last executing test programs: 4m43.614468356s ago: executing program 2 (id=2515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r5 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1000000) r6 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x1000002, 0x810, r5, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 4m41.529415757s ago: executing program 2 (id=2522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r5 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1000000) r6 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x1000002, 0x810, r5, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) ptrace$setregs(0xf, r3, 0x6, &(0x7f0000000300)="34a6765d211d30") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3}, 0xfffffffffffffff4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(0xffffffffffffffff) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r6, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) socket$vsock_stream(0x28, 0x1, 0x0) 4m37.162057214s ago: executing program 2 (id=2531): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff24, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 4m35.2787116s ago: executing program 2 (id=2534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20040, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x0, 0x33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x3}, 0x0, 0x20, 0xfffffffe, 0xffffffff}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'geneve1\x00', @multicast}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={r7, 0xff, 0x10000}, 0xc) mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', 0x0, 0x81, &(0x7f0000001000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) syz_usb_control_io(r4, 0x0, 0x0) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f00000002c0)={0x1, "b3"}) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xa, 0x80, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffcf, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x60, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3b, 0x3, 'm'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x38, '<'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf0, 0x4, 0x88, 0x8, "850b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0xb8, "989489"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd4, 0x7, 0x2, {0x7, 0x25, 0x1, 0x0, 0xd0, 0xda}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x81, 0x4, 0x1, 0xe4, "", "c5"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfff1, 0x0, 0x0, "8d"}, @as_header={0x7, 0x24, 0x1, 0xfb, 0x6}, @as_header={0x7, 0x24, 0x1, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x2, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x90, 0x9, 0x3, {0x7, 0x25, 0x1, 0x3, 0x84, 0x1}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x250, 0x21, 0xf9, 0x2, 0x40, 0x80}, 0x39, &(0x7f0000000d00)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0xf0f, 0xfa30, [0xc00f, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x5c, 0x5, 0x3, 0xf0f, 0x9c, [0x0, 0xff0000, 0xc0d8, 0xf, 0x5f]}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xd87614f433a3c6e0}}, {0x7a, &(0x7f0000000d80)=@string={0x7a, 0x3, "b7f3ba0756abc75db01dbd72a0f75d9dfcc4827b3107b55b9c89f23acc093fb215317243a62a997b29608a96b693354c56eec08232ce133f67da4ca60339f02a39ff7918c59b64f5de3e9719eea145ab51bb5816ce1465fe027a3af65cf185966818027ba0d0b78a5803e9af19e5a387b84ead51f4943ca0"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x80a}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_control_io(r4, &(0x7f0000000600)={0x18, &(0x7f0000000300)={0x20, 0xe, 0xba, {0xba, 0x9, "032dadf6e773745930bf56cd98da7a0b91cf78ed11a4af7a99173b6e20c081254d28e2e16ab467c019834e3ab64441431c3b79593e0af806d5bffa94aedd5007f1fa47f644250b37b1c3a882806d4db482db992417c5f7613befb9969af040bc833d48a36059a2372cc91bce64fc34082774304ce696d1fbe1f81bd44d1f69bf8f69446b665b150260405d7eb3a7d4bbaad04e0e5d6d953b75833fd75d41067f358d139e2815c69c119dfa58fd2da18538f88cb400e86f21"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000180)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0x8, 0x83, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "415e11b0c8ffd381305c4c65664f18ee"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x5, 0x6, "046fb898", "9ee988cb"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x9, 0x6, 0x4000, 0x8}}}, &(0x7f0000000b40)={0x44, &(0x7f00000006c0)={0x40, 0x11, 0xd0, "52fdbfe7ef1fc61c280cfdef2a3ff20626a1c24df9f90c66a59741931527fb6ed54aabe6f1a99738f2028c320e66426a5bb64bfabeb6519bf109b31a14620c4a9d054c8b8df0a48d29c5f333f1ca7057f96189c35adf71d2c06a95f35d157eb9b6499e0bb3413f94f56d021ecfb27296f3edd62f315d0cb369d4e83a73165c0eff84e070c4ba9eb2bb1a4e514bb2260d3081d5939860eae3d2fe4d787e77086caeb31ccd7a9f6a7e4a1bc36d9c67ffd01730ffbcd2a0a7e50b51b66be68468a9836f97bb0529669ec98c07874b3aa02c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x4, 0x1, [0x110]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xf}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0xb, 0x2, "f027"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a84c"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x50}}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4m19.771972898s ago: executing program 32 (id=2534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20040, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x0, 0x33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x3}, 0x0, 0x20, 0xfffffffe, 0xffffffff}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'geneve1\x00', @multicast}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={r7, 0xff, 0x10000}, 0xc) mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', 0x0, 0x81, &(0x7f0000001000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) syz_usb_control_io(r4, 0x0, 0x0) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f00000002c0)={0x1, "b3"}) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xa, 0x80, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffcf, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x60, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3b, 0x3, 'm'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x38, '<'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf0, 0x4, 0x88, 0x8, "850b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0xb8, "989489"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd4, 0x7, 0x2, {0x7, 0x25, 0x1, 0x0, 0xd0, 0xda}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x81, 0x4, 0x1, 0xe4, "", "c5"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfff1, 0x0, 0x0, "8d"}, @as_header={0x7, 0x24, 0x1, 0xfb, 0x6}, @as_header={0x7, 0x24, 0x1, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x2, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x90, 0x9, 0x3, {0x7, 0x25, 0x1, 0x3, 0x84, 0x1}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x250, 0x21, 0xf9, 0x2, 0x40, 0x80}, 0x39, &(0x7f0000000d00)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0xf0f, 0xfa30, [0xc00f, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x5c, 0x5, 0x3, 0xf0f, 0x9c, [0x0, 0xff0000, 0xc0d8, 0xf, 0x5f]}]}, 0x3, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xd87614f433a3c6e0}}, {0x7a, &(0x7f0000000d80)=@string={0x7a, 0x3, "b7f3ba0756abc75db01dbd72a0f75d9dfcc4827b3107b55b9c89f23acc093fb215317243a62a997b29608a96b693354c56eec08232ce133f67da4ca60339f02a39ff7918c59b64f5de3e9719eea145ab51bb5816ce1465fe027a3af65cf185966818027ba0d0b78a5803e9af19e5a387b84ead51f4943ca0"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x80a}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_control_io(r4, &(0x7f0000000600)={0x18, &(0x7f0000000300)={0x20, 0xe, 0xba, {0xba, 0x9, "032dadf6e773745930bf56cd98da7a0b91cf78ed11a4af7a99173b6e20c081254d28e2e16ab467c019834e3ab64441431c3b79593e0af806d5bffa94aedd5007f1fa47f644250b37b1c3a882806d4db482db992417c5f7613befb9969af040bc833d48a36059a2372cc91bce64fc34082774304ce696d1fbe1f81bd44d1f69bf8f69446b665b150260405d7eb3a7d4bbaad04e0e5d6d953b75833fd75d41067f358d139e2815c69c119dfa58fd2da18538f88cb400e86f21"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000180)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0x8, 0x83, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "415e11b0c8ffd381305c4c65664f18ee"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x5, 0x6, "046fb898", "9ee988cb"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x9, 0x6, 0x4000, 0x8}}}, &(0x7f0000000b40)={0x44, &(0x7f00000006c0)={0x40, 0x11, 0xd0, "52fdbfe7ef1fc61c280cfdef2a3ff20626a1c24df9f90c66a59741931527fb6ed54aabe6f1a99738f2028c320e66426a5bb64bfabeb6519bf109b31a14620c4a9d054c8b8df0a48d29c5f333f1ca7057f96189c35adf71d2c06a95f35d157eb9b6499e0bb3413f94f56d021ecfb27296f3edd62f315d0cb369d4e83a73165c0eff84e070c4ba9eb2bb1a4e514bb2260d3081d5939860eae3d2fe4d787e77086caeb31ccd7a9f6a7e4a1bc36d9c67ffd01730ffbcd2a0a7e50b51b66be68468a9836f97bb0529669ec98c07874b3aa02c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x4, 0x1, [0x110]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xf}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0xb, 0x2, "f027"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a84c"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x50}}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4.263131887s ago: executing program 0 (id=3568): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2e, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x20001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e60, 0x40000000, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) listen(r3, 0xbf2d) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 4.207587449s ago: executing program 1 (id=3569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x18) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x20, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0xc000) 4.174839082s ago: executing program 0 (id=3570): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.721644477s ago: executing program 0 (id=3573): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2e}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x20001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10200041}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000a0a05000000000000006b17f9a5000a0900010073797a300000000004000d40"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) listen(r3, 0xbf2d) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x20048090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 3.517958943s ago: executing program 1 (id=3574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x17568000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x5}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0xa}}]}}}]}, 0x60}}, 0x24000801) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x18, 0x4, 0x0) lseek(r10, 0x2, 0x0) 3.320830187s ago: executing program 3 (id=3575): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0xffff, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) dup(r2) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r8, 0x2f, 0x0, 0x0, @void, @value=r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r8, r10, 0x2f, 0x2008, 0x4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.984395699s ago: executing program 3 (id=3576): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2, 0x80, 0x7, 0x7, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)='\x00\x00\x00', 0x3) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) 2.469695977s ago: executing program 1 (id=3577): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1f, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x520beaf08043c77b, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x61, 0x400) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x10, 0x7, 0xfffffffd, 0xd3, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x64, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@noop]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x2100, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000500), 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r9}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}) io_uring_enter(r10, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.469542981s ago: executing program 4 (id=3578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) (fail_nth: 5) 2.467613188s ago: executing program 0 (id=3585): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) 2.239854884s ago: executing program 4 (id=3579): accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000000c0)={r0, 0xfffffffffffffc00, 0xd}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000000c0)={r0, 0xfffffffffffffc00, 0xd}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x40, 0x9, 0x9, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x67, 0x0, 0xf3, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x4, [{@rand_addr=0x64010100, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x7}]}, @lsrr={0x83, 0x2b, 0xdf, [@rand_addr=0x64010101, @broadcast, @local, @broadcast, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100, @empty, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9, 0x66, 0xc, @remote, @private1, 0x40, 0x80, 0x8001, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x700, 0x1, 0xfffffffe, 0xffffb971, {{0x2d, 0x4, 0x3, 0x19, 0xb4, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast2, {[@end, @timestamp={0x44, 0x8, 0x63, 0x0, 0x4, [0x20000000]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xcb, 0x3, 0x6, [{@loopback, 0x1}, {@multicast1, 0xbb}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0xf258}, {@remote, 0x6}]}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0xa, [0x0, 0x2, 0x40]}, @lsrr={0x83, 0x2b, 0xd4, [@remote, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0xad, [@broadcast, @empty, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @local, @private=0xa010102, @multicast1]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0x8, 0xe, 0x4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x20, 0x1, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0x8, 0xe, 0x4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x20, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40084) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "80b85fb3cafc36829a25b89c4a993bdebdf2c482dee906807b7bbd25363cb3bdbfba090a9bfd1c78c4a10abcef9599f3837c81d2317f466698bb41936535e37fc0a5139c150c45ace2caaa394fde63d76307ef61147547d9b579f3cb41f7e40a0f295457"}, @NL80211_ATTR_FRAME_MATCH={0xd9, 0x5b, "13607534d5ad4903a6186208ef857e8cd43507baafafe8550ea5addeb3764ab15edd143a954811f6129fcb1e86c9cb3e0229773f4ecbc029d8aba78726ca921ea0260fc31840e9d2c4c351d10cb8a39fe45e1de32e31c29b001c0b3c22283be0b89c1c47a1d5c9c8ed11f5aa6fc486284e829b74c179f33a1628a107e2e926e531ebba6054c270836c4847a5eb88c74345f85cf867a12f8b0b584e778e7c63cac8ded5c8a700cc14f5439e28a0022ee5bb28873af0e179ce1c56c87a9e968d78697b3c0847c9aaa591a20f73beb688d588e7cd713e"}, @NL80211_ATTR_FRAME_MATCH={0xf2, 0x5b, "e7ef8d356616e331096c8f642dd7f1db75558e83d34affb0f824b582fd23f330ce520e711a1bfd1392c55fee097c2ba4daecc2e6e6d12cd85e767b15aa98d5bf5f3a549b63f064ce386b443842686f6931637b0bf5958875d794090014bf509ceaa5c211c1201ba5dc71ee53e5a79c4146623df48a65af55c9f629c9ab40fe0971366c1cdab741beab11b85485c7ae660ee226d4e86d1c53c18a4af98e08aaa3161c3bcb5a4bb462fd48c8f4c178f8ca4b7ae4cd3c8f23674c06b8273bdbf434c87c28661eeb86ad653b3b263f164991e6c6f017822dc572e50ccbf81a3935f09ee1be85d961a8a1962ce9672d54"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4008008}, 0x4040) r9 = accept4$inet6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a80)=0x1c, 0x80000) getpeername(r9, &(0x7f0000000ac0)=@nfc_llcp, &(0x7f0000000b40)=0x80) sendmsg$nl_route(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@getneightbl={0x14, 0x42, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x8000) r10 = openat$vim2m(0xffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000cc0)={0x1, 0x0, 0x3, 0x0, 0x1}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000d80)={'dac02\x00', [0x4d, 0x9, 0x5b4, 0x9, 0x1ff, 0x8, 0x2, 0x5, 0x7, 0x5, 0xd, 0x8000, 0x80000000, 0x7ff, 0x3, 0x2, 0x4, 0x9, 0xb7c, 0x8, 0x74, 0x7, 0x5, 0x10, 0xf, 0x3, 0xf, 0x7, 0x7f, 0xfffffff1, 0xfffffff7, 0x7]}) openat$vnet(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) (async) openat$vnet(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000e80)={0x41, 0x4}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000e80)={0x41, 0x4}, 0x10) timer_create(0x1, &(0x7f0000000ec0)={0x0, 0x14, 0x4}, &(0x7f0000000f00)) (async) timer_create(0x1, &(0x7f0000000ec0)={0x0, 0x14, 0x4}, &(0x7f0000000f00)=0x0) clock_gettime(0x0, &(0x7f0000000f40)) (async) clock_gettime(0x0, &(0x7f0000000f40)={0x0, 