last executing test programs: 4.199099882s ago: executing program 1 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xac, 0x30, 0x1, 0x1, 0x0, {}, [{0x98, 0x1, [@m_ct={0x4c, 0x2, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_MARK={0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xef0c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x401, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7fd) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setreuid(0xee01, 0xee01) ioprio_set$uid(0x3, 0x0, 0x4007) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x0) 3.265255626s ago: executing program 1 (id=1093): io_uring_setup(0x5824, &(0x7f0000000280)={0x0, 0x5, 0x10000, 0x1, 0x3bd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x2808440, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x200) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba7a32}) r8 = dup2(r2, r6) setsockopt$inet6_int(r8, 0x29, 0xb6, &(0x7f0000000080)=0x80, 0x4) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1) 3.261091575s ago: executing program 3 (id=1094): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) sendmmsg(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f9a15787b475938205979b95a208be9811722dee7f06a10ddc6893cfabc1a1068c34a2a99b7586280fc5ba21c02c82901b007d44bd88d47fbbde2425d48cbf3edf6a70643a2075b5b24901f8387b2f08822b6d54c1c427d461d1e5673b1f06d36b47638020757d2d6f26bda8b851763a15bfe494f222898da1e3d10e44d693c9ac", 0x81}], 0x1}}], 0x1, 0x20000080) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) 2.601448662s ago: executing program 2 (id=1097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0x800000000}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.551962641s ago: executing program 2 (id=1098): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) sendmmsg(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f9a15787b475938205979b95a208be9811722dee7f06a10ddc6893cfabc1a1068c34a2a99b7586280fc5ba21c02c82901b007d44bd88d47fbbde2425d48cbf3edf6a70643a2075b5b24901f8387b2f08822b6d54c1c427d461d1e5673b1f06d36b47638020757d2d6f26bda8b851763a15bfe494f222898da1e3d10e44d693c9ac", 0x81}], 0x1}}], 0x1, 0x20000080) accept4$unix(r4, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) 2.311768997s ago: executing program 0 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.191728789s ago: executing program 0 (id=1101): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) read$snapshot(r1, 0x0, 0xffffffbf) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000081c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 2.06479957s ago: executing program 1 (id=1102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) sendmmsg(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f9a15787b475938205979b95a208be9811722dee7f06a10ddc6893cfabc1a1068c34a2a99b7586280fc5ba21c02c82901b007d44bd88d47fbbde2425d48cbf3edf6a70643a2075b5b24901f8387b2f08822b6d54c1c427d461d1e5673b1f06d36b47638020757d2d6f26bda8b851763a15bfe494f222898da1e3d10e44d693c9ac", 0x81}], 0x1}}], 0x1, 0x20000080) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) 1.952982023s ago: executing program 3 (id=1103): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) 1.871855311s ago: executing program 3 (id=1104): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) rt_sigaction(0x39, &(0x7f0000000240)={&(0x7f00000001c0)="3433c4c195df4d17f26f650f63e80ffe13e033c4e37d049affff0000000f18b80c000000c4c161e3a965566666c4c1d85c8b00000000", 0x50000001, &(0x7f0000000200)="c4c139667f00c4c1f173d4aa0f380ba6070000000ffe5300680a0000002626e365c4e2a1965586c4e1585fa50e000000c4e341785a0000c4c3250ff9c1", {[0x9, 0x10]}}, &(0x7f0000000300)={&(0x7f0000000280)="c4c39d5c60b4aa8fc998961bd25692c68552d40000018051f43a2ef3aff3658016000f620ac4e11d6a2eda10", 0x0, &(0x7f00000002c0)="da30c4e1f92f9c6f55ded1540f1c96351e00008d5315660f1ec20f378fe910015200c4e2fdb948058fc920972ce8f30f6fc7"}, 0x8, &(0x7f0000000340)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc044560f, &(0x7f0000000080)=@mmap={0x7, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x8, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x4}) syz_emit_ethernet(0x52, &(0x7f0000000940)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @private1, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xf, 0x1, [{0x7, 0x0, 0x0, @mcast1}]}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x8, 0x2764) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.491879355s ago: executing program 2 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 1.491628865s ago: executing program 2 (id=1106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000007"]) 1.441779249s ago: executing program 3 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000007"]) 1.321799672s ago: executing program 0 (id=1108): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x845, 0x400}, @ramp={0x81, 0x96, {0x4, 0x7ff, 0x4, 0x4}}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, 0x0, 0x4000000) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x100000, @local, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x6, 0x1, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 1.321540808s ago: executing program 0 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.191704926s ago: executing program 2 (id=1110): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x10000, 0xffffffffdffffffb, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shmdt(r4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x16, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x9, @loopback, 0x1}}, {{0xa, 0x4e20, 0xbf, @remote, 0x4}}}, 0x104) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.183663086s ago: executing program 0 (id=1111): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0xe, 0x80010, 0xffffffffffffffff, 0xffffc000) io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0x4}) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_io_uring_setup(0x2ff5, &(0x7f0000000080)={0x0, 0x188f, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.020425135s ago: executing program 1 (id=1112): r0 = socket(0x840000000002, 0x3, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f00000001c0)=0x11) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0d061, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_ttl={{0x10}}], 0x10}}], 0x2, 0x20000000) 531.944298ms ago: executing program 2 (id=1113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000007"]) 491.457056ms ago: executing program 3 (id=1114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0x800000000}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 378.459663ms ago: executing program 0 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r4, 0x3, {0x0, 0xf1, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xfeff, &(0x7f0000000240)={&(0x7f0000001640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xb}, {0x8, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 378.06782ms ago: executing program 3 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000007"]) 285.266µs ago: executing program 1 (id=1117): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe4) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400, 0x800, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r3}}, './file0\x00'}) getpid() socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x140e, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x128e55993d4f7dcc, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040090) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000fff000/0x1000)=nil) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="af5d2d9c19ee7a578cbc49b6482e69742e1a96144a8c598a86aa478a9491a44ffd55c5152aad98dbfa6c94e98f8a640e024d96ddcc060c8f9895947f96fcc717fcbaacb56dea4de6b11ee1e3116ad826bf", 0x51}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x3ff}}, @ip_tos_u8={{0xd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r0, @multicast1, @multicast1}}}], 0x38}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', r7, 0x10, 0x1, 0x40, 0x401, {{0x1c, 0x4, 0x2, 0x31, 0x70, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @lsrr={0x83, 0x23, 0x3c, [@multicast2, @multicast1, @remote, @broadcast, @rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @multicast2]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xe7, [@local, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @multicast2]}, @noop, @timestamp={0x44, 0x18, 0x4e, 0x0, 0x0, [0x8, 0x3, 0xd, 0x401, 0x80000001]}]}}}}}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$nl_xfrm(r4, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000980)=@polexpire={0x3b0, 0x1b, 0x8, 0x70bd28, 0x25dfdbfc, {{{@in6=@remote, @in=@multicast1, 0x4e21, 0x4, 0x4e22, 0x5, 0x2, 0x20, 0xa0, 0x32, 0x0, r2}, {0x5ff2, 0x93f, 0x9, 0x5b, 0xfffffffffffffffe, 0x9, 0x6, 0x5}, {0x9636, 0xfffffffffffffffb, 0x3, 0x3}, 0x443, 0x6e6bbd, 0x1, 0x1, 0x1, 0x1}, 0x5}, [@lifetime_val={0x24, 0x9, {0x1, 0x6, 0x8, 0x2}}, @migrate={0x1cc, 0x11, [{@in6=@rand_addr=' \x01\x00', @in6=@local, @in=@empty, @in6=@empty, 0xff, 0x4, 0x0, 0x0, 0xa}, {@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@remote, @in6=@private1, 0xff, 0x1, 0x0, 0x3503, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x3, 0x0, 0x3503, 0x1c, 0x2}, {@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x6c, 0x0, 0x0, 0x3506, 0x2, 0x1c}, {@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x2b, 0x2, 0x0, 0x3503, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in=@private=0xa010102, @in=@multicast2, @in=@loopback, 0x2b, 0x0, 0x0, 0x3502, 0x0, 0x2}]}, @offload={0xc}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@broadcast, @in6=@local, 0x6c, 0x1, 0x0, 0x0, 0x8, 0x2}, {@in=@rand_addr=0x64010100, @in6=@mcast2, @in=@multicast2, @in=@multicast2, 0xff, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@private=0xa010101, 0x2b, 0x0, 0x0, 0x3507, 0xa, 0x2}]}, @lastused={0xc, 0xf, 0x4}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x40010) syz_io_uring_setup(0x4980, &(0x7f0000000dc0)={0x0, 0xc81f, 0x4000, 0x0, 0x2f4, 0x0, r4}, &(0x7f0000000e40), &(0x7f0000000e80)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4884) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000001000)=0x4) bind$netlink(r4, &(0x7f0000001040)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r11 = openat$ndctl0(0xffffff9c, &(0x7f0000001080), 0x8501, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x1, 0xffffff00, 0x5, 0x60040, 0x1, 0x6, '\x00', r8, r11, 0x3, 0x2, 0x2, 0x8, @void, @value, @void, @value}, 0x50) lstat(&(0x7f0000001140)='\x00', &(0x7f0000001180)) write$tun(r4, &(0x7f0000001200)={@val={0x0, 0x8847}, @val={0x0, 0x3, 0x9, 0x6, 0x6cf8, 0x9}, @ipv4=@icmp={{0x12, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0xcf, 0x1, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0xf, 0x26, [@local, @remote, @empty]}, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0x3, [{@multicast2, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@multicast2, 0x1}, {@multicast1, 0xfff}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67}}}, 0x5e) r13 = openat$bsg(0xffffff9c, &(0x7f0000001280), 0x101040, 0x0) io_uring_register$IORING_REGISTER_FILES(r13, 0x2, &(0x7f00000012c0)=[r12, r10], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r13, 0xc0502100, &(0x7f0000001300)) 0s ago: executing program 1 (id=1118): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r5, @ANYRES32=r4, @ANYRES32, @ANYRES8], 0xdc}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}}, 0x0) recvmmsg(r7, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000010000404876233105000000090000000600000000000000abda0ea2eee29a76ecb8e9aca1259c390e3ef0fd2b3f41055a37ce7dedd9e5f2e925d7477da117d55b184522860c3543637ad9e2674b19ef2cdb5d78cd77601852f4faceda7752a065545dc270dda3115a54659a2414bde05cf0665e559056f8f68fa36ddc4eb11e3e1567f141483c9cb5eadbb2ea5390055a89561b45fa01b741fd8d192bc8361f05a65f9d09fe32422b7511902f4c37fcc91553d5b8b22dda967217c144588dfc83a0b29306e043cd24a0dfabeda2691bf82792d92881bfd2ed3d52164bf8172102715b210b0afc28b2c0cf6b4c"]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x8}, 0x14) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) kernel console output (not intermixed with test programs): tag 0x0 [ 55.566888][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.570451][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.573259][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.575435][ T6521] infiniband syz!: set active [ 55.575680][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.577727][ T6521] infiniband syz!: added team_slave_0 [ 55.579401][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.583566][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.585984][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.588377][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.590772][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.592058][ T6521] RDS/IB: syz!: added [ 55.593801][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.595221][ T6521] smc: adding ib device syz! with port count 1 [ 55.597218][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.598982][ T6521] smc: ib device syz! port 1 has pnetid [ 55.601109][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.601128][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.606812][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.608578][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.610386][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.612387][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.614214][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.616061][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.617820][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.619584][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.621349][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.623165][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.624956][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.626721][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.628503][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.630241][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.632007][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.633802][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.635580][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.637305][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.639758][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.641686][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.643643][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.645409][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.647162][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.649060][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.651007][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.653024][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.654887][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.656998][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.658959][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.660760][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.662644][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.664422][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.666178][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.667928][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.669671][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.671396][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.673285][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.675040][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.676792][