last executing test programs: 4m58.980777971s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x3000000, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m58.872990048s ago: executing program 3 (id=5): openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b00)={"6a65fac332006b7650eaa23605d99da6f03fe2d436f315b94b5293b2fa9b36206f06872c9d66c5e7a5bbc985b35ac2b5bccc0daf33ebc5215c56699bfb1787db83cd175032e885644c566b242cd31f71cf9062f7aa9d41f2daad04b2f112d559e16ba579bc639d94cfe4d6ab58fc4769f29469fa4f5887ab5f567b9f86e3823fb29cb7de4d986dfc08b01558755f54ad50a649b3280678d31315e382b53b8bad6b3a0f471727121a1cfae8435eb03c51d331aec391572739a89f7731b878c07c5ae07b58a1382314b6aeeb92f781cf761ead42e23319ce523f15347a299d0881e20ee7dda68626c8b2a4da36d1c3540ebe15a1b4f18f6eaab4774dbd776c1ed72ee62650b29af1cd3f17bd1cebb5858c8c563f5c2c924a8b2716f8842c97fc0528f98e7a61def53e162e838164e774119483c137a054b62e8172ad73266dc792d47b359cdaa766c684b5e71d5660616808c5fdee8848eb67c900e80ed3510f3c5c306db1aaf111e17b4560472f537ef206ac51562c9c0349d5caaa860eadc989557ae332ad157ddaec73dae5424770d7874c043e4b3f4028a8129a98249455bb7c19b7b388d5a08b2e421fcf4615f35ff89ff008ac86c6c53d5af2479576f6a23b1af7c19d026728efdae9432d4865d76d769485eb76da906787b09c0a4590fe3ebbec9b73b777e93509f56fa17e5ed1de7fcfa9fa44fb5c511e066b27abb3a9d8f561c6a04e9e22a6de9d2a506595bd6608c7307a28a96a6858c073a2f0f2bf23c54b2d5d1b717170c2c34cc926b1dc4b1f5781ef7fb9a489c246416a837e4022d736142e9736e239cfbbe747232a9f7ec4e9116a5b17af607da526468a4dccce03892feff3bf3b516b37ede770f7007c3f05a3a4c0ab5d340ef75ae26674eef88ed9eebcf284a9049e505de0d06385566229171e7236d930560fd5fcca23f4a49e9d3726d0a38c7f1337c76b4305244bde106150cac87a3832f510e11b6fd4ca9d19ad6c4a1a96a914064b44dce0e936a414471924aec77e6a796f26b08818742555e21e5973e2407ddf26fc5ff2e1a4876f15a2ec8b8afe198caaaa2c2cca0beec7e6d10d5e17563961641b63fc87db86b9f21ec88846c11e1056a211e2f09ee16168689d3c5f1853eab8f57266106c66a77f462c6db187a53cedead1a894ea32fdfd0816476c4864f91705be923c56c48b28a39c42ea5a878c325465fb5885a4149cab5c2957c71d9a91dbcb17d9230d5fb5c13a7fe7514aef6385e47520fa0ab966829afec28bb7905b4256780971bac679437320051bb11277cba86338018bff04be8438bb8f177366365e332cbaa18d257f11386c8c67220a197b806254b890ba5362ac43c098792564600d75801cf445496f93f060549a14f80d6636631ad7c25c97ff9b3b5950bcb797870f647964a1225e811bf5db1504bb511a6e"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000009000000", @ANYRES32=0x1], 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x10022) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)=@xdp={0x2c, 0x2, r4, 0x19}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="8a3a9f6e3bbcd033acf0a91597b88a37c0c13f518ca9e63c3e8885d2f9fadfc1979ae0a8cef41179555ad4d699599af648e1fcea9c6a5fd6349839353dbaf1832a012f43d17c193f4d8ad8c455097b107bfda1595c357afec0e151b8f35b8bd84e0603590bb137cd19988fb1b27be55c93bc998c31f53492712ff14a2e4c87da8c2bad02b08a72c5eb002f2da38148c075664d0abd8bc2b3bdb0ebc22dcaed2e7256c283a963be872d7bb17894c5d3bcfc3cddb71a617ba44d6fe29a1b88ee27205d75bc1586a553256e22c6efeb", 0xce}, {&(0x7f0000000340)="152c3b6ea408c24813bc4626bf099813ae75da9fad05a01bc9d3edb3eb83bf4143f1ecaaa8f400888107d94e54ee7bdac243c2b63d2c01b4dfe59a3f86afe7def7a046ed82e83ee53395e603818a32cbaaf33c4e94c02ea887ec7ee9ffb972fded5e6cd1719054", 0x67}], 0x2}, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000440)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 4m58.612429971s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff00000000020000000600000000000000000000090300000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r8, &(0x7f0000000000)=""/178, 0xb2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r5) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xe000000, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x800, 0x0) 4m56.893508436s ago: executing program 3 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107800000000006301ac00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m56.748096146s ago: executing program 32 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107800000000006301ac00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 58.960681181s ago: executing program 2 (id=1627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0x0, 0xfff1}, {0x1, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0xfff5, 0x81}, 0x800) 58.742365649s ago: executing program 2 (id=1631): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100}, 0x50) 58.7421017s ago: executing program 2 (id=1632): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) socket$inet6(0xa, 0x400000000001, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xb3324d85a3be24c5}) r5 = dup3(r4, r2, 0x80000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000000)={0x2014}) r10 = syz_open_procfs(0x0, &(0x7f0000001100)='fdinfo/4\x00') pread64(r10, &(0x7f0000002140)=""/17, 0x11, 0x0) r11 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x65, 0x36, 0x65, 0x61, 0x62, 0x35, 0x61, 0x39, 0x65, 0x34, 0x61, 0x64, 0x30, 0x39, 0x30, 0x64]}, &(0x7f0000000340)={0x0, "30a549e6bfcc1328002c76fc8c7ff63a2ad2bf2c54f1488c7de053ecf4a09541680f0acd928ffddf4a8373439e16361f55807489b637db204d085fdcac57860d", 0x1a}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r11, r11) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 58.352236571s ago: executing program 2 (id=1633): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x31, 0x4, 0x3, 0x1d, 0xf8, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, {[@lsrr={0x83, 0x27, 0xa2, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x9, [{@private=0xa010102}]}, @noop, @timestamp_prespec={0x44, 0x14, 0xd0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@loopback, 0x3c0b65cb}]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x7, 0x5, "a74d95"}, {0x5, 0xc, "70b4cf7095e81600363f"}, {0x2, 0x7, "e5250a1224"}, {0x2, 0x4, "1d90"}, {0x1, 0xa, "dae638b0b2d2bd19"}, {0x3, 0xa, "5feef892f1ab1407"}]}, @noop, @ssrr={0x89, 0x23, 0xaa, [@multicast1, @initdev={0xac, 0x1e, 0x6, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @remote, @empty, @multicast1, @remote]}, @end, @lsrr={0x83, 0x7, 0x61, [@rand_addr=0x64010102]}]}}, @payload_mcast={{{{{{0x34, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1, 0x6, 0x2, 0x0, 0x4e24, 0x4e22}, 0x2}, 0x2, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x40}}, 0x0) 58.320198118s ago: executing program 2 (id=1634): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000090d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6ac09000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) (fail_nth: 6) 58.242344701s ago: executing program 2 (id=1635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="a4841f4a", 0x4}, {&(0x7f0000000580)="e750", 0x2}], 0x3) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDSKBLED(r0, 0x4b65, 0x323) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (async) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="a4841f4a", 0x4}, {&(0x7f0000000580)="e750", 0x2}], 0x3) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x323) (async) 42.661806231s ago: executing program 33 (id=1635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="a4841f4a", 0x4}, {&(0x7f0000000580)="e750", 0x2}], 0x3) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDSKBLED(r0, 0x4b65, 0x323) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (async) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="a4841f4a", 0x4}, {&(0x7f0000000580)="e750", 0x2}], 0x3) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x323) (async) 4.341454004s ago: executing program 1 (id=1981): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @empty, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x4, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x20) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}], 0x4}}], 0x2, 0x60, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}]]}, 0x2c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x208002, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344}, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r11, 0x800, 0x55007}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344}, 0x1, 0x0) write$tun(r9, &(0x7f00000018c0)={@void, @void, @ipv6=@tcp={0xa, 0x6, "03eb81", 0x321, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x10}, {[@fragment={0x87, 0x0, 0x2, 0x1, 0x0, 0xa, 0x68}, @srh={0x33, 0x12, 0x4, 0x9, 0x8, 0x10, 0xd, [@empty, @private2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, @mcast2]}, @srh={0x2b, 0xe, 0x4, 0x7, 0xe4, 0x38, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1]}, @hopopts={0x54323c1f20e3a388, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x3b, 0x0, 0xff, 0x1, 0x0, 0x7, 0x68}, @hopopts={0x2c, 0x10, '\x00', [@pad1, @generic={0x6, 0x58, "f219334c87713c2c13d03e91e1a46845508681515e8d7ec3fe036861db7af39cc109222c5ecf4a8b37aab5796753aedd5e0d238538606158d84bc5968d7464a792ea0162c6d10d11a5ce67e79b8ca2c49c794dd4c07a7a50"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x8, [0x6]}}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0x32, 0x6, 0x0, 0x2, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0xa}, @private1]}, @srh={0x9a, 0x2, 0x4, 0x1, 0x6, 0x0, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x2, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}], {{0x4e21, 0x4e21, r10, r13, 0x1, 0x0, 0x19, 0x1, 0x3, 0x0, 0x5, {[@generic={0x13, 0x10, "b66c79674669ca7908d3f1bceead"}, @generic={0x1c, 0x5, "3c52db"}, @window={0x3, 0x3, 0x3}, @mptcp=@ack={0x1e, 0xa, 0xb, 0x4, "5411207e7a11"}, @mss={0x2, 0x4, 0x3}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x7, 0x7, 0x5af9}, @timestamp={0x8, 0xa, 0x8, 0x72900000}, @nop]}}, {"119629b3e8d5ef4d065628d05f83f9e85508e2c43d42fabecaace1bd4a73a06e4f26c1868f7584e8d930fade728296354b33de32cf67ee47bd82e7c4417e36268fb97257d1db853d856d3b62ffab1c1b9f5e01f6c81d28c600133c3b702e76a049e7dfcef0f45b671a293e2c901be16dd3281fdbbff70a83ce52ab21672de5541a53465d2e1751e3660213286f927b1fc99db48f28034e96cc9d7a2c86"}}}}}, 0x349) 4.337065468s ago: executing program 0 (id=1982): pipe2(&(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30}, 0x30) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)) unlink(&(0x7f00000001c0)='./control/file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3.451692774s ago: executing program 1 (id=1984): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000002060500000000000000000005000006050004000000000005000500031b00000900020073797a32000000000500010007000000100003006269746d61703a706f727400c44164e4eba055c912bbae8aebad0cbc3b5c92619dfd7832a60584dedb1874cb45a16580011f07d669c8dd377be5be01c63e92e1ca9c48ae4cda920f8f00ec18db038d3c0eb8b163f365a5fc1e607da1edc8d185f0dcde3dbd691b8a663b5bead88b866233a861fcb9f7629158b77530342a02acf6248b02d5054e3dc4880b6f7d"], 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000040) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xe4, 0x11, 0x148, 0x0, 0x10, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xc4, 0xe4, 0x1c, {}, [@common=@unspec=@cluster={{0x30}, {0xfffffffd}}, @inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'vcan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2a4) 3.449157285s ago: executing program 1 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x25, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14010000000101040000000000000000020000001c001880080001400000000208000240000000000800034000000000240001801400018008000100e000000108000200e00000010c0002800500010000000000040016"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000fc}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="344f9731613aa398c53c873ec378480d475c95b76984c37f51ae9cee64a86a4bf362c62f4df0ea4c34d4943727e92dedde61b8a9f3b8f818d1757564ac8030b88d41646a28231058b89dabd2681b5fbc2f6b5aba3d9c9d95ecf35d1329d6be7ca6bcc29e7d9cf81424a6a79687134ba1168460d69a388b9d95d5a1cef3a3d5074cdf87a85cf636d4e7b8269c58bb86dcd26dd568c6cbc1b25f89ff57231668b5ac418ecc74bb44ac317f32114ad25a957ab6d07ac8", 0xb5}, {&(0x7f0000000400)="c02f87ec7c72bd3e645f03e4314f94f7c92281bd5b6d634027fd99ce3ae9c0aaede3f2bb63abddf226c9f86d11455fa0944bcc99078120c02c2e0bd3fcb0950f8654f69d6b8ea844", 0x48}, {&(0x7f0000000640)="2f50447e26fed1b97e7103f07279fe39096b2a7ddfb40b9e4e521ce7469289886fbccf4a05c810f08ab01092055194e516ecbb1460142f2f9133ab4d3f0f06f10a5d34cd71c28617ce13d2a4915a9347e5c1ec9ef117a0e5a32573fefa19914b9f682499ebb738565f5ee36b94763a48af3faf010e4ff9f3bf8da91a645bdab616c2b327bf0efb07d013cb00f6f9e0d81498ab29b7bfc703df9f5f98f3f8af79248ffdb3cb7c40fae43d48b10655cc768d07bc83f0234d45a813db75a73a24a783508e240d22125f18279e5a11ae096242d80b2bf670fab503c5247b833f29d8bf03e1774d237e38446376cbd69ba3a6", 0xf0}, {&(0x7f0000000500)="42b5c265fede1ae36bbb62f1d2c5d39285283b6ec819294eeef4d540eb74cb71aedc5bf7b29469ce9fa2617e2e1add2279ef3828acf6bb2a2661277d8a84015845c1d54638e4c1737359d25c73e32595a4c761f9f610747364d18babf38c45f996f4d3", 0x63}, {&(0x7f0000000740)="00cb87d8e1f1c4a91f6485642e9fdfa81c6d814557ae49b5232ba3eb9a5326bb08c92e5ef73d6996a02afb36e2e3311ba9bb97f9c61483a9cfbaccf934835fb45144848e385e4b0037a904e2556a9a6cfbff1cc85f536ab6c02c939fbed95324bbfbc558c2176bf32a00d1a796cbe3cdbc5e7d", 0x73}], 0x5}, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000940)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000000100000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.291403444s ago: executing program 0 (id=1989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000440)=""/257, 0x101}], 0x1, 0x20001, 0xc) io_uring_setup(0x2e34, &(0x7f0000000180)) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = dup(r7) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x22008, &(0x7f0000000340)=ANY=[@ANYBLOB="740300000000000000009c216166642c723f", @ANYRESHEX=r9, @ANYBLOB="001200edff0000", @ANYRES16=0x0, @ANYBLOB=',cache=mmap,k']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) 2.588579927s ago: executing program 0 (id=1993): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000004700)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0), 0x83000, &(0x7f00000000c0)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="bb67b640f83e2ce3daa0a9eb9c79d7482f3b426d4709242b6b72e718c9465280c6998121fb15008a21dc9a21f0d0132172f301f0a4f9893750dc2e948cf4dedc70c66b15f2a4fef283beb034a9ced58de94a6971827768295ac0f7193ea6adc3d19c83d1e93ab700579439e3caef152ba16dc9addd1bdcb1715115b4b8628fd88901af939decd76ce3fb65cc79aee4c2", 0x90}, {&(0x7f0000000240)="6ac63c75dc75d9b852cdaa4badfc62b7c29731e25fe1472a534d86e2c5dbf1da7316326b29f5019b343369b4b1559ef9c4579130d34063ac662ac62242feea5ff176a0c02d8ab3f542afd3c18304cc514f44f4dedf591ac7f9c7e156", 0x5c}, {&(0x7f00000004c0)="b4eea69ac495a7f712fde1ed40e369f5d6a4e1be6a768c2d02ec624535d0a2591cc358320fa12d9976cdcb6aea77946cfcbde18d3c75d36931ce2c1ae7b81aace9eb480e626ee9ab2c7e4fac5e97af131acc594ed0bd0467520eaad6845275344c9fcd2cd2d54415bd874907a86a95293dc52aa9abc09e210131aeca693e436d8efa854cd846c92ed6328c379e400b423fd7ecf3722dfaabe1a4c902e133c5fbeee62755449e6159dd3bdf981f30c7b8df25912a1a564bb9c01fcf3d10b9bc349b38a3c1322a212deb6f62f40ebcc0d267922e51efd94800bc7b80eae6b2bd75f1fc74fc0e014556a352a10775d96c", 0xef}, {&(0x7f0000000680)="ab95bf1546408f25acf039a9e76d0066e00bcb9c44b58597825ff59a1bdc4da575fa65fac0bdb01131b023f960043af7e2b60e1a0b46df751b909c64e9c5a0ce128eeb3afb3b7a776bc3037f9d63663c4fd2718f0dd02cfc72203bda20b24b34836966cba345d842abdc7749ff3719848c9fcd5d4f", 0x75}, {&(0x7f0000000180)="59226640ba2b7545def910ac76ee015900204fd7a6d79684cf4ed417338539ca78014a2fd8c48f8a1086d6fa226450c603a0", 0x32}], 0x5}, 0x4800) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x8, {{0x7, 0xdc5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x1}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0xfffffff7}) fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) 2.470677988s ago: executing program 0 (id=1995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000300000008000300", @ANYRES32=r4], 0x24}}, 0x0) 2.470296404s ago: executing program 1 (id=1996): r0 = syz_socket_connect_nvme_tcp() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, 0x0, 0x10040040) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) shutdown(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r5, 0xb}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x100000000, 0x0, 0x2, r5, 0x1f}) syz_emit_ethernet(0x3a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 2.310329212s ago: executing program 1 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 2.310228177s ago: executing program 1 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='mm_page_free_batched\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) 2.201306754s ago: executing program 0 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0xdca, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x7}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x1}}]}, 0x144}}, 0x20000000) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000003080101000000000000000006000240000000000c0004800800014000000000"], 0x30}}, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x46c8bbc28c944305}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x1f8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe5b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x45}, {0x6, 0x11, 0x3a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x6}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004804) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x1, 0x5}) (async) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x8, "8000"}, 0x0, 0x2, {}, 0x20800}) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x103040, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r6, 0x1, 0xffffffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}]}, 0x64}}, 0x0) 2.141927123s ago: executing program 4 (id=2002): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x799283, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x18) sendto$inet6(r1, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @empty, 0xd}, 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x83, 0x78, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x17fb, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0xffffffffffffff80) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.140872806s ago: executing program 0 (id=2003): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x8000) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000000c0), 0x7ffffffffffff4c, 0x1) 1.870540171s ago: executing program 4 (id=2004): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000040"], 0x54}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00030000f461a81015f256cc06f0a0a7438cd5ab7a0bc7ed007b89d60311d140870e9ecb3600e81a32dca9f44b4e5f60aab633e8d90b7341ce31e279af9b6639e95e7212f15c74cffc013dbb6b80aef2437d5aad1af400"/96, @ANYRES16=r9, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) write$snddsp(r1, &(0x7f0000000000)="56164411dee2e34e97e59a1dd8746f6348cfe9fe61f3b9562b95ee0b05c330b77b4a7a3c746591844a08c13ac9fc9b1809b639090e982be261b4e7df928e7211c171077a7c382824c841a7630c4553014c6311c8c347286dcb612675e5dfe0e05ba5482a921512e75051c25fcaa1ff8e2fa4b743569372249c47ec08d13916d5d8acd986f92a4106e15d82d1e807319fccc51f5dd1dc8662e8633586", 