0x0}) timer_settime(r11, 0x1, &(0x7f0000000f80)={{0x0, 0x3938700}, {r12, r13+60000000}}, &(0x7f0000000fc0)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001000)=0x0) fstat(r1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r14, r15) syz_emit_vhci(&(0x7f00000010c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x4}}, 0x9) r16 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x50, r1, 0x8000000) syz_io_uring_submit(r16, 0x0, &(0x7f0000001140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x19, 0x0, r1, &(0x7f0000001100)={0x80002001}, r9, 0x3, 0x0, 0x1}) (async) syz_io_uring_submit(r16, 0x0, &(0x7f0000001140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x19, 0x0, r1, &(0x7f0000001100)={0x80002001}, r9, 0x3, 0x0, 0x1}) 2.069757655s ago: executing program 4 (id=3580): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0xffff, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) dup(r2) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r8, r9, 0x2f, 0x2008, 0x4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.068089082s ago: executing program 4 (id=3581): syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x28}, &(0x7f00000001c0), &(0x7f0000000500)) (async) r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x28}, &(0x7f00000001c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) syz_io_uring_setup(0x1d11, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x1}, 0x0, &(0x7f0000001880)) (async) syz_io_uring_setup(0x1d11, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x1}, 0x0, &(0x7f0000001880)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.979260001s ago: executing program 4 (id=3582): syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0) listen(r1, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x80000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xd}, {0x11, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x2418c}}, 0x20}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x7385412d, 0x101000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_DONE(r11, 0x29, 0xc9, 0xffa4, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESHEX=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.826662074s ago: executing program 3 (id=3583): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r1 = socket(0x2, 0x3, 0x100000001) setsockopt(r1, 0xff, 0x1, 0x0, 0x4b) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0xfffffffd}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x6, 0x9, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x80, 0x2, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @empty, @private1, 0x74, 0x3, 0x7, 0x100, 0x200, 0x82, r4}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21325f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) 1.826360824s ago: executing program 3 (id=3584): r0 = socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x0, &(0x7f0000000580)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_clone(0x8000, &(0x7f0000000f80)="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", 0x1000, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="08993029f4120faf16a7fe76d4d7314a11106d3a20c5ca964ef6ffe16503b3bc1908f1ed2e920b3d988b7ed398114e8f791b4ebdb5bd507bb51dd1f3471cabd3a992d27bd592bb6938c77a00d90398e30945") sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @empty, 0xae25}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60040050) r5 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000040)={0x9}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000440), 0x44041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="00fbbc0201edf764d1bf49f3e58ca9790c03e359b7e633d719b76b4fcae833e2e262e8b870c9d3d23c55513584bfbcc5cf027beb4dc2dcb45743cdb5d146d0a42b1237a63d95df1830e69eed4dee7a44487f1e9928c96dd1ed1d34ff757e869e593dde044777fef6e8034a0da80557858fd599e6fbd5533b4d9c9c5400a80081209a52619e8baf6b2f9d60bbb729cf2524f29b184270018bbf659166751435db517195bbf986dd17b3a81b57d0a652a5072cef54a2064a6816a899c1"], 0xbc, 0x3) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x1009e1, 0x2166, 0x0, 0x100000, 0x88d7, 0x8f, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0xe, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x3, 0x400007, 0x1]}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.554229893s ago: executing program 1 (id=3586): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r4 = dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x1000002, 0x810, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000f80)=ANY=[@ANYBLOB="34050000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x534}, 0x1, 0x0, 0x0, 0x4}, 0x44800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) listen(0xffffffffffffffff, 0x80000001) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 589.878759ms ago: executing program 0 (id=3588): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r0, 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000001c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 456.42828ms ago: executing program 3 (id=3589): r0 = getpgrp(0x0) getpgid(r0) socket$phonet_pipe(0x23, 0x5, 0x2) 451.361407ms ago: executing program 1 (id=3590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x420, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x7fff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x5000, 0x1000, &(0x7f0000588000/0x1000)=nil}) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r5, 0x400, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)) 350.950448ms ago: executing program 3 (id=3591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1000000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x1000002, 0x810, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x29, 0x6, 0x7, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2, 0x80, 0x7, 0x7, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)='\x00\x00\x00', 0x3) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) 0s ago: executing program 4 (id=3593): mkdir(&(0x7f0000000000)='./file0\x00', 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/53, 0x13f, 0x35, 0x0, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000f80)=ANY=[@ANYBLOB="34050000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x534}, 0x1, 0x0, 0x0, 0x4}, 0x44800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000500)=[{0xe, 0x8, 0xf, 0x3}, {0x400, 0x7, 0x7, 0x3}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) listen(0xffffffffffffffff, 0x80000001) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) kernel console output (not intermixed with test programs): 20.917787][ T40] audit: type=1326 audit(2000000328.129:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.3.2920" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 620.924401][ T40] audit: type=1326 audit(2000000328.129:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.3.2920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 620.933109][ T40] audit: type=1326 audit(2000000328.129:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.3.2920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 620.940552][ T40] audit: type=1326 audit(2000000328.129:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16732 comm="syz.3.2920" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.425849][T16761] netlink: 'syz.4.2927': attribute type 7 has an invalid length. [ 622.428917][T16761] netlink: 'syz.4.2927': attribute type 8 has an invalid length. [ 622.584098][T16764] netlink: zone id is out of range [ 622.587131][T16764] netlink: zone id is out of range [ 622.589538][T16764] netlink: zone id is out of range [ 622.599239][T16764] netlink: set zone limit has 4 unknown bytes [ 622.674316][T16765] Invalid source name [ 622.675688][T16765] UBIFS error (pid: 16765): cannot open "./file0", error -22 [ 623.161817][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 623.295052][T16775] Cannot find add_set index 1 as target [ 623.311832][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 623.384684][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.480165][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 623.484267][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.487602][ T10] usb 8-1: Product: syz [ 623.488928][ T10] usb 8-1: Manufacturer: syz [ 623.490389][ T10] usb 8-1: SerialNumber: syz [ 623.493029][ T10] usb 8-1: config 0 descriptor?? [ 623.496750][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 623.498677][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 623.503536][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input147 [ 623.600723][T16781] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 623.787366][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.792540][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.231943][ T10] usb 8-1: USB disconnect, device number 26 [ 624.462808][T16795] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 624.519557][T16798] syz.4.2937: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 624.559835][T16800] all: renamed from lo (while UP) [ 624.561803][T16800] FAULT_INJECTION: forcing a failure. [ 624.561803][T16800] name failslab, interval 1, probability 0, space 0, times 0 [ 624.565679][T16800] CPU: 2 UID: 0 PID: 16800 Comm: syz.4.2938 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 624.565693][T16800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 624.565700][T16800] Call Trace: [ 624.565705][T16800] [ 624.565709][T16800] dump_stack_lvl+0x16c/0x1f0 [ 624.565724][T16800] should_fail_ex+0x512/0x640 [ 624.565735][T16800] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 624.565750][T16800] should_failslab+0xc2/0x120 [ 624.565762][T16800] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 624.565774][T16800] ? kstrdup_const+0x63/0x80 [ 624.565787][T16800] kstrdup+0x53/0x100 [ 624.565798][T16800] kstrdup_const+0x63/0x80 [ 624.565808][T16800] kobject_rename+0x136/0x260 [ 624.565820][T16800] ? __pfx_kobject_rename+0x10/0x10 [ 624.565833][T16800] ? kernfs_put+0x35/0x60 [ 624.565845][T16800] device_rename+0x130/0x230 [ 624.565862][T16800] netif_change_name+0x27c/0x920 [ 624.565877][T16800] ? __pfx_netif_change_name+0x10/0x10 [ 624.565888][T16800] ? __pfx_validate_linkmsg+0x10/0x10 [ 624.565900][T16800] ? __asan_memset+0x23/0x50 [ 624.565924][T16800] do_setlink.constprop.0+0x3362/0x4380 [ 624.565940][T16800] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 624.565953][T16800] ? stack_trace_save+0x8e/0xc0 [ 624.565968][T16800] ? __lock_acquire+0xb8a/0x1c90 [ 624.565984][T16800] ? kasan_save_stack+0x42/0x60 [ 624.565993][T16800] ? kasan_save_track+0x14/0x30 [ 624.566005][T16800] ? __mutex_trylock_common+0xe9/0x250 [ 624.566020][T16800] ? __pfx___mutex_trylock_common+0x10/0x10 [ 624.566035][T16800] ? __pfx___might_resched+0x10/0x10 [ 624.566047][T16800] ? rcu_is_watching+0x12/0xc0 [ 624.566058][T16800] ? trace_contention_end+0xdd/0x130 [ 624.566073][T16800] ? __mutex_lock+0x1ca/0xb90 [ 624.566083][T16800] ? __pfx_aa_get_newest_label+0x10/0x10 [ 624.566096][T16800] ? rcu_is_watching+0x12/0xc0 [ 624.566106][T16800] ? rtnl_newlink+0x600/0x2000 [ 624.566118][T16800] ? __pfx___mutex_lock+0x10/0x10 [ 624.566137][T16800] rtnl_newlink+0x1446/0x2000 [ 624.566153][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.566167][T16800] ? kmem_cache_free+0x2d1/0x4d0 [ 624.566176][T16800] ? kfree_skbmem+0x1a4/0x1f0 [ 624.566195][T16800] ? __lock_acquire+0x622/0x1c90 [ 624.566209][T16800] ? rcu_is_watching+0x12/0xc0 [ 624.566220][T16800] ? trace_cap_capable+0x18d/0x200 [ 624.566236][T16800] ? find_held_lock+0x2b/0x80 [ 624.566246][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.566257][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.566267][T16800] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 624.566279][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.566291][T16800] rtnetlink_rcv_msg+0x95b/0xe90 [ 624.566304][T16800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.566319][T16800] ? ref_tracker_free+0x37c/0x830 [ 624.566332][T16800] netlink_rcv_skb+0x155/0x420 [ 624.566345][T16800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.566358][T16800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.566375][T16800] ? netlink_deliver_tap+0x1ae/0xd30 [ 624.566390][T16800] netlink_unicast+0x58d/0x850 [ 624.566404][T16800] ? __pfx_netlink_unicast+0x10/0x10 [ 624.566421][T16800] netlink_sendmsg+0x8d1/0xdd0 [ 624.566435][T16800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.566449][T16800] ? __import_iovec+0x1dd/0x650 [ 624.566464][T16800] ____sys_sendmsg+0xa95/0xc70 [ 624.566479][T16800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.566492][T16800] ? get_compat_msghdr+0x11a/0x170 [ 624.566510][T16800] ___sys_sendmsg+0x134/0x1d0 [ 624.566522][T16800] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.566539][T16800] ? find_held_lock+0x2b/0x80 [ 624.566558][T16800] __sys_sendmsg+0x16d/0x220 [ 624.566569][T16800] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.566586][T16800] ? rcu_is_watching+0x12/0xc0 [ 624.566598][T16800] __do_fast_syscall_32+0x7c/0x3a0 [ 624.566611][T16800] do_fast_syscall_32+0x32/0x80 [ 624.566632][T16800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.566648][T16800] RIP: 0023:0xf7f06579 [ 624.566657][T16800] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 624.566667][T16800] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 624.566677][T16800] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 624.566684][T16800] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.566690][T16800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.566696][T16800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.566702][T16800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.566715][T16800] [ 624.726816][ C2] vkms_vblank_simulate: vblank timer overrun [ 624.761554][T16802] netlink: zone id is out of range [ 624.767117][T16802] netlink: zone id is out of range [ 624.770895][T16802] netlink: zone id is out of range [ 624.786789][T16802] netlink: set zone limit has 4 unknown bytes [ 625.104455][T16814] Cannot find add_set index 1 as target [ 625.478786][T16821] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 625.769805][T16824] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 626.038502][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 626.038519][ T40] audit: type=1326 audit(2000000333.289:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.051520][ T40] audit: type=1326 audit(2000000333.289:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.062676][ T40] audit: type=1326 audit(2000000333.289:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.071622][ T40] audit: type=1326 audit(2000000333.289:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.256182][ T40] audit: type=1326 audit(2000000333.299:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.262900][ T40] audit: type=1326 audit(2000000333.299:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.269513][ T40] audit: type=1326 audit(2000000333.299:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.276128][ T40] audit: type=1326 audit(2000000333.299:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.282593][ T40] audit: type=1326 audit(2000000333.299:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 626.289025][ T40] audit: type=1326 audit(2000000333.299:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.4.2946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 627.284812][T16848] netlink: 'syz.3.2952': attribute type 17 has an invalid length. [ 627.287332][T16848] netlink: 'syz.3.2952': attribute type 16 has an invalid length. [ 627.289894][T16848] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2952'. [ 627.527519][T16852] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 627.694108][T16859] Cannot find add_set index 1 as target [ 628.455574][T16871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 629.362448][T10053] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.367754][T10053] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 629.470248][T16890] syz.1.2963: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 630.134891][T16900] netlink: 'syz.3.2966': attribute type 1 has an invalid length. [ 630.137942][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 630.211943][T16900] syz.3.2966 (16900): drop_caches: 2 [ 630.425215][T16906] Cannot find add_set index 1 as target [ 630.518421][T16910] syz.3.2968: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 630.755946][T16919] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 