last executing test programs: 6.979926036s ago: executing program 3 (id=674): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x18, "000080f10001de16536bdb72000000024000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x1, 0x35b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x10a4, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="38d71afd6f1a5c1ba4e063e4d496b5053d6ef2b28adb1399dc1dc0a0da3d573d5493bc7d51ef8a2e8fbd107095c1035189d4150189c385258bb10a54e4838059c400a41fd2fd51a456da59ba4e4b450d252c2b9b14d98b1f2ad426d02fc19a07e8617b901e4ea347733bb8f5c1ce5bbe9c01ea715663cdfa61fa93756330b173775b111a6a098e865ff54120d40a5b55d6999485a407bf8cd79b9365", 0x9c}, {&(0x7f0000000180)="512ef049b550e2d97ddf63ab349ee5ec731d9ed14a9bdfd1c8be65e621edbe7261054c2d6e5d0ddb41f18f41b53ca843e43f5e973c4776fbd78d7e8d1c91257a", 0x40}, {&(0x7f00000003c0)="eb5efdf5344b4c653f29f365de03b4fe18f7de92be848d8dfb730aaa98aac26ae5963ed6569f937b143d11e5f38ada94d02d2a3f1170c66c17700709f8501f9e70c32a97ecaa8062b5cdbf7e7e8ad0464ad030d6d44784cb4d77b64015a45bb7b1e02b3ede923ee964014b67b3bc08ffc39a85fd0e9a3c0a1b3f144b7ad54a06d29901e61c445d6a514d52426baa548c3f815439645e95f352106a00e8db2e53d998ab6f86360a2160dbeb86cd527b7ea74309", 0xb3}, {&(0x7f0000000480)="3a5ef23502aee2c6192fe40a81c39f87e219d4310d466c1db3182d5d41191be08abffb146cf96ce2d903b1916dfd52ea3dee4118a8e377a6a1ead1d23bf8cb6ba0dc93f002f9e47411", 0x49}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000500)="edf7fdf3deea90784b323355f44d1daacdcd8f7bae56078c908eb5c4616332cfbc98ad370e7059d8e9544bbb44a4269fc46c53caaec718891923716eb982a403e0e92af10101184aa2e79bf06ede1b5c40c5d65ad9104b8ece5c58e08c8cd0a09fca55a2c19dd1c982a5eb0c5197c5469ffebbc81a4958b6bacd031c99a21d2dbd3923a01d28d054cc212eee683d047ae7c66c4db61e9f9bd56fb56a9acb14a8a891d6512831c750", 0xa8}, {0x0}, {&(0x7f00000005c0)="7e91dc691bfafa7902ff2cbb1825324afc52c01903486551e4b0e79ddc179cd6bb5570b39a77856035dbc2597b87c6dd9c45f49f18c5edd8cfcd0f5ca26dd2cec35e52fab0e11a", 0x47}], 0x8, &(0x7f0000001dc0)=[{0x80c, 0x10a, 0x7f, "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"}], 0x80c}}], 0x2, 0xfffe) 6.310065524s ago: executing program 2 (id=678): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2e, 0x6, @thr={&(0x7f0000000300)="c6f670f200c25293c9f397627a68f362e6e00ef17e2b2628627c463f14bd0a0c064e8e649ea7947216642fe4bad5048da6e05baf814c462095a3ebed081f72c906479b399f3b49e45eaa05bbfc07dba4916d1897733dd35dc254a37b3d1146d5fd7eb8b019e9676979", &(0x7f0000000400)="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"}}, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005e9ff000004c1000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="bdcf5722ba942a31e139d8f8d79984f586440ad354177c8882da6be77b8278", 0x1f}], 0x1, &(0x7f0000000680)=[@rthdr_2292={{0x64, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, @remote, @mcast2, @local]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x8c, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x94, 0x29, 0x39, {0x73, 0x10, 0x0, 0xf2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, @remote, @mcast2, @empty, @mcast1, @mcast1]}}}, @tclass={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @hopopts={{0x24, 0x29, 0x36, {0x3c, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x14}}], 0x1ec}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000001400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc88168, 0x1, 0x9, 0x6, 0x4}}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) 5.980165057s ago: executing program 1 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfe1b) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5.919745919s ago: executing program 1 (id=685): ioperm(0x0, 0x9, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/233, 0xe9, 0x0, 0x19}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0xb20, 