcing a failure. [ 95.535617][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.539999][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.2.365 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 95.543730][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.547645][ T7318] Call Trace: [ 95.548907][ T7318] [ 95.549933][ T7318] dump_stack_lvl+0x16c/0x1f0 [ 95.551563][ T7318] should_fail_ex+0x497/0x5b0 [ 95.553162][ T7318] _copy_from_user+0x2e/0xd0 [ 95.555013][ T7318] get_compat_msghdr+0xa8/0x170 [ 95.557083][ T7318] ? __pfx_get_compat_msghdr+0x10/0x10 [ 95.559112][ T7318] ___sys_recvmsg+0x193/0x1a0 [ 95.561065][ T7318] ? __pfx____sys_recvmsg+0x10/0x10 [ 95.563038][ T7318] ? __fget_files+0x1fc/0x3a0 [ 95.564863][ T7318] ? trace_lock_acquire+0x14e/0x1f0 [ 95.566815][ T7318] ? __fget_files+0x206/0x3a0 [ 95.568437][ T7318] ? __pfx___might_resched+0x10/0x10 [ 95.570274][ T7318] do_recvmmsg+0x55d/0x740 [ 95.571989][ T7318] ? __pfx_do_recvmmsg+0x10/0x10 [ 95.573689][ T7318] ? vfs_write+0x306/0x1150 [ 95.575708][ T7318] ? __fget_files+0x206/0x3a0 [ 95.577508][ T7318] __sys_recvmmsg+0x21e/0x280 [ 95.579588][ T7318] ? __pfx___sys_recvmmsg+0x10/0x10 [ 95.581555][ T7318] ? __pfx_ksys_write+0x10/0x10 [ 95.583426][ T7318] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 95.585545][ T7318] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.587349][ T7318] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 95.589607][ T7318] __do_fast_syscall_32+0x73/0x120 [ 95.591366][ T7318] do_fast_syscall_32+0x32/0x80 [ 95.593011][ T7318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.595175][ T7318] RIP: 0023:0xf73de579 [ 95.596561][ T7318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.603243][ T7318] RSP: 002b:00000000f50c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 95.606010][ T7318] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020001140 [ 95.608612][ T7318] RDX: 0000000000000700 RSI: 0000000000000002 RDI: 0000000000000000 [ 95.611185][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.613882][ T7318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.616648][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.619433][ T7318] [ 95.686437][ T7333] vlan2: entered allmulticast mode [ 95.721381][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'. [ 95.724176][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 95.954080][ T3226] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 96.116688][ T3226] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.118974][ T3226] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.122130][ T3226] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.125063][ T3226] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 96.128309][ T3226] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 96.135150][ T3226] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.138370][ T3226] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.141054][ T3226] usb 6-1: Product: syz [ 96.142625][ T3226] usb 6-1: Manufacturer: syz [ 96.154541][ T3226] cdc_wdm 6-1:1.0: skipping garbage [ 96.156818][ T3226] cdc_wdm 6-1:1.0: skipping garbage [ 96.160651][ T3226] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 96.162499][ T3226] cdc_wdm 6-1:1.0: Unknown control protocol [ 96.183900][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 96.358223][ T9] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.360910][ T9] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 96.366285][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.368626][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.515639][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 97.825105][ T7375] fuse: Bad value for 'user_id' [ 97.826459][ T7375] fuse: Bad value for 'user_id' [ 97.937045][ T7375] FAULT_INJECTION: forcing a failure. [ 97.937045][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 97.941932][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.0.382 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 97.944989][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.948031][ T7375] Call Trace: [ 97.948909][ T7375] [ 97.949697][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 97.950985][ T7375] should_fail_ex+0x497/0x5b0 [ 97.952225][ T7375] ? fs_reclaim_acquire+0xae/0x150 [ 97.953593][ T7375] should_failslab+0xc2/0x120 [ 97.955158][ T7375] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 97.956888][ T7375] ? __alloc_skb+0x2b3/0x380 [ 97.958327][ T7375] __alloc_skb+0x2b3/0x380 [ 97.959694][ T7375] ? __pfx___alloc_skb+0x10/0x10 [ 97.961302][ T7375] ? hlock_class+0x4e/0x130 [ 97.962704][ T7375] ? __lock_acquire+0x1550/0x3c40 [ 97.964361][ T7375] alloc_skb_with_frags+0xe4/0x850 [ 97.965728][ T7375] ? __pfx___lock_acquire+0x10/0x10 [ 97.967130][ T7375] sock_alloc_send_pskb+0x7f1/0x980 [ 97.968505][ T7375] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 97.970058][ T7375] ? __pfx_lock_release+0x10/0x10 [ 97.971447][ T7375] ? do_raw_spin_lock+0x12d/0x2c0 [ 97.972905][ T7375] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 97.974652][ T7375] ? lock_acquire+0x2f/0xb0 [ 97.976133][ T7375] ? unix_dgram_sendmsg+0x8c8/0x1940 [ 97.977601][ T7375] unix_dgram_sendmsg+0x46c/0x1940 [ 97.979263][ T7375] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 97.980812][ T7375] ? aa_sk_perm+0x2f5/0xb20 [ 97.982068][ T7375] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.983349][ T7375] ? __import_iovec+0x1f2/0x6d0 [ 97.984638][ T7375] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 97.986066][ T7375] ____sys_sendmsg+0x9ae/0xb40 [ 97.987342][ T7375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.988728][ T7375] ? get_compat_msghdr+0x11b/0x170 [ 97.990111][ T7375] ___sys_sendmsg+0x135/0x1e0 [ 97.991350][ T7375] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.992722][ T7375] ? trace_lock_acquire+0x14e/0x1f0 [ 97.994168][ T7375] ? __pfx___might_resched+0x10/0x10 [ 97.995882][ T7375] __sys_sendmmsg+0x2fa/0x420 [ 97.997376][ T7375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.999014][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.001147][ T7375] ? fput+0x67/0x440 [ 98.002442][ T7375] ? ksys_write+0x1ba/0x250 [ 98.004029][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 98.005485][ T7375] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 98.006996][ T7375] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 98.008704][ T7375] __do_fast_syscall_32+0x73/0x120 [ 98.010070][ T7375] do_fast_syscall_32+0x32/0x80 [ 98.011340][ T7375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.012988][ T7375] RIP: 0023:0xf73be579 [ 98.014325][ T7375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.019931][ T7375] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 98.022462][ T7375] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200bd000 [ 98.024502][ T7375] RDX: 00000000ffffff2b RSI: 0000000000000000 RDI: 0000000000000000 [ 98.026622][ T7375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.028804][ T7375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.031212][ T7375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.033521][ T7375] [ 98.451117][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 98.451169][ T39] audit: type=1326 audit(98.337:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.458451][ T39] audit: type=1326 audit(98.337:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.464938][ T39] audit: type=1326 audit(98.337:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.470334][ T39] audit: type=1326 audit(98.337:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.477659][ T39] audit: type=1326 audit(98.337:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.486526][ T39] audit: type=1326 audit(98.337:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.494856][ T39] audit: type=1326 audit(98.337:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.503114][ T39] audit: type=1326 audit(98.337:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.509158][ T39] audit: type=1326 audit(98.337:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.514896][ T39] audit: type=1326 audit(98.337:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.2.384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 98.800272][ T63] usb 8-1: USB disconnect, device number 6 [ 99.023950][ T5990] usb 6-1: USB disconnect, device number 4 [ 99.336601][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 100.358967][ T7445] netlink: 180 bytes leftover after parsing attributes in process `syz.3.401'. [ 101.139710][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 101.293937][ T5990] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 101.526213][ T5990] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 101.528817][ T5990] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 101.531273][ T5990] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.533908][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.750436][ T62] usb 8-1: USB disconnect, device number 7 [ 102.197677][ T7489] xt_HMARK: spi-set and port-set can't be combined [ 102.216470][ T7489] sp0: Synchronizing with TNC [ 102.479936][ T7499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.548811][ T7499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.649374][ T7499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.724200][ T7499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.802389][ T7511] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 102.805798][ T7499] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.812415][ T7499] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820551][ T7499] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.833359][ T7499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.852349][ T7511] evm: overlay not supported [ 103.160534][ T7538] FAULT_INJECTION: forcing a failure. [ 103.160534][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 103.174364][ T7538] CPU: 3 UID: 0 PID: 7538 Comm: syz.0.431 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 103.177818][ T7538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.180630][ T7538] Call Trace: [ 103.181465][ T7538] [ 103.182229][ T7538] dump_stack_lvl+0x16c/0x1f0 [ 103.183468][ T7538] should_fail_ex+0x497/0x5b0 [ 103.184824][ T7538] ? fs_reclaim_acquire+0xae/0x150 [ 103.186181][ T7538] should_failslab+0xc2/0x120 [ 103.187458][ T7538] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 103.189145][ T7538] ? hlock_class+0x4e/0x130 [ 103.190348][ T7538] ? kstrdup_const+0x63/0x80 [ 103.191559][ T7538] kstrdup+0x42/0xb0 [ 103.192572][ T7538] kstrdup_const+0x63/0x80 [ 103.193945][ T7538] __kernfs_new_node+0x9c/0x890 [ 103.195353][ T7538] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.197073][ T7538] ? __pfx_lock_release+0x10/0x10 [ 103.198471][ T7538] ? kernfs_add_one+0x39d/0x520 [ 103.199894][ T7538] ? lock_acquire.part.0+0x11b/0x380 [ 103.201202][ T7538] ? find_held_lock+0x2d/0x110 [ 103.202432][ T7538] kernfs_new_node+0x186/0x240 [ 103.203602][ T7538] kernfs_create_link+0xcc/0x240 [ 103.205038][ T7538] sysfs_do_create_link_sd+0x90/0x140 [ 103.206404][ T7538] sysfs_create_link+0x61/0xc0 [ 103.207566][ T7538] device_add+0x62e/0x1a70 [ 103.208700][ T7538] ? __pfx_device_add+0x10/0x10 [ 103.209944][ T7538] ? __init_waitqueue_head+0xca/0x150 [ 103.211243][ T7538] netdev_register_kobject+0x183/0x3a0 [ 103.212587][ T7538] register_netdevice+0x1473/0x1e20 [ 103.214072][ T7538] ? __pfx_register_netdevice+0x10/0x10 [ 103.215734][ T7538] br_dev_newlink+0x27/0x110 [ 103.217059][ T7538] rtnl_newlink+0x11ad/0x1c10 [ 103.218775][ T7538] ? __pfx_br_dev_newlink+0x10/0x10 [ 103.220621][ T7538] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.222209][ T7538] ? hlock_class+0x4e/0x130 [ 103.223561][ T7538] ? __pfx___lock_acquire+0x10/0x10 [ 103.225049][ T7538] ? kmem_cache_free+0x152/0x4c0 [ 103.226368][ T7538] ? aa_get_newest_label+0x376/0x680 [ 103.227625][ T7538] ? find_held_lock+0x2d/0x110 [ 103.228796][ T7538] ? find_held_lock+0x2d/0x110 [ 103.230019][ T7538] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 103.231294][ T7538] ? __pfx_lock_release+0x10/0x10 [ 103.232557][ T7538] ? trace_lock_acquire+0x14e/0x1f0 [ 103.233993][ T7538] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.235355][ T7538] rtnetlink_rcv_msg+0x95b/0xea0 [ 103.236813][ T7538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.238280][ T7538] ? __pfx___lock_acquire+0x10/0x10 [ 103.239902][ T7538] netlink_rcv_skb+0x165/0x410 [ 103.241459][ T7538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.243171][ T7538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.244689][ T7538] ? rcu_is_watching+0x12/0xc0 [ 103.245882][ T7538] netlink_unicast+0x53c/0x7f0 [ 103.247050][ T7538] ? __pfx_netlink_unicast+0x10/0x10 [ 103.248389][ T7538] ? __phys_addr_symbol+0x30/0x80 [ 103.249678][ T7538] ? __check_object_size+0x488/0x710 [ 103.251117][ T7538] netlink_sendmsg+0x8b8/0xd70 [ 103.252433][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.254055][ T7538] ____sys_sendmsg+0x9ae/0xb40 [ 103.255416][ T7538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.257081][ T7538] ? get_compat_msghdr+0x11b/0x170 [ 103.258674][ T7538] ___sys_sendmsg+0x135/0x1e0 [ 103.259867][ T7538] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.261242][ T7538] ? __pfx_lock_release+0x10/0x10 [ 103.262566][ T7538] ? trace_lock_acquire+0x14e/0x1f0 [ 103.264026][ T7538] ? __fget_files+0x206/0x3a0 [ 103.265209][ T7538] __sys_sendmsg+0x16e/0x220 [ 103.266377][ T7538] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.267653][ T7538] __do_fast_syscall_32+0x73/0x120 [ 103.268951][ T7538] do_fast_syscall_32+0x32/0x80 [ 103.270256][ T7538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.271939][ T7538] RIP: 0023:0xf73be579 [ 103.273088][ T7538] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.279649][ T7538] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 103.281811][ T7538] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200006c0 [ 103.283826][ T7538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.285910][ T7538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.287874][ T7538] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.289835][ T7538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.291765][ T7538] [ 104.182062][ T7547] FAULT_INJECTION: forcing a failure. [ 104.182062][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 104.187903][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.1.433 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 104.190679][ T7547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.193466][ T7547] Call Trace: [ 104.194642][ T7547] [ 104.195533][ T7547] dump_stack_lvl+0x16c/0x1f0 [ 104.196730][ T7547] should_fail_ex+0x497/0x5b0 [ 104.197970][ T7547] ? fs_reclaim_acquire+0xae/0x150 [ 104.199319][ T7547] should_failslab+0xc2/0x120 [ 104.200588][ T7547] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 104.202022][ T7547] ? __alloc_skb+0x2b3/0x380 [ 104.203108][ T7547] __alloc_skb+0x2b3/0x380 [ 104.204307][ T7547] ? __pfx___alloc_skb+0x10/0x10 [ 104.205603][ T7547] ? lock_acquire+0x2f/0xb0 [ 104.206927][ T7547] netlink_alloc_large_skb+0x69/0x130 [ 104.208466][ T7547] netlink_sendmsg+0x689/0xd70 [ 104.209889][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.211416][ T7547] ____sys_sendmsg+0x9ae/0xb40 [ 104.212796][ T7547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.213120][ T39] kauditd_printk_skb: 98 callbacks suppressed [ 104.213130][ T39] audit: type=1326 audit(104.097:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 104.214402][ T7547] ? get_compat_msghdr+0x11b/0x170 [ 104.214424][ T7547] ___sys_sendmsg+0x135/0x1e0 [ 104.214441][ T7547] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.214461][ T7547] ? __pfx_lock_release+0x10/0x10 [ 104.214470][ T7547] ? trace_lock_acquire+0x14e/0x1f0 [ 104.214488][ T7547] ? __fget_files+0x206/0x3a0 [ 104.214504][ T7547] __sys_sendmsg+0x16e/0x220 [ 104.214523][ T7547] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.214545][ T7547] __do_fast_syscall_32+0x73/0x120 [ 104.214560][ T7547] do_fast_syscall_32+0x32/0x80 [ 104.214574][ T7547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.214589][ T7547] RIP: 0023:0xf7f95579 [ 104.214599][ T7547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.214611][ T7547] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 104.214622][ T7547] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 104.214629][ T7547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.214637][ T7547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.214644][ T7547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.214650][ T7547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.214662][ T7547] [ 104.261345][ T39] audit: type=1326 audit(104.097:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 104.388962][ T7531] delete_channel: no stack [ 104.465263][ T7557] FAULT_INJECTION: forcing a failure. [ 104.465263][ T7557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.468792][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.2.437 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 104.471507][ T7557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.474945][ T7557] Call Trace: [ 104.476067][ T7557] [ 104.477133][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 104.478796][ T7557] should_fail_ex+0x497/0x5b0 [ 104.480313][ T7557] _copy_from_user+0x2e/0xd0 [ 104.481512][ T7557] get_compat_msghdr+0xa8/0x170 [ 104.483009][ T7557] ? __pfx_get_compat_msghdr+0x10/0x10 [ 104.484464][ T7557] ___sys_recvmsg+0x193/0x1a0 [ 104.485703][ T7557] ? __pfx____sys_recvmsg+0x10/0x10 [ 104.487084][ T7557] ? __fget_files+0x1fc/0x3a0 [ 104.488599][ T7557] ? trace_lock_acquire+0x14e/0x1f0 [ 104.490464][ T7557] ? __fget_files+0x206/0x3a0 [ 104.492012][ T7557] ? __pfx___might_resched+0x10/0x10 [ 104.493401][ T7557] do_recvmmsg+0x55d/0x740 [ 104.494614][ T7557] ? __pfx_do_recvmmsg+0x10/0x10 [ 104.495925][ T7557] ? vfs_write+0x306/0x1150 [ 104.497121][ T7557] ? __fget_files+0x206/0x3a0 [ 104.498344][ T7557] __sys_recvmmsg+0x21e/0x280 [ 104.499689][ T7557] ? __pfx___sys_recvmmsg+0x10/0x10 [ 104.501416][ T7557] ? __pfx_ksys_write+0x10/0x10 [ 104.503301][ T7557] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 104.505319][ T7557] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.506705][ T7557] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 104.508646][ T7557] __do_fast_syscall_32+0x73/0x120 [ 104.510472][ T7557] do_fast_syscall_32+0x32/0x80 [ 104.511971][ T7557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.513583][ T7557] RIP: 0023:0xf73de579 [ 104.515002][ T7557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.520042][ T7557] RSP: 002b:00000000f50c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 104.522166][ T7557] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020001140 [ 104.524158][ T7557] RDX: 0000000000000700 RSI: 0000000000000002 RDI: 0000000000000000 [ 104.526313][ T7557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.528932][ T7557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.532247][ T7557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.534438][ T7557] [ 104.590729][ T7562] netlink: 'syz.3.439': attribute type 39 has an invalid length. [ 104.591269][ T7568] netlink: 'syz.3.439': attribute type 39 has an invalid length. [ 104.960605][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 105.515097][ T7590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.518512][ T7590] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.523193][ T7590] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.528530][ T7590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.530370][ T7590] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.533381][ T7590] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.544395][ T7590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.546248][ T7590] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.550089][ T7590] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.554360][ T7590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.556125][ T7590] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.560912][ T7590] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.631018][ T7589] delete_channel: no stack [ 105.645149][ T7593] bridge_slave_1: left allmulticast mode [ 105.647056][ T7593] bridge_slave_1: left promiscuous mode [ 105.650872][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.657017][ T7593] bridge_slave_0: left allmulticast mode [ 105.658487][ T7593] bridge_slave_0: left promiscuous mode [ 105.659966][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.697159][ T7594] netlink: 240 bytes leftover after parsing attributes in process `syz.1.449'. [ 105.700000][ T7594] netlink: 100 bytes leftover after parsing attributes in process `syz.1.449'. [ 105.771810][ T7600] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.935502][ T7612] MINIX-fs: blocksize too small for device [ 106.284992][ T7629] qnx4: no qnx4 filesystem (no root dir). [ 106.297225][ T7629] syz.2.461: attempt to access beyond end of device [ 106.297225][ T7629] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 106.301302][ T7629] gfs2: error -5 reading superblock [ 106.753889][ T5990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 106.978130][ T7652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.466'. [ 107.034036][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.353553][ T7658] tmpfs: Unknown parameter 'usrqu>0a_inode_hardlimit' [ 107.356343][ T7658] netlink: 'syz.2.468': attribute type 39 has an invalid length. [ 107.585201][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.594081][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.594116][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 107.706190][ T39] audit: type=1326 audit(107.597:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.712674][ T39] audit: type=1326 audit(107.597:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.722824][ T39] audit: type=1326 audit(107.607:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.729338][ T39] audit: type=1326 audit(107.607:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.736078][ T39] audit: type=1326 audit(107.607:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.742415][ T39] audit: type=1326 audit(107.607:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.748315][ T39] audit: type=1326 audit(107.607:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.754307][ T39] audit: type=1326 audit(107.607:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 107.772645][ T7662] FAULT_INJECTION: forcing a failure. [ 107.772645][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 107.776591][ T7662] CPU: 1 UID: 0 PID: 7662 Comm: syz.1.470 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 107.779626][ T7662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.783213][ T7662] Call Trace: [ 107.784107][ T7662] [ 107.784839][ T7662] dump_stack_lvl+0x16c/0x1f0 [ 107.786061][ T7662] should_fail_ex+0x497/0x5b0 [ 107.787218][ T7662] ? fs_reclaim_acquire+0xae/0x150 [ 107.788509][ T7662] should_failslab+0xc2/0x120 [ 107.789920][ T7662] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 107.791659][ T7662] ? __alloc_skb+0x2b3/0x380 [ 107.793085][ T7662] __alloc_skb+0x2b3/0x380 [ 107.794750][ T7662] ? __pfx___alloc_skb+0x10/0x10 [ 107.796452][ T7662] ? aa_get_newest_label+0x376/0x680 [ 107.798184][ T7662] alloc_skb_with_frags+0xe4/0x850 [ 107.799589][ T7662] sock_alloc_send_pskb+0x7f1/0x980 [ 107.801194][ T7662] ? security_capable+0x7e/0x260 [ 107.802623][ T7662] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 107.804385][ T7662] ? msg_zerocopy_realloc+0x42f/0x890 [ 107.805827][ T7662] ? __pfx_lock_release+0x10/0x10 [ 107.807338][ T7662] __ip_append_data+0x19c7/0x4160 [ 107.808710][ T7662] ? trace_fib_table_lookup+0x1b0/0x230 [ 107.810170][ T7662] ? find_held_lock+0x2d/0x110 [ 107.811417][ T7662] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 107.812975][ T7662] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 107.814678][ T7662] ? __pfx___ip_append_data+0x10/0x10 [ 107.816066][ T7662] ip_make_skb+0x27d/0x300 [ 107.817258][ T7662] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 107.818829][ T7662] ? __pfx_ip_make_skb+0x10/0x10 [ 107.820342][ T7662] ? ip_route_output_key_hash+0x16c/0x2e0 [ 107.822081][ T7662] ? __pfx_lock_release+0x10/0x10 [ 107.823444][ T7662] ? udp_sendmsg+0x185d/0x29b0 [ 107.824710][ T7662] udp_sendmsg+0x185d/0x29b0 [ 107.825921][ T7662] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 107.827368][ T7662] ? __pfx_udp_sendmsg+0x10/0x10 [ 107.828716][ T7662] ? __kernel_text_address+0xd/0x40 [ 107.830060][ T7662] ? unwind_get_return_address+0x59/0xa0 [ 107.831526][ T7662] ? is_bpf_text_address+0x8a/0x1a0 [ 107.832883][ T7662] ? hlock_class+0x4e/0x130 [ 107.834075][ T7662] ? mark_lock+0xb5/0xc60 [ 107.835195][ T7662] udpv6_sendmsg+0xf80/0x3040 [ 107.836484][ T7662] ? __kernel_text_address+0xd/0x40 [ 107.837875][ T7662] ? unwind_get_return_address+0x59/0xa0 [ 107.839538][ T7662] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 107.841009][ T7662] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 107.842632][ T7662] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.844115][ T7662] ? __import_iovec+0x1f2/0x6d0 [ 107.845404][ T7662] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 107.846725][ T7662] ? inet6_sendmsg+0x105/0x140 [ 107.847930][ T7662] inet6_sendmsg+0x105/0x140 [ 107.849106][ T7662] ____sys_sendmsg+0x649/0xb40 [ 107.850542][ T7662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.852065][ T7662] ? get_compat_msghdr+0x11b/0x170 [ 107.853413][ T7662] ? ___sys_sendmsg+0x142/0x1e0 [ 107.854827][ T7662] ___sys_sendmsg+0x135/0x1e0 [ 107.856126][ T7662] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.857485][ T7662] ? trace_lock_acquire+0x14e/0x1f0 [ 107.859084][ T7662] ? __pfx___might_resched+0x10/0x10 [ 107.860660][ T7662] __sys_sendmmsg+0x2fa/0x420 [ 107.862116][ T7662] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.863842][ T7662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.865595][ T7662] ? fput+0x67/0x440 [ 107.866714][ T7662] ? ksys_write+0x1ba/0x250 [ 107.867941][ T7662] ? __pfx_ksys_write+0x10/0x10 [ 107.869170][ T7662] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 107.870602][ T7662] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 107.872239][ T7662] __do_fast_syscall_32+0x73/0x120 [ 107.873522][ T7662] do_fast_syscall_32+0x32/0x80 [ 107.874988][ T7662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.877003][ T7662] RIP: 0023:0xf7f95579 [ 107.878451][ T7662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.884301][ T7662] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 107.886722][ T7662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003cc0 [ 107.888805][ T7662] RDX: 0000000000000172 RSI: 0000000004000300 RDI: 0000000000000000 [ 107.890873][ T7662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.892900][ T7662] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.895209][ T7662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.897286][ T7662] [ 108.045718][ T7674] FAULT_INJECTION: forcing a failure. [ 108.045718][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 108.050317][ T7674] CPU: 2 UID: 0 PID: 7674 Comm: syz.0.475 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 108.053129][ T7674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.056297][ T7674] Call Trace: [ 108.057181][ T7674] [ 108.058079][ T7674] dump_stack_lvl+0x16c/0x1f0 [ 108.059497][ T7674] should_fail_ex+0x497/0x5b0 [ 108.060843][ T7674] ? fs_reclaim_acquire+0xae/0x150 [ 108.062463][ T7674] should_failslab+0xc2/0x120 [ 108.063732][ T7674] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 108.065446][ T7674] ? find_held_lock+0x2d/0x110 [ 108.066867][ T7674] ? getname_kernel+0x52/0x370 [ 108.068229][ T7674] getname_kernel+0x52/0x370 [ 108.069597][ T7674] kern_path+0x1d/0x50 [ 108.070809][ T7674] lookup_bdev+0xd9/0x280 [ 108.072119][ T7674] ? __pfx_lookup_bdev+0x10/0x10 [ 108.073620][ T7674] ? mntput_no_expire+0x158/0xaf0 [ 108.075225][ T7674] ? do_raw_spin_lock+0x12d/0x2c0 [ 108.076940][ T7674] bdev_file_open_by_path+0x83/0x330 [ 108.078729][ T7674] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 108.081051][ T7674] btrfs_scan_one_device+0x28b/0xa80 [ 108.083116][ T7674] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 108.084784][ T7674] btrfs_get_tree+0x3ee/0x1b20 [ 108.086722][ T7674] ? __pfx_btrfs_get_tree+0x10/0x10 [ 108.088354][ T7674] ? rcu_is_watching+0x12/0xc0 [ 108.089656][ T7674] ? lockdep_init_map_type+0x16d/0x7d0 [ 108.091510][ T7674] ? lockdep_init_map_type+0x16d/0x7d0 [ 108.093370][ T7674] ? __raw_spin_lock_init+0x3a/0x110 [ 108.096170][ T7674] vfs_get_tree+0x8f/0x380 [ 108.097476][ T7674] fc_mount+0x16/0xc0 [ 108.098950][ T7674] btrfs_get_tree+0xa53/0x1b20 [ 108.100594][ T7674] ? __pfx_aa_get_newest_label+0x10/0x10 [ 108.102117][ T7674] ? __pfx_btrfs_get_tree+0x10/0x10 [ 108.103713][ T7674] ? apparmor_capable+0x114/0x1d0 [ 108.105402][ T7674] ? bpf_lsm_capable+0x9/0x10 [ 108.106694][ T7674] vfs_get_tree+0x8f/0x380 [ 108.107901][ T7674] path_mount+0x6e1/0x1f10 [ 108.109109][ T7674] ? kmem_cache_free+0x152/0x4c0 [ 108.110502][ T7674] ? __pfx_path_mount+0x10/0x10 [ 108.111850][ T7674] ? putname+0x13c/0x180 [ 108.113026][ T7674] __ia32_sys_mount+0x292/0x310 [ 108.114646][ T7674] ? __pfx___ia32_sys_mount+0x10/0x10 [ 108.116259][ T7674] __do_fast_syscall_32+0x73/0x120 [ 108.117738][ T7674] do_fast_syscall_32+0x32/0x80 [ 108.119103][ T7674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.120863][ T7674] RIP: 0023:0xf73be579 [ 108.122078][ T7674] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.128429][ T7674] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 108.131401][ T7674] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000100 [ 108.133646][ T7674] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.135973][ T7674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.138780][ T7674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.141417][ T7674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.143834][ T7674] [ 108.276456][ T7685] netlink: 180 bytes leftover after parsing attributes in process `syz.0.477'. [ 108.495321][ T7692] input: syz0 as /devices/virtual/input/input8 [ 108.743972][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 108.746747][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.480'. [ 109.114015][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.664031][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 109.665578][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.666356][ T5298] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.995531][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 109.995545][ T39] audit: type=1326 audit(109.887:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.012189][ T39] audit: type=1326 audit(109.887:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.020726][ T39] audit: type=1326 audit(109.897:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.028834][ T39] audit: type=1326 audit(109.897:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.037399][ T39] audit: type=1326 audit(109.897:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.046102][ T39] audit: type=1326 audit(109.897:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.054627][ T39] audit: type=1326 audit(109.897:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.062405][ T39] audit: type=1326 audit(109.897:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.068467][ T39] audit: type=1326 audit(109.897:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.075417][ T39] audit: type=1326 audit(109.897:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.1.486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 110.092799][ T7726] netlink: 180 bytes leftover after parsing attributes in process `syz.3.488'. [ 110.811358][ T7752] FAULT_INJECTION: forcing a failure. [ 110.811358][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 110.812070][ T7753] pim6reg1: entered promiscuous mode [ 110.815106][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.1.496 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 110.815149][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.815157][ T7752] Call Trace: [ 110.815162][ T7752] [ 110.815167][ T7752] dump_stack_lvl+0x116/0x1f0 [ 110.815188][ T7752] should_fail_ex+0x497/0x5b0 [ 110.815207][ T7752] should_failslab+0xc2/0x120 [ 110.815230][ T7752] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 110.815248][ T7752] ? __send_signal_locked+0x159/0x11a0 [ 110.815270][ T7752] __send_signal_locked+0x159/0x11a0 [ 110.815292][ T7752] group_send_sig_info+0x2aa/0x300 [ 110.815308][ T7752] ? __pfx_group_send_sig_info+0x10/0x10 [ 110.815323][ T7752] ? mark_lock+0xb5/0xc60 [ 110.815342][ T7752] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.815359][ T7752] bpf_send_signal_common+0x415/0x520 [ 110.815377][ T7752] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 110.815395][ T7752] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 110.815408][ T7752] ? trace_lock_acquire+0x14e/0x1f0 [ 110.815423][ T7752] ? p9_tag_alloc+0x4cc/0x870 [ 110.815439][ T7752] ? bpf_trace_run2+0x1c2/0x590 [ 110.815459][ T7752] bpf_send_signal+0x1d/0x30 [ 110.815475][ T7752] bpf_prog_08a3eec595063fdb+0x23/0x25 [ 110.815486][ T7752] bpf_trace_run2+0x34c/0x590 [ 110.815503][ T7752] ? p9pdu_writef+0xc4/0x100 [ 110.815520][ T7752] ? __pfx_bpf_trace_run2+0x10/0x10 [ 110.815539][ T7752] ? __pfx_p9_tag_alloc+0x10/0x10 [ 110.815553][ T7752] ? hlock_class+0x4e/0x130 [ 110.815570][ T7752] trace_9p_protocol_dump+0x158/0x220 [ 110.815589][ T7752] p9pdu_finalize+0x7c/0xa0 [ 110.815607][ T7752] p9_client_prepare_req+0x269/0x4d0 [ 110.815623][ T7752] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 110.815641][ T7752] ? hlock_class+0x4e/0x130 [ 110.815655][ T7752] ? mark_lock+0xb5/0xc60 [ 110.815672][ T7752] ? __pfx___lock_acquire+0x10/0x10 [ 110.815693][ T7752] p9_client_rpc+0x1c3/0xc10 [ 110.822023][ T7753] pim6reg1: entered allmulticast mode [ 110.823963][ T7752] ? __pfx_p9_client_rpc+0x10/0x10 [ 110.823984][ T7752] ? find_held_lock+0x2d/0x110 [ 110.824008][ T7752] ? p9_fid_create+0x26a/0x470 [ 110.824023][ T7752] ? __pfx_lock_release+0x10/0x10 [ 110.878603][ T7752] ? mark_held_locks+0x9f/0xe0 [ 110.879839][ T7752] ? trace_9p_fid_ref+0x179/0x1f0 [ 110.881167][ T7752] p9_client_walk+0x1ad/0x540 [ 110.882404][ T7752] ? v9fs_vfs_lookup+0xd8/0x5c0 [ 110.883730][ T7752] ? __pfx_p9_client_walk+0x10/0x10 [ 110.885197][ T7752] ? v9fs_fid_lookup+0xe9/0xec0 [ 110.886630][ T7752] v9fs_vfs_atomic_open_dotl+0x344/0xd60 [ 110.888249][ T7752] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 110.890027][ T7752] ? map_id_up+0x290/0x370 [ 110.891319][ T7752] ? make_vfsuid+0xf1/0x140 [ 110.892638][ T7752] ? apparmor_path_mknod+0x16b/0x460 [ 110.894153][ T7752] ? generic_permission+0xad/0x7d0 [ 110.895580][ T7752] ? inode_permission+0xdd/0x5f0 [ 110.896928][ T7752] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 110.898545][ T7752] lookup_open.isra.0+0xc9f/0x14c0 [ 110.899866][ T7752] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 110.901314][ T7752] ? copy_huge_pmd+0x2320/0x2400 [ 110.902737][ T7752] ? lock_acquire+0x2f/0xb0 [ 110.903937][ T7752] ? path_openat+0x153e/0x2d60 [ 110.905264][ T7752] ? copy_huge_pmd+0x2320/0x2400 [ 110.907032][ T7752] ? __pfx_down_write+0x10/0x10 [ 110.908976][ T7752] ? mnt_get_write_access+0x20c/0x300 [ 110.910585][ T7752] path_openat+0x904/0x2d60 [ 110.911942][ T7752] ? __pfx_path_openat+0x10/0x10 [ 110.913385][ T7752] ? __pfx___lock_acquire+0x10/0x10 [ 110.915257][ T7752] ? lock_acquire.part.0+0x11b/0x380 [ 110.916809][ T7752] ? find_held_lock+0x2d/0x110 [ 110.918016][ T7752] do_filp_open+0x20c/0x470 [ 110.919176][ T7752] ? __pfx_do_filp_open+0x10/0x10 [ 110.920488][ T7752] ? find_held_lock+0x2d/0x110 [ 110.921775][ T7752] ? alloc_fd+0x41f/0x760 [ 110.922920][ T7752] do_sys_openat2+0x17a/0x1e0 [ 110.924145][ T7752] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.925504][ T7752] ? __fget_files+0x206/0x3a0 [ 110.927104][ T7752] __ia32_compat_sys_openat+0x16e/0x210 [ 110.929035][ T7752] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 110.930626][ T7752] ? ksys_write+0x1ba/0x250 [ 110.931817][ T7752] __do_fast_syscall_32+0x73/0x120 [ 110.933157][ T7752] do_fast_syscall_32+0x32/0x80 [ 110.934552][ T7752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.936818][ T7752] RIP: 0023:0xf7f95579 [ 110.938275][ T7752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.943450][ T7752] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 110.945512][ T7752] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 110.947597][ T7752] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 110.949642][ T7752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.952070][ T7752] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.954139][ T7752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.956327][ T7752] [ 111.140740][ T7764] netlink: 'syz.1.498': attribute type 2 has an invalid length. [ 111.144157][ T7762] netlink: 180 bytes leftover after parsing attributes in process `syz.0.501'. [ 111.193177][ T5298] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 111.196372][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.197644][ T7765] netlink: 180 bytes leftover after parsing attributes in process `syz.2.500'. [ 111.398968][ T7776] overlayfs: conflicting lowerdir path [ 111.630447][ T7787] netlink: 168 bytes leftover after parsing attributes in process `syz.0.506'. [ 111.649103][ T5990] kernel write not supported for file task/446/attr/sockcreate (pid: 5990 comm: kworker/1:3) [ 111.754241][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.756266][ T5298] Bluetooth: hci3: command 0x0405 tx timeout [ 111.899264][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 111.902697][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 111.907002][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'. [ 111.910414][ T7799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.511'. [ 111.913875][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 112.671891][ T7808] netlink: 180 bytes leftover after parsing attributes in process `syz.1.514'. [ 113.449191][ T7831] overlayfs: failed to resolve './file1': -2 [ 115.267018][ T5298] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 115.273051][ T5298] Bluetooth: hci2: Injecting HCI hardware error event [ 115.278362][ T5298] Bluetooth: hci2: hardware error 0x00 [ 115.494369][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 115.572273][ T7883] __nla_validate_parse: 3 callbacks suppressed [ 115.572285][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 115.654311][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 115.657957][ T62] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 115.660082][ T62] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.666615][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.668729][ T7881] netlink: 180 bytes leftover after parsing attributes in process `syz.3.534'. [ 115.671151][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.682098][ T62] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.686215][ T62] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.688688][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.894363][ T62] usb 7-1: GET_CAPABILITIES returned 0 [ 115.895969][ T62] usbtmc 7-1:16.0: can't read capabilities [ 115.913893][ T39] kauditd_printk_skb: 134 callbacks suppressed [ 115.913904][ T39] audit: type=1326 audit(115.797:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 115.923532][ T39] audit: type=1326 audit(115.797:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 115.929543][ T39] audit: type=1326 audit(115.807:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.534" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 115.936592][ T39] audit: type=1326 audit(115.807:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 115.942469][ T39] audit: type=1326 audit(115.807:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 115.953005][ T39] audit: type=1326 audit(115.847:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 115.960810][ T39] audit: type=1326 audit(115.847:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 115.967350][ T39] audit: type=1326 audit(115.847:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.536" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 115.973100][ T39] audit: type=1326 audit(115.847:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 115.979849][ T39] audit: type=1326 audit(115.847:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.536" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 116.099909][ T63] usb 7-1: USB disconnect, device number 5 [ 116.897381][ T7900] netlink: 216 bytes leftover after parsing attributes in process `syz.2.540'. [ 116.900321][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 116.902806][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 116.989178][ T7902] netlink: 180 bytes leftover after parsing attributes in process `syz.3.541'. [ 117.355140][ T5298] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 118.203999][ T7965] [U] [ 118.204872][ T7965] [U] [ 118.205762][ T7965] [U] [ 118.206495][ T7965] [U] [ 118.207305][ T7965] [U] [ 118.208031][ T7965] [U] [ 118.208767][ T7965] [U] [ 118.209497][ T7965] [U] [ 118.210325][ T7965] [U] [ 118.211073][ T7965] [U] [ 118.211799][ T7965] [U] [ 118.212527][ T7965] [U] [ 118.213344][ T7965] [U] [ 118.214372][ T7965] [U] [ 118.215247][ T7965] [U] [ 118.216036][ T7965] [U] [ 118.218177][ T7965] [U] [ 118.219291][ T7965] [U] [ 118.220278][ T7965] [U] [ 118.221245][ T7965] [U] [ 118.223138][ T7965] [U] [ 118.224093][ T7965] [U] [ 118.224866][ T7965] [U] [ 118.225616][ T7965] [U] [ 118.226909][ T7965] [U] [ 118.227720][ T7965] [U] [ 118.228479][ T7965] [U] [ 118.229238][ T7965] [U] [ 118.230098][ T7965] [U] [ 118.230854][ T7965] [U] [ 118.231630][ T7965] [U] [ 118.232453][ T7965] [U] [ 118.233340][ T7965] [U] [ 118.234471][ T7965] [U] [ 118.235363][ T7965] [U] [ 118.236252][ T7965] [U] [ 118.238834][ T7965] [U] [ 118.239918][ T7965] [U] [ 118.240861][ T7965] [U] [ 118.241810][ T7965] [U] [ 118.242885][ T7965] [U] [ 118.243662][ T7965] [U] [ 118.244434][ T7965] [U] [ 118.245173][ T7965] [U] [ 118.246531][ T7965] [U] [ 118.247299][ T7965] [U] [ 118.248043][ T7965] [U] [ 118.248788][ T7965] [U] [ 118.249643][ T7965] [U] [ 118.250381][ T7965] [U] [ 118.251147][ T7965] [U] [ 118.251888][ T7965] [U] [ 118.252679][ T7965] [U] [ 118.253438][ T7965] [U] [ 118.254172][ T7965] [U] [ 118.254685][ T7966] netlink: 'syz.3.550': attribute type 27 has an invalid length. [ 118.254900][ T7965] [U] [ 118.258842][ T7965] [U] [ 118.259855][ T7965] [U] [ 118.260602][ T7965] [U] [ 118.261336][ T7965] [U] [ 118.262214][ T7965] [U] [ 118.262985][ T7965] [U] [ 118.263759][ T7965] [U] [ 118.264520][ T7965] [U] [ 118.265432][ T7965] [U] [ 118.266294][ T7965] [U] [ 118.267130][ T7965] [U] [ 118.267960][ T7965] [U] [ 118.268888][ T7965] [U] [ 118.269739][ T7965] [U] [ 118.270554][ T7965] [U] [ 118.271365][ T7965] [U] [ 118.272221][ T7965] [U] [ 118.272960][ T7965] [U] [ 118.273697][ T7965] [U] [ 118.274425][ T7965] [U] [ 118.275358][ T7965] [U] [ 118.276092][ T7965] [U] [ 118.276833][ T7965] [U] [ 118.277569][ T7965] [U] [ 118.278404][ T7965] [U] [ 118.279142][ T7965] [U] [ 118.279881][ T7965] [U] [ 118.280627][ T7965] [U] [ 118.281425][ T7965] [U] [ 118.282165][ T7965] [U] [ 118.282899][ T7965] [U] [ 118.283640][ T7965] [U] [ 118.284530][ T7965] [U] [ 118.285268][ T7965] [U] [ 118.286029][ T7965] [U] [ 118.286892][ T7965] [U] [ 118.287784][ T7965] [U] [ 118.288556][ T7965] [U] [ 118.289339][ T7965] [U] [ 118.290134][ T7965] [U] [ 118.291038][ T7965] [U] [ 118.291830][ T7965] [U] [ 118.292639][ T7965] [U] [ 118.293440][ T7965] [U] [ 118.294536][ T7965] [U] [ 118.295563][ T7965] [U] [ 118.296415][ T7965] [U] [ 118.297287][ T7965] [U] [ 118.298618][ T7965] [U] [ 118.299371][ T7965] [U] [ 118.300124][ T7965] [U] [ 118.300997][ T7965] [U] [ 118.302158][ T7965] [U] [ 118.303018][ T7965] [U] [ 118.303750][ T7965] [U] [ 118.304367][ T5298] Bluetooth: hci3: command 0x0405 tx timeout [ 118.304478][ T7965] [U] [ 118.307004][ T7965] [U] [ 118.307731][ T7965] [U] [ 118.308615][ T7965] [U] [ 118.309394][ T7965] [U] [ 118.310563][ T7965] [U] [ 118.311313][ T7965] [U] [ 118.312040][ T7965] [U] [ 118.312768][ T7965] [U] [ 118.313753][ T7965] [U] [ 118.314875][ T7965] [U] [ 118.315746][ T7965] [U] [ 118.316760][ T7965] [U] [ 118.318054][ T7965] [U] [ 