last executing test programs: 8.295215361s ago: executing program 2 (id=773): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 85) 8.292845345s ago: executing program 0 (id=774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) listen(r1, 0x3) write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15f) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x22, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380)=0x85000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000000000000000000006469676573745f6e756c6c2d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000900"/224], 0xe0}}, 0x0) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 8.133442871s ago: executing program 2 (id=775): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r5, &(0x7f0000000140)='./file0\x00') mount_setattr(r5, 0x0, 0x8000, &(0x7f0000000300)={0xfa, 0x0, 0xc0000}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x64, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8dffffff, 0xfffffffc}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @sack={0x5, 0xe, [0x6, 0x3ff, 0x6]}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @mptcp=@remove_addr={0x1e, 0x11, 0x7, 0x0, "8a3d6de393730d29f70e7f85ba19"}]}}}}}}}}, 0x0) 7.091947061s ago: executing program 2 (id=780): pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff7582056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="63a9fde500010000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x3, 0x4) close(r0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000003c0)=ANY=[], 0xff49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r5, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r6) 7.091332961s ago: executing program 0 (id=781): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9f}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.007173196s ago: executing program 0 (id=782): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @dev}, {0x1, @local}, 0xfdfdffff, {0x2, 0x0, @private=0xa010100}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40045304, &(0x7f0000000340)) tkill(r2, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r6) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000480)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.6633253s ago: executing program 0 (id=783): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404809, &(0x7f00000000c0)={0x0, "277c968feb45a14b9d13aa865c15a5eaecdeecd810993081b239d4a3d23f64f1313939c9069b32eba8ea187c82613f238bdc42f990210277a196479b8e8df477"}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r8, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x37000}]) dup3(r5, r6, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f0000006380)}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 6.273292011s ago: executing program 3 (id=784): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 4.183331363s ago: executing program 1 (id=787): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800c4e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.111700759s ago: executing program 1 (id=788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r5, &(0x7f0000000140)='./file0\x00') mount_setattr(r5, 0x0, 0x8000, &(0x7f0000000300)={0xfa, 0x0, 0xc0000}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x64, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8dffffff, 0xfffffffc}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @sack={0x5, 0xe, [0x6, 0x3ff, 0x6]}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @mptcp=@remove_addr={0x1e, 0x11, 0x7, 0x0, "8a3d6de393730d29f70e7f85ba19"}]}}}}}}}}, 0x0) 3.182341354s ago: executing program 1 (id=789): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030026000b05d25a806c8c6f94f90224fc601000010010000000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000e09900000000000000000001009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cramfs\x00', 0x0, 0x0) 3.18176708s ago: executing program 3 (id=790): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) listen(r1, 0x3) write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="00006007ab00ff09998488cac870e074fea9ed569a64718eaa2dc9d48220a94469e85b5b437e4a5e027dfee6cacce1cdcba77d048b25beafc946703239127be4ed46ae7c6f47f22ab889027a203486949798398701cfaa62ca1c9306556af433cafb1ee1fc657412944d2076abcc40f486e12a23a11363b882cb17959080c41fedb6052e65a27a8d8404e227a8ba86aa00b1000d5db15c9e04dc33d40f2045d289492e470691eb97f68b9a52bf03b8d632bc197d54b3d8ba65e41c760424c1cc0b2e364460465f53426d30c5fe09dc25a153c5a542e5c37ea38d356569f0e24f6733a5cde407bf49bba089aa8000000000000000aa96fa49297f240c26bef05d815cee416d8fde8dbbefee1be1370f3e8925b127731be482429dd0b7770a96d36ed731da36b83a0000000000005511cfca20df0e45fe5a7af226ab7426fc87ab58878027e5890f5618f7"], 0x15f) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x22, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380)=0x85000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000000000000000000006469676573745f6e756c6c2d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000900"/224], 0xe0}}, 0x0) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.001126242s ago: executing program 1 (id=791): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @dev}, {0x1, @local}, 0xfdfdffff, {0x2, 0x0, @private=0xa010100}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40045304, &(0x7f0000000340)) tkill(r2, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r6) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000480)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.880232919s ago: executing program 0 (id=792): sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003a000b0000000000000000020400000018"], 0x2c}, 0x1, 0x0, 0x0, 0x1f}, 0x0) 2.879793027s ago: executing program 0 (id=793): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000ac0), 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x49}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}]}, 0x2c}}, 0x802) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) write$tcp_congestion(r1, &(0x7f0000000b00)='yeah\x00', 0x5) 2.591459433s ago: executing program 1 (id=794): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) socket$kcm(0x10, 0x3, 0x10) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000a40)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x3, r4, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r3}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,version=9p2000.u']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.942152698s ago: executing program 3 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003540)={0x118, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {0x600}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1, 0x8c}, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xe8, 0x2f}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24, 0x80, [@random={0xe}, @peer_mgmt={0x75, 0x14, {0x0, 0x7f, @void, @void, @val="54702d28bd528404f9e4cc542b412db1"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x4000, 0x0, 0x0, 0x0, {0x5b, 0x8, 0x0, 0x3fc, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x6, 0xfd}}]}, @NL80211_ATTR_IE={0x54, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x7, @device_a, 0x5a61, @value, 0x6000, 0x5, @device_a, 0x7}}, @measure_req={0x26, 0x3, {0x3f, 0x8, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x1f, {{}, 0x7f, 0x2, @device_b, 0x8, @void, 0x1, 0x1ff, @broadcast, 0x5}}]}]]}, 0x118}}, 0x0) 1.69325544s ago: executing program 2 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005001700"], 0x54}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x284, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x965, 0x8, 0x2, 0x28, 0x80000001, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0xc9, 0xf, 0x19, 0x4, 0x1, 0x9, 0x5, 0x3}}, {0xa, 0x2, [0x8, 0xa839, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x898, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x284}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\n\v\xed\x14\x9e\xed\x04F\x05\x00\x00\x00\x00\x00\x00\x00C\xb6dd\x82\x85Y\xc3:B>$\xee\xdda\xae\x18\x02D\xd0H\x10\xf4L\xb2\f\xb0t\xe3j\x95\x96m+\x0f\x8c7P\x00?\x14q\x013\x90\xae\xbf\xc7\x00\x1c\xb6\xefi\xf8$k\xb4\xca\x1a\xe9\xac\xc4\x17\xd1\x86?\xf1\x7f=\xa4\f*\xfd\xe1\xe5\x98\x92q\x06\x1b^\xe1\x9ch:\xdcw9\r\xf2\xd1\x9b\xfb\xcb\xa9\x91s\xc6\xcd\x92\xd9\xc7\xd7\xd0@<\x12\xb5\xa8\x81\xf3u\x82\x15\xde\xfeP\xa1\x83l\x92\xaf\xf5\xf8\xb0U6\xf3q\x9b_\xdb\xa6d\xee\x1e\xd2\x1aa\xd1\xb0\x19\x93\xaa\xf55._\x04:\x86k\xe6\t/\x1e\xdf\xae\x1a\xad\xedJ\x14\xb8d\x8d\xb8\xe7H\xb3\xa4\xdcT\xcfF\xeb\"\x88@\x83MKT\x92Ub\x93\xf1?J\x9f\xee\xa5\xf5S\xc2\xec\xbe;m\x85\xc7\xfd!\x86\xfd.\xcf\x98\x888\xb8F-\xbf\xa59l\xc5\x1f\x00l\x0e\xe9\xd2o\x14G\x01\xa8X'}]}, 0x104) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x20200, 0xe5e1}, &(0x7f0000000240)=0x10) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socket(0x200000100000011, 0x3, 0x0) 1.692825706s ago: executing program 3 (id=797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r5, &(0x7f0000000140)='./file0\x00') mount_setattr(r5, 0x0, 0x8000, &(0x7f0000000300)={0xfa, 0x0, 0xc0000}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x64, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8dffffff, 0xfffffffc}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @sack={0x5, 0xe, [0x6, 0x3ff, 0x6]}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @mptcp=@remove_addr={0x1e, 0x11, 0x7, 0x0, "8a3d6de393730d29f70e7f85ba19"}]}}}}}}}}, 0x0) 752.702387ms ago: executing program 2 (id=798): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0xb00) 751.879977ms ago: executing program 3 (id=799): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000018000100000000000000000002000000000000000000000008001e00010000000c0016800500050000003518"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e746572"], 0x12c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000b000d222ceee33800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="a17700c3e8e164dbb3dd0000000000020015a8e3ab14bb672c43764873edc4daf966885505c21268e984b45adcb76035d7bf649266", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000000001010400000000000000000af1ffff3b0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000300002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000"], 0x88}}, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x1ffffc, 0x0, 0x0, 0x0, 0x7}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) landlock_restrict_self(r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(r8, 0x0, r5, 0x0, 0x7332, 0x0) mq_open(&(0x7f0000000340)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x0, 0x0) 644.740363ms ago: executing program 2 (id=800): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) write$binfmt_misc(r7, &(0x7f0000000100)="f3da9722a10357d188b30361b4aa348aa101061b3db72bb06323526d4c6f0a79b1b4e7597b782e", 0x27) 0s ago: executing program 1 (id=802): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001a0001ffffff9e00000000000a00e5"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): 07386][ T7390] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 202.808634][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.810245][ T7390] ? skb_clone+0x190/0x3f0 [ 202.812171][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.814006][ T7390] skb_clone+0x190/0x3f0 [ 202.814035][ T7390] packet_rcv+0x60d/0x15a0 [ 202.814060][ T7390] packet_rcv_fanout+0x28b/0x9b0 [ 202.816569][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.817549][ T7390] ? ktime_get_with_offset+0x15d/0x240 [ 202.819499][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.820944][ T7390] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 202.822131][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.823761][ T7390] dev_queue_xmit_nit+0x373/0xba0 [ 202.823802][ T7390] dev_hard_start_xmit+0x56/0x790 [ 202.826361][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.827556][ T7390] ? __dev_queue_xmit+0x252/0x4350 [ 202.827588][ T7390] __dev_queue_xmit+0x7c7/0x4350 [ 202.829569][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.831376][ T7390] ? hlock_class+0x4e/0x130 [ 202.831401][ T7390] ? __lock_acquire+0x163e/0x3ce0 [ 202.833818][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.835068][ T7390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 202.835095][ T7390] ? __pfx___lock_acquire+0x10/0x10 [ 202.836534][ T62] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 202.838946][ T7390] ? find_held_lock+0x2d/0x110 [ 202.838977][ T7390] ? __ip_finish_output+0x49e/0x950 [ 202.860039][ T7390] ? __pfx_lock_release+0x10/0x10 [ 202.861782][ T7390] ? trace_lock_acquire+0x14a/0x1d0 [ 202.863580][ T7390] ? __ip_finish_output+0x49e/0x950 [ 202.865362][ T7390] ip_finish_output2+0x16d5/0x2530 [ 202.867114][ T7390] ? __pfx_ip_finish_output2+0x10/0x10 [ 202.868963][ T7390] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 202.870617][ T7390] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 202.872399][ T7390] ? __pfx_nf_hook+0x10/0x10 [ 202.874000][ T7390] __ip_finish_output+0x49e/0x950 [ 202.875709][ T7390] ip_finish_output+0x31/0x310 [ 202.877416][ T7390] ip_output+0x13b/0x2a0 [ 202.878931][ T7390] ? __pfx_ip_output+0x10/0x10 [ 202.880604][ T7390] ip_local_out+0x33e/0x4a0 [ 202.882205][ T7390] iptunnel_xmit+0x5b4/0x9c0 [ 202.883823][ T7390] geneve_xmit+0x2aa4/0x56d0 [ 202.885453][ T7390] ? find_held_lock+0x2d/0x110 [ 202.887108][ T7390] ? __pfx_geneve_xmit+0x10/0x10 [ 202.888834][ T7390] ? dev_queue_xmit_nit+0x87e/0xba0 [ 202.890629][ T7390] ? dev_hard_start_xmit+0x143/0x790 [ 202.892435][ T7390] dev_hard_start_xmit+0x143/0x790 [ 202.894219][ T7390] __dev_queue_xmit+0x7c7/0x4350 [ 202.895930][ T7390] ? hlock_class+0x4e/0x130 [ 202.897526][ T7390] ? __lock_acquire+0x163e/0x3ce0 [ 202.899280][ T7390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 202.901154][ T7390] ? __pfx___lock_acquire+0x10/0x10 [ 202.902961][ T7390] ? find_held_lock+0x2d/0x110 [ 202.904616][ T7390] ? ip_do_fragment+0x861/0x18b0 [ 202.906304][ T7390] ? __pfx_lock_release+0x10/0x10 [ 202.908027][ T7390] ? trace_lock_acquire+0x14a/0x1d0 [ 202.909803][ T7390] ? ip_do_fragment+0x861/0x18b0 [ 202.911521][ T7390] ip_finish_output2+0x16d5/0x2530 [ 202.913307][ T7390] ? __pfx_ip_finish_output2+0x10/0x10 [ 202.914740][ T7390] ? ip_frag_next+0x778/0xa40 [ 202.915994][ T7390] ip_do_fragment+0x861/0x18b0 [ 202.917310][ T7390] ? __pfx_ip_finish_output2+0x10/0x10 [ 202.918755][ T7390] ? __pfx_ip_do_fragment+0x10/0x10 [ 202.920140][ T7390] ? nf_hook_slow+0x132/0x200 [ 202.921421][ T7390] ? nf_hook+0x3bf/0x6d0 [ 202.922907][ T7390] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 202.924699][ T7390] ip_fragment.constprop.0+0x161/0x230 [ 202.926574][ T7390] __ip_finish_output+0x2fc/0x950 [ 202.928312][ T7390] ip_finish_output+0x31/0x310 [ 202.929976][ T7390] ip_output+0x13b/0x2a0 [ 202.931438][ T7390] ? __pfx_ip_output+0x10/0x10 [ 202.933094][ T7390] ip_local_out+0x33e/0x4a0 [ 202.934669][ T7390] iptunnel_xmit+0x5b4/0x9c0 [ 202.936312][ T7390] ip_tunnel_xmit+0x1e57/0x33a0 [ 202.938007][ T7390] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 202.939795][ T7390] ? rcu_is_watching+0x12/0xc0 [ 202.941459][ T7390] ? trace_kmalloc+0x2d/0xe0 [ 202.943005][ T7390] ? skb_release_data+0x565/0x730 [ 202.944504][ T7390] ? kmalloc_reserve+0x13c/0x2c0 [ 202.946207][ T7390] __gre_xmit+0x89d/0xbd0 [ 202.947690][ T7390] ? __pfx___gre_xmit+0x10/0x10 [ 202.949298][ T7390] ? __pfx_pskb_expand_head+0x10/0x10 [ 202.951110][ T7390] ? __pfx_packet_rcv+0x10/0x10 [ 202.952781][ T7390] ipgre_xmit+0x50e/0xb00 [ 202.954273][ T7390] dev_hard_start_xmit+0x143/0x790 [ 202.956038][ T7390] __dev_queue_xmit+0x7c7/0x4350 [ 202.957764][ T7390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 202.959602][ T7390] ? rcu_is_watching+0x12/0xc0 [ 202.961272][ T7390] ? trace_kmalloc+0x2d/0xe0 [ 202.962902][ T7390] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 202.965175][ T7390] ? pskb_expand_head+0x236/0x1170 [ 202.966946][ T7390] ? skb_release_data+0x565/0x730 [ 202.968670][ T7390] ? kmalloc_reserve+0x13c/0x2c0 [ 202.970388][ T7390] ? skb_headers_offset_update+0x129/0x260 [ 202.972383][ T7390] ? pskb_expand_head+0x609/0x1170 [ 202.974153][ T7390] ? __pfx_pskb_expand_head+0x10/0x10 [ 202.975985][ T7390] __bpf_redirect+0x6fa/0xfa0 [ 202.977626][ T7390] bpf_clone_redirect+0x2cb/0x3d0 [ 202.979372][ T7390] bpf_prog_208b094576c80b22+0x5f/0x64 [ 202.981304][ T7390] ? find_held_lock+0x2d/0x110 [ 202.982949][ T7390] ? ktime_get+0xd9/0x1a0 [ 202.984448][ T7390] ? __pfx_lock_release+0x10/0x10 [ 202.986201][ T7390] ? trace_lock_acquire+0x14a/0x1d0 [ 202.987973][ T7390] ? ktime_get+0xd9/0x1a0 [ 202.989467][ T7390] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 202.991405][ T7390] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.993223][ T7390] ? read_tsc+0x9/0x20 [ 202.994679][ T7390] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 202.996652][ T7390] ? __pfx___cant_migrate+0x10/0x10 [ 202.998447][ T7390] ? ktime_get+0xfb/0x1a0 [ 202.999912][ T7390] bpf_test_run+0x49d/0xa90 [ 203.001522][ T7390] ? __pfx_bpf_test_run+0x10/0x10 [ 203.003278][ T7390] ? krealloc_noprof+0xff/0x130 [ 203.004957][ T7390] bpf_prog_test_run_skb+0xb8b/0x2140 [ 203.006817][ T7390] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 203.008817][ T7390] ? fput+0x30/0x390 [ 203.010181][ T7390] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 203.012274][ T7390] __sys_bpf+0x1921/0x5780 [ 203.013861][ T7390] ? ksys_write+0x21e/0x260 [ 203.015415][ T7390] ? __pfx___sys_bpf+0x10/0x10 [ 203.017073][ T7390] ? vfs_write+0x14d/0x1140 [ 203.017390][ T62] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.018626][ T7390] ? __mutex_unlock_slowpath+0x164/0x650 [ 203.018671][ T7390] ? fput+0x30/0x390 [ 203.024071][ T7390] ? ksys_write+0x1ad/0x260 [ 203.024457][ T979] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 203.025284][ T7390] ? __pfx_ksys_write+0x10/0x10 [ 203.025301][ T7390] __ia32_sys_bpf+0x76/0xe0 [ 203.025318][ T7390] __do_fast_syscall_32+0x73/0x120 [ 203.031227][ T7390] do_fast_syscall_32+0x32/0x80 [ 203.032799][ T7390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.034829][ T7390] RIP: 0023:0xf7f84579 [ 203.036119][ T7390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.042720][ T7390] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 203.045380][ T7390] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 203.047970][ T7390] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.050635][ T7390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.053220][ T7390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 203.055840][ T7390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.058591][ T7390] [ 203.093675][ T7390] syz.0.525 (7390) used greatest stack depth: 20624 bytes left [ 203.164994][ T979] usb 6-1: config 0 has no interfaces? [ 203.166997][ T979] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 203.176397][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.180012][ T979] usb 6-1: config 0 descriptor?? [ 205.451137][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.457593][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.459453][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.461264][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.467176][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.469581][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.471986][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.475935][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.477816][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.480020][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.482495][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.488067][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.490022][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.492723][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.496931][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.498894][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.501374][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.507392][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.509955][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.512523][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.516940][ T5391] usb 6-1: USB disconnect, device number 6 [ 205.527750][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.530396][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.534588][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.537238][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.539825][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.542392][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.548180][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.550172][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.552756][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.556844][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.559495][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.562068][ T829] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.568073][ T829] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 206.162102][ T7428] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 206.164209][ T7427] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 206.406933][ T7428] : entered promiscuous mode [ 208.659621][ T5363] Bluetooth: hci8: sending frame failed (-49) [ 208.663656][ T5364] Bluetooth: hci8: Entering manufacturer mode failed (-49) [ 208.875963][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 209.886487][ T7479] input: syz1 as /devices/virtual/input/input10 [ 210.040840][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 210.065835][ T39] audit: type=1326 audit(1728286524.657:17275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.3.546" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 210.173699][ T5408] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 210.323101][ T5408] usb 7-1: Using ep0 maxpacket: 8 [ 210.333900][ T5408] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 210.336007][ T5408] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.338444][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.340969][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.345018][ T5408] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.348878][ T5408] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.351313][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.582635][ T5408] usb 7-1: GET_CAPABILITIES returned 0 [ 210.584168][ T5408] usbtmc 7-1:16.0: can't read capabilities [ 211.050430][ T7479] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 211.052805][ T7474] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 211.150271][ T5411] usb 7-1: USB disconnect, device number 7 [ 211.430453][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.444086][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.447389][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.449968][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.452590][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.459958][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.462454][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.466257][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.468791][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.471577][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.475184][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.478705][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.482674][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.488576][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.513588][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.516112][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.518685][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.535278][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.537850][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.540289][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.542732][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.580637][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.605994][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.608576][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.611098][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.633989][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.636643][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.639211][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.641798][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.675206][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.677893][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.680442][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.714010][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.717158][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.720116][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.743232][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.745812][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.748318][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.750837][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.770149][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.772731][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.777184][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.779844][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.782505][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.785774][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.788320][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.790881][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.805836][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.879500][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.882010][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.899034][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.901522][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.927395][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.929990][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.932513][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.949045][ T8] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 211.954136][ T8] hid-generic 0001:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 212.346158][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 212.833073][ T5411] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.043058][ T5411] usb 6-1: Using ep0 maxpacket: 32 [ 213.066789][ T5411] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 213.069722][ T5411] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 213.072685][ T5411] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.093357][ T5411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 213.109030][ T5411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.112518][ T5411] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.118587][ T5411] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 213.123572][ T5411] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 213.127041][ T5411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.138683][ T5411] usb 6-1: config 0 descriptor?? [ 213.234592][ T7538] 9pnet_fd: Insufficient options for proto=fd [ 213.272684][ T7539] autofs: Bad value for 'fd' [ 213.362747][ T39] audit: type=1804 audit(1728286527.947:17276): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.564" name="/newroot/24/bus/bus" dev="overlay" ino=147 res=1 errno=0 [ 213.657176][ T5364] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 213.776691][ T39] audit: type=1326 audit(1728286528.367:17277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.783317][ T39] audit: type=1326 audit(1728286528.377:17278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.793927][ T39] audit: type=1326 audit(1728286528.377:17279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.804663][ T39] audit: type=1326 audit(1728286528.387:17280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.831193][ T39] audit: type=1326 audit(1728286528.417:17281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.841067][ T39] audit: type=1326 audit(1728286528.417:17282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.849707][ T39] audit: type=1326 audit(1728286528.417:17283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 213.858115][ T39] audit: type=1326 audit(1728286528.427:17284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 214.447050][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.572'. [ 214.673687][ T7567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.729547][ T8] libceph: connect (1)[c::]:6789 error -101 [ 214.734423][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 214.759470][ T8] libceph: connect (1)[c::]:6789 error -101 [ 214.761636][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 214.885860][ T7576] FAULT_INJECTION: forcing a failure. [ 214.885860][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.890298][ T7576] CPU: 3 UID: 0 PID: 7576 Comm: syz.3.574 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 214.893772][ T7576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.897367][ T7576] Call Trace: [ 214.898496][ T7576] [ 214.899500][ T7576] dump_stack_lvl+0x16c/0x1f0 [ 214.901117][ T7576] should_fail_ex+0x497/0x5b0 [ 214.902717][ T7576] _copy_from_user+0x30/0xf0 [ 214.904286][ T7576] move_addr_to_kernel+0x68/0x160 [ 214.905988][ T7576] __sys_connect+0xb4/0x180 [ 214.907531][ T7576] ? __pfx___sys_connect+0x10/0x10 [ 214.909263][ T7576] ? __pfx_ksys_write+0x10/0x10 [ 214.910875][ T7576] __ia32_sys_connect+0x71/0xb0 [ 214.912540][ T7576] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 214.914776][ T7576] __do_fast_syscall_32+0x73/0x120 [ 214.916539][ T7576] do_fast_syscall_32+0x32/0x80 [ 214.918208][ T7576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.920346][ T7576] RIP: 0023:0xf73ee579 [ 214.921737][ T7576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.928177][ T7576] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 214.931004][ T7576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 214.933673][ T7576] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.936340][ T7576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.939014][ T7576] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.941683][ T7576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.944352][ T7576] [ 214.945524][ C3] vkms_vblank_simulate: vblank timer overrun [ 214.996325][ T7560] ceph: No mds server is up or the cluster is laggy [ 215.078066][ T8] libceph: connect (1)[c::]:6789 error -101 [ 215.082214][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 215.085250][ T7578] netlink: 'syz.3.575': attribute type 3 has an invalid length. [ 215.103123][ T7578] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.575'. [ 