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.678544][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.680323][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.682072][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.684362][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.686275][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.688044][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.689820][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.691594][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.693666][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.695464][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.697201][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.698961][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.700713][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.702870][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.704773][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.706676][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.708470][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.710266][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.712082][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.714075][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.715868][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.717708][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.719689][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.721530][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.723766][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.725711][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.727492][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.729265][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.731029][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.732936][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.734720][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.736610][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.738417][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.740198][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.741971][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.743799][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.745562][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.747325][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.749115][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.750890][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.753097][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.755132][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.757241][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.759294][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.761445][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.763694][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.765772][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.768013][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.770025][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.771898][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.773809][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.775807][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.777859][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.779734][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.781503][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.783799][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.785560][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.787635][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.789535][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.791584][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.793559][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.795572][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.797573][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.799298][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.801103][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.803211][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.805039][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.807047][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.808940][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.811181][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.813301][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.815509][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.817506][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.819695][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.821631][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.824330][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.826574][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.828691][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.830694][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.832671][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.835682][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.837547][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.839581][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.841768][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.843891][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.845907][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.847678][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.849439][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.851693][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.853720][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.855506][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.857299][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.859065][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.860821][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.862827][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.864951][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.866742][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.868870][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.871129][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.873691][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.876004][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.878448][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.880752][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.882731][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.884903][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.887120][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.889322][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.891644][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.894132][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.896334][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.898593][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.900918][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.904431][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.906794][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.909017][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.910961][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.913024][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.914839][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.916828][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.918769][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.920595][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.922617][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.924424][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.926651][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.928928][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.931132][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.933520][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.935789][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.938131][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.940402][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.943235][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.945553][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.947802][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.950204][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.952761][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.955018][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.957231][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.959428][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.961660][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.964041][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.966256][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.968251][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.970070][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.971906][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.973809][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.975663][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.977501][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.979334][ T58] hid-generic 0400:0002:0040.0003: unknown main item tag 0x0 [ 55.982805][ T58] hid-generic 0400:0002:0040.0003: hidraw1: HID vffffff.1c Device [syz0] on syz0 [ 56.187348][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 56.189898][ T6571] netlink: 'syz.0.247': attribute type 7 has an invalid length. [ 56.192049][ T6571] netlink: 'syz.0.247': attribute type 8 has an invalid length. [ 56.195139][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 56.199397][ T6571] erspan0: entered promiscuous mode [ 56.202576][ T6571] erspan0: left promiscuous mode [ 56.261021][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 56.373007][ T6601] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.740646][ T6650] bridge0: port 3(vlan2) entered blocking state [ 56.743319][ T6650] bridge0: port 3(vlan2) entered disabled state [ 56.745752][ T6650] vlan2: entered allmulticast mode [ 56.749302][ T6650] vlan2: left allmulticast mode [ 57.045038][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 57.780690][ T6718] random: crng reseeded on system resumption [ 58.021922][ T6720] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 58.024520][ T6720] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 58.026898][ T6720] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 58.446493][ T6746] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.536039][ T40] kauditd_printk_skb: 277 callbacks suppressed [ 58.536053][ T40] audit: type=1326 audit(1742967601.987:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.545833][ T40] audit: type=1326 audit(1742967601.987:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.552958][ T40] audit: type=1326 audit(1742967601.987:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562284][ T40] audit: type=1326 audit(1742967601.987:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562316][ T40] audit: type=1326 audit(1742967601.987:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562341][ T40] audit: type=1326 audit(1742967601.987:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562367][ T40] audit: type=1326 audit(1742967601.987:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562420][ T40] audit: type=1326 audit(1742967601.987:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562474][ T40] audit: type=1326 audit(1742967601.987:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.562505][ T40] audit: type=1326 audit(1742967602.007:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 58.685645][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 58.697041][ T6782] lo: entered promiscuous mode [ 58.698644][ T6782] lo: entered allmulticast mode [ 58.758515][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 58.763627][ T6793] process 'syz.1.351' launched './file2' with NULL argv: empty string added [ 58.963010][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 59.011778][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 59.135121][ T6831] raw_sendmsg: syz.0.367 forgot to set AF_INET. Fix it! [ 59.196986][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 59.642289][ T1339] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.802562][ T1339] usb 5-1: Using ep0 maxpacket: 16 [ 59.808383][ T1339] usb 5-1: no configurations [ 59.809685][ T1339] usb 5-1: can't read configurations, error -22 [ 59.952206][ T1339] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.969667][ T6880] program syz.1.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.050123][ T6887] mmap: syz.1.394 (6887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.092760][ T6891] sctp: [Deprecated]: syz.3.396 (pid 6891) Use of int in maxseg socket option. [ 60.092760][ T6891] Use struct sctp_assoc_value instead [ 60.102713][ T1339] usb 5-1: Using ep0 maxpacket: 16 [ 60.104827][ T1339] usb 5-1: no configurations [ 60.106319][ T1339] usb 5-1: can't read configurations, error -22 [ 60.108276][ T1339] usb usb5-port1: attempt power cycle [ 60.153439][ T6899] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.339514][ T6912] capability: warning: `syz.3.404' uses deprecated v2 capabilities in a way that may be insecure [ 60.462226][ T1339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.482623][ T1339] usb 5-1: Using ep0 maxpacket: 16 [ 60.484786][ T1339] usb 5-1: no configurations [ 60.486237][ T1339] usb 5-1: can't read configurations, error -22 [ 60.622204][ T1339] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.643110][ T1339] usb 5-1: Using ep0 maxpacket: 16 [ 60.645557][ T1339] usb 5-1: no configurations [ 60.647260][ T1339] usb 5-1: can't read configurations, error -22 [ 60.650282][ T1339] usb usb5-port1: unable to enumerate USB device [ 60.704342][ T6946] __nla_validate_parse: 1 callbacks suppressed [ 60.704352][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 60.749688][ T6949] 9pnet: Could not find request transport: iI [ 61.123893][ T6992] block device autoloading is deprecated and will be removed. [ 61.126667][ T6992] syz.3.423: attempt to access beyond end of device [ 61.126667][ T6992] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.560986][ T7023] netlink: 'syz.2.436': attribute type 3 has an invalid length. [ 61.593550][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 61.622787][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.682100][ T7037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.765267][ T7037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.769174][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 61.771994][ T7044] bridge_slave_1: left promiscuous mode [ 61.773792][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.776448][ T7044] bridge_slave_0: left allmulticast mode [ 61.777980][ T7044] bridge_slave_0: left promiscuous mode [ 61.779574][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.792363][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 61.794350][ T10] usb 6-1: no configurations [ 61.795692][ T10] usb 6-1: can't read configurations, error -22 [ 61.884721][ T7037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.932259][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.951935][ T7037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.016009][ T7037] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.021503][ T7037] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.026332][ T7037] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.030699][ T7037] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.102269][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 62.104097][ T10] usb 6-1: no configurations [ 62.105368][ T10] usb 6-1: can't read configurations, error -22 [ 62.107166][ T10] usb usb6-port1: attempt power cycle [ 62.131549][ T7061] infiniband syz0: set active [ 62.133910][ T7061] infiniband syz0: added syz_tun [ 62.148933][ T7061] RDS/IB: syz0: added [ 62.150054][ T7061] smc: adding ib device syz0 with port count 1 [ 62.151696][ T7061] smc: ib device syz0 port 1 has pnetid [ 62.435581][ T7081] syz.3.461 uses obsolete (PF_INET,SOCK_PACKET) [ 62.462523][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.465792][ T7087] bond1: entered promiscuous mode [ 62.483046][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 62.485355][ T10] usb 6-1: no configurations [ 62.487094][ T10] usb 6-1: can't read configurations, error -22 [ 62.622228][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.624379][ T7103] netlink: 136 bytes leftover after parsing attributes in process `syz.2.471'. [ 62.642980][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 62.644909][ T10] usb 6-1: no configurations [ 62.646212][ T10] usb 6-1: can't read configurations, error -22 [ 62.648135][ T10] usb usb6-port1: unable to enumerate USB device [ 62.693323][ T7112] bond0: (slave bond_slave_0): Releasing backup interface [ 62.697299][ T7112] bond0: (slave bond_slave_1): Releasing backup interface [ 62.706387][ T7112] team0: Port device team_slave_0 removed [ 62.710956][ T7112] team0: Port device team_slave_1 removed [ 62.716331][ T7115] netlink: 'syz.2.476': attribute type 29 has an invalid length. [ 62.727088][ T7113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.731365][ T7115] netlink: 'syz.2.476': attribute type 29 has an invalid length. [ 62.737099][ T7115] netlink: 592 bytes leftover after parsing attributes in process `syz.2.476'. [ 62.738297][ T7112] team0: Mode changed to "loadbalance" [ 62.740067][ T7115] unsupported nla_type 58 [ 63.026719][ T7123] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 63.028619][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.031491][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 63.036190][ T7124] vhci_hcd: connection closed [ 63.037207][ T75] vhci_hcd: stop threads [ 63.040132][ T75] vhci_hcd: release socket [ 63.041404][ T75] vhci_hcd: disconnect device [ 63.535741][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.537871][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.540816][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.543647][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.645387][ T7137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.486'. [ 63.667363][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.487'. [ 63.845028][ T7145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.849316][ T7145] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.938441][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 63.941961][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 64.091095][ T7165] block device autoloading is deprecated and will be removed. [ 64.179932][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 64.179954][ T40] audit: type=1326 audit(1742967607.627:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.188027][ T40] audit: type=1326 audit(1742967607.627:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.194018][ T40] audit: type=1326 audit(1742967607.627:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.199963][ T40] audit: type=1326 audit(1742967607.627:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.206299][ T40] audit: type=1326 audit(1742967607.627:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.212385][ T40] audit: type=1326 audit(1742967607.627:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.218012][ T40] audit: type=1326 audit(1742967607.627:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.225745][ T40] audit: type=1326 audit(1742967607.627:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.231637][ T40] audit: type=1326 audit(1742967607.627:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.234338][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 64.237675][ T40] audit: type=1326 audit(1742967607.627:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 64.545076][ T7241] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.534' sets config #1 [ 65.301260][ T7326] program syz.1.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.511415][ T7330] block device autoloading is deprecated and will be removed. [ 65.582485][ T6347] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.674527][ T7333] cdrom: dropping to single frame dma [ 65.742321][ T6347] usb 6-1: Using ep0 maxpacket: 8 [ 65.745938][ T6347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.749353][ T6347] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.752662][ T6347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.757301][ T6347] usb 6-1: config 0 descriptor?? [ 65.762813][ T6347] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 65.798560][ T7342] __nla_validate_parse: 5 callbacks suppressed [ 65.798574][ T7342] netlink: 14 bytes leftover after parsing attributes in process `syz.2.580'. [ 65.849229][ T7342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.853327][ T7342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.857246][ T7342] bond0 (unregistering): Released all slaves [ 65.993012][ T7347] veth1_to_bond: entered allmulticast mode [ 66.000543][ T7346] veth1_to_bond: left allmulticast mode [ 66.043233][ T7328] random: crng reseeded on system resumption [ 66.217883][ T7343] CUSE: DEVNAME unspecified [ 66.231284][ T5988] usb 6-1: USB disconnect, device number 6 [ 66.345834][ T7357] xt_socket: unknown flags 0x4 [ 66.682312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.969619][ T7377] veth1_to_bond: entered allmulticast mode [ 66.983659][ T7376] veth1_to_bond: left allmulticast mode [ 67.252258][ T6005] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.252925][ T6347] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.336330][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 67.402222][ T6347] usb 5-1: Using ep0 maxpacket: 8 [ 67.402227][ T6005] usb 8-1: Using ep0 maxpacket: 8 [ 67.404125][ T6005] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 67.407104][ T6347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.407731][ T6005] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.410804][ T6347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.413743][ T6005] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.413758][ T6005] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.413769][ T6005] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.416946][ T6347] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.416970][ T6347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.420648][ T6005] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.424456][ T6347] usb 5-1: config 0 descriptor?? [ 67.426681][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.631825][ T7389] random: crng reseeded on system resumption [ 67.644636][ T6005] usb 8-1: usb_control_msg returned -32 [ 67.646792][ T6005] usbtmc 8-1:16.0: can't read capabilities [ 67.815766][ T6347] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 67.822482][ T6347] usb 5-1: USB disconnect, device number 6 [ 67.843782][ T7413] veth1_to_bond: entered allmulticast mode [ 67.852465][ T7412] veth1_to_bond: left allmulticast mode [ 67.997162][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.000376][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.007882][ T7417] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 68.211680][ T6005] usb 8-1: USB disconnect, device number 2 [ 68.214464][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 68.217305][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 68.559135][ T7432] block device autoloading is deprecated and will be removed. [ 68.562064][ T7432] syz.0.607: attempt to access beyond end of device [ 68.562064][ T7432] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.034329][ T7445] veth1_to_bond: entered allmulticast mode [ 69.042792][ T7443] veth1_to_bond: left allmulticast mode [ 69.372290][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.522930][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 69.529526][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.533366][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.536873][ T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.540419][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.547268][ T24] usb 8-1: config 0 descriptor?? [ 69.581195][ T7466] ======================================================= [ 69.581195][ T7466] WARNING: The mand mount option has been deprecated and [ 69.581195][ T7466] and is ignored by this kernel. Remove the mand [ 69.581195][ T7466] option from the mount to silence this warning. [ 69.581195][ T7466] ======================================================= [ 69.603328][ T7466] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 69.640918][ T7468] 9pnet_virtio: no channels available for device syz [ 69.702063][ T7470] veth1_to_bond: entered allmulticast mode [ 69.715614][ T7469] veth1_to_bond: left allmulticast mode [ 69.753822][ T7451] random: crng reseeded on system resumption [ 69.959343][ T24] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.964518][ T24] usb 8-1: USB disconnect, device number 3 [ 70.090955][ T7489] Cache volume key already in use (9p,syz,) [ 70.134363][ T7490] FAULT_INJECTION: forcing a failure. [ 70.134363][ T7490] name failslab, interval 1, probability 0, space 0, times 1 [ 70.137886][ T7490] CPU: 1 UID: 0 PID: 7490 Comm: syz.2.627 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 70.137909][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.137915][ T7490] Call Trace: [ 70.137918][ T7490] [ 70.137923][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 70.137940][ T7490] should_fail_ex+0x512/0x640 [ 70.137951][ T7490] ? __kmalloc_noprof+0xbf/0x510 [ 70.137967][ T7490] ? lsm_blob_alloc+0x68/0x90 [ 70.137976][ T7490] should_failslab+0xc2/0x120 [ 70.137991][ T7490] __kmalloc_noprof+0xd2/0x510 [ 70.138006][ T7490] lsm_blob_alloc+0x68/0x90 [ 70.138016][ T7490] security_sk_alloc+0x30/0x270 [ 70.138029][ T7490] sk_prot_alloc+0xfb/0x2a0 [ 70.138039][ T7490] sk_alloc+0x36/0xc20 [ 70.138052][ T7490] inet_create+0x3a1/0x1090 [ 70.138066][ T7490] ? inet_create+0x93/0x1090 [ 70.138081][ T7490] __sock_create+0x335/0x8d0 [ 70.138092][ T7490] mptcp_pm_nl_create_listen_socket+0x11b/0x720 [ 70.138108][ T7490] ? __pfx_mptcp_pm_nl_create_listen_socket+0x10/0x10 [ 70.138129][ T7490] mptcp_pm_nl_add_addr_doit+0x317/0xcc0 [ 70.138144][ T7490] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 70.138157][ T7490] ? __pfx___nla_validate_parse+0x10/0x10 [ 70.138172][ T7490] ? rcu_is_watching+0x12/0xc0 [ 70.138185][ T7490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 70.138201][ T7490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 70.138218][ T7490] genl_family_rcv_msg_doit+0x206/0x2f0 [ 70.138233][ T7490] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 70.138248][ T7490] ? trace_cap_capable+0x18d/0x200 [ 70.138261][ T7490] ? bpf_lsm_capable+0x9/0x10 [ 70.138270][ T7490] ? security_capable+0x7e/0x260 [ 70.138280][ T7490] ? ns_capable+0xd7/0x110 [ 70.138291][ T7490] genl_rcv_msg+0x55c/0x800 [ 70.138307][ T7490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.138320][ T7490] ? __pfx___dev_queue_xmit+0x10/0x10 [ 70.138335][ T7490] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 70.138350][ T7490] ? __lock_acquire+0xaa4/0x1ba0 [ 70.138364][ T7490] netlink_rcv_skb+0x16a/0x440 [ 70.138377][ T7490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.138391][ T7490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.138407][ T7490] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 70.138421][ T7490] ? __pfx_down_read+0x10/0x10 [ 70.138438][ T7490] genl_rcv+0x28/0x40 [ 70.138450][ T7490] netlink_unicast+0x53a/0x7f0 [ 70.138463][ T7490] ? __pfx_netlink_unicast+0x10/0x10 [ 70.138476][ T7490] ? __phys_addr_symbol+0x30/0x80 [ 70.138489][ T7490] ? __check_object_size+0x4c7/0x710 [ 70.138505][ T7490] netlink_sendmsg+0x8da/0xd70 [ 70.138519][ T7490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.138532][ T7490] ? __import_iovec+0x1c8/0x660 [ 70.138546][ T7490] ____sys_sendmsg+0xa8d/0xc60 [ 70.138556][ T7490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.138565][ T7490] ? get_compat_msghdr+0x11a/0x170 [ 70.138580][ T7490] ___sys_sendmsg+0x134/0x1d0 [ 70.138593][ T7490] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.138617][ T7490] __sys_sendmsg+0x16d/0x220 [ 70.138630][ T7490] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.138647][ T7490] ? rcu_is_watching+0x12/0xc0 [ 70.138657][ T7490] __do_fast_syscall_32+0x73/0x120 [ 70.138671][ T7490] do_fast_syscall_32+0x32/0x80 [ 70.138684][ T7490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.138696][ T7490] RIP: 0023:0xf7f16579 [ 70.138704][ T7490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.138713][ T7490] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 70.138722][ T7490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 70.138728][ T7490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.138733][ T7490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.138738][ T7490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.138744][ T7490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.138753][ T7490] [ 70.522249][ T6347] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.662236][ T6347] usb 6-1: device descriptor read/64, error -71 [ 70.784593][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.063468][ T7498] 9pnet_fd: Insufficient options for proto=fd [ 71.122236][ T6347] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.126585][ T7501] veth1_to_bond: entered allmulticast mode [ 71.134267][ T7500] veth1_to_bond: left allmulticast mode [ 71.162269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.263428][ T6347] usb 6-1: device descriptor read/64, error -71 [ 71.372860][ T6347] usb usb6-port1: attempt power cycle [ 71.472301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.517914][ T7496] syz.3.630 (7496) used greatest stack depth: 21304 bytes left [ 71.722233][ T6347] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.753666][ T6347] usb 6-1: device descriptor read/8, error -71 [ 71.823294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.942247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 71.992252][ T6347] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 72.012604][ T6347] usb 6-1: device descriptor read/8, error -71 [ 72.133260][ T6347] usb usb6-port1: unable to enumerate USB device [ 72.246654][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 72.342228][ T59] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.492284][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 72.495480][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.499390][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.505736][ T59] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.508353][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.511524][ T59] usb 7-1: config 0 descriptor?? [ 72.719903][ T7520] random: crng reseeded on system resumption [ 72.908792][ T59] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.912071][ T59] usb 7-1: USB disconnect, device number 6 [ 72.952402][ T5988] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.113712][ T5988] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.116199][ T5988] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.119089][ T5988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.121715][ T5988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 73.124907][ T5988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 73.129703][ T5988] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.132376][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.134591][ T5988] usb 5-1: Product: syz [ 73.135791][ T5988] usb 5-1: Manufacturer: syz [ 73.139082][ T5988] cdc_wdm 5-1:1.0: skipping garbage [ 73.140633][ T5988] cdc_wdm 5-1:1.0: skipping garbage [ 73.143030][ T5988] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 73.144730][ T5988] cdc_wdm 5-1:1.0: Unknown control protocol [ 73.297446][ T7534] veth1_to_bond: entered allmulticast mode [ 73.304423][ T7533] veth1_to_bond: left allmulticast mode [ 73.444343][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 73.585015][ T59] IPVS: starting estimator thread 0... [ 73.682228][ T5944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 73.686084][ T7546] IPVS: using max 48 ests per chain, 115200 per kthread [ 73.830525][ T7561] FAULT_INJECTION: forcing a failure. [ 73.830525][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 73.834892][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.3.650 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 73.834913][ T7561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.834921][ T7561] Call Trace: [ 73.834925][ T7561] [ 73.834932][ T7561] dump_stack_lvl+0x16c/0x1f0 [ 73.834955][ T7561] should_fail_ex+0x512/0x640 [ 73.834970][ T7561] ? fs_reclaim_acquire+0xae/0x150 [ 73.834986][ T7561] ? tomoyo_encode2+0x100/0x3e0 [ 73.835006][ T7561] should_failslab+0xc2/0x120 [ 73.835026][ T7561] __kmalloc_noprof+0xd2/0x510 [ 73.835057][ T7561] ? d_absolute_path+0x136/0x1a0 [ 73.835074][ T7561] tomoyo_encode2+0x100/0x3e0 [ 73.835096][ T7561] tomoyo_encode+0x29/0x50 [ 73.835115][ T7561] tomoyo_realpath_from_path+0x18f/0x6e0 [ 73.835140][ T7561] tomoyo_path_number_perm+0x245/0x580 [ 73.835156][ T7561] ? tomoyo_path_number_perm+0x237/0x580 [ 73.835175][ T7561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.835193][ T7561] ? find_held_lock+0x2b/0x80 [ 73.835222][ T7561] ? find_held_lock+0x2b/0x80 [ 73.835236][ T7561] ? __fget_files+0x204/0x3c0 [ 73.835273][ T7561] ? __fget_files+0x20e/0x3c0 [ 73.835298][ T7561] security_file_ioctl_compat+0x9b/0x240 [ 73.835319][ T7561] __do_compat_sys_ioctl+0x4e/0x2c0 [ 73.835336][ T7561] __do_fast_syscall_32+0x73/0x120 [ 73.835355][ T7561] do_fast_syscall_32+0x32/0x80 [ 73.835373][ T7561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.835390][ T7561] RIP: 0023:0xf747e579 [ 73.835401][ T7561] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.835414][ T7561] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 73.835427][ T7561] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005310 [ 73.835436][ T7561] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.835444][ T7561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.835451][ T7561] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.835459][ T7561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.835474][ T7561] [ 73.835542][ T7561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.862332][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 73.912530][ T5944] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.916232][ T5944] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.919016][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.922709][ T5944] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 73.925880][ T5944] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.928540][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.932102][ T5944] usb 6-1: config 0 descriptor?? [ 74.138722][ T5944] usb 6-1: USB disconnect, device number 11 [ 74.774794][ T7577] FAULT_INJECTION: forcing a failure. [ 74.774794][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.779549][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.3.655 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 74.779564][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.779570][ T7577] Call Trace: [ 74.779573][ T7577] [ 74.779577][ T7577] dump_stack_lvl+0x16c/0x1f0 [ 74.779613][ T7577] should_fail_ex+0x512/0x640 [ 74.779625][ T7577] _copy_to_user+0x32/0xd0 [ 74.779638][ T7577] simple_read_from_buffer+0xe0/0x170 [ 74.779653][ T7577] proc_fail_nth_read+0x197/0x270 [ 74.779666][ T7577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.779679][ T7577] ? rw_verify_area+0xcf/0x680 [ 74.779690][ T7577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.779702][ T7577] vfs_read+0x1de/0xc70 [ 74.779715][ T7577] ? fdget_pos+0x2a2/0x370 [ 74.779729][ T7577] ? __pfx___mutex_lock+0x10/0x10 [ 74.779742][ T7577] ? __pfx_vfs_read+0x10/0x10 [ 74.779757][ T7577] ? __fget_files+0x20e/0x3c0 [ 74.779773][ T7577] ksys_read+0x12a/0x240 [ 74.779785][ T7577] ? __pfx_ksys_read+0x10/0x10 [ 74.779797][ T7577] ? rcu_is_watching+0x12/0xc0 [ 74.779808][ T7577] ? rcu_is_watching+0x12/0xc0 [ 74.779818][ T7577] __do_fast_syscall_32+0x73/0x120 [ 74.779832][ T7577] do_fast_syscall_32+0x32/0x80 [ 74.779857][ T7577] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.779870][ T7577] RIP: 0023:0xf747e579 [ 74.779878][ T7577] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.779887][ T7577] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.779897][ T7577] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5106620 [ 74.779903][ T7577] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 74.779908][ T7577] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 74.779913][ T7577] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 74.779919][ T7577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.779929][ T7577] [ 74.972005][ T7584] Bluetooth: MGMT ver 1.23 [ 75.152710][ T7593] serio: Serial port ptm0 [ 75.977087][ T6005] usb 5-1: USB disconnect, device number 7 [ 76.015902][ T7614] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.668'. [ 76.019269][ T7614] openvswitch: netlink: Missing key (keys=40, expected=80) [ 76.057167][ T7618] 9pnet_virtio: no channels available for device syz [ 76.105730][ T7625] overlayfs: missing 'lowerdir' [ 76.302975][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 76.547124][ T5950] Bluetooth: Unexpected start frame (len 16) [ 76.807295][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 76.816240][ T7655] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.819270][ T7655] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.821532][ T7655] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.823946][ T7655] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.827131][ T7655] vxlan0: entered promiscuous mode [ 76.865336][ T7659] netlink: 136 bytes leftover after parsing attributes in process `syz.1.680'. [ 76.868231][ T7659] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 76.900217][ T7662] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 77.538806][ T7684] 9pnet_virtio: no channels available for device syz [ 77.630572][ T7686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.691'. [ 77.697386][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 77.773259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.996870][ T7694] debugfs: Bad value for 'uid' [ 77.998679][ T7694] debugfs: Bad value for 'uid' [ 78.055405][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 78.081854][ T7702] veth1_to_bond: entered allmulticast mode [ 78.091023][ T7701] veth1_to_bond: left allmulticast mode [ 78.133327][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 78.405978][ T7714] sd 0:0:0:0: PR command failed: 1026 [ 78.408260][ T7714] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 78.411025][ T7714] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 79.400715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.526810][ T7752] 9pnet_fd: Insufficient options for proto=fd [ 79.542006][ T7754] 9pnet_virtio: no channels available for device syz [ 79.550164][ T7756] FAULT_INJECTION: forcing a failure. [ 79.550164][ T7756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.554253][ T7756] CPU: 3 UID: 0 PID: 7756 Comm: syz.2.711 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 79.554267][ T7756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.554273][ T7756] Call Trace: [ 79.554276][ T7756] [ 79.554279][ T7756] dump_stack_lvl+0x16c/0x1f0 [ 79.554296][ T7756] should_fail_ex+0x512/0x640 [ 79.554308][ T7756] _copy_from_iter+0x2a4/0x15b0 [ 79.554322][ T7756] ? __pfx__copy_from_iter+0x10/0x10 [ 79.554333][ T7756] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.554353][ T7756] copy_page_from_iter+0xa5/0x120 [ 79.554367][ T7756] tun_build_skb.constprop.0+0x293/0xf00 [ 79.554380][ T7756] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 79.554392][ T7756] ? __lock_acquire+0x5ca/0x1ba0 [ 79.554409][ T7756] ? find_held_lock+0x2b/0x80 [ 79.554420][ T7756] tun_get_user+0x87a/0x3f20 [ 79.554432][ T7756] ? __lock_acquire+0x5ca/0x1ba0 [ 79.554445][ T7756] ? __pfx_tun_get_user+0x10/0x10 [ 79.554454][ T7756] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 79.554467][ T7756] ? find_held_lock+0x2b/0x80 [ 79.554477][ T7756] ? tun_get+0x191/0x370 [ 79.554487][ T7756] tun_chr_write_iter+0xdc/0x210 [ 79.554498][ T7756] vfs_write+0x5ba/0x1180 [ 79.554512][ T7756] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 79.554523][ T7756] ? __pfx_vfs_write+0x10/0x10 [ 79.554535][ T7756] ? find_held_lock+0x2b/0x80 [ 79.554549][ T7756] ksys_write+0x12a/0x240 [ 79.554561][ T7756] ? __pfx_ksys_write+0x10/0x10 [ 79.554574][ T7756] ? rcu_is_watching+0x12/0xc0 [ 79.554585][ T7756] __do_fast_syscall_32+0x73/0x120 [ 79.554600][ T7756] do_fast_syscall_32+0x32/0x80 [ 79.554613][ T7756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.554625][ T7756] RIP: 0023:0xf7f16579 [ 79.554632][ T7756] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.554641][ T7756] RSP: 002b:00000000f5036520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 79.554650][ T7756] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001800 [ 79.554656][ T7756] RDX: 000000000000002a RSI: 00000000f739cff4 RDI: 0000000000000000 [ 79.554662][ T7756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.554667][ T7756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.554672][ T7756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.554681][ T7756] [ 79.655099][ T7758] warning: `syz.2.712' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.663764][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.712'. [ 79.951873][ T7771] FAULT_INJECTION: forcing a failure. [ 79.951873][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 79.957184][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.2.716 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 79.957208][ T7771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.957214][ T7771] Call Trace: [ 79.957218][ T7771] [ 79.957221][ T7771] dump_stack_lvl+0x16c/0x1f0 [ 79.957239][ T7771] should_fail_ex+0x512/0x640 [ 79.957252][ T7771] should_failslab+0xc2/0x120 [ 79.957268][ T7771] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 79.957283][ T7771] ? __alloc_skb+0x2b2/0x380 [ 79.957296][ T7771] ? __lock_acquire+0x5ca/0x1ba0 [ 79.957310][ T7771] __alloc_skb+0x2b2/0x380 [ 79.957322][ T7771] ? __pfx___alloc_skb+0x10/0x10 [ 79.957338][ T7771] tipc_buf_acquire+0x26/0xe0 [ 79.957352][ T7771] tipc_msg_create+0x39/0x1d0 [ 79.957367][ T7771] tipc_group_proto_xmit+0x150/0x7c0 [ 79.957377][ T7771] ? look_up_lock_class+0x6b/0x150 [ 79.957389][ T7771] tipc_group_cong+0x436/0x530 [ 79.957399][ T7771] ? __pfx_tipc_group_cong+0x10/0x10 [ 79.957414][ T7771] tipc_group_bc_cong+0x1d7/0x290 [ 79.957423][ T7771] ? __pfx_tipc_group_bc_cong+0x10/0x10 [ 79.957434][ T7771] ? net_generic+0xf4/0x2a0 [ 79.957447][ T7771] tipc_send_group_bcast+0x3cf/0xa50 [ 79.957462][ T7771] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 79.957474][ T7771] ? __pfx_woken_wake_function+0x10/0x10 [ 79.957484][ T7771] ? __pfx_process_measurement+0x10/0x10 [ 79.957497][ T7771] ? __lock_acquire+0x5ca/0x1ba0 [ 79.957512][ T7771] __tipc_sendmsg+0x4ab/0x19a0 [ 79.957526][ T7771] ? __irq_work_queue_local+0x2d2/0x450 [ 79.957541][ T7771] ? __pfx___tipc_sendmsg+0x10/0x10 [ 79.957554][ T7771] ? __lock_acquire+0xaa4/0x1ba0 [ 79.957568][ T7771] ? __pfx___might_resched+0x10/0x10 [ 79.957585][ T7771] ? __local_bh_enable_ip+0xa4/0x120 [ 79.957598][ T7771] tipc_sendmsg+0x4f/0x70 [ 79.957611][ T7771] ____sys_sendmsg+0xa8d/0xc60 [ 79.957622][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.957630][ T7771] ? get_compat_msghdr+0x11a/0x170 [ 79.957646][ T7771] ___sys_sendmsg+0x134/0x1d0 [ 79.957659][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.957683][ T7771] __sys_sendmsg+0x16d/0x220 [ 79.957696][ T7771] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.957713][ T7771] ? rcu_is_watching+0x12/0xc0 [ 79.957724][ T7771] __do_fast_syscall_32+0x73/0x120 [ 79.957738][ T7771] do_fast_syscall_32+0x32/0x80 [ 79.957751][ T7771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.957763][ T7771] RIP: 0023:0xf7f16579 [ 79.957771][ T7771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.957780][ T7771] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 79.957789][ T7771] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000540 [ 79.957795][ T7771] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.957800][ T7771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.957805][ T7771] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.957811][ T7771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.957820][ T7771] [ 80.692214][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 80.842214][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 80.846393][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.851771][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.856188][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.861360][ T24] usb 6-1: config 0 descriptor?? [ 81.012950][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 81.012966][ T40] audit: type=1400 audit(1742967624.467:896): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A203A0A36202020206970 pid=7786 comm="syz.0.722" [ 81.014016][ T7791] syz.0.722: attempt to access beyond end of device [ 81.014016][ T7791] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.036804][ T833] cfg80211: failed to load regulatory.db [ 81.069136][ T7774] random: crng reseeded on system resumption [ 81.490562][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.503093][ T24] usb 6-1: USB disconnect, device number 12 [ 81.656585][ T40] audit: type=1326 audit(1742967625.107:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.3.730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 81.663321][ T40] audit: type=1326 audit(1742967625.107:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.3.730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 81.669636][ T40] audit: type=1326 audit(1742967625.107:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.3.730" exe="/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 81.677627][ T40] audit: type=1326 audit(1742967625.107:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.3.730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 81.685301][ T40] audit: type=1326 audit(1742967625.107:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.3.730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 81.698334][ T7814] netlink: 72 bytes leftover after parsing attributes in process `syz.3.731'. [ 81.746738][ T7818] veth1_to_bond: entered allmulticast mode [ 81.754759][ T7817] veth1_to_bond: left allmulticast mode [ 82.223068][ T1138] wlan1: Trigger