0x9c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r11 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r11) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.301920158s ago: executing program 5 (id=2006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x200f000, 0x0, 0x3000000}}) 1.301703928s ago: executing program 5 (id=2007): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee2, 0x100, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x440) r5 = dup3(r4, r0, 0x0) ioctl$TCSETSW2(r5, 0x5437, 0x0) 1.121713836s ago: executing program 5 (id=2008): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) lseek(r1, 0x1, 0x0) madvise(&(0x7f00002da000/0x2000)=nil, 0x2000, 0x65) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001f00)=0xfffffeff, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYBLOB="17b47098f58ecf5388c499caa6cc2081acee688e8891d6615bbe032c3bb6adfbb6209763e881c8aaf19bcf8e6a060921da4b3ca3b45428544ad9e438e741d9f3d7bad65a0168ef1337ef2e23dcad84c76f756ebc5204881765cca782c4db8af7ca25a2b65583f3a2c6b5c4d261e190f697081963919de8036a7e18045976f22e36072351a61d786c0f7695e216425572cbf4d6cc8ec076ee1963793bfbb680a2d98c9619a60816f5885cf9413e9fbd33219f313d0c807ef2a46b865416a9b4447fe44799d4c02b95d06a84edf1", @ANYBLOB="000008000300"/18, @ANYRESOCT=0x0, @ANYBLOB="0a000600080211000401000054be8d372a1e3e87ba200527e2449c4d855af7350f0b51daa258d356645e97eb35aec813f1c62808a45af4a910bbbc84edb865841de5bfed31953f5aef1c3eb1835b8a1180a2a9dc76568c618869a4593cc896360909faa7278ba99a7b18dc912a4896a5d92f"], 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000000) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x40000, 0x95) renameat2(r5, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000240)='./file1\x00', 0x5) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f00000004c0)={0x2, @sliced={0x0, [0x1000, 0x8, 0x8, 0x7a, 0x4, 0x6f4b, 0x7, 0x7f, 0xcdb0, 0x6, 0x0, 0x5, 0x831c, 0x2, 0x401, 0x284, 0x101, 0x1a, 0x3, 0x5c, 0x8, 0x800, 0xfd8, 0x1, 0x8000, 0x7, 0x6f, 0x23, 0x6, 0x550f, 0xbf1c, 0xc, 0x9, 0x5, 0x6, 0xa, 0x6, 0x7ff, 0x5, 0x9, 0x9, 0x6, 0xc712, 0xfce, 0x9, 0x7, 0x6, 0xfff8], 0x5}}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [], {0x4, 0x4}, [], {0x10, 0x6}, {0x20, 0x7}}, 0x24, 0x3) r9 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x48802, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f0000000080)=0x23d, 0x4) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000080)=0x1) close(r7) 1.001954576s ago: executing program 4 (id=2009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3e8, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x2c}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 871.751769ms ago: executing program 4 (id=2010): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x26, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @generic={0x3, 0x1, 0x4, 0x0, 0x6}, @ringbuf_query, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xae9, 0x89, &(0x7f0000000240)=""/137, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x2, 0x3, 0x3, 0xc}, {0x1, 0x5, 0x0, 0x3}, {0x3, 0x1, 0x5, 0x1}, {0x0, 0x3, 0x8, 0xa}, {0x4, 0x1, 0xe, 0x8}], 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xd1, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000800)=0x6, 0x4) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000840)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1ac, r7, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xd}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x47, 0x5b, "8317157a7548fe1ad65cb72d0f55e91c4328957920f063b29d637a625cea94f25fc48de3375ad02c067124586f19702592fc5b09299647b69b2e5d367fe6d5e94f7e3b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "48597c51c94407f083b5cae761c09906e683c34e856c705e88e7a5417251d642f150ee0f4b49256c314a6c09b152e1ea83081761528234c3787f94ecd1920a2c4daa36c160e8ca714491d95e22649958368c6dd839dea51722e8a2fb5ec41a8614c8f97c9af9a73d57dfa897f4db32c405"}, @NL80211_ATTR_FRAME_MATCH={0x96, 0x5b, "42684dbbd67928fe0ec3d848e037a9fe8078cb7a9d9d07f41d9176a971d1aeb68fc7942f856484e9d3ae67319837a1fdb85a25b8affb1cddc8528724f2550f43c0d087c28ff6d00d8a9128d5f10c3864545c18a5b6dae55287f2d7bd4fe9205f6a57dfd77d6567e2c5c041b7461dfb579263064dd2ec6047e296247c1655d10accf4bdf683d8e34868aea10003a500696c85"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) write(r6, &(0x7f0000000c80)="07fe2c496ec47a8311af608edf9c4f49c095d6725755cf0591a986336db770950e36f5e70510a3e7600f9d22e25d3d3915308a10f6ffc59ba4b6ad439090b9c57e1250cb190eabb89df9e9140acb6ee181bff97933d5629123d7451ef46da1ca1f65bbab6d266a9d769ec45730d445fe7c51a5b4e190c17648dadc08f86467ceddf0", 0x82) r8 = gettid() r9 = openat$vnet(0xffffff9c, &(0x7f0000000d40), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000d80)=0x100000000) sendto$packet(0xffffffffffffffff, &(0x7f0000000dc0)="f70a5a3c5488dc3f047f280307d597128fbb93eb3e43e5fadbe2cfbaaf1c675f7d28174802bfd7c524b2b126d83766f1f0b50650826e6b84f030b61ab5f00ff12be77d8abed8c0fb1a1f1e3dcb1042a02e1399f69c47cce0189c01edd31699ed005cd96d3571db5eafa6b4e20808e49fae4b565bed8d23f16d3a7c6ff78eeeec", 0x80, 0x80e0, &(0x7f0000000e40)={0x11, 0x16, r4, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000e80)=0xcc8, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c5}, 0x8084) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r11, 0xc0186416, &(0x7f0000001000)={0xfff, 0x721, 0x0, 0x101, 0x1}) r12 = dup2(r1, r11) sendmsg$nl_route(r12, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@ipv6_newroute={0x70, 0x18, 0x200, 0x70bd2c, 0x25dfdbfb, {0xa, 0x80, 0x10, 0x8, 0x0, 0x2, 0xc8, 0x0, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @private=0xa010102}}, @RTA_METRICS={0x30, 0x8, 0x0, 0x1, "f37d8730027f9bd7b6a70542ad1f7b0f1ab9e3d1ea6db419e1f549f6b735c7e9a52823d2f54f8adb4cc8fe6d"}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x36b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xb1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x5}, {0x1, 0x1}, {0x4}, {0x60, 0x1}, {0x1b}, {0xa}, {0x7e}, {0x30}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x12}, {0x1, 0x1}, {0x30, 0x1}, {0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8cff}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) openat$tun(0xffffff9c, &(0x7f00000012c0), 0x44202, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000001300)) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001340)={{r1}, "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"}) syz_clone3(&(0x7f0000002540)={0x910000, &(0x7f0000002340), &(0x7f0000002380), &(0x7f00000023c0), {0x2a}, &(0x7f0000002400)=""/20, 0x14, &(0x7f0000002440)=""/115, &(0x7f00000024c0)=[r8, 0x0], 0x2}, 0x58) 242.001452ms ago: executing program 5 (id=2011): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0xf1ff) 241.665017ms ago: executing program 5 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@can={0xc, {{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e97b269e825b201f"}}}}, 0x0) add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4089, 0xff9) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r2 = gettid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xe, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$rds(0x15, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 161.744378ms ago: executing program 5 (id=2013): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000060000000b000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.007331ms ago: executing program 4 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0xffffffff, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 0s ago: executing program 4 (id=2015): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = eventfd(0x200002) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r5, 0x5, 0x0, r3}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x10005, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r9, 0x0, 0xbfd1, 0x0) r10 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r10, 0xc02c5638, &(0x7f00000001c0)={0x8, 0x3, 0x10}) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000280)={0x2, 0x80000000}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) kernel console output (not intermixed with test programs): :726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.104313][ T40] audit: type=1326 audit(1746598004.958:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.111299][ T40] audit: type=1326 audit(1746598004.958:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.118050][ T40] audit: type=1326 audit(1746598004.958:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.126535][ T40] audit: type=1326 audit(1746598004.958:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.133634][ T40] audit: type=1326 audit(1746598004.958:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.140384][ T40] audit: type=1326 audit(1746598004.958:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.147407][ T40] audit: type=1326 audit(1746598004.958:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.154413][ T40] audit: type=1326 audit(1746598004.958:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.161340][ T40] audit: type=1326 audit(1746598004.958:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.4.1524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x50000 [ 276.205104][T11730] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1525'. [ 276.349972][T11735] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 276.353399][T11735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'. [ 276.375885][T11735] geneve0: entered promiscuous mode [ 276.380089][T11735] team0: Port device geneve0 added [ 276.760705][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 276.832670][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 276.837838][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 276.900437][T11749] nvme_fabrics: missing parameter 'transport=%s' [ 276.902683][T11749] nvme_fabrics: missing parameter 'nqn=%s' [ 277.033318][T11748] lo: left promiscuous mode [ 277.062220][T11753] FAULT_INJECTION: forcing a failure. [ 277.062220][T11753] name failslab, interval 1, probability 0, space 0, times 0 [ 277.066555][T11753] CPU: 0 UID: 0 PID: 11753 Comm: syz.2.1532 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 277.066589][T11753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.066599][T11753] Call Trace: [ 277.066605][T11753] [ 277.066611][T11753] dump_stack_lvl+0x16c/0x1f0 [ 277.066636][T11753] should_fail_ex+0x512/0x640 [ 277.066653][T11753] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 277.066666][T11753] should_failslab+0xc2/0x120 [ 277.066678][T11753] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 277.066689][T11753] ? __kernfs_new_node+0xd2/0x8a0 [ 277.066707][T11753] __kernfs_new_node+0xd2/0x8a0 [ 277.066724][T11753] ? __pfx___kernfs_new_node+0x10/0x10 [ 277.066742][T11753] ? find_held_lock+0x2b/0x80 [ 277.066757][T11753] ? kernfs_root+0xee/0x2a0 [ 277.066768][T11753] kernfs_new_node+0x13c/0x1e0 [ 277.066781][T11753] __kernfs_create_file+0x53/0x350 [ 277.066796][T11753] sysfs_add_file_mode_ns+0x207/0x3c0 [ 277.066814][T11753] internal_create_group+0x578/0xf30 [ 277.066827][T11753] ? __pfx_internal_create_group+0x10/0x10 [ 277.066841][T11753] sysfs_slab_add+0x1a3/0x1e0 [ 277.066852][T11753] do_kmem_cache_create+0x530/0x730 [ 277.066866][T11753] __kmem_cache_create_args+0x225/0x390 [ 277.066876][T11753] ? p9_client_create+0xe16/0x11c0 [ 277.066892][T11753] p9_client_create+0xec0/0x11c0 [ 277.066909][T11753] ? __pfx_p9_client_create+0x10/0x10 [ 277.066925][T11753] ? rcu_is_watching+0x12/0xc0 [ 277.066937][T11753] ? lockdep_init_map_type+0x5c/0x280 [ 277.066950][T11753] ? __raw_spin_lock_init+0x3a/0x110 [ 277.066967][T11753] v9fs_session_init+0x1f7/0x1a80 [ 277.066983][T11753] ? __pfx_v9fs_session_init+0x10/0x10 [ 277.067004][T11753] v9fs_mount+0xc5/0xa30 [ 277.067015][T11753] ? rcu_is_watching+0x12/0xc0 [ 277.067024][T11753] ? __pfx_v9fs_mount+0x10/0x10 [ 277.067036][T11753] ? apparmor_capable+0x114/0x1d0 [ 277.067047][T11753] ? __pfx_v9fs_mount+0x10/0x10 [ 277.067058][T11753] legacy_get_tree+0x109/0x220 [ 277.067076][T11753] vfs_get_tree+0x8b/0x340 [ 277.067089][T11753] path_mount+0x14d4/0x1f20 [ 277.067100][T11753] ? kmem_cache_free+0x2d4/0x4d0 [ 277.067110][T11753] ? __pfx_path_mount+0x10/0x10 [ 277.067122][T11753] ? putname+0x154/0x1a0 [ 277.067134][T11753] __ia32_sys_mount+0x28b/0x310 [ 277.067145][T11753] ? __pfx___ia32_sys_mount+0x10/0x10 [ 277.067157][T11753] ? rcu_is_watching+0x12/0xc0 [ 277.067167][T11753] __do_fast_syscall_32+0x73/0x120 [ 277.067182][T11753] do_fast_syscall_32+0x32/0x80 [ 277.067196][T11753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.067208][T11753] RIP: 0023:0xf710e579 [ 277.067216][T11753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 277.067226][T11753] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 277.067235][T11753] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180 [ 277.067241][T11753] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080000680 [ 277.067247][T11753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.067252][T11753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 277.067258][T11753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.067270][T11753] [ 277.068668][T11753] SLUB: Unable to add cache 9p-fcall-cache-15 to sysfs [ 277.342355][T11757] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 278.554784][T11782] ALSA: mixer_oss: invalid OSS volume 'POX' [ 278.557440][T11782] ALSA: mixer_oss: invalid OSS volume 'ôü½½~÷T{fØF?:EAKeR' [ 279.041998][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 279.136985][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.139398][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.141785][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.144154][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.146637][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.148954][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.153985][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.156386][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.158774][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.162120][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.164751][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.167151][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.169602][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.173520][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.175997][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.178447][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.181384][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.183870][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.186241][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.188686][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.192551][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.194987][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.197433][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.199867][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.202929][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.205379][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.207831][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.210238][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.214030][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.216945][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.219498][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.222251][ T9] hid-generic 0001:0000:000F.000E: unknown main item tag 0x0 [ 279.237906][ T9] hid-generic 0001:0000:000F.000E: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 279.311005][ T63] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 279.470668][ T5991] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 279.474893][ T63] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.479324][ T63] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.482726][ T63] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.485827][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.493421][T11788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.503912][ T63] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.645586][ T5991] usb 9-1: config 0 has no interfaces? [ 279.647838][ T5991] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 279.651001][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.657187][ T5991] usb 9-1: config 0 descriptor?? [ 279.706397][ T1464] usb 7-1: USB disconnect, device number 21 [ 279.895858][ T5996] usb 9-1: USB disconnect, device number 12 [ 280.091996][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 280.102144][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 280.974838][T11842] FAULT_INJECTION: forcing a failure. [ 280.974838][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 281.004586][T11842] CPU: 3 UID: 0 PID: 11842 Comm: syz.1.1557 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 281.004603][T11842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.004622][T11842] Call Trace: [ 281.004626][T11842] [ 281.004639][T11842] dump_stack_lvl+0x16c/0x1f0 [ 281.004658][T11842] should_fail_ex+0x512/0x640 [ 281.004672][T11842] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 281.004685][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004696][T11842] should_failslab+0xc2/0x120 [ 281.004709][T11842] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 281.004719][T11842] ? ceph_msg_new2+0x2a1/0x4f0 [ 281.004728][T11842] ? ceph_msg_new2+0x3e/0x4f0 [ 281.004738][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004750][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004761][T11842] ceph_msg_new2+0x3e/0x4f0 [ 281.004772][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004783][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004794][T11842] msgpool_alloc+0xa8/0x1c0 [ 281.004805][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004817][T11842] mempool_init_node+0x31d/0x760 [ 281.004836][T11842] ? __pfx_msgpool_free+0x10/0x10 [ 281.004848][T11842] mempool_create_node_noprof+0xe9/0x1b0 [ 281.004863][T11842] ? __pfx_msgpool_alloc+0x10/0x10 [ 281.004877][T11842] ceph_msgpool_init+0xdc/0x1a0 [ 281.004891][T11842] ceph_osdc_init+0x4f1/0x9e0 [ 281.004902][T11842] ceph_create_client+0x27e/0x370 [ 281.004912][T11842] ceph_get_tree+0x1ac/0x1ec0 [ 281.004924][T11842] ? security_capable+0x7e/0x260 [ 281.004935][T11842] vfs_get_tree+0x8b/0x340 [ 281.004949][T11842] vfs_cmd_create+0xd7/0x2a0 [ 281.004960][T11842] __do_sys_fsconfig+0x7b8/0xbe0 [ 281.004972][T11842] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 281.004982][T11842] ? fput+0x70/0xf0 [ 281.004996][T11842] ? rcu_is_watching+0x12/0xc0 [ 281.005008][T11842] __do_fast_syscall_32+0x73/0x120 [ 281.005023][T11842] do_fast_syscall_32+0x32/0x80 [ 281.005036][T11842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.005053][T11842] RIP: 0023:0xf709e579 [ 281.005061][T11842] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.005071][T11842] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 281.005081][T11842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 281.005087][T11842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.005093][T11842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.005098][T11842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.005103][T11842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.005116][T11842] [ 281.458384][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 281.694966][T11864] FAULT_INJECTION: forcing a failure. [ 281.694966][T11864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.699507][T11864] CPU: 1 UID: 0 PID: 11864 Comm: syz.2.1561 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 281.699533][T11864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.699540][T11864] Call Trace: [ 281.699544][T11864] [ 281.699549][T11864] dump_stack_lvl+0x16c/0x1f0 [ 281.699567][T11864] should_fail_ex+0x512/0x640 [ 281.699583][T11864] should_fail_alloc_page+0xe7/0x130 [ 281.699596][T11864] prepare_alloc_pages+0x3c2/0x610 [ 281.699611][T11864] ? rcu_is_watching+0x12/0xc0 [ 281.699622][T11864] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 281.699635][T11864] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.699647][T11864] ? finish_task_switch.isra.0+0x221/0xc10 [ 281.699658][T11864] ? rcu_is_watching+0x12/0xc0 [ 281.699667][T11864] ? trace_sched_exit_tp+0xde/0x130 [ 281.699678][T11864] ? __schedule+0x1186/0x5de0 [ 281.699690][T11864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.699704][T11864] ? find_held_lock+0x2b/0x80 [ 281.699718][T11864] ? __lock_acquire+0xaa4/0x1ba0 [ 281.699735][T11864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.699749][T11864] ? policy_nodemask+0xea/0x4e0 [ 281.699762][T11864] alloc_pages_mpol+0x1fb/0x550 [ 281.699774][T11864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 281.699785][T11864] ? __page_table_check_ptes_set+0x1ae/0x420 [ 281.699796][T11864] ? find_held_lock+0x2b/0x80 [ 281.699808][T11864] alloc_pages_noprof+0x131/0x390 [ 281.699819][T11864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 281.699828][T11864] get_free_pages_noprof+0xc/0x40 [ 281.699840][T11864] kasan_populate_vmalloc_pte+0x2d/0x160 [ 281.699850][T11864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 281.699859][T11864] __apply_to_page_range+0x617/0xd60 [ 281.699876][T11864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 281.699888][T11864] ? __pfx___apply_to_page_range+0x10/0x10 [ 281.699902][T11864] ? alloc_vmap_area+0x872/0x2970 [ 281.699919][T11864] alloc_vmap_area+0x919/0x2970 [ 281.699938][T11864] ? __pfx_alloc_vmap_area+0x10/0x10 [ 281.699955][T11864] __get_vm_area_node+0x1a7/0x300 [ 281.699972][T11864] vmap+0x159/0x350 [ 281.699986][T11864] ? xdp_umem_create+0xde7/0x1270 [ 281.699997][T11864] ? trace_kmalloc+0x2b/0xd0 [ 281.700010][T11864] ? __pfx_vmap+0x10/0x10 [ 281.700024][T11864] ? xdp_umem_create+0x781/0x1270 [ 281.700038][T11864] xdp_umem_create+0xde7/0x1270 [ 281.700053][T11864] xsk_setsockopt+0x5b2/0x840 [ 281.700065][T11864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.700075][T11864] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.700090][T11864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.700101][T11864] do_sock_setsockopt+0x221/0x470 [ 281.700114][T11864] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 281.700135][T11864] __sys_setsockopt+0x120/0x1a0 [ 281.700148][T11864] __ia32_sys_setsockopt+0xbc/0x160 [ 281.700158][T11864] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.700170][T11864] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 281.700183][T11864] __do_fast_syscall_32+0x73/0x120 [ 281.700198][T11864] do_fast_syscall_32+0x32/0x80 [ 281.700212][T11864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.700224][T11864] RIP: 0023:0xf710e579 [ 281.700232][T11864] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.700241][T11864] RSP: 002b:00000000f50bc55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 281.700251][T11864] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 281.700257][T11864] RDX: 0000000000000004 RSI: 00000000800000c0 RDI: 0000000000000020 [ 281.700262][T11864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.700268][T11864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.700273][T11864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.700286][T11864] [ 281.904740][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 281.908219][T11866] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1563'. [ 282.361846][ T40] kauditd_printk_skb: 18397 callbacks suppressed [ 282.361859][ T40] audit: type=1800 audit(1746598011.218:19133): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1564" name="file0" dev="overlay" ino=2249 res=0 errno=0 [ 282.542313][T11875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1565'. [ 282.766237][T11882] netlink: 'syz.2.1568': attribute type 6 has an invalid length. [ 282.845904][T11885] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1569'. [ 282.863522][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 282.873020][T11885] 9pnet: Unknown protocol version 9p2000.uâŒë6~¨0tr­]Å=åç杖šÀEh[ØÕtñºþ¶tèæ$¸Ù‹ÅùßÖÇYŽým%GÙ0­‘ÀêÆ\;ÁJ·½31Qš¿0 [ 283.120159][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 283.134246][ T40] audit: type=1804 audit(1746598011.998:19134): pid=11890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1570" name="/newroot/418/bus" dev="tmpfs" ino=2241 res=1 errno=0 [ 283.320719][ T1464] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 283.491075][ T1464] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 283.494572][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.497504][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.506825][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.509841][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.515288][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.520756][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.523702][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.528909][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.536189][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.540273][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.545792][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.549320][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.558347][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.563708][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.567246][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.570276][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.576599][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.580304][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.611549][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.614557][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.618073][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.631220][ T1464] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 283.634289][ T1464] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.637766][ T1464] usb 5-1: config 64 interface 0 has no altsetting 0 [ 283.652136][ T1464] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 283.655068][ T1464] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 283.657726][ T1464] usb 5-1: Product: syz [ 283.659187][ T1464] usb 5-1: Manufacturer: syz [ 283.674053][ T1464] usb 5-1: SerialNumber: syz [ 283.696904][ T1464] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 283.971789][T11896] usb 5-1: USB disconnect, device number 23 [ 283.979082][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 283.982039][T11896] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 284.018532][T11900] lo: left promiscuous mode [ 284.020531][T11900] tunl0: left promiscuous mode [ 284.022705][T11900] gre0: left promiscuous mode [ 284.025686][T11900] erspan0: left promiscuous mode [ 284.027638][T11900] ip_vti0: left promiscuous mode [ 284.032064][T11900] ip6_vti0: left promiscuous mode [ 284.034031][T11900] sit0: left promiscuous mode [ 284.035882][T11900] ip6tnl0: left promiscuous mode [ 284.037700][T11900] ip6gre0: left promiscuous mode [ 284.039855][T11900] syz_tun: left promiscuous mode [ 284.043131][T11900] ip6gretap0: left promiscuous mode [ 284.045071][T11900] bridge0: left promiscuous mode [ 284.047025][T11900] : left promiscuous mode [ 284.048954][T11900] 8021q: adding VLAN 0 to HW filter on device  [ 284.051960][T11900] team0: left promiscuous mode [ 284.053672][T11900] geneve0: left promiscuous mode [ 284.055917][T11900] dummy0: left promiscuous mode [ 284.058050][T11900] nlmon0: left promiscuous mode [ 284.060361][T11900] caif0: left promiscuous mode [ 284.062978][T11900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.318286][T11907] bridge5: entered promiscuous mode [ 284.320151][T11907] bridge5: entered allmulticast mode [ 284.666195][ T40] audit: type=1800 audit(1746598013.528:19135): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1579" name="file0" dev="overlay" ino=2267 res=0 errno=0 [ 284.712111][T11916] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 284.719244][T11916] team0: left promiscuous mode [ 284.723664][T11916] team_slave_0: left promiscuous mode [ 284.726454][T11916] team_slave_1: left promiscuous mode [ 284.729304][T11916] geneve0: left promiscuous mode [ 284.740204][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.747769][T11916] team0: entered promiscuous mode [ 284.749850][T11916] team_slave_0: entered promiscuous mode [ 284.752610][T11916] team_slave_1: entered promiscuous mode [ 284.755313][T11916] geneve0: entered promiscuous mode [ 284.759094][T11916] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.038704][T11931] tipc: Started in network mode [ 285.040345][T11931] tipc: Node identity 4, cluster identity 4711 [ 285.042575][T11931] tipc: Node number set to 4 [ 285.077246][T11933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.228713][ T40] audit: type=1326 audit(1746598014.088:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.239671][ T40] audit: type=1326 audit(1746598014.098:19137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.246737][ T40] audit: type=1326 audit(1746598014.098:19138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.253633][ T40] audit: type=1326 audit(1746598014.108:19139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.260450][ T40] audit: type=1326 audit(1746598014.108:19140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.268209][ T40] audit: type=1326 audit(1746598014.108:19141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.275201][ T40] audit: type=1326 audit(1746598014.108:19142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 285.450247][T11947] XFS (nullb0): Invalid superblock magic number [ 285.487918][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 285.636925][T11967] tipc: Enabled bearer , priority 10 [ 285.860842][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.863449][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.866165][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.870106][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.874711][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.877805][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.882589][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.886018][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.889365][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.893385][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.895987][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.898381][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.902107][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.904709][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.907143][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.909559][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.912818][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.915777][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.919039][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.923069][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.926418][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.928913][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.931686][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.934204][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.936524][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.938808][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.941588][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.944044][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.946403][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.948883][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.951469][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.953911][ T5974] hid-generic 0001:0000:000F.000F: unknown main item tag 0x0 [ 285.972140][ T5974] hid-generic 0001:0000:000F.000F: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 286.120880][ T63] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 286.272290][ T63] usb 7-1: config 0 has no interfaces? [ 286.274551][ T63] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 286.278463][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.284112][ T63] usb 7-1: config 0 descriptor?? [ 286.321040][ T5991] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 286.475853][ T5991] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.479760][ T5991] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.484414][ T5991] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.488226][ T5991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 286.494319][ T57] usb 7-1: USB disconnect, device number 22 [ 286.494865][ T5991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 286.503437][ T5991] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.507371][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.512760][ T5991] usb 9-1: Product: syz [ 286.514594][ T5991] usb 9-1: Manufacturer: syz [ 286.524083][ T5991] cdc_wdm 9-1:1.0: skipping garbage [ 286.525814][ T5991] cdc_wdm 9-1:1.0: skipping garbage [ 286.529143][ T5991] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 286.531509][ T5991] cdc_wdm 9-1:1.0: Unknown control protocol [ 286.832751][T11982] openvswitch: netlink: Key 32 has unexpected len 20 expected 2 [ 286.882650][T11984] FAULT_INJECTION: forcing a failure. [ 286.882650][T11984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.888227][T11984] CPU: 2 UID: 0 PID: 11984 Comm: syz.1.1602 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 286.888249][T11984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.888259][T11984] Call Trace: [ 286.888265][T11984] [ 286.888271][T11984] dump_stack_lvl+0x16c/0x1f0 [ 286.888297][T11984] should_fail_ex+0x512/0x640 [ 286.888324][T11984] should_fail_alloc_page+0xe7/0x130 [ 286.888343][T11984] prepare_alloc_pages+0x3c2/0x610 [ 286.888365][T11984] ? rcu_is_watching+0x12/0xc0 [ 286.888384][T11984] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 286.888406][T11984] ? __lock_acquire+0x5ca/0x1ba0 [ 286.888426][T11984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.888443][T11984] ? __lock_acquire+0x5ca/0x1ba0 [ 286.888456][T11984] ? __lock_acquire+0x5ca/0x1ba0 [ 286.888468][T11984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.888482][T11984] ? policy_nodemask+0xea/0x4e0 [ 286.888495][T11984] alloc_pages_mpol+0x1fb/0x550 [ 286.888508][T11984] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 286.888519][T11984] ? __lock_acquire+0x5ca/0x1ba0 [ 286.888534][T11984] folio_alloc_mpol_noprof+0x36/0x2f0 [ 286.888549][T11984] vma_alloc_folio_noprof+0xed/0x1e0 [ 286.888562][T11984] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 286.888580][T11984] do_pte_missing+0x223d/0x3fb0 [ 286.888594][T11984] __handle_mm_fault+0x103d/0x2a40 [ 286.888608][T11984] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.888617][T11984] ? __pte_offset_map_lock+0x155/0x2f0 [ 286.888630][T11984] ? find_held_lock+0x2b/0x80 [ 286.888639][T11984] ? find_held_lock+0x2b/0x80 [ 286.888656][T11984] handle_mm_fault+0x3fe/0xad0 [ 286.888668][T11984] __get_user_pages+0x771/0x36f0 [ 286.888689][T11984] ? __pfx___get_user_pages+0x10/0x10 [ 286.888703][T11984] ? __pfx_down_read_killable+0x10/0x10 [ 286.888719][T11984] ? rcu_is_watching+0x12/0xc0 [ 286.888730][T11984] get_user_pages_unlocked+0x1c1/0x780 [ 286.888747][T11984] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 286.888761][T11984] ? get_user_pages_fast_only+0xae/0xf0 [ 286.888776][T11984] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 286.888791][T11984] ? __pfx___might_resched+0x10/0x10 [ 286.888805][T11984] hva_to_pfn+0x886/0xe40 [ 286.888819][T11984] ? __pfx_hva_to_pfn+0x10/0x10 [ 286.888830][T11984] ? __lock_acquire+0x5ca/0x1ba0 [ 286.888850][T11984] kvm_follow_pfn+0x29f/0x3f0 [ 286.888861][T11984] __kvm_faultin_pfn+0x11c/0x1a0 [ 286.888873][T11984] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 286.888883][T11984] ? __pfx_xa_load+0x10/0x10 [ 286.888900][T11984] ? vmx_get_segment+0x352/0x740 [ 286.888918][T11984] kvm_mmu_faultin_pfn+0x581/0x2170 [ 286.888931][T11984] ? __pfx_fast_page_fault+0x10/0x10 [ 286.888941][T11984] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 286.888956][T11984] ? __asan_memcpy+0x3c/0x60 [ 286.888964][T11984] ? em_salc+0x10/0x10 [ 286.888973][T11984] ? __kvm_mmu_topup_memory_cache+0x332/0x600 [ 286.888982][T11984] ? x86_decode_insn+0xbc7/0x5540 [ 286.889001][T11984] kvm_tdp_page_fault+0x186/0x3f0 [ 286.889016][T11984] kvm_mmu_do_page_fault+0x588/0x6c0 [ 286.889030][T11984] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 286.889043][T11984] ? intel_is_valid_msr+0xe8/0x720 [ 286.889063][T11984] kvm_mmu_page_fault+0x225/0x1cb0 [ 286.889079][T11984] ? __pfx___kvm_get_msr+0x10/0x10 [ 286.889092][T11984] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 286.889106][T11984] ? __lock_acquire+0xaa4/0x1ba0 [ 286.889119][T11984] ? rcu_is_watching+0x12/0xc0 [ 286.889127][T11984] ? __vmx_complete_interrupts+0x111/0x4e0 [ 286.889139][T11984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.889155][T11984] handle_ept_violation+0x254/0x640 [ 286.889168][T11984] ? __pfx_handle_ept_violation+0x10/0x10 [ 286.889179][T11984] vmx_handle_exit+0x6ab/0x1cc0 [ 