215.344077][ T30] usb 6-1: USB disconnect, device number 7 [ 216.089031][ T7591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.090724][ T7591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.091641][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 216.091655][ T39] audit: type=1326 audit(1728286530.677:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.1.578" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 216.093545][ T7591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.102434][ T7591] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 216.104502][ T7591] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 216.107414][ T7591] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.313904][ T7605] FAULT_INJECTION: forcing a failure. [ 216.313904][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.318567][ T7605] CPU: 2 UID: 0 PID: 7605 Comm: syz.2.581 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 216.322239][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.325791][ T7605] Call Trace: [ 216.326913][ T7605] [ 216.327918][ T7605] dump_stack_lvl+0x16c/0x1f0 [ 216.329563][ T7605] should_fail_ex+0x497/0x5b0 [ 216.331210][ T7605] _copy_to_user+0x30/0xc0 [ 216.332869][ T7605] simple_read_from_buffer+0xd0/0x160 [ 216.334307][ T7605] proc_fail_nth_read+0x198/0x270 [ 216.335643][ T7605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.337126][ T7605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.338731][ T7605] vfs_read+0x1ce/0xbd0 [ 216.339980][ T7605] ? __fget_files+0x23a/0x3f0 [ 216.341241][ T7605] ? fdget_pos+0x24c/0x360 [ 216.342424][ T7605] ? __pfx_lock_release+0x10/0x10 [ 216.343750][ T7605] ? trace_lock_acquire+0x14a/0x1d0 [ 216.345129][ T7605] ? __pfx_vfs_read+0x10/0x10 [ 216.346370][ T7605] ? __pfx___mutex_lock+0x10/0x10 [ 216.347703][ T7605] ? __fget_files+0x244/0x3f0 [ 216.348976][ T7605] ksys_read+0x12f/0x260 [ 216.350089][ T7605] ? __pfx_ksys_read+0x10/0x10 [ 216.351335][ T7605] __do_fast_syscall_32+0x73/0x120 [ 216.352715][ T7605] do_fast_syscall_32+0x32/0x80 [ 216.354033][ T7605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.355704][ T7605] RIP: 0023:0xf7f15579 [ 216.356805][ T7605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 216.361808][ T7605] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 216.363988][ T7605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5696620 [ 216.366071][ T7605] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 216.368139][ T7605] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 216.370206][ T7605] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 216.372271][ T7605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.374358][ T7605] [ 216.639678][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.642165][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.644739][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.647080][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.649450][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.651790][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.654648][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.657086][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.659524][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.661944][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.668035][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.670573][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.673325][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.675815][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.677885][ T39] audit: type=1326 audit(1728286531.267:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.580" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 217.160716][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.163411][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.165815][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.168241][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.170710][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.173242][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.175814][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.178358][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.180865][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.183364][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.185664][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.188154][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.191760][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.194312][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.196772][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.199125][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.201600][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.204125][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 217.211186][ T25] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.363308][ T62] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.381426][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 217.525481][ T62] usb 6-1: config 0 has no interfaces? [ 217.527474][ T62] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 217.530659][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.534893][ T5364] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.536019][ T62] usb 6-1: config 0 descriptor?? [ 217.734070][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.587'. [ 217.789094][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'. [ 217.796748][ T7633] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 218.105478][ T5364] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.107869][ T5364] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.174833][ T5363] Bluetooth: hci5: command 0x040f tx timeout [ 218.188745][ T5364] Bluetooth: hci7: command 0x0c1a tx timeout [ 218.192865][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 218.546638][ T5408] usb 6-1: USB disconnect, device number 8 [ 218.680733][ T7649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 218.727797][ T7647] kvm: pic: non byte read [ 218.731996][ T7647] kvm: pic: non byte read [ 218.735477][ T7647] kvm: pic: non byte read [ 218.737678][ T7647] kvm: pic: single mode not supported [ 218.738040][ T7647] kvm: pic: non byte read [ 218.741590][ T7647] kvm: pic: single mode not supported [ 218.741745][ T7647] kvm: pic: level sensitive irq not supported [ 218.744053][ T7647] kvm: pic: non byte read [ 218.747692][ T7647] kvm: pic: single mode not supported [ 218.748015][ T7647] kvm: pic: non byte read [ 220.047382][ T11] Bluetooth: hci8: Frame reassembly failed (-84) [ 220.051752][ T11] Bluetooth: hci8: Frame reassembly failed (-84) [ 220.139449][ T7672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.189226][ T39] audit: type=1326 audit(1728286534.777:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.872208][ T39] audit: type=1326 audit(1728286535.457:17298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.879677][ T39] audit: type=1326 audit(1728286535.457:17299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.886522][ T39] audit: type=1326 audit(1728286535.457:17300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.891136][ T39] audit: type=1326 audit(1728286535.457:17301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.898624][ T39] audit: type=1326 audit(1728286535.457:17302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.909286][ T39] audit: type=1326 audit(1728286535.457:17303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.917668][ T39] audit: type=1326 audit(1728286535.457:17304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 220.988937][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 220.991289][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.003961][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.006007][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.008050][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.010051][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.011989][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.014093][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.016025][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.018166][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.020263][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.022236][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.024245][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.026183][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.028164][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.030163][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.032096][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.034088][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.035981][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.037902][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.039836][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.041849][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.045228][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.047174][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.049074][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.050922][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.052892][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.055142][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.057085][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.059025][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.060972][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.062889][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 221.068652][ T25] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.098367][ T39] kauditd_printk_skb: 157 callbacks suppressed [ 221.098390][ T39] audit: type=1326 audit(1728286535.687:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.122262][ T39] audit: type=1326 audit(1728286535.687:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.165468][ T39] audit: type=1326 audit(1728286535.687:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.185971][ T39] audit: type=1326 audit(1728286535.687:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.193900][ T39] audit: type=1326 audit(1728286535.687:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.207575][ T39] audit: type=1326 audit(1728286535.687:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.218424][ T39] audit: type=1326 audit(1728286535.687:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.226558][ T39] audit: type=1326 audit(1728286535.687:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.235005][ T39] audit: type=1326 audit(1728286535.687:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.242343][ T39] audit: type=1326 audit(1728286535.687:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.2.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 221.443082][ T5411] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.603870][ T5411] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.607689][ T5411] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.610774][ T5411] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.617647][ T5411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.663731][ T7685] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 221.676148][ T5411] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.093198][ T5363] Bluetooth: hci8: command 0xfc11 tx timeout [ 222.094092][ T5354] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 223.777028][ T7702] hub 2-0:1.0: USB hub found [ 223.786783][ T7702] hub 2-0:1.0: 6 ports detected [ 224.003093][ T25] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 224.010983][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.607'. [ 224.200508][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 224.204738][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 224.209132][ T25] usb 2-1: Product: QEMU USB Tablet [ 224.211561][ T25] usb 2-1: Manufacturer: QEMU [ 224.216895][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 224.256953][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0015/input/input11 [ 224.345894][ T25] hid-generic 0003:0627:0001.0015: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 224.616114][ T5411] usb 5-1: USB disconnect, device number 12 [ 224.805773][ T7719] FAULT_INJECTION: forcing a failure. [ 224.805773][ T7719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.809102][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.0.611 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 224.811722][ T7719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.814491][ T7719] Call Trace: [ 224.815355][ T7719] [ 224.816167][ T7719] dump_stack_lvl+0x16c/0x1f0 [ 224.817383][ T7719] should_fail_ex+0x497/0x5b0 [ 224.818577][ T7719] _copy_to_user+0x30/0xc0 [ 224.819727][ T7719] simple_read_from_buffer+0xd0/0x160 [ 224.821123][ T7719] proc_fail_nth_read+0x198/0x270 [ 224.822392][ T7719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.823759][ T7719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.825150][ T7719] vfs_read+0x1ce/0xbd0 [ 224.826231][ T7719] ? __fget_files+0x23a/0x3f0 [ 224.827501][ T7719] ? fdget_pos+0x24c/0x360 [ 224.828679][ T7719] ? __pfx_lock_release+0x10/0x10 [ 224.829975][ T7719] ? trace_lock_acquire+0x14a/0x1d0 [ 224.831309][ T7719] ? __pfx_vfs_read+0x10/0x10 [ 224.832514][ T7719] ? __pfx___mutex_lock+0x10/0x10 [ 224.833796][ T7719] ? __fget_files+0x244/0x3f0 [ 224.835029][ T7719] ksys_read+0x12f/0x260 [ 224.836155][ T7719] ? __pfx_ksys_read+0x10/0x10 [ 224.837431][ T7719] __do_fast_syscall_32+0x73/0x120 [ 224.838772][ T7719] do_fast_syscall_32+0x32/0x80 [ 224.840047][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.841661][ T7719] RIP: 0023:0xf7f84579 [ 224.842740][ T7719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.847709][ T7719] RSP: 002b:00000000f56e55a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 224.849883][ T7719] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f56e5620 [ 224.851948][ T7719] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 224.854023][ T7719] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 224.856078][ T7719] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 224.858178][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.860245][ T7719] [ 226.242077][ T39] kauditd_printk_skb: 2497 callbacks suppressed [ 226.242096][ T39] audit: type=1326 audit(1728286540.827:19969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.612" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 226.298578][ T7721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.300319][ T7721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.302120][ T7721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.306540][ T7721] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 226.308928][ T7721] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 226.311086][ T7721] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 227.053370][ T5354] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.558828][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 227.837568][ T7740] sp0: Synchronizing with TNC [ 228.007963][ T7747] FAULT_INJECTION: forcing a failure. [ 228.007963][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 228.023223][ T7747] CPU: 2 UID: 0 PID: 7747 Comm: syz.0.619 