118.318699][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.318992][ T7965] [U] [ 118.321287][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.322084][ T7965] [U] [ 118.332344][ T7966] tipc: Resetting bearer [ 118.380661][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.381130][ T7965] [U] [ 118.390070][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.414296][ T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 118.445831][ T7966] tipc: Resetting bearer [ 118.448163][ T7966] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.450491][ T7966] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.452812][ T7966] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.457281][ T7966] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.462234][ T7966] vlan2: left allmulticast mode [ 118.477933][ T1173] [ 118.478714][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.479341][ T1173] ============================= [ 118.482527][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.482750][ T1173] WARNING: suspicious RCU usage [ 118.486267][ T7967] tipc: Resetting bearer [ 118.486960][ T1173] 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 Not tainted [ 118.492516][ T1173] ----------------------------- [ 118.492523][ T1173] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 118.492532][ T1173] [ 118.492532][ T1173] other info that might help us debug this: [ 118.492532][ T1173] [ 118.492536][ T1173] [ 118.492536][ T1173] rcu_scheduler_active = 2, debug_locks = 1 [ 118.496882][ T1173] 3 locks held by kworker/u32:10/1173: [ 118.496894][ T1173] #0: ffff888065762948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 118.508587][ T1173] #1: ffffc90006a5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 118.511861][ T1173] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 118.515102][ T1173] [ 118.515102][ T1173] stack backtrace: [ 118.516797][ T1173] CPU: 2 UID: 0 PID: 1173 Comm: kworker/u32:10 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.519584][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.522371][ T1173] Workqueue: bond0 bond_mii_monitor [ 118.523729][ T1173] Call Trace: [ 118.524614][ T1173] [ 118.525389][ T1173] dump_stack_lvl+0x16c/0x1f0 [ 118.526630][ T1173] lockdep_rcu_suspicious+0x210/0x3c0 [ 118.528197][ T1173] dev_deactivate_queue+0x167/0x190 [ 118.529649][ T1173] dev_deactivate_many+0xe7/0xb20 [ 118.530962][ T1173] dev_deactivate+0xf9/0x1c0 [ 118.532166][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 118.533525][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.535038][ T1173] linkwatch_do_dev+0x11e/0x160 [ 118.536327][ T1173] linkwatch_sync_dev+0x181/0x210 [ 118.537716][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.539269][ T1173] ethtool_op_get_link+0x1d/0x70 [ 118.540627][ T1173] bond_check_dev_link+0x197/0x430 [ 118.541976][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.543437][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 118.544737][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.546185][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.547834][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.549019][ T1173] ? process_one_work+0x8bb/0x1b30 [ 118.550352][ T1173] process_one_work+0x958/0x1b30 [ 118.551680][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.553375][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 118.555118][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.556615][ T1173] ? assign_work+0x1a0/0x250 [ 118.558281][ T1173] worker_thread+0x6c8/0xf00 [ 118.560329][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 118.562262][ T1173] kthread+0x2c1/0x3a0 [ 118.563555][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.565082][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.566400][ T1173] ret_from_fork+0x45/0x80 [ 118.567730][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.568978][ T1173] ret_from_fork_asm+0x1a/0x30 [ 118.570280][ T1173] [ 118.571148][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 118.575672][ T1173] [ 118.576381][ T1173] ============================= [ 118.577974][ T1173] WARNING: suspicious RCU usage [ 118.579373][ T1173] 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 Not tainted [ 118.579687][ T62] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 118.581202][ T1173] ----------------------------- [ 118.581208][ T1173] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 118.584577][ T62] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.585513][ T1173] [ 118.585513][ T1173] other info that might help us debug this: [ 118.585513][ T1173] [ 118.585520][ T1173] [ 118.585520][ T1173] rcu_scheduler_active = 2, debug_locks = 1 [ 118.588451][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.591333][ T1173] 3 locks held by kworker/u32:10/1173: [ 118.601661][ T1173] #0: ffff888065762948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 118.604345][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.604601][ T1173] #1: [ 118.607102][ T62] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.607843][ T1173] ffffc90006a5fd80 [ 118.611057][ T62] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.612023][ T1173] ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 118.616884][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.618041][ T1173] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 118.623007][ T1173] [ 118.623007][ T1173] stack backtrace: [ 118.624639][ T1173] CPU: 0 UID: 0 PID: 1173 Comm: kworker/u32:10 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.627490][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.630693][ T1173] Workqueue: bond0 bond_mii_monitor [ 118.632076][ T1173] Call Trace: [ 118.632971][ T1173] [ 118.633787][ T1173] dump_stack_lvl+0x16c/0x1f0 [ 118.635082][ T1173] lockdep_rcu_suspicious+0x210/0x3c0 [ 118.636783][ T1173] dev_deactivate_many+0x8af/0xb20 [ 118.638362][ T1173] dev_deactivate+0xf9/0x1c0 [ 118.639764][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 118.641388][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.643261][ T1173] linkwatch_do_dev+0x11e/0x160 [ 118.644643][ T1173] linkwatch_sync_dev+0x181/0x210 [ 118.645981][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.647445][ T1173] ethtool_op_get_link+0x1d/0x70 [ 118.648747][ T1173] bond_check_dev_link+0x197/0x430 [ 118.650099][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.651594][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 118.652912][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.654466][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.655778][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.657057][ T1173] ? process_one_work+0x8bb/0x1b30 [ 118.658501][ T1173] process_one_work+0x958/0x1b30 [ 118.659843][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.661410][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 118.662788][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.664164][ T1173] ? assign_work+0x1a0/0x250 [ 118.665406][ T1173] worker_thread+0x6c8/0xf00 [ 118.666651][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 118.668050][ T1173] kthread+0x2c1/0x3a0 [ 118.669179][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.670581][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.671840][ T1173] ret_from_fork+0x45/0x80 [ 118.673134][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.674729][ T1173] ret_from_fork_asm+0x1a/0x30 [ 118.676137][ T1173] [ 118.679693][ T1173] BUG: sleeping function called from invalid context at net/core/dev.c:11397 [ 118.682373][ T1173] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1173, name: kworker/u32:10 [ 118.684786][ T1173] preempt_count: 0, expected: 0 [ 118.687395][ T1173] RCU nest depth: 1, expected: 0 [ 118.689243][ T1173] 3 locks held by kworker/u32:10/1173: [ 118.691686][ T1173] #0: ffff888065762948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 118.697807][ T1173] #1: ffffc90006a5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 118.703063][ T1173] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 118.706057][ T1173] CPU: 2 UID: 0 PID: 1173 Comm: kworker/u32:10 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.708963][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.711883][ T1173] Workqueue: bond0 bond_mii_monitor [ 118.713364][ T1173] Call Trace: [ 118.714369][ T1173] [ 118.715276][ T1173] dump_stack_lvl+0x16c/0x1f0 [ 118.716621][ T1173] __might_resched+0x3c0/0x5e0 [ 118.718199][ T1173] ? __pfx___might_resched+0x10/0x10 [ 118.720632][ T1173] synchronize_net+0x1b/0x60 [ 118.722388][ T1173] dev_deactivate_many+0x2a1/0xb20 [ 118.723858][ T1173] dev_deactivate+0xf9/0x1c0 [ 118.725085][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 118.726492][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.728143][ T1173] linkwatch_do_dev+0x11e/0x160 [ 118.729512][ T1173] linkwatch_sync_dev+0x181/0x210 [ 118.730932][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.732498][ T1173] ethtool_op_get_link+0x1d/0x70 [ 118.733926][ T1173] bond_check_dev_link+0x197/0x430 [ 118.735376][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.736831][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 118.738153][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.740008][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.741347][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.742677][ T1173] ? process_one_work+0x8bb/0x1b30 [ 118.744051][ T1173] process_one_work+0x958/0x1b30 [ 118.745385][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.746854][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 118.748475][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.749776][ T1173] ? assign_work+0x1a0/0x250 [ 118.751026][ T1173] worker_thread+0x6c8/0xf00 [ 118.752308][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 118.753780][ T1173] kthread+0x2c1/0x3a0 [ 118.754919][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.756762][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.758635][ T1173] ret_from_fork+0x45/0x80 [ 118.760285][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.761765][ T1173] ret_from_fork_asm+0x1a/0x30 [ 118.763235][ T1173] [ 118.764243][ T1173] [ 118.764889][ T1173] ============================= [ 118.766178][ T1173] WARNING: suspicious RCU usage [ 118.767451][ T1173] 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 Tainted: G W [ 118.769858][ T1173] ----------------------------- [ 118.771246][ T1173] kernel/rcu/tree_exp.h:946 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 118.774415][ T1173] [ 118.774415][ T1173] other info that might help us debug this: [ 118.774415][ T1173] [ 118.777333][ T1173] [ 118.777333][ T1173] rcu_scheduler_active = 2, debug_locks = 1 [ 118.779730][ T1173] 3 locks held by kworker/u32:10/1173: [ 118.781389][ T1173] #0: ffff888065762948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 118.784626][ T1173] #1: ffffc90006a5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 118.787892][ T1173] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 118.790497][ T1173] [ 118.790497][ T1173] stack backtrace: [ 118.792047][ T1173] CPU: 2 UID: 0 PID: 1173 Comm: kworker/u32:10 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.795628][ T1173] Tainted: [W]=WARN [ 118.796649][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.799837][ T1173] Workqueue: bond0 bond_mii_monitor [ 118.801450][ T1173] Call Trace: [ 118.802628][ T1173] [ 118.803446][ T1173] dump_stack_lvl+0x16c/0x1f0 [ 118.804772][ T1173] lockdep_rcu_suspicious+0x210/0x3c0 [ 118.806291][ T1173] synchronize_rcu_expedited+0x1e5/0x450 [ 118.808034][ T1173] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 118.809683][ T1173] ? dump_stack_lvl+0x1a1/0x1f0 [ 118.810946][ T1173] ? dump_stack_lvl+0x1a3/0x1f0 [ 118.812212][ T1173] ? add_taint+0x5f/0xd0 [ 118.813343][ T1173] ? __pfx___might_resched+0x10/0x10 [ 118.814996][ T1173] synchronize_net+0x3e/0x60 [ 118.816495][ T1173] dev_deactivate_many+0x2a1/0xb20 [ 118.818148][ T1173] dev_deactivate+0xf9/0x1c0 [ 118.819734][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 118.821136][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.822700][ T1173] linkwatch_do_dev+0x11e/0x160 [ 118.823578][ T62] usb 7-1: GET_CAPABILITIES returned 0 [ 118.824030][ T1173] linkwatch_sync_dev+0x181/0x210 [ 118.824050][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.824063][ T1173] ethtool_op_get_link+0x1d/0x70 [ 118.824074][ T1173] bond_check_dev_link+0x197/0x430 [ 118.824093][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.824112][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 118.824130][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.824144][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.824160][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.824169][ T1173] ? process_one_work+0x8bb/0x1b30 [ 118.824182][ T1173] process_one_work+0x958/0x1b30 [ 118.824196][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.824206][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 118.824222][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.824238][ T1173] ? assign_work+0x1a0/0x250 [ 118.824254][ T1173] worker_thread+0x6c8/0xf00 [ 118.824270][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 118.824280][ T1173] kthread+0x2c1/0x3a0 [ 118.824291][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.824303][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.824316][ T1173] ret_from_fork+0x45/0x80 [ 118.824326][ T1173] ? __pfx_kthread+0x10/0x10 [ 118.824338][ T1173] ret_from_fork_asm+0x1a/0x30 [ 118.824360][ T1173] [ 118.825961][ T62] usbtmc 7-1:16.0: can't read capabilities [ 118.831252][ T1173] ------------[ cut here ]------------ [ 118.861836][ T1173] Voluntary context switch within RCU read-side critical section! [ 118.861898][ T1173] WARNING: CPU: 2 PID: 1173 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 [ 118.866838][ T1173] Modules linked in: [ 118.867939][ T1173] CPU: 2 UID: 0 PID: 1173 Comm: kworker/u32:10 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.871105][ T1173] Tainted: [W]=WARN [ 118.872102][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.875031][ T1173] Workqueue: bond0 bond_mii_monitor [ 118.876441][ T1173] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 118.878575][ T1173] Code: 7b 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 ef 7c 84 0e 01 90 48 c7 c7 20 a4 4e 8b e8 45 3e d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 118.884439][ T1173] RSP: 0018:ffffc90006a5f4f8 EFLAGS: 00010086 [ 118.886043][ T1173] RAX: 0000000000000000 RBX: ffff88802b63fcc0 RCX: ffffffff815a1789 [ 118.888305][ T1173] RDX: ffff88801f4b4880 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 118.890377][ T1173] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 118.892626][ T1173] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88801f4b4880 [ 118.894923][ T1173] R13: ffff88801f4b4880 R14: ffff88801f4b4880 R15: ffff88802b63ed00 [ 118.897223][ T1173] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 118.899837][ T1173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.901903][ T1173] CR2: 0000000020931000 CR3: 000000001fa7a000 CR4: 0000000000352ef0 [ 118.904214][ T1173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.906733][ T1173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.908728][ T1173] Call Trace: [ 118.909574][ T1173] [ 118.910352][ T1173] ? __warn+0xea/0x3c0 [ 118.911390][ T1173] ? hlock_class+0x4e/0x130 [ 118.912579][ T1173] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 118.914126][ T1173] ? report_bug+0x3c0/0x580 [ 118.915396][ T1173] ? handle_bug+0x54/0xa0 [ 118.916543][ T1173] ? exc_invalid_op+0x17/0x50 [ 118.917847][ T1173] ? asm_exc_invalid_op+0x1a/0x20 [ 118.919288][ T1173] ? __warn_printk+0x199/0x350 [ 118.920728][ T1173] ? __warn_printk+0x1a6/0x350 [ 118.922197][ T1173] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 118.924012][ T1173] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 118.925796][ T1173] ? schedule+0xe7/0x350 [ 118.926944][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.928315][ T1173] ? schedule+0xe7/0x350 [ 118.929439][ T1173] __schedule+0x297/0x5ad0 [ 118.930632][ T1173] ? __pfx___lock_acquire+0x10/0x10 [ 118.932001][ T1173] ? find_held_lock+0x2d/0x110 [ 118.933267][ T1173] ? __pfx___schedule+0x10/0x10 [ 118.934837][ T1173] ? schedule+0x298/0x350 [ 118.936405][ T1173] ? __pfx_lock_release+0x10/0x10 [ 118.938125][ T1173] ? trace_lock_acquire+0x14e/0x1f0 [ 118.939726][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.941225][ T1173] ? schedule+0x1fd/0x350 [ 118.943027][ T1173] schedule+0xe7/0x350 [ 118.944640][ T1173] exp_funnel_lock+0x344/0x3b0 [ 118.946456][ T1173] ? __pfx_exp_funnel_lock+0x10/0x10 [ 118.948387][ T1173] ? __pfx_autoremove_wake_function+0x10/0x10 [ 118.950660][ T1173] ? __pfx___might_resched+0x10/0x10 [ 118.952583][ T1173] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 118.955002][ T1173] synchronize_rcu_expedited+0x290/0x450 [ 118.957308][ T1173] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 118.959761][ T1173] ? dump_stack_lvl+0x1a1/0x1f0 [ 118.961877][ T1173] ? dump_stack_lvl+0x1a3/0x1f0 [ 118.963512][ T1173] ? add_taint+0x5f/0xd0 [ 118.964787][ T1173] ? __pfx___might_resched+0x10/0x10 [ 118.966329][ T1173] synchronize_net+0x3e/0x60 [ 118.967745][ T1173] dev_deactivate_many+0x2a1/0xb20 [ 118.969144][ T1173] dev_deactivate+0xf9/0x1c0 [ 118.970428][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 118.971868][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.973421][ T1173] linkwatch_do_dev+0x11e/0x160 [ 118.975011][ T1173] linkwatch_sync_dev+0x181/0x210 [ 118.976419][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.978058][ T1173] ethtool_op_get_link+0x1d/0x70 [ 118.979398][ T1173] bond_check_dev_link+0x197/0x430 [ 118.981171][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.982742][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 