630.904107][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 631.051838][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 631.055966][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.066234][ T9] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 631.069880][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.074190][ T9] usb 9-1: Product: syz [ 631.075946][ T9] usb 9-1: Manufacturer: syz [ 631.077882][ T9] usb 9-1: SerialNumber: syz [ 631.082289][ T9] usb 9-1: config 0 descriptor?? [ 631.085902][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 631.088232][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 631.093660][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input148 [ 631.298472][ T5968] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 631.604865][T16931] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2975'. [ 631.689403][T16937] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 632.265879][T16942] syz.0.2977: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 632.294983][T16944] "syz.4.2978" (16944) uses obsolete ecb(arc4) skcipher [ 633.281792][T10053] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 633.442309][T10053] usb 8-1: unable to get BOS descriptor or descriptor too short [ 633.445745][T10053] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 633.448070][T10053] usb 8-1: can't read configurations, error -71 [ 634.301908][T10053] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 634.471835][T10053] usb 8-1: Using ep0 maxpacket: 16 [ 634.477938][T10053] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.486827][T16970] syz.4.2987: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 634.489226][T10053] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 634.503979][T10053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.506377][T10053] usb 8-1: Product: syz [ 634.507730][T10053] usb 8-1: Manufacturer: syz [ 634.509581][T10053] usb 8-1: SerialNumber: syz [ 634.512254][T10053] usb 8-1: config 0 descriptor?? [ 634.516238][T10053] hub 8-1:0.0: bad descriptor, ignoring hub [ 634.518101][T10053] hub 8-1:0.0: probe with driver hub failed with error -5 [ 634.521576][T10053] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input149 [ 635.064804][ T9503] usb 9-1: USB disconnect, device number 7 [ 635.277819][T16983] Cannot find add_set index 1 as target [ 635.303277][ T5968] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 635.307459][ T5968] Bluetooth: hci4: Injecting HCI hardware error event [ 635.311897][ T5968] Bluetooth: hci4: hardware error 0x00 [ 635.454267][T16985] syz.1.2991: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 635.541972][ T10] usb 8-1: USB disconnect, device number 28 [ 636.317787][T17000] syz.1.2996: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 636.770473][T17020] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 637.183726][T17023] netlink: zone id is out of range [ 637.189037][T17023] netlink: zone id is out of range [ 637.190864][T17023] netlink: zone id is out of range [ 637.205767][T17023] netlink: set zone limit has 4 unknown bytes [ 637.316850][T17027] syz.0.3004: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 637.323984][T17029] syz.1.3005: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 637.471796][ T5968] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 637.835764][T17032] Process accounting resumed [ 637.882616][T17043] ./cgroup: Can't lookup blockdev [ 638.396695][T17055] Cannot find add_set index 1 as target [ 638.635715][T17057] netlink: zone id is out of range [ 638.637446][T17057] netlink: zone id is out of range [ 638.651792][T17057] netlink: set zone limit has 4 unknown bytes [ 638.812835][T17063] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 639.843863][T17068] loop6: detected capacity change from 0 to 524287999 [ 641.080361][T17092] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 641.084730][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 641.133157][T17093] syz.4.3025 (17093): drop_caches: 2 [ 641.214000][T17095] syz.1.3026: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 641.416501][T17101] Cannot find add_set index 1 as target [ 641.819773][T17107] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 642.412015][T10050] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 642.571721][T10050] usb 8-1: Using ep0 maxpacket: 16 [ 642.575837][T10050] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 642.593148][T10050] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 642.596808][T10050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.599385][T10050] usb 8-1: Product: syz [ 642.600761][T10050] usb 8-1: Manufacturer: syz [ 642.611790][T10050] usb 8-1: SerialNumber: syz [ 642.614392][T10050] usb 8-1: config 0 descriptor?? [ 642.617809][T10050] hub 8-1:0.0: bad descriptor, ignoring hub [ 642.619720][T10050] hub 8-1:0.0: probe with driver hub failed with error -5 [ 642.638338][T10050] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input150 [ 642.791940][T10053] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 642.941714][T10053] usb 6-1: Using ep0 maxpacket: 16 [ 642.944865][T10053] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 642.947858][T10053] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 642.951491][T10053] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 642.954900][T10053] usb 6-1: config 0 interface 0 has no altsetting 0 [ 642.959904][T10053] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 642.962831][T10053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.965454][T10053] usb 6-1: Product: syz [ 642.966859][T10053] usb 6-1: Manufacturer: syz [ 642.968553][T10053] usb 6-1: SerialNumber: syz [ 642.971348][T10053] usb 6-1: config 0 descriptor?? [ 643.178910][T10053] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input151 [ 643.313456][ T9] usb 8-1: USB disconnect, device number 29 [ 643.412230][ T5356] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 643.552963][ T5356] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 643.631880][ T5356] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 643.728496][T17130] netlink: zone id is out of range [ 643.730247][T17130] netlink: zone id is out of range [ 643.741855][T17130] netlink: set zone limit has 4 unknown bytes [ 643.741925][ T5356] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 643.775996][T17132] netlink: zone id is out of range [ 643.777768][T17132] netlink: zone id is out of range [ 643.791089][T17132] netlink: set zone limit has 4 unknown bytes [ 643.827001][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 643.827012][ T40] audit: type=1326 audit(2000000351.079:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.835952][ T40] audit: type=1326 audit(2000000351.079:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.835976][ T40] audit: type=1326 audit(2000000351.079:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.850247][ T40] audit: type=1326 audit(2000000351.079:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.870521][ T40] audit: type=1326 audit(2000000351.079:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.878352][ T40] audit: type=1326 audit(2000000351.079:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.884952][ T40] audit: type=1326 audit(2000000351.079:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.891404][ T40] audit: type=1326 audit(2000000351.079:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.898047][ T40] audit: type=1326 audit(2000000351.079:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.905389][ T40] audit: type=1326 audit(2000000351.079:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17133 comm="syz.3.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 643.979854][ T5968] Bluetooth: hci1: link tx timeout [ 643.982917][ T5968] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 644.994352][T17151] netlink: 'syz.3.3043': attribute type 1 has an invalid length. [ 644.996849][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 645.002602][T17151] syz.3.3043 (17151): drop_caches: 2 [ 645.163032][T17155] FAULT_INJECTION: forcing a failure. [ 645.163032][T17155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.167401][T17155] CPU: 2 UID: 0 PID: 17155 Comm: syz.3.3044 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 645.167416][T17155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 645.167423][T17155] Call Trace: [ 645.167428][T17155] [ 645.167433][T17155] dump_stack_lvl+0x16c/0x1f0 [ 645.167447][T17155] should_fail_ex+0x512/0x640 [ 645.167461][T17155] _copy_to_user+0x32/0xd0 [ 645.167474][T17155] simple_read_from_buffer+0xcb/0x170 [ 645.167491][T17155] proc_fail_nth_read+0x197/0x270 [ 645.167507][T17155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.167522][T17155] ? rw_verify_area+0xcf/0x680 [ 645.167537][T17155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.167551][T17155] vfs_read+0x1e4/0xc60 [ 645.167561][T17155] ? fdget_pos+0x2a2/0x370 [ 645.167573][T17155] ? __pfx_vfs_read+0x10/0x10 [ 645.167581][T17155] ? find_held_lock+0x2b/0x80 [ 645.167596][T17155] ? __fget_files+0x20e/0x3c0 [ 645.167616][T17155] ksys_read+0x12a/0x250 [ 645.167626][T17155] ? __pfx_ksys_read+0x10/0x10 [ 645.167636][T17155] ? rcu_is_watching+0x12/0xc0 [ 645.167650][T17155] __do_fast_syscall_32+0x7c/0x3a0 [ 645.167663][T17155] do_fast_syscall_32+0x32/0x80 [ 645.167674][T17155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.167688][T17155] RIP: 0023:0xf711e579 [ 645.167697][T17155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 645.167707][T17155] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 645.167717][T17155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f510e620 [ 645.167724][T17155] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 645.167730][T17155] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 645.167740][T17155] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 645.167746][T17155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.167760][T17155] [ 645.491316][T10050] usb 6-1: USB disconnect, device number 19 [ 645.799973][T17183] netlink: 'syz.4.3052': attribute type 4 has an invalid length. [ 645.802857][T17183] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3052'. [ 646.031744][ T5968] Bluetooth: hci1: command 0x0406 tx timeout [ 646.120504][T17189] Cannot find add_set index 1 as target [ 646.598394][T17196] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3056'. [ 646.609572][T17179] delete_channel: no stack [ 646.711961][T17204] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 647.107683][T17210] loop6: detected capacity change from 0 to 63 [ 647.117277][T17210] Buffer I/O error on dev loop6, logical block 0, async page read [ 647.155228][T17210] Buffer I/O error on dev loop6, logical block 1, async page read [ 647.167695][T17210] Buffer I/O error on dev loop6, logical block 2, async page read [ 647.176957][T17210] Buffer I/O error on dev loop6, logical block 3, async page read [ 647.181583][T17210] Buffer I/O error on dev loop6, logical block 0, async page read [ 647.184841][T17210] Buffer I/O error on dev loop6, logical block 1, async page read [ 647.191873][T17210] Buffer I/O error on dev loop6, logical block 2, async page read [ 647.194876][T17210] Buffer I/O error on dev loop6, logical block 3, async page read [ 647.200261][T17210] Buffer I/O error on dev loop6, logical block 0, async page read [ 647.204759][T17210] Buffer I/O error on dev loop6, logical block 1, async page read [ 647.820545][T17214] lo speed is unknown, defaulting to 1000 [ 647.827497][T17214] lo speed is unknown, defaulting to 1000 [ 647.831343][T17214] lo speed is unknown, defaulting to 1000 [ 648.039060][T17214] infiniband sz1: set active [ 648.041141][T17214] infiniband sz1: added lo [ 648.071755][T15154] lo speed is unknown, defaulting to 1000 [ 648.104595][T17214] RDS/IB: sz1: added [ 648.106455][T17214] smc: adding ib device sz1 with port count 1 [ 648.108483][T17214] smc: ib device sz1 port 1 has pnetid [ 648.112676][T17214] lo speed is unknown, defaulting to 1000 [ 648.194359][T17214] lo speed is unknown, defaulting to 1000 [ 648.273242][T17214] lo speed is unknown, defaulting to 1000 [ 648.311877][ T6009] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 648.352842][T17214] lo speed is unknown, defaulting to 1000 [ 648.435108][T15154] lo speed is unknown, defaulting to 1000 [ 648.473182][ T6009] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.476677][ T6009] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.479911][ T6009] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.482969][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.488877][T17213] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 648.492804][ T6009] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.719921][ T6009] usb 8-1: USB disconnect, device number 30 [ 649.029163][T17231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3066'. [ 649.032567][T17231] netlink: 'syz.0.3066': attribute type 6 has an invalid length. [ 649.035247][T17231] netlink: 'syz.0.3066': attribute type 5 has an invalid length. [ 649.037679][T17231] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 649.106657][T17235] syz.0.3067: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 650.352331][T17250] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 650.686870][T17260] .: renamed from bond0 (while UP) [ 652.205241][T17269] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 652.259734][T17274] syz.0.3076: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 652.350199][T17279] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 652.530898][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 652.530963][ T40] audit: type=1326 audit(2000000359.779:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.539963][ T40] audit: type=1326 audit(2000000359.779:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.546690][ T40] audit: type=1326 audit(2000000359.789:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.553606][ T40] audit: type=1326 audit(2000000359.789:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.560186][ T40] audit: type=1326 audit(2000000359.789:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.566938][ T40] audit: type=1326 audit(2000000359.789:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.573792][ T40] audit: type=1326 audit(2000000359.789:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.585668][ T40] audit: type=1326 audit(2000000359.789:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.592485][ T40] audit: type=1326 audit(2000000359.789:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.605548][ T40] audit: type=1326 audit(2000000359.789:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.4.