last executing test programs: 51.063362245s ago: executing program 2 (id=1704): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = syz_io_uring_setup(0x81e, &(0x7f0000000500)={0x0, 0x5fc, 0x1000, 0x3, 0x100024f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r1, 0x0, &(0x7f0000000300), 0x0, 0xc804, 0x1}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee63}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) (async) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) 49.941466864s ago: executing program 2 (id=1709): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0, 0x2000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x1, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161100) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xf5, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5b3}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x40, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000380)=0xffffffff, 0x6, 0x20000002, 0x0, 0x0, 0xfffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="15460100120001006d616373656300000c000280080005001900010008000500", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}}}, 0x48) r12 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22e242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r12, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r12, &(0x7f00000003c0), 0x2) 49.740262531s ago: executing program 2 (id=1712): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x968c61, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 49.316026898s ago: executing program 2 (id=1714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0028000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x22}, 0x48) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x5b, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a5", &(0x7f00000006c0)=""/254, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x4c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setpipe(r3, 0x407, 0x13) 48.410676023s ago: executing program 2 (id=1718): socket$xdp(0x2c, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.'}, {0x20, '/dev/snd/midiC#D#\x00'}], 0xa, "b9fa714de962131fe5026b374a9acb68d7d08e9a6b629bf29bac33d75e6344a36645d17c2388ec9c1ac7724028b6684fc78da2f9ea15bd85b441186efa6cb128ce043ebbdb6f2eed9a131ed999afcc4c30ac9eccf467e6323f794bd5bf97e15ef1b8269faff247e66fd2c86430d43fb9ed945ab82542cf1587683447635b05da06402713073f691300dadc2689d8ace9fadc99c36a161dd36c824937c1ccb76ca187ac35fa815d216f5980fae6f5188f274230595115d227bfe35f57518d38c2430507"}, 0xe4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) lseek(r2, 0xa, 0x4) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) (async) userfaultfd(0x801) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) r3 = semget(0x1, 0x1, 0x789) r4 = semget(0x0, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) (async) semctl$IPC_RMID(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 40.261880992s ago: executing program 0 (id=1747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0xd, 0xffc, 0x4a}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) 39.156583183s ago: executing program 0 (id=1751): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x1, 0x0) (fail_nth: 68) 38.956749067s ago: executing program 0 (id=1753): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x1, r2}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5b3}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x3, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="15460100120001006d616373656300000c000280080005001900010008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}}}, 0x48) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 36.962821184s ago: executing program 0 (id=1758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000300072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x22}, 0x48) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x5b, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a5", &(0x7f00000006c0)=""/254, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x4c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setpipe(r3, 0x407, 0x13) 35.967236203s ago: executing program 0 (id=1762): r0 = syz_open_dev$vim2m(&(0x7f0000005f00), 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x10b001, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x7, 0x1f, 0x4, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x9, 0x28, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x800, 0x80000000}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000540)=@mmap={0x0, 0x2, 0xe45188d2a2f59ab2, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) 35.864777748s ago: executing program 0 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="e8dcc60825d3978f8acb6085f8a3ec7cdb1fc94e04ae349ea7b5fd8e6c3dd0000f06661d6502aacd4e06741e3903b3f3a3f3fee171ac94663f19b97d0171f0b2f9532504099e6bdbfb56dc736aa3be5d8b9ed13da59e49a59c1dcb5377d06f4184b9348e07aeba464123f3a572c55fec4310"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r5, @ANYRES32, @ANYRESDEC=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r7, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) 20.754345916s ago: executing program 32 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="e8dcc60825d3978f8acb6085f8a3ec7cdb1fc94e04ae349ea7b5fd8e6c3dd0000f06661d6502aacd4e06741e3903b3f3a3f3fee171ac94663f19b97d0171f0b2f9532504099e6bdbfb56dc736aa3be5d8b9ed13da59e49a59c1dcb5377d06f4184b9348e07aeba464123f3a572c55fec4310"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r5, @ANYRES32, @ANYRESDEC=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r7, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1495729d32398db672bd0f0027a377db0000000084af31de526cdd0be1e61263fa7bc72a83f60f008e91981f6aa2cf0e7e317a0e3d483431a7ee86048a30ff6bbf6b18d6e6a87849da142babb8315415a4f8ebee9f89467dbc24b78e0002000029fc1e771d46779d2125bf0751c872506309e8f970f36bc8817ba2bca2aaae41ac549afefd9014e8ef26d604c0c7adb5fffffffffffffffcf3f8d04599f2b356f6e26a04f820ca87a6ad4472a7436c36a1c6306ef4a29de3cf0c77e220515bcd6c6abed46be8e2a37fbb948c768becefe39c8265ec288f9eae145f32504474946d926c0963d1693915c5dec559a28860fcb561087e7e98c5cc543674ad294161cd3578085295becbb12101696ce45fc391f0dd7cc1208354a685186a708a52b9034df5cc9dbd1ae459962561426acc0e6d1e153f309c53d7b2907a7b8de0b4f6b75801c024b4a75cbb6ab861ba7f94b4c9e9f22e7158b637299b9cb1355e827042c20dc09faf9092290f9271be38057d326a82c6ac4c3d81db08ff2309803c564b9bbae47cb4ef720eaf127e3d1d93c2e4f1a0e269d43da4c91d05d85e8b5db720dcee1b5318cb769a90eef14ab6abc8"], 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) 2.895984669s ago: executing program 1 (id=1792): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000002"], 0x24, 0x0) 2.702988453s ago: executing program 1 (id=1793): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x13, 0x3a, '^%-\xd6}[)#[)\x95[', 0x3a, '^%-\x01}[)#[)\x95[', 0x3a, './file0', 0x3a, [0x46, 0x50]}, 0x41) 2.702711755s ago: executing program 1 (id=1794): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x1, 0x5, @vifc_lcl_ifindex=r2, @rand_addr=0x64010101}, 0x10) 2.033302306s ago: executing program 3 (id=1802): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0xe, 0x58, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0xff, 0x1, 0x0, 0x1, 0x6, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0xf5, 0x3, 0x0, 0x0, 0x5, 0x8}, 0x2, {0x7ff, 0x50, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 973.781572ms ago: executing program 1 (id=1803): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x2, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0xfffffff7) 810.213057ms ago: executing program 3 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 806.274237ms ago: executing program 1 (id=1805): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') 710.993023ms ago: executing program 3 (id=1806): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fadvise64(r0, 0xff, 0xdf0, 0x5) 710.563587ms ago: executing program 3 (id=1807): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x40045402, 0xfffffffffffffffe) 632.139822ms ago: executing program 3 (id=1808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x70ad29, 0x3, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) 631.144372ms ago: executing program 3 (id=1809): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8953, 0xfffffffffffffffe) clock_gettime(0x7, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}], ['\x00']}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) 73.49752ms ago: executing program 2 (id=1718): socket$xdp(0x2c, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.'}, {0x20, '/dev/snd/midiC#D#\x00'}], 0xa, "b9fa714de962131fe5026b374a9acb68d7d08e9a6b629bf29bac33d75e6344a36645d17c2388ec9c1ac7724028b6684fc78da2f9ea15bd85b441186efa6cb128ce043ebbdb6f2eed9a131ed999afcc4c30ac9eccf467e6323f794bd5bf97e15ef1b8269faff247e66fd2c86430d43fb9ed945ab82542cf1587683447635b05da06402713073f691300dadc2689d8ace9fadc99c36a161dd36c824937c1ccb76ca187ac35fa815d216f5980fae6f5188f274230595115d227bfe35f57518d38c2430507"}, 0xe4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) lseek(r2, 0xa, 0x4) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) (async) userfaultfd(0x801) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) r3 = semget(0x1, 0x1, 0x789) r4 = semget(0x0, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) (async) semctl$IPC_RMID(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 0s ago: executing program 1 (id=1810): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) kernel console output (not intermixed with test programs): 0 [ 340.035309][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.071577][T11107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.095881][T11107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.103515][T11107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.106364][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.193764][T11129] netlink: 'syz.0.1252': attribute type 33 has an invalid length. [ 340.197243][T11129] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1252'. [ 340.654236][T11140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 340.656321][T11140] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.681993][T11140] vhci_hcd vhci_hcd.0: Device attached [ 340.835249][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.905468][ T6122] usb 41-1: new high-speed USB device number 12 using vhci_hcd [ 340.916708][T11155] FAULT_INJECTION: forcing a failure. [ 340.916708][T11155] name failslab, interval 1, probability 0, space 0, times 0 [ 340.921937][T11155] CPU: 3 UID: 0 PID: 11155 Comm: syz.1.1259 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 340.921958][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 340.921969][T11155] Call Trace: [ 340.921974][T11155] [ 340.921980][T11155] dump_stack_lvl+0x16c/0x1f0 [ 340.922007][T11155] should_fail_ex+0x512/0x640 [ 340.922035][T11155] should_failslab+0xc2/0x120 [ 340.922052][T11155] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 340.922079][T11155] ? skb_clone+0x190/0x3f0 [ 340.922108][T11155] skb_clone+0x190/0x3f0 [ 340.922134][T11155] raw6_local_deliver+0x3cc/0xa40 [ 340.922159][T11155] ? __pfx_raw6_local_deliver+0x10/0x10 [ 340.922185][T11155] ip6_protocol_deliver_rcu+0x1f1/0x1520 [ 340.922205][T11155] ? ip6_protocol_deliver_rcu+0x1450/0x1520 [ 340.922238][T11155] ip6_input_finish+0x102/0x180 [ 340.922259][T11155] ip6_input+0x105/0x2f0 [ 340.922272][T11155] ip6_mc_input+0x465/0xfd0 [ 340.922287][T11155] ? __pfx_ip6_mc_input+0x10/0x10 [ 340.922301][T11155] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 340.922316][T11155] ? __pfx_ip6_mc_input+0x10/0x10 [ 340.922330][T11155] ipv6_rcv+0x45d/0x680 [ 340.922343][T11155] ? __pfx_ipv6_rcv+0x10/0x10 [ 340.922355][T11155] __netif_receive_skb_one_core+0x12d/0x1e0 [ 340.922371][T11155] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 340.922387][T11155] ? lock_acquire+0x179/0x350 [ 340.922403][T11155] ? __phys_addr+0xe8/0x180 [ 340.922430][T11155] __netif_receive_skb+0x1d/0x160 [ 340.922447][T11155] netif_receive_skb+0x137/0x7b0 [ 340.922461][T11155] ? __pfx_netif_receive_skb+0x10/0x10 [ 340.922480][T11155] tun_rx_batched.isra.0+0x3ee/0x740 [ 340.922498][T11155] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 340.922518][T11155] ? tun_get_user+0x1c0d/0x3b80 [ 340.922527][T11155] ? rcu_is_watching+0x12/0xc0 [ 340.922541][T11155] tun_get_user+0x28a2/0x3b80 [ 340.922556][T11155] ? __pfx_tun_get_user+0x10/0x10 [ 340.922566][T11155] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 340.922586][T11155] ? find_held_lock+0x2b/0x80 [ 340.922598][T11155] ? tun_get+0x191/0x370 [ 340.922616][T11155] tun_chr_write_iter+0xdc/0x210 [ 340.922628][T11155] vfs_write+0x6c4/0x1150 [ 340.922643][T11155] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 340.922655][T11155] ? __pfx_vfs_write+0x10/0x10 [ 340.922669][T11155] ? find_held_lock+0x2b/0x80 [ 340.922691][T11155] ksys_write+0x12a/0x250 [ 340.922706][T11155] ? __pfx_ksys_write+0x10/0x10 [ 340.922722][T11155] ? rcu_is_watching+0x12/0xc0 [ 340.922735][T11155] __do_fast_syscall_32+0x7c/0x3a0 [ 340.922753][T11155] do_fast_syscall_32+0x32/0x80 [ 340.922769][T11155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.922783][T11155] RIP: 0023:0xf709e579 [ 340.922792][T11155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.922803][T11155] RSP: 002b:00000000f508e520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 340.922813][T11155] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 340.922820][T11155] RDX: 0000000000000066 RSI: 00000000f7403ff4 RDI: 0000000000000000 [ 340.922826][T11155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.922832][T11155] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 340.922838][T11155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.922850][T11155] [ 341.028347][ C3] vkms_vblank_simulate: vblank timer overrun [ 341.171094][T11141] vhci_hcd: connection reset by peer [ 341.174202][ T60] vhci_hcd: stop threads [ 341.176558][ T60] vhci_hcd: release socket [ 341.185328][ T60] vhci_hcd: disconnect device [ 342.212891][T11169] block nbd2: not configured, cannot reconfigure [ 342.306372][T11164] binder: binder_mmap: 11163 80001000-8000b000 bad vm_flags failed -1 [ 342.446805][T11164] batadv_slave_1: entered promiscuous mode [ 342.450549][T11163] batadv_slave_1: left promiscuous mode [ 342.711674][T11185] @: renamed from vlan0 (while UP) [ 342.905348][ C0] net_ratelimit: 5 callbacks suppressed [ 342.905360][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.059697][T11190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1267'. [ 343.145372][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.225329][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.945274][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 344.195298][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 344.275290][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 344.448873][T11211] FAULT_INJECTION: forcing a failure. [ 344.448873][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.454846][T11211] CPU: 2 UID: 0 PID: 11211 Comm: syz.0.1272 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 344.454879][T11211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 344.454889][T11211] Call Trace: [ 344.454896][T11211] [ 344.454902][T11211] dump_stack_lvl+0x16c/0x1f0 [ 344.454930][T11211] should_fail_ex+0x512/0x640 [ 344.454953][T11211] _copy_to_user+0x32/0xd0 [ 344.454978][T11211] simple_read_from_buffer+0xcb/0x170 [ 344.455001][T11211] proc_fail_nth_read+0x197/0x270 [ 344.455020][T11211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.455038][T11211] ? rw_verify_area+0xcf/0x680 [ 344.455056][T11211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.455075][T11211] vfs_read+0x1e1/0xc60 [ 344.455096][T11211] ? fdget_pos+0x2a2/0x370 [ 344.455120][T11211] ? __pfx_vfs_read+0x10/0x10 [ 344.455150][T11211] ? find_held_lock+0x2b/0x80 [ 344.455174][T11211] ? __fget_files+0x20e/0x3c0 [ 344.455202][T11211] ksys_read+0x12a/0x250 [ 344.455220][T11211] ? __pfx_ksys_read+0x10/0x10 [ 344.455244][T11211] ? rcu_is_watching+0x12/0xc0 [ 344.455265][T11211] __do_fast_syscall_32+0x7c/0x3a0 [ 344.455290][T11211] do_fast_syscall_32+0x32/0x80 [ 344.455306][T11211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.455320][T11211] RIP: 0023:0xf7f05579 [ 344.455328][T11211] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 344.455339][T11211] RSP: 002b:00000000f5026590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 344.455349][T11211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5026620 [ 344.455356][T11211] RDX: 000000000000000f RSI: 00000000f7393ff4 RDI: 0000000000000000 [ 344.455362][T11211] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 344.455368][T11211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 344.455374][T11211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.455387][T11211] [ 344.514665][T11206] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 344.525282][T11206] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.529162][T11206] vhci_hcd vhci_hcd.0: Device attached [ 344.566182][T11210] vhci_hcd: connection closed [ 344.581929][ T60] vhci_hcd: stop threads [ 344.604065][ T60] vhci_hcd: release socket [ 344.618877][ T60] vhci_hcd: disconnect device [ 344.910400][ T5968] Bluetooth: hci3: unexpected event for opcode 0x0a23 [ 344.985330][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.235326][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.275680][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 345.305630][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.393618][T11217] syz.3.1273 (11217): drop_caches: 2 [ 345.399490][T11217] syz.3.1273 (11217): drop_caches: 2 [ 345.644889][T11227] fuse: Unknown parameter '—roup_id' [ 346.015238][ T6122] vhci_hcd: vhci_device speed not set [ 346.025328][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 347.397008][T11263] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 347.895256][T11276] fuse: Unknown parameter '—roup_id' [ 348.025364][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 348.115374][ C0] net_ratelimit: 6 callbacks suppressed [ 348.115393][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.345309][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.425340][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.145271][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.385351][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.445875][T11310] warning: `syz.3.1297' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 349.465281][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.488151][T11315] FAULT_INJECTION: forcing a failure. [ 349.488151][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 349.492165][T11315] CPU: 0 UID: 0 PID: 11315 Comm: syz.0.1299 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 349.492180][T11315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 349.492187][T11315] Call Trace: [ 349.492192][T11315] [ 349.492196][T11315] dump_stack_lvl+0x16c/0x1f0 [ 349.492216][T11315] should_fail_ex+0x512/0x640 [ 349.492234][T11315] should_failslab+0xc2/0x120 [ 349.492246][T11315] __kmalloc_cache_noprof+0x6a/0x3e0 [ 349.492262][T11315] ? sctp_add_bind_addr+0xae/0x3f0 [ 349.492280][T11315] sctp_add_bind_addr+0xae/0x3f0 [ 349.492297][T11315] sctp_copy_local_addr_list+0x39d/0x5a0 [ 349.492317][T11315] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 349.492337][T11315] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 349.492350][T11315] ? sctp_bind_addr_copy+0xe0/0x530 [ 349.492366][T11315] sctp_bind_addr_copy+0xe0/0x530 [ 349.492384][T11315] sctp_connect_new_asoc+0x1d7/0x790 [ 349.492399][T11315] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 349.492415][T11315] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 349.492449][T11315] sctp_sendmsg+0x15f9/0x1ee0 [ 349.492467][T11315] ? __pfx_sctp_sendmsg+0x10/0x10 [ 349.492480][T11315] ? __pfx___might_resched+0x10/0x10 [ 349.492497][T11315] ? find_held_lock+0x2b/0x80 [ 349.492509][T11315] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.492523][T11315] ? __import_iovec+0x1dd/0x650 [ 349.492532][T11315] ? __pfx_sctp_sendmsg+0x10/0x10 [ 349.492546][T11315] inet_sendmsg+0x11c/0x140 [ 349.492561][T11315] ____sys_sendmsg+0x973/0xc70 [ 349.492575][T11315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.492586][T11315] ? get_compat_msghdr+0x11a/0x170 [ 349.492606][T11315] ? __pfx__kstrtoull+0x10/0x10 [ 349.492621][T11315] ___sys_sendmsg+0x134/0x1d0 [ 349.492637][T11315] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.492655][T11315] ? __lock_acquire+0x622/0x1c90 [ 349.492697][T11315] __sys_sendmmsg+0x2f9/0x420 [ 349.492721][T11315] ? __pfx___sys_sendmmsg+0x10/0x10 [ 349.492750][T11315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.492785][T11315] ? fput+0x70/0xf0 [ 349.492800][T11315] ? ksys_write+0x1ac/0x250 [ 349.492823][T11315] ? __pfx_ksys_write+0x10/0x10 [ 349.492852][T11315] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 349.492881][T11315] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 349.492909][T11315] __do_fast_syscall_32+0x7c/0x3a0 [ 349.492932][T11315] do_fast_syscall_32+0x32/0x80 [ 349.492948][T11315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.492962][T11315] RIP: 0023:0xf7f05579 [ 349.492971][T11315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 349.492982][T11315] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 349.492992][T11315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 349.492999][T11315] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.493005][T11315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.493011][T11315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 349.493017][T11315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.493030][T11315] [ 350.185323][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.361475][T11333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1304'. [ 350.425342][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.517929][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.583605][T11336] FAULT_INJECTION: forcing a failure. [ 350.583605][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.595094][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.1.1306 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 350.595120][T11336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 350.595146][T11336] Call Trace: [ 350.595153][T11336] [ 350.595160][T11336] dump_stack_lvl+0x16c/0x1f0 [ 350.595191][T11336] should_fail_ex+0x512/0x640 [ 350.595218][T11336] _copy_from_iter+0x29f/0x16f0 [ 350.595246][T11336] ? _copy_from_iter+0x15d/0x16f0 [ 350.595267][T11336] ? __pfx__copy_from_iter+0x10/0x10 [ 350.595293][T11336] ? __pfx__copy_from_iter+0x10/0x10 [ 350.595313][T11336] ? _copy_from_iter+0x15d/0x16f0 [ 350.595341][T11336] copy_page_from_iter+0xde/0x180 [ 350.595369][T11336] skb_copy_datagram_from_iter+0x2a0/0x740 [ 350.595398][T11336] tun_get_user+0x17ac/0x3b80 [ 350.595422][T11336] ? __pfx_tun_get_user+0x10/0x10 [ 350.595436][T11336] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 350.595469][T11336] ? find_held_lock+0x2b/0x80 [ 350.595488][T11336] ? tun_get+0x191/0x370 [ 350.595517][T11336] tun_chr_write_iter+0xdc/0x210 [ 350.595534][T11336] vfs_write+0x6c4/0x1150 [ 350.595560][T11336] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 350.595577][T11336] ? __pfx_vfs_write+0x10/0x10 [ 350.595598][T11336] ? find_held_lock+0x2b/0x80 [ 350.595628][T11336] ksys_write+0x12a/0x250 [ 350.595650][T11336] ? __pfx_ksys_write+0x10/0x10 [ 350.595674][T11336] ? rcu_is_watching+0x12/0xc0 [ 350.595696][T11336] __do_fast_syscall_32+0x7c/0x3a0 [ 350.595723][T11336] do_fast_syscall_32+0x32/0x80 [ 350.595746][T11336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.595766][T11336] RIP: 0023:0xf709e579 [ 350.595780][T11336] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 350.595797][T11336] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 350.595814][T11336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 350.595825][T11336] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 350.595835][T11336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.595845][T11336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 350.595854][T11336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.595883][T11336] [ 350.740344][T11338] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:19998 [ 351.225296][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 351.229849][T11354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1308'. [ 351.379388][T11362] FAULT_INJECTION: forcing a failure. [ 351.379388][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 351.383467][T11362] CPU: 3 UID: 0 PID: 11362 Comm: syz.2.1312 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 351.383482][T11362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.383489][T11362] Call Trace: [ 351.383493][T11362] [ 351.383497][T11362] dump_stack_lvl+0x16c/0x1f0 [ 351.383518][T11362] should_fail_ex+0x512/0x640 [ 351.383537][T11362] should_failslab+0xc2/0x120 [ 351.383548][T11362] __kmalloc_cache_noprof+0x6a/0x3e0 [ 351.383563][T11362] ? __sctp_v6_cmp_addr+0x206/0x530 [ 351.383574][T11362] ? sctp_add_bind_addr+0xae/0x3f0 [ 351.383590][T11362] sctp_add_bind_addr+0xae/0x3f0 [ 351.383612][T11362] sctp_copy_local_addr_list+0x39d/0x5a0 [ 351.383632][T11362] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 351.383652][T11362] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 351.383666][T11362] ? sctp_bind_addr_copy+0xe0/0x530 [ 351.383681][T11362] sctp_bind_addr_copy+0xe0/0x530 [ 351.383700][T11362] sctp_connect_new_asoc+0x1d7/0x790 [ 351.383714][T11362] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 351.383730][T11362] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 351.383744][T11362] sctp_sendmsg+0x15f9/0x1ee0 [ 351.383761][T11362] ? __pfx_sctp_sendmsg+0x10/0x10 [ 351.383775][T11362] ? __pfx___might_resched+0x10/0x10 [ 351.383798][T11362] ? find_held_lock+0x2b/0x80 [ 351.383829][T11362] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.383854][T11362] ? __import_iovec+0x1dd/0x650 [ 351.383871][T11362] ? __pfx_sctp_sendmsg+0x10/0x10 [ 351.383891][T11362] inet_sendmsg+0x11c/0x140 [ 351.383917][T11362] ____sys_sendmsg+0x973/0xc70 [ 351.383940][T11362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.383955][T11362] ? get_compat_msghdr+0x11a/0x170 [ 351.383975][T11362] ? __pfx__kstrtoull+0x10/0x10 [ 351.383990][T11362] ___sys_sendmsg+0x134/0x1d0 [ 351.384007][T11362] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.384021][T11362] ? __lock_acquire+0x622/0x1c90 [ 351.384053][T11362] __sys_sendmmsg+0x2f9/0x420 [ 351.384071][T11362] ? __pfx___sys_sendmmsg+0x10/0x10 [ 351.384091][T11362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.384114][T11362] ? fput+0x70/0xf0 [ 351.384124][T11362] ? ksys_write+0x1ac/0x250 [ 351.384139][T11362] ? __pfx_ksys_write+0x10/0x10 [ 351.384157][T11362] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 351.384175][T11362] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 351.384192][T11362] __do_fast_syscall_32+0x7c/0x3a0 [ 351.384209][T11362] do_fast_syscall_32+0x32/0x80 [ 351.384226][T11362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.384240][T11362] RIP: 0023:0xf707e579 [ 351.384249][T11362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.384260][T11362] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 351.384270][T11362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 351.384277][T11362] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.384283][T11362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.384288][T11362] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.384294][T11362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.384307][T11362] [ 351.493771][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 351.570371][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'. [ 352.007699][T11374] tipc: Enabling of bearer rejected, already enabled [ 352.704450][T11386] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1317'. [ 353.176504][T11410] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.305205][ C0] net_ratelimit: 7 callbacks suppressed [ 353.305225][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.335147][T11403] 9pnet: Could not find request transport: rdmat=0x0000000000004e24 [ 353.427325][T11410] lo speed is unknown, defaulting to 1000 [ 353.545242][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.635168][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.723599][T11412] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1324'. [ 354.115088][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.316423][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 354.355122][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.585103][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.675103][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.736754][T11423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 354.739379][T11423] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.743248][T11423] vhci_hcd vhci_hcd.0: Device attached [ 354.808782][T11433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1329'. [ 354.864815][T11437] random: crng reseeded on system resumption [ 354.995745][ T6844] usb 37-1: new high-speed USB device number 14 using vhci_hcd [ 355.098905][T11435] vhci_hcd: connection reset by peer [ 355.100894][ T81] vhci_hcd: stop threads [ 355.102851][ T81] vhci_hcd: release socket [ 355.107691][ T81] vhci_hcd: disconnect device [ 355.145103][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.385429][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.437912][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.625125][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 356.265792][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 356.678022][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1338'. [ 356.932321][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 356.932337][ T40] audit: type=1804 audit(1751935741.349:42): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1339" name="/newroot/324/bus/bus" dev="overlay" ino=1701 res=1 errno=0 [ 356.975204][ T40] audit: type=1804 audit(1751935741.389:43): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1339" name="/newroot/324/bus/bus" dev="overlay" ino=1701 res=1 errno=0 [ 357.543260][T11487] netlink: 'syz.1.1343': attribute type 33 has an invalid length. [ 357.546456][T11487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1343'. [ 357.865608][ T34] libceph: connect (1)[c::]:6789 error -101 [ 357.867362][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 357.908262][T11494] ceph: No mds server is up or the cluster is laggy [ 358.514890][ C0] net_ratelimit: 10 callbacks suppressed [ 358.514907][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.744948][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.824997][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.085745][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1350'. [ 359.095795][T11514] random: crng reseeded on system resumption [ 359.304865][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.554782][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.558475][T11518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1351'. [ 359.739646][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 359.784858][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.864774][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.094925][ T6844] vhci_hcd: vhci_device speed not set [ 360.255373][T11531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1354'. [ 360.344774][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.584764][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.778148][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1359'. [ 360.782592][T11553] random: crng reseeded on system resumption [ 360.824785][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.052972][T11556] tipc: Enabling of bearer rejected, already enabled [ 361.912991][T11564] FAULT_INJECTION: forcing a failure. [ 361.912991][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 361.917072][T11564] CPU: 1 UID: 0 PID: 11564 Comm: syz.3.1363 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 361.917087][T11564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.917094][T11564] Call Trace: [ 361.917098][T11564] [ 361.917103][T11564] dump_stack_lvl+0x16c/0x1f0 [ 361.917123][T11564] should_fail_ex+0x512/0x640 [ 361.917141][T11564] should_failslab+0xc2/0x120 [ 361.917153][T11564] __kmalloc_cache_noprof+0x6a/0x3e0 [ 361.917167][T11564] ? sctp_add_bind_addr+0xae/0x3f0 [ 361.917185][T11564] sctp_add_bind_addr+0xae/0x3f0 [ 361.917202][T11564] sctp_copy_local_addr_list+0x39d/0x5a0 [ 361.917222][T11564] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 361.917242][T11564] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 361.917256][T11564] ? sctp_bind_addr_copy+0xe0/0x530 [ 361.917271][T11564] sctp_bind_addr_copy+0xe0/0x530 [ 