0xffffffff, 0xec, 0xec, 0xec, 0xffffffff, 0xffffffff, 0xa8c, 0xa8c, 0xa8c, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x888, 0x8ac, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[], 0x4}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x24}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@inet=@set1={{0x24}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xb7c) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) shmdt(0x0) 5.783087414s ago: executing program 1 (id=686): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x18, "000080f10001de16536bdb72000000024000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x1, 0x35b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x10a4, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="38d71afd6f1a5c1ba4e063e4d496b5053d6ef2b28adb1399dc1dc0a0da3d573d5493bc7d51ef8a2e8fbd107095c1035189d4150189c385258bb10a54e4838059c400a41fd2fd51a456da59ba4e4b450d252c2b9b14d98b1f2ad426d02fc19a07e8617b901e4ea347733bb8f5c1ce5bbe9c01ea715663cdfa61fa93756330b173775b111a6a098e865ff54120d40a5b55d6999485a407bf8cd79b9365", 0x9c}, {&(0x7f0000000180)="512ef049b550e2d97ddf63ab349ee5ec731d9ed14a9bdfd1c8be65e621edbe7261054c2d6e5d0ddb41f18f41b53ca843e43f5e973c4776fbd78d7e8d1c91257a", 0x40}, {&(0x7f00000003c0)="eb5efdf5344b4c653f29f365de03b4fe18f7de92be848d8dfb730aaa98aac26ae5963ed6569f937b143d11e5f38ada94d02d2a3f1170c66c17700709f8501f9e70c32a97ecaa8062b5cdbf7e7e8ad0464ad030d6d44784cb4d77b64015a45bb7b1e02b3ede923ee964014b67b3bc08ffc39a85fd0e9a3c0a1b3f144b7ad54a06d29901e61c445d6a514d52426baa548c3f815439645e95f352106a00e8db2e53d998ab6f86360a2160dbeb86cd527b7ea74309", 0xb3}, {&(0x7f0000000480)="3a5ef23502aee2c6192fe40a81c39f87e219d4310d466c1db3182d5d41191be08abffb146cf96ce2d903b1916dfd52ea3dee4118a8e377a6a1ead1d23bf8cb6ba0dc93f002f9e47411", 0x49}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000500)="edf7fdf3deea90784b323355f44d1daacdcd8f7bae56078c908eb5c4616332cfbc98ad370e7059d8e9544bbb44a4269fc46c53caaec718891923716eb982a403e0e92af10101184aa2e79bf06ede1b5c40c5d65ad9104b8ece5c58e08c8cd0a09fca55a2c19dd1c982a5eb0c5197c5469ffebbc81a4958b6bacd031c99a21d2dbd3923a01d28d054cc212eee683d047ae7c66c4db61e9f9bd56fb56a9acb14a8a891d6512831c750", 0xa8}, {&(0x7f0000000280)}, {&(0x7f00000005c0)="7e91dc691bfafa7902ff2cbb1825324afc52c01903486551e4b0e79ddc179cd6bb5570b39a77856035dbc2597b87c6dd9c45f49f18c5edd8cfcd0f5ca26dd2cec35e52fab0e11a", 0x47}], 0x8, &(0x7f0000001dc0)=[{0x80c, 0x10a, 0x7f, "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"}], 0x80c}}], 0x2, 0xfffe) 5.091916887s ago: executing program 0 (id=689): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29"]}]}, 0x118}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x74}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000240)=0x68) 4.709233571s ago: executing program 3 (id=690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x811, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) 4.120016098s ago: executing program 0 (id=691): ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000180)=@req={0x20, &(0x7f0000000140)={'\x00', @ifru_names='syzkaller0\x00'}}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7fffffff, 0x801) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000280)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r4, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0xd, 0x4, 0xfa, 0x3}, {0x7, 0x5, 0x0, 0xc1}, {0x1, 0x3, 0x50, 0x5f1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f00000005c0)={r7, 0x7, 0x6, 0x8}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r9, 0xffffffffffffffff, 0x0, r10}, 0x10) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000640)={[0x8, 0x7]}, 0x8, 0x1800) ioctl$RTC_RD_TIME(r11, 0x80247009, &(0x7f0000000680)) read$FUSE(r10, &(0x7f00000006c0)={0x2020}, 