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 652.939410][T17278] syz.0.3078 (17278): drop_caches: 1 [ 652.948986][T17280] syz.0.3078 (17280): drop_caches: 1 [ 653.319493][T17278] syz.0.3078 (17278): drop_caches: 1 [ 654.378760][T17311] lo speed is unknown, defaulting to 1000 [ 654.458073][T17322] syz.4.3086: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 654.651028][T17329] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 655.624331][T17338] syz.3.3090: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 655.981729][T16598] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 656.132164][T16598] usb 9-1: Using ep0 maxpacket: 16 [ 656.134989][T16598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 656.139811][T16598] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 656.142775][T16598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.145273][T16598] usb 9-1: Product: syz [ 656.146587][T16598] usb 9-1: Manufacturer: syz [ 656.148056][T16598] usb 9-1: SerialNumber: syz [ 656.153884][T16598] usb 9-1: config 0 descriptor?? [ 656.156573][T16598] hub 9-1:0.0: bad descriptor, ignoring hub [ 656.158446][T16598] hub 9-1:0.0: probe with driver hub failed with error -5 [ 656.162766][T16598] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input152 [ 656.495844][T17349] random: crng reseeded on system resumption [ 656.544409][T17351] 9pnet_fd: Insufficient options for proto=fd [ 656.802668][T17353] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 656.873012][T17353] netlink: 'syz.1.3096': attribute type 4 has an invalid length. [ 657.237637][T17360] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 657.728939][T17366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 658.320518][T17372] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 660.162145][T17400] syz.4.3110: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 660.249600][T17395] ubi: mtd0 is already attached to ubi31 [ 660.258735][T17395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 660.260915][T17395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 660.264277][T17395] vhci_hcd vhci_hcd.0: Device attached [ 660.270370][T17405] usbip_core: unknown command [ 660.272893][T17405] vhci_hcd: unknown pdu 0 [ 660.274378][T17405] usbip_core: unknown command [ 660.277318][ T12] vhci_hcd: stop threads [ 660.279124][ T12] vhci_hcd: release socket [ 660.280811][ T12] vhci_hcd: disconnect device [ 660.285213][T17395] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 660.287343][T17395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.289842][T17395] vhci_hcd vhci_hcd.0: Device attached [ 660.327420][ T6049] usb 9-1: USB disconnect, device number 8 [ 660.348272][T17409] vhci_hcd: connection closed [ 660.348806][ T12] vhci_hcd: stop threads [ 660.351777][ T12] vhci_hcd: release socket [ 660.353323][ T12] vhci_hcd: disconnect device [ 660.495849][T17420] Cannot find add_set index 1 as target [ 660.917288][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 660.920132][T17422] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 661.115488][T17428] syz.0.3120: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 661.377908][T17440] netlink: 'syz.1.3126': attribute type 2 has an invalid length. [ 661.382464][T17440] netlink: 723 bytes leftover after parsing attributes in process `syz.1.3126'. [ 661.492285][T17444] tipc: Resetting bearer [ 661.743933][T17452] FAULT_INJECTION: forcing a failure. [ 661.743933][T17452] name failslab, interval 1, probability 0, space 0, times 0 [ 661.749124][T17452] CPU: 3 UID: 0 PID: 17452 Comm: syz.1.3128 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 661.749149][T17452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 661.749160][T17452] Call Trace: [ 661.749166][T17452] [ 661.749174][T17452] dump_stack_lvl+0x16c/0x1f0 [ 661.749198][T17452] should_fail_ex+0x512/0x640 [ 661.749216][T17452] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 661.749246][T17452] should_failslab+0xc2/0x120 [ 661.749267][T17452] __kmalloc_cache_noprof+0x6a/0x3e0 [ 661.749292][T17452] ? rcu_is_watching+0x12/0xc0 [ 661.749310][T17452] ? call_usermodehelper_setup+0xaf/0x360 [ 661.749328][T17452] ? __pfx_free_modprobe_argv+0x10/0x10 [ 661.749356][T17452] call_usermodehelper_setup+0xaf/0x360 [ 661.749385][T17452] __request_module+0x3bd/0x690 [ 661.749412][T17452] ? __pfx___request_module+0x10/0x10 [ 661.749436][T17452] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 661.749459][T17452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 661.749484][T17452] ? find_held_lock+0x2b/0x80 [ 661.749503][T17452] ? blk_request_module+0x62/0xb0 [ 661.749526][T17452] blk_request_module+0x7f/0xb0 [ 661.749543][T17452] blkdev_get_no_open+0x9b/0x100 [ 661.749571][T17452] blkdev_open+0x141/0x3f0 [ 661.749591][T17452] do_dentry_open+0x744/0x1c10 [ 661.749609][T17452] ? __pfx_blkdev_open+0x10/0x10 [ 661.749628][T17452] vfs_open+0x82/0x3f0 [ 661.749653][T17452] path_openat+0x1de4/0x2cb0 [ 661.749677][T17452] ? __pfx_path_openat+0x10/0x10 [ 661.749695][T17452] ? __lock_acquire+0xb8a/0x1c90 [ 661.749721][T17452] do_filp_open+0x20b/0x470 [ 661.749738][T17452] ? __pfx_do_filp_open+0x10/0x10 [ 661.749772][T17452] ? alloc_fd+0x471/0x7d0 [ 661.749804][T17452] do_sys_openat2+0x11b/0x1d0 [ 661.749825][T17452] ? __pfx_do_sys_openat2+0x10/0x10 [ 661.749848][T17452] ? __fget_files+0x20e/0x3c0 [ 661.749872][T17452] ? handle_mm_fault+0x250/0xd10 [ 661.749903][T17452] __ia32_sys_creat+0xcb/0x120 [ 661.749926][T17452] ? __pfx___ia32_sys_creat+0x10/0x10 [ 661.749948][T17452] ? __pfx_ksys_write+0x10/0x10 [ 661.749966][T17452] ? rcu_is_watching+0x12/0xc0 [ 661.749984][T17452] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 661.750003][T17452] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.750021][T17452] __do_fast_syscall_32+0x7c/0x3a0 [ 661.750042][T17452] do_fast_syscall_32+0x32/0x80 [ 661.750067][T17452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.750088][T17452] RIP: 0023:0xf706e579 [ 661.750102][T17452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.750122][T17452] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 661.750139][T17452] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000090 [ 661.750172][T17452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.750183][T17452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.750193][T17452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.750203][T17452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.750226][T17452] [ 661.849680][ T1139] Bluetooth: Error in BCSP hdr checksum [ 661.949936][T17455] syz.1.3129: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 662.041928][T16598] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 662.176871][T16598] usb 8-1: device descriptor read/64, error -71 [ 662.312767][ T5968] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 662.431748][T16598] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 662.561880][T16598] usb 8-1: device descriptor read/64, error -71 [ 662.672363][T16598] usb usb8-port1: attempt power cycle [ 663.011824][T16598] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 663.032582][T16598] usb 8-1: device descriptor read/8, error -71 [ 663.281783][T16598] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 663.302445][T16598] usb 8-1: device descriptor read/8, error -71 [ 663.344450][T17465] Cannot find add_set index 1 as target [ 663.413310][T16598] usb usb8-port1: unable to enumerate USB device [ 663.621834][ T5974] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 663.623775][ T5968] Bluetooth: hci3: command 0x1003 tx timeout [ 663.733298][T17469] evm: overlay not supported [ 663.973381][T17472] netlink: 798 bytes leftover after parsing attributes in process `syz.4.3135'. [ 663.982593][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 663.982603][ T40] audit: type=1326 audit(2000000371.239:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.4.3135" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x0 [ 664.641840][T17484] wireguard0: entered promiscuous mode [ 664.644805][T17484] wireguard0: entered allmulticast mode [ 664.763009][T17508] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 664.765832][T17508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 664.768672][T17508] vhci_hcd vhci_hcd.0: Device attached [ 664.833580][T17509] vhci_hcd: connection closed [ 664.833791][ T60] vhci_hcd: stop threads [ 664.836712][ T60] vhci_hcd: release socket [ 664.839969][ T60] vhci_hcd: disconnect device [ 665.462193][T17521] Cannot find add_set index 1 as target [ 665.875294][T17524] FAULT_INJECTION: forcing a failure. [ 665.875294][T17524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.879625][T17524] CPU: 0 UID: 0 PID: 17524 Comm: syz.3.3145 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 665.879641][T17524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 665.879648][T17524] Call Trace: [ 665.879663][T17524] [ 665.879679][T17524] dump_stack_lvl+0x16c/0x1f0 [ 665.879696][T17524] should_fail_ex+0x512/0x640 [ 665.879709][T17524] _copy_from_user+0x2e/0xd0 [ 665.879722][T17524] get_compat_msghdr+0xa7/0x170 [ 665.879736][T17524] ? __pfx_get_compat_msghdr+0x10/0x10 [ 665.879748][T17524] ? __pfx__kstrtoull+0x10/0x10 [ 665.879765][T17524] ___sys_sendmsg+0x1ae/0x1d0 [ 665.879778][T17524] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.879788][T17524] ? __lock_acquire+0x622/0x1c90 [ 665.879816][T17524] ? __pfx___might_resched+0x10/0x10 [ 665.879830][T17524] __sys_sendmmsg+0x2f9/0x420 [ 665.879844][T17524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 665.879871][T17524] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 665.879884][T17524] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 665.879896][T17524] __do_fast_syscall_32+0x7c/0x3a0 [ 665.879909][T17524] do_fast_syscall_32+0x32/0x80 [ 665.879920][T17524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.879936][T17524] RIP: 0023:0xf711e579 [ 665.879944][T17524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.879955][T17524] RSP: 002b:00000000f50ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 665.879965][T17524] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000480 [ 665.879972][T17524] RDX: 00000000000002e9 RSI: 000000000000ffe0 RDI: 0000000000000000 [ 665.879978][T17524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.879984][T17524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.879990][T17524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.880003][T17524] [ 665.939423][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.341806][ T5974] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 666.345308][ T5974] Bluetooth: hci2: Injecting HCI hardware error event [ 666.348546][ T5974] Bluetooth: hci2: hardware error 0x00 [ 666.678720][T17541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 667.478497][T17560] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 667.483081][T17559] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 667.792294][T17550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 668.421860][ T5974] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 668.499576][T17567] overlayfs: missing 'lowerdir' [ 668.544507][T17567] overlay: Unknown parameter 'smackfsfloor' [ 668.597578][T17567] netlink: 'syz.3.3157': attribute type 32 has an invalid length. [ 668.600599][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 668.602809][T17570] ipt_ECN: cannot use operation on non-tcp rule [ 668.603528][T17567] (unnamed net_device) (uninitialized): option coupled_control: invalid value (46) [ 668.733879][T17574] Cannot find add_set index 1 as target [ 668.999179][T17579] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 669.402556][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 669.408507][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 669.583110][T17593] loop6: detected capacity change from 0 to 524287999 [ 669.681971][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 669.684856][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 669.736440][ T9503] Process accounting resumed [ 669.816224][T17599] syz.1.3163: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 669.822896][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 669.825729][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3161'. [ 670.908522][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 671.091731][T10050] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 671.241766][T10050] usb 6-1: Using ep0 maxpacket: 16 [ 671.258012][T10050] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 671.265493][T10050] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 671.268857][T10050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.271282][T10050] usb 6-1: Product: syz [ 671.275706][T17624] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 671.277675][T10050] usb 6-1: Manufacturer: syz [ 671.279082][T10050] usb 6-1: SerialNumber: syz [ 671.282085][T10050] usb 6-1: config 0 descriptor?? [ 671.292656][T10050] hub 6-1:0.0: bad descriptor, ignoring hub [ 671.294473][T10050] hub 6-1:0.0: probe with driver hub failed with error -5 [ 671.297902][T10050] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input153 [ 671.396871][T17630] syz.3.3172: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 671.486368][T17634] Cannot find add_set index 1 as target [ 671.777264][T17641] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 672.494312][T17646] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 674.040893][ T40] audit: type=1326 audit(2000000381.289:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.062786][ T40] audit: type=1326 audit(2000000381.289:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.079581][ T40] audit: type=1326 audit(2000000381.289:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.101769][ T40] audit: type=1326 audit(2000000381.289:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.121821][ T40] audit: type=1326 audit(2000000381.299:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.128335][ T40] audit: type=1326 audit(2000000381.309:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.141917][ T40] audit: type=1326 audit(2000000381.309:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.154534][ T40] audit: type=1326 audit(2000000381.309:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.172530][ T40] audit: type=1326 audit(2000000381.309:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.185936][ T40] audit: type=1326 audit(2000000381.309:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.3184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 674.543356][T17664] ipt_ECN: cannot use operation on non-tcp rule [ 674.959095][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 675.235501][T10050] usb 6-1: USB disconnect, device number 20 [ 675.517993][T17678] tipc: Resetting bearer [ 675.913867][T17685] Cannot find add_set index 1 as target [ 676.788378][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 676.791442][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 676.853379][T15154] Process accounting resumed [ 676.972041][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 676.975160][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 677.057928][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 677.060968][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 677.329799][T17713] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 677.332408][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 677.386259][T17713] syz.4.3188 (17713): drop_caches: 2 [ 678.021772][T17728] loop6: detected capacity change from 0 to 524287999 [ 678.574885][T17737] Cannot find add_set index 1 as target [ 678.952580][T17740] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 679.735758][T17744] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3196'. [ 679.939799][T17750] Cannot find add_set index 1 as target [ 680.142307][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 680.268318][T17758] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 681.249540][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.252517][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.315382][ T838] Process accounting resumed [ 681.431729][T14976] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 681.540700][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.543886][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.602625][T17764] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 681.602679][T14976] usb 8-1: Using ep0 maxpacket: 16 [ 681.610052][T14976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 681.616786][T14976] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 681.620329][T14976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.623109][T14976] usb 8-1: Product: syz [ 681.624691][T14976] usb 8-1: Manufacturer: syz [ 681.626487][T14976] usb 8-1: SerialNumber: syz [ 681.630751][T14976] usb 8-1: config 0 descriptor?? [ 681.634869][T14976] hub 8-1:0.0: bad descriptor, ignoring hub [ 681.637468][T14976] hub 8-1:0.0: probe with driver hub failed with error -5 [ 681.643273][T14976] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input154 [ 681.670213][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.673355][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'. [ 681.708524][T17779] Cannot find add_set index 1 as target [ 681.980205][T17784] veth0: entered promiscuous mode [ 681.984261][T17781] veth0: left promiscuous mode [ 682.188350][T17790] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 682.371713][T16598] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 682.541722][T16598] usb 6-1: Using ep0 maxpacket: 16 [ 682.544744][T16598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 682.549796][T16598] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 682.552669][T16598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.555229][T16598] usb 6-1: Product: syz [ 682.556552][T16598] usb 6-1: Manufacturer: syz [ 682.558075][T16598] usb 6-1: SerialNumber: syz [ 682.560842][T16598] usb 6-1: config 0 descriptor?? [ 682.563618][T16598] hub 6-1:0.0: bad descriptor, ignoring hub [ 682.565568][T16598] hub 6-1:0.0: probe with driver hub failed with error -5 [ 682.569149][T16598] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input155 [ 683.570087][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 683.572229][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.576479][T17805] vhci_hcd