286.889193][T11984] vcpu_run+0x304c/0x5320 [ 286.889212][T11984] ? __pfx_vcpu_run+0x10/0x10 [ 286.889228][T11984] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 286.889240][T11984] ? __local_bh_enable_ip+0xa4/0x120 [ 286.889254][T11984] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 286.889268][T11984] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 286.889285][T11984] kvm_vcpu_ioctl+0x5e9/0x1680 [ 286.889302][T11984] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 286.889316][T11984] ? tomoyo_path_number_perm+0x18d/0x580 [ 286.889329][T11984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.889340][T11984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.889353][T11984] ? do_vfs_ioctl+0x512/0x1990 [ 286.889367][T11984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.889391][T11984] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 286.889406][T11984] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 286.889421][T11984] ? __fget_files+0x20e/0x3c0 [ 286.889435][T11984] ? fput+0x20/0xf0 [ 286.889448][T11984] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 286.889462][T11984] __ia32_compat_sys_ioctl+0x24c/0x360 [ 286.889478][T11984] __do_fast_syscall_32+0x73/0x120 [ 286.889492][T11984] do_fast_syscall_32+0x32/0x80 [ 286.889506][T11984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.889518][T11984] RIP: 0023:0xf709e579 [ 286.889526][T11984] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 286.889536][T11984] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 286.889546][T11984] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 000000000000ae80 [ 286.889552][T11984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.889557][T11984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.889563][T11984] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 286.889568][T11984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.889580][T11984] [ 287.344668][T11994] vivid-007: disconnect [ 287.346857][T11993] vivid-007: reconnect [ 287.486877][T11992] ip6tnl1: entered promiscuous mode [ 287.489101][T11992] ip6tnl1: entered allmulticast mode [ 287.492205][T11992] team0: Device ip6tnl1 is of different type [ 288.544982][T12014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1611'. [ 288.573261][ T5973] usb 9-1: USB disconnect, device number 13 [ 288.793206][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 288.793221][ T40] audit: type=1800 audit(1746598017.658:19156): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1612" name="file0" dev="overlay" ino=1482 res=0 errno=0 [ 288.936394][T12037] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 288.940240][T12037] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1619'. [ 288.977704][T12042] input: syz1 as /devices/virtual/input/input18 [ 289.103722][T12055] Option 'o]‚çåc' to dns_resolver key: bad/missing value [ 290.080714][ T5991] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 290.179342][T12086] lo speed is unknown, defaulting to 1000 [ 290.234509][T12098] overlayfs: upper fs does not support file handles, falling back to index=off. [ 290.238273][T12098] FAULT_INJECTION: forcing a failure. [ 290.238273][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 290.242828][T12098] CPU: 3 UID: 60928 PID: 12098 Comm: syz.4.1638 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 290.242842][T12098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.242847][T12098] Call Trace: [ 290.242851][T12098] [ 290.242855][T12098] dump_stack_lvl+0x16c/0x1f0 [ 290.242872][T12098] should_fail_ex+0x512/0x640 [ 290.242885][T12098] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 290.242899][T12098] should_failslab+0xc2/0x120 [ 290.242911][T12098] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 290.242922][T12098] ? __d_alloc+0x31/0xaa0 [ 290.242935][T12098] __d_alloc+0x31/0xaa0 [ 290.242946][T12098] d_alloc+0x4a/0x1e0 [ 290.242962][T12098] d_alloc_parallel+0xe3/0x12e0 [ 290.242978][T12098] ? map_id_range_up+0x2ce/0x3b0 [ 290.242992][T12098] ? register_lock_class+0x41/0x4c0 [ 290.243007][T12098] ? __pfx_d_alloc_parallel+0x10/0x10 [ 290.243021][T12098] ? lockdep_init_map_type+0x5c/0x280 [ 290.243035][T12098] ? lockdep_init_map_type+0x5c/0x280 [ 290.243050][T12098] __lookup_slow+0x193/0x460 [ 290.243063][T12098] ? __pfx___lookup_slow+0x10/0x10 [ 290.243078][T12098] ? __SetPageMovable+0x130/0x4a0 [ 290.243095][T12098] ? __SetPageMovable+0x130/0x4a0 [ 290.243109][T12098] ? d_lookup+0xe7/0x190 [ 290.243124][T12098] lookup_one_unlocked+0x140/0x160 [ 290.243137][T12098] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 290.243154][T12098] ovl_lookup_single+0x1fe/0xfb0 [ 290.243172][T12098] ? __pfx_ovl_lookup_single+0x10/0x10 [ 290.243190][T12098] ovl_lookup_layer+0x3d4/0x480 [ 290.243206][T12098] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 290.243220][T12098] ? __kmalloc_noprof+0x242/0x510 [ 290.243234][T12098] ovl_lookup+0x1417/0x2270 [ 290.243253][T12098] ? __pfx_ovl_lookup+0x10/0x10 [ 290.243267][T12098] ? generic_permission+0xad/0x7d0 [ 290.243280][T12098] ? bpf_lsm_inode_permission+0x9/0x10 [ 290.243294][T12098] ? security_inode_permission+0xbf/0x260 [ 290.243306][T12098] ? inode_permission+0xdd/0x5f0 [ 290.243319][T12098] ? ovl_revert_creds+0x13/0x50 [ 290.243334][T12098] ? ovl_permission+0xcd/0x290 [ 290.243347][T12098] ? __pfx_ovl_permission+0x10/0x10 [ 290.243362][T12098] ? bpf_lsm_inode_permission+0x9/0x10 [ 290.243375][T12098] ? security_inode_permission+0xbf/0x260 [ 290.243386][T12098] ? inode_permission+0xdd/0x5f0 [ 290.243399][T12098] ? __pfx_ovl_lookup+0x10/0x10 [ 290.243413][T12098] lookup_open.isra.0+0x4d7/0x1580 [ 290.243430][T12098] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 290.243451][T12098] ? __pfx_down_write+0x10/0x10 [ 290.243464][T12098] ? mnt_get_write_access+0x20c/0x300 [ 290.243479][T12098] path_openat+0x905/0x2d40 [ 290.243493][T12098] ? __pfx_path_openat+0x10/0x10 [ 290.243505][T12098] do_filp_open+0x20b/0x470 [ 290.243515][T12098] ? __pfx_do_filp_open+0x10/0x10 [ 290.243534][T12098] ? alloc_fd+0x471/0x7d0 [ 290.243552][T12098] do_sys_openat2+0x11b/0x1d0 [ 290.243565][T12098] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.243579][T12098] ? __fget_files+0x20e/0x3c0 [ 290.243596][T12098] __ia32_compat_sys_openat+0x16d/0x210 [ 290.243610][T12098] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 290.243623][T12098] ? ksys_write+0x1b9/0x240 [ 290.243634][T12098] ? rcu_is_watching+0x12/0xc0 [ 290.243646][T12098] __do_fast_syscall_32+0x73/0x120 [ 290.243660][T12098] do_fast_syscall_32+0x32/0x80 [ 290.243674][T12098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.243687][T12098] RIP: 0023:0xf70be579 [ 290.243695][T12098] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 290.243704][T12098] RSP: 002b:00000000f508d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 290.243713][T12098] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 290.243719][T12098] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 290.243725][T12098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.243730][T12098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 290.243735][T12098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.243748][T12098] [ 290.244447][ T5991] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.400451][ T5991] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.404141][ T5991] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.407278][ T5991] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.411910][ T5991] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.420183][ T5991] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.423818][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.427189][ T5991] usb 7-1: Product: syz [ 290.428689][ T5991] usb 7-1: Manufacturer: syz [ 290.438908][ T5991] cdc_wdm 7-1:1.0: skipping garbage [ 290.441105][ T5991] cdc_wdm 7-1:1.0: skipping garbage [ 290.444586][ T5991] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 290.446724][ T5991] cdc_wdm 7-1:1.0: Unknown control protocol [ 290.540745][ T40] audit: type=1800 audit(1746598019.398:19157): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1642" name="file0" dev="overlay" ino=2339 res=0 errno=0 [ 290.549039][T12106] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 290.580402][T12106] bond3: entered promiscuous mode [ 290.584188][T12106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.918045][T12114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.922889][T12114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.323851][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 291.328097][T12120] openvswitch: : Dropping previously announced user features [ 291.885357][T12117] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 292.176143][T12127] FAULT_INJECTION: forcing a failure. [ 292.176143][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 292.180199][T12127] CPU: 3 UID: 0 PID: 12127 Comm: syz.1.1646 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 292.180212][T12127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.180218][T12127] Call Trace: [ 292.180222][T12127] [ 292.180226][T12127] dump_stack_lvl+0x16c/0x1f0 [ 292.180242][T12127] should_fail_ex+0x512/0x640 [ 292.180257][T12127] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 292.180274][T12127] should_failslab+0xc2/0x120 [ 292.180286][T12127] __kmalloc_cache_noprof+0x6a/0x3e0 [ 292.180302][T12127] ? alloc_netdev_mqs+0xf3a/0x1570 [ 292.180314][T12127] ? kasan_save_track+0x14/0x30 [ 292.180325][T12127] alloc_netdev_mqs+0xf3a/0x1570 [ 292.180339][T12127] vti6_locate+0x3f2/0x6f0 [ 292.180353][T12127] ? __pfx_vti6_locate+0x10/0x10 [ 292.180368][T12127] vti6_siocdevprivate+0x2c0/0x660 [ 292.180381][T12127] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 292.180402][T12127] ? full_name_hash+0xbc/0x110 [ 292.180414][T12127] ? netdev_name_node_lookup+0x127/0x180 [ 292.180425][T12127] dev_ifsioc+0x8eb/0x1ee0 [ 292.180437][T12127] ? __pfx_dev_ifsioc+0x10/0x10 [ 292.180446][T12127] ? __pfx___mutex_lock+0x10/0x10 [ 292.180464][T12127] ? dev_load+0x8e/0x240 [ 292.180476][T12127] dev_ioctl+0x1b2/0x1060 [ 292.180486][T12127] sock_ioctl+0x5b3/0x6b0 [ 292.180500][T12127] ? __pfx_sock_ioctl+0x10/0x10 [ 292.180521][T12127] compat_sock_ioctl+0x58b/0x730 [ 292.180536][T12127] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 292.180553][T12127] ? __fget_files+0x20e/0x3c0 [ 292.180604][T12127] ? fput+0x20/0xf0 [ 292.180620][T12127] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 292.180633][T12127] __ia32_compat_sys_ioctl+0x24c/0x360 [ 292.180648][T12127] __do_fast_syscall_32+0x73/0x120 [ 292.180662][T12127] do_fast_syscall_32+0x32/0x80 [ 292.180676][T12127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.180689][T12127] RIP: 0023:0xf709e579 [ 292.180696][T12127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 292.180706][T12127] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 292.180716][T12127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 292.180722][T12127] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.180728][T12127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.180733][T12127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 292.180739][T12127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.180751][T12127] [ 292.567760][ T40] audit: type=1800 audit(1746598021.428:19158): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1647" name="file0" dev="overlay" ino=1534 res=0 errno=0 [ 293.228224][T12158] 9pnet_fd: Insufficient options for proto=fd [ 293.776326][ T40] audit: type=1800 audit(1746598022.638:19159): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1657" name="file0" dev="overlay" ino=2382 res=0 errno=0 [ 294.992469][T12194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.186595][T12184] ALSA: mixer_oss: invalid index 40000 [ 295.807635][T12217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.836159][T12217] FAULT_INJECTION: forcing a failure. [ 295.836159][T12217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.840379][T12217] CPU: 1 UID: 0 PID: 12217 Comm: syz.0.1674 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 295.840406][T12217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.840413][T12217] Call Trace: [ 295.840417][T12217] [ 295.840421][T12217] dump_stack_lvl+0x16c/0x1f0 [ 295.840438][T12217] should_fail_ex+0x512/0x640 [ 295.840455][T12217] _copy_from_user+0x2e/0xd0 [ 295.840470][T12217] get_compat_msghdr+0xa7/0x170 [ 295.840481][T12217] ? __pfx_get_compat_msghdr+0x10/0x10 [ 295.840493][T12217] ? find_held_lock+0x2b/0x80 [ 295.840505][T12217] ___sys_sendmsg+0x1ae/0x1d0 [ 295.840517][T12217] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.840544][T12217] __sys_sendmsg+0x16d/0x220 [ 295.840555][T12217] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.840584][T12217] ? rcu_is_watching+0x12/0xc0 [ 295.840596][T12217] __do_fast_syscall_32+0x73/0x120 [ 295.840615][T12217] do_fast_syscall_32+0x32/0x80 [ 295.840628][T12217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.840641][T12217] RIP: 0023:0xf7f36579 [ 295.840649][T12217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.840659][T12217] RSP: 002b:00000000f503555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 295.840669][T12217] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000780 [ 295.840675][T12217] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.840680][T12217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.840686][T12217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.840691][T12217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.840703][T12217] [ 295.905244][T12215] nvme_fabrics: missing parameter 'transport=%s' [ 295.907382][T12215] nvme_fabrics: missing parameter 'nqn=%s' [ 295.914466][T12214] lo speed is unknown, defaulting to 1000 [ 296.117713][T12224] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 296.117956][T12222] overlay: Unknown parameter 'appraise_type' [ 296.689110][ T40] audit: type=1326 audit(1746598025.548:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.701141][ T40] audit: type=1326 audit(1746598025.548:19161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.722372][ T40] audit: type=1326 audit(1746598025.588:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.730199][ T40] audit: type=1326 audit(1746598025.588:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.738450][ T40] audit: type=1326 audit(1746598025.588:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.753778][ T40] audit: type=1326 audit(1746598025.598:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.764701][ T40] audit: type=1326 audit(1746598025.598:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.772508][ T40] audit: type=1326 audit(1746598025.598:19167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.779881][ T40] audit: type=1326 audit(1746598025.598:19168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.786926][ T40] audit: type=1326 audit(1746598025.598:19169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.4.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 297.125812][T12244] Bluetooth: MGMT ver 1.23 [ 297.586035][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 297.589748][T12253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1687'. [ 297.880681][T12263] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 297.894624][T12263] team0: Port device dummy0 added [ 298.122508][T12264] nvme_fabrics: missing parameter 'transport=%s' [ 298.124802][T12264] nvme_fabrics: missing parameter 'nqn=%s' [ 298.630413][T12279] FAULT_INJECTION: forcing a failure. [ 298.630413][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 298.634918][T12279] CPU: 1 UID: 0 PID: 12279 Comm: syz.0.1693 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 298.634945][T12279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.634951][T12279] Call Trace: [ 298.634955][T12279] [ 298.634959][T12279] dump_stack_lvl+0x16c/0x1f0 [ 298.634977][T12279] should_fail_ex+0x512/0x640 [ 298.634991][T12279] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.635004][T12279] should_failslab+0xc2/0x120 [ 298.635016][T12279] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.635027][T12279] ? __alloc_skb+0x2b2/0x380 [ 298.635039][T12279] __alloc_skb+0x2b2/0x380 [ 298.635049][T12279] ? __pfx___alloc_skb+0x10/0x10 [ 298.635061][T12279] ? if_nlmsg_size+0x475/0xaf0 [ 298.635074][T12279] rtmsg_ifinfo_build_skb+0x81/0x280 [ 298.635089][T12279] rtmsg_ifinfo+0x9f/0x1a0 [ 298.635104][T12279] netif_state_change+0x17f/0x3b0 [ 298.635117][T12279] ? __pfx_netif_state_change+0x10/0x10 [ 298.635132][T12279] ? netif_change_flags+0x10d/0x160 [ 298.635144][T12279] do_setlink.constprop.0+0x3632/0x44b0 [ 298.635157][T12279] ? rcu_is_watching+0x12/0xc0 [ 298.635167][T12279] ? trace_sched_exit_tp+0xde/0x130 [ 298.635180][T12279] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 298.635193][T12279] ? __kasan_kmalloc+0xaa/0xb0 [ 298.635203][T12279] ? __mutex_trylock_common+0xe9/0x250 [ 298.635219][T12279] ? __pfx___schedule+0x10/0x10 [ 298.635238][T12279] ? irqentry_exit+0x3b/0x90 [ 298.635250][T12279] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.635267][T12279] ? rtnl_newlink+0x613/0x2000 [ 298.635277][T12279] ? rtnl_newlink+0x61d/0x2000 [ 298.635289][T12279] rtnl_newlink+0x18e0/0x2000 [ 298.635304][T12279] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.635318][T12279] ? __pfx___schedule+0x10/0x10 [ 298.635334][T12279] ? __lock_acquire+0x5ca/0x1ba0 [ 298.635348][T12279] ? rcu_is_watching+0x12/0xc0 [ 298.635357][T12279] ? trace_cap_capable+0x18d/0x200 [ 298.635370][T12279] ? find_held_lock+0x2b/0x80 [ 298.635379][T12279] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.635389][T12279] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.635399][T12279] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 298.635410][T12279] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.635422][T12279] rtnetlink_rcv_msg+0x95b/0xe90 [ 298.635434][T12279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.635447][T12279] ? __lock_acquire+0xaa4/0x1ba0 [ 298.635463][T12279] netlink_rcv_skb+0x16a/0x440 [ 298.635475][T12279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.635487][T12279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.635498][T12279] ? find_held_lock+0x2b/0x80 [ 298.635518][T12279] netlink_unicast+0x53a/0x7f0 [ 298.635532][T12279] ? __pfx_netlink_unicast+0x10/0x10 [ 298.635547][T12279] netlink_sendmsg+0x8d1/0xdd0 [ 298.635561][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.635574][T12279] ? __import_iovec+0x1c8/0x660 [ 298.635592][T12279] ____sys_sendmsg+0xa95/0xc70 [ 298.635607][T12279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.635619][T12279] ? get_compat_msghdr+0x11a/0x170 [ 