new scan to find an IBSS to join [ 83.082206][ T5988] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.132266][ T7851] 9pnet_virtio: no channels available for device syz [ 83.150559][ T5950] Bluetooth: hci2: Malformed Event: 0x13 [ 83.252230][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 83.255099][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.258140][ T5988] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.260674][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.263806][ T5988] usb 5-1: config 0 descriptor?? [ 83.467276][ T7853] random: crng reseeded on system resumption [ 83.697025][ T5988] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.700731][ T5988] usb 5-1: USB disconnect, device number 8 [ 83.808041][ T7878] FAULT_INJECTION: forcing a failure. [ 83.808041][ T7878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.811563][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.3.750 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 83.811577][ T7878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.811582][ T7878] Call Trace: [ 83.811586][ T7878] [ 83.811590][ T7878] dump_stack_lvl+0x16c/0x1f0 [ 83.811606][ T7878] should_fail_ex+0x512/0x640 [ 83.811618][ T7878] ? page_copy_sane+0xcd/0x2d0 [ 83.811629][ T7878] copy_page_from_iter_atomic+0x3ad/0x1950 [ 83.811642][ T7878] ? __pfx_lru_add+0x10/0x10 [ 83.811655][ T7878] ? __pfx_filemap_add_folio+0x10/0x10 [ 83.811668][ T7878] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 83.811680][ T7878] ? fault_in_readable+0x1a7/0x200 [ 83.811693][ T7878] ? __filemap_get_folio+0x333/0xc10 [ 83.811706][ T7878] ? zero_user_segments.constprop.0+0x21e/0x2d0 [ 83.811721][ T7878] netfs_perform_write+0xd8e/0x20f0 [ 83.811738][ T7878] ? __pfx_netfs_perform_write+0x10/0x10 [ 83.811784][ T7878] ? inode_needs_update_time.part.0+0x191/0x270 [ 83.811811][ T7878] netfs_file_write_iter+0x495/0x570 [ 83.811827][ T7878] v9fs_file_write_iter+0x9b/0x100 [ 83.811841][ T7878] vfs_write+0x5ba/0x1180 [ 83.811854][ T7878] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 83.811866][ T7878] ? __pfx___mutex_lock+0x10/0x10 [ 83.811879][ T7878] ? __pfx_vfs_write+0x10/0x10 [ 83.811897][ T7878] ksys_write+0x12a/0x240 [ 83.811909][ T7878] ? __pfx_ksys_write+0x10/0x10 [ 83.811922][ T7878] ? rcu_is_watching+0x12/0xc0 [ 83.811934][ T7878] __do_fast_syscall_32+0x73/0x120 [ 83.811948][ T7878] do_fast_syscall_32+0x32/0x80 [ 83.811960][ T7878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.811973][ T7878] RIP: 0023:0xf747e579 [ 83.811980][ T7878] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.811994][ T7878] RSP: 002b:00000000f50c455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 83.812003][ T7878] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 83.812009][ T7878] RDX: 00000000fffffd9d RSI: 0000000000000000 RDI: 0000000000000000 [ 83.812014][ T7878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.812019][ T7878] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.812025][ T7878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.812034][ T7878] [ 84.543420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.590027][ T40] audit: type=1326 audit(1742967628.037:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.3.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 84.601959][ T40] audit: type=1326 audit(1742967628.037:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.3.755" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 84.608368][ T40] audit: type=1326 audit(1742967628.037:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.3.755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 84.614532][ T40] audit: type=1326 audit(1742967628.037:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.3.755" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 84.712571][ T5995] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 84.932311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.955989][ T7913] veth1_to_bond: entered allmulticast mode [ 84.966820][ T7912] veth1_to_bond: left allmulticast mode [ 85.262355][ T1134] wlan1: Trigger new scan to find an IBSS to join [ 88.142366][ T12] wlan1: Creating new IBSS network, BSSID e6:3d:7b:6c:66:ef [ 88.943499][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.945838][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 88.948328][ T5950] Bluetooth: hci2: hardware error 0x00 [ 91.022233][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.965286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.146708][ T7964] 9pnet_virtio: no channels available for device syz [ 95.150537][ T7965] 9pnet_virtio: no channels available for device syz [ 96.373717][ T7985] 9pnet_virtio: no channels available for device syz [ 96.991196][ T8002] 9pnet_virtio: no channels available for device syz [ 97.544811][ T1138] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.402407][ T8038] 9pnet_virtio: no channels available for device syz [ 98.915034][ T8043] 9pnet_virtio: no channels available for device syz [ 99.582391][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.582412][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 100.190259][ T8058] 9pnet_virtio: no channels available for device syz [ 100.214175][ T8059] 9pnet_virtio: no channels available for device syz [ 100.520275][ T8064] 9pnet_virtio: no channels available for device syz [ 100.669705][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 101.189293][ T6014] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.332241][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 101.336649][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.341653][ T6014] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.345139][ T8089] 9pnet_virtio: no channels available for device syz [ 101.347156][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.354027][ T6014] usb 5-1: config 0 descriptor?? [ 101.449875][ T8093] 9pnet_virtio: no channels available for device syz [ 101.566124][ T8071] random: crng reseeded on system resumption [ 101.776037][ T6014] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.781911][ T6014] usb 5-1: USB disconnect, device number 9 [ 102.530100][ T8128] 9pnet_virtio: no channels available for device syz [ 102.918478][ T8131] ufs: You didn't specify the type of your ufs filesystem [ 102.918478][ T8131] [ 102.918478][ T8131] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 102.918478][ T8131] [ 102.918478][ T8131] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 102.928370][ T8131] ufs: ufs_fill_super(): bad magic number [ 103.642267][ T6347] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 103.793215][ T6347] usb 7-1: Using ep0 maxpacket: 8 [ 103.796889][ T6347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.800690][ T6347] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.804025][ T6347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.807866][ T6347] usb 7-1: config 0 descriptor?? [ 103.972266][ T833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 104.015935][ T8147] random: crng reseeded on system resumption [ 104.122204][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 104.125061][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.128109][ T833] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.130757][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.134563][ T833] usb 8-1: config 0 descriptor?? [ 104.192230][ T6014] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 104.201580][ T6347] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.205763][ T6347] usb 7-1: USB disconnect, device number 7 [ 104.342233][ T6014] usb 6-1: Using ep0 maxpacket: 8 [ 104.344969][ T6014] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 104.347283][ T6014] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.349936][ T6014] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.352776][ T6014] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.355489][ T6014] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.359066][ T6014] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.361600][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.507770][ T833] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.515320][ T833] usb 8-1: USB disconnect, device number 4 [ 104.671796][ T6014] usb 6-1: usb_control_msg returned -32 [ 104.673554][ T6014] usbtmc 6-1:16.0: can't read capabilities [ 106.447278][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 107.532599][ T5988] usb 6-1: USB disconnect, device number 13 [ 107.710692][ T8237] misc userio: Invalid payload size [ 107.905091][ T8234] Cache volume key already in use (9p,syz,) [ 108.193895][ T8250] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 108.613896][ T8312] netlink: 'syz.0.844': attribute type 11 has an invalid length. [ 108.616187][ T8312] netlink: 44 bytes leftover after parsing attributes in process `syz.0.844'. [ 108.932997][ T8333] loop9: detected capacity change from 0 to 8 [ 108.937075][ T8333] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.938623][ T8333] loop9: partition table partially beyond EOD, truncated [ 108.940854][ T8333] loop9: p1 size 81768186 extends beyond EOD, truncated [ 108.968776][ T8166] udevd[8166]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 109.062187][ T833] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.412259][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 109.417090][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.420055][ T833] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.422790][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.426102][ T833] usb 5-1: config 0 descriptor?? [ 109.618801][ T8255] Set syz1 is full, maxelem 65536 reached [ 109.630787][ T8327] random: crng reseeded on system resumption [ 109.719926][ T8355] kvm: Disabled LAPIC found during irq injection [ 109.769174][ T5959] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 109.805644][ T833] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 109.814695][ T833] usb 5-1: USB disconnect, device number 10 [ 109.908298][ T8364] batman_adv: batadv0: Adding interface: dummy0 [ 109.910138][ T8364] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.917650][ T8364] batman_adv: batadv0: Interface activated: dummy0 [ 110.053625][ T8371] veth1_to_bond: entered allmulticast mode [ 110.085467][ T8370] veth1_to_bond: left allmulticast mode [ 110.348048][ T8375] Cache volume key already in use (9p,syz,) [ 110.702335][ T5950] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 110.769171][ T8400] 9pnet_fd: Insufficient options for proto=fd [ 110.777496][ T8398] bond0: (slave bond_slave_0): Releasing backup interface [ 110.807216][ T8398] bond0: (slave bond_slave_1): Releasing backup interface [ 110.835377][ T8398] team0: Port device team_slave_0 removed [ 110.841003][ T8398] team0: Port device team_slave_1 removed [ 111.220580][ T8408] netlink: 'syz.3.873': attribute type 11 has an invalid length. [ 111.223187][ T8408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.873'. [ 111.427094][ T8422] loop9: detected capacity change from 0 to 8 [ 111.429140][ T8422] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 111.430540][ T8422] loop9: partition table partially beyond EOD, truncated [ 111.432782][ T8422] loop9: p1 size 81768186 extends beyond EOD, truncated [ 111.482330][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.484652][ T8166] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 111.486262][ T8166] loop9: partition table partially beyond EOD, truncated [ 111.488239][ T8166] loop9: p1 size 81768186 extends beyond EOD, truncated [ 111.494564][ T8422] FAULT_INJECTION: forcing a failure. [ 111.494564][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 111.497940][ T8422] CPU: 3 UID: 0 PID: 8422 Comm: syz.2.878 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 111.497954][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.497960][ T8422] Call Trace: [ 111.497963][ T8422] [ 111.497967][ T8422] dump_stack_lvl+0x16c/0x1f0 [ 111.497983][ T8422] should_fail_ex+0x512/0x640 [ 111.497994][ T8422] ? __kmalloc_node_noprof+0xc5/0x500 [ 111.498010][ T8422] should_failslab+0xc2/0x120 [ 111.498025][ T8422] __kmalloc_node_noprof+0xd8/0x500 [ 111.498038][ T8422] ? __get_vm_area_node+0x1e5/0x300 [ 111.498051][ T8422] ? __vmalloc_node_range_noprof+0x3eb/0x1540 [ 111.498064][ T8422] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 111.498080][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.498092][ T8422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.498107][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.498116][ T8422] vzalloc_noprof+0x6b/0x90 [ 111.498128][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.498137][ T8422] bdev_disk_changed+0x48d/0x1520 [ 111.498146][ T8422] ? __pfx___mutex_lock+0x10/0x10 [ 111.498161][ T8422] ? __pfx_bdev_disk_changed+0x10/0x10 [ 111.498173][ T8422] loop_reread_partitions+0x70/0x140 [ 111.498188][ T8422] ? fput+0x70/0xf0 [ 111.498196][ T8422] lo_ioctl+0x195d/0x1e20 [ 111.498208][ T8422] ? kasan_save_stack+0x42/0x60 [ 111.498221][ T8422] ? kasan_save_stack+0x33/0x60 [ 111.498233][ T8422] ? kasan_save_track+0x14/0x30 [ 111.498246][ T8422] ? kasan_save_free_info+0x3b/0x60 [ 111.498256][ T8422] ? __kasan_slab_free+0x51/0x70 [ 111.498269][ T8422] ? kfree+0x2b6/0x4d0 [ 111.498280][ T8422] ? tomoyo_path_number_perm+0x470/0x580 [ 111.498293][ T8422] ? security_file_ioctl_compat+0x9b/0x240 [ 111.498306][ T8422] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 111.498317][ T8422] ? __do_fast_syscall_32+0x73/0x120 [ 111.498330][ T8422] ? do_fast_syscall_32+0x32/0x80 [ 111.498342][ T8422] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.498355][ T8422] ? __pfx_lo_ioctl+0x10/0x10 [ 111.498372][ T8422] ? kasan_quarantine_put+0x10a/0x240 [ 111.498385][ T8422] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.498397][ T8422] ? find_held_lock+0x2b/0x80 [ 111.498408][ T8422] ? tomoyo_path_number_perm+0x295/0x580 [ 111.498421][ T8422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.498437][ T8422] ? blkdev_common_ioctl+0x1cf/0x2200 [ 111.498449][ T8422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.498463][ T8422] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 111.498474][ T8422] ? do_vfs_ioctl+0x512/0x1990 [ 111.498485][ T8422] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.498502][ T8422] lo_compat_ioctl+0xb9/0x170 [ 111.498511][ T8422] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 111.498519][ T8422] compat_blkdev_ioctl+0x2eb/0x7a0 [ 111.498531][ T8422] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.498544][ T8422] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.498556][ T8422] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 111.498568][ T8422] __do_fast_syscall_32+0x73/0x120 [ 111.498581][ T8422] do_fast_syscall_32+0x32/0x80 [ 111.498594][ T8422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.498606][ T8422] RIP: 0023:0xf7f16579 [ 111.498613][ T8422] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.498623][ T8422] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 111.498633][ T8422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 111.498639][ T8422] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.498644][ T8422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.498654][ T8422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.498659][ T8422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.498669][ T8422] [ 111.498781][ T8422] syz.2.878: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 111.513985][ T8428] FAULT_INJECTION: forcing a failure. [ 111.513985][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 