vhci_hcd.0: Device attached [ 683.649766][T17806] vhci_hcd: connection closed [ 683.691842][ T46] vhci_hcd: stop threads [ 683.695577][ T46] vhci_hcd: release socket [ 683.697804][ T46] vhci_hcd: disconnect device [ 684.666339][T17821] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 684.710730][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 685.071310][T17824] veth0: entered promiscuous mode [ 685.076390][T17823] veth0: left promiscuous mode [ 685.224252][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.226428][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.461771][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 685.461783][ T40] audit: type=1326 audit(2000000392.709:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.470670][ T40] audit: type=1326 audit(2000000392.709:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.478714][T14976] usb 8-1: USB disconnect, device number 35 [ 685.478742][ T40] audit: type=1326 audit(2000000392.709:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.488777][ T40] audit: type=1326 audit(2000000392.709:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.496089][ T40] audit: type=1326 audit(2000000392.709:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.503062][ T40] audit: type=1326 audit(2000000392.709:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.509685][ T40] audit: type=1326 audit(2000000392.709:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.516497][ T40] audit: type=1326 audit(2000000392.709:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.525170][ T40] audit: type=1326 audit(2000000392.709:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.535949][ T40] audit: type=1326 audit(2000000392.709:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz.3.3216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 685.592910][T16598] usb 6-1: USB disconnect, device number 21 [ 685.851266][T17841] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 686.359996][T17848] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 686.697769][T17851] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.021931][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 687.022108][T17857] veth0: entered promiscuous mode [ 687.027990][T17856] veth0: left promiscuous mode [ 687.182507][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 687.211938][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 687.226534][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 687.229413][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.240043][ T9] usb 6-1: Product: syz [ 687.245886][ T9] usb 6-1: Manufacturer: syz [ 687.257844][ T9] usb 6-1: SerialNumber: syz [ 687.276456][ T9] usb 6-1: config 0 descriptor?? [ 687.280258][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 687.282262][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 687.288464][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input156 [ 687.637169][T17868] Cannot find add_set index 1 as target [ 688.697305][T17888] Cannot find add_set index 1 as target [ 689.618640][T17902] bridge1: entered promiscuous mode [ 689.849881][T17902] 9pnet: Could not find request transport: fd0x0000000000000009 [ 690.200393][T17911] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.208452][T17909] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 690.211606][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 690.226408][T17909] syz.0.3245 (17909): drop_caches: 2 [ 690.440371][T17920] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 690.700504][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 690.700514][ T40] audit: type=1326 audit(2000000397.949:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.713209][ T40] audit: type=1326 audit(2000000397.959:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.720137][ T40] audit: type=1326 audit(2000000397.959:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.726816][ T40] audit: type=1326 audit(2000000397.959:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.733664][ T40] audit: type=1326 audit(2000000397.959:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.740453][ T40] audit: type=1326 audit(2000000397.959:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.747133][ T40] audit: type=1326 audit(2000000397.969:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.753982][ T40] audit: type=1326 audit(2000000397.969:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.760801][ T40] audit: type=1326 audit(2000000397.969:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.768294][ T40] audit: type=1326 audit(2000000397.969:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 690.781739][T16598] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 690.931812][T16598] usb 8-1: Using ep0 maxpacket: 16 [ 690.938715][T16598] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 690.945653][T16598] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 690.949408][T16598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.952909][T16598] usb 8-1: Product: syz [ 690.954727][T16598] usb 8-1: Manufacturer: syz [ 690.956792][T16598] usb 8-1: SerialNumber: syz [ 690.959725][T16598] usb 8-1: config 0 descriptor?? [ 690.964212][T16598] hub 8-1:0.0: bad descriptor, ignoring hub [ 690.966201][T16598] hub 8-1:0.0: probe with driver hub failed with error -5 [ 690.969924][T16598] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input157 [ 691.339159][ T9] usb 6-1: USB disconnect, device number 22 [ 691.662025][T17933] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 691.664594][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 691.671090][T17933] syz.1.3243 (17933): drop_caches: 2 [ 691.821992][ T6032] usb 8-1: USB disconnect, device number 36 [ 692.531356][T15154] lo speed is unknown, defaulting to 1000 [ 692.664559][T17953] syz.4.3248: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 693.157090][T17959] syz.1.3250: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 693.593732][T17967] bridge1: entered promiscuous mode [ 693.658760][T17967] 9pnet: Could not find request transport: fd0x0000000000000009 [ 694.182480][T17977] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.230288][T17979] syz.4.3258: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 694.444571][T17992] lo speed is unknown, defaulting to 1000 [ 694.479876][T17995] netlink: 'syz.0.3259': attribute type 4 has an invalid length. [ 694.594939][T17997] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 695.511204][T18008] syz.0.3272: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 695.870437][T18014] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 696.862961][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 696.862977][ T40] audit: type=1326 audit(2000000404.119:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.902324][ T40] audit: type=1326 audit(2000000404.139:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.932673][ T40] audit: type=1326 audit(2000000404.189:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.939247][ T40] audit: type=1326 audit(2000000404.189:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.952449][ T40] audit: type=1326 audit(2000000404.189:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.958960][ T40] audit: type=1326 audit(2000000404.199:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.972304][ T40] audit: type=1326 audit(2000000404.199:9170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.978631][ T40] audit: type=1326 audit(2000000404.209:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 696.990743][ T40] audit: type=1326 audit(2000000404.209:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 697.001884][ T40] audit: type=1326 audit(2000000404.219:9173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3264" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 697.319721][T18027] syz.3.3265: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 697.506861][T18036] Cannot find add_set index 1 as target [ 697.550912][T18038] syz.4.3269: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 697.588718][T18041] syz.4.3271: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 697.940078][T18047] netlink: 'syz.4.3274': attribute type 4 has an invalid length. [ 697.967375][T18046] lo speed is unknown, defaulting to 1000 [ 699.252165][T18063] netlink: zone id is out of range [ 699.255469][T18063] netlink: zone id is out of range [ 699.257822][T18063] netlink: zone id is out of range [ 699.288676][T18063] netlink: set zone limit has 4 unknown bytes [ 700.637856][T18089] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 701.923678][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 701.926497][T18100] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 701.928995][T18100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.940824][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3290'. [ 702.372366][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 702.372377][ T40] audit: type=1326 audit(2000000409.629:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.387943][ T40] audit: type=1326 audit(2000000409.629:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.397155][ T40] audit: type=1326 audit(2000000409.629:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.411948][ T40] audit: type=1326 audit(2000000409.639:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.420696][ T40] audit: type=1326 audit(2000000409.639:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.429541][ T40] audit: type=1326 audit(2000000409.639:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.438417][ T40] audit: type=1326 audit(2000000409.639:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.447487][ T40] audit: type=1326 audit(2000000409.639:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.456306][ T40] audit: type=1326 audit(2000000409.639:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.465196][ T40] audit: type=1326 audit(2000000409.639:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18106 comm="syz.0.3292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 702.861334][T18114] netlink: 'syz.1.3293': attribute type 7 has an invalid length. [ 702.863886][T18114] netlink: 'syz.1.3293': attribute type 8 has an invalid length. [ 703.123090][T18121] Invalid source name [ 703.124907][T18121] UBIFS error (pid: 18121): cannot open "./file0", error -22 [ 703.270214][T18128] Cannot find add_set index 1 as target [ 703.826494][T18135] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 703.963611][T18142] Cannot find add_set index 1 as target [ 705.401414][T18164] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 705.884860][T18173] syzkaller0: entered promiscuous mode [ 705.887333][T18173] syzkaller0: entered allmulticast mode [ 706.129235][T18181] random: crng reseeded on system resumption [ 706.488119][T18187] Cannot find add_set index 1 as target [ 707.189984][T18201] tipc: Resetting bearer [ 707.658254][T18208] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 708.435597][T18221] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 47 [ 708.441712][T18221] binder: 18220:18221 unknown command 0 [ 708.443601][T18221] binder: 18220:18221 ioctl c0306201 800003c0 returned -22 [ 708.703939][T18228] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 709.921849][T18254] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 710.677148][T18266] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 710.917145][T18273] syz.4.3337: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 711.253325][T18275] fuse: Bad value for 'user_id' [ 711.256755][T18275] fuse: Bad value for 'user_id' [ 711.507554][T18281] syz.3.3342: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 711.798905][T18297] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 712.047108][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3344'. [ 712.053836][T18301] ata1.00: invalid cdb length 6 [ 712.067391][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 712.067402][ T40] audit: type=1804 audit(2000000419.319:9241): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3344" name="/newroot/213/cgroup.controllers" dev="tmpfs" ino=1131 res=1 errno=0 [ 712.078461][ T40] audit: type=1800 audit(2000000419.319:9242): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3344" name="cgroup.controllers" dev="tmpfs" ino=1131 res=0 errno=0 [ 712.086756][ T40] audit: type=1800 audit(2000000419.329:9243): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3344" name="cgroup.controllers" dev="tmpfs" ino=1131 res=0 errno=0 [ 712.655198][T18314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3345'. [ 713.438259][T18323] syz.1.3351: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 713.464713][T18324] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.467785][T18324] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 713.470886][T18324] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.475424][T18324] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 713.479161][T18321] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.482357][T18321] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 713.485202][T18321] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.487764][T18321] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 714.534515][T18343] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 714.632547][ T40] audit: type=1326 audit(2000000421.889:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.639180][ T40] audit: type=1326 audit(2000000421.889:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.645829][ T40] audit: type=1326 audit(2000000421.889:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.652455][ T40] audit: type=1326 audit(2000000421.889:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.659089][ T40] audit: type=1326 audit(2000000421.889:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.661730][T18313] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 714.665700][ T40] audit: type=1326 audit(2000000421.889:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 714.665725][ T40] audit: type=1326 audit(2000000421.889:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.4.3355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 715.534720][T18354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 716.224760][T18365] syz.3.3361: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 716.265967][T18367] netlink: zone id is out of range [ 716.269054][T18367] netlink: zone id is out of range [ 716.270835][T18367] netlink: zone id is out of range [ 716.284997][T18367] netlink: set zone limit has 4 unknown bytes [ 716.733038][T18392] Cannot find add_set index 1 as target [ 717.507096][T18408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3371'. [ 717.569577][T18410] netlink: zone id is out of range [ 717.572722][T18410] netlink: zone id is out of range [ 717.574516][T18410] netlink: zone id is out of range [ 717.584879][T18410] netlink: set zone limit has 4 unknown bytes [ 717.679018][T18414] netlink: zone id is out of range [ 717.682027][T18414] netlink: zone id is out of range [ 717.730589][T18417] fuse: Unknown parameter 'smackfsfloor' [ 717.840831][T18420] FAULT_INJECTION: forcing a failure. [ 717.840831][T18420] name failslab, interval 1, probability 0, space 0, times 0 [ 717.845831][T18420] CPU: 0 UID: 0 PID: 18420 Comm: syz.0.3375 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 717.845846][T18420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 717.845853][T18420] Call Trace: [ 717.845857][T18420] [ 717.845862][T18420] dump_stack_lvl+0x16c/0x1f0 [ 717.845877][T18420] should_fail_ex+0x512/0x640 [ 717.845889][T18420] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 717.845902][T18420] should_failslab+0xc2/0x120 [ 717.845914][T18420] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 717.845925][T18420] ? __d_alloc+0x31/0xaa0 [ 717.845939][T18420] __d_alloc+0x31/0xaa0 [ 717.845951][T18420] d_alloc+0x4a/0x1e0 [ 717.845963][T18420] d_alloc_parallel+0xe3/0x12e0 [ 717.845980][T18420] ? kasan_save_stack+0x42/0x60 [ 717.845989][T18420] ? kasan_save_stack+0x33/0x60 [ 717.845998][T18420] ? kasan_save_track+0x14/0x30 [ 717.846007][T18420] ? kasan_save_free_info+0x3b/0x60 [ 717.846021][T18420] ? __kasan_slab_free+0x51/0x70 [ 717.846030][T18420] ? kfree+0x2b4/0x4d0 [ 717.846043][T18420] ? map_id_range_up+0x2ce/0x3b0 [ 717.846059][T18420] ? __pfx_d_alloc_parallel+0x10/0x10 [ 717.846074][T18420] ? lockdep_init_map_type+0x5c/0x280 [ 717.846095][T18420] ? lockdep_init_map_type+0x5c/0x280 [ 