298.635633][T12279] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 298.635653][T12279] ___sys_sendmsg+0x134/0x1d0 [ 298.635665][T12279] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.635692][T12279] __sys_sendmsg+0x16d/0x220 [ 298.635703][T12279] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.635720][T12279] ? rcu_is_watching+0x12/0xc0 [ 298.635730][T12279] __do_fast_syscall_32+0x73/0x120 [ 298.635745][T12279] do_fast_syscall_32+0x32/0x80 [ 298.635758][T12279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.635770][T12279] RIP: 0023:0xf7f36579 [ 298.635778][T12279] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.635788][T12279] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 298.635798][T12279] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 298.635804][T12279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.635809][T12279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.635814][T12279] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.635820][T12279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.635832][T12279] [ 299.193757][T12286] ip6tnl1: entered promiscuous mode [ 299.195778][T12286] ip6tnl1: entered allmulticast mode [ 299.200698][T12286] team0: Device ip6tnl1 is of different type [ 301.554252][T12333] lo speed is unknown, defaulting to 1000 [ 301.558821][T12333] lo speed is unknown, defaulting to 1000 [ 301.808973][T12333] lo speed is unknown, defaulting to 1000 [ 302.057236][T12333] infiniband sz1: set active [ 302.059372][ T5996] lo speed is unknown, defaulting to 1000 [ 302.062045][T12333] infiniband sz1: added lo [ 302.142985][T12333] RDS/IB: sz1: added [ 302.144773][T12333] smc: adding ib device sz1 with port count 1 [ 302.147377][T12333] smc: ib device sz1 port 1 has pnetid [ 302.150990][ T9] lo speed is unknown, defaulting to 1000 [ 302.153813][T12333] lo speed is unknown, defaulting to 1000 [ 302.252606][T12333] lo speed is unknown, defaulting to 1000 [ 302.309294][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'. [ 302.349657][T12333] lo speed is unknown, defaulting to 1000 [ 302.433860][T12333] lo speed is unknown, defaulting to 1000 [ 303.853750][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.909998][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.770965][T12359] tipc: Started in network mode [ 304.773197][T12359] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 304.775904][T12359] tipc: Enabled bearer , priority 1 [ 305.605388][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.612055][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.615221][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.619838][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.627093][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.636770][T12361] ceph: No mds server is up or the cluster is laggy [ 305.739524][T12371] lo speed is unknown, defaulting to 1000 [ 305.749659][T12371] lo speed is unknown, defaulting to 1000 [ 305.772589][ T57] tipc: Node number set to 10136234 [ 305.876515][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 305.928574][T12388] netlink: 'syz.4.1723': attribute type 4 has an invalid length. [ 305.931263][T12388] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1723'. [ 305.960009][T12386] team0: entered promiscuous mode [ 305.962195][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.011469][T12371] chnl_net:caif_netlink_parms(): no params data found [ 306.059534][T12386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1723'. [ 306.160831][T12371] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.163470][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.165955][T12371] bridge_slave_0: entered allmulticast mode [ 306.169900][T12371] bridge_slave_0: entered promiscuous mode [ 306.174004][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.176543][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.179228][T12371] bridge_slave_1: entered allmulticast mode [ 306.182355][T12371] bridge_slave_1: entered promiscuous mode [ 306.219130][T12371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.224305][T12371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.323533][T12371] team0: Port device team_slave_0 added [ 306.327641][T12371] team0: Port device team_slave_1 added [ 306.387093][T12371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.389359][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.398755][T12371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.403828][T12371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.406065][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.414208][T12371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.462623][T12371] hsr_slave_0: entered promiscuous mode [ 306.465205][T12371] hsr_slave_1: entered promiscuous mode [ 306.471118][T12371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.473551][T12371] Cannot create hsr debugfs directory [ 306.612731][T12371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.619960][T12371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.625776][T12371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.629668][T12371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.641022][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.643280][T12371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.646619][T12371] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.648944][T12371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.678409][T12371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.690129][T12371] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.695821][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.706467][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.014386][T12406] lo speed is unknown, defaulting to 1000 [ 307.016933][T12406] lo speed is unknown, defaulting to 1000 [ 307.019560][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.022876][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.032577][T12406] lo speed is unknown, defaulting to 1000 [ 307.036226][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.038597][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.039397][T12406] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.051304][T12406] lo speed is unknown, defaulting to 1000 [ 307.053805][T12406] lo speed is unknown, defaulting to 1000 [ 307.056314][T12406] lo speed is unknown, defaulting to 1000 [ 307.058792][T12406] lo speed is unknown, defaulting to 1000 [ 307.061925][T12406] lo speed is unknown, defaulting to 1000 [ 307.195953][T12371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.224544][T12421] overlay: Bad value for 'workdir' [ 307.309483][T12371] veth0_vlan: entered promiscuous mode [ 307.317410][T12371] veth1_vlan: entered promiscuous mode [ 307.330422][T12371] veth0_macvtap: entered promiscuous mode [ 307.334469][T12371] veth1_macvtap: entered promiscuous mode [ 307.342222][T12371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.345592][T12371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.349527][T12371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.353523][T12371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.356935][T12371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.361798][T12371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.365729][T12371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.368588][T12371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.371901][T12371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.374783][T12371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.455668][ T7678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.458258][ T7678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.489243][ T7650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.492011][ T7650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.651887][ T5940] Bluetooth: hci4: command tx timeout [ 308.259894][T12444] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.436632][T12444] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.486680][T12444] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.648184][T12444] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.802463][T12444] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.815298][T12444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.824598][T12444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.833000][T12444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.924447][T12466] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1744'. [ 308.930900][T12466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'. [ 308.965740][T12469] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.007504][T12473] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 309.017613][T12473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1747'. [ 309.050985][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 309.050997][ T40] audit: type=1800 audit(1746598037.918:19196): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1737" name="file0" dev="overlay" ino=2246 res=0 errno=0 [ 309.679016][T12490] FAULT_INJECTION: forcing a failure. [ 309.679016][T12490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.684899][T12490] CPU: 3 UID: 0 PID: 12490 Comm: syz.4.1751 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 309.684914][T12490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.684920][T12490] Call Trace: [ 309.684923][T12490] [ 309.684927][T12490] dump_stack_lvl+0x16c/0x1f0 [ 309.684945][T12490] should_fail_ex+0x512/0x640 [ 309.684961][T12490] _copy_from_user+0x2e/0xd0 [ 309.684976][T12490] get_compat_msghdr+0xa7/0x170 [ 309.684987][T12490] ? __pfx_get_compat_msghdr+0x10/0x10 [ 309.685003][T12490] ___sys_sendmsg+0x1ae/0x1d0 [ 309.685015][T12490] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.685041][T12490] __sys_sendmsg+0x16d/0x220 [ 309.685052][T12490] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.685068][T12490] ? rcu_is_watching+0x12/0xc0 [ 309.685080][T12490] __do_fast_syscall_32+0x73/0x120 [ 309.685095][T12490] do_fast_syscall_32+0x32/0x80 [ 309.685109][T12490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.685121][T12490] RIP: 0023:0xf70be579 [ 309.685129][T12490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.685138][T12490] RSP: 002b:00000000f508d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 309.685148][T12490] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000300 [ 309.685154][T12490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.685160][T12490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.685165][T12490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.685171][T12490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.685182][T12490] [ 309.720782][ T5940] Bluetooth: hci4: command 0x041b tx timeout [ 309.959867][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 309.977569][T12502] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 310.005444][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 310.008452][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 310.054555][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1754'. [ 310.150992][T12513] XFS (nullb0): Invalid superblock magic number [ 310.252198][T12524] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 310.579190][ T40] audit: type=1800 audit(1746598039.438:19197): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1763" name="file0" dev="overlay" ino=2602 res=0 errno=0 [ 311.772199][ T5940] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 311.941607][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.944401][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.008492][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.016055][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.068611][T12562] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.071682][T12562] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.074736][T12562] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.077774][T12562] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.919164][ T40] audit: type=1800 audit(1746598041.678:19198): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1774" name="file0" dev="overlay" ino=2295 res=0 errno=0 [ 313.658379][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1781'. [ 313.661598][T12599] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 314.549836][T12618] hub 6-0:1.0: USB hub found [ 314.552305][T12618] hub 6-0:1.0: 1 port detected [ 315.131541][ T40] audit: type=1800 audit(1746598043.998:19199): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1785" name="file0" dev="overlay" ino=110 res=0 errno=0 [ 315.509450][ T40] audit: type=1800 audit(1746598044.368:19200): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1788" name="file0" dev="overlay" ino=2637 res=0 errno=0 [ 316.605490][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.607589][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.644358][T12657] block nbd5: NBD_DISCONNECT [ 317.137649][T12665] team0: Refused to change device type [ 317.372379][T12677] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.1806'. [ 317.377964][T12676] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1805'. [ 317.428522][T12681] input: syz1 as /devices/virtual/input/input19 [ 317.489003][T12684] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 317.492037][T12684] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1809'. [ 317.613531][T12688] gre0: left promiscuous mode [ 317.619855][T12688] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1811'. [ 317.624478][T12688] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 317.905000][T12698] program syz.0.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.458877][T12716] kvm: kvm [12715]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xc00000008 [ 318.745957][T12725] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 319.182598][ T9] libceph: connect (1)[c::]:6789 error -22 [ 319.184836][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 319.441710][ T9] libceph: connect (1)[c::]:6789 error -22 [ 319.445457][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 319.614899][T12756] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 319.636491][T12756] bond1: entered promiscuous mode [ 319.638138][T12756] bond1: entered allmulticast mode [ 319.944898][T12737] ceph: No mds server is up or the cluster is laggy [ 319.961023][ T9] libceph: connect (1)[c::]:6789 error -22 [ 319.963017][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 320.088745][T12771] FAULT_INJECTION: forcing a failure. [ 320.088745][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 320.094340][T12771] CPU: 3 UID: 0 PID: 12771 Comm: syz.1.1832 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 320.094362][T12771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.094373][T12771] Call Trace: [ 320.094379][T12771] [ 320.094385][T12771] dump_stack_lvl+0x16c/0x1f0 [ 320.094505][T12771] should_fail_ex+0x512/0x640 [ 320.094567][T12771] should_failslab+0xc2/0x120 [ 320.094586][T12771] __kmalloc_cache_noprof+0x6a/0x3e0 [ 320.094609][T12771] ? __sctp_v6_cmp_addr+0x206/0x530 [ 320.094632][T12771] ? sctp_add_bind_addr+0xae/0x3f0 [ 320.094654][T12771] sctp_add_bind_addr+0xae/0x3f0 [ 320.094677][T12771] sctp_copy_local_addr_list+0x39d/0x5a0 [ 320.094704][T12771] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 320.094731][T12771] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 320.094762][T12771] ? sctp_bind_addr_copy+0xe0/0x530 [ 320.094780][T12771] sctp_bind_addr_copy+0xe0/0x530 [ 320.094806][T12771] sctp_connect_new_asoc+0x1d7/0x790 [ 320.094824][T12771] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 320.094841][T12771] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 320.094859][T12771] sctp_sendmsg+0x15f9/0x1ee0 [ 320.094879][T12771] ? __pfx_sctp_sendmsg+0x10/0x10 [ 320.094907][T12771] ? __might_fault+0xe3/0x190 [ 320.094927][T12771] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.094950][T12771] ? __pfx_sctp_sendmsg+0x10/0x10 [ 320.094967][T12771] inet_sendmsg+0x119/0x140 [ 320.094990][T12771] __sys_sendto+0x431/0x510 [ 320.095007][T12771] ? __pfx___sys_sendto+0x10/0x10 [ 320.095044][T12771] ? ksys_write+0x1b9/0x240 [ 320.095060][T12771] ? __pfx_ksys_write+0x10/0x10 [ 320.095078][T12771] __ia32_sys_sendto+0xdd/0x1b0 [ 320.095093][T12771] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.095114][T12771] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 320.095137][T12771] __do_fast_syscall_32+0x73/0x120 [ 320.095159][T12771] do_fast_syscall_32+0x32/0x80 [ 320.095181][T12771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.095199][T12771] RIP: 0023:0xf709e579 [ 320.095212][T12771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.095226][T12771] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 320.095236][T12771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 320.095242][T12771] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000200 [ 320.095248][T12771] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 320.095253][T12771] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 320.095259][T12771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.095271][T12771] [ 320.933552][T12795] FAULT_INJECTION: forcing a failure. [ 320.933552][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 320.937784][T12795] CPU: 3 UID: 0 PID: 12795 Comm: syz.5.1838 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 320.937798][T12795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.937804][T12795] Call Trace: [ 320.937809][T12795] [ 320.937813][T12795] dump_stack_lvl+0x16c/0x1f0 [ 320.937830][T12795] should_fail_ex+0x512/0x640 [ 320.937844][T12795] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 320.937857][T12795] should_failslab+0xc2/0x120 [ 320.937869][T12795] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 320.937880][T12795] ? __kernfs_new_node+0xd2/0x8a0 [ 320.937899][T12795] __kernfs_new_node+0xd2/0x8a0 [ 320.937916][T12795] ? __pfx___kernfs_new_node+0x10/0x10 [ 320.937934][T12795] ? find_held_lock+0x2b/0x80 [ 320.937944][T12795] ? kernfs_root+0xee/0x2a0 [ 320.937956][T12795] kernfs_new_node+0x13c/0x1e0 [ 320.937969][T12795] __kernfs_create_file+0x53/0x350 [ 320.937983][T12795] sysfs_add_file_mode_ns+0x207/0x3c0 [ 320.938002][T12795] internal_create_group+0x578/0xf30 [ 320.938015][T12795] ? __pfx_internal_create_group+0x10/0x10 [ 320.938029][T12795] sysfs_slab_add+0x1a3/0x1e0 [ 320.938040][T12795] do_kmem_cache_create+0x530/0x730 [ 320.938054][T12795] __kmem_cache_create_args+0x225/0x390 [ 320.938065][T12795] ? p9_client_create+0xe16/0x11c0 [ 320.938081][T12795] p9_client_create+0xec0/0x11c0 [ 320.938098][T12795] ? __pfx_p9_client_create+0x10/0x10 [ 320.938115][T12795] ? rcu_is_watching+0x12/0xc0 [ 320.938126][T12795] ? lockdep_init_map_type+0x5c/0x280 [ 320.938139][T12795] ? __raw_spin_lock_init+0x3a/0x110 [ 320.938155][T12795] v9fs_session_init+0x1f7/0x1a80 [ 320.938198][T12795] ? __pfx_v9fs_session_init+0x10/0x10 [ 320.938222][T12795] v9fs_mount+0xc5/0xa30 [ 320.938233][T12795] ? rcu_is_watching+0x12/0xc0 [ 320.938242][T12795] ? __pfx_v9fs_mount+0x10/0x10 [ 320.938254][T12795] ? apparmor_capable+0x114/0x1d0 [ 320.938266][T12795] ? __pfx_v9fs_mount+0x10/0x10 [ 320.938277][T12795] legacy_get_tree+0x109/0x220 [ 320.938293][T12795] vfs_get_tree+0x8b/0x340 [ 320.938307][T12795] path_mount+0x14d4/0x1f20 [ 320.938318][T12795] ? kmem_cache_free+0x2d4/0x4d0 [ 320.938327][T12795] ? __pfx_path_mount+0x10/0x10 [ 320.938339][T12795] ? putname+0x154/0x1a0 [ 320.938352][T12795] __ia32_sys_mount+0x28b/0x310 [ 320.938362][T12795] ? __pfx___ia32_sys_mount+0x10/0x10 [ 320.938374][T12795] ? rcu_is_watching+0x12/0xc0 [ 320.938384][T12795] __do_fast_syscall_32+0x73/0x120 [ 320.938399][T12795] do_fast_syscall_32+0x32/0x80 [ 320.938413][T12795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.938425][T12795] RIP: 0023:0xf7fb2579 [ 320.938433][T12795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.938447][T12795] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 320.938457][T12795] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180 [ 320.938463][T12795] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080000680 [ 320.938469][T12795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.938474][T12795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 320.938480][T12795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.938492][T12795] [ 320.938679][T12795] SLUB: Unable to add cache 9p-fcall-cache-19 to sysfs [ 321.495011][T12810] FAULT_INJECTION: forcing a failure. [ 321.495011][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.499418][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.5.1842 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 321.499448][T12810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.499454][T12810] Call Trace: [ 321.499458][T12810] [ 321.499462][T12810] dump_stack_lvl+0x16c/0x1f0 [ 321.499480][T12810] should_fail_ex+0x512/0x640 [ 321.499496][T12810] _copy_from_user+0x2e/0xd0 [ 321.499511][T12810] kstrtouint_from_user+0xd6/0x1d0 [ 321.499523][T12810] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 321.499534][T12810] ? __lock_acquire+0xaa4/0x1ba0 [ 321.499548][T12810] ? lock_acquire+0x179/0x350 [ 321.499564][T12810] proc_fail_nth_write+0x83/0x250 [ 321.499578][T12810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 321.499595][T12810] vfs_write+0x25c/0x1180 [ 321.499604][T12810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 321.499619][T12810] ? __pfx___mutex_lock+0x10/0x10 [ 321.499632][T12810] ? __pfx_vfs_write+0x10/0x10 [ 321.499645][T12810] ? __fget_files+0x20e/0x3c0 [ 321.499663][T12810] ksys_write+0x12a/0x240 [ 321.499674][T12810] ? __pfx_ksys_write+0x10/0x10 [ 321.499684][T12810] ? rcu_is_watching+0x12/0xc0 [ 321.499696][T12810] __do_fast_syscall_32+0x73/0x120 [ 321.499711][T12810] do_fast_syscall_32+0x32/0x80 [ 321.499724][T12810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.499736][T12810] RIP: 0023:0xf7fb2579 [ 321.499744][T12810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.499753][T12810] RSP: 002b:00000000f5094590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 321.499762][T12810] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5094620 [ 321.499768][T12810] RDX: 0000000000000001 RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 321.499773][T12810] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 321.499779][T12810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 321.499784][T12810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.499796][T12810] [ 321.711012][ T6088] usb 7-1: USB disconnect, device number 23 [ 321.713058][ T7650] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.757195][T12813] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1843'. [ 321.777896][ T7650] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.841926][ T7650] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.925160][ T7650] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.243507][ T7650] tipc: Resetting bearer [ 322.298554][ T7650] tipc: Disabling bearer [ 323.122853][ T7650] bond0 (unregistering): left promiscuous mode [ 323.144873][ T7650] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 323.155340][ T7650] bond0 (unregistering): Released all slaves [ 323.166895][ T7650] bond1 (unregistering): Released all slaves [ 323.213319][T12871] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 323.460011][T12880] team0: Port device dummy0 removed [ 323.533315][T12880] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.536111][T12880] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.538792][T12880] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.551491][T12880] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.603273][T12880] team0: Port device geneve0 removed [ 323.606705][T12880] bond1: (slave veth3): Releasing active interface [ 323.609464][T12880] bond1: (slave veth3): the permanent HWaddr of slave - 76:65:f5:09:66:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 323.618217][T12880] vlan2: entered promiscuous mode [ 323.629795][T12880] bond1: (slave vlan2): Releasing active interface [ 323.633629][T12880] vlan2: left promiscuous mode [ 323.656881][T12880] veth1: left promiscuous mode [ 323.660456][ T7650] tipc: Left network mode [ 323.700742][ T7650] IPVS: stopping master sync thread 11661 ... [ 323.743519][ T40] audit: type=1800 audit(1746598052.608:19201): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1850" name="file0" dev="overlay" ino=216 res=0 errno=0 [ 324.461704][T12922] FAULT_INJECTION: forcing a failure. [ 324.461704][T12922] name failslab, interval 1, probability 0, space 0, times 0 [ 324.468347][T12922] CPU: 2 UID: 0 PID: 12922 Comm: syz.4.1857 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 324.468369][T12922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.468378][T12922] Call Trace: [ 324.468384][T12922] [ 324.468391][T12922] dump_stack_lvl+0x16c/0x1f0 [ 324.468417][T12922] should_fail_ex+0x512/0x640 [ 324.468439][T12922] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 324.468460][T12922] should_failslab+0xc2/0x120 [ 324.468481][T12922] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 324.468500][T12922] ? __kernfs_new_node+0xd2/0x8a0 [ 324.468527][T12922] __kernfs_new_node+0xd2/0x8a0 [ 324.468550][T12922] ? __pfx___kernfs_new_node+0x10/0x10 [ 324.468593][T12922] ? find_held_lock+0x2b/0x80 [ 324.468612][T12922] ? kernfs_root+0xee/0x2a0 [ 324.468637][T12922] kernfs_new_node+0x13c/0x1e0 [ 324.468661][T12922] kernfs_create_dir_ns+0x4c/0x1a0 [ 324.468681][T12922] sysfs_create_dir_ns+0x13a/0x2b0 [ 324.468706][T12922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 324.468728][T12922] ? find_held_lock+0x2b/0x80 [ 324.468747][T12922] ? class_dir_child_ns_type+0xd/0x60 [ 324.468771][T12922] kobject_add_internal+0x2c4/0x9b0 [ 324.468800][T12922] kobject_add+0x16e/0x240 [ 324.468823][T12922] ? __pfx_kobject_add+0x10/0x10 [ 324.468847][T12922] ? get_device_parent+0x1c5/0x4e0 [ 324.468865][T12922] ? kobject_put+0xab/0x5a0 [ 324.468891][T12922] ? device_add+0xbff/0x1a70 [ 324.468913][T12922] device_add+0x288/0x1a70 [ 324.468935][T12922] ? lockdep_init_map_type+0x5c/0x280 [ 324.468956][T12922] ? __pfx_device_add+0x10/0x10 [ 324.468974][T12922] ? lockdep_init_map_type+0x5c/0x280 [ 324.468995][T12922] ? __init_waitqueue_head+0xca/0x150 [ 324.469026][T12922] tty_register_device_attr+0x38e/0x7c0 [ 324.469048][T12922] ? __pfx_tty_register_device_attr+0x10/0x10 [ 324.469078][T12922] rfcomm_dev_ioctl+0x16be/0x1ca0 [ 324.469101][T12922] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 324.469124][T12922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.469151][T12922] rfcomm_sock_compat_ioctl+0xb0/0xd0 [ 324.469167][T12922] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 324.469184][T12922] compat_sock_ioctl+0x173/0x730 [ 324.469209][T12922] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 324.469238][T12922] ? __fget_files+0x20e/0x3c0 [ 324.469260][T12922] ? fput+0x20/0xf0 [ 324.469285][T12922] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 324.469307][T12922] __ia32_compat_sys_ioctl+0x24c/0x360 [ 324.469332][T12922] __do_fast_syscall_32+0x73/0x120 [ 324.469356][T12922] do_fast_syscall_32+0x32/0x80 [ 324.469378][T12922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.469396][T12922] RIP: 0023:0xf70be579 [ 324.469410][T12922] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.469425][T12922] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 324.469442][T12922] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400452c8 [ 324.469451][T12922] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.469460][T12922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.469469][T12922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.469479][T12922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.469501][T12922] [ 324.469541][T12922] kobject: kobject_add_internal failed for rfcomm0 (error: -12 parent: tty) [ 324.619680][ T7650] hsr_slave_0: left promiscuous mode [ 324.640865][ T7650] hsr_slave_1: left promiscuous mode [ 324.676203][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.678764][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.678933][ T7650] veth1_macvtap: left promiscuous mode [ 324.683407][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.685952][ T7650] veth0_macvtap: left promiscuous mode [ 324.687085][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.687858][ T7650] veth1_vlan: left promiscuous mode [ 324.693709][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.695834][ T7650] veth0_vlan: left promiscuous mode [ 324.697654][T12929] ALSA: mixer_oss: invalid OSS volume '' [ 324.699794][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.703741][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.710657][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.713083][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.715538][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.717929][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.720333][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.726300][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.728980][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.732065][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.734572][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.736971][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.739377][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.741818][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.744253][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.746742][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.749161][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.751790][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.754257][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.757370][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.760398][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.762988][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.767480][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.770519][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.775148][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.788321][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.799907][ T1464] hid-generic 0001:0000:000F.0010: unknown main item tag 0x0 [ 324.808719][ T1464] hid-generic 0001:0000:000F.0010: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 324.940767][ T5992] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 325.120685][ T5992] usb 9-1: config 0 has no interfaces? [ 325.122603][ T5992] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 325.125676][ T5992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.143372][ T5992] usb 9-1: config 0 descriptor?? [ 325.605047][ T5993] usb 9-1: USB disconnect, device number 14 [ 325.749688][ T7684] Bluetooth: hci1: Frame reassembly failed (-84) [ 325.850016][T12948] input: syz1 as /devices/virtual/input/input21 [ 325.995178][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 326.056681][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 327.408068][ T7650] lo (unregistering): left allmulticast mode [ 327.417647][ T5991] infiniband s: ib_query_port failed (-19) [ 327.791003][ T40] audit: type=1800 audit(1746598056.648:19202): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1866" name="file0" dev="overlay" ino=2459 res=0 errno=0 [ 327.800725][ T5940] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 327.800771][ T5937] Bluetooth: hci1: command 0x1003 tx timeout [ 328.325663][T13001] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1871'. [ 328.329193][T13001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.441365][T13009] mkiss: ax0: crc mode is auto. [ 328.464713][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 328.593582][T13016] FAULT_INJECTION: forcing a failure. [ 328.593582][T13016] name failslab, interval 1, probability 0, space 0, times 0 [ 328.599173][T13016] CPU: 3 UID: 0 PID: 13016 Comm: syz.1.1874 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 328.599194][T13016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.599203][T13016] Call Trace: [ 328.599209][T13016] [ 328.599216][T13016] dump_stack_lvl+0x16c/0x1f0 [ 328.599243][T13016] should_fail_ex+0x512/0x640 [ 328.599265][T13016] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 328.599286][T13016] should_failslab+0xc2/0x120 [ 328.599305][T13016] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 328.599321][T13016] ? d_instantiate+0x77/0x90 [ 328.599338][T13016] ? alloc_empty_file_noaccount+0x23/0xd0 [ 328.599361][T13016] alloc_empty_file_noaccount+0x23/0xd0 [ 328.599379][T13016] alloc_file_pseudo_noaccount+0x13a/0x230 [ 328.599399][T13016] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 328.599424][T13016] bdev_file_open_by_dev+0x143/0x210 [ 328.599445][T13016] setup_bdev_super+0x39b/0x730 [ 328.599464][T13016] ? __pfx_f2fs_fill_super+0x10/0x10 [ 328.599485][T13016] mount_bdev+0x1c0/0x2e0 [ 328.599508][T13016] ? __pfx_mount_bdev+0x10/0x10 [ 328.599531][T13016] ? apparmor_capable+0x114/0x1d0 [ 328.599547][T13016] ? __pfx_f2fs_mount+0x10/0x10 [ 328.599567][T13016] legacy_get_tree+0x109/0x220 [ 328.599594][T13016] vfs_get_tree+0x8b/0x340 [ 328.599621][T13016] path_mount+0x14d4/0x1f20 [ 328.599638][T13016] ? kmem_cache_free+0x2d4/0x4d0 [ 328.599654][T13016] ? __pfx_path_mount+0x10/0x10 [ 328.599672][T13016] ? putname+0x154/0x1a0 [ 328.599692][T13016] __ia32_sys_mount+0x28b/0x310 [ 328.599708][T13016] ? __pfx___ia32_sys_mount+0x10/0x10 [ 328.599726][T13016] ? rcu_is_watching+0x12/0xc0 [ 328.599745][T13016] __do_fast_syscall_32+0x73/0x120 [ 328.599768][T13016] do_fast_syscall_32+0x32/0x80 [ 328.599789][T13016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.599807][T13016] RIP: 0023:0xf709e579 [ 328.599819][T13016] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.599833][T13016] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 328.599848][T13016] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000040 [ 328.599858][T13016] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.599867][T13016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.599875][T13016] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.599884][T13016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.599906][T13016] [ 328.974719][T13023] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.087438][ T40] audit: type=1326 audit(1746598057.948:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.4.1877" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 329.419843][T13035] FAULT_INJECTION: forcing a failure. [ 329.419843][T13035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.424220][T13035] CPU: 1 UID: 0 PID: 13035 Comm: syz.1.1878 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 329.424246][T13035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.424252][T13035] Call Trace: [ 329.424256][T13035] [ 329.424260][T13035] dump_stack_lvl+0x16c/0x1f0 [ 329.424277][T13035] should_fail_ex+0x512/0x640 [ 329.424293][T13035] should_fail_alloc_page+0xe7/0x130 [ 329.424307][T13035] prepare_alloc_pages+0x3c2/0x610 [ 329.424321][T13035] ? rcu_is_watching+0x12/0xc0 [ 329.424332][T13035] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 329.424347][T13035] ? __perf_event_task_sched_in+0x27a/0xa10 [ 329.424362][T13035] ? lock_acquire+0x179/0x350 [ 329.424380][T13035] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.424393][T13035] ? mark_held_locks+0x49/0x80 [ 329.424404][T13035] ? finish_task_switch.isra.0+0x221/0xc10 [ 329.424417][T13035] ? rcu_is_watching+0x12/0xc0 [ 329.424427][T13035] ? __lock_acquire+0xaa4/0x1ba0 [ 329.424438][T13035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.424452][T13035] ? policy_nodemask+0xea/0x4e0 [ 329.424465][T13035] alloc_pages_mpol+0x1fb/0x550 [ 329.424477][T13035] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 329.424487][T13035] ? __page_table_check_ptes_set+0x1ae/0x420 [ 329.424499][T13035] ? find_held_lock+0x2b/0x80 [ 329.424511][T13035] alloc_pages_noprof+0x131/0x390 [ 329.424523][T13035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.424532][T13035] get_free_pages_noprof+0xc/0x40 [ 329.424544][T13035] kasan_populate_vmalloc_pte+0x2d/0x160 [ 329.424554][T13035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.424563][T13035] __apply_to_page_range+0x617/0xd60 [ 329.424579][T13035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.424591][T13035] ? __pfx___apply_to_page_range+0x10/0x10 [ 329.424606][T13035] ? alloc_vmap_area+0x8a2/0x2970 [ 329.424622][T13035] alloc_vmap_area+0x919/0x2970 [ 329.424641][T13035] ? __pfx_alloc_vmap_area+0x10/0x10 [ 329.424658][T13035] __get_vm_area_node+0x1a7/0x300 [ 329.424675][T13035] vmap+0x159/0x350 [ 329.424688][T13035] ? xdp_umem_create+0xde7/0x1270 [ 329.424700][T13035] ? trace_kmalloc+0x2b/0xd0 [ 329.424713][T13035] ? __pfx_vmap+0x10/0x10 [ 329.424726][T13035] ? xdp_umem_create+0x781/0x1270 [ 329.424740][T13035] xdp_umem_create+0xde7/0x1270 [ 329.424755][T13035] xsk_setsockopt+0x5b2/0x840 [ 329.424766][T13035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.424776][T13035] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.424792][T13035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.424802][T13035] do_sock_setsockopt+0x221/0x470 [ 329.424815][T13035] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 329.424836][T13035] __sys_setsockopt+0x120/0x1a0 [ 329.424848][T13035] __ia32_sys_setsockopt+0xbc/0x160 [ 