0x2020) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000002700)={0x0, 0x0, 0x7}) socket$can_bcm(0x1d, 0x2, 0x2) setpgid(r8, r8) setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000002740)={0x7}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000002780), r5) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r9) 4.006732372s ago: executing program 2 (id=692): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a310000000008000100fffffffc0800", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.91663214s ago: executing program 2 (id=693): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket(0xa, 0xa, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000040)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000080)=ANY=[], 0xfdef) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x8000000, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0xfd}}, 0xe4) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8913, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7}, 0x18) epoll_create1(0x0) 3.738209058s ago: executing program 3 (id=694): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a310000000008000100ffffff", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.736786093s ago: executing program 3 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000001ac0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0aace480008c03856", 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000440), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x0, 0x80, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.649617593s ago: executing program 1 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x814, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000080)={&(0x7f0000000300)={{@local}, {@host, 0xfffffffd}, 0x400, "a9e982103df53ce6b531b9df69f4a83ca7c6c257ffcec48fdd079a484b999da8d403d2d5ae19962553412682691cb347a8ca3723330043d55bab204ad8910cdf928e51f78c9f8c491e01c0d8e9144bb316d74615369a7a2ddabf419d3e2d65d38103fad0397dadd36dbe6316275a011b5f2870f38d732bfae62c9fdb0041aed9aefade394a2894e979f2fb2cd1316f801727ce4a8cfceb7bb8a9402f66c37d8206f69da312b8c1c5e8e99e2a0b16ba5295795122357d9bb1657833b8ae83ac9256afc32056ee35dba7b44623dfa55250ae9fa1f9a950b930b98a6361f11f0fbd38339dde08ba0f056107fd2dc5bfaa8af65fa3d207f1db778b17d00e0988be71bb3f9e9364b865ea45276dc6c18f32b285f198161939e68f211d940d7f5e225c5e15945f1fd125859f94b08a3e777789fb743af30d11c3c68fae32f3aaf941d7e3b0111f19e1006b1730006b876f66be174f674cfffac793cb0bf7ba79b82cf4be085a4b8d8bd131d54efd9deba758fa848320296b5268c9885bf752a7a5dc6f080e322acf3a9ee33e1895b55a171d8114f15117f84cd13f6069141e9e31332ebd5189fff0a38dd650d179ba03f4754a1fde5f15f7267db4b2dc9a5cf43b6bc13133ec7ee6a6722ff39479a10d2336cb54074b1e00264b3a5f379015bdda214080959d2d1f3d376be2e3a049c86c7235cf1a0440b0c7758d2c08e2a2f00cd408b7fdfb789d77628631f98c4b0ecc1f63b60de931f419e17833d3846aaafa8b59368b6e993a6999f5ea6f75b09e394e2fb1f36c6a7669184f33a93ebda47aa5cfa402e76badd8996a760fb0713fefe693956336604d48dd28c2ff08f9433f390fa7995fa4423be17dc484ea61af21f5d3ba81605a1a511aae387097483689502cfd5658cf430277bc0baedd616f5aed85394031652b120ff98f5f626d4667f7b00f65e8ddb68496ef402041fe33e9e44a050366c0996bd06795926fb7e769c8f64d19ae9892a5faea7216f2c2b6f556cae9a12679f111a1585b936f7ae3bcfde5c633409646950fc42d5b6361462d5a39674fdf2a290ab8ef142312060d46ef792b6dbe17f9728d5e77ca33eeb9ab5e6982091f31f53829c8ff64b13bcfbb5e76137a2e402029f5882c79f66310fd4a3af9d88518e9f39a53804ed066d0adf687634fd27525866f7a5730d6047d4e049b2f48d5ef5d88502482471eb9fafd60a2d234f69b19b232235030c5ca8975f2be003fb079dd28cb029a599169bfd17e53e94fe0802b3fd6ba43e8fad6c0ae124ca1384a66e007c9066b3da2875ab032d1354a604b472b7e27298fcbeadcad250eff76b1e7d77e1861fb38dbbbb75fdea353604ff34c6b9ca6b692305b5e3f634c7a6d431aeafb6f82456a69996793645fd91cccf5b38ff5e070f049c992003e11d6174a38e217d56f2e427901927a5c17"}, 