111.514296][ T8422] ,cpuset= [ 111.515681][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.3.887 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 111.515696][ T8428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.515702][ T8428] Call Trace: [ 111.515705][ T8428] [ 111.515712][ T8428] dump_stack_lvl+0x16c/0x1f0 [ 111.515729][ T8428] should_fail_ex+0x512/0x640 [ 111.515739][ T8428] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 111.515756][ T8428] should_failslab+0xc2/0x120 [ 111.515771][ T8428] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 111.515787][ T8428] ? vfs_parse_fs_string+0xc3/0x150 [ 111.515802][ T8428] ? rcu_is_watching+0x12/0xc0 [ 111.515813][ T8428] kmemdup_nul+0x49/0xf0 [ 111.515825][ T8428] vfs_parse_fs_string+0xc3/0x150 [ 111.515839][ T8428] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 111.515854][ T8428] ? fat_init_fs_context+0x43e/0x540 [ 111.515867][ T8428] ? msdos_init_fs_context+0x50/0x70 [ 111.515882][ T8428] ? __pfx_msdos_init_fs_context+0x10/0x10 [ 111.515897][ T8428] ? alloc_fs_context+0x59b/0x9c0 [ 111.515913][ T8428] path_mount+0x675/0x1f30 [ 111.515922][ T8428] ? kmem_cache_free+0x2d4/0x4d0 [ 111.515936][ T8428] ? __pfx_path_mount+0x10/0x10 [ 111.515945][ T8428] ? putname+0x154/0x1a0 [ 111.515955][ T8428] __ia32_sys_mount+0x28b/0x310 [ 111.515964][ T8428] ? __pfx___ia32_sys_mount+0x10/0x10 [ 111.515974][ T8428] ? rcu_is_watching+0x12/0xc0 [ 111.515984][ T8428] __do_fast_syscall_32+0x73/0x120 [ 111.515998][ T8428] do_fast_syscall_32+0x32/0x80 [ 111.516011][ T8428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.516024][ T8428] RIP: 0023:0xf747e579 [ 111.516031][ T8428] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.516041][ T8428] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 111.516050][ T8428] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000040 [ 111.516056][ T8428] RDX: 0000000080000000 RSI: 0000000000400080 RDI: 0000000000000000 [ 111.516062][ T8428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.516067][ T8428] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.516073][ T8428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.516082][ T8428] [ 111.632215][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 111.632818][ T8422] / [ 111.635775][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.637203][ T8422] ,mems_allowed=0-1 [ 111.638589][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.638602][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.639330][ T29] usb 5-1: config 0 descriptor?? [ 111.640524][ T8422] [ 111.686293][ T8422] CPU: 2 UID: 0 PID: 8422 Comm: syz.2.878 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 111.686307][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.686313][ T8422] Call Trace: [ 111.686316][ T8422] [ 111.686320][ T8422] dump_stack_lvl+0x16c/0x1f0 [ 111.686337][ T8422] warn_alloc+0x248/0x3a0 [ 111.686352][ T8422] ? __pfx_warn_alloc+0x10/0x10 [ 111.686365][ T8422] ? dump_stack_lvl+0x185/0x1f0 [ 111.686376][ T8422] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.686390][ T8422] ? rcu_is_watching+0x12/0xc0 [ 111.686400][ T8422] ? trace_kmalloc+0x2b/0xd0 [ 111.686409][ T8422] ? __get_vm_area_node+0x1e5/0x300 [ 111.686423][ T8422] __vmalloc_node_range_noprof+0x1110/0x1540 [ 111.686439][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.686451][ T8422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.686465][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.686475][ T8422] vzalloc_noprof+0x6b/0x90 [ 111.686487][ T8422] ? bdev_disk_changed+0x48d/0x1520 [ 111.686496][ T8422] bdev_disk_changed+0x48d/0x1520 [ 111.686505][ T8422] ? __pfx___mutex_lock+0x10/0x10 [ 111.686520][ T8422] ? __pfx_bdev_disk_changed+0x10/0x10 [ 111.686532][ T8422] loop_reread_partitions+0x70/0x140 [ 111.686547][ T8422] ? fput+0x70/0xf0 [ 111.686556][ T8422] lo_ioctl+0x195d/0x1e20 [ 111.686567][ T8422] ? kasan_save_stack+0x42/0x60 [ 111.686580][ T8422] ? kasan_save_stack+0x33/0x60 [ 111.686592][ T8422] ? kasan_save_track+0x14/0x30 [ 111.686605][ T8422] ? kasan_save_free_info+0x3b/0x60 [ 111.686615][ T8422] ? __kasan_slab_free+0x51/0x70 [ 111.686629][ T8422] ? kfree+0x2b6/0x4d0 [ 111.686639][ T8422] ? tomoyo_path_number_perm+0x470/0x580 [ 111.686652][ T8422] ? security_file_ioctl_compat+0x9b/0x240 [ 111.686666][ T8422] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 111.686677][ T8422] ? __do_fast_syscall_32+0x73/0x120 [ 111.686689][ T8422] ? do_fast_syscall_32+0x32/0x80 [ 111.686701][ T8422] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.686715][ T8422] ? __pfx_lo_ioctl+0x10/0x10 [ 111.686731][ T8422] ? kasan_quarantine_put+0x10a/0x240 [ 111.686744][ T8422] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.686757][ T8422] ? find_held_lock+0x2b/0x80 [ 111.686767][ T8422] ? tomoyo_path_number_perm+0x295/0x580 [ 111.686781][ T8422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.686796][ T8422] ? blkdev_common_ioctl+0x1cf/0x2200 [ 111.686808][ T8422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.686822][ T8422] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 111.686833][ T8422] ? do_vfs_ioctl+0x512/0x1990 [ 111.686843][ T8422] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.686861][ T8422] lo_compat_ioctl+0xb9/0x170 [ 111.686870][ T8422] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 111.686878][ T8422] compat_blkdev_ioctl+0x2eb/0x7a0 [ 111.686904][ T8422] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.686920][ T8422] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.686932][ T8422] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 111.686943][ T8422] __do_fast_syscall_32+0x73/0x120 [ 111.686957][ T8422] do_fast_syscall_32+0x32/0x80 [ 111.686974][ T8422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.686985][ T8422] RIP: 0023:0xf7f16579 [ 111.686993][ T8422] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.687003][ T8422] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 111.687013][ T8422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 111.687019][ T8422] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.687025][ T8422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.687030][ T8422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.687036][ T8422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.687046][ T8422] [ 111.687049][ T8422] Mem-Info: [ 111.793374][ T8422] active_anon:2663 inactive_anon:2484 isolated_anon:0 [ 111.793374][ T8422] active_file:2423 inactive_file:10754 isolated_file:0 [ 111.793374][ T8422] unevictable:2977 dirty:324 writeback:0 [ 111.793374][ T8422] slab_reclaimable:5724 slab_unreclaimable:59891 [ 111.793374][ T8422] mapped:24056 shmem:1965 pagetables:822 [ 111.793374][ T8422] sec_pagetables:303 bounce:0 [ 111.793374][ T8422] kernel_misc_reclaimable:0 [ 111.793374][ T8422] free:84554 free_pcp:4246 free_cma:0 [ 111.806020][ T8422] Node 0 active_anon:676kB inactive_anon:0kB active_file:320kB inactive_file:32kB unevictable:3600kB isolated(anon):0kB isolated(file):0kB mapped:408kB dirty:72kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9436kB pagetables:820kB sec_pagetables:1128kB all_unreclaimable? yes [ 111.815348][ T8422] Node 1 active_anon:4676kB inactive_anon:9936kB active_file:9372kB inactive_file:42984kB unevictable:3708kB isolated(anon):0kB isolated(file):0kB mapped:90764kB dirty:1224kB writeback:0kB shmem:4320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4340kB pagetables:2468kB sec_pagetables:84kB all_unreclaimable? no [ 111.827603][ T8422] Node 0 DMA free:3760kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:16kB free_cma:0kB [ 111.835545][ T8422] lowmem_reserve[]: 0 294 294 294 294 [ 111.837070][ T8422] Node 0 DMA32 free:29896kB boost:10240kB min:23804kB low:27192kB high:30580kB reserved_highatomic:4096KB active_anon:676kB inactive_anon:0kB active_file:320kB inactive_file:32kB unevictable:3600kB writepending:72kB present:1032196kB managed:301448kB mlocked:64kB bounce:0kB free_pcp:1692kB local_pcp:228kB free_cma:0kB [ 111.844470][ T8410] random: crng reseeded on system resumption [ 111.845269][ T8422] lowmem_reserve[]: 0 0 0 0 0 [ 111.848290][ T8422] Node 1 DMA32 free:311944kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:4676kB inactive_anon:9936kB active_file:9372kB inactive_file:42984kB unevictable:3708kB writepending:1224kB present:1048432kB managed:948292kB mlocked:180kB bounce:0kB free_pcp:17208kB local_pcp:5504kB free_cma:0kB [ 111.856541][ T8422] lowmem_reserve[]: 0 0 0 0 0 [ 111.856564][ T8422] Node 0 DMA: 60*4kB (U) 48*8kB (U) 34*16kB (U) 49*32kB (U) 12*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3760kB [ 111.856650][ T8422] Node 0 DMA32: 99*4kB (UMEH) 124*8kB (UMEH) 104*16kB (UMEH) 186*32kB (UMEH) 107*64kB (UMEH) 41*128kB (UME) 14*256kB (UMEH) 4*512kB (MEH) 3*1024kB (M) 0*2048kB 0*4096kB = 29804kB [ 111.866921][ T8422] Node 1 DMA32: 143*4kB (UME) 516*8kB (UME) 291*16kB (UME) 279*32kB (UME) 264*64kB (UME) 217*128kB (UME) 151*256kB (UME) 86*512kB (UME) 66*1024kB (UME) 41*2048kB (UM) 4*4096kB (M) = 313580kB [ 111.872097][ T8422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.872110][ T8422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.872215][ T8422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.872225][ T8422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.872233][ T8422] 15392 total pagecache pages [ 111.872237][ T8422] 250 pages in swap cache [ 111.872240][ T8422] Free swap = 115360kB [ 111.872244][ T8422] Total swap = 124996kB [ 111.872249][ T8422] 524155 pages RAM [ 111.872253][ T8422] 0 pages HighMem/MovableOnly [ 111.872257][ T8422] 207880 pages reserved [ 111.872260][ T8422] 0 pages cma reserved [ 111.874853][ T8166] udevd[8166]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 112.069545][ T29] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.074406][ T29] usb 5-1: USB disconnect, device number 11 [ 112.365412][ T8446] 9pnet_virtio: no channels available for device syz [ 112.368247][ T8447] 9pnet_virtio: no channels available for device syz [ 112.819149][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 113.028432][ T8454] 9pnet_virtio: no channels available for device syz [ 113.262316][ T5950] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 113.298094][ T8463] veth1_to_bond: entered allmulticast mode [ 113.302237][ T59] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.303816][ T8462] veth1_to_bond: left allmulticast mode [ 113.453603][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.456357][ T59] usb 6-1: config 0 has no interfaces? [ 113.457882][ T59] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.460373][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.464060][ T59] usb 6-1: config 0 descriptor?? [ 113.490765][ T8456] Set syz1 is full, maxelem 65536 reached [ 113.505337][ T8470] wireguard: wg1: Could not create IPv4 socket [ 113.592830][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 113.671327][ T59] usb 6-1: USB disconnect, device number 14 [ 113.833705][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 113.836782][ T5950] Bluetooth: hci0: Injecting HCI hardware error event [ 113.840079][ T5950] Bluetooth: hci0: hardware error 0x00 [ 114.234574][ T8490] veth1_to_bond: entered allmulticast mode [ 114.241256][ T8489] veth1_to_bond: left allmulticast mode [ 114.475517][ T8501] 9pnet_virtio: no channels available for device syz [ 115.239383][ T8517] veth1_to_bond: entered allmulticast mode [ 115.246042][ T8516] veth1_to_bond: left allmulticast mode [ 115.314849][ T8529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.902268][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 116.264829][ T8290] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.482586][ T8554] veth1_to_bond: entered allmulticast mode [ 116.488578][ T8553] veth1_to_bond: left allmulticast mode [ 118.730979][ T8590] 9pnet_virtio: no channels available for device syz [ 118.735179][ T8591] 9pnet_virtio: no channels available for device syz [ 119.505838][ T8615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.936'. [ 119.629852][ T8616] syz.3.935: attempt to access beyond end of device [ 119.629852][ T8616] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.634506][ T8616] SQUASHFS error: Failed to read block 0x0: -5 [ 119.636407][ T8616] unable to read squashfs_super_block [ 120.402357][ T8634] 9pnet_virtio: no channels available for device syz [ 120.698662][ T8636] netlink: 52 bytes leftover after parsing attributes in process `syz.0.942'. [ 121.704989][ T8670] netlink: 'syz.1.949': attribute type 4 has an invalid length. [ 121.721045][ T833] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 121.724778][ T833] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 122.062265][ T5944] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 122.225878][ T5944] usb 8-1: Using ep0 maxpacket: 8 [ 122.229689][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.233292][ T5944] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.235895][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.239507][ T5944] usb 8-1: config 0 descriptor?? [ 122.444273][ T8680] random: crng reseeded on system resumption [ 122.624362][ T5944] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.629874][ T5944] usb 8-1: USB disconnect, device number 5 [ 122.850155][ T8699] 9pnet_virtio: no channels available for device syz [ 123.502271][ T833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 123.652284][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 123.655497][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.659791][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.664191][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.667986][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.673645][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.677014][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.883318][ T833] usb 5-1: GET_CAPABILITIES returned 0 [ 123.884877][ T833] usbtmc 5-1:16.0: can't read capabilities [ 124.645991][ T8725] bond0: (slave bond_slave_0): Releasing backup interface [ 124.651631][ T8725] bond0: (slave bond_slave_1): Releasing backup interface [ 124.659172][ T833] usb 5-1: USB disconnect, device number 12 [ 124.865717][ T8725] team0: Port device team_slave_0 removed [ 124.884414][ T8725] team0: Port device team_slave_1 removed [ 124.888947][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.894862][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.901288][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.907233][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.132273][ T5944] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.292221][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 125.295252][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.298205][ T5944] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.300684][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.304042][ T5944] usb 5-1: config 0 descriptor?? [ 125.508036][ T8729] random: crng reseeded on system resumption [ 125.685499][ T5944] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 125.691511][ T5944] usb 5-1: USB disconnect, device number 13 [ 126.034930][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 126.038377][ T8759] bridge_slave_1: left allmulticast mode [ 126.040213][ T8759] bridge_slave_1: left promiscuous mode [ 126.041848][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.049776][ T8759] bridge_slave_0: left allmulticast mode [ 126.051844][ T8759] bridge_slave_0: left promiscuous mode [ 126.053656][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.953862][ T8788] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 