329.424858][T13035] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.424870][T13035] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 329.424884][T13035] __do_fast_syscall_32+0x73/0x120 [ 329.424899][T13035] do_fast_syscall_32+0x32/0x80 [ 329.424912][T13035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.424924][T13035] RIP: 0023:0xf709e579 [ 329.424933][T13035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.424942][T13035] RSP: 002b:00000000f504c55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 329.424951][T13035] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 329.424957][T13035] RDX: 0000000000000004 RSI: 00000000800000c0 RDI: 0000000000000020 [ 329.424962][T13035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.424967][T13035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 329.424973][T13035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.424985][T13035] [ 329.911473][T13045] ip6tnl1: entered promiscuous mode [ 329.913361][T13045] ip6tnl1: entered allmulticast mode [ 329.917484][T13045] team0: Device ip6tnl1 is of different type [ 330.051730][T13051] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 330.269126][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 330.356998][T13047] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 330.359556][T13047] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 330.471014][ T5993] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 330.650689][ T5993] usb 10-1: Using ep0 maxpacket: 32 [ 330.662152][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.666847][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.671307][ T5993] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 330.675208][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.681568][ T5993] usb 10-1: config 0 descriptor?? [ 330.749478][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 331.095869][ T5993] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 331.160686][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 331.266405][T13097] 9pnet_fd: Insufficient options for proto=fd [ 331.355836][ T6088] usb 10-1: USB disconnect, device number 2 [ 331.863507][T13117] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 331.866238][T13117] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1900'. [ 331.916668][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1900'. [ 332.638247][T13126] lo: left promiscuous mode [ 332.643351][T13126] tunl0: left promiscuous mode [ 332.682633][T13126] gretap0: left promiscuous mode [ 332.691398][T13126] erspan0: left promiscuous mode [ 332.692330][T13124] siw: device registration error -23 [ 332.700919][T13126] ip_vti0: left promiscuous mode [ 332.711429][T13126] ip6_vti0: left promiscuous mode [ 332.713368][T13126] sit0: left promiscuous mode [ 332.715291][T13126] ip6tnl0: left promiscuous mode [ 332.717325][T13126] ip6gre0: left promiscuous mode [ 332.719455][T13126] syz_tun: left promiscuous mode [ 332.731041][T13126] ip6gretap0: left promiscuous mode [ 332.733169][T13126] vcan0: left promiscuous mode [ 332.734924][T13126] bond0: left promiscuous mode [ 332.736871][T13126] dummy0: left promiscuous mode [ 332.739447][T13126] nlmon0: left promiscuous mode [ 332.751276][T13126] caif0: left promiscuous mode [ 332.753405][T13126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.759573][ T6088] lo speed is unknown, defaulting to 1000 [ 333.030910][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 333.032972][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 333.255350][T13158] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.258319][T13158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 333.262605][ T40] audit: type=1326 audit(1746598062.128:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.271818][T13160] FAULT_INJECTION: forcing a failure. [ 333.271818][T13160] name failslab, interval 1, probability 0, space 0, times 0 [ 333.275839][T13160] CPU: 1 UID: 0 PID: 13160 Comm: syz.0.1913 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 333.275864][T13160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.275870][T13160] Call Trace: [ 333.275874][T13160] [ 333.275878][T13160] dump_stack_lvl+0x16c/0x1f0 [ 333.275895][T13160] should_fail_ex+0x512/0x640 [ 333.275908][T13160] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 333.275926][T13160] should_failslab+0xc2/0x120 [ 333.275939][T13160] __kmalloc_cache_noprof+0x6a/0x3e0 [ 333.275953][T13160] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 333.275966][T13160] ? device_create_groups_vargs+0x8a/0x270 [ 333.275982][T13160] device_create_groups_vargs+0x8a/0x270 [ 333.275998][T13160] device_create+0xed/0x130 [ 333.276011][T13160] ? __pfx_device_create+0x10/0x10 [ 333.276025][T13160] ? do_init_timer+0xc9/0x110 [ 333.276036][T13160] ? ieee80211_roc_setup+0x136/0x270 [ 333.276049][T13160] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 333.276067][T13160] mac80211_hwsim_new_radio+0x369/0x54d0 [ 333.276087][T13160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.276103][T13160] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 333.276121][T13160] hwsim_new_radio_nl+0xb51/0x12c0 [ 333.276137][T13160] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.276155][T13160] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 333.276171][T13160] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 333.276187][T13160] genl_family_rcv_msg_doit+0x206/0x2f0 [ 333.276202][T13160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.276215][T13160] ? trace_cap_capable+0x18d/0x200 [ 333.276228][T13160] ? bpf_lsm_capable+0x9/0x10 [ 333.276243][T13160] ? security_capable+0x7e/0x260 [ 333.276253][T13160] ? ns_capable+0xd7/0x110 [ 333.276265][T13160] genl_rcv_msg+0x55c/0x800 [ 333.276279][T13160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.276292][T13160] ? __pfx___dev_queue_xmit+0x10/0x10 [ 333.276308][T13160] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.276323][T13160] ? __lock_acquire+0xaa4/0x1ba0 [ 333.276338][T13160] netlink_rcv_skb+0x16a/0x440 [ 333.276350][T13160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.276364][T13160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.276382][T13160] ? __pfx_down_read+0x10/0x10 [ 333.276397][T13160] ? netlink_deliver_tap+0x1ae/0xd30 [ 333.276410][T13160] genl_rcv+0x28/0x40 [ 333.276421][T13160] netlink_unicast+0x53a/0x7f0 [ 333.276435][T13160] ? __pfx_netlink_unicast+0x10/0x10 [ 333.276450][T13160] netlink_sendmsg+0x8d1/0xdd0 [ 333.276464][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.276477][T13160] ? __import_iovec+0x1c8/0x660 [ 333.276495][T13160] ____sys_sendmsg+0xa95/0xc70 [ 333.276510][T13160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.276523][T13160] ? get_compat_msghdr+0x11a/0x170 [ 333.276540][T13160] ___sys_sendmsg+0x134/0x1d0 [ 333.276551][T13160] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.276579][T13160] __sys_sendmsg+0x16d/0x220 [ 333.276590][T13160] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.276606][T13160] ? __secure_computing+0x21c/0x320 [ 333.276618][T13160] __do_fast_syscall_32+0x73/0x120 [ 333.276633][T13160] do_fast_syscall_32+0x32/0x80 [ 333.276646][T13160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.276659][T13160] RIP: 0023:0xf7f36579 [ 333.276667][T13160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.276677][T13160] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 333.276686][T13160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 333.276692][T13160] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.276698][T13160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.276703][T13160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 333.276708][T13160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.276721][T13160] [ 333.280736][ T40] audit: type=1326 audit(1746598062.128:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.280763][ T40] audit: type=1326 audit(1746598062.128:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.280783][ T40] audit: type=1326 audit(1746598062.128:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.280803][ T40] audit: type=1326 audit(1746598062.128:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.280821][ T40] audit: type=1326 audit(1746598062.128:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.303306][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 333.303938][ T40] audit: type=1326 audit(1746598062.128:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.305727][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 333.307298][ T40] audit: type=1326 audit(1746598062.138:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.454796][ T40] audit: type=1326 audit(1746598062.138:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.1913" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 333.504307][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 333.508925][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 333.748552][T13135] ceph: No mds server is up or the cluster is laggy [ 333.760781][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 333.881527][T13175] ip6tnl1: entered promiscuous mode [ 333.883382][T13175] ip6tnl1: entered allmulticast mode [ 333.887988][T13175] team0: Device ip6tnl1 is of different type [ 333.940640][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 333.966277][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.072432][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.079866][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.083188][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.087741][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.091670][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.097338][T13180] FAULT_INJECTION: forcing a failure. [ 334.097338][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.101517][T13180] CPU: 2 UID: 0 PID: 13180 Comm: syz.5.1920 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 334.101531][T13180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.101537][T13180] Call Trace: [ 334.101540][T13180] [ 334.101544][T13180] dump_stack_lvl+0x16c/0x1f0 [ 334.101562][T13180] should_fail_ex+0x512/0x640 [ 334.101578][T13180] _copy_to_user+0x32/0xd0 [ 334.101594][T13180] simple_read_from_buffer+0xcb/0x170 [ 334.101610][T13180] proc_fail_nth_read+0x197/0x270 [ 334.101625][T13180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.101639][T13180] ? rw_verify_area+0xcf/0x680 [ 334.101653][T13180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.101667][T13180] vfs_read+0x1de/0xc70 [ 334.101677][T13180] ? __pfx___mutex_lock+0x10/0x10 [ 334.101691][T13180] ? __pfx_vfs_read+0x10/0x10 [ 334.101703][T13180] ? __fget_files+0x20e/0x3c0 [ 334.101722][T13180] ksys_read+0x12a/0x240 [ 334.101731][T13180] ? __pfx_ksys_read+0x10/0x10 [ 334.101741][T13180] ? rcu_is_watching+0x12/0xc0 [ 334.101752][T13180] __do_fast_syscall_32+0x73/0x120 [ 334.101767][T13180] do_fast_syscall_32+0x32/0x80 [ 334.101781][T13180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.101793][T13180] RIP: 0023:0xf7fb2579 [ 334.101801][T13180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.101810][T13180] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 334.101820][T13180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50d6620 [ 334.101826][T13180] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 334.101831][T13180] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 334.101837][T13180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 334.101842][T13180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.101854][T13180] [ 334.172896][ C2] vkms_vblank_simulate: vblank timer overrun [ 334.305006][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 334.306843][ T9] usbtmc 6-1:16.0: can't read capabilities [ 334.425660][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 334.425669][ T40] audit: type=1326 audit(1746598063.288:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.435689][ T40] audit: type=1326 audit(1746598063.298:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.443194][ T40] audit: type=1326 audit(1746598063.298:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.452254][ T40] audit: type=1326 audit(1746598063.298:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.459293][ T40] audit: type=1326 audit(1746598063.298:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.466587][ T40] audit: type=1326 audit(1746598063.308:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.473942][ T40] audit: type=1326 audit(1746598063.308:19229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.481184][ T40] audit: type=1326 audit(1746598063.308:19230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.488260][ T40] audit: type=1326 audit(1746598063.308:19231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.495434][ T40] audit: type=1326 audit(1746598063.348:19232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.511968][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.661469][ T9] usb 6-1: USB disconnect, device number 18 [ 335.078378][T13214] tipc: Enabled bearer , priority 10 [ 335.115015][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 335.149260][T13219] netlink: 'syz.5.1931': attribute type 1 has an invalid length. [ 335.192712][T13218] tipc: Disabling bearer [ 335.281328][ T7664] smc: removing ib device syz1 [ 335.323273][T13219] bond2: entered promiscuous mode [ 335.325992][T13219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.529810][ T5993] syz1: Port: 1 Link DOWN [ 335.532480][T13226] bridge_slave_0: left allmulticast mode [ 335.535844][T13226] bridge_slave_0: left promiscuous mode [ 335.538086][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.560108][T13226] bridge_slave_1: left allmulticast mode [ 335.565566][T13226] bridge_slave_1: left promiscuous mode [ 335.569895][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.580975][T13226] bond0: (slave bond_slave_0): Releasing backup interface [ 335.597206][T13226] bond0: (slave bond_slave_1): Releasing backup interface [ 335.613390][T13226] team0: Port device team_slave_0 removed [ 335.617216][T13226] team0: Port device team_slave_1 removed [ 335.619275][T13226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.622732][T13226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.626432][T13230] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1934'. [ 335.686613][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 336.156068][T13254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.234491][T13256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.697126][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 337.700959][T13279] overlayfs: failed to resolve './file0': -2 [ 337.701369][T13280] overlayfs: failed to resolve './file0': -2 [ 338.759127][T13308] lo speed is unknown, defaulting to 1000 [ 338.761751][T13308] lo speed is unknown, defaulting to 1000 [ 338.879537][T13308] lo speed is unknown, defaulting to 1000 [ 339.492583][T13349] lo speed is unknown, defaulting to 1000 [ 339.495162][T13349] lo speed is unknown, defaulting to 1000 [ 339.532796][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 339.532806][ T40] audit: type=1326 audit(1746598068.398:19241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.1958" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 339.564440][ T40] audit: type=1800 audit(1746598068.428:19242): pid=13356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1956" name="file0" dev="overlay" ino=2867 res=0 errno=0 [ 339.602536][T13349] lo speed is unknown, defaulting to 1000 [ 340.671210][T13388] ip6tnl1: entered promiscuous mode [ 340.673009][T13388] ip6tnl1: entered allmulticast mode [ 340.676759][T13388] team0: Refused to change device type [ 340.876896][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 341.588716][T13407] input: syz1 as /devices/virtual/input/input23 [ 341.607843][T13409] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 341.610657][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.0.1968 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 341.610673][T13409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 341.610679][T13409] Call Trace: [ 341.610683][T13409] [ 341.610688][T13409] dump_stack_lvl+0x16c/0x1f0 [ 341.610705][T13409] sysfs_warn_dup+0x7f/0xa0 [ 341.610722][T13409] sysfs_do_create_link_sd+0x124/0x140 [ 341.610738][T13409] sysfs_create_link+0x61/0xc0 [ 341.610754][T13409] device_add+0x62c/0x1a70 [ 341.610769][T13409] ? __pfx_device_add+0x10/0x10 [ 341.610781][T13409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.610795][T13409] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 341.610812][T13409] wiphy_register+0x1c9c/0x2850 [ 341.610822][T13409] ? netdev_run_todo+0x864/0x1320 [ 341.610835][T13409] ? __dev_printk+0x190/0x270 [ 341.610847][T13409] ? __pfx_wiphy_register+0x10/0x10 [ 341.610864][T13409] ieee80211_register_hw+0x2432/0x4020 [ 341.610885][T13409] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 341.610902][T13409] ? find_held_lock+0x2b/0x80 [ 341.610912][T13409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.610925][T13409] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 341.610936][T13409] ? __hrtimer_setup+0x176/0x280 [ 341.610951][T13409] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 341.610973][T13409] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 341.610986][T13409] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 341.611000][T13409] ? __asan_memcpy+0x3c/0x60 [ 341.611011][T13409] hwsim_new_radio_nl+0xb51/0x12c0 [ 341.611027][T13409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 341.611045][T13409] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 341.611059][T13409] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 341.611076][T13409] genl_family_rcv_msg_doit+0x206/0x2f0 [ 341.611090][T13409] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 341.611104][T13409] ? trace_cap_capable+0x18d/0x200 [ 341.611117][T13409] ? bpf_lsm_capable+0x9/0x10 [ 341.611127][T13409] ? security_capable+0x7e/0x260 [ 341.611137][T13409] ? ns_capable+0xd7/0x110 [ 341.611148][T13409] genl_rcv_msg+0x55c/0x800 [ 341.611162][T13409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.611176][T13409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 341.611190][T13409] ? __lock_acquire+0xaa4/0x1ba0 [ 341.611205][T13409] netlink_rcv_skb+0x16a/0x440 [ 341.611223][T13409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.611238][T13409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.611257][T13409] ? __pfx_down_read+0x10/0x10 [ 341.611273][T13409] ? netlink_deliver_tap+0x1ae/0xd30 [ 341.611287][T13409] genl_rcv+0x28/0x40 [ 341.611299][T13409] netlink_unicast+0x53a/0x7f0 [ 341.611313][T13409] ? __pfx_netlink_unicast+0x10/0x10 [ 341.611330][T13409] netlink_sendmsg+0x8d1/0xdd0 [ 