0x418}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) r5 = openat$iommufd(0xffffff9c, &(0x7f0000000100), 0x541000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000002280)={0x48, 0x1, r7, 0x0, 0x7, 0x9}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x2, 0x0, 0x5, 0x1f2359, 0x1621a7}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000180)={0x28, 0x5, r7, r8, 0xcc, 0x0, 0x100000000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 3.648911372s ago: executing program 1 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x814, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000080)={&(0x7f0000000300)={{@local}, {@host, 0xfffffffd}, 0x400, "a9e982103df53ce6b531b9df69f4a83ca7c6c257ffcec48fdd079a484b999da8d403d2d5ae19962553412682691cb347a8ca3723330043d55bab204ad8910cdf928e51f78c9f8c491e01c0d8e9144bb316d74615369a7a2ddabf419d3e2d65d38103fad0397dadd36dbe6316275a011b5f2870f38d732bfae62c9fdb0041aed9aefade394a2894e979f2fb2cd1316f801727ce4a8cfceb7bb8a9402f66c37d8206f69da312b8c1c5e8e99e2a0b16ba5295795122357d9bb1657833b8ae83ac9256afc32056ee35dba7b44623dfa55250ae9fa1f9a950b930b98a6361f11f0fbd38339dde08ba0f056107fd2dc5bfaa8af65fa3d207f1db778b17d00e0988be71bb3f9e9364b865ea45276dc6c18f32b285f198161939e68f211d940d7f5e225c5e15945f1fd125859f94b08a3e777789fb743af30d11c3c68fae32f3aaf941d7e3b0111f19e1006b1730006b876f66be174f674cfffac793cb0bf7ba79b82cf4be085a4b8d8bd131d54efd9deba758fa848320296b5268c9885bf752a7a5dc6f080e322acf3a9ee33e1895b55a171d8114f15117f84cd13f6069141e9e31332ebd5189fff0a38dd650d179ba03f4754a1fde5f15f7267db4b2dc9a5cf43b6bc13133ec7ee6a6722ff39479a10d2336cb54074b1e00264b3a5f379015bdda214080959d2d1f3d376be2e3a049c86c7235cf1a0440b0c7758d2c08e2a2f00cd408b7fdfb789d77628631f98c4b0ecc1f63b60de931f419e17833d3846aaafa8b59368b6e993a6999f5ea6f75b09e394e2fb1f36c6a7669184f33a93ebda47aa5cfa402e76badd8996a760fb0713fefe693956336604d48dd28c2ff08f9433f390fa7995fa4423be17dc484ea61af21f5d3ba81605a1a511aae387097483689502cfd5658cf430277bc0baedd616f5aed85394031652b120ff98f5f626d4667f7b00f65e8ddb68496ef402041fe33e9e44a050366c0996bd06795926fb7e769c8f64d19ae9892a5faea7216f2c2b6f556cae9a12679f111a1585b936f7ae3bcfde5c633409646950fc42d5b6361462d5a39674fdf2a290ab8ef142312060d46ef792b6dbe17f9728d5e77ca33eeb9ab5e6982091f31f53829c8ff64b13bcfbb5e76137a2e402029f5882c79f66310fd4a3af9d88518e9f39a53804ed066d0adf687634fd27525866f7a5730d6047d4e049b2f48d5ef5d88502482471eb9fafd60a2d234f69b19b232235030c5ca8975f2be003fb079dd28cb029a599169bfd17e53e94fe0802b3fd6ba43e8fad6c0ae124ca1384a66e007c9066b3da2875ab032d1354a604b472b7e27298fcbeadcad250eff76b1e7d77e1861fb38dbbbb75fdea353604ff34c6b9ca6b692305b5e3f634c7a6d431aeafb6f82456a69996793645fd91cccf5b38ff5e070f049c992003e11d6174a38e217d56f2e427901927a5c17"}, 0x418}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) r5 = openat$iommufd(0xffffff9c, &(0x7f0000000100), 0x541000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000002280)={0x48, 0x1, r7, 0x0, 0x7, 0x9}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x2, 0x0, 0x5, 0x1f2359, 0x1621a7}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000180)={0x28, 0x5, r7, r8, 0xcc, 0x0, 0x100000000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 3.613693731s ago: executing program 1 (id=698): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045500, &(0x7f00000001c0)=""/62) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fcntl$setown(r5, 0x8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000600)={0xe83, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc04c565d, &(0x7f0000000440)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "934b39eb"}, 0x0, 0x3, {0x0}, 0x4}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003d80)={'sit0\x00', &(0x7f0000003dc0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x10001, {{0x14, 0x4, 0x2, 0x6, 0x50, 