361.917290][T11564] sctp_connect_new_asoc+0x1d7/0x790 [ 361.917304][T11564] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 361.917320][T11564] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 361.917334][T11564] sctp_sendmsg+0x15f9/0x1ee0 [ 361.917351][T11564] ? __pfx_sctp_sendmsg+0x10/0x10 [ 361.917364][T11564] ? __pfx___might_resched+0x10/0x10 [ 361.917381][T11564] ? find_held_lock+0x2b/0x80 [ 361.917393][T11564] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.917407][T11564] ? __import_iovec+0x1dd/0x650 [ 361.917416][T11564] ? __pfx_sctp_sendmsg+0x10/0x10 [ 361.917429][T11564] inet_sendmsg+0x11c/0x140 [ 361.917445][T11564] ____sys_sendmsg+0x973/0xc70 [ 361.917462][T11564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.917473][T11564] ? get_compat_msghdr+0x11a/0x170 [ 361.917491][T11564] ? __pfx__kstrtoull+0x10/0x10 [ 361.917507][T11564] ___sys_sendmsg+0x134/0x1d0 [ 361.917523][T11564] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.917538][T11564] ? __lock_acquire+0x622/0x1c90 [ 361.917568][T11564] __sys_sendmmsg+0x2f9/0x420 [ 361.917586][T11564] ? __pfx___sys_sendmmsg+0x10/0x10 [ 361.917606][T11564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 361.917629][T11564] ? fput+0x70/0xf0 [ 361.917639][T11564] ? ksys_write+0x1ac/0x250 [ 361.917654][T11564] ? __pfx_ksys_write+0x10/0x10 [ 361.917672][T11564] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 361.917689][T11564] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 361.917706][T11564] __do_fast_syscall_32+0x7c/0x3a0 [ 361.917724][T11564] do_fast_syscall_32+0x32/0x80 [ 361.917745][T11564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.917758][T11564] RIP: 0023:0xf70be579 [ 361.917767][T11564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 361.917777][T11564] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 361.917788][T11564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 361.917794][T11564] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.917800][T11564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.917806][T11564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.917812][T11564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.917825][T11564] [ 362.072061][T11567] loop8: detected capacity change from 0 to 7 [ 362.079066][T11567] Dev loop8: unable to read RDB block 7 [ 362.081329][T11567] loop8: unable to read partition table [ 362.083692][T11567] loop8: partition table beyond EOD, truncated [ 362.086779][T11567] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 362.547071][T11583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1368'. [ 362.605725][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 362.734626][ T34] usb 7-1: device descriptor read/64, error -71 [ 363.014594][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 363.194632][ T34] usb 7-1: device descriptor read/64, error -71 [ 363.305255][ T34] usb usb7-port1: attempt power cycle [ 363.666607][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 363.686448][ T34] usb 7-1: device descriptor read/8, error -71 [ 363.704625][ C0] net_ratelimit: 10 callbacks suppressed [ 363.704642][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.839030][T11603] FAULT_INJECTION: forcing a failure. [ 363.839030][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 363.844407][T11603] CPU: 1 UID: 0 PID: 11603 Comm: syz.1.1374 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 363.844422][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.844439][T11603] Call Trace: [ 363.844445][T11603] [ 363.844450][T11603] dump_stack_lvl+0x16c/0x1f0 [ 363.844470][T11603] should_fail_ex+0x512/0x640 [ 363.844488][T11603] should_failslab+0xc2/0x120 [ 363.844499][T11603] __kmalloc_cache_noprof+0x6a/0x3e0 [ 363.844515][T11603] ? sctp_add_bind_addr+0xae/0x3f0 [ 363.844533][T11603] sctp_add_bind_addr+0xae/0x3f0 [ 363.844562][T11603] sctp_copy_local_addr_list+0x39d/0x5a0 [ 363.844584][T11603] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 363.844604][T11603] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 363.844617][T11603] ? sctp_bind_addr_copy+0xe0/0x530 [ 363.844633][T11603] sctp_bind_addr_copy+0xe0/0x530 [ 363.844652][T11603] sctp_connect_new_asoc+0x1d7/0x790 [ 363.844666][T11603] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 363.844683][T11603] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 363.844696][T11603] sctp_sendmsg+0x15f9/0x1ee0 [ 363.844714][T11603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.844727][T11603] ? __pfx___might_resched+0x10/0x10 [ 363.844744][T11603] ? find_held_lock+0x2b/0x80 [ 363.844756][T11603] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.844770][T11603] ? __import_iovec+0x1dd/0x650 [ 363.844779][T11603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.844797][T11603] inet_sendmsg+0x11c/0x140 [ 363.844812][T11603] ____sys_sendmsg+0x973/0xc70 [ 363.844826][T11603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.844837][T11603] ? get_compat_msghdr+0x11a/0x170 [ 363.844856][T11603] ? __pfx__kstrtoull+0x10/0x10 [ 363.844871][T11603] ___sys_sendmsg+0x134/0x1d0 [ 363.844888][T11603] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.844903][T11603] ? __lock_acquire+0x622/0x1c90 [ 363.844935][T11603] __sys_sendmmsg+0x2f9/0x420 [ 363.844953][T11603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 363.844973][T11603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.844996][T11603] ? fput+0x70/0xf0 [ 363.845006][T11603] ? ksys_write+0x1ac/0x250 [ 363.845021][T11603] ? __pfx_ksys_write+0x10/0x10 [ 363.845038][T11603] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 363.845056][T11603] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 363.845073][T11603] __do_fast_syscall_32+0x7c/0x3a0 [ 363.845090][T11603] do_fast_syscall_32+0x32/0x80 [ 363.845106][T11603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.845120][T11603] RIP: 0023:0xf709e579 [ 363.845128][T11603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.845139][T11603] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 363.845150][T11603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 363.845156][T11603] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.845162][T11603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.845168][T11603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.845174][T11603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.845187][T11603] [ 363.934540][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 363.936150][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.944564][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.961890][ T34] usb 7-1: device descriptor read/8, error -71 [ 363.989159][T11598] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1372'. [ 364.024608][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.066396][ T34] usb usb7-port1: unable to enumerate USB device [ 364.504526][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.627650][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 364.631769][T11611] random: crng reseeded on system resumption [ 364.744531][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.984594][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.064560][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.512075][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1386'. [ 365.544490][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.560236][T11638] random: crng reseeded on system resumption [ 365.784539][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.885472][ T6844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 366.024479][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.064835][ T6844] usb 5-1: Using ep0 maxpacket: 16 [ 366.068729][ T6844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.073231][ T6844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.087641][ T6844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.093131][ T6844] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.098681][ T6844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.150290][ T6844] usb 5-1: config 0 descriptor?? [ 366.426033][ T6844] usbhid 5-1:0.0: can't add hid device: -71 [ 366.431620][ T6844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.444038][ T6844] usb 5-1: USB disconnect, device number 3 [ 366.881973][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1395'. [ 366.885446][T11671] random: crng reseeded on system resumption [ 367.291480][T11681] netlink: 'syz.2.1397': attribute type 11 has an invalid length. [ 367.295253][T11681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1397'. [ 367.914749][T11703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1399'. [ 368.294279][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 368.345842][T11719] random: crng reseeded on system resumption [ 368.914403][ C0] net_ratelimit: 10 callbacks suppressed [ 368.914419][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.073315][T11738] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.092125][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 369.144336][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.224329][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.349390][T11746] fuse: Unknown parameter '—roup_id' [ 369.621705][T11738] lo speed is unknown, defaulting to 1000 [ 369.704250][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.944303][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.184280][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.199630][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 370.202977][T11760] random: crng reseeded on system resumption [ 370.264189][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.754177][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.994235][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.007150][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'. [ 371.010558][T11784] random: crng reseeded on system resumption [ 371.023726][T11785] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 371.161775][T11782] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1425'. [ 371.217428][T11793] fuse: Unknown parameter '—roup_id' [ 371.234131][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.433734][ T5968] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 372.190969][T11811] loop8: detected capacity change from 0 to 7 [ 372.195850][ T5970] Dev loop8: unable to read RDB block 7 [ 372.197694][ T5970] loop8: unable to read partition table [ 372.199571][ T5970] loop8: partition table beyond EOD, truncated [ 372.203071][T11811] Dev loop8: unable to read RDB block 7 [ 372.207432][T11811] loop8: unable to read partition table [ 372.209358][T11811] loop8: partition table beyond EOD, truncated [ 372.217147][T11811] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 372.720579][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1437'. [ 372.894352][ T6122] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 373.104082][ T6122] usb 6-1: Using ep0 maxpacket: 32 [ 373.119158][ T6122] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 373.124857][ T6122] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 373.128462][ T6122] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 373.131402][ T6122] usb 6-1: Product: syz [ 373.132988][ T6122] usb 6-1: Manufacturer: syz [ 373.135240][ T6122] usb 6-1: SerialNumber: syz [ 373.149642][ T6122] usb 6-1: config 0 descriptor?? [ 373.153230][T11828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.165010][ T6122] hub 6-1:0.0: bad descriptor, ignoring hub [ 373.167334][ T6122] hub 6-1:0.0: probe with driver hub failed with error -5 [ 373.546963][T11847] loop8: detected capacity change from 0 to 7 [ 373.550065][ T5970] Dev loop8: unable to read RDB block 7 [ 373.551826][ T5970] loop8: unable to read partition table [ 373.553778][ T5970] loop8: partition table beyond EOD, truncated [ 373.561827][T11847] Dev loop8: unable to read RDB block 7 [ 373.563602][T11847] loop8: unable to read partition table [ 373.566399][T11847] loop8: partition table beyond EOD, truncated [ 373.568565][T11847] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 373.895244][T11828] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 374.049605][T11840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.069775][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 374.103984][ C0] net_ratelimit: 10 callbacks suppressed [ 374.103995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.344033][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.374168][ T7627] usb 6-1: USB disconnect, device number 3 [ 374.433986][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.636357][T11871] loop8: detected capacity change from 0 to 7 [ 374.639169][T11871] Dev loop8: unable to read RDB block 7 [ 374.641656][T11871] loop8: unable to read partition table [ 374.643531][T11871] loop8: partition table beyond EOD, truncated [ 374.645582][T11871] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 374.903970][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.952928][ T7156] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 375.125307][ T7156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.128752][ T7156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.131750][ T7156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.135888][ T7156] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.138710][ T7156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.144026][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.147621][ T7156] usb 5-1: config 0 descriptor?? [ 375.152816][T11885] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 375.155877][T11885] overlayfs: missing 'lowerdir' [ 375.383968][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.463963][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.476008][ T5968] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 375.478814][ T5968] Bluetooth: hci1: Injecting HCI hardware error event [ 375.484444][ T5968] Bluetooth: hci1: hardware error 0x00 [ 375.568395][ T7156] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 375.843982][ T24] usb 5-1: USB disconnect, device number 4 [ 375.953888][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.193883][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.342326][T11907] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 376.344865][T11907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.347428][T11907] vhci_hcd vhci_hcd.0: Device attached [ 376.393627][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 376.423903][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.525706][T11895] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1464'. [ 376.531887][T11914] program syz.0.