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 228.026922][ T7747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.030722][ T7747] Call Trace: [ 228.031935][ T7747] [ 228.033043][ T7747] dump_stack_lvl+0x16c/0x1f0 [ 228.034932][ T7747] should_fail_ex+0x497/0x5b0 [ 228.036606][ T7747] ? fs_reclaim_acquire+0xae/0x160 [ 228.038321][ T7747] should_failslab+0xc2/0x120 [ 228.039975][ T7747] kmem_cache_alloc_node_noprof+0x71/0x310 [ 228.042049][ T7747] ? __alloc_skb+0x2b3/0x380 [ 228.043722][ T7747] __alloc_skb+0x2b3/0x380 [ 228.045297][ T7747] ? __pfx___alloc_skb+0x10/0x10 [ 228.047079][ T7747] ? aa_sk_perm+0x2f5/0xb20 [ 228.048754][ T7747] ? __might_fault+0x13b/0x190 [ 228.050439][ T7747] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.052192][ T7747] pfkey_sendmsg+0x16e/0x840 [ 228.053885][ T7747] ____sys_sendmsg+0x9ae/0xb40 [ 228.055558][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.057447][ T7747] ? get_compat_msghdr+0x11b/0x170 [ 228.059278][ T7747] ? __pfx___lock_acquire+0x10/0x10 [ 228.061148][ T7747] ___sys_sendmsg+0x135/0x1e0 [ 228.062846][ T7747] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.064657][ T7747] ? lock_acquire+0x2f/0xb0 [ 228.066273][ T7747] ? __fget_files+0x40/0x3f0 [ 228.067932][ T7747] ? fdget+0x176/0x210 [ 228.069432][ T7747] __sys_sendmsg+0x117/0x1f0 [ 228.071091][ T7747] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.072958][ T7747] ? __fget_files+0x244/0x3f0 [ 228.074669][ T7747] __do_fast_syscall_32+0x73/0x120 [ 228.076542][ T7747] do_fast_syscall_32+0x32/0x80 [ 228.078200][ T7747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.080469][ T7747] RIP: 0023:0xf7f84579 [ 228.081946][ T7747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.088582][ T7747] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 228.091448][ T7747] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200014c0 [ 228.094202][ T7747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.096963][ T7747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.099736][ T7747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.102483][ T7747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.105198][ T7747] [ 228.141095][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 228.179130][ T5411] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 228.345246][ T5354] Bluetooth: hci5: command 0x040f tx timeout [ 228.345750][ T5361] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.347339][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.352404][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 228.353065][ T5411] usb 7-1: Using ep0 maxpacket: 32 [ 228.355353][ T5363] Bluetooth: hci7: command 0x0c1a tx timeout [ 228.381757][ T5411] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.392765][ T5411] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.397676][ T7757] autofs: Bad value for 'fd' [ 228.398949][ T5411] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.498459][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.510521][ T5411] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.514591][ T5411] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.519451][ T5411] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.522742][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.536225][ T5411] usb 7-1: config 0 descriptor?? [ 228.553204][ T39] audit: type=1804 audit(1728286543.137:19970): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.621" name="/newroot/93/bus/bus" dev="overlay" ino=568 res=1 errno=0 [ 228.716578][ T7756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.719075][ T7756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.721175][ T39] audit: type=1326 audit(1728286543.307:19971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.623" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 228.723063][ T7756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.753231][ T7756] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 228.761187][ T7756] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 228.767800][ T7756] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 228.791393][ T5411] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 228.813151][ T5411] usb 7-1: USB disconnect, device number 8 [ 228.829135][ T5411] usblp0: removed [ 229.313494][ T5411] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 229.489843][ T5411] usb 7-1: Using ep0 maxpacket: 32 [ 229.641889][ T5411] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.647318][ T5411] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.650877][ T5411] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.659937][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.665075][ T5411] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.669000][ T5411] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.674662][ T5411] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.678884][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.690907][ T5411] usb 7-1: config 0 descriptor?? [ 230.149739][ T5411] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.433941][ T7786] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.531356][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.537919][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.540402][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.542881][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.546318][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.548894][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.551315][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.554309][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.556798][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.559338][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.561802][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.564715][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.567186][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.570460][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.573759][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.579536][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.582356][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.586485][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.590931][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.593984][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.595787][ T7741] mkiss: ax0: crc mode is auto. [ 230.598880][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.601399][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.603943][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.606889][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.609344][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.611761][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.614373][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.616855][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.619362][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.621614][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.624282][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.626724][ T829] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 230.634222][ T829] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz0 [ 230.653698][ T5361] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.733132][ T5361] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.735609][ T5361] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.823209][ T5363] Bluetooth: hci5: command 0x040f tx timeout [ 230.823251][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 230.827433][ T5361] Bluetooth: hci7: command 0x0c1a tx timeout [ 230.865308][ T5408] usb 7-1: USB disconnect, device number 9 [ 230.875251][ T5408] usblp0: removed [ 231.666533][ T7795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.668682][ T7795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.670675][ T7795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.672691][ T7795] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 231.677426][ T39] audit: type=1326 audit(1728286546.267:19972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7794 comm="syz.0.633" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 231.677462][ T7795] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 231.703364][ T7795] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 233.548651][ T5361] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.632928][ T7816] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 233.663725][ T7819] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 233.674109][ T39] audit: type=1326 audit(1728286548.267:19973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.639" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 233.683901][ T39] audit: type=1326 audit(1728286548.267:19974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7fc00000 [ 233.753684][ T5361] Bluetooth: hci6: command 0x0c1a tx timeout [ 233.754824][ T5364] Bluetooth: hci7: command 0x0c1a tx timeout [ 233.755148][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.755188][ T5363] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.775314][ T66] Bluetooth: hci5: command 0x040f tx timeout [ 234.301575][ T7834] input: syz0 as /devices/virtual/input/input12 [ 234.839352][ T7843] autofs: Bad value for 'fd' [ 234.940710][ T39] audit: type=1804 audit(1728286549.527:19975): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.643" name="/newroot/165/bus/bus" dev="overlay" ino=972 res=1 errno=0 [ 235.618014][ T7858] autofs: Bad value for 'fd' [ 235.698023][ T39] audit: type=1804 audit(1728286550.287:19976): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.645" name="/newroot/162/bus/bus" dev="overlay" ino=941 res=1 errno=0 [ 235.805471][ T7851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.807988][ T39] audit: type=1326 audit(1728286550.397:19977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.644" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 235.815630][ T7851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.820578][ T7851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.822918][ T7851] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 235.825618][ T7851] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 235.828275][ T7851] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.959605][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 235.962357][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 235.987264][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 235.990043][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 235.992711][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 235.996841][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.000507][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.004832][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.007977][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.011299][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.014488][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.017467][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.020773][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.024532][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.027963][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.031303][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.035735][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.038880][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.042544][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.046769][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.053947][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.056911][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.059670][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.062397][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.066591][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.070354][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.077818][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.080883][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.088440][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.091460][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.103137][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.106102][ T5411] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 236.114622][ T5411] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz0] on syz0 [ 236.213161][ T5408] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 236.219875][ T7872] FAULT_INJECTION: forcing a failure. [ 236.219875][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 236.224285][ T7872] CPU: 3 UID: 0 PID: 7872 Comm: syz.1.648 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 236.227871][ T7872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.231487][ T7872] Call Trace: [ 236.232641][ T7872] [ 236.233664][ T7872] dump_stack_lvl+0x16c/0x1f0 [ 236.235282][ T7872] should_fail_ex+0x497/0x5b0 [ 236.236939][ T7872] ? fs_reclaim_acquire+0xae/0x160 [ 236.238717][ T7872] should_failslab+0xc2/0x120 [ 236.240343][ T7872] __kmalloc_cache_noprof+0x6b/0x310 [ 236.242165][ T7872] ? register_netdevice+0x504/0x1e20 [ 236.243991][ T7872] register_netdevice+0x504/0x1e20 [ 236.245760][ T7872] ? kasan_save_track+0x14/0x30 [ 236.247427][ T7872] ? __pfx_register_netdevice+0x10/0x10 [ 236.249320][ T7872] ? alloc_netdev_mqs+0xf2a/0x12a0 [ 236.251074][ T7872] ? validate_linkmsg+0x6d2/0x9a0 [ 236.252799][ T7872] br_dev_newlink+0x27/0x110 [ 236.254375][ T7872] ? __pfx_br_dev_newlink+0x10/0x10 [ 236.256175][ T7872] __rtnl_newlink+0x119c/0x1920 [ 236.257869][ T7872] ? __pfx___rtnl_newlink+0x10/0x10 [ 236.259660][ T7872] rtnl_newlink+0x67/0xa0 [ 236.261163][ T7872] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.262887][ T7872] rtnetlink_rcv_msg+0x3c7/0xea0 [ 236.264602][ T7872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.266439][ T7872] ? __pfx___dev_queue_xmit+0x10/0x10 [ 236.268273][ T7872] netlink_rcv_skb+0x165/0x410 [ 236.269904][ T7872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.271784][ T7872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.273612][ T7872] ? netlink_deliver_tap+0x1ae/0xcf0 [ 236.275405][ T7872] netlink_unicast+0x53c/0x7f0 [ 236.277064][ T7872] ? __pfx_netlink_unicast+0x10/0x10 [ 236.278902][ T7872] ? __phys_addr_symbol+0x30/0x80 [ 236.280641][ T7872] ? __check_object_size+0x488/0x710 [ 236.282433][ T7872] netlink_sendmsg+0x8b8/0xd70 [ 236.284071][ T7872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.285874][ T7872] ? lock_acquire+0x2f/0xb0 [ 236.287440][ T7872] ____sys_sendmsg+0x9ae/0xb40 [ 236.289106][ T7872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.290913][ T7872] ? get_compat_msghdr+0x11b/0x170 [ 236.292669][ T7872] ? __pfx___lock_acquire+0x10/0x10 [ 236.294454][ T7872] ___sys_sendmsg+0x135/0x1e0 [ 236.296078][ T7872] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.297853][ T7872] ? lock_acquire+0x2f/0xb0 [ 236.299398][ T7872] ? __fget_files+0x40/0x3f0 [ 236.300996][ T7872] ? fdget+0x176/0x210 [ 236.302386][ T7872] __sys_sendmsg+0x117/0x1f0 [ 236.303957][ T7872] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.305705][ T7872] ? __fget_files+0x244/0x3f0 [ 236.307310][ T7872] __do_fast_syscall_32+0x73/0x120 [ 236.309043][ T7872] do_fast_syscall_32+0x32/0x80 [ 236.310697][ T7872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.312824][ T7872] RIP: 0023:0xf7ff1579 [ 236.314226][ T7872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 236.320716][ T7872] RSP: 002b:00000000f573456c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 236.323509][ T7872] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000280 [ 236.326190][ T7872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.328848][ T7872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.331483][ T7872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 236.334165][ T7872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.336855][ T7872] [ 236.429270][ T5408] usb 5-1: config 0 has no interfaces? [ 236.431338][ T5408] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 236.434696][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.443606][ T5408] usb 5-1: config 0 descriptor?? [ 236.864844][ T39] audit: type=1326 audit(1728286551.447:19978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7fc00000 [ 236.886954][ T25] usb 5-1: USB disconnect, device number 13 [ 236.937114][ T39] audit: type=1326 audit(1728286551.527:19979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.3.