717.846112][T18420] __lookup_slow+0x193/0x460 [ 717.846126][T18420] ? __pfx___lookup_slow+0x10/0x10 [ 717.846142][T18420] ? compaction_alloc+0x2b30/0x4220 [ 717.846159][T18420] ? compaction_alloc+0x2b30/0x4220 [ 717.846174][T18420] ? d_lookup+0xe7/0x190 [ 717.846189][T18420] lookup_one_unlocked+0xd4/0x120 [ 717.846204][T18420] lookup_one_positive_unlocked+0x24/0xc0 [ 717.846219][T18420] ovl_lookup_index+0x20d/0x800 [ 717.846235][T18420] ? __pfx_ovl_lookup_index+0x10/0x10 [ 717.846247][T18420] ? trace_kmalloc+0x2b/0xd0 [ 717.846263][T18420] ovl_lookup+0x98f/0x21a0 [ 717.846281][T18420] ? __pfx_ovl_lookup+0x10/0x10 [ 717.846293][T18420] ? generic_permission+0xad/0x7d0 [ 717.846307][T18420] ? bpf_lsm_inode_permission+0x9/0x10 [ 717.846322][T18420] ? inode_permission+0x156/0x630 [ 717.846335][T18420] ? ovl_revert_creds+0x13/0x50 [ 717.846348][T18420] ? ovl_permission+0xcd/0x290 [ 717.846360][T18420] ? __pfx_ovl_permission+0x10/0x10 [ 717.846374][T18420] ? bpf_lsm_inode_permission+0x9/0x10 [ 717.846385][T18420] ? security_inode_permission+0xbf/0x260 [ 717.846401][T18420] ? inode_permission+0x156/0x630 [ 717.846414][T18420] ? __pfx_ovl_lookup+0x10/0x10 [ 717.846426][T18420] lookup_open.isra.0+0x4da/0x1580 [ 717.846444][T18420] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 717.846466][T18420] ? __pfx_down_write+0x10/0x10 [ 717.846477][T18420] ? mnt_get_write_access+0x20c/0x300 [ 717.846494][T18420] path_openat+0x893/0x2cb0 [ 717.846509][T18420] ? __pfx_path_openat+0x10/0x10 [ 717.846520][T18420] ? __lock_acquire+0xb8a/0x1c90 [ 717.846535][T18420] do_filp_open+0x20b/0x470 [ 717.846546][T18420] ? __pfx_do_filp_open+0x10/0x10 [ 717.846566][T18420] ? alloc_fd+0x471/0x7d0 [ 717.846586][T18420] do_sys_openat2+0x11b/0x1d0 [ 717.846600][T18420] ? __pfx_do_sys_openat2+0x10/0x10 [ 717.846644][T18420] ? __fget_files+0x20e/0x3c0 [ 717.846659][T18420] ? handle_mm_fault+0x250/0xd10 [ 717.846678][T18420] __ia32_sys_creat+0xcb/0x120 [ 717.846692][T18420] ? __pfx___ia32_sys_creat+0x10/0x10 [ 717.846705][T18420] ? __pfx_ksys_write+0x10/0x10 [ 717.846716][T18420] ? rcu_is_watching+0x12/0xc0 [ 717.846727][T18420] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 717.846739][T18420] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.846749][T18420] __do_fast_syscall_32+0x7c/0x3a0 [ 717.846762][T18420] do_fast_syscall_32+0x32/0x80 [ 717.846774][T18420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.846787][T18420] RIP: 0023:0xf7f74579 [ 717.846796][T18420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 717.846806][T18420] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 717.846817][T18420] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000150 [ 717.846823][T18420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.846829][T18420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.846835][T18420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 717.846841][T18420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.846855][T18420] [ 717.847008][T18420] overlayfs: failed inode index lookup (ino=1331, key=00fb2100015d6e9a21424345429eba22597734cfc5f6713c413305000000000000, err=-12); [ 717.847008][T18420] overlayfs: mount with '-o index=off' to disable inodes index. [ 718.259188][T18426] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 718.271752][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 719.041128][T18435] loop6: detected capacity change from 0 to 524287999 [ 720.271934][ T5974] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 720.477910][T18449] loop6: detected capacity change from 0 to 524287999 [ 720.886017][T18467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3389'. [ 721.105290][T18471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 721.107391][T18471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 721.110224][T18471] vhci_hcd vhci_hcd.0: Device attached [ 721.421811][ T838] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 721.757991][T18472] vhci_hcd: connection reset by peer [ 721.760400][ T13] vhci_hcd: stop threads [ 721.762517][ T13] vhci_hcd: release socket [ 721.767767][ T13] vhci_hcd: disconnect device [ 721.841495][T18475] net_ratelimit: 6 callbacks suppressed [ 721.841507][T18475] netlink: zone id is out of range [ 721.845259][T18475] netlink: zone id is out of range [ 721.891171][T18475] netlink: set zone limit has 4 unknown bytes [ 723.615137][T18497] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 723.746967][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 723.746983][ T40] audit: type=1326 audit(2000000430.999:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.757190][ T40] audit: type=1326 audit(2000000430.999:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.764092][ T40] audit: type=1326 audit(2000000430.999:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.770787][ T40] audit: type=1326 audit(2000000430.999:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.777538][ T40] audit: type=1326 audit(2000000430.999:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.784984][ T40] audit: type=1326 audit(2000000430.999:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.793134][ T40] audit: type=1326 audit(2000000430.999:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.799790][ T40] audit: type=1326 audit(2000000430.999:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.806754][ T40] audit: type=1326 audit(2000000430.999:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.813404][ T40] audit: type=1326 audit(2000000430.999:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.3397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 723.828650][T18502] FAULT_INJECTION: forcing a failure. [ 723.828650][T18502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.833363][T18502] CPU: 3 UID: 0 PID: 18502 Comm: syz.3.3399 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 723.833380][T18502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 723.833387][T18502] Call Trace: [ 723.833391][T18502] [ 723.833396][T18502] dump_stack_lvl+0x16c/0x1f0 [ 723.833411][T18502] should_fail_ex+0x512/0x640 [ 723.833425][T18502] _copy_to_user+0x32/0xd0 [ 723.833438][T18502] simple_read_from_buffer+0xcb/0x170 [ 723.833455][T18502] proc_fail_nth_read+0x197/0x270 [ 723.833470][T18502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.833485][T18502] ? rw_verify_area+0xcf/0x680 [ 723.833500][T18502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.833514][T18502] vfs_read+0x1e4/0xc60 [ 723.833524][T18502] ? fdget_pos+0x2a2/0x370 [ 723.833535][T18502] ? __pfx_vfs_read+0x10/0x10 [ 723.833543][T18502] ? find_held_lock+0x2b/0x80 [ 723.833558][T18502] ? __fget_files+0x20e/0x3c0 [ 723.833577][T18502] ksys_read+0x12a/0x250 [ 723.833586][T18502] ? __pfx_ksys_read+0x10/0x10 [ 723.833597][T18502] ? rcu_is_watching+0x12/0xc0 [ 723.833611][T18502] __do_fast_syscall_32+0x7c/0x3a0 [ 723.833624][T18502] do_fast_syscall_32+0x32/0x80 [ 723.833635][T18502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 723.833648][T18502] RIP: 0023:0xf711e579 [ 723.833657][T18502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 723.833667][T18502] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 723.833677][T18502] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 723.833685][T18502] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 723.833691][T18502] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 723.833697][T18502] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 723.833703][T18502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.833716][T18502] [ 723.903727][ C3] vkms_vblank_simulate: vblank timer overrun [ 724.041544][T18509] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 724.149401][T18509] ntfs3: Unknown parameter 'dis\ard' [ 725.171754][T16598] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 725.321791][T16598] usb 8-1: Using ep0 maxpacket: 8 [ 725.325310][T16598] usb 8-1: config 0 has no interfaces? [ 725.327075][T16598] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 725.329867][T16598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.334809][T16598] usb 8-1: config 0 descriptor?? [ 725.822999][T18521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.825803][T18521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.829603][T16598] usb 8-1: USB disconnect, device number 37 [ 726.203661][T18544] syzkaller0: entered promiscuous mode [ 726.206023][T18544] syzkaller0: entered allmulticast mode [ 726.391414][T18551] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 726.456904][T18551] ntfs3: Unknown parameter 'dis\ard' [ 726.509512][T18554] syz.3.3415: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 726.571789][ T838] vhci_hcd: vhci_device speed not set [ 726.802990][T18564] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 728.371595][T18576] syz.1.3421: vmalloc error: size 2058063872, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 728.376161][T18576] CPU: 3 UID: 0 PID: 18576 Comm: syz.1.3421 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 728.376179][T18576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 728.376188][T18576] Call Trace: [ 728.376193][T18576] [ 728.376198][T18576] dump_stack_lvl+0x16c/0x1f0 [ 728.376214][T18576] warn_alloc+0x248/0x3a0 [ 728.376227][T18576] ? __pfx_warn_alloc+0x10/0x10 [ 728.376239][T18576] ? __pfx_stack_trace_save+0x10/0x10 [ 728.376254][T18576] ? stack_depot_save_flags+0x28/0xa40 [ 728.376272][T18576] ? kasan_save_stack+0x42/0x60 [ 728.376283][T18576] ? kasan_save_stack+0x33/0x60 [ 728.376293][T18576] ? kasan_save_track+0x14/0x30 [ 728.376304][T18576] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 728.376320][T18576] ? __vb2_queue_alloc+0x8c9/0x1280 [ 728.376333][T18576] ? vb2_core_create_bufs+0x559/0xab0 [ 728.376349][T18576] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 728.376364][T18576] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 728.376381][T18576] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.376400][T18576] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 728.376419][T18576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.376440][T18576] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 728.376455][T18576] vmalloc_user_noprof+0x9e/0xe0 [ 728.376471][T18576] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 728.376487][T18576] vb2_vmalloc_alloc+0x135/0x3f0 [ 728.376503][T18576] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 728.376518][T18576] __vb2_queue_alloc+0x8c9/0x1280 [ 728.376538][T18576] vb2_core_create_bufs+0x559/0xab0 [ 728.376556][T18576] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 728.376577][T18576] vb2_create_bufs+0x5e8/0x840 [ 728.376593][T18576] ? __pfx_vb2_create_bufs+0x10/0x10 [ 728.376607][T18576] ? v4l_sanitize_colorspace+0x213/0x400 [ 728.376623][T18576] vb2_ioctl_create_bufs+0x244/0x3e0 [ 728.376637][T18576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 728.376656][T18576] vidioc_create_bufs+0x7d/0xf0 [ 728.376672][T18576] v4l_create_bufs+0x156/0x270 [ 728.376690][T18576] __video_do_ioctl+0xb40/0xfc0 [ 728.376712][T18576] ? __pfx___video_do_ioctl+0x10/0x10 [ 728.376727][T18576] ? __kmalloc_noprof+0x242/0x510 [ 728.376744][T18576] video_usercopy+0x47c/0x1440 [ 728.376758][T18576] ? __pfx___video_do_ioctl+0x10/0x10 [ 728.376772][T18576] ? __pfx_video_usercopy+0x10/0x10 [ 728.376791][T18576] ? hook_file_ioctl_common+0x145/0x410 [ 728.376810][T18576] v4l2_ioctl+0x1bd/0x250 [ 728.376820][T18576] ? __ia32_compat_sys_openat+0x131/0x210 [ 728.376838][T18576] v4l2_compat_ioctl32+0x214/0x2c0 [ 728.376855][T18576] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 728.376872][T18576] __ia32_compat_sys_ioctl+0x23f/0x370 [ 728.376891][T18576] __do_fast_syscall_32+0x7c/0x3a0 [ 728.376905][T18576] do_fast_syscall_32+0x32/0x80 [ 728.376918][T18576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.376932][T18576] RIP: 0023:0xf706e579 [ 728.376943][T18576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 728.376954][T18576] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 728.376965][T18576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 728.376972][T18576] RDX: 0000000080001080 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.376979][T18576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.376986][T18576] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 728.376992][T18576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.377026][T18576] [ 728.377090][T18576] Mem-Info: [ 728.487297][T18576] active_anon:3603 inactive_anon:8606 isolated_anon:0 [ 728.487297][T18576] active_file:12092 inactive_file:1710 isolated_file:0 [ 728.487297][T18576] unevictable:1768 dirty:380 writeback:0 [ 728.487297][T18576] slab_reclaimable:5629 slab_unreclaimable:58774 [ 728.487297][T18576] mapped:28071 shmem:9267 pagetables:1112 [ 728.487297][T18576] sec_pagetables:323 bounce:0 [ 728.487297][T18576] kernel_misc_reclaimable:0 [ 728.487297][T18576] free:56346 free_pcp:15794 free_cma:0 [ 728.500702][T18576] Node 0 active_anon:116kB inactive_anon:64kB active_file:4kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:488kB dirty:0kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8668kB pagetables:1576kB sec_pagetables:1160kB all_unreclaimable? no Balloon:0kB [ 728.510883][T18576] Node 1 active_anon:14296kB inactive_anon:34360kB active_file:48364kB inactive_file:6836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111796kB dirty:1520kB writeback:0kB shmem:32020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4012kB pagetables:2872kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB [ 728.520915][T18576] Node 0 DMA free:2152kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:116kB free_cma:0kB [ 728.529386][T18576] lowmem_reserve[]: 0 289 289 289 289 [ 728.531065][T18576] Node 0 DMA32 free:19948kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:2172KB active_anon:84kB inactive_anon:64kB active_file:4kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:295996kB mlocked:0kB bounce:0kB free_pcp:9468kB local_pcp:832kB free_cma:0kB [ 728.540010][T18576] lowmem_reserve[]: 0 0 0 0 0 [ 728.541438][T18576] Node 1 DMA32 free:203284kB boost:14336kB min:61480kB low:73264kB high:85048kB reserved_highatomic:6144KB free_highatomic:3940KB active_anon:14296kB inactive_anon:34360kB active_file:48364kB inactive_file:6836kB unevictable:3536kB writepending:1520kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:53044kB local_pcp:15580kB free_cma:0kB [ 728.550795][T18576] lowmem_reserve[]: 0 0 0 0 0 [ 728.552305][T18576] Node 0 DMA: 12*4kB (UM) 6*8kB (UM) 2*16kB (UM) 6*32kB (U) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2176kB [ 728.556944][T18576] Node 0 DMA32: 474*4kB (UMEH) 392*8kB (UMEH) 141*16kB (UMH) 53*32kB (UMEH) 35*64kB (UMH) 16*128kB (UMH) 12*256kB (UMH) 5*512kB (UM) 1*1024kB (H) 0*2048kB 0*4096kB = 19928kB [ 728.562083][T18576] Node 1 DMA32: 1496*4kB (MEH) 772*8kB (MEH) 363*16kB (UMEH) 551*32kB (UMEH) 493*64kB (UMEH) 153*128kB (UMEH) 65*256kB (UMEH) 33*512kB (UM) 9*1024kB (UM) 10*2048kB (UM) 13*4096kB (UM) = 203216kB [ 728.567662][T18576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.570409][T18576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.573127][T18576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.575915][T18576] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 728.578586][T18576] 22685 total pagecache pages [ 728.579975][T18576] 295 pages in swap cache [ 728.581297][T18576] Free swap = 122276kB [ 728.582666][T18576] Total swap = 124996kB [ 728.583933][T18576] 524155 pages RAM [ 728.585058][T18576] 0 pages HighMem/MovableOnly [ 728.586438][T18576] 209245 pages reserved [ 728.587696][T18576] 0 pages cma reserved [ 728.628961][T18583] FAULT_INJECTION: forcing a failure. [ 728.628961][T18583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.633359][T18583] CPU: 0 UID: 0 PID: 18583 Comm: syz.0.3420 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 728.633374][T18583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 728.633381][T18583] Call Trace: [ 728.633386][T18583] [ 728.633390][T18583] dump_stack_lvl+0x16c/0x1f0 [ 728.633405][T18583] should_fail_ex+0x512/0x640 [ 728.633419][T18583] _copy_to_user+0x32/0xd0 [ 728.633433][T18583] simple_read_from_buffer+0xcb/0x170 [ 728.633450][T18583] proc_fail_nth_read+0x197/0x270 [ 728.633465][T18583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 728.633480][T18583] ? rw_verify_area+0xcf/0x680 [ 728.633495][T18583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 728.633509][T18583] vfs_read+0x1e4/0xc60 [ 728.633519][T18583] ? fdget_pos+0x2a2/0x370 [ 