0x64, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0x8, "fae3ffffe1a1"}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x731}, {@remote, 0x40}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.530533515s ago: executing program 3 (id=699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 3.528054403s ago: executing program 0 (id=700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004b2000/0x3000)=nil, 0x3000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r4, 0x5392, &(0x7f0000000d40)=@bca={0x3, 0xbc, "dc9abf26244d9bf65d42284949551d402472497c713e87741488cad71323d9b351a1a74c279a03459d4b33060184023dacfc41dbdc7433b43a28c2f2a7b64188f562de72cf586e4f51e40156f12574e140f7055d8dbecce81b5b2cfcb91f81d963afbc147a2fde78bf305a028f3cced79e460f7738d167d59e96325e80cc867e11e12038bfe4502e856ec2022719b35797fd74c4752d6e567a58e356dde4dec6c57dd9b192005733103a2ec9cb9e6e7c0b2f6cc5f647e963353a4f4c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="f842b591c22ef747c0c88d30c6f32a34d223096b8e8d69de1f6bc7be245f7f07240456b798708db3e56b643d80bac6f529abaf2a0bea7ca45e0e24881aef79d6eaf968f99fecd9a88e7199acc37a570b9b88bd145007bc814dfb0996462ce41ac3541d6515e91b0c48324a846ad756eeaebc9cbdff4f809141e615ec7198cdda09044513c45c63e0ea800a6ba6c7010b7880674f019612c34951b6051c187eed23a93aabb6d4e464df021e145a3a260d867388e4f4e5b6baa30a3a80a06d2e3baeb41febd3ff5fbb7e7012ac80dd109cb4185dbce95fc6d1284e65b0c88963e329754543fb15d1c920d224d19525a29e4ef2729601fdaa8dd0b3b8977aa9380866aca59728d10a8e5102b6ed83c24a8c10c7dd258086228197f7c6f9ee9fab685526bc03933b05be1948f2c2b0c5bf3c41bcd4519cb8d6b3695481ff798af33ebe7ac3f0e3bad656f6f247e70463b9e6f642b430acb093e8699347aff8062919c6495b439813038cd97dbff4fb7703b296ea504c2b9a378513038fec743e9d07bd6e801ff2ab6f3abc4baa6c62d18540815f42a6cc0722d93b36093848c08e4bf090f2e31668eeafc0c6ba3e749ade71a07ae8efe99e3366bd0a9d2f3599d35797eff923daff19b148ead4c08c82b6e64b790a5cb9eb887393f538fdcb3aeec2cf9f0466175346a87115ba623968e5e8a38673a0d526c357b99dcf1649c35cbfa34be703be0a656d99bbad0419d6ec0e59053be7e4cc2f8787ee94abb96ab416cd9f0f2f33ac8628710cba872498d0805bd26040f8e8871a7671f658e3a9ecab354d9bcfded5ac75ea5bd5b05f61728a3b6d6e42df878d443fe736061d6f34b228acd4765fa3f853b0f7c40ea2223afb3dcfb5e9d001f223f8a03ce3537b7e27b6eca2e9bcb94d1df1774110a63b34c6b26c998c096e50cd49e1d3c45cdba77039ea59e293a6afb14ad5e3ccb29fcb2ad4aea443ead2e93babca5c016a59b4a2c5bedffed805ab7c99078e08078b88821333acf9735b905a985dd74658595dbfeb908ccfb91ccc73f39d61dec4cc46674236ef05fc2a168ff9271bd67bb7560991de322975ba8ba35ad8b1295170d1e2322b2fdce874c50978d43c4e7147119bc378f00ee74487", 0x327, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) poll(0x0, 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) io_setup(0xcf3, &(0x7f00000006c0)=0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r6, 0x0) listen(r6, 0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x1000, r6, 0x0, 0x0, 0x2}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 3.219511394s ago: executing program 2 (id=701): r0 = fsopen(&(0x7f0000000200)='ceph\x00', 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)) (async) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r5}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'veth1_to_team\x00', 0x1}, 0x18) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = fcntl$dupfd(r6, 0x0, r7) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) (async) ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000000)=0x25bb) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x210820, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (async) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000079113800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r9 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r9, &(0x7f0000000280), 0xff9d) (async) sendfile(r1, r9, &(0x7f0000000100), 