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7fc00000 [ 237.613290][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.853242][ T66] Bluetooth: hci5: command 0x040f tx timeout [ 237.853276][ T5364] Bluetooth: hci7: command 0x0c1a tx timeout [ 237.855500][ T66] Bluetooth: hci6: command 0x0c1a tx timeout [ 237.857017][ T5364] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.859178][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.918091][ T7897] autofs: Bad value for 'fd' [ 237.945279][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 238.009959][ T39] audit: type=1804 audit(1728286552.597:19980): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.654" name="/newroot/166/bus/bus" dev="overlay" ino=971 res=1 errno=0 [ 238.492717][ T7905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.507615][ T7905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.508025][ T39] audit: type=1326 audit(1728286553.097:19981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.657" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 238.510814][ T7905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.520721][ T7905] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 238.524306][ T7905] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 238.527452][ T7905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.680036][ T39] audit: type=1326 audit(1728286553.267:19982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.2.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 238.783197][ T62] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.979706][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.982924][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.005271][ T7924] bridge0: entered allmulticast mode [ 239.499845][ T62] usb 5-1: config 0 has no interfaces? [ 239.501350][ T62] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 239.503785][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.506728][ T62] usb 5-1: config 0 descriptor?? [ 239.970016][ T62] usb 5-1: USB disconnect, device number 14 [ 240.093238][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.293931][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 240.547408][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.550089][ T25] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.553802][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.556187][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 240.559079][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 240.566112][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.568554][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.570659][ T25] usb 6-1: Product: syz [ 240.571781][ T25] usb 6-1: Manufacturer: syz [ 240.576068][ T5361] Bluetooth: hci7: command 0x0c1a tx timeout [ 240.576112][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 240.576154][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.576190][ T5363] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.578555][ T66] Bluetooth: hci5: command 0x040f tx timeout [ 240.583097][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 240.591998][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 240.594818][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 240.596608][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 240.681537][ T7960] autofs: Bad value for 'fd' [ 240.803959][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.807702][ T39] audit: type=1804 audit(1728286555.397:19983): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.669" name="/newroot/173/bus/bus" dev="overlay" ino=1025 res=1 errno=0 [ 240.821068][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.833281][ T7951] Bluetooth: MGMT ver 1.23 [ 242.004875][ T7963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.008427][ T7963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.023182][ T7952] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 242.030056][ T25] usb 6-1: USB disconnect, device number 9 [ 242.034168][ T7963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.044303][ T39] audit: type=1326 audit(1728286556.627:19984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.2.670" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 242.163365][ T7963] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 242.168286][ T7963] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 242.170821][ T7963] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.529459][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.539600][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.542455][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.547288][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.549920][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.552569][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.555716][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.558589][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.561235][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.566052][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.578339][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.581880][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.604371][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.607749][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.611105][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.613835][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.616561][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.619147][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.621748][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.624475][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.627164][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.629467][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.631882][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.634533][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.637130][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.639818][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.642401][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.645142][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.647725][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.650431][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.653878][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.656516][ T25] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 242.669905][ T25] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz0] on syz0 [ 242.783256][ T62] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 242.947989][ T62] usb 5-1: config 0 has no interfaces? [ 242.949385][ T62] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 242.951809][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.961133][ T62] usb 5-1: config 0 descriptor?? [ 243.009575][ T8000] autofs: Bad value for 'fd' [ 243.096639][ T39] audit: type=1804 audit(1728286557.687:19985): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.679" name="/newroot/171/bus/bus" dev="overlay" ino=1005 res=1 errno=0 [ 243.424161][ T64] usb 5-1: USB disconnect, device number 15 [ 243.443245][ T8006] input: syz0 as /devices/virtual/input/input14 [ 243.504705][ T8006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.533392][ T5364] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.986478][ T8009] FAULT_INJECTION: forcing a failure. [ 243.986478][ T8009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.992380][ T8009] CPU: 2 UID: 0 PID: 8009 Comm: syz.1.682 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 243.996116][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.999941][ T8009] Call Trace: [ 244.001335][ T8009] [ 244.002428][ T8009] dump_stack_lvl+0x16c/0x1f0 [ 244.004095][ T8009] should_fail_ex+0x497/0x5b0 [ 244.005839][ T8009] _copy_to_user+0x30/0xc0 [ 244.007455][ T8009] simple_read_from_buffer+0xd0/0x160 [ 244.009444][ T8009] proc_fail_nth_read+0x198/0x270 [ 244.011257][ T8009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.013385][ T8009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.015389][ T8009] vfs_read+0x1ce/0xbd0 [ 244.016915][ T8009] ? __fget_files+0x23a/0x3f0 [ 244.018533][ T8009] ? fdget_pos+0x24c/0x360 [ 244.020064][ T8009] ? __pfx_lock_release+0x10/0x10 [ 244.021797][ T8009] ? trace_lock_acquire+0x14a/0x1d0 [ 244.023590][ T8009] ? __pfx_vfs_read+0x10/0x10 [ 244.025195][ T8009] ? __pfx___mutex_lock+0x10/0x10 [ 244.027116][ T8009] ? __fget_files+0x244/0x3f0 [ 244.028738][ T8009] ksys_read+0x12f/0x260 [ 244.030198][ T8009] ? __pfx_ksys_read+0x10/0x10 [ 244.031836][ T8009] __do_fast_syscall_32+0x73/0x120 [ 244.033651][ T8009] do_fast_syscall_32+0x32/0x80 [ 244.035590][ T8009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.037960][ T8009] RIP: 0023:0xf7ff1579 [ 244.039646][ T8009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.046516][ T8009] RSP: 002b:00000000f57555a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 244.049501][ T8009] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5755620 [ 244.052327][ T8009] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 244.055348][ T8009] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 244.058223][ T8009] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 244.061003][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.063779][ T8009] [ 244.064155][ T5364] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.067191][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.257892][ T5364] Bluetooth: hci5: command 0x040f tx timeout [ 244.260187][ T5364] Bluetooth: hci7: command 0x0c1a tx timeout [ 244.264691][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 244.399131][ T8023] usb 2-1: USB disconnect, device number 3 [ 244.507443][ T8020] /dev/sr0: Can't open blockdev [ 244.580083][ T8013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.582848][ T8013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.584656][ T39] audit: type=1326 audit(1728286559.177:19986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.2.684" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 244.587594][ T8013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.595844][ T8013] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 244.598768][ T8013] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 244.603129][ T8013] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 246.173361][ T5364] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.653253][ T5364] Bluetooth: hci5: command 0x040f tx timeout [ 246.655613][ T5364] Bluetooth: hci7: command 0x0c1a tx timeout [ 246.657981][ T5364] Bluetooth: hci6: command 0x0c1a tx timeout [ 246.660203][ T5364] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.662452][ T5364] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.366221][ T8043] autofs: Bad value for 'fd' [ 247.834480][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.844172][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.856495][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.859200][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.861863][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.880381][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.887167][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.890077][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.892773][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.896799][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.899501][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.902597][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.905824][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.908765][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.922918][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.931403][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.965625][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.968334][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.970973][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.983217][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.986521][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.989779][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 247.992523][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.002805][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.006587][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.010469][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.015361][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.018185][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.020855][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.024731][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.027416][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.053514][ T62] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 248.063474][ T62] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 249.564325][ T8058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.565999][ T8058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.567644][ T8058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.569251][ T8058] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 249.570852][ T8058] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 249.572467][ T8058] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 249.574121][ T39] audit: type=1326 audit(1728286564.157:19987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.694" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 249.617922][ T8071] FAULT_INJECTION: forcing a failure. [ 249.617922][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.621528][ T8071] CPU: 2 UID: 0 PID: 8071 Comm: syz.2.698 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 249.624285][ T8071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.627067][ T8071] Call Trace: [ 249.628053][ T8071] [ 249.628870][ T8071] dump_stack_lvl+0x16c/0x1f0 [ 249.630126][ T8071] should_fail_ex+0x497/0x5b0 [ 249.631582][ T8071] _copy_from_user+0x30/0xf0 [ 249.632874][ T8071] get_compat_msghdr+0xa8/0x170 [ 249.634481][ T8071] ? __pfx_get_compat_msghdr+0x10/0x10 [ 249.636330][ T8071] ? __pfx_lock_release+0x10/0x10 [ 249.637951][ T8071] ? find_held_lock+0x2d/0x110 [ 249.639375][ T8071] ___sys_sendmsg+0x1b0/0x1e0 [ 249.640636][ T8071] ? __up_read+0x1fb/0x760 [ 249.641818][ T8071] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.643575][ T8071] ? handle_mm_fault+0x497/0xaa0 [ 249.645285][ T8071] ? __pfx___might_resched+0x10/0x10 [ 249.647045][ T8071] ? __sys_sendmmsg+0x2bd/0x450 [ 249.648703][ T8071] __sys_sendmmsg+0x2a5/0x450 [ 249.650295][ T8071] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.652047][ T8071] ? vfs_write+0x14d/0x1140 [ 249.653598][ T8071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.655615][ T8071] ? fput+0x30/0x390 [ 249.656965][ T8071] ? ksys_write+0x1ad/0x260 [ 249.658504][ T8071] ? __pfx_ksys_write+0x10/0x10 [ 249.660148][ T8071] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 249.662038][ T8071] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 249.664254][ T8071] __do_fast_syscall_32+0x73/0x120 [ 249.666004][ T8071] do_fast_syscall_32+0x32/0x80 [ 249.667646][ T8071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.669244][ T8071] RIP: 0023:0xf7f15579 [ 249.670381][ T8071] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.675339][ T8071] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 249.677506][ T8071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020005240 [ 249.679534][ T8071] RDX: 0000000000264e33 RSI: 000000000000ff88 RDI: 0000000000000000 [ 249.681588][ T8071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.683631][ T8071] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.685673][ T8071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.687721][ T8071] [ 250.415133][ T8077] autofs: Bad value for 'fd' [ 250.782422][ T8091] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 250.810403][ T8091] batman_adv: batadv0: Adding interface: team0 [ 250.812539][ T8091] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.830535][ T8091] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 250.837959][ T8091] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 250.840711][ T8091] netlink: 2 bytes leftover after parsing attributes in process `syz.1.704'. [ 250.844534][ T8091] team0: entered promiscuous mode [ 250.846270][ T8091] team_slave_0: entered promiscuous mode [ 250.848451][ T8091] team_slave_1: entered promiscuous mode [ 250.851596][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.854506][ T8091] batman_adv: batadv0: Interface activated: team0 [ 250.856809][ T8091] batman_adv: batadv0: Interface deactivated: team0 [ 250.859119][ T8091] batman_adv: batadv0: Removing interface: team0 [ 250.895955][ T8091] bridge0: port 3(team0) entered blocking state [ 250.898524][ T8091] bridge0: port 3(team0) entered disabled state [ 250.900957][ T8091] team0: entered allmulticast mode [ 250.902818][ T8091] team_slave_0: entered allmulticast mode [ 250.906775][ T8091] team_slave_1: entered allmulticast mode [ 250.911132][ T8091] bridge0: port 3(team0) entered blocking state [ 250.911202][ T8091] bridge0: port 3(team0) entered forwarding state [ 251.223264][ T5364] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.313334][ T8105] FAULT_INJECTION: forcing a failure. [ 251.313334][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 251.333249][ T8105] CPU: 2 UID: 0 PID: 8105 Comm: syz.3.709 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 251.337027][ T8105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.340708][ T8105] Call Trace: [ 251.341887][ T8105] [ 251.342940][ T8105] dump_stack_lvl+0x16c/0x1f0 [ 251.344576][ T8105] should_fail_ex+0x497/0x5b0 [ 251.346256][ T8105] ? fs_reclaim_acquire+0xae/0x160 [ 251.347922][ T8105] should_failslab+0xc2/0x120 [ 251.349363][ T8105] __kmalloc_noprof+0xcb/0x410 [ 251.350990][ T8105] ? put_page+0x21e/0x280 [ 251.352397][ T8105] copy_splice_read+0x1a8/0xb90 [ 251.354015][ T8105] ? __pfx_pipe_to_null+0x10/0x10 [ 251.355795][ T8105] ? __pfx_copy_splice_read+0x10/0x10 [ 251.357709][ T8105] ? pipe_unlock+0x4a/0x70 [ 251.359274][ T8105] ? __pfx_splice_from_pipe+0x10/0x10 [ 251.361173][ T8105] ? __pfx_register_lock_class+0x10/0x10 [ 251.363143][ T8105] ? __pfx_copy_splice_read+0x10/0x10 [ 251.365015][ T8105] do_splice_read+0x282/0x370 [ 251.366700][ T8105] splice_direct_to_actor+0x2a4/0xa40 [ 251.368584][ T8105] ? __pfx_direct_splice_actor+0x10/0x10 [ 251.370533][ T8105] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 251.372527][ T8105] ? __fget_files+0x23a/0x3f0 [ 251.374063][ T8105] do_splice_direct+0x178/0x250 [ 251.375765][ T8105] ? __pfx_do_splice_direct+0x10/0x10 [ 251.377647][ T8105] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 251.379685][ T8105] ? bpf_lsm_file_permission+0x9/0x10 [ 251.381549][ T8105] ? security_file_permission+0x71/0x210 [ 251.383488][ T8105] do_sendfile+0xb0c/0xe40 [ 251.385059][ T8105] ? __pfx_do_sendfile+0x10/0x10 [ 251.386792][ T8105] ? __fget_files+0x244/0x3f0 [ 251.388516][ T8105] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 251.390480][ T8105] ? ksys_write+0x1ad/0x260 [ 251.392063][ T8105] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 251.394234][ T8105] __do_fast_syscall_32+0x73/0x120 [ 251.396022][ T8105] do_fast_syscall_32+0x32/0x80 [ 251.397726][ T8105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.399901][ T8105] RIP: 0023:0xf73ee579 [ 251.401366][ T8105] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.407884][ T8105] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 251.410838][ T8105] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000003 [ 251.413573][ T8105] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000000 [ 251.416276][ T8105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.418877][ T8105] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.421476][ T8105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.424190][ T8105] [ 251.613313][ T5354] Bluetooth: hci7: command 0x0c1a tx timeout [ 251.616257][ T5354] Bluetooth: hci6: command 0x0c1a tx timeout [ 251.624533][ T5354] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.640898][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.699616][ T5364] Bluetooth: hci5: command 0x040f tx timeout [ 252.087665][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 252.646824][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 252.772670][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.787664][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.796656][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.799267][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.810105][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.812841][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.821801][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.826079][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.829004][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.831681][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.833402][ T8134] FAULT_INJECTION: forcing a failure. [ 252.833402][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 252.838777][ T8134] CPU: 2 UID: 0 PID: 8134 Comm: syz.3.717 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 252.840539][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.842540][ T8134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.842555][ T8134] Call Trace: [ 252.842563][ T8134] [ 252.842572][ T8134] dump_stack_lvl+0x16c/0x1f0 [ 252.845245][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.848957][ T8134] should_fail_ex+0x497/0x5b0 [ 252.850135][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.851198][ T8134] should_failslab+0xc2/0x120 [ 252.852801][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.855425][ T8134] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 252.855454][ T8134] ? skb_clone+0x190/0x3f0 [ 252.855487][ T8134] skb_clone+0x190/0x3f0 [ 252.855516][ T8134] dev_queue_xmit_nit+0x38f/0xba0 [ 252.855552][ T8134] dev_hard_start_xmit+0x56/0x790 [ 252.855573][ T8134] ? __dev_queue_xmit+0x252/0x4350 [ 252.855598][ T8134] __dev_queue_xmit+0x7c7/0x4350 [ 252.855623][ T8134] ? hlock_class+0x4e/0x130 [ 252.863070][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.864254][ T8134] ? __lock_acquire+0x163e/0x3ce0 [ 252.866116][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.867717][ T8134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.867748][ T8134] ? __pfx___lock_acquire+0x10/0x10 [ 252.869361][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.871065][ T8134] ? find_held_lock+0x2d/0x110 [ 252.872828][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.874651][ T8134] ? __ip_finish_output+0x49e/0x950 [ 252.874682][ T8134] ? __pfx_lock_release+0x10/0x10 [ 252.874708][ T8134] ? trace_lock_acquire+0x14a/0x1d0 [ 252.874730][ T8134] ? __ip_finish_output+0x49e/0x950 [ 252.874766][ T8134] ip_finish_output2+0x16d5/0x2530 [ 252.874800][ T8134] ? __pfx_ip_finish_output2+0x10/0x10 [ 252.879434][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.880811][ T8134] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 252.882573][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.885218][ T8134] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 252.885248][ T8134] ? __pfx_nf_hook+0x10/0x10 [ 252.885276][ T8134] __ip_finish_output+0x49e/0x950 [ 252.885307][ T8134] ip_finish_output+0x31/0x310 [ 252.890223][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.891659][ T8134] ip_output+0x13b/0x2a0 [ 252.893416][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.896013][ T8134] ? __pfx_ip_output+0x10/0x10 [ 252.897951][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.899636][ T8134] ip_local_out+0x33e/0x4a0 [ 252.901440][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.903292][ T8134] iptunnel_xmit+0x5b4/0x9c0 [ 252.903334][ T8134] geneve_xmit+0x2aa4/0x56d0 [ 252.903362][ T8134] ? find_held_lock+0x2d/0x110 [ 252.903406][ T8134] ? __pfx_geneve_xmit+0x10/0x10 [ 252.903429][ T8134] ? dev_queue_xmit_nit+0x87e/0xba0 [ 252.903463][ T8134] ? dev_hard_start_xmit+0x143/0x790 [ 252.903483][ T8134] dev_hard_start_xmit+0x143/0x790 [ 252.908086][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.909896][ T8134] __dev_queue_xmit+0x7c7/0x4350 [ 252.911586][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.914210][ T8134] ? hlock_class+0x4e/0x130 [ 252.914235][ T8134] ? __lock_acquire+0x163e/0x3ce0 [ 252.914268][ T8134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.919177][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.919519][ T8134] ? __pfx___lock_acquire+0x10/0x10 [ 252.921177][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.923808][ T8134] ? find_held_lock+0x2d/0x110 [ 252.923838][ T8134] ? ip_do_fragment+0x861/0x18b0 [ 252.923865][ T8134] ? __pfx_lock_release+0x10/0x10 [ 252.923890][ T8134] ? trace_lock_acquire+0x14a/0x1d0 [ 252.923912][ T8134] ? ip_do_fragment+0x861/0x18b0 [ 252.923948][ T8134] ip_finish_output2+0x16d5/0x2530 [ 252.928618][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.929763][ T8134] ? __pfx_ip_finish_output2+0x10/0x10 [ 252.932269][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 252.933897][ T8134] ? ip_frag_next+0x778/0xa40 [ 252.933934][ T8134] ip_do_fragment+0x861/0x18b0 [ 252.933963][ T8134] ? __pfx_ip_finish_output2+0x10/0x10 [ 252.934001][ T8134] ? __pfx_ip_do_fragment+0x10/0x10 [ 252.934031][ T8134] ? nf_hook_slow+0x132/0x200 [ 252.934060][ T8134] ? nf_hook+0x3bf/0x6d0 [ 252.934085][ T8134] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 252.999175][ T8134] ip_fragment.constprop.0+0x161/0x230 [ 253.001185][ T8134] __ip_finish_output+0x2fc/0x950 [ 253.003018][ T8134] ip_finish_output+0x31/0x310 [ 253.004771][ T8134] ip_output+0x13b/0x2a0 [ 253.006322][ T8134] ? __pfx_ip_output+0x10/0x10 [ 253.008066][ T8134] ip_local_out+0x33e/0x4a0 [ 253.009739][ T8134] iptunnel_xmit+0x5b4/0x9c0 [ 253.011441][ T8134] ip_tunnel_xmit+0x1e57/0x33a0 [ 253.013248][ T8134] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 253.015138][ T8134] ? rcu_is_watching+0x12/0xc0 [ 253.016912][ T8134] ? trace_kmalloc+0x2d/0xe0 [ 253.018607][ T8134] ? skb_release_data+0x565/0x730 [ 253.020447][ T8134] ? kmalloc_reserve+0x13c/0x2c0 [ 253.022257][ T8134] __gre_xmit+0x89d/0xbd0 [ 253.023846][ T8134] ? __pfx___gre_xmit+0x10/0x10 [ 253.025626][ T8134] ? __pfx_pskb_expand_head+0x10/0x10 [ 253.027608][ T8134] ? __pfx_packet_rcv+0x10/0x10 [ 253.029389][ T8134] ipgre_xmit+0x50e/0xb00 [ 253.030969][ T8134] dev_hard_start_xmit+0x143/0x790 [ 253.032836][ T8134] __dev_queue_xmit+0x7c7/0x4350 [ 253.034656][ T8134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 253.036614][ T8134] ? rcu_is_watching+0x12/0xc0 [ 253.038334][ T8134] ? trace_kmalloc+0x2d/0xe0 [ 253.040015][ T8134] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 253.042380][ T8134] ? pskb_expand_head+0x236/0x1170 [ 253.044179][ T8134] ? skb_release_data+0x565/0x730 [ 253.046024][ T8134] ? kmalloc_reserve+0x13c/0x2c0 [ 253.047826][ T8134] ? skb_headers_offset_update+0x129/0x260 [ 253.049934][ T8134] ? pskb_expand_head+0x609/0x1170 [ 253.051808][ T8134] ? __pfx_pskb_expand_head+0x10/0x10 [ 253.053779][ T8134] __bpf_redirect+0x6fa/0xfa0 [ 253.055501][ T8134] bpf_clone_redirect+0x2cb/0x3d0 [ 253.057361][ T8134] bpf_prog_208b094576c80b22+0x5f/0x64 [ 253.059356][ T8134] ? find_held_lock+0x2d/0x110 [ 253.061130][ T8134] ? ktime_get+0xd9/0x1a0 [ 253.062768][ T8134] ? __pfx_lock_release+0x10/0x10 [ 253.064680][ T8134] ? trace_lock_acquire+0x14a/0x1d0 [ 253.066644][ T8134] ? ktime_get+0xd9/0x1a0 [ 253.068237][ T8134] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 253.070305][ T8134] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.072180][ T8134] ? read_tsc+0x9/0x20 [ 253.073686][ T8134] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 253.075747][ T8134] ? __pfx___cant_migrate+0x10/0x10 [ 253.077769][ T8134] ? ktime_get+0xfb/0x1a0 [ 253.079429][ T8134] bpf_test_run+0x49d/0xa90 [ 253.081183][ T8134] ? __pfx_bpf_test_run+0x10/0x10 [ 253.083079][ T8134] ? krealloc_noprof+0xff/0x130 [ 253.084871][ T8134] bpf_prog_test_run_skb+0xb8b/0x2140 [ 253.086795][ T8134] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.088879][ T8134] ? fput+0x30/0x390 [ 253.090314][ T8134] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.092429][ T8134] __sys_bpf+0x1921/0x5780 [ 253.094056][ T8134] ? ksys_write+0x21e/0x260 [ 253.095712][ T8134] ? __pfx___sys_bpf+0x10/0x10 [ 253.097495][ T8134] ? vfs_write+0x14d/0x1140 [ 253.099127][ T8134] ? __mutex_unlock_slowpath+0x164/0x650 [ 253.101209][ T8134] ? fput+0x30/0x390 [ 253.102693][ T8134] ? ksys_write+0x1ad/0x260 [ 253.104392][ T8134] ? __pfx_ksys_write+0x10/0x10 [ 253.106166][ T8134] __ia32_sys_bpf+0x76/0xe0 [ 253.107831][ T8134] __do_fast_syscall_32+0x73/0x120 [ 253.109685][ T8134] do_fast_syscall_32+0x32/0x80 [ 253.111461][ T8134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.113755][ T8134] RIP: 0023:0xf73ee579 [ 253.115237][ T8134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 253.122115][ T8134] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 253.125110][ T8134] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 253.127938][ T8134] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.130763][ T8134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.133604][ T8134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 253.136481][ T8134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.139302][ T8134] [ 253.140503][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 253.140567][ C2] vkms_vblank_simulate: vblank timer overrun [ 253.143150][ T5391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 