728.633530][T18583] ? __pfx_vfs_read+0x10/0x10 [ 728.633539][T18583] ? find_held_lock+0x2b/0x80 [ 728.633554][T18583] ? __fget_files+0x20e/0x3c0 [ 728.633573][T18583] ksys_read+0x12a/0x250 [ 728.633582][T18583] ? __pfx_ksys_read+0x10/0x10 [ 728.633591][T18583] ? fput+0x70/0xf0 [ 728.633603][T18583] ? rcu_is_watching+0x12/0xc0 [ 728.633616][T18583] __do_fast_syscall_32+0x7c/0x3a0 [ 728.633630][T18583] do_fast_syscall_32+0x32/0x80 [ 728.633641][T18583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.633654][T18583] RIP: 0023:0xf7f74579 [ 728.633663][T18583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 728.633673][T18583] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 728.633684][T18583] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620 [ 728.633690][T18583] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 728.633697][T18583] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 728.633703][T18583] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 728.633709][T18583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.633722][T18583] [ 729.082743][T18606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3425'. [ 729.867796][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 729.867861][ T40] audit: type=1326 audit(2000000437.119:9312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.883785][ T40] audit: type=1326 audit(2000000437.119:9313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.891176][ T40] audit: type=1326 audit(2000000437.119:9314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.899822][ T40] audit: type=1326 audit(2000000437.119:9315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.928250][ T40] audit: type=1326 audit(2000000437.119:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.938677][ T40] audit: type=1326 audit(2000000437.119:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.947889][ T40] audit: type=1326 audit(2000000437.119:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.960685][ T40] audit: type=1326 audit(2000000437.119:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.968096][ T40] audit: type=1326 audit(2000000437.119:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 729.983257][ T40] audit: type=1326 audit(2000000437.119:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.4.3429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 730.295357][T18631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 731.654937][T18662] syz.1.3439: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 732.567296][T18679] Cannot find add_set index 1 as target [ 732.801902][T18649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.804787][T18649] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.807523][T18649] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.810261][T18649] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.933187][T18688] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 732.991750][ T5968] Bluetooth: hci1: command 0x0406 tx timeout [ 733.548456][T18693] netlink: zone id is out of range [ 733.551880][T18693] netlink: zone id is out of range [ 733.553566][T18693] netlink: zone id is out of range [ 733.567481][T18693] netlink: set zone limit has 4 unknown bytes [ 734.498808][T18699] syz.0.3448: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 735.142262][T18676] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.145383][T18676] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.148318][T18676] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.151865][T18676] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.853569][ T9503] lo speed is unknown, defaulting to 1000 [ 735.855635][ T9503] sz1: Port: 1 Link DOWN [ 735.857410][ T9503] lo speed is unknown, defaulting to 1000 [ 736.003727][T18710] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 736.043598][T18708] syz.1.3449 (18708): drop_caches: 1 [ 736.047950][T18705] syz.1.3449 (18705): drop_caches: 1 [ 736.409987][T18705] syz.1.3449 (18705): drop_caches: 1 [ 737.043123][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3452'. [ 737.058605][T18729] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 737.847757][T18737] Cannot find add_set index 1 as target [ 738.162990][T18741] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 738.837580][T18750] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 739.696678][T18774] syz.0.3466: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 739.732799][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 740.563271][T18780] ubi: mtd0 is already attached to ubi31 [ 740.570464][T18780] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 740.572708][T18780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 740.575299][T18780] vhci_hcd vhci_hcd.0: Device attached [ 740.580965][T18785] usbip_core: unknown command [ 740.582840][T18785] vhci_hcd: unknown pdu 0 [ 740.584431][T18785] usbip_core: unknown command [ 740.586234][T15200] vhci_hcd: stop threads [ 740.587586][T15200] vhci_hcd: release socket [ 740.588945][T15200] vhci_hcd: disconnect device [ 740.596607][T18780] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 740.599355][T18780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.602907][T18780] vhci_hcd vhci_hcd.0: Device attached [ 740.635207][T18788] vhci_hcd: connection closed [ 740.635581][T15200] vhci_hcd: stop threads [ 740.638524][T15200] vhci_hcd: release socket [ 740.640285][T15200] vhci_hcd: disconnect device [ 740.843437][T18795] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 742.105027][T18810] netlink: zone id is out of range [ 742.108230][T18810] netlink: zone id is out of range [ 742.109903][T18810] netlink: zone id is out of range [ 742.120946][T18810] netlink: set zone limit has 4 unknown bytes [ 742.418656][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 743.376514][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 743.376527][ T40] audit: type=1326 audit(2000000450.629:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.386797][ T40] audit: type=1326 audit(2000000450.629:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.394746][ T40] audit: type=1326 audit(2000000450.629:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.405251][ T40] audit: type=1326 audit(2000000450.629:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.414216][ T40] audit: type=1326 audit(2000000450.629:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.423207][ T40] audit: type=1326 audit(2000000450.629:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.430999][ T40] audit: type=1326 audit(2000000450.629:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.439832][ T40] audit: type=1326 audit(2000000450.629:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.449189][ T40] audit: type=1326 audit(2000000450.629:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 743.458782][ T40] audit: type=1326 audit(2000000450.629:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.3479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 744.024037][T18842] tipc: Resetting bearer [ 744.201455][T18853] netlink: zone id is out of range [ 744.204932][T18853] netlink: zone id is out of range [ 744.206647][T18853] netlink: zone id is out of range [ 744.217992][T18853] netlink: set zone limit has 4 unknown bytes [ 744.756924][T18865] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 745.432477][T18842] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.435400][T18842] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.438441][T18842] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.445043][T18842] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.470316][T18870] FAULT_INJECTION: forcing a failure. [ 745.470316][T18870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.475428][T18870] CPU: 3 UID: 0 PID: 18870 Comm: syz.1.3489 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 745.475443][T18870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 745.475450][T18870] Call Trace: [ 745.475454][T18870] [ 745.475458][T18870] dump_stack_lvl+0x16c/0x1f0 [ 745.475489][T18870] should_fail_ex+0x512/0x640 [ 745.475506][T18870] copy_fpstate_to_sigframe+0x854/0xaf0 [ 745.475522][T18870] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 745.475535][T18870] ? posixtimer_deliver_signal+0xed/0x6a0 [ 745.475553][T18870] ? x86_task_fpu+0x5f/0x90 [ 745.475565][T18870] get_sigframe+0x4a8/0x9c0 [ 745.475578][T18870] ? __pfx_get_sigframe+0x10/0x10 [ 745.475589][T18870] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 745.475606][T18870] ? _raw_spin_unlock_irq+0x29/0x50 [ 745.475621][T18870] ? siginfo_layout+0x177/0x290 [ 745.475637][T18870] ia32_setup_rt_frame+0xe3/0xb30 [ 745.475655][T18870] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 745.475673][T18870] arch_do_signal_or_restart+0x480/0x790 [ 745.475686][T18870] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 745.475701][T18870] ? __pfx_do_readv+0x10/0x10 [ 745.475716][T18870] ? __do_compat_sys_rt_sigreturn+0x14d/0x1f0 [ 745.475733][T18870] exit_to_user_mode_loop+0x84/0x110 [ 745.475751][T18870] __do_fast_syscall_32+0x2ac/0x3a0 [ 745.475764][T18870] do_fast_syscall_32+0x32/0x80 [ 745.475775][T18870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.475787][T18870] RIP: 0023:0xf706e577 [ 745.475796][T18870] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 745.475806][T18870] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 745.475816][T18870] RAX: 0000000000000091 RBX: 0000000000000004 RCX: 0000000080000140 [ 745.475823][T18870] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.475829][T18870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.475835][T18870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 745.475841][T18870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.475853][T18870] [ 746.673821][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.675867][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.951370][T18899] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 747.563995][T18914] netlink: 'syz.0.3502': attribute type 13 has an invalid length. [ 747.567995][T18914] gretap0: refused to change device tx_queue_len [ 747.570032][T18914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 749.730479][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 749.730723][ T40] audit: type=1326 audit(2000000456.969:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.740063][ T40] audit: type=1326 audit(2000000456.969:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.753035][ T40] audit: type=1326 audit(2000000456.969:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.761476][ T40] audit: type=1326 audit(2000000456.979:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.769496][ T40] audit: type=1326 audit(2000000456.979:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.777970][ T40] audit: type=1326 audit(2000000456.979:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.786411][ T40] audit: type=1326 audit(2000000456.979:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.796438][ T40] audit: type=1326 audit(2000000456.979:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.803731][ T40] audit: type=1326 audit(2000000456.979:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 749.812731][ T40] audit: type=1326 audit(2000000456.979:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.3.3508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 751.458247][T18961] syz.3.3514 (18961) used greatest stack depth: 20392 bytes left [ 751.741723][ T6032] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 751.902861][T18975] FAULT_INJECTION: forcing a failure. [ 751.902861][T18975] name failslab, interval 1, probability 0, space 0, times 0 [ 751.906832][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.3.3517 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 751.906859][T18975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 751.906867][T18975] Call Trace: [ 751.906872][T18975] [ 751.906877][T18975] dump_stack_lvl+0x16c/0x1f0 [ 751.906891][T18975] should_fail_ex+0x512/0x640 [ 751.906902][T18975] ? fs_reclaim_acquire+0xae/0x150 [ 751.906918][T18975] ? tomoyo_encode2+0x100/0x3e0 [ 751.906927][T18975] should_failslab+0xc2/0x120 [ 751.906939][T18975] __kmalloc_noprof+0xd2/0x510 [ 751.906951][T18975] ? d_absolute_path+0x136/0x1a0 [ 751.906966][T18975] tomoyo_encode2+0x100/0x3e0 [ 751.906977][T18975] tomoyo_encode+0x29/0x50 [ 751.906986][T18975] tomoyo_realpath_from_path+0x18f/0x6e0 [ 751.907001][T18975] tomoyo_path_number_perm+0x245/0x580 [ 751.907014][T18975] ? tomoyo_path_number_perm+0x237/0x580 [ 751.907030][T18975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 751.907044][T18975] ? finish_task_switch.isra.0+0x221/0xc10 [ 751.907070][T18975] ? find_held_lock+0x2b/0x80 [ 751.907081][T18975] ? hook_file_ioctl_common+0x145/0x410 [ 751.907097][T18975] ? __fget_files+0x20e/0x3c0 [ 751.907113][T18975] ? __fput_deferred+0x480/0x480 [ 751.907127][T18975] security_file_ioctl_compat+0x9b/0x240 [ 751.907144][T18975] __ia32_compat_sys_ioctl+0xc3/0x370 [ 751.907160][T18975] __do_fast_syscall_32+0x7c/0x3a0 [ 751.907174][T18975] do_fast_syscall_32+0x32/0x80 [ 751.907185][T18975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 751.907198][T18975] RIP: 0023:0xf711e579 [ 751.907207][T18975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 751.907217][T18975] RSP: 002b:00000000f50cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 751.907227][T18975] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae01 [ 751.907234][T18975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.907240][T18975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.907246][T18975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 751.907252][T18975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.907265][T18975] [ 751.907295][T18975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 752.020076][ T6032] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 752.023459][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.026048][ T6032] usb 6-1: Product: syz [ 752.027673][ T6032] usb 6-1: Manufacturer: syz [ 752.029329][ T6032] usb 6-1: SerialNumber: syz [ 752.035572][ T6032] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 752.076175][ T6032] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 752.347560][T18985] syz.4.3521: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 753.080111][T15154] usb 6-1: USB disconnect, device number 23 [ 753.141857][ T6032] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 753.144873][ T6032] ath9k_htc: Failed to initialize the device [ 753.149125][T15154] usb 6-1: ath9k_htc: USB layer deinitialized [ 753.161814][T19001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3524'. [ 754.326526][T19018] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 755.454171][T19041] lo speed is unknown, defaulting to 1000 [ 755.454330][T19041] lo speed is unknown, defaulting to 1000 [ 755.457001][T19041] lo speed is unknown, defaulting to 1000 [ 755.499941][T19041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 755.720467][T19041] lo speed is unknown, defaulting to 1000 [ 755.725631][T19041] lo speed is unknown, defaulting to 1000 [ 755.732326][T19041] lo speed is unknown, defaulting to 1000 [ 755.736790][T19041] lo speed is unknown, defaulting to 1000 [ 756.481071][T19059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3537'. [ 757.758049][T19080] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 758.625678][T19098] syz.1.3548: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 759.251715][T15154] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 759.452390][T15154] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 759.458340][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.461235][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.464925][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.470731][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.474710][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.479394][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.487799][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.497280][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.501982][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.509001][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.513439][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.517917][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.524702][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.528460][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.533315][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.539479][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.543734][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.547676][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.552204][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.555445][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.559023][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.562745][T15154] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.570576][T15154] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.575329][T15154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.583228][T15154] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 