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.788667][T11918] tipc: Enabling of bearer rejected, already enabled [ 376.793843][ T6122] usb 41-1: new high-speed USB device number 13 using vhci_hcd [ 376.815182][T11908] vhci_hcd: connection reset by peer [ 376.817129][ T46] vhci_hcd: stop threads [ 376.818505][ T46] vhci_hcd: release socket [ 376.819977][ T46] vhci_hcd: disconnect device [ 377.713953][ T5968] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 377.719109][T11931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 378.186567][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.188735][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.218715][T11944] FAULT_INJECTION: forcing a failure. [ 378.218715][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 378.223588][T11944] CPU: 3 UID: 0 PID: 11944 Comm: syz.0.1475 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 378.223604][T11944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.223611][T11944] Call Trace: [ 378.223616][T11944] [ 378.223622][T11944] dump_stack_lvl+0x16c/0x1f0 [ 378.223656][T11944] should_fail_ex+0x512/0x640 [ 378.223674][T11944] should_failslab+0xc2/0x120 [ 378.223687][T11944] __kmalloc_cache_noprof+0x6a/0x3e0 [ 378.223702][T11944] ? sctp_add_bind_addr+0xae/0x3f0 [ 378.223720][T11944] sctp_add_bind_addr+0xae/0x3f0 [ 378.223737][T11944] sctp_copy_local_addr_list+0x39d/0x5a0 [ 378.223758][T11944] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 378.223778][T11944] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 378.223791][T11944] ? sctp_bind_addr_copy+0xe0/0x530 [ 378.223807][T11944] sctp_bind_addr_copy+0xe0/0x530 [ 378.223826][T11944] sctp_connect_new_asoc+0x1d7/0x790 [ 378.223841][T11944] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 378.223857][T11944] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 378.223872][T11944] sctp_sendmsg+0x15f9/0x1ee0 [ 378.223889][T11944] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.223903][T11944] ? __pfx___might_resched+0x10/0x10 [ 378.223920][T11944] ? find_held_lock+0x2b/0x80 [ 378.223932][T11944] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.223946][T11944] ? __import_iovec+0x1dd/0x650 [ 378.223955][T11944] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.223969][T11944] inet_sendmsg+0x11c/0x140 [ 378.223984][T11944] ____sys_sendmsg+0x973/0xc70 [ 378.223998][T11944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.224009][T11944] ? get_compat_msghdr+0x11a/0x170 [ 378.224028][T11944] ? __pfx__kstrtoull+0x10/0x10 [ 378.224043][T11944] ___sys_sendmsg+0x134/0x1d0 [ 378.224060][T11944] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.224075][T11944] ? __lock_acquire+0x622/0x1c90 [ 378.224106][T11944] __sys_sendmmsg+0x2f9/0x420 [ 378.224124][T11944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.224145][T11944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.224195][T11944] ? fput+0x70/0xf0 [ 378.224206][T11944] ? ksys_write+0x1ac/0x250 [ 378.224221][T11944] ? __pfx_ksys_write+0x10/0x10 [ 378.224239][T11944] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 378.224257][T11944] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 378.224274][T11944] __do_fast_syscall_32+0x7c/0x3a0 [ 378.224292][T11944] do_fast_syscall_32+0x32/0x80 [ 378.224309][T11944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.224323][T11944] RIP: 0023:0xf7f05579 [ 378.224332][T11944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.224343][T11944] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 378.224354][T11944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 378.224361][T11944] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.224371][T11944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.224377][T11944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 378.224383][T11944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.224396][T11944] [ 378.443048][T11950] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.528040][T11950] lo speed is unknown, defaulting to 1000 [ 378.586696][T11955] netlink: 'syz.3.1479': attribute type 2 has an invalid length. [ 378.589249][T11955] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1479'. [ 378.685676][T11950] smc: removing ib device syz2 [ 378.794751][T11958] netlink: 'syz.0.1478': attribute type 12 has an invalid length. [ 378.815672][T11953] lo speed is unknown, defaulting to 1000 [ 378.920043][ T40] audit: type=1326 audit(1751935763.340:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.1.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 378.943104][ T40] audit: type=1326 audit(1751935763.340:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.1.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 379.139175][T11966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 379.313689][ C0] net_ratelimit: 10 callbacks suppressed [ 379.313701][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.553665][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.623783][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.772786][T11975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 379.775147][T11975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 379.778030][T11975] vhci_hcd vhci_hcd.0: Device attached [ 379.863859][T11983] FAULT_INJECTION: forcing a failure. [ 379.863859][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 379.879394][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.3.1484 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 379.879425][T11983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.879436][T11983] Call Trace: [ 379.879442][T11983] [ 379.879449][T11983] dump_stack_lvl+0x16c/0x1f0 [ 379.879480][T11983] should_fail_ex+0x512/0x640 [ 379.879499][T11983] should_failslab+0xc2/0x120 [ 379.879511][T11983] __kmalloc_cache_noprof+0x6a/0x3e0 [ 379.879526][T11983] ? __sctp_v6_cmp_addr+0x206/0x530 [ 379.879536][T11983] ? sctp_add_bind_addr+0xae/0x3f0 [ 379.879553][T11983] sctp_add_bind_addr+0xae/0x3f0 [ 379.879582][T11983] sctp_copy_local_addr_list+0x39d/0x5a0 [ 379.879607][T11983] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 379.879626][T11983] ? irqentry_exit+0x3b/0x90 [ 379.879641][T11983] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.879659][T11983] ? sctp_bind_addr_copy+0xe0/0x530 [ 379.879675][T11983] sctp_bind_addr_copy+0xe0/0x530 [ 379.879694][T11983] sctp_connect_new_asoc+0x1d7/0x790 [ 379.879708][T11983] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 379.879725][T11983] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 379.879739][T11983] sctp_sendmsg+0x15f9/0x1ee0 [ 379.879756][T11983] ? __pfx_sctp_sendmsg+0x10/0x10 [ 379.879769][T11983] ? __pfx___might_resched+0x10/0x10 [ 379.879787][T11983] ? find_held_lock+0x2b/0x80 [ 379.879798][T11983] ? __pfx_aa_sk_perm+0x10/0x10 [ 379.879812][T11983] ? __import_iovec+0x1dd/0x650 [ 379.879822][T11983] ? __pfx_sctp_sendmsg+0x10/0x10 [ 379.879836][T11983] inet_sendmsg+0x11c/0x140 [ 379.879851][T11983] ____sys_sendmsg+0x973/0xc70 [ 379.879865][T11983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.879876][T11983] ? get_compat_msghdr+0x11a/0x170 [ 379.879895][T11983] ? __pfx__kstrtoull+0x10/0x10 [ 379.879910][T11983] ___sys_sendmsg+0x134/0x1d0 [ 379.879927][T11983] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.879941][T11983] ? __lock_acquire+0x622/0x1c90 [ 379.879973][T11983] __sys_sendmmsg+0x2f9/0x420 [ 379.879990][T11983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.880011][T11983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.880034][T11983] ? fput+0x70/0xf0 [ 379.880044][T11983] ? ksys_write+0x1ac/0x250 [ 379.880059][T11983] ? __pfx_ksys_write+0x10/0x10 [ 379.880077][T11983] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 379.880098][T11983] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 379.880122][T11983] __do_fast_syscall_32+0x7c/0x3a0 [ 379.880169][T11983] do_fast_syscall_32+0x32/0x80 [ 379.880194][T11983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.880214][T11983] RIP: 0023:0xf70be579 [ 379.880228][T11983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 379.880246][T11983] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 379.880260][T11983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 379.880267][T11983] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.880273][T11983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.880279][T11983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 379.880285][T11983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.880298][T11983] [ 380.113606][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.214296][T11980] vhci_hcd: connection closed [ 380.215199][ T60] vhci_hcd: stop threads [ 380.218664][ T60] vhci_hcd: release socket [ 380.220102][ T60] vhci_hcd: disconnect device [ 380.343645][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.583658][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.663678][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.143623][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.365205][T12010] random: crng reseeded on system resumption [ 381.383637][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.633541][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.962957][ T6122] vhci_hcd: vhci_device speed not set [ 382.001038][ T40] audit: type=1326 audit(1751935766.421:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.2.1496" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 382.197904][T12020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1495'. [ 382.733363][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 382.971115][T12049] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 382.973732][T12049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.977039][T12049] vhci_hcd vhci_hcd.0: Device attached [ 383.088347][T12042] cgroup: fork rejected by pids controller in /syz1 [ 383.329505][ T6122] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 383.358070][T12050] vhci_hcd: connection reset by peer [ 383.360029][ T60] vhci_hcd: stop threads [ 383.361386][ T60] vhci_hcd: release socket [ 383.362833][ T60] vhci_hcd: disconnect device [ 383.710982][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.714060][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.742892][T12278] 9pnet_fd: Insufficient options for proto=fd [ 383.954529][ T53] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 384.103925][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 384.253477][ T53] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 384.433385][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 384.436095][ T53] usb usb6-port1: attempt power cycle [ 384.503434][ C0] net_ratelimit: 10 callbacks suppressed [ 384.503447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.559085][T12295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1508'. [ 384.717467][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1511'. [ 384.724202][T12303] misc userio: Invalid payload size [ 384.729356][T12303] misc userio: No port type given on /dev/userio [ 384.753423][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.803450][ T53] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 384.823446][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.824321][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 384.953397][ T53] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 384.973944][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 384.977086][ T53] usb usb6-port1: unable to enumerate USB device [ 385.147897][T12320] fuse: Unknown parameter '—roup_id' [ 385.237899][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1515'. [ 385.303350][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.543448][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.783442][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.863357][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.872877][T12334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 385.874990][T12334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.880509][T12334] vhci_hcd vhci_hcd.0: Device attached [ 385.937675][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1518'. [ 386.123500][ T29] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 386.353275][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.360353][T12335] vhci_hcd: connection reset by peer [ 386.367227][ T81] vhci_hcd: stop threads [ 386.368941][ T81] vhci_hcd: release socket [ 386.370722][ T81] vhci_hcd: disconnect device [ 386.583350][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.753867][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 386.823313][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.252737][T12355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'. [ 387.751184][T12377] FAULT_INJECTION: forcing a failure. [ 387.751184][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 387.755325][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.2.1530 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 387.755340][T12377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 387.755347][T12377] Call Trace: [ 387.755351][T12377] [ 387.755355][T12377] dump_stack_lvl+0x16c/0x1f0 [ 387.755375][T12377] should_fail_ex+0x512/0x640 [ 387.755394][T12377] should_failslab+0xc2/0x120 [ 387.755405][T12377] __kmalloc_cache_noprof+0x6a/0x3e0 [ 387.755421][T12377] ? __sctp_v6_cmp_addr+0x206/0x530 [ 387.755431][T12377] ? sctp_add_bind_addr+0xae/0x3f0 [ 387.755448][T12377] sctp_add_bind_addr+0xae/0x3f0 [ 387.755465][T12377] sctp_copy_local_addr_list+0x39d/0x5a0 [ 387.755485][T12377] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 387.755506][T12377] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 387.755519][T12377] ? sctp_bind_addr_copy+0xe0/0x530 [ 387.755534][T12377] sctp_bind_addr_copy+0xe0/0x530 [ 387.755553][T12377] sctp_connect_new_asoc+0x1d7/0x790 [ 387.755567][T12377] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 387.755584][T12377] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 387.755597][T12377] sctp_sendmsg+0x15f9/0x1ee0 [ 387.755614][T12377] ? __pfx_sctp_sendmsg+0x10/0x10 [ 387.755628][T12377] ? __pfx___might_resched+0x10/0x10 [ 387.755645][T12377] ? find_held_lock+0x2b/0x80 [ 387.755657][T12377] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.755671][T12377] ? __import_iovec+0x1dd/0x650 [ 387.755680][T12377] ? __pfx_sctp_sendmsg+0x10/0x10 [ 387.755694][T12377] inet_sendmsg+0x11c/0x140 [ 387.755709][T12377] ____sys_sendmsg+0x973/0xc70 [ 387.755723][T12377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.755734][T12377] ? get_compat_msghdr+0x11a/0x170 [ 387.755753][T12377] ? __pfx__kstrtoull+0x10/0x10 [ 387.755767][T12377] ___sys_sendmsg+0x134/0x1d0 [ 387.755784][T12377] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.755798][T12377] ? __lock_acquire+0x622/0x1c90 [ 387.755830][T12377] __sys_sendmmsg+0x2f9/0x420 [ 387.755847][T12377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.755868][T12377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.755891][T12377] ? fput+0x70/0xf0 [ 387.755901][T12377] ? ksys_write+0x1ac/0x250 [ 387.755915][T12377] ? __pfx_ksys_write+0x10/0x10 [ 387.755933][T12377] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 387.755950][T12377] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 387.755967][T12377] __do_fast_syscall_32+0x7c/0x3a0 [ 387.755985][T12377] do_fast_syscall_32+0x32/0x80 [ 387.756001][T12377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.756014][T12377] RIP: 0023:0xf707e579 [ 387.756026][T12377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 387.756037][T12377] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 387.756047][T12377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 387.756054][T12377] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.756060][T12377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.756066][T12377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 387.756088][T12377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.756102][T12377] [ 387.860247][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.328981][T12378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 388.335388][T12378] misc userio: Invalid payload size [ 388.338159][T12378] misc userio: No port type given on /dev/userio [ 388.364505][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 388.424386][ T6122] vhci_hcd: vhci_device speed not set [ 388.976499][T12404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 388.979313][T12404] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 388.983769][T12404] vhci_hcd vhci_hcd.0: Device attached [ 389.252743][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.255992][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.259641][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.262014][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.264445][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.268274][ T5975] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 389.272114][ T5975] hid-generic 00A0:0008:0003.0005: item fetching failed at offset 13/15 [ 389.275170][ T5975] hid-generic 00A0:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 389.423132][ T6122] usb 41-1: device descriptor read/64, error -110 [ 389.439553][T12405] vhci_hcd: connection closed [ 389.440785][ T1173] vhci_hcd: stop threads [ 389.449382][ T1173] vhci_hcd: release socket [ 389.451716][ T1173] vhci_hcd: disconnect device [ 389.512243][T12419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1537'. [ 389.603226][ T6122] vhci_hcd: vhci_device speed not set [ 389.703142][ C0] net_ratelimit: 10 callbacks suppressed [ 389.703160][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.776105][T12421] netlink: 'syz.1.1539': attribute type 27 has an invalid length. [ 389.943177][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.033117][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.075483][T12432] capability: warning: `syz.2.1543' uses 32-bit capabilities (legacy support in use) [ 390.304087][T12438] tipc: Enabling of bearer rejected, failed to enable media [ 390.386301][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 390.390207][T12445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1546'. [ 390.398736][T12445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1546'. [ 