341.611346][T13409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.611359][T13409] ? __import_iovec+0x1c8/0x660 [ 341.611377][T13409] ____sys_sendmsg+0xa95/0xc70 [ 341.611394][T13409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.611406][T13409] ? get_compat_msghdr+0x11a/0x170 [ 341.611419][T13409] ? try_to_wake_up+0xa2f/0x1680 [ 341.611431][T13409] ___sys_sendmsg+0x134/0x1d0 [ 341.611442][T13409] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.611470][T13409] __sys_sendmsg+0x16d/0x220 [ 341.611481][T13409] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.611491][T13409] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 341.611507][T13409] ? rcu_is_watching+0x12/0xc0 [ 341.611517][T13409] ? rcu_is_watching+0x12/0xc0 [ 341.611527][T13409] __do_fast_syscall_32+0x73/0x120 [ 341.611542][T13409] do_fast_syscall_32+0x32/0x80 [ 341.611555][T13409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.611567][T13409] RIP: 0023:0xf7f36579 [ 341.611575][T13409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 341.611584][T13409] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 341.611594][T13409] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 341.611599][T13409] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.611605][T13409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.611610][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.611615][T13409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.611628][T13409] [ 342.083738][ T40] audit: type=1800 audit(1746598070.948:19243): pid=13420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1969" name="file0" dev="overlay" ino=2616 res=0 errno=0 [ 342.436844][ T5940] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 342.445081][T13424] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 342.569546][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 342.647671][T13429] input: syz0 as /devices/virtual/input/input24 [ 344.014771][T13461] bridge0: port 1(vlan3) entered blocking state [ 344.017633][T13461] bridge0: port 1(vlan3) entered disabled state [ 344.020101][T13461] vlan3: entered allmulticast mode [ 344.022035][T13461] bridge0: entered allmulticast mode [ 344.034133][T13461] vlan3: left allmulticast mode [ 344.035814][T13461] bridge0: left allmulticast mode [ 344.108035][ T40] audit: type=1800 audit(1746598072.968:19244): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1982" name="file0" dev="overlay" ino=2905 res=0 errno=0 [ 344.613614][T13465] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 344.643313][T13467] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1985'. [ 345.269345][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.273833][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.500726][ T5996] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 345.915802][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 348.135146][T13568] [ 348.136015][T13568] ====================================================== [ 348.138270][T13568] WARNING: possible circular locking dependency detected [ 348.140526][T13568] 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 Not tainted [ 348.143933][T13568] ------------------------------------------------------ [ 348.146404][T13568] syz.4.2015/13568 is trying to acquire lock: [ 348.148398][T13568] ffff888022b45888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 348.151391][T13568] [ 348.151391][T13568] but task is already holding lock: [ 348.153762][T13568] ffff888013102868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 348.156415][T13568] [ 348.156415][T13568] which lock already depends on the new lock. [ 348.156415][T13568] [ 348.159754][T13568] [ 348.159754][T13568] the existing dependency chain (in reverse order) is: [ 348.162635][T13568] [ 348.162635][T13568] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 348.165013][T13568] __mutex_lock+0x199/0xb90 [ 348.166665][T13568] anon_pipe_write+0x15d/0x1a70 [ 348.168415][T13568] __kernel_write_iter+0x71d/0xa90 [ 348.170241][T13568] __kernel_write+0xf5/0x140 [ 348.171905][T13568] autofs_notify_daemon+0x4db/0xd60 [ 348.173757][T13568] autofs_wait+0x10ca/0x1a70 [ 348.175431][T13568] autofs_mount_wait+0x132/0x380 [ 348.177202][T13568] autofs_d_automount+0x390/0x7f0 [ 348.179005][T13568] __traverse_mounts+0x192/0x790 [ 348.180779][T13568] step_into+0x5aa/0x2270 [ 348.182378][T13568] walk_component+0xfc/0x5b0 [ 348.184047][T13568] path_lookupat+0x17e/0x780 [ 348.185710][T13568] filename_lookup+0x224/0x5f0 [ 348.187438][T13568] user_path_at+0x3a/0x60 [ 348.189030][T13568] __ia32_sys_mount+0x1fb/0x310 [ 348.190783][T13568] __do_fast_syscall_32+0x73/0x120 [ 348.192609][T13568] do_fast_syscall_32+0x32/0x80 [ 348.194371][T13568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.196570][T13568] [ 348.196570][T13568] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 348.199117][T13568] __mutex_lock+0x199/0xb90 [ 348.200761][T13568] autofs_notify_daemon+0x4a6/0xd60 [ 348.202704][T13568] autofs_wait+0x10ca/0x1a70 [ 348.204388][T13568] autofs_mount_wait+0x132/0x380 [ 348.206167][T13568] autofs_d_automount+0x390/0x7f0 [ 348.207982][T13568] __traverse_mounts+0x192/0x790 [ 348.209756][T13568] step_into+0x5aa/0x2270 [ 348.211364][T13568] walk_component+0xfc/0x5b0 [ 348.213037][T13568] path_lookupat+0x17e/0x780 [ 348.214722][T13568] filename_lookup+0x224/0x5f0 [ 348.216454][T13568] kern_path+0x35/0x50 [ 348.217985][T13568] lookup_bdev+0xd8/0x280 [ 348.219585][T13568] resume_store+0x1d6/0x460 [ 348.221312][T13568] kobj_attr_store+0x55/0x80 [ 348.223178][T13568] sysfs_kf_write+0xef/0x150 [ 348.225246][T13568] kernfs_fop_write_iter+0x351/0x510 [ 348.227167][T13568] vfs_write+0x5ba/0x1180 [ 348.228756][T13568] ksys_write+0x12a/0x240 [ 348.230362][T13568] __do_fast_syscall_32+0x73/0x120 [ 348.232188][T13568] do_fast_syscall_32+0x32/0x80 [ 348.233950][T13568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.236161][T13568] [ 348.236161][T13568] -> #0 (&of->mutex){+.+.}-{4:4}: [ 348.239010][T13568] __lock_acquire+0x1173/0x1ba0 [ 348.241186][T13568] lock_acquire+0x179/0x350 [ 348.242944][T13568] __mutex_lock+0x199/0xb90 [ 348.244646][T13568] kernfs_fop_write_iter+0x28f/0x510 [ 348.246578][T13568] iter_file_splice_write+0x91c/0x1150 [ 348.248550][T13568] do_splice+0x1475/0x1fc0 [ 348.250188][T13568] __do_splice+0x32a/0x360 [ 348.251838][T13568] __ia32_sys_splice+0x189/0x250 [ 348.253621][T13568] __do_fast_syscall_32+0x73/0x120 [ 348.255466][T13568] do_fast_syscall_32+0x32/0x80 [ 348.257222][T13568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.259435][T13568] [ 348.259435][T13568] other info that might help us debug this: [ 348.259435][T13568] [ 348.262708][T13568] Chain exists of: [ 348.262708][T13568] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 348.262708][T13568] [ 348.266713][T13568] Possible unsafe locking scenario: [ 348.266713][T13568] [ 348.269144][T13568] CPU0 CPU1 [ 348.270880][T13568] ---- ---- [ 348.272618][T13568] lock(&pipe->mutex); [ 348.274020][T13568] lock(&sbi->pipe_mutex); [ 348.276272][T13568] lock(&pipe->mutex); [ 348.278437][T13568] lock(&of->mutex); [ 348.279751][T13568] [ 348.279751][T13568] *** DEADLOCK *** [ 348.279751][T13568] [ 348.282529][T13568] 2 locks held by syz.4.2015/13568: [ 348.284239][T13568] #0: ffff8880230c0420 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 348.287174][T13568] #1: ffff888013102868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 348.289978][T13568] [ 348.289978][T13568] stack backtrace: [ 348.291891][T13568] CPU: 2 UID: 0 PID: 13568 Comm: syz.4.2015 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 348.291904][T13568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.291913][T13568] Call Trace: [ 348.291918][T13568] [ 348.291922][T13568] dump_stack_lvl+0x116/0x1f0 [ 348.291937][T13568] print_circular_bug+0x275/0x350 [ 348.291951][T13568] check_noncircular+0x14c/0x170 [ 348.291965][T13568] __lock_acquire+0x1173/0x1ba0 [ 348.291980][T13568] lock_acquire+0x179/0x350 [ 348.291992][T13568] ? kernfs_fop_write_iter+0x28f/0x510 [ 348.292005][T13568] ? __pfx___might_resched+0x10/0x10 [ 348.292017][T13568] __mutex_lock+0x199/0xb90 [ 348.292030][T13568] ? kernfs_fop_write_iter+0x28f/0x510 [ 348.292042][T13568] ? kernfs_fop_write_iter+0x28f/0x510 [ 348.292055][T13568] ? __pfx___mutex_lock+0x10/0x10 [ 348.292068][T13568] ? __pfx__copy_from_iter+0x10/0x10 [ 348.292082][T13568] ? rcu_is_watching+0x12/0xc0 [ 348.292091][T13568] ? trace_kmalloc+0x2b/0xd0 [ 348.292103][T13568] ? __kmalloc_noprof+0x242/0x510 [ 348.292114][T13568] ? kernfs_fop_write_iter+0x28f/0x510 [ 348.292125][T13568] kernfs_fop_write_iter+0x28f/0x510 [ 348.292143][T13568] iter_file_splice_write+0x91c/0x1150 [ 348.292161][T13568] ? __pfx_iter_file_splice_write+0x10/0x10 [ 348.292179][T13568] ? __pfx_iter_file_splice_write+0x10/0x10 [ 348.292194][T13568] do_splice+0x1475/0x1fc0 [ 348.292208][T13568] ? __lock_acquire+0x5ca/0x1ba0 [ 348.292222][T13568] ? __pfx_do_splice+0x10/0x10 [ 348.292237][T13568] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 348.292251][T13568] ? find_held_lock+0x2b/0x80 [ 348.292261][T13568] __do_splice+0x32a/0x360 [ 348.292276][T13568] ? __pfx___do_splice+0x10/0x10 [ 348.292291][T13568] __ia32_sys_splice+0x189/0x250 [ 348.292306][T13568] __do_fast_syscall_32+0x73/0x120 [ 348.292319][T13568] do_fast_syscall_32+0x32/0x80 [ 348.292332][T13568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.292344][T13568] RIP: 0023:0xf70be579 [ 348.292352][T13568] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 348.292362][T13568] RSP: 002b:00000000f508d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 348.292372][T13568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 348.292378][T13568] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 000000000000bfd1 [ 348.292383][T13568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.292389][T13568] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.292394][T13568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.292403][T13568] [ 348.292481][ C2] vkms_vblank_simulate: vblank timer overrun [ 348.320897][T13571] syz.5.2016: attempt to access beyond end of device [ 348.320897][T13571] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 348.321594][ C2] vkms_vblank_simulate: vblank timer overrun [ 348.379058][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.379342][ C2] vkms_vblank_simulate: vblank timer overrun [ 348.384144][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.385342][ C2] hrtimer: interrupt took 92866500 ns [ 348.387851][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.398285][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.401073][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.403611][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.406314][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.408900][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.411623][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.414182][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.416687][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.419281][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.422050][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.424601][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.427218][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.456297][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.458836][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.461556][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.464076][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.466574][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.469068][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.471865][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.474411][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.476906][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.478234][ C2] vkms_vblank_simulate: vblank timer overrun [ 348.479403][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.484056][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.486572][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.489078][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.491801][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.494329][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.496824][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.499337][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 348.504913][ T1464] hid-generic 0004:FFFFFFFF:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.630548][ T7650] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.640649][ T5992] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 348.781795][ T7650] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.842478][ T7650] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.902380][ T7650] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.976884][ T7650] tipc: Resetting bearer [ 348.991250][ T7650] tipc: Disabling bearer [ 349.014614][ T7650] dvmrp1 (unregistering): left allmulticast mode [ 349.024030][ T7650] geneve0 (unregistering): left promiscuous mode [ 349.026638][ T7650] team0: Port device geneve0 removed [ 349.174485][ T7650] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 349.178800][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.182069][ T7650] bond_slave_0: left promiscuous mode [ 349.184525][ T7650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.187408][ T7650] bond_slave_1: left promiscuous mode [ 349.189727][ T7650] bond0 (unregistering): (slave bond1): Releasing backup interface [ 349.192689][ T7650] bond1 (unregistering): left promiscuous mode [ 349.195081][ T7650] bond0 (unregistering): (slave team0): Releasing backup interface [ 349.198186][ T7650] bond0 (unregistering): Released all slaves [ 349.266265][ T7650] bond1 (unregistering): Released all slaves [ 349.270122][ T7650] bond2 (unregistering): Released all slaves [ 349.274105][ T7650] bond3 (unregistering): Released all slaves [ 350.871542][ T7650] : left promiscuous mode [ 350.932023][ T7650] tipc: Left network mode [ 351.185560][ T7650] hsr_slave_0: left promiscuous mode [ 351.188448][ T7650] hsr_slave_1: left promiscuous mode [ 351.191137][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.193557][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.196238][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.198661][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.203498][ T7650] veth1_macvtap: left promiscuous mode [ 351.205305][ T7650] veth0_macvtap: left promiscuous mode [ 351.367683][ T7650] team_slave_1 (unregistering): left promiscuous mode [ 351.370231][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 351.409533][ T7650] team_slave_0 (unregistering): left promiscuous mode [ 351.412565][ T7650] team0 (unregistering): Port device team_slave_0 removed [ 351.589626][ T7641] smc: removing ib device sz1 [ 351.591626][ T5992] lo speed is unknown, defaulting to 1000 [ 351.593499][ T5992] sz1: Port: 1 Link DOWN [ 351.863929][ T7650] IPVS: stop unused estimator thread 0... [ 352.218160][ T7650] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.262131][ T7650] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.293545][ T7650] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.357209][ T7650] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.436937][ T7650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.491782][ T7650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.552223][ T7650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.623091][ T7650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.519503][ T7650] bond0 (unregistering): Released all slaves [ 353.525514][ T7650] bond1 (unregistering): Released all slaves [ 353.600236][ T7650] bond2 (unregistering): Released all slaves [ 353.665096][ T7650]  (unregistering): Released all slaves [ 353.737486][ T7650] bond1 (unregistering): Released all slaves [ 353.805445][ T7650] bond0 (unregistering): Released all slaves [ 353.871514][ T7650] bond1 (unregistering): Released all slaves [ 353.940516][ T7650] bond2 (unregistering): Released all slaves [ 354.006652][ T7650] bond3 (unregistering): Released all slaves [ 354.065493][ T7650] : left promiscuous mode [ 354.134875][ T7650] tipc: Left network mode [ 354.148415][ T7650] tipc: Left network mode [ 354.754143][ T7650] hsr_slave_0: left promiscuous mode [ 354.756155][ T7650] hsr_slave_1: left promiscuous mode [ 354.764485][ T7650] veth1_macvtap: left promiscuous mode [ 354.766321][ T7650] veth0_macvtap: left promiscuous mode [ 354.768188][ T7650] veth1_vlan: left promiscuous mode [ 354.769925][ T7650] veth0_vlan: left promiscuous mode [ 354.774319][ T7650] veth1_macvtap: left promiscuous mode [ 354.776151][ T7650] veth0_macvtap: left promiscuous mode [ 354.777983][ T7650] veth1_vlan: left promiscuous mode [ 356.996988][ T5996] lo speed is unknown, defaulting to 1000 [ 356.999561][ T5996] infiniband syz0: ib_query_port failed (-19) [ 357.003246][ T5993] lo speed is unknown, defaulting to 1000 [ 357.005755][ T5993] infiniband syz2: ib_query_port failed (-19) [ 357.897275][ T7650] IPVS: stop unused estimator thread 0... [ 357.899629][ T7650] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 06:07:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b232de8 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8bf46be0 RDI=ffffffff8dce4d00 RBP=0000000000000000 RSP=ffffc90003c2f660 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90852317 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a07450 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71e3820 CR3=0000000051aab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000100 RBX=0000000000000180 RCX=0000000000000007 RDX=0000000000000120 RSI=0000000000000000 RDI=ffff88802b323c74 RBP=ffff88802b323c40 RSP=ffffc9000046fb48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=ffffffff8e2ad0c0 RIP=ffffffff81945df0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000582c1000 CR3=0000000051aab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c2175 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc900045af228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9addfb80 R15=ffffffff854c2110 RIP=ffffffff854c219f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3b9cf2 CR3=000000006b635000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000035a24c RBX=0000000000000003 RCX=ffffffff8b6953e9 RDX=ffffed10056a65be RSI=ffffffff8bf46be0 RDI=ffffffff81913241 RBP=ffffed1003b59000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000001 R12=0000000000000003 R13=ffff88801dac8000 R14=ffffffff90852310 R15=0000000000000000 RIP=ffffffff8b693c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f508dda4 CR3=0000000051aab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000