759.586108][T15154] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 759.588724][T15154] usb 6-1: Product: syz [ 759.590042][T15154] usb 6-1: Manufacturer: syz [ 759.592063][T15154] usb 6-1: SerialNumber: syz [ 759.595127][T15154] usb 6-1: config 0 descriptor?? [ 759.601261][T15154] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 760.952308][T19134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 761.720615][ T9] usb 6-1: USB disconnect, device number 24 [ 761.723755][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 761.909360][T19153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3563'. [ 762.271574][T19162] IPVS: length: 143 != 24 [ 762.949360][T19171] siw: device registration error -23 [ 762.963096][ T6009] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 763.145641][ T6009] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.145680][ T6009] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 763.145816][ T6009] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.165099][ T6009] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.165166][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.165231][ T6009] usb 9-1: Product: syz [ 763.165262][ T6009] usb 9-1: Manufacturer: syz [ 763.165293][ T6009] usb 9-1: SerialNumber: syz [ 763.189525][ T6009] cdc_mbim 9-1:1.0: skipping garbage [ 763.191317][ T6009] cdc_mbim 9-1:1.0: CDC Union missing and no IAD found [ 763.193629][ T6009] cdc_mbim 9-1:1.0: bind() failure [ 763.403930][T19164] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 763.406636][T19164] netlink: 'syz.4.3565': attribute type 4 has an invalid length. [ 763.409450][T19164] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3565'. [ 763.412353][T19164] NCSI netlink: No device for ifindex 0 [ 763.437429][ T6009] usb 9-1: USB disconnect, device number 9 [ 763.774368][T19176] syz.0.3568: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 764.263656][T19190] Cannot find add_set index 1 as target [ 765.570068][T19207] FAULT_INJECTION: forcing a failure. [ 765.570068][T19207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.575412][T19207] CPU: 3 UID: 0 PID: 19207 Comm: syz.4.3578 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 765.575429][T19207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 765.575436][T19207] Call Trace: [ 765.575441][T19207] [ 765.575446][T19207] dump_stack_lvl+0x16c/0x1f0 [ 765.575460][T19207] should_fail_ex+0x512/0x640 [ 765.575473][T19207] _copy_from_user+0x2e/0xd0 [ 765.575486][T19207] vmemdup_user+0x66/0xe0 [ 765.575498][T19207] kvm_vcpu_ioctl_set_cpuid2+0x88/0x160 [ 765.575510][T19207] kvm_arch_vcpu_ioctl+0xdf9/0x52d0 [ 765.575522][T19207] ? is_bpf_text_address+0x94/0x1a0 [ 765.575537][T19207] ? kernel_text_address+0x8d/0x100 [ 765.575555][T19207] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 765.575571][T19207] ? stack_trace_save+0x8e/0xc0 [ 765.575584][T19207] ? __lock_acquire+0xb8a/0x1c90 [ 765.575600][T19207] ? kasan_save_stack+0x42/0x60 [ 765.575611][T19207] ? kasan_save_track+0x14/0x30 [ 765.575622][T19207] ? __mutex_trylock_common+0xe9/0x250 [ 765.575637][T19207] ? __pfx___mutex_trylock_common+0x10/0x10 [ 765.575652][T19207] ? __pfx___might_resched+0x10/0x10 [ 765.575668][T19207] ? rcu_is_watching+0x12/0xc0 [ 765.575679][T19207] ? trace_contention_end+0xdd/0x130 [ 765.575694][T19207] ? __mutex_lock+0x1ca/0xb90 [ 765.575705][T19207] ? kvm_vcpu_ioctl+0x280/0x1690 [ 765.575725][T19207] ? __pfx___mutex_lock+0x10/0x10 [ 765.575749][T19207] ? kasan_quarantine_put+0x10a/0x240 [ 765.575770][T19207] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 765.575789][T19207] kvm_vcpu_ioctl+0x1236/0x1690 [ 765.575812][T19207] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 765.575833][T19207] ? tomoyo_path_number_perm+0x18d/0x580 [ 765.575860][T19207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 765.575883][T19207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 765.575910][T19207] ? do_vfs_ioctl+0x523/0x1a60 [ 765.575934][T19207] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 765.575978][T19207] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 765.576000][T19207] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 765.576020][T19207] ? __fget_files+0x20e/0x3c0 [ 765.576044][T19207] ? __fput_deferred+0x480/0x480 [ 765.576062][T19207] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 765.576075][T19207] __ia32_compat_sys_ioctl+0x23f/0x370 [ 765.576091][T19207] __do_fast_syscall_32+0x7c/0x3a0 [ 765.576104][T19207] do_fast_syscall_32+0x32/0x80 [ 765.576115][T19207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.576128][T19207] RIP: 0023:0xf7f06579 [ 765.576136][T19207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 765.576146][T19207] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 765.576157][T19207] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae90 [ 765.576163][T19207] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 765.576169][T19207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 765.576175][T19207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 765.576181][T19207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.576194][T19207] [ 765.827251][T19220] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 766.114214][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 766.256667][T19239] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 767.730387][T19265] netlink: 'syz.0.3588': attribute type 10 has an invalid length. [ 767.904435][T19265] batman_adv: batadv0: Adding interface: team0 [ 767.906847][T19265] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.921849][T19265] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 767.945819][T19271] page: refcount:515 mapcount:0 mapping:ffff88806e0a9150 index:0x0 pfn:0x5b000 [ 767.949405][T19271] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 767.951951][T19271] aops:hugetlbfs_aops ino:16cdd dentry name(?):"anon_hugepage" [ 767.954213][T19271] flags: 0x4fff00000000041(locked|head|node=1|zone=1|lastcpupid=0x7ff) [ 767.956648][T19271] page_type: f4(hugetlb) [ 767.957965][T19271] raw: 04fff00000000041 ffffea00016a8008 ffffc90003887d50 ffff88806e0a9150 [ 767.960576][T19271] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 767.963188][T19271] head: 04fff00000000041 ffffea00016a8008 ffffc90003887d50 ffff88806e0a9150 [ 767.965782][T19271] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 767.968467][T19271] head: 04fff00000000009 ffffea00016c0001 0000000000000000 0000000000000000 [ 767.971067][T19271] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 767.973796][T19271] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 767.976610][T19271] page_owner tracks the page as allocated [ 767.979241][T19271] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 19250, tgid 19241 (syz.1.3586), ts 767070102727, free_ts 766491814950 [ 767.985981][T19271] post_alloc_hook+0x1c0/0x230 [ 767.987741][T19271] get_page_from_freelist+0x1321/0x3890 [ 767.989626][T19271] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 767.991486][T19271] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 767.993312][T19271] alloc_hugetlb_folio+0xed4/0x1560 [ 767.994940][T19271] hugetlb_fault+0x2005/0x3070 [ 767.996492][T19271] handle_mm_fault+0xbfa/0xd10 [ 767.998272][T19271] __get_user_pages+0x589/0x3b80 [ 768.000047][T19271] populate_vma_page_range+0x278/0x3a0 [ 768.001645][T19271] __mm_populate+0x1d8/0x380 [ 768.003042][T19271] vm_mmap_pgoff+0x362/0x450 [ 768.004536][T19271] ksys_mmap_pgoff+0x1c8/0x5c0 [ 768.006008][T19271] __do_fast_syscall_32+0x7c/0x3a0 [ 768.007589][T19271] do_fast_syscall_32+0x32/0x80 [ 768.009080][T19271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 768.011134][T19271] page last free pid 19220 tgid 19208 stack trace: [ 768.013383][T19271] free_unref_folios+0xa65/0x1800 [ 768.014901][T19271] folios_put_refs+0x56f/0x740 [ 768.016361][T19271] shmem_undo_range+0x58f/0x1150 [ 768.017857][T19271] shmem_evict_inode+0x3a1/0xbe0 [ 768.019460][T19271] evict+0x3e3/0x920 [ 768.020734][T19271] iput+0x521/0x880 [ 768.021942][T19271] dentry_unlink_inode+0x29c/0x480 [ 768.023530][T19271] __dentry_kill+0x1d0/0x600 [ 768.025115][T19271] dput.part.0+0x4b1/0x9b0 [ 768.026540][T19271] dput+0x1f/0x30 [ 768.027704][T19271] __fput+0x51c/0xb70 [ 768.028965][T19271] task_work_run+0x150/0x240 [ 768.030446][T19271] do_exit+0x86c/0x2bd0 [ 768.031783][T19271] do_group_exit+0xd3/0x2a0 [ 768.033228][T19271] get_signal+0x2673/0x26d0 [ 768.034674][T19271] arch_do_signal_or_restart+0x8f/0x790 [ 768.036480][T19271] ------------[ cut here ]------------ [ 768.038198][T19271] kernel BUG at mm/filemap.c:154! [ 768.039796][T19271] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 768.042999][T19271] CPU: 3 UID: 0 PID: 19271 Comm: syz.3.3591 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 768.048599][T19271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 768.052674][T19271] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.055068][T19271] Code: 37 f4 ca ff 89 ee 31 ff 4c 8d 6b 30 e8 6a ef ca ff 85 ed 7e 17 e8 21 f4 ca ff 48 c7 c6 00 f9 b8 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a f4 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 768.062492][T19271] RSP: 0018:ffffc900034af390 EFLAGS: 00010083 [ 768.064824][T19271] RAX: 00000000000297b6 RBX: ffffea00016c0000 RCX: ffffc900278f1000 [ 768.067866][T19271] RDX: 0000000000080000 RSI: ffffffff81f060be RDI: ffff88806d7e0444 [ 768.070873][T19271] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 768.073890][T19271] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806e0a9150 [ 768.076943][T19271] R13: ffffea00016c0030 R14: 0000000000001440 R15: ffffea00016c0000 [ 768.080001][T19271] FS: 0000000000000000(0000) GS:ffff88809782d000(0063) knlGS:00000000f4886b40 [ 768.083455][T19271] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 768.086032][T19271] CR2: 00000000f5054da4 CR3: 0000000061b98000 CR4: 0000000000352ef0 [ 768.089109][T19271] Call Trace: [ 768.090449][T19271] [ 768.091620][T19271] filemap_remove_folio+0xf1/0x250 [ 768.093591][T19271] remove_inode_hugepages+0x74a/0xed0 [ 768.095671][T19271] ? __tlb_batch_free_encoded_pages+0x152/0x290 [ 768.098088][T19271] ? tlb_finish_mmu+0x278/0x7c0 [ 768.099988][T19271] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 768.102277][T19271] ? __pfx_unmap_hugepage_range+0x10/0x10 [ 768.104485][T19271] ? up_write+0x1b2/0x520 [ 768.106200][T19271] hugetlbfs_fallocate+0xf3f/0x12e0 [ 768.108219][T19271] ? __lock_acquire+0x622/0x1c90 [ 768.110164][T19271] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 768.112342][T19271] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 768.114546][T19271] ? vfs_fallocate+0x608/0x10c0 [ 768.116459][T19271] vfs_fallocate+0x608/0x10c0 [ 768.118301][T19271] ? __pfx_vfs_fallocate+0x10/0x10 [ 768.120277][T19271] ? madvise_vma_behavior+0x222c/0x2420 [ 768.122430][T19271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 768.124749][T19271] madvise_vma_behavior+0x21ca/0x2420 [ 768.126856][T19271] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 768.129049][T19271] ? __pfx_mas_prev+0x10/0x10 [ 768.130880][T19271] ? find_vma_prev+0xda/0x160 [ 768.132735][T19271] ? __pfx_find_vma_prev+0x10/0x10 [ 768.134743][T19271] ? kasan_quarantine_put+0x10a/0x240 [ 768.136801][T19271] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.138854][T19271] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 768.141093][T19271] madvise_walk_vmas+0x1ce/0x2c0 [ 768.143022][T19271] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 768.145102][T19271] madvise_do_behavior+0x15d/0x3f0 [ 768.147139][T19271] ? __pfx___might_resched+0x10/0x10 [ 768.149188][T19271] ? __pfx_madvise_do_behavior+0x10/0x10 [ 768.151351][T19271] ? down_read+0x13d/0x480 [ 768.153106][T19271] do_madvise+0x161/0x230 [ 768.154707][T19271] ? __pfx_do_madvise+0x10/0x10 [ 768.156604][T19271] ? do_raw_spin_lock+0x12c/0x2b0 [ 768.158593][T19271] ? kcov_ioctl+0x265/0x730 [ 768.160369][T19271] __ia32_sys_madvise+0xa7/0x110 [ 768.162289][T19271] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 768.164810][T19271] __do_fast_syscall_32+0x7c/0x3a0 [ 768.166766][T19271] do_fast_syscall_32+0x32/0x80 [ 768.168661][T19271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 768.171095][T19271] RIP: 0023:0xf711e579 [ 768.172685][T19271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 768.180013][T19271] RSP: 002b:00000000f488655c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 768.183215][T19271] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 768.186295][T19271] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.189315][T19271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 768.192376][T19271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 768.195439][T19271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 768.198471][T19271] [ 768.199695][T19271] Modules linked in: [ 768.201214][T19271] ---[ end trace 0000000000000000 ]--- [ 768.203347][T19271] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 768.205747][T19271] Code: 37 f4 ca ff 89 ee 31 ff 4c 8d 6b 30 e8 6a ef ca ff 85 ed 7e 17 e8 21 f4 ca ff 48 c7 c6 00 f9 b8 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a f4 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 768.212327][T19271] RSP: 0018:ffffc900034af390 EFLAGS: 00010083 [ 768.214126][T19271] RAX: 00000000000297b6 RBX: ffffea00016c0000 RCX: ffffc900278f1000 [ 768.216586][T19271] RDX: 0000000000080000 RSI: ffffffff81f060be RDI: ffff88806d7e0444 [ 768.219013][T19271] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 768.221448][T19271] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806e0a9150 [ 768.223884][T19271] R13: ffffea00016c0030 R14: 0000000000001440 R15: ffffea00016c0000 [ 768.226307][T19271] FS: 0000000000000000(0000) GS:ffff88809782d000(0063) knlGS:00000000f4886b40 [ 768.229045][T19271] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 768.231093][T19271] CR2: 00000000f5054da4 CR3: 0000000061b98000 CR4: 0000000000352ef0 [ 768.233553][T19271] Kernel panic - not syncing: Fatal exception [ 768.236197][T19271] Kernel Offset: disabled [ 768.237893][T19271] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:51:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b53ff60 RCX=ffffffff81af48fd RDX=ffff888022594880 RSI=ffffffff81af48d9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900032274d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056a7fed R15=ffff88802b23b6c0 RIP=ffffffff81af48e4 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa6e40 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7444ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e5c4c80 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c4c80 RBP=0000000000000002 RSP=ffffc900038270a0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90003827188 R11=00000000000a8245 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198135e RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809762d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c37a136 CR3=0000000053e09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000e3d684 RBX=0000000000000002 RCX=ffffffff8b82ac69 RDX=ffffed1005686646 RSI=ffffffff8c155de0 RDI=ffffffff819197a1 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686645 R10=ffff88802b43322b R11=ffffffff9b07e6c0 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90a95b50 R15=0000000000000000 RIP=ffffffff8b8297cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080200000 CR3=0000000061b98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556d065 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc900034aecb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b09f500 R15=ffffffff8556d000 RIP=ffffffff8556d08f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809782d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5054da4 CR3=0000000061b98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000