390.503020][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.743056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.831292][T12457] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 390.993078][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.063101][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.404825][ T29] vhci_hcd: vhci_device speed not set [ 391.543064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.697984][T12473] loop8: detected capacity change from 0 to 7 [ 391.701557][ T5970] Dev loop8: unable to read RDB block 7 [ 391.703459][ T5970] loop8: unable to read partition table [ 391.705380][ T5970] loop8: partition table beyond EOD, truncated [ 391.708639][T12473] Dev loop8: unable to read RDB block 7 [ 391.710497][T12473] loop8: unable to read partition table [ 391.712466][T12473] loop8: partition table beyond EOD, truncated [ 391.715797][T12473] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 391.783238][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.823598][T12476] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 392.022958][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.038520][T12483] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 392.041133][T12483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.047538][T12483] vhci_hcd vhci_hcd.0: Device attached [ 392.303000][ T6028] usb 37-1: new high-speed USB device number 15 using vhci_hcd [ 392.410523][T12484] vhci_hcd: connection reset by peer [ 392.412635][ T1173] vhci_hcd: stop threads [ 392.417042][ T1173] vhci_hcd: release socket [ 392.419339][ T1173] vhci_hcd: disconnect device [ 392.472743][T12493] random: crng reseeded on system resumption [ 392.501573][T12493] Restarting kernel threads ... [ 392.507302][T12493] Done restarting kernel threads. [ 392.630471][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 392.725439][T12503] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 392.729214][ T60] Bluetooth: (null): Invalid header checksum [ 393.441395][T12504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1560'. [ 393.839772][T12511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1564'. [ 393.846166][T12511] misc userio: Invalid payload size [ 393.848482][T12511] misc userio: No port type given on /dev/userio [ 394.106765][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1563'. [ 394.111339][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 394.331383][T12532] vivid-007: ================= START STATUS ================= [ 394.335550][T12532] vivid-007: Enable Output Cropping: true [ 394.338429][T12532] vivid-007: Enable Output Composing: true [ 394.340957][T12532] vivid-007: Enable Output Scaler: true [ 394.344349][T12532] vivid-007: Tx RGB Quantization Range: Automatic [ 394.347071][T12532] vivid-007: Transmit Mode: HDMI [ 394.349189][T12532] vivid-007: Hotplug Present: 0x00000000 [ 394.351570][T12532] vivid-007: RxSense Present: 0x00000000 [ 394.354350][T12532] vivid-007: EDID Present: 0x00000000 [ 394.356590][T12532] vivid-007: ================== END STATUS ================== [ 394.690291][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 394.698067][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 394.902890][ C0] net_ratelimit: 10 callbacks suppressed [ 394.902908][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.143027][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.222818][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.702762][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.942808][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.182850][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.262757][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.368658][T12559] __nla_validate_parse: 1 callbacks suppressed [ 396.368669][T12559] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1576'. [ 396.592787][ T1021] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 396.752664][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.791038][T12567] tipc: Enabling of bearer rejected, already enabled [ 396.794146][ T1021] usb 8-1: device descriptor read/64, error -71 [ 396.992689][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.232757][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.315611][T12573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 397.317706][T12573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.320120][T12573] vhci_hcd vhci_hcd.0: Device attached [ 397.332907][ T1021] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 397.500199][T12574] vhci_hcd: connection closed [ 397.502736][ T60] vhci_hcd: stop threads [ 397.506532][ T60] vhci_hcd: release socket [ 397.507762][ T6028] vhci_hcd: vhci_device speed not set [ 397.508511][ T60] vhci_hcd: disconnect device [ 397.537962][T12576] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1578'. [ 397.542048][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 397.547968][ T6122] vhci_hcd: vhci_device speed not set [ 397.682838][ T1021] usb 8-1: device descriptor read/64, error -71 [ 397.793193][ T1021] usb usb8-port1: attempt power cycle [ 398.130594][T12584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 398.133254][T12584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.136733][T12584] vhci_hcd vhci_hcd.0: Device attached [ 398.203779][ T1021] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 398.234084][ T1021] usb 8-1: device descriptor read/8, error -71 [ 398.382626][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 398.472609][ T1021] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 398.504463][ T1021] usb 8-1: device descriptor read/8, error -71 [ 398.522632][ T6122] usb 41-1: new high-speed USB device number 16 using vhci_hcd [ 398.542343][ T53] usb 7-1: config 0 has no interfaces? [ 398.544685][ T53] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 398.548241][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.553421][ T53] usb 7-1: config 0 descriptor?? [ 398.614948][ T1021] usb usb8-port1: unable to enumerate USB device [ 398.756438][T12586] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 10 [ 398.759868][ T13] vhci_hcd: stop threads [ 398.759879][ T13] vhci_hcd: release socket [ 398.759947][ T13] vhci_hcd: disconnect device [ 399.023922][ T24] usb 7-1: USB disconnect, device number 8 [ 400.102607][ C0] net_ratelimit: 10 callbacks suppressed [ 400.102621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.213099][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1583'. [ 400.352613][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.422565][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.707496][T12629] lo speed is unknown, defaulting to 1000 [ 400.912455][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.142467][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.392483][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.472439][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.678930][T12654] tipc: Enabling of bearer rejected, already enabled [ 401.952381][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.182502][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.422380][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.985679][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 403.396726][T12667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1605'. [ 403.413640][T12667] misc userio: Invalid payload size [ 403.961693][ T6122] vhci_hcd: vhci_device speed not set [ 404.361918][T12698] FAULT_INJECTION: forcing a failure. [ 404.361918][T12698] name failslab, interval 1, probability 0, space 0, times 0 [ 404.372399][T12698] CPU: 2 UID: 0 PID: 12698 Comm: syz.2.1615 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 404.372423][T12698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 404.372432][T12698] Call Trace: [ 404.372436][T12698] [ 404.372443][T12698] dump_stack_lvl+0x16c/0x1f0 [ 404.372470][T12698] should_fail_ex+0x512/0x640 [ 404.372499][T12698] should_failslab+0xc2/0x120 [ 404.372516][T12698] __kmalloc_cache_noprof+0x6a/0x3e0 [ 404.372537][T12698] ? __sctp_v6_cmp_addr+0x206/0x530 [ 404.372552][T12698] ? sctp_add_bind_addr+0xae/0x3f0 [ 404.372594][T12698] sctp_add_bind_addr+0xae/0x3f0 [ 404.372614][T12698] sctp_copy_local_addr_list+0x39d/0x5a0 [ 404.372635][T12698] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 404.372655][T12698] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 404.372669][T12698] ? sctp_bind_addr_copy+0xe0/0x530 [ 404.372684][T12698] sctp_bind_addr_copy+0xe0/0x530 [ 404.372702][T12698] sctp_connect_new_asoc+0x1d7/0x790 [ 404.372717][T12698] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 404.372733][T12698] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 404.372747][T12698] sctp_sendmsg+0x15f9/0x1ee0 [ 404.372764][T12698] ? __pfx_sctp_sendmsg+0x10/0x10 [ 404.372777][T12698] ? __pfx___might_resched+0x10/0x10 [ 404.372794][T12698] ? find_held_lock+0x2b/0x80 [ 404.372806][T12698] ? __pfx_aa_sk_perm+0x10/0x10 [ 404.372821][T12698] ? __import_iovec+0x1dd/0x650 [ 404.372831][T12698] ? __pfx_sctp_sendmsg+0x10/0x10 [ 404.372844][T12698] inet_sendmsg+0x11c/0x140 [ 404.372864][T12698] ____sys_sendmsg+0x973/0xc70 [ 404.372884][T12698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.372895][T12698] ? get_compat_msghdr+0x11a/0x170 [ 404.372924][T12698] ? __pfx__kstrtoull+0x10/0x10 [ 404.372943][T12698] ___sys_sendmsg+0x134/0x1d0 [ 404.372960][T12698] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.372990][T12698] ? __lock_acquire+0x622/0x1c90 [ 404.373036][T12698] __sys_sendmmsg+0x2f9/0x420 [ 404.373061][T12698] ? __pfx___sys_sendmmsg+0x10/0x10 [ 404.373088][T12698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.373111][T12698] ? fput+0x70/0xf0 [ 404.373122][T12698] ? ksys_write+0x1ac/0x250 [ 404.373143][T12698] ? __pfx_ksys_write+0x10/0x10 [ 404.373174][T12698] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 404.373194][T12698] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 404.373217][T12698] __do_fast_syscall_32+0x7c/0x3a0 [ 404.373243][T12698] do_fast_syscall_32+0x32/0x80 [ 404.373267][T12698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.373282][T12698] RIP: 0023:0xf707e579 [ 404.373292][T12698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 404.373303][T12698] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 404.373313][T12698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 404.373320][T12698] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.373325][T12698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.373331][T12698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 404.373337][T12698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.373350][T12698] [ 404.832282][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 404.992298][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 404.997846][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 405.002659][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 405.009357][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.032252][ T24] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 405.042454][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.049429][ T24] usb 7-1: config 0 descriptor?? [ 405.054518][T12704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.114001][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input133 [ 405.312242][ C0] net_ratelimit: 9 callbacks suppressed [ 405.312254][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.326427][T12719] tipc: Enabling of bearer rejected, already enabled [ 405.402469][ T24] usb 7-1: USB disconnect, device number 9 [ 405.413366][ T5357] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 405.542289][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.732916][T12732] fuse: Unknown parameter '—roup_id' [ 405.818771][T12709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1618'. [ 406.027347][T12734] random: crng reseeded on system resumption [ 406.037086][T12734] option changes via remount are deprecated (pid=12733 comm=syz.3.1623) [ 406.102170][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.342271][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.582182][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.152084][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.208975][T12762] FAULT_INJECTION: forcing a failure. [ 407.208975][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 407.213137][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.3.1632 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 407.213152][T12762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 407.213159][T12762] Call Trace: [ 407.213164][T12762] [ 407.213168][T12762] dump_stack_lvl+0x16c/0x1f0 [ 407.213188][T12762] should_fail_ex+0x512/0x640 [ 407.213206][T12762] should_failslab+0xc2/0x120 [ 407.213218][T12762] __kmalloc_cache_noprof+0x6a/0x3e0 [ 407.213233][T12762] ? __sctp_v6_cmp_addr+0x206/0x530 [ 407.213243][T12762] ? sctp_add_bind_addr+0xae/0x3f0 [ 407.213260][T12762] sctp_add_bind_addr+0xae/0x3f0 [ 407.213276][T12762] sctp_copy_local_addr_list+0x39d/0x5a0 [ 407.213297][T12762] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 407.213317][T12762] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 407.213330][T12762] ? sctp_bind_addr_copy+0xe0/0x530 [ 407.213345][T12762] sctp_bind_addr_copy+0xe0/0x530 [ 407.213364][T12762] sctp_connect_new_asoc+0x1d7/0x790 [ 407.213378][T12762] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 407.213405][T12762] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 407.213422][T12762] sctp_sendmsg+0x15f9/0x1ee0 [ 407.213439][T12762] ? __pfx_sctp_sendmsg+0x10/0x10 [ 407.213452][T12762] ? __pfx___might_resched+0x10/0x10 [ 407.213469][T12762] ? find_held_lock+0x2b/0x80 [ 407.213481][T12762] ? __pfx_aa_sk_perm+0x10/0x10 [ 407.213494][T12762] ? __import_iovec+0x1dd/0x650 [ 407.213504][T12762] ? __pfx_sctp_sendmsg+0x10/0x10 [ 407.213517][T12762] inet_sendmsg+0x11c/0x140 [ 407.213532][T12762] ____sys_sendmsg+0x973/0xc70 [ 407.213546][T12762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.213557][T12762] ? get_compat_msghdr+0x11a/0x170 [ 407.213576][T12762] ? __pfx__kstrtoull+0x10/0x10 [ 407.213590][T12762] ___sys_sendmsg+0x134/0x1d0 [ 407.213607][T12762] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.213621][T12762] ? __lock_acquire+0x622/0x1c90 [ 407.213653][T12762] __sys_sendmmsg+0x2f9/0x420 [ 407.213670][T12762] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.213690][T12762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.213713][T12762] ? fput+0x70/0xf0 [ 407.213723][T12762] ? ksys_write+0x1ac/0x250 [ 407.213738][T12762] ? __pfx_ksys_write+0x10/0x10 [ 407.213755][T12762] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 407.213773][T12762] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 407.213789][T12762] __do_fast_syscall_32+0x7c/0x3a0 [ 407.213807][T12762] do_fast_syscall_32+0x32/0x80 [ 407.213823][T12762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.213836][T12762] RIP: 0023:0xf70be579 [ 407.213845][T12762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 407.213855][T12762] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 407.213866][T12762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 407.213872][T12762] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.213878][T12762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.213884][T12762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 407.213890][T12762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.213903][T12762] [ 407.319119][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.364884][T12767] loop8: detected capacity change from 0 to 7 [ 407.371779][ T5970] Dev loop8: unable to read RDB block 7 [ 407.373865][ T5970] loop8: unable to read partition table [ 407.375789][ T5970] loop8: partition table beyond EOD, truncated [ 407.380359][T12767] Dev loop8: unable to read RDB block 7 [ 407.382166][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.385499][T12767] loop8: unable to read partition table [ 407.387363][T12767] loop8: partition table beyond EOD, truncated [ 407.389390][T12767] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 407.534636][T12781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1634'. [ 407.622097][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.670913][T12789] fuse: Unknown parameter '—roup_id' [ 408.182036][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.422089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.596486][T12798] loop8: detected capacity change from 0 to 7 [ 408.605920][T12798] Dev loop8: unable to read RDB block 7 [ 408.607719][T12798] loop8: unable to read partition table [ 408.647741][T12798] loop8: partition table beyond EOD, truncated [ 408.649836][T12798] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 408.759158][T12801] fuse: Bad value for 'group_id' [ 408.762436][T12801] fuse: Bad value for 'group_id' [ 408.776382][T12800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1641'. [ 409.692041][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 409.791292][T12823] fuse: Unknown parameter '—roup_id' [ 409.851952][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 409.855452][ T53] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 409.858414][ T53] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 409.864115][ T53] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 409.867444][ T53] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 409.872181][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.876514][ T53] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 409.879723][ T53] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 409.884733][ T53] usb 5-1: Product: syz [ 409.886369][ T53] usb 5-1: Manufacturer: syz [ 409.888175][ T53] usb 5-1: SerialNumber: syz [ 409.892108][ T53] usb 5-1: config 0 descriptor?? [ 409.899034][ T53] ldusb 5-1:0.0: Interrupt in endpoint not found [ 410.177021][T12829] loop8: detected capacity change from 0 to 7 [ 410.180490][T12829] Dev loop8: unable to read RDB block 7 [ 410.182488][T12829] loop8: unable to read partition table [ 410.185426][T12829] loop8: partition table beyond EOD, truncated [ 410.187509][T12829] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 410.234125][T12830] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1648'. [ 410.502139][ C0] net_ratelimit: 5 callbacks suppressed [ 410.502194][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.530071][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1655'. [ 410.705418][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1656'. [ 410.742113][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.301893][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.363020][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1658'. [ 411.482439][T12856] IPVS: set_ctl: invalid protocol: 192 44.0.0.0:20000 [ 411.513240][ T6122] usb 5-1: USB disconnect, device number 5 [ 411.551937][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.704321][T12868] overlayfs: missing 'lowerdir' [ 411.712448][ T60] Bluetooth: (null): Invalid header checksum [ 411.714334][ T60] Bluetooth: (null): Invalid header checksum [ 411.781974][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.822078][ T222] Bluetooth: (null): Invalid header checksum [ 411.932062][ T60] Bluetooth: (null): Invalid header checksum [ 412.047902][ T60] Bluetooth: (null): Invalid header checksum [ 412.152462][ T1173] Bluetooth: (null): Invalid header checksum [ 412.351930][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.581814][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.764348][ T13] Bluetooth: (null): Invalid header checksum [ 412.773437][ T13] Bluetooth: (null): Invalid header checksum [ 412.775650][ T13] Bluetooth: (null): Invalid header checksum [ 412.777692][ T13] Bluetooth: (null): Invalid header checksum [ 412.779908][ T13] Bluetooth: (null): Invalid header checksum [ 412.821833][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.840259][ T1173] Bluetooth: (null): Invalid header checksum [ 412.952382][ T1173] Bluetooth: (null): Invalid header checksum [ 413.026203][T12886] binder: BINDER_SET_CONTEXT_MGR already set [ 413.028300][T12886] binder: 12885:12886 ioctl 4018620d 80000040 returned -16 [ 413.033124][T12886] binder: 12885:12886 ioctl c0306201 80000640 returned -22 [ 413.037872][T12886] binder_alloc: 12885: pid 12885 spamming oneway? 1 buffers allocated for a total size of 4096 [ 413.044448][T12886] binder_alloc: 12885: pid 12885 spamming oneway? 2 buffers allocated for a total size of 5120 [ 413.052419][ T13] Bluetooth: (null): Invalid header checksum [ 413.142628][ T1173] Bluetooth: (null): Invalid header checksum [ 413.254993][ T222] Bluetooth: (null): Invalid header checksum [ 413.351827][ T9787] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 413.362514][ T13] Bluetooth: (null): Invalid header checksum [ 413.381850][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.511104][T12894] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1668'. [ 413.631800][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.661791][ T9787] usb 8-1: device descriptor read/64, error -71 [ 413.721306][T12898] netlink: 195524 bytes leftover after parsing attributes in process `syz.0.1670'. [ 413.928891][T12902] loop8: detected capacity change from 0 to 7 [ 413.933906][T12902] Dev loop8: unable to read RDB block 7 [ 413.935886][T12902] loop8: unable to read partition table [ 413.937837][T12902] loop8: partition table beyond EOD, truncated [ 413.939849][T12902] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 414.192194][T12911] can: request_module (can-proto-0) failed. [ 414.332035][ T9787] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 414.468136][T12922] input: syz1 as /devices/virtual/input/input135 [ 414.470167][T12922] input: failed to attach handler leds to device input135, error: -6 [ 414.481714][ T9787] usb 8-1: device descriptor read/64, error -71 [ 414.536286][T12922] : entered promiscuous mode [ 414.591947][ T9787] usb usb8-port1: attempt power cycle [ 414.648347][T12924] netlink: 'syz.1.1674': attribute type 23 has an invalid length. [ 414.933911][ T9787] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 414.952351][ T9787] usb 8-1: device descriptor read/8, error -71 [ 415.098646][T12932] lo speed is unknown, defaulting to 1000 [ 415.196993][T12932] Invalid source name [ 415.198328][T12932] UBIFS error (pid: 12932): cannot open "./file0", error -22 [ 415.199374][T12932] syz.2.1680 (12932): /proc/12931/oom_adj is deprecated, please use /proc/12931/oom_score_adj instead. [ 415.212456][ T9787] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 415.232463][ T9787] usb 8-1: device descriptor read/8, error -71 [ 415.342313][ T9787] usb usb8-port1: unable to enumerate USB device [ 415.701632][ C0] net_ratelimit: 15 callbacks suppressed [ 415.701644][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.941650][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.501620][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.742082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.981621][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.266659][T12963] devpts: Bad value for 'max' [ 417.356876][ T40] audit: type=1804 audit(1751935801.783:47): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1688" name="/newroot/419/file0" dev="tmpfs" ino=2204 res=1 errno=0 [ 417.372646][T12966] loop8: detected capacity change from 0 to 7 [ 417.376005][ T5970] Dev loop8: unable to read RDB block 7 [ 417.378292][ T5970] loop8: unable to read partition table [ 417.380597][ T5970] loop8: partition table beyond EOD, truncated [ 417.405097][T12966] Dev loop8: unable to read RDB block 7 [ 417.407487][T12966] loop8: unable to read partition table [ 417.409976][T12966] loop8: partition table beyond EOD, truncated [ 417.414882][T12966] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 417.541612][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.781577][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.021573][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.581505][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.831488][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.028703][T13002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1701'. [ 419.319935][T13011] loop8: detected capacity change from 0 to 7 [ 419.331853][ T5973] Dev loop8: unable to read RDB block 7 [ 419.333774][ T5973] loop8: unable to read partition table [ 419.344846][ T5973] loop8: partition table beyond EOD, truncated [ 419.401763][T13011] Dev loop8: unable to read RDB block 7 [ 419.403544][T13011] loop8: unable to read partition table [ 419.405621][T13011] loop8: partition table beyond EOD, truncated [ 419.408218][T13011] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 420.404817][T13026] fuse: Unknown parameter '—roup_id' [ 420.540136][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1709'. [ 420.566065][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 420.901349][ C0] net_ratelimit: 6 callbacks suppressed [ 420.901362][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.152066][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.571190][T13050] FAULT_INJECTION: forcing a failure. [ 421.571190][T13050] name failslab, interval 1, probability 0, space 0, times 0 [ 421.575179][T13050] CPU: 3 UID: 0 PID: 13050 Comm: syz.1.1716 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 421.575194][T13050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 421.575201][T13050] Call Trace: [ 421.575206][T13050] [ 421.575210][T13050] dump_stack_lvl+0x16c/0x1f0 [ 421.575230][T13050] should_fail_ex+0x512/0x640 [ 421.575246][T13050] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 421.575264][T13050] should_failslab+0xc2/0x120 [ 421.575275][T13050] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 421.575291][T13050] ? __alloc_skb+0x2b2/0x380 [ 421.575310][T13050] __alloc_skb+0x2b2/0x380 [ 421.575324][T13050] ? __pfx___alloc_skb+0x10/0x10 [ 421.575340][T13050] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 421.575354][T13050] netlink_alloc_large_skb+0x69/0x130 [ 421.575366][T13050] netlink_sendmsg+0x6a1/0xdd0 [ 421.575378][T13050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.575390][T13050] ? __import_iovec+0x1dd/0x650 [ 421.575403][T13050] ____sys_sendmsg+0xa98/0xc70 [ 421.575416][T13050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.575427][T13050] ? get_compat_msghdr+0x11a/0x170 [ 421.575449][T13050] ___sys_sendmsg+0x134/0x1d0 [ 421.575465][T13050] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.575487][T13050] ? find_held_lock+0x2b/0x80 [ 421.575507][T13050] __sys_sendmsg+0x16d/0x220 [ 421.575523][T13050] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.575544][T13050] ? rcu_is_watching+0x12/0xc0 [ 421.575557][T13050] __do_fast_syscall_32+0x7c/0x3a0 [ 421.575575][T13050] do_fast_syscall_32+0x32/0x80 [ 421.575591][T13050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.575605][T13050] RIP: 0023:0xf709e579 [ 421.575614][T13050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 421.575624][T13050] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 421.575635][T13050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 421.575641][T13050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.575647][T13050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.575653][T13050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 421.575659][T13050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.575671][T13050] [ 421.711364][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.941295][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.950442][T13055] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1715'. [ 422.191311][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.487153][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.494133][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.498612][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.505040][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.511332][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.516775][ T192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.600857][T13057] lo speed is unknown, defaulting to 1000 [ 422.751231][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.757471][T13073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 422.770087][T13036] syz.0.1711: vmalloc error: size 655695872, failed to allocated page array size 1280656, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.776418][T13036] CPU: 2 UID: 0 PID: 13036 Comm: syz.0.1711 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 422.776434][T13036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.776441][T13036] Call Trace: [ 422.776445][T13036] [ 422.776449][T13036] dump_stack_lvl+0x16c/0x1f0 [ 422.776470][T13036] warn_alloc+0x248/0x3a0 [ 422.776488][T13036] ? __pfx_warn_alloc+0x10/0x10 [ 422.776510][T13036] ? drm_property_create_blob+0x74/0x330 [ 422.776527][T13036] ? __vmalloc_node_noprof+0xad/0xf0 [ 422.776544][T13036] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 422.776562][T13036] ? drm_property_create_blob+0x74/0x330 [ 422.776581][T13036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.776596][T13036] ? __alloc_pages_noprof+0xb/0x1b0 [ 422.776612][T13036] ? ___kmalloc_large_node+0x84/0x1e0 [ 422.776628][T13036] __kvmalloc_node_noprof+0x30a/0x620 [ 422.776644][T13036] ? drm_property_create_blob+0x74/0x330 [ 422.776660][T13036] ? drm_property_create_blob+0x74/0x330 [ 422.776678][T13036] ? drm_property_create_blob+0x74/0x330 [ 422.776693][T13036] drm_property_create_blob+0x74/0x330 [ 422.776708][T13036] ? find_held_lock+0x2b/0x80 [ 422.776721][T13036] drm_mode_createblob_ioctl+0x10d/0x450 [ 422.776739][T13036] drm_ioctl_kernel+0x1f1/0x3e0 [ 422.776756][T13036] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 422.776773][T13036] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 422.776794][T13036] drm_ioctl+0x5c9/0xc30 [ 422.776813][T13036] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 422.776830][T13036] ? __pfx_drm_ioctl+0x10/0x10 [ 422.776857][T13036] drm_compat_ioctl+0x327/0x460 [ 422.776870][T13036] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 422.776883][T13036] __ia32_compat_sys_ioctl+0x242/0x370 [ 422.776899][T13036] __do_fast_syscall_32+0x7c/0x3a0 [ 422.776918][T13036] do_fast_syscall_32+0x32/0x80 [ 422.776935][T13036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.776949][T13036] RIP: 0023:0xf7f05579 [ 422.776958][T13036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 422.776969][T13036] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 422.776979][T13036] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c01064bd [ 422.776986][T13036] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.776993][T13036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.776999][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.777005][T13036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.777018][T13036] [ 422.777022][T13036] Mem-Info: [ 422.865043][T13036] active_anon:587 inactive_anon:5405 isolated_anon:0 [ 422.865043][T13036] active_file:1816 inactive_file:16428 isolated_file:0 [ 422.865043][T13036] unevictable:1768 dirty:163 writeback:0 [ 422.865043][T13036] slab_reclaimable:5784 slab_unreclaimable:59145 [ 422.865043][T13036] mapped:24546 shmem:2310 pagetables:1250 [ 422.865043][T13036] sec_pagetables:330 bounce:0 [ 422.865043][T13036] kernel_misc_reclaimable:0 [ 422.865043][T13036] free:54732 free_pcp:12716 free_cma:0 [ 422.879315][T13036] Node 0 active_anon:444kB inactive_anon:116kB active_file:1544kB inactive_file:32kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6216kB dirty:8kB writeback:0kB shmem:4400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8620kB pagetables:2164kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 422.890343][T13036] Node 1 active_anon:1904kB inactive_anon:21504kB active_file:5720kB inactive_file:65680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91968kB dirty:644kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4632kB pagetables:2836kB sec_pagetables:128kB all_unreclaimable? no Balloon:0kB [ 422.902126][T13036] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:16kB free_cma:0kB [ 422.913491][T13036] lowmem_reserve[]: 0 288 288 288 288 [ 422.915158][T13036] Node 0 DMA32 free:16928kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:460KB active_anon:432kB inactive_anon:116kB active_file:1528kB inactive_file:32kB unevictable:3536kB writepending:8kB present:1032196kB managed:295904kB mlocked:0kB bounce:0kB free_pcp:6944kB local_pcp:1780kB free_cma:0kB [ 422.917083][ T192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.927442][T13036] lowmem_reserve[]: 0 0 0 0 0 [ 422.937149][T13036] Node 1 DMA32 free:199780kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1900kB inactive_anon:21504kB active_file:5720kB inactive_file:65680kB unevictable:3536kB writepending:644kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:43800kB local_pcp:11812kB free_cma:0kB [ 422.949686][T13036] lowmem_reserve[]: 0 0 0 0 0 [ 422.961217][T13036] Node 0 DMA: 