253.148485][ T5391] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 253.223112][ T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 253.404328][ T64] usb 7-1: config 0 has no interfaces? [ 253.406209][ T64] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 253.419395][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.423040][ T64] usb 7-1: config 0 descriptor?? [ 254.065319][ T4322] usb 7-1: USB disconnect, device number 10 [ 254.745552][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 254.755154][ T8169] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 254.853055][ T8171] FAULT_INJECTION: forcing a failure. [ 254.853055][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.862026][ T8171] CPU: 3 UID: 0 PID: 8171 Comm: syz.2.728 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 254.865221][ T8171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.868427][ T8171] Call Trace: [ 254.869456][ T8171] [ 254.870371][ T8171] dump_stack_lvl+0x16c/0x1f0 [ 254.871820][ T8171] should_fail_ex+0x497/0x5b0 [ 254.873329][ T8171] _copy_to_user+0x30/0xc0 [ 254.874728][ T8171] simple_read_from_buffer+0xd0/0x160 [ 254.876395][ T8171] proc_fail_nth_read+0x198/0x270 [ 254.877962][ T8171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.879691][ T8171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.881390][ T8171] vfs_read+0x1ce/0xbd0 [ 254.882680][ T8171] ? __fget_files+0x23a/0x3f0 [ 254.884260][ T8171] ? fdget_pos+0x24c/0x360 [ 254.885643][ T8171] ? __pfx_lock_release+0x10/0x10 [ 254.887227][ T8171] ? trace_lock_acquire+0x14a/0x1d0 [ 254.888817][ T8171] ? __pfx_vfs_read+0x10/0x10 [ 254.890270][ T8171] ? __pfx___mutex_lock+0x10/0x10 [ 254.891833][ T8171] ? __fget_files+0x244/0x3f0 [ 254.893297][ T8171] ksys_read+0x12f/0x260 [ 254.894632][ T8171] ? __pfx_ksys_read+0x10/0x10 [ 254.896122][ T8171] __do_fast_syscall_32+0x73/0x120 [ 254.897784][ T8171] do_fast_syscall_32+0x32/0x80 [ 254.899316][ T8171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.901291][ T8171] RIP: 0023:0xf7f15579 [ 254.902558][ T8171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.908553][ T8171] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 254.911464][ T8171] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5696620 [ 254.914178][ T8171] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 254.916876][ T8171] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 254.919568][ T8171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 254.922263][ T8171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.924959][ T8171] [ 255.300287][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.302777][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.536424][ T8183] FAULT_INJECTION: forcing a failure. [ 255.536424][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 255.546940][ T8183] CPU: 3 UID: 0 PID: 8183 Comm: syz.1.732 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 255.550514][ T8183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.554139][ T8183] Call Trace: [ 255.555284][ T8183] [ 255.556308][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 255.557722][ T8183] should_fail_ex+0x497/0x5b0 [ 255.559123][ T8183] ? fs_reclaim_acquire+0xae/0x160 [ 255.560648][ T8183] should_failslab+0xc2/0x120 [ 255.562044][ T8183] __kmalloc_noprof+0xcb/0x410 [ 255.563497][ T8183] ? kiocb_done+0x1ba/0xc10 [ 255.564871][ T8183] io_alloc_async_data+0x9d/0x150 [ 255.566376][ T8183] io_prep_rw+0x30d/0xb70 [ 255.567673][ T8183] io_prep_rwv+0xa8/0x350 [ 255.568966][ T8183] ? __pfx_io_prep_rwv+0x10/0x10 [ 255.570434][ T8183] ? io_issue_sqe+0x1d3/0x1550 [ 255.571968][ T8183] io_submit_sqes+0x8aa/0x2530 [ 255.573638][ T8183] __do_sys_io_uring_enter+0xc0f/0x1170 [ 255.575630][ T8183] ? __fget_files+0x244/0x3f0 [ 255.577367][ T8183] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 255.579537][ T8183] ? fput+0x30/0x390 [ 255.580979][ T8183] ? ksys_write+0x1ad/0x260 [ 255.582647][ T8183] ? __pfx_ksys_write+0x10/0x10 [ 255.584341][ T8183] __do_fast_syscall_32+0x73/0x120 [ 255.586144][ T8183] do_fast_syscall_32+0x32/0x80 [ 255.587917][ T8183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.590204][ T8183] RIP: 0023:0xf7ff1579 [ 255.591699][ T8183] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 255.598410][ T8183] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 255.601443][ T8183] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 255.604211][ T8183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.606942][ T8183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.609804][ T8183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 255.612685][ T8183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.615490][ T8183] [ 255.743991][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.746672][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.749332][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.752108][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.756980][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.759593][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.762319][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.765359][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.768022][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.770486][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.773430][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.776229][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.778891][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.781557][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.808255][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.810960][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.814109][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.816871][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.819628][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.822244][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.825291][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.827952][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.830637][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.833690][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.836356][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.839045][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.841725][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.844778][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.847333][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.849960][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.852650][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.855753][ T5391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 255.875561][ T5391] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 255.993074][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 256.144755][ T64] usb 6-1: config 0 has no interfaces? [ 256.146715][ T64] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 256.149788][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.164077][ T64] usb 6-1: config 0 descriptor?? [ 256.558816][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 256.595683][ T8] usb 6-1: USB disconnect, device number 10 [ 257.490567][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 259.142716][ T8239] xt_hashlimit: max too large, truncated to 1048576 [ 259.145037][ T8239] xt_hashlimit: overflow, try lower: 0/0 [ 259.336349][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.339036][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.341730][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.345631][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.348528][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.351109][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.371993][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.381195][ T8241] netlink: 188 bytes leftover after parsing attributes in process `syz.0.747'. [ 259.387202][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.394312][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.403859][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.408072][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.417663][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.593056][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.677043][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.695267][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.698854][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.705853][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.711366][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.719794][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.728820][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.744946][ T8] usb 6-1: config 0 has no interfaces? [ 259.746480][ T8] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 259.750432][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.764446][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.768125][ T8] usb 6-1: config 0 descriptor?? [ 259.922015][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.957917][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.963491][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.973144][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.977008][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.980354][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.983091][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.985724][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.988446][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 259.991123][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 260.007793][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 260.012103][ T5411] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 260.025937][ T5411] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 260.114975][ T64] usb 6-1: USB disconnect, device number 11 [ 260.151117][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 260.155159][ T8252] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 260.157812][ T8252] netlink: 'syz.3.750': attribute type 2 has an invalid length. [ 260.367259][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 260.908048][ T8264] FAULT_INJECTION: forcing a failure. [ 260.908048][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.912872][ T8264] CPU: 3 UID: 0 PID: 8264 Comm: syz.3.754 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 260.916632][ T8264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.920275][ T8264] Call Trace: [ 260.921447][ T8264] [ 260.922500][ T8264] dump_stack_lvl+0x16c/0x1f0 [ 260.924162][ T8264] should_fail_ex+0x497/0x5b0 [ 260.925791][ T8264] _copy_to_user+0x30/0xc0 [ 260.927242][ T8264] simple_read_from_buffer+0xd0/0x160 [ 260.928995][ T8264] proc_fail_nth_read+0x198/0x270 [ 260.930617][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.932564][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.934428][ T8264] vfs_read+0x1ce/0xbd0 [ 260.935886][ T8264] ? __fget_files+0x23a/0x3f0 [ 260.937501][ T8264] ? fdget_pos+0x24c/0x360 [ 260.939191][ T8264] ? __pfx_lock_release+0x10/0x10 [ 260.940957][ T8264] ? trace_lock_acquire+0x14a/0x1d0 [ 260.942731][ T8264] ? __pfx_vfs_read+0x10/0x10 [ 260.944376][ T8264] ? __pfx___mutex_lock+0x10/0x10 [ 260.946132][ T8264] ? __fget_files+0x244/0x3f0 [ 260.947773][ T8264] ksys_read+0x12f/0x260 [ 260.949266][ T8264] ? __pfx_ksys_read+0x10/0x10 [ 260.950931][ T8264] __do_fast_syscall_32+0x73/0x120 [ 260.952717][ T8264] do_fast_syscall_32+0x32/0x80 [ 260.954416][ T8264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.956645][ T8264] RIP: 0023:0xf73ee579 [ 260.958057][ T8264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.964447][ T8264] RSP: 002b:00000000f56d65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 260.967270][ T8264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56d6620 [ 260.969959][ T8264] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 260.972664][ T8264] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 260.975326][ T8264] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 260.978043][ T8264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.980752][ T8264] [ 260.981914][ C3] vkms_vblank_simulate: vblank timer overrun [ 261.817296][ T8278] FAULT_INJECTION: forcing a failure. [ 261.817296][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.824272][ T8278] CPU: 2 UID: 0 PID: 8278 Comm: syz.3.758 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 261.827843][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.831428][ T8278] Call Trace: [ 261.832573][ T8278] [ 261.833588][ T8278] dump_stack_lvl+0x16c/0x1f0 [ 261.835210][ T8278] should_fail_ex+0x497/0x5b0 [ 261.836855][ T8278] _copy_to_user+0x30/0xc0 [ 261.838377][ T8278] msr_read+0x14f/0x250 [ 261.839799][ T8278] ? __pfx_msr_read+0x10/0x10 [ 261.841411][ T8278] ? bpf_lsm_file_permission+0x9/0x10 [ 261.843215][ T8278] ? security_file_permission+0x71/0x210 [ 261.845014][ T8278] ? __pfx_msr_read+0x10/0x10 [ 261.846544][ T8278] vfs_read+0x1ce/0xbd0 [ 261.847949][ T8278] ? __fget_files+0x23a/0x3f0 [ 261.849562][ T8278] ? __pfx_lock_release+0x10/0x10 [ 261.851194][ T8278] ? trace_lock_acquire+0x14a/0x1d0 [ 261.852875][ T8278] ? __pfx_vfs_read+0x10/0x10 [ 261.854596][ T8278] ? lock_acquire+0x2f/0xb0 [ 261.856111][ T8278] ? __fget_files+0x40/0x3f0 [ 261.857626][ T8278] ? __fget_files+0x244/0x3f0 [ 261.859159][ T8278] ksys_read+0x12f/0x260 [ 261.860534][ T8278] ? __pfx_ksys_read+0x10/0x10 [ 261.862097][ T8278] __do_fast_syscall_32+0x73/0x120 [ 261.863809][ T8278] do_fast_syscall_32+0x32/0x80 [ 261.865479][ T8278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.867467][ T8278] RIP: 0023:0xf73ee579 [ 261.868811][ T8278] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 261.874796][ T8278] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 261.877459][ T8278] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020019680 [ 261.879942][ T8278] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.882369][ T8278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.885067][ T8278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 261.887727][ T8278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.890257][ T8278] [ 262.188083][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.190635][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.196583][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.199191][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.201691][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.207117][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.217548][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.220302][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.222843][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.226174][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.228853][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.231438][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.236753][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.239543][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.242227][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.245616][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.248842][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.251618][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.254722][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.257384][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.263325][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.266168][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.268824][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.271650][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.275759][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.278579][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.281200][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.286629][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.289345][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.292068][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.295156][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.297727][ T64] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 262.307019][ T64] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 262.835883][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'. [ 264.900074][ T6037] Bluetooth: hci8: Frame reassembly failed (-84) [ 264.902315][ T6037] Bluetooth: hci8: Frame reassembly failed (-84) [ 265.035720][ T8330] FAULT_INJECTION: forcing a failure. [ 265.035720][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.040563][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.2.773 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 265.043896][ T8330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.047719][ T8330] Call Trace: [ 265.048951][ T8330] [ 265.050034][ T8330] dump_stack_lvl+0x16c/0x1f0 [ 265.051755][ T8330] should_fail_ex+0x497/0x5b0 [ 265.053489][ T8330] _copy_to_iter+0x48b/0x13e0 [ 265.055217][ T8330] ? __pfx__copy_to_iter+0x10/0x10 [ 265.057100][ T8330] ? __up_read+0x1fb/0x760 [ 265.058681][ T8330] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 265.060770][ T8330] ? down_read+0xc9/0x330 [ 265.062365][ T8330] ? __pfx___up_read+0x10/0x10 [ 265.064122][ T8330] copy_page_to_iter+0xf1/0x180 [ 265.065991][ T8330] process_vm_rw_core.constprop.0+0x5c9/0x9f0 [ 265.068212][ T8330] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 265.070569][ T8330] ? rcu_is_watching+0x12/0xc0 [ 265.072329][ T8330] process_vm_rw+0x301/0x360 [ 265.074001][ T8330] ? __pfx_process_vm_rw+0x10/0x10 [ 265.075878][ T8330] ? ksys_write+0x21e/0x260 [ 265.077549][ T8330] ? __pfx_lock_release+0x10/0x10 [ 265.079418][ T8330] ? ksys_write+0x1ad/0x260 [ 265.081075][ T8330] ? __pfx_ksys_write+0x10/0x10 [ 265.082822][ T8330] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 265.084877][ T8330] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.086762][ T8330] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 265.089135][ T8330] __do_fast_syscall_32+0x73/0x120 [ 265.090994][ T8330] do_fast_syscall_32+0x32/0x80 [ 265.092763][ T8330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.095040][ T8330] RIP: 0023:0xf7f15579 [ 265.096545][ T8330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.103400][ T8330] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 000000000000015b [ 265.106370][ T8330] RAX: ffffffffffffffda RBX: 0000000000000112 RCX: 0000000020008400 [ 265.109204][ T8330] RDX: 0000000000000002 RSI: 0000000020008640 RDI: 0000000000000286 [ 265.112025][ T8330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.114830][ T8330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.117700][ T8330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.120550][ T8330] [ 265.468260][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 266.147519][ T8349] tc_dump_action: action bad kind [ 266.774966][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.777007][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.778937][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.780841][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.782743][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.784749][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.786626][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.788549][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.790463][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.792441][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.794497][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.796723][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.798658][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.800637][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.802611][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.804656][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.807006][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.809436][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.811828][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.814492][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.816996][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.819459][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.821950][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.824688][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.827219][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.829797][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.832223][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.834671][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.837075][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.839346][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.841306][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.843334][ T5391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 266.851388][ T5391] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 266.973281][ T5364] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 266.991267][ T39] audit: type=1326 audit(1728286581.577:19988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7fc00000 [ 267.093741][ T5408] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 267.158576][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.161142][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.176989][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.179614][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.182293][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.194864][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.197615][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.200288][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.202601][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.208725][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.211519][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.221106][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.224456][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.227589][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.230419][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.233741][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.236431][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.239143][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.242020][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.245815][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.248974][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.251824][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.255223][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.258460][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.261420][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.265598][ T5408] usb 5-1: config 0 has no interfaces? [ 267.266334][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.267194][ T5408] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 267.269724][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.271943][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.279000][ T5408] usb 5-1: config 0 descriptor?? [ 267.284874][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.287634][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.290506][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.302342][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.305667][ T62] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 267.321045][ T62] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 269.764314][ T62] usb 5-1: USB disconnect, device number 16 [ 270.265734][ T8390] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 270.268555][ T8390] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.789'. [ 270.271907][ T8390] nbd: couldn't find device at index 16 [ 270.287129][ T8390] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 270.294802][ T8390] cramfs: wrong magic [ 270.525797][ T8399] netlink: 'syz.0.792': attribute type 2 has an invalid length. [ 270.543258][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'. [ 270.832905][ T1100] Bluetooth: hci8: Frame reassembly failed (-84) [ 271.857256][ T8415] input: syz0 as /devices/virtual/input/input16 [ 272.730516][ T8425] netlink: 11 bytes leftover after parsing attributes in process `syz.3.799'. [ 272.893270][ T5354] Bluetooth: hci8: command 0xfc11 tx timeout [ 272.897071][ T5364] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 272.982548][ T39] audit: type=1326 audit(1728286587.567:19989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.1.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7fc00000 [ 273.039898][ T8432] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks SYZFAIL: ShmemBuilder: too large output offset size=580377331 consumed=-782826591 (errno 9: Bad file descriptor) [ 274.260057][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.334193][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.411267][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.504888][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.597065][ T11] bridge_slave_1: left allmulticast mode [ 274.598597][ T11] bridge_slave_1: left promiscuous mode [ 274.600182][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.608289][ T11] bridge_slave_0: left allmulticast mode [ 274.609818][ T11] bridge_slave_0: left promiscuous mode [ 274.611348][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.881123][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.894586][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.898666][ T11] bond0 (unregistering): Released all slaves [ 274.972268][ T11] : left promiscuous mode [ 275.468079][ T11] hsr_slave_0: left promiscuous mode [ 275.471455][ T11] hsr_slave_1: left promiscuous mode [ 275.480253][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.482759][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.488020][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.490543][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.519599][ T11] veth1_macvtap: left promiscuous mode [ 275.521515][ T11] veth0_macvtap: left promiscuous mode [ 275.524058][ T11] veth1_vlan: left promiscuous mode [ 275.525554][ T11] veth0_vlan: left promiscuous mode [ 276.487124][ T11] team0 (unregistering): Port device team_slave_1 removed [ 276.539623][ T11] team0 (unregistering): Port device team_slave_0 removed [ 277.780950][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.874062][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.967548][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.090332][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.273236][ T11] team0: left allmulticast mode [ 278.275206][ T11] team_slave_0: left allmulticast mode [ 278.277486][ T11] team_slave_1: left allmulticast mode [ 278.279603][ T11] bridge0: port 3(team0) entered disabled state [ 278.294454][ T11] bridge_slave_1: left allmulticast mode [ 278.296031][ T11] bridge_slave_1: left promiscuous mode [ 278.297622][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.303169][ T11] bridge_slave_0: left allmulticast mode [ 278.304739][ T11] bridge_slave_0: left promiscuous mode [ 278.306287][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.633262][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.641039][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.647546][ T11] bond0 (unregistering): Released all slaves [ 279.050881][ T11] hsr_slave_0: left promiscuous mode [ 279.055464][ T11] hsr_slave_1: left promiscuous mode [ 279.060015][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.062690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.075434][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.077515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.108842][ T11] veth1_macvtap: left promiscuous mode [ 279.110490][ T11] veth0_macvtap: left promiscuous mode [ 280.030686][ T11] team_slave_1 (unregistering): left promiscuous mode [ 280.039187][ T11] team0 (unregistering): Port device team_slave_1 removed [ 280.119175][ T11] team_slave_0 (unregistering): left promiscuous mode [ 280.122526][ T11] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 07:36:28 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc900034a7538 RCX=0000000000000000 RDX=0000000000000004 RSI=ffff88804e45309c RDI=ffffc900034a7560 RBP=0000000000000004 RSP=ffffc900034a7328 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=0000000000000000 R12=0000000000000004 R13=0000000000000004 R14=0000000000000098 R15=00000000000000a0 RIP=ffffffff848efa91 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f11cf8d5d00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055883ca44000 CR3=0000000029d74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 814ae8f6814ae8f6 ZMM22=a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 a12c41f2a12c41f2 ZMM23=25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 25a777b225a777b2 ZMM24=823193ef823193ef 823193ef823193ef 823193ef823193ef 823193ef823193ef 823193ef823193ef 823193ef823193ef 823193ef823193ef 823193ef823193ef ZMM25=7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f 7caf456f7caf456f ZMM26=b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 b3630ea1b3630ea1 ZMM27=6610788866107888 6610788866107888 6610788866107888 6610788866107888 6610788866107888 6610788866107888 6610788866107888 6610788866107888 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2607000026070000 2607000026070000 2607000026070000 2607000026070000 2607000026070000 2607000026070000 2607000026070000 2607000026070000 info registers vcpu 1 CPU#1 RAX=0000000000b38ad7 RBX=0000000000000001 RCX=ffffffff8b130829 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb123a0 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cd188 R15=0000000000000000 RIP=ffffffff8b131c0f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000204c2000 CR3=000000004aee2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea0001c4a7c0 RCX=ffffffff81f9eb27 RDX=ffff88802114a440 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888041c5d1b0 RSP=ffffc900040c77a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea0001c4a7c0 RIP=ffffffff818cb7cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f710df90 CR3=00000000610e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81c606ee RDX=ffff888024600000 RSI=ffffffff81c55280 RDI=ffffea0001b27ac0 RBP=ffffea0001b27ac0 RSP=ffffc9000fddf2f0 R8 =0000000000000005 R9 =00000000000000f4 R10=00000000000000ff R11=0000000000000000 R12=0000000000000060 R13=dffffc0000000000 R14=ffffc9000fddf600 R15=00000000000000ff RIP=ffffffff818cb801 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74665a8 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000