126.956062][ T8788] netlink: 134708 bytes leftover after parsing attributes in process `syz.1.984'. [ 127.532299][ T5944] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 127.703090][ T5944] usb 8-1: Using ep0 maxpacket: 8 [ 127.706455][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.710420][ T5944] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.714397][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.718853][ T5944] usb 8-1: config 0 descriptor?? [ 127.924624][ T8790] random: crng reseeded on system resumption [ 128.104544][ T5944] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 128.108471][ T5944] usb 8-1: USB disconnect, device number 6 [ 128.629712][ T8821] netlink: 'syz.0.996': attribute type 2 has an invalid length. [ 128.821790][ T8833] 9pnet_fd: Insufficient options for proto=fd [ 128.824846][ T8833] overlay: ./file1 is not a directory [ 129.973124][ T8861] FAULT_INJECTION: forcing a failure. [ 129.973124][ T8861] name failslab, interval 1, probability 0, space 0, times 0 [ 129.976700][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.3.1011 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 129.976714][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.976720][ T8861] Call Trace: [ 129.976724][ T8861] [ 129.976728][ T8861] dump_stack_lvl+0x16c/0x1f0 [ 129.976749][ T8861] should_fail_ex+0x512/0x640 [ 129.976760][ T8861] ? fs_reclaim_acquire+0xae/0x150 [ 129.976773][ T8861] ? tomoyo_encode2+0x100/0x3e0 [ 129.976788][ T8861] should_failslab+0xc2/0x120 [ 129.976803][ T8861] __kmalloc_noprof+0xd2/0x510 [ 129.976819][ T8861] tomoyo_encode2+0x100/0x3e0 [ 129.976834][ T8861] tomoyo_encode+0x29/0x50 [ 129.976849][ T8861] tomoyo_realpath_from_path+0x18f/0x6e0 [ 129.976865][ T8861] ? tomoyo_profile+0x47/0x60 [ 129.976875][ T8861] tomoyo_path_number_perm+0x245/0x580 [ 129.976887][ T8861] ? tomoyo_path_number_perm+0x237/0x580 [ 129.976901][ T8861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.976914][ T8861] ? find_held_lock+0x2b/0x80 [ 129.976932][ T8861] ? find_held_lock+0x2b/0x80 [ 129.976942][ T8861] ? __fget_files+0x204/0x3c0 [ 129.976957][ T8861] ? __fget_files+0x20e/0x3c0 [ 129.976971][ T8861] security_file_ioctl_compat+0x9b/0x240 [ 129.976986][ T8861] __do_compat_sys_ioctl+0x4e/0x2c0 [ 129.976999][ T8861] __do_fast_syscall_32+0x73/0x120 [ 129.977013][ T8861] do_fast_syscall_32+0x32/0x80 [ 129.977026][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.977038][ T8861] RIP: 0023:0xf747e579 [ 129.977046][ T8861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 129.977056][ T8861] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 129.977065][ T8861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005411 [ 129.977071][ T8861] RDX: 0000000080002340 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.977077][ T8861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.977082][ T8861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 129.977088][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.977098][ T8861] [ 129.977105][ T8861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.979915][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 129.979925][ T40] audit: type=1326 audit(1742967674.427:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.053058][ T40] audit: type=1326 audit(1742967674.427:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.058767][ T40] audit: type=1326 audit(1742967674.427:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.063127][ T8873] xt_socket: unknown flags 0x4 [ 130.064480][ T40] audit: type=1326 audit(1742967674.427:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.065255][ T8874] xt_socket: unknown flags 0x4 [ 130.073355][ T40] audit: type=1326 audit(1742967674.427:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.079099][ T40] audit: type=1326 audit(1742967674.447:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.085726][ T40] audit: type=1326 audit(1742967674.447:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.092816][ T40] audit: type=1326 audit(1742967674.447:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.099854][ T40] audit: type=1326 audit(1742967674.447:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.106845][ T5944] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 130.109584][ T40] audit: type=1326 audit(1742967674.447:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 130.262230][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 130.265595][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.269451][ T5944] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.272986][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.276903][ T5944] usb 6-1: config 0 descriptor?? [ 130.482708][ T8851] random: crng reseeded on system resumption [ 130.663535][ T5944] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.668736][ T5944] usb 6-1: USB disconnect, device number 15 [ 130.982996][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 130.985988][ T8892] netlink: 'syz.2.1022': attribute type 7 has an invalid length. [ 130.989142][ T8892] netlink: 'syz.2.1022': attribute type 8 has an invalid length. [ 130.993530][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 131.059440][ T8896] trusted_key: syz.2.1024 sent an empty control message without MSG_MORE. [ 131.172468][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 131.539831][ T8925] FAULT_INJECTION: forcing a failure. [ 131.539831][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 131.546353][ T8925] CPU: 3 UID: 0 PID: 8925 Comm: syz.2.1033 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 131.546376][ T8925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.546385][ T8925] Call Trace: [ 131.546390][ T8925] [ 131.546396][ T8925] dump_stack_lvl+0x16c/0x1f0 [ 131.546422][ T8925] should_fail_ex+0x512/0x640 [ 131.546438][ T8925] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 131.546461][ T8925] should_failslab+0xc2/0x120 [ 131.546484][ T8925] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 131.546505][ T8925] ? __d_alloc+0x31/0xaa0 [ 131.546522][ T8925] __d_alloc+0x31/0xaa0 [ 131.546537][ T8925] d_alloc+0x4a/0x1e0 [ 131.546552][ T8925] d_alloc_parallel+0xe3/0x12d0 [ 131.546569][ T8925] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.546587][ T8925] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 131.546605][ T8925] ? stack_depot_save_flags+0x38a/0x9c0 [ 131.546624][ T8925] ? __pfx_d_alloc_parallel+0x10/0x10 [ 131.546643][ T8925] ? lockdep_init_map_type+0x5c/0x280 [ 131.546667][ T8925] ? lockdep_init_map_type+0x5c/0x280 [ 131.546691][ T8925] __lookup_slow+0x193/0x460 [ 131.546727][ T8925] ? __pfx___lookup_slow+0x10/0x10 [ 131.546753][ T8925] ? isolate_migratepages_block+0x4110/0x56f0 [ 131.546779][ T8925] ? isolate_migratepages_block+0x4110/0x56f0 [ 131.546801][ T8925] ? d_lookup+0xe7/0x190 [ 131.546821][ T8925] lookup_one_len+0x17f/0x1b0 [ 131.546837][ T8925] ? __pfx_lookup_one_len+0x10/0x10 [ 131.546854][ T8925] ? mntput+0x10/0x90 [ 131.546874][ T8925] start_creating.part.0+0x12f/0x3a0 [ 131.546894][ T8925] debugfs_create_dir+0x6c/0x5f0 [ 131.546912][ T8925] ieee80211_debugfs_recreate_netdev+0x1d1/0x17e0 [ 131.546931][ T8925] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 131.546950][ T8925] ? __pfx___might_resched+0x10/0x10 [ 131.546972][ T8925] drv_remove_interface+0x2bf/0x640 [ 131.546995][ T8925] ieee80211_do_stop+0x1634/0x2480 [ 131.547019][ T8925] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 131.547038][ T8925] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.547065][ T8925] ? __pfx_ieee80211_stop+0x10/0x10 [ 131.547080][ T8925] ? mark_held_locks+0x49/0x80 [ 131.547101][ T8925] ? __pfx_ieee80211_stop+0x10/0x10 [ 131.547115][ T8925] ieee80211_stop+0x11d/0x670 [ 131.547133][ T8925] ? __pfx_ieee80211_stop+0x10/0x10 [ 131.547147][ T8925] __dev_close_many+0x1c4/0x350 [ 131.547162][ T8925] ? __pfx___dev_close_many+0x10/0x10 [ 131.547176][ T8925] ? preempt_schedule_thunk+0x16/0x30 [ 131.547203][ T8925] __dev_change_flags+0x4d8/0x720 [ 131.547223][ T8925] ? __pfx___dev_change_flags+0x10/0x10 [ 131.547245][ T8925] ? __pfx___mutex_trylock_common+0x10/0x10 [ 131.547267][ T8925] dev_change_flags+0x8d/0x160 [ 131.547287][ T8925] dev_ifsioc+0x9d6/0x10d0 [ 131.547305][ T8925] ? __pfx_dev_ifsioc+0x10/0x10 [ 131.547324][ T8925] ? __pfx___mutex_lock+0x10/0x10 [ 131.547348][ T8925] ? dev_load+0x8e/0x240 [ 131.547367][ T8925] dev_ioctl+0x224/0x10c0 [ 131.547385][ T8925] sock_do_ioctl+0x19d/0x280 [ 131.547399][ T8925] ? do_vfs_ioctl+0x512/0x1990 [ 131.547416][ T8925] ? __pfx_sock_do_ioctl+0x10/0x10 [ 131.547429][ T8925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.547456][ T8925] compat_sock_ioctl+0x301/0x7c0 [ 131.547473][ T8925] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 131.547492][ T8925] ? __fget_files+0x20e/0x3c0 [ 131.547515][ T8925] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 131.547532][ T8925] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 131.547551][ T8925] __do_fast_syscall_32+0x73/0x120 [ 131.547572][ T8925] do_fast_syscall_32+0x32/0x80 [ 131.547591][ T8925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.547609][ T8925] RIP: 0023:0xf7f16579 [ 131.547621][ T8925] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 131.547636][ T8925] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 131.547652][ T8925] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008914 [ 131.547661][ T8925] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.547670][ T8925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.547678][ T8925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 131.547688][ T8925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.547704][ T8925] [ 131.904556][ T8928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1034'. [ 132.233704][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.332713][ T5995] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 132.352344][ T6014] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.502261][ T5995] usb 8-1: Using ep0 maxpacket: 8 [ 132.505300][ T5995] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.508280][ T5995] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.511043][ T5995] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.514034][ T5995] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.517626][ T5995] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.520163][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.621897][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 132.631153][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 132.642195][ T6014] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 132.646317][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.651406][ T6014] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.672485][ T6014] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 132.677027][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.680228][ T6014] usb 5-1: Product: syz [ 132.681917][ T6014] usb 5-1: Manufacturer: syz [ 132.684062][ T6014] usb 5-1: SerialNumber: syz [ 132.692623][ T6014] usb 5-1: config 0 descriptor?? [ 132.696671][ T8938] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.711806][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 132.714754][ T6014] port100 5-1:0.0: NFC: Could not get supported command types [ 132.760115][ T5995] usb 8-1: GET_CAPABILITIES returned 0 [ 132.761842][ T5995] usbtmc 8-1:16.0: can't read capabilities [ 133.511871][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 133.617958][ T5995] usb 8-1: USB disconnect, device number 7 [ 133.984874][ T8967] netlink: 'syz.1.1046': attribute type 5 has an invalid length. [ 133.992314][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 134.012827][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.014921][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.017220][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.019393][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.021473][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.023646][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.025727][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.028849][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.030997][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.033200][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.035315][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.037426][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.039534][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.041564][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.043693][ T76] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 134.064762][ T76] hid-generic FFF9:0000:0203.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 134.098900][ T8971] random: crng reseeded on system resumption [ 134.297408][ T8973] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1047'. [ 134.607835][ T8981] FAULT_INJECTION: forcing a failure. [ 134.607835][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 134.611404][ T8981] CPU: 3 UID: 0 PID: 8981 Comm: syz.2.1051 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 134.611424][ T8981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.611432][ T8981] Call Trace: [ 134.611437][ T8981] [ 134.611443][ T8981] dump_stack_lvl+0x16c/0x1f0 [ 134.611471][ T8981] should_fail_ex+0x512/0x640 [ 134.611487][ T8981] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 134.611509][ T8981] should_failslab+0xc2/0x120 [ 134.611531][ T8981] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 134.611553][ T8981] ? alloc_vfsmnt+0x23/0x6f0 [ 134.611570][ T8981] alloc_vfsmnt+0x23/0x6f0 [ 134.611585][ T8981] vfs_create_mount+0x93/0x500 [ 134.611605][ T8981] path_mount+0x19e8/0x1f30 [ 134.611621][ T8981] ? kmem_cache_free+0x2d4/0x4d0 [ 134.611642][ T8981] ? __pfx_path_mount+0x10/0x10 [ 134.611658][ T8981] ? putname+0x154/0x1a0 [ 134.611676][ T8981] __ia32_sys_mount+0x28b/0x310 [ 134.611690][ T8981] ? __pfx___ia32_sys_mount+0x10/0x10 [ 134.611705][ T8981] ? rcu_is_watching+0x12/0xc0 [ 134.611724][ T8981] __do_fast_syscall_32+0x73/0x120 [ 134.611746][ T8981] do_fast_syscall_32+0x32/0x80 [ 134.611767][ T8981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.611787][ T8981] RIP: 0023:0xf7f16579 [ 134.611799][ T8981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 134.611815][ T8981] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 134.611830][ T8981] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800001c0 [ 134.611840][ T8981] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.611849][ T8981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.611858][ T8981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 134.611867][ T8981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.611884][ T8981] [ 134.862481][ T6014] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 134.990141][ T76] usb 5-1: USB disconnect, device number 14 [ 135.012259][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 135.015790][ T6014] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 135.019856][ T6014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.023146][ T6014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.026625][ T6014] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.030253][ T6014] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.033636][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.238510][ T6014] usb 8-1: GET_CAPABILITIES returned 0 [ 135.240257][ T6014] usbtmc 8-1:16.0: can't read capabilities [ 135.512276][ T76] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 135.694458][ T76] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 135.697405][ T76] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 135.700016][ T76] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.705731][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.948537][ T6014] usb 8-1: USB disconnect, device number 8 [ 136.079413][ T9009] 9pnet_fd: Insufficient options for proto=fd [ 136.312285][ T1323] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 136.463739][ T1323] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.468154][ T1323] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.472090][ T1323] usb 6-1: config 0 interface 0 has no altsetting 0 [ 136.474211][ T1323] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 136.476757][ T1323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.484835][ T1323] usb 6-1: config 0 descriptor?? [ 136.503444][ T9023] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 136.507832][ T9023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.899228][ T1323] usbhid 6-1:0.0: can't add hid device: -71 [ 136.900974][ T1323] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 136.905249][ T1323] usb 6-1: USB disconnect, device number 16 [ 138.292830][ T6347] usb 5-1: USB disconnect, device number 15 [ 139.469376][ T9049] syz.1.1071 (9049) used greatest stack depth: 21112 bytes left [ 140.940559][ T9108] [U] [ 140.941556][ T9108] [U] [ 140.942402][ T9108] [U] [ 140.943208][ T9108] [U] [ 140.944499][ T9108] [U] [ 140.945348][ T9108] [U] [ 140.946155][ T9108] [U] [ 140.946969][ T9108] [U] [ 140.947839][ T9108] [U] [ 140.948675][ T9108] [U] [ 140.949486][ T9108] [U] [ 140.950310][ T9108] [U] [ 140.951226][ T9108] [U] [ 140.952077][ T9108] [U] [ 140.952436][ T9104] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 140.952889][ T9108] [U] [ 140.960338][ T9104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.960946][ T9108] [U] [ 140.965101][ T9108] [U] [ 140.966055][ T9108] [U] [ 140.966923][ T9108] [U] [ 140.967739][ T9108] [U] [ 140.968565][ T9108] [U] [ 140.969369][ T9108] [U] [ 140.970172][ T9108] [U] [ 140.970983][ T9108] [U] [ 140.971814][ T9108] [U] [ 140.972619][ T9108] [U] [ 140.973418][ T9108] [U] [ 140.974219][ T9108] [U] [ 140.975561][ T9108] [U] [ 140.976383][ T9108] [U] [ 140.977183][ T9108] [U] [ 140.977991][ T9108] [U] [ 140.978838][ T9108] [U] [ 140.979652][ T9108] [U] [ 140.980453][ T9108] [U] [ 140.981258][ T9108] [U] [ 140.982075][ T9108] [U] [ 140.982904][ T9108] [U] [ 140.983711][ T9108] [U] [ 140.984515][ T9108] [U] [ 140.985626][ T9108] [U] [ 140.986442][ T9108] [U] [ 140.987252][ T9108] [U] [ 140.988049][ T9108] [U] [ 140.988873][ T9108] [U] [ 140.989685][ T9108] [U] [ 140.990488][ T9108] [U] [ 140.991304][ T9108] [U] [ 140.993523][ T9108] [U] [ 140.994343][ T9108] [U] [ 140.995163][ T9108] [U] [ 140.995971][ T9108] [U] [ 140.996831][ T9108] [U] [ 140.997627][ T9108] [U] [ 140.998427][ T9108] [U] [ 140.999268][ T9108] [U] [ 141.000093][ T9108] [U] [ 141.000894][ T9108] [U] [ 141.001719][ T9108] [U] [ 141.002532][ T9108] [U] [ 141.003789][ T9108] [U] [ 141.004605][ T9108] [U] [ 141.005410][ T9108] [U] [ 141.006196][ T9108] [U] [ 141.007018][ T9108] [U] [ 141.007809][ T9108] [U] [ 141.008590][ T9108] [U] [ 141.009377][ T9108] [U] [ 141.010243][ T9108] [U] [ 141.011049][ T9108] [U] [ 141.011839][ T9108] [U] [ 141.012631][ T9108] [U] [ 141.013614][ T9108] [U] [ 141.014409][ T9108] [U] [ 141.015205][ T9108] [U] [ 141.015998][ T9108] [U] [ 141.016789][ T9108] [U] [ 141.017575][ T9108] [U] [ 141.018362][ T9108] [U] [ 141.019165][ T9108] [U] [ 141.019977][ T9108] [U] [ 141.020773][ T9108] [U] [ 141.021558][ T9108] [U] [ 141.022348][ T9108] [U] [ 141.023302][ T9108] [U] [ 141.024100][ T9108] [U] [ 141.024897][ T9108] [U] [ 141.025688][ T9108] [U] [ 141.026504][ T9108] [U] [ 141.027308][ T9108] [U] [ 141.028100][ T9108] [U] [ 141.028889][ T9108] [U] [ 141.029639][ T9108] [U] [ 141.030432][ T9108] [U] [ 141.031226][ T9108] [U] [ 141.032055][ T9108] [U] [ 141.032948][ T9108] [U] [ 141.033783][ T9108] [U] [ 141.034609][ T9108] [U] [ 141.035409][ T9108] [U] [ 141.036409][ T9108] [U] [ 141.037203][ T9108] [U] [ 141.037995][ T9108] [U] [ 141.038800][ T9108] [U] [ 141.039616][ T9108] [U] [ 141.040402][ T9108] [U] [ 141.041188][ T9108] [U] [ 141.042006][ T9108] [U] [ 141.042863][ T9108] [U] [ 141.043646][ T9108] [U] [ 141.044431][ T9108] [U] [ 141.045216][ T9108] [U] [ 141.046036][ T9108] [U] [ 141.046833][ T9108] [U] [ 141.047616][ T9108] [U] [ 141.048406][ T9108] [U] [ 141.049192][ T9108] [U] [ 141.049975][ T9108] [U] [ 141.050768][ T9108] [U] [ 141.051548][ T9108] [U] [ 141.052442][ T9108] [U] [ 141.053227][ T9108] [U] [ 141.054014][ T9108] [U] [ 141.054809][ T9108] [U] [ 141.055607][ T9108] [U] [ 141.056394][ T9108] [U] [ 141.057178][ T9108] [U] [ 141.097673][ T9108] [U] [ 141.112262][ T6347] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 141.282289][ T6347] usb 7-1: Using ep0 maxpacket: 8 [ 141.285450][ T6347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.289499][ T6347] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.293073][ T6347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.297768][ T6347] usb 7-1: config 0 descriptor?? [ 141.503492][ T9103] random: crng reseeded on system resumption [ 141.687960][ T6347] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.692066][ T6347] usb 7-1: USB disconnect, device number 8 [ 142.755607][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 143.659565][ T9167] Cache volume key already in use (9p,syz,) [ 144.143512][ T9170] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 144.146724][ T9170] batman_adv: batadv0: Adding interface: gretap2 [ 144.148491][ T9170] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.155351][ T9170] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 144.484083][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 144.852764][ T45] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c7cb [ 144.855230][ T45] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff) [ 144.857511][ T45] raw: 04fff00000010001 ffffc900006c75b8 ffffc900006c75b8 ffffffff8b7e1702 [ 144.859835][ T45] raw: 0000000000000000 0000000000000002 00000002ffffffff 0000000000000000 [ 144.862741][ T45] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 144.871738][ T45] page_owner tracks the page as allocated [ 144.873460][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 113, tgid 113 (kswapd0), ts 143059053470, free_ts 142433008855 [ 144.877928][ T45] post_alloc_hook+0x181/0x1b0 [ 144.879292][ T45] get_page_from_freelist+0x10c4/0x34c0 [ 144.880762][ T45] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 144.882648][ T45] alloc_pages_mpol+0x1fb/0x540 [ 144.884019][ T45] alloc_pages_noprof+0x131/0x390 [ 144.885703][ T45] z3fold_zpool_malloc+0x861/0x1510 [ 144.887227][ T45] zswap_store+0xf16/0x2660 [ 144.888485][ T45] swap_writepage+0x3bd/0x1170 [ 144.889810][ T45] pageout+0x3b0/0xa90 [ 144.890907][ T45] shrink_folio_list+0x2f4f/0x40a0 [ 144.893318][ T45] evict_folios+0x775/0x1a90 [ 144.894775][ T45] try_to_shrink_lruvec+0x5a3/0x990 [ 144.896271][ T45] shrink_one+0x3e3/0x7a0 [ 144.897554][ T45] shrink_node+0x26f6/0x3de0 [ 144.898849][ T45] balance_pgdat+0xbdb/0x1a30 [ 144.900170][ T45] kswapd+0x590/0xb90 [ 144.901285][ T45] page last free pid 28 tgid 28 stack trace: [ 144.903519][ T45] free_frozen_pages+0x6d8/0xf40 [ 144.904923][ T45] tlb_remove_table_rcu+0x116/0x1a0 [ 144.906372][ T45] rcu_core+0x799/0x14e0 [ 144.907571][ T45] handle_softirqs+0x216/0x8e0 [ 144.908898][ T45] run_ksoftirqd+0x3a/0x60 [ 144.910142][ T45] smpboot_thread_fn+0x678/0xa70 [ 144.911530][ T45] kthread+0x3a4/0x760 [ 144.913221][ T45] ret_from_fork+0x45/0x80 [ 144.914548][ T45] ret_from_fork_asm+0x1a/0x30 [ 144.916052][ T45] ------------[ cut here ]------------ [ 144.916473][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 144.917590][ T45] kernel BUG at mm/z3fold.c:1293! [ 144.922807][ T45] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 144.924803][ T45] CPU: 3 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 144.930091][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.933065][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x13b0 [ 144.933265][ T9196] 9pnet_virtio: no channels available for device syz [ 144.934746][ T45] Code: a5 92 ff 48 c7 c6 c0 0e 7e 8b 48 89 ef e8 dd 70 d9 ff 90 0f 0b e8 35 a5 92 ff 48 c7 c6 20 0f 7e 8b 48 89 ef e8 c6 70 d9 ff 90 <0f> 0b e8 1e a5 92 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 144.934761][ T45] RSP: 0018:ffffc900006c7430 EFLAGS: 00010293 [ 144.944181][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 144.946337][ T45] RDX: ffff88804129c880 RSI: ffffffff8228506a RDI: ffff88804129ccc4 [ 144.948504][ T45] RBP: ffffea000131f2c0 R08: 0000000000000001 R09: 0000000000000001 [ 144.951174][ T45] R10: ffffffff90629217 R11: 0000000000000000 R12: ffffea0001fb9d00 [ 144.953725][ T45] R13: ffffea000131f2e8 R14: 0000000000000001 R15: ffffea000131f2d8 [ 144.955917][ T45] FS: 0000000000000000(0000) GS:ffff888097f5a000(0000) knlGS:0000000000000000 [ 144.958368][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.960211][ T45] CR2: 00000000f71837f0 CR3: 0000000025cc4000 CR4: 0000000000352ef0 [ 144.962645][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.964796][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.966913][ T45] Call Trace: [ 144.967853][ T45] [ 144.968671][ T45] ? die+0x31/0x80 [ 144.969709][ T45] ? do_trap+0x232/0x430 [ 144.970909][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 144.972419][ T45] ? do_error_trap+0xf8/0x240 [ 144.973741][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 144.975245][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 144.976794][ T45] ? handle_invalid_op+0x34/0x40 [ 144.978171][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 144.979680][ T45] ? exc_invalid_op+0x2e/0x50 [ 144.980969][ T45] ? asm_exc_invalid_op+0x1a/0x20 [ 144.982408][ T45] ? z3fold_page_migrate+0xc6a/0x13b0 [ 144.983923][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 144.985414][ T45] ? page_ext_put+0x3e/0xd0 [ 144.986697][ T45] move_to_new_folio+0x449/0x700 [ 144.988270][ T45] migrate_pages_batch+0x201d/0x31a0 [ 144.989738][ T45] ? __pfx_compaction_free+0x10/0x10 [ 144.991333][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 144.992895][ T45] migrate_pages_sync+0x4c5/0x8a0 [ 144.994289][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 144.995784][ T45] ? __pfx_compaction_free+0x10/0x10 [ 144.997250][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 144.998766][ T45] ? find_held_lock+0x2b/0x80 [ 145.000049][ T45] ? isolate_movable_page+0x111/0x750 [ 145.001587][ T45] migrate_pages+0x1b28/0x2350 [ 145.002921][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 145.004411][ T45] ? __pfx_compaction_free+0x10/0x10 [ 145.005925][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 145.007339][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 145.009056][ T45] ? __pfx___might_resched+0x10/0x10 [ 145.010506][ T45] compact_zone+0x1f6d/0x4220 [ 145.011826][ T45] ? __lock_acquire+0xaa4/0x1ba0 [ 145.013211][ T45] ? __pfx_compact_zone+0x10/0x10 [ 145.014633][ T45] compact_node+0x1a4/0x2d0 [ 145.015901][ T45] ? __pfx_compact_node+0x10/0x10 [ 145.017289][ T45] ? __pfx___might_resched+0x10/0x10 [ 145.018748][ T45] ? __pfx_extfrag_for_order+0x10/0x10 [ 145.020256][ T45] ? rcu_is_watching+0x12/0xc0 [ 145.021577][ T45] kcompactd+0x762/0xea0 [ 145.023070][ T45] ? __pfx_kcompactd+0x10/0x10 [ 145.024537][ T45] ? find_held_lock+0x2b/0x80 [ 145.025845][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 145.027524][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.028962][ T45] ? __kthread_parkme+0x148/0x220 [ 145.030352][ T45] ? __pfx_kcompactd+0x10/0x10 [ 145.031732][ T45] kthread+0x3a4/0x760 [ 145.032870][ T45] ? __pfx_kthread+0x10/0x10 [ 145.034163][ T45] ? __pfx_kthread+0x10/0x10 [ 145.035455][ T45] ? __pfx_kthread+0x10/0x10 [ 145.036820][ T45] ? __pfx_kthread+0x10/0x10 [ 145.038099][ T45] ? rcu_is_watching+0x12/0xc0 [ 145.039431][ T45] ? __pfx_kthread+0x10/0x10 [ 145.040711][ T45] ret_from_fork+0x45/0x80 [ 145.041977][ T45] ? __pfx_kthread+0x10/0x10 [ 145.043277][ T45] ret_from_fork_asm+0x1a/0x30 [ 145.044609][ T45] [ 145.045474][ T45] Modules linked in: [ 145.046849][ T45] ---[ end trace 0000000000000000 ]--- [ 145.051095][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x13b0 [ 145.052819][ T45] Code: a5 92 ff 48 c7 c6 c0 0e 7e 8b 48 89 ef e8 dd 70 d9 ff 90 0f 0b e8 35 a5 92 ff 48 c7 c6 20 0f 7e 8b 48 89 ef e8 c6 70 d9 ff 90 <0f> 0b e8 1e a5 92 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 145.058128][ T45] RSP: 0018:ffffc900006c7430 EFLAGS: 00010293 [ 145.059880][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.062385][ T45] RDX: ffff88804129c880 RSI: ffffffff8228506a RDI: ffff88804129ccc4 [ 145.064657][ T45] RBP: ffffea000131f2c0 R08: 0000000000000001 R09: 0000000000000001 [ 145.066875][ T45] R10: ffffffff90629217 R11: 0000000000000000 R12: ffffea0001fb9d00 [ 145.069052][ T45] R13: ffffea000131f2e8 R14: 0000000000000001 R15: ffffea000131f2d8 [ 145.071286][ T45] FS: 0000000000000000(0000) GS:ffff888097f5a000(0000) knlGS:0000000000000000 [ 145.073824][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.075668][ T45] CR2: 00000000f71837f0 CR3: 00000000658be000 CR4: 0000000000352ef0 [ 145.077821][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.079737][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.081972][ T45] Kernel panic - not syncing: Fatal exception [ 145.084674][ T45] Kernel Offset: disabled [ 145.085868][ T45] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:41:28 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88802a89a440 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc9000300f560 R8 =0000000000000000 R9 =fffffbfff20c5242 R10=ffffffff90629217 R11=ffff88802b53a798 R12=0000000000000003 R13=1ffff92000601ead R14=0000000000000001 R15=ffffc9000300f588 RIP=ffffffff81683d08 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097c5a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f713ffc CR3=0000000077b8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90026e57f58 RBX=0000000000000000 RCX=0000000000000004 RDX=0000000000000000 RSI=fffffe0000049fe0 RDI=ffffc90026e57fe0 RBP=0000000000000000 RSP=fffffe0000049f50 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b5b3972 RFL=00010087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097d5a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50c4da4 CR3=000000002616c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b741220 RCX=ffffffff81aed259 RDX=ffff88802511c880 RSI=ffffffff81aed233 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006dcf828 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002bb3 R12=ffffed10056e8245 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b63b140 RIP=ffffffff81aed235 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097e5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73a35c4 CR3=000000000df82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85413635 RDI=ffffffff9ab72ba0 RBP=ffffffff9ab72b60 RSP=ffffc900006c6d58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000070 R14=ffffffff9ab72b60 R15=ffffffff854135d0 RIP=ffffffff8541365f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097f5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71837f0 CR3=0000000025cc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5023e820 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a2e27312031312e 202c295952542052 4f4e5f504647205f 69204941574f4e00 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000