3*4kB (M) 9*8kB (UM) 15*16kB (UM) 7*32kB (UM) 4*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2084kB [ 422.968517][T13036] Node 0 DMA32: 232*4kB (MEH) 191*8kB (MEH) 110*16kB (UMEH) 96*32kB (UMEH) 47*64kB (UMEH) 17*128kB (UME) 7*256kB (UME) 3*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 16824kB [ 422.974801][T13036] Node 1 DMA32: 295*4kB (UME) 205*8kB (UME) 111*16kB (UME) 114*32kB (UME) 89*64kB (ME) 46*128kB (UME) 28*256kB (UME) 29*512kB (UME) 38*1024kB (UM) 30*2048kB (UM) 14*4096kB (UM) = 199540kB [ 422.980717][T13036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.981353][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.987061][T13036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 422.992061][T13036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.997519][T13036] Node 1 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 423.000552][T13036] 21115 total pagecache pages [ 423.002554][T13036] 565 pages in swap cache [ 423.004043][T13036] Free swap = 119232kB [ 423.005477][T13036] Total swap = 124996kB [ 423.007126][T13036] 524155 pages RAM [ 423.008454][T13036] 0 pages HighMem/MovableOnly [ 423.010007][T13036] 209268 pages reserved [ 423.019692][T13036] 0 pages cma reserved [ 423.202221][ T192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.221224][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.402450][ T192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.447400][T13057] chnl_net:caif_netlink_parms(): no params data found [ 423.781172][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.845144][T13090] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 423.847817][T13090] PKCS7: Only support pkcs7_signedData type [ 424.021183][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.581165][ T63] Bluetooth: hci1: command tx timeout [ 425.086611][T13095] netlink: 'syz.1.1728': attribute type 33 has an invalid length. [ 425.090281][T13095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1728'. [ 425.226255][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.228518][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.230793][T13057] bridge_slave_0: entered allmulticast mode [ 425.237304][T13057] bridge_slave_0: entered promiscuous mode [ 425.342731][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.355646][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.361170][T13057] bridge_slave_1: entered allmulticast mode [ 425.363908][T13057] bridge_slave_1: entered promiscuous mode [ 425.665696][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.670178][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.101116][ C0] net_ratelimit: 5 callbacks suppressed [ 426.101127][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.304231][T13106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1731'. [ 426.306323][T13057] team0: Port device team_slave_0 added [ 426.351051][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.632933][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 426.661006][ T63] Bluetooth: hci1: command tx timeout [ 426.901061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.141099][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.381080][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.951031][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.181052][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.421060][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.740989][ T63] Bluetooth: hci1: command tx timeout [ 428.980936][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.982256][ T192] bond0 (unregistering): Released all slaves [ 428.991251][ T192] bond1 (unregistering): Released all slaves [ 429.072268][T13057] team0: Port device team_slave_1 added [ 429.220888][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.275094][T13128] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 429.277943][T13128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 429.292508][T13128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 429.543452][ T192] : left promiscuous mode [ 429.652485][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.655246][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.670079][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.688962][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.692164][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.700465][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.948928][ T192] tipc: Disabling bearer [ 429.952155][ T192] tipc: Left network mode [ 429.960048][T13057] hsr_slave_0: entered promiscuous mode [ 429.964296][T13057] hsr_slave_1: entered promiscuous mode [ 429.967674][T13057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.974032][T13057] Cannot create hsr debugfs directory [ 430.777893][T13174] tipc: Enabling of bearer rejected, already enabled [ 430.831826][ T63] Bluetooth: hci1: command tx timeout [ 431.300879][ C0] net_ratelimit: 5 callbacks suppressed [ 431.300896][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.318509][T13189] FAULT_INJECTION: forcing a failure. [ 431.318509][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 431.324162][T13189] CPU: 3 UID: 0 PID: 13189 Comm: syz.0.1751 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 431.324177][T13189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 431.324188][T13189] Call Trace: [ 431.324192][T13189] [ 431.324197][T13189] dump_stack_lvl+0x16c/0x1f0 [ 431.324216][T13189] should_fail_ex+0x512/0x640 [ 431.324235][T13189] should_failslab+0xc2/0x120 [ 431.324246][T13189] __kmalloc_cache_noprof+0x6a/0x3e0 [ 431.324260][T13189] ? __sctp_v6_cmp_addr+0x206/0x530 [ 431.324271][T13189] ? sctp_add_bind_addr+0xae/0x3f0 [ 431.324288][T13189] sctp_add_bind_addr+0xae/0x3f0 [ 431.324305][T13189] sctp_copy_local_addr_list+0x39d/0x5a0 [ 431.324325][T13189] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 431.324345][T13189] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 431.324358][T13189] ? sctp_bind_addr_copy+0xe0/0x530 [ 431.324373][T13189] sctp_bind_addr_copy+0xe0/0x530 [ 431.324392][T13189] sctp_connect_new_asoc+0x1d7/0x790 [ 431.324406][T13189] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 431.324422][T13189] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 431.324436][T13189] sctp_sendmsg+0x15f9/0x1ee0 [ 431.324453][T13189] ? __pfx_sctp_sendmsg+0x10/0x10 [ 431.324467][T13189] ? __pfx___might_resched+0x10/0x10 [ 431.324484][T13189] ? find_held_lock+0x2b/0x80 [ 431.324496][T13189] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.324510][T13189] ? __import_iovec+0x1dd/0x650 [ 431.324519][T13189] ? __pfx_sctp_sendmsg+0x10/0x10 [ 431.324533][T13189] inet_sendmsg+0x11c/0x140 [ 431.324548][T13189] ____sys_sendmsg+0x973/0xc70 [ 431.324562][T13189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.324574][T13189] ? get_compat_msghdr+0x11a/0x170 [ 431.324592][T13189] ? __pfx__kstrtoull+0x10/0x10 [ 431.324608][T13189] ___sys_sendmsg+0x134/0x1d0 [ 431.324624][T13189] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.324638][T13189] ? __lock_acquire+0x622/0x1c90 [ 431.324670][T13189] __sys_sendmmsg+0x2f9/0x420 [ 431.324687][T13189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 431.324707][T13189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.324729][T13189] ? fput+0x70/0xf0 [ 431.324740][T13189] ? ksys_write+0x1ac/0x250 [ 431.324754][T13189] ? __pfx_ksys_write+0x10/0x10 [ 431.324772][T13189] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 431.324790][T13189] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 431.324806][T13189] __do_fast_syscall_32+0x7c/0x3a0 [ 431.324824][T13189] do_fast_syscall_32+0x32/0x80 [ 431.324840][T13189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.324853][T13189] RIP: 0023:0xf7f05579 [ 431.324862][T13189] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 431.324872][T13189] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 431.324883][T13189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 431.324890][T13189] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.324895][T13189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.324901][T13189] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 431.324907][T13189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.324920][T13189] [ 431.540773][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.807154][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1753'. [ 432.100092][T13219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 432.102211][T13219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.104666][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.170801][T13219] vhci_hcd vhci_hcd.0: Device attached [ 432.340718][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.431040][ T7627] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 432.580702][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.659762][T13221] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 432.662038][T13220] vhci_hcd: connection closed [ 432.750165][ T222] vhci_hcd: stop threads [ 432.764948][ T222] vhci_hcd: release socket [ 432.816326][ T222] vhci_hcd: disconnect device [ 433.140637][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.380648][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.630635][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.180582][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.355143][T13250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1759'. [ 434.420631][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.572875][ T63] Bluetooth: hci2: unexpected event for opcode 0x1435 [ 434.599178][T13264] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 434.700852][ T192] hsr_slave_0: left promiscuous mode [ 434.730581][ T192] hsr_slave_1: left promiscuous mode [ 434.782181][ T192] veth1_macvtap: left promiscuous mode [ 434.784989][ T192] veth0_macvtap: left promiscuous mode [ 434.787296][ T192] veth1_vlan: left promiscuous mode [ 434.818154][T13272] FAULT_INJECTION: forcing a failure. [ 434.818154][T13272] name failslab, interval 1, probability 0, space 0, times 0 [ 434.823149][T13272] CPU: 0 UID: 0 PID: 13272 Comm: syz.3.1766 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 434.823171][T13272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.823183][T13272] Call Trace: [ 434.823189][T13272] [ 434.823195][T13272] dump_stack_lvl+0x16c/0x1f0 [ 434.823221][T13272] should_fail_ex+0x512/0x640 [ 434.823239][T13272] should_failslab+0xc2/0x120 [ 434.823252][T13272] __kmalloc_cache_noprof+0x6a/0x3e0 [ 434.823267][T13272] ? __sctp_v6_cmp_addr+0x206/0x530 [ 434.823278][T13272] ? sctp_add_bind_addr+0xae/0x3f0 [ 434.823295][T13272] sctp_add_bind_addr+0xae/0x3f0 [ 434.823313][T13272] sctp_copy_local_addr_list+0x39d/0x5a0 [ 434.823334][T13272] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 434.823356][T13272] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 434.823370][T13272] ? sctp_bind_addr_copy+0xe0/0x530 [ 434.823386][T13272] sctp_bind_addr_copy+0xe0/0x530 [ 434.823406][T13272] sctp_connect_new_asoc+0x1d7/0x790 [ 434.823421][T13272] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 434.823438][T13272] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 434.823453][T13272] sctp_sendmsg+0x15f9/0x1ee0 [ 434.823470][T13272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 434.823485][T13272] ? __pfx___might_resched+0x10/0x10 [ 434.823503][T13272] ? find_held_lock+0x2b/0x80 [ 434.823517][T13272] ? __pfx_aa_sk_perm+0x10/0x10 [ 434.823537][T13272] ? __import_iovec+0x1dd/0x650 [ 434.823550][T13272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 434.823570][T13272] inet_sendmsg+0x11c/0x140 [ 434.823593][T13272] ____sys_sendmsg+0x973/0xc70 [ 434.823613][T13272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.823625][T13272] ? get_compat_msghdr+0x11a/0x170 [ 434.823675][T13272] ? __pfx__kstrtoull+0x10/0x10 [ 434.823694][T13272] ___sys_sendmsg+0x134/0x1d0 [ 434.823712][T13272] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.823728][T13272] ? __lock_acquire+0x622/0x1c90 [ 434.823761][T13272] __sys_sendmmsg+0x2f9/0x420 [ 434.823780][T13272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 434.823802][T13272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.823825][T13272] ? fput+0x70/0xf0 [ 434.823836][T13272] ? ksys_write+0x1ac/0x250 [ 434.823852][T13272] ? __pfx_ksys_write+0x10/0x10 [ 434.823871][T13272] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 434.823889][T13272] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 434.823912][T13272] __do_fast_syscall_32+0x7c/0x3a0 [ 434.823931][T13272] do_fast_syscall_32+0x32/0x80 [ 434.823948][T13272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.823963][T13272] RIP: 0023:0xf70be579 [ 434.823973][T13272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.823984][T13272] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 434.823995][T13272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 434.824003][T13272] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.824009][T13272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.824015][T13272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 434.824021][T13272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.824035][T13272] [ 436.500548][ C0] net_ratelimit: 5 callbacks suppressed [ 436.500565][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.750568][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.300442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.540476][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.714931][ T7627] vhci_hcd: vhci_device speed not set [ 437.780479][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.340648][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.580478][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.590628][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 438.594537][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 438.598000][ T63] Bluetooth: hci2: hardware error 0x00 [ 438.820428][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.380462][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.620528][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.631942][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.633956][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.750714][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 441.710385][ C0] net_ratelimit: 5 callbacks suppressed [ 441.710403][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.940257][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.500114][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.750147][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.980139][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.540430][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.780245][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.020165][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.580069][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.820146][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.899934][ C0] net_ratelimit: 5 callbacks suppressed [ 446.899948][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.139954][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.700195][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.940084][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.179855][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.739833][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.979869][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.229757][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.541894][T13267] veth3: entered promiscuous mode [ 449.779719][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.831801][ T5968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.837966][ T5968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.840958][ T5968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.851611][ T5968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.854729][ T5968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 450.029778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.859711][ T63] Bluetooth: hci4: command tx timeout [ 452.099695][ C0] net_ratelimit: 5 callbacks suppressed [ 452.101496][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.339669][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.899699][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.139672][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.379580][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.939501][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.939569][ T63] Bluetooth: hci4: command tx timeout [ 454.179530][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.419549][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.979625][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.219567][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.019512][ T63] Bluetooth: hci4: command tx timeout [ 457.299491][ C1] net_ratelimit: 5 callbacks suppressed [ 457.299503][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.539618][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.099263][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.101627][ T63] Bluetooth: hci4: command tx timeout [ 458.339273][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.579367][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.139349][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.379490][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.619355][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.179247][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.419226][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.499115][ C1] net_ratelimit: 5 callbacks suppressed [ 462.499127][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.739038][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.210325][T13297] lo speed is unknown, defaulting to 1000 [ 463.299082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.337039][T13057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.395075][T13057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.454648][T13297] chnl_net:caif_netlink_parms(): no params data found [ 463.459196][T13057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.511490][T13057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.778987][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.910797][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.913380][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.916088][T13297] bridge_slave_0: entered allmulticast mode [ 463.918649][T13297] bridge_slave_0: entered promiscuous mode [ 464.229583][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.231941][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.234772][T13297] bridge_slave_1: entered allmulticast mode [ 464.238473][T13297] bridge_slave_1: entered promiscuous mode [ 464.338962][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.593371][T13297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.598049][ T192] IPVS: stop unused estimator thread 0... [ 464.598952][T13297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.793929][T13297] team0: Port device team_slave_0 added [ 464.800962][T13297] team0: Port device team_slave_1 added [ 464.819086][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.103735][T13297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.105903][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.113774][T13297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.118626][T13297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.120871][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.128369][T13297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.378846][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.868819][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.992887][ T192] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.054405][T13297] hsr_slave_0: entered promiscuous mode [ 466.057525][T13297] hsr_slave_1: entered promiscuous mode [ 466.083017][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1785'. [ 466.204753][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.249810][ T192] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.428765][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.490517][ T192] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.550223][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.562811][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.564917][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.749786][ T192] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.815495][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.817703][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.871519][T13297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.898841][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.913368][T13297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.973349][T13297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.020566][T13297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.321356][T13297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.336365][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.343289][T13297] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.365802][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.367966][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.390554][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.393248][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.430679][T13057] veth0_vlan: entered promiscuous mode [ 467.442135][T13057] veth1_vlan: entered promiscuous mode [ 467.714213][T13433] binfmt_misc: register: failed to install interpreter file ./file0 [ 467.938730][ C3] net_ratelimit: 1 callbacks suppressed [ 467.938743][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.386656][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 468.508773][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.988659][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.350676][ T192] bond0 (unregistering): Released all slaves [ 469.408683][T13435] lo: entered allmulticast mode [ 469.478118][T13057] veth0_macvtap: entered promiscuous mode [ 469.480985][ T192] : left promiscuous mode [ 469.548761][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.625083][T13057] veth1_macvtap: entered promiscuous mode [ 469.654055][T13297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.657759][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.665923][ T192] tipc: Disabling bearer [ 469.672584][ T192] tipc: Left network mode [ 469.676108][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.681577][T13057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.684301][T13057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.686980][T13057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.691961][T13057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.018679][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.145286][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.147732][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.166674][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.171654][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.239692][T13297] veth0_vlan: entered promiscuous mode [ 470.252581][T13297] veth1_vlan: entered promiscuous mode [ 470.266184][T13297] veth0_macvtap: entered promiscuous mode [ 470.464341][T13070] ------------[ cut here ]------------ [ 470.466515][T13070] WARNING: CPU: 1 PID: 13070 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 [ 470.469475][T13070] Modules linked in: [ 470.471190][T13070] CPU: 1 UID: 0 PID: 13070 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.475923][T13070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.479335][T13070] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 470.481230][T13070] Code: 00 e8 c1 cd 0b 00 e8 8c 7d 46 00 fb 65 8b 05 f4 2a 53 12 85 c0 74 52 5b 5d e9 59 7d 0a 0a 65 8b 05 3e 69 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 23 7f 46 00 eb 99 48 89 ef e8 09 74 1b 00 eb a2 [ 470.487217][T13070] RSP: 0018:ffffc90026097758 EFLAGS: 00010046 [ 470.489134][T13070] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff2153804 [ 470.491648][T13070] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89e80703 [ 470.494135][T13070] RBP: ffffffff89e80703 R08: 0000000000000000 R09: ffffed1005667870 [ 470.496725][T13070] R10: ffff88802b33c383 R11: 0000000000002c00 R12: 000000000100007f [ 470.499268][T13070] R13: ffffc900260978a0 R14: ffff88804f5a7464 R15: ffff888027016000 [ 470.501860][T13070] FS: 0000000000000000(0000) GS:ffff888097623000(0000) knlGS:0000000000000000 [ 470.504649][T13070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.506725][T13070] CR2: 000000005700e4c0 CR3: 0000000053ad2000 CR4: 0000000000352ef0 [ 470.509233][T13070] Call Trace: [ 470.510310][T13070] [ 470.511259][T13070] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 470.513160][T13070] ? dst_alloc+0xc0/0x1a0 [ 470.514521][T13070] ? ret_from_fork_asm+0x1a/0x30 [ 470.516100][T13070] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 470.518015][T13070] ip_route_output_key_hash+0x137/0x2e0 [ 470.519805][T13070] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 470.521710][T13070] ? stack_trace_save+0x8e/0xc0 [ 470.523255][T13070] ? __pfx_map_id_range_down+0x10/0x10 [ 470.524988][T13070] ? check_path.constprop.0+0x24/0x50 [ 470.526674][T13070] ip_route_output_flow+0x27/0x150 [ 470.528304][T13070] rxrpc_init_peer+0x40f/0xc70 [ 470.529825][T13070] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 470.531509][T13070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.533397][T13070] rxrpc_new_incoming_peer+0x64/0x2e0 [ 470.535101][T13070] rxrpc_new_incoming_call+0x127b/0x1890 [ 470.536886][T13070] ? trace_rxrpc_tlp_probe+0x140/0x210 [ 470.538602][T13070] rxrpc_io_thread+0x2f01/0x4020 [ 470.540191][T13070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 470.541891][T13070] ? rcu_is_watching+0x12/0xc0 [ 470.543424][T13070] ? trace_sched_exit_tp+0xde/0x130 [ 470.545073][T13070] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.546623][T13070] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.548458][T13070] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.550093][T13070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 470.551769][T13070] ? kthread+0x3c5/0x780 [ 470.553142][T13070] kthread+0x3c5/0x780 [ 470.554448][T13070] ? __pfx_kthread+0x10/0x10 [ 470.555931][T13070] ? rcu_is_watching+0x12/0xc0 [ 470.557437][T13070] ? __pfx_kthread+0x10/0x10 [ 470.558896][T13070] ret_from_fork+0x5d4/0x6f0 [ 470.560376][T13070] ? __pfx_kthread+0x10/0x10 [ 470.561858][T13070] ret_from_fork_asm+0x1a/0x30 [ 470.563401][T13070] [ 470.564394][T13070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.566649][T13070] CPU: 1 UID: 0 PID: 13070 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 470.569927][T13070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.573273][T13070] Call Trace: [ 470.574336][T13070] [ 470.575281][T13070] dump_stack_lvl+0x3d/0x1f0 [ 470.576769][T13070] panic+0x71c/0x800 [ 470.578012][T13070] ? __pfx_panic+0x10/0x10 [ 470.579433][T13070] ? show_trace_log_lvl+0x29b/0x3e0 [ 470.581105][T13070] ? check_panic_on_warn+0x1f/0xb0 [ 470.582722][T13070] ? __local_bh_enable_ip+0xc3/0x120 [ 470.584408][T13070] check_panic_on_warn+0xab/0xb0 [ 470.585978][T13070] __warn+0xf6/0x3c0 [ 470.587219][T13070] ? __local_bh_enable_ip+0xc3/0x120 [ 470.588903][T13070] report_bug+0x3c3/0x580 [ 470.590269][T13070] ? __local_bh_enable_ip+0xc3/0x120 [ 470.591962][T13070] handle_bug+0x184/0x210 [ 470.593342][T13070] exc_invalid_op+0x17/0x50 [ 470.594777][T13070] asm_exc_invalid_op+0x1a/0x20 [ 470.596341][T13070] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 470.598197][T13070] Code: 00 e8 c1 cd 0b 00 e8 8c 7d 46 00 fb 65 8b 05 f4 2a 53 12 85 c0 74 52 5b 5d e9 59 7d 0a 0a 65 8b 05 3e 69 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 23 7f 46 00 eb 99 48 89 ef e8 09 74 1b 00 eb a2 [ 470.604182][T13070] RSP: 0018:ffffc90026097758 EFLAGS: 00010046 [ 470.606081][T13070] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff2153804 [ 470.608564][T13070] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89e80703 [ 470.611019][T13070] RBP: ffffffff89e80703 R08: 0000000000000000 R09: ffffed1005667870 [ 470.613507][T13070] R10: ffff88802b33c383 R11: 0000000000002c00 R12: 000000000100007f [ 470.616015][T13070] R13: ffffc900260978a0 R14: ffff88804f5a7464 R15: ffff888027016000 [ 470.618465][T13070] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 470.620365][T13070] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 470.622248][T13070] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 470.624097][T13070] ? dst_alloc+0xc0/0x1a0 [ 470.625460][T13070] ? ret_from_fork_asm+0x1a/0x30 [ 470.627028][T13070] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 470.628931][T13070] ip_route_output_key_hash+0x137/0x2e0 [ 470.630668][T13070] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 470.632623][T13070] ? stack_trace_save+0x8e/0xc0 [ 470.634172][T13070] ? __pfx_map_id_range_down+0x10/0x10 [ 470.635914][T13070] ? check_path.constprop.0+0x24/0x50 [ 470.637596][T13070] ip_route_output_flow+0x27/0x150 [ 470.639206][T13070] rxrpc_init_peer+0x40f/0xc70 [ 470.640750][T13070] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 470.642446][T13070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.644333][T13070] rxrpc_new_incoming_peer+0x64/0x2e0 [ 470.646066][T13070] rxrpc_new_incoming_call+0x127b/0x1890 [ 470.647862][T13070] ? trace_rxrpc_tlp_probe+0x140/0x210 [ 470.649586][T13070] rxrpc_io_thread+0x2f01/0x4020 [ 470.651170][T13070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 470.652869][T13070] ? rcu_is_watching+0x12/0xc0 [ 470.654386][T13070] ? trace_sched_exit_tp+0xde/0x130 [ 470.656045][T13070] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.657655][T13070] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.659514][T13070] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.661158][T13070] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 470.662828][T13070] ? kthread+0x3c5/0x780 [ 470.664192][T13070] kthread+0x3c5/0x780 [ 470.665495][T13070] ? __pfx_kthread+0x10/0x10 [ 470.666965][T13070] ? rcu_is_watching+0x12/0xc0 [ 470.668494][T13070] ? __pfx_kthread+0x10/0x10 [ 470.669970][T13070] ret_from_fork+0x5d4/0x6f0 [ 470.671443][T13070] ? __pfx_kthread+0x10/0x10 [ 470.672939][T13070] ret_from_fork_asm+0x1a/0x30 [ 470.674450][T13070] [ 470.676151][T13070] Kernel Offset: disabled [ 470.677517][T13070] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:50:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b33ff60 RCX=ffffffff81af3e1d RDX=ffff888023512440 RSI=ffffffff81af3df9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90002be78a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed1005667fed R15=ffff88802b23b6c0 RIP=ffffffff81af3dfb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097523000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7377098 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000680 DR1=0000000000000003 DR2=0000000000000200 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582c95 RDI=ffffffff9b0a9980 RBP=ffffffff9b0a9940 RSP=ffffc900260970c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b0a9940 R15=ffffffff85582c30 RIP=ffffffff85582cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097623000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005700e4c0 CR3=0000000053ad2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00007f7216df1ac0 RCX=0000000000000000 RDX=0000000000000020 RSI=000055a05f8b7430 RDI=00007f7216df1ac0 RBP=0000000000000000 RSP=00007ffd25ce7ac0 R8 =000055a05f8b7440 R9 =0000000000000002 R10=0000000000000000 R11=b12de440a00c5b99 R12=000055a05f8b7450 R13=0000000000000002 R14=0000000000000000 R15=00007f7216df1ac0 RIP=00007f7216cb72b1 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f72173f3880 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff9889225d0 CR3=000000004aa0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a05f8c1640 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a05f8d1730 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7216df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7216d52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a05f8eb410 00007f7216df2150 0000000000001201 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9175c3f6 RBX=ffffffff90df7d08 RCX=dffffc0000000000 RDX=1ffffffff21befa1 RSI=0000000000000000 RDI=ffffffff90df7cfc RBP=ffffffff90df7cfc RSP=ffffc90002c576f8 R8 =ffffffff9175c426 R9 =0000000000000000 R10=0000000000000000 R11=0000000000038d1e R12=ffffffff90df7d18 R13=ffffffff848d1e9f R14=ffffffff90df7cfc R15=ffffffff90df7cfc RIP=ffffffff816a7d50 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097823000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005701b99c CR3=0000000024665000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001dc00000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000