118.984109][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.985632][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.986757][ T1173] ? lock_acquire+0x2f/0xb0 [ 118.988179][ T1173] ? process_one_work+0x8bb/0x1b30 [ 118.989663][ T1173] process_one_work+0x958/0x1b30 [ 118.991055][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.992820][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 118.995101][ T1173] ? rcu_is_watching+0x12/0xc0 [ 118.997062][ T1173] ? assign_work+0x1a0/0x250 [ 118.998977][ T1173] worker_thread+0x6c8/0xf00 [ 119.001228][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 119.003321][ T1173] kthread+0x2c1/0x3a0 [ 119.004803][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.006681][ T1173] ? __pfx_kthread+0x10/0x10 [ 119.008391][ T1173] ret_from_fork+0x45/0x80 [ 119.010129][ T1173] ? __pfx_kthread+0x10/0x10 [ 119.011972][ T1173] ret_from_fork_asm+0x1a/0x30 [ 119.014007][ T1173] [ 119.015435][ T1173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.017930][ T1173] CPU: 2 UID: 0 PID: 1173 Comm: kworker/u32:10 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 119.021440][ T1173] Tainted: [W]=WARN [ 119.022665][ T1173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.025541][ T1173] Workqueue: bond0 bond_mii_monitor [ 119.026912][ T1173] Call Trace: [ 119.027867][ T1173] [ 119.028648][ T1173] dump_stack_lvl+0x3d/0x1f0 [ 119.029885][ T1173] panic+0x71d/0x800 [ 119.030923][ T1173] ? __pfx_panic+0x10/0x10 [ 119.032128][ T1173] ? show_trace_log_lvl+0x29d/0x3d0 [ 119.033606][ T1173] ? check_panic_on_warn+0x1f/0xb0 [ 119.035061][ T1173] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 119.036647][ T1173] check_panic_on_warn+0xab/0xb0 [ 119.038078][ T1173] __warn+0xf6/0x3c0 [ 119.039476][ T1173] ? hlock_class+0x4e/0x130 [ 119.041076][ T1173] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 119.043033][ T1173] report_bug+0x3c0/0x580 [ 119.044193][ T1173] handle_bug+0x54/0xa0 [ 119.045319][ T1173] exc_invalid_op+0x17/0x50 [ 119.046528][ T1173] asm_exc_invalid_op+0x1a/0x20 [ 119.047822][ T1173] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 119.049482][ T1173] Code: 7b 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 ef 7c 84 0e 01 90 48 c7 c7 20 a4 4e 8b e8 45 3e d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 119.054927][ T1173] RSP: 0018:ffffc90006a5f4f8 EFLAGS: 00010086 [ 119.056516][ T1173] RAX: 0000000000000000 RBX: ffff88802b63fcc0 RCX: ffffffff815a1789 [ 119.058580][ T1173] RDX: ffff88801f4b4880 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 119.060636][ T1173] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 119.062950][ T1173] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88801f4b4880 [ 119.065076][ T1173] R13: ffff88801f4b4880 R14: ffff88801f4b4880 R15: ffff88802b63ed00 [ 119.067140][ T1173] ? __warn_printk+0x199/0x350 [ 119.068480][ T1173] ? __warn_printk+0x1a6/0x350 [ 119.069821][ T1173] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 119.071455][ T1173] ? schedule+0xe7/0x350 [ 119.072638][ T1173] ? rcu_is_watching+0x12/0xc0 [ 119.074139][ T1173] ? schedule+0xe7/0x350 [ 119.075882][ T1173] __schedule+0x297/0x5ad0 [ 119.077211][ T1173] ? __pfx___lock_acquire+0x10/0x10 [ 119.078614][ T1173] ? find_held_lock+0x2d/0x110 [ 119.079894][ T1173] ? __pfx___schedule+0x10/0x10 [ 119.081252][ T1173] ? schedule+0x298/0x350 [ 119.082409][ T1173] ? __pfx_lock_release+0x10/0x10 [ 119.083851][ T1173] ? trace_lock_acquire+0x14e/0x1f0 [ 119.085276][ T1173] ? lock_acquire+0x2f/0xb0 [ 119.086530][ T1173] ? schedule+0x1fd/0x350 [ 119.087717][ T1173] schedule+0xe7/0x350 [ 119.088851][ T1173] exp_funnel_lock+0x344/0x3b0 [ 119.090166][ T1173] ? __pfx_exp_funnel_lock+0x10/0x10 [ 119.091603][ T1173] ? __pfx_autoremove_wake_function+0x10/0x10 [ 119.093264][ T1173] ? __pfx___might_resched+0x10/0x10 [ 119.095029][ T1173] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 119.096747][ T1173] synchronize_rcu_expedited+0x290/0x450 [ 119.098346][ T1173] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 119.100106][ T1173] ? dump_stack_lvl+0x1a1/0x1f0 [ 119.101368][ T1173] ? dump_stack_lvl+0x1a3/0x1f0 [ 119.102676][ T1173] ? add_taint+0x5f/0xd0 [ 119.103828][ T1173] ? __pfx___might_resched+0x10/0x10 [ 119.105463][ T1173] synchronize_net+0x3e/0x60 [ 119.106900][ T1173] dev_deactivate_many+0x2a1/0xb20 [ 119.108255][ T1173] dev_deactivate+0xf9/0x1c0 [ 119.109465][ T1173] ? __pfx_dev_deactivate+0x10/0x10 [ 119.110811][ T1173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.112413][ T1173] linkwatch_do_dev+0x11e/0x160 [ 119.113843][ T1173] linkwatch_sync_dev+0x181/0x210 [ 119.115660][ T1173] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 119.117375][ T1173] ethtool_op_get_link+0x1d/0x70 [ 119.118892][ T1173] bond_check_dev_link+0x197/0x430 [ 119.120255][ T1173] ? __pfx_bond_check_dev_link+0x10/0x10 [ 119.121706][ T1173] bond_mii_monitor+0x3c1/0x2d90 [ 119.123017][ T1173] ? __pfx_bond_mii_monitor+0x10/0x10 [ 119.124416][ T1173] ? rcu_is_watching+0x12/0xc0 [ 119.125693][ T1173] ? lock_acquire+0x2f/0xb0 [ 119.126888][ T1173] ? process_one_work+0x8bb/0x1b30 [ 119.128240][ T1173] process_one_work+0x958/0x1b30 [ 119.129553][ T1173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 119.131042][ T1173] ? __pfx_process_one_work+0x10/0x10 [ 119.132464][ T1173] ? rcu_is_watching+0x12/0xc0 [ 119.133942][ T1173] ? assign_work+0x1a0/0x250 [ 119.135201][ T1173] worker_thread+0x6c8/0xf00 [ 119.136813][ T1173] ? __pfx_worker_thread+0x10/0x10 [ 119.138247][ T1173] kthread+0x2c1/0x3a0 [ 119.139419][ T1173] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.141024][ T1173] ? __pfx_kthread+0x10/0x10 [ 119.142446][ T1173] ret_from_fork+0x45/0x80 [ 119.143790][ T1173] ? __pfx_kthread+0x10/0x10 [ 119.144990][ T1173] ret_from_fork_asm+0x1a/0x30 [ 119.146283][ T1173] [ 119.147806][ T1173] Kernel Offset: disabled [ 119.149012][ T1173] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:14:54 Registers: info registers vcpu 0 CPU#0 EAX=89c64d5c EBX=0000000b ECX=89c64d5c EDX=00000d5c ESI=89c64d5c EDI=ffffffff EBP=f7440000 ESP=ff97f058 EIP=f71395c5 EFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56d56440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d44e8 CR3=000000006b44e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000498d59 RBX=0000000000000001 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb136c0 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000573284c0 CR3=0000000065868000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851531d5 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc90006a5f410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=000000000000005d R14=ffffffff85153170 R15=0000000000000000 RIP=ffffffff851531ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f1fdffc CR3=000000004e1d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 968e0ad8968e0ad8 ZMM22=a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 a1b3c555a1b3c555 ZMM23=af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 af1ae6e6af1ae6e6 ZMM24=b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a b3ebbb5ab3ebbb5a ZMM25=4177521f4177521f 4177521f4177521f 4177521f4177521f 4177521f4177521f 4177521f4177521f 4177521f4177521f 4177521f4177521f 4177521f4177521f ZMM26=1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 1c3be1641c3be164 ZMM27=b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 b4c6e2b4b4c6e2b4 ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e1070000e1070000 e1070000e1070000 e1070000e1070000 e1070000e1070000 e1070000e1070000 e1070000e1070000 e1070000e1070000 e1070000e1070000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=000000000000004a RCX=ffffc90026a21000 RDX=0000000000080000 RSI=ffffffff8179360d RDI=0000000000000001 RBP=1ffff92004c41d6d RSP=ffffc9002620eb58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000200 R14=ffff88801f4b4880 R15=0000000000000001 RIP=ffffffff81793617 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71b3c60 CR3=000000006719a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4706f64af08b3473 1fd4f2201da4e123 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f04842889f6585c 0abc2243690026fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6c3682eb81a6d0d a47ccfac06aea1bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5273f9b5ebfdc663 f2613368159ece1b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004340 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48df30ff6a17aaaa 48dfd0a548dfdf64 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa34000000 dd858c002b1e6e1a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000048dfaaaaaa00 c02f8a17aa000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa000048e0 aa000000ac000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59f0c674c7609229 3c55d049afbd82b4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c7d63773875eda6 29a4099ef642c4d3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000