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) ioctl$FICLONE(r1, 0x40049409, r10) (async) fcntl$addseals(r9, 0x409, 0x8) (async) pwritev(r9, &(0x7f00000005c0)=[{&(0x7f0000000040)='\v', 0x1}], 0x1, 0x0, 0x0) (async) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180)=0xb, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.150143024s ago: executing program 2 (id=702): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13bb1000006000088ca1a", 0x19, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0xa00100, 0x0) 3.128289862s ago: executing program 0 (id=703): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x800) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x14, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x2) 2.679970672s ago: executing program 3 (id=704): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x1, 0x2404c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fcntl$setown(r5, 0x8, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc04c565d, &(0x7f0000000440)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "934b39eb"}, 0x0, 0x3, {0x0}, 0x4}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003d80)={'sit0\x00', &(0x7f0000003dc0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x10001, {{0x14, 0x4, 0x2, 0x6, 0x50, 0x64, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0x8, "fae3ffffe1a1"}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102, 0x731}, {@remote, 0x40}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 199.154664ms ago: executing program 2 (id=705): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x18, "000080f10001de16536bdb72000000024000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x1, 0x35b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x10a4, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="38d71afd6f1a5c1ba4e063e4d496b5053d6ef2b28adb1399dc1dc0a0da3d573d5493bc7d51ef8a2e8fbd107095c1035189d4150189c385258bb10a54e4838059c400a41fd2fd51a456da59ba4e4b450d252c2b9b14d98b1f2ad426d02fc19a07e8617b901e4ea347733bb8f5c1ce5bbe9c01ea715663cdfa61fa93756330b173775b111a6a098e865ff54120d40a5b55d6999485a407bf8cd79b9365", 0x9c}, {&(0x7f0000000180)="512ef049b550e2d97ddf63ab349ee5ec731d9ed14a9bdfd1c8be65e621edbe7261054c2d6e5d0ddb41f18f41b53ca843e43f5e973c4776fbd78d7e8d1c91257a", 0x40}, {&(0x7f00000003c0)="eb5efdf5344b4c653f29f365de03b4fe18f7de92be848d8dfb730aaa98aac26ae5963ed6569f937b143d11e5f38ada94d02d2a3f1170c66c17700709f8501f9e70c32a97ecaa8062b5cdbf7e7e8ad0464ad030d6d44784cb4d77b64015a45bb7b1e02b3ede923ee964014b67b3bc08ffc39a85fd0e9a3c0a1b3f144b7ad54a06d29901e61c445d6a514d52426baa548c3f815439645e95f352106a00e8db2e53d998ab6f86360a2160dbeb86cd527b7ea74309", 0xb3}, {&(0x7f0000000480)="3a5ef23502aee2c6192fe40a81c39f87e219d4310d466c1db3182d5d41191be08abffb146cf96ce2d903b1916dfd52ea3dee4118a8e377a6a1ead1d23bf8cb6ba0dc93f002f9e47411", 0x49}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000500)="edf7fdf3deea90784b323355f44d1daacdcd8f7bae56078c908eb5c4616332cfbc98ad370e7059d8e9544bbb44a4269fc46c53caaec718891923716eb982a403e0e92af10101184aa2e79bf06ede1b5c40c5d65ad9104b8ece5c58e08c8cd0a09fca55a2c19dd1c982a5eb0c5197c5469ffebbc81a4958b6bacd031c99a21d2dbd3923a01d28d054cc212eee683d047ae7c66c4db61e9f9bd56fb56a9acb14a8a891d6512831c750", 0xa8}, {&(0x7f0000000280)}, {&(0x7f00000005c0)="7e91dc691bfafa7902ff2cbb1825324afc52c01903486551e4b0e79ddc179cd6bb5570b39a77856035dbc2597b87c6dd9c45f49f18c5edd8cfcd0f5ca26dd2cec35e52fab0e11a", 0x47}], 0x8, &(0x7f0000001dc0)=[{0x80c, 0x10a, 0x7f, "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"}], 0x80c}}], 0x2, 0xfffe) 126.014659ms ago: executing program 0 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x814, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000080)={&(0x7f0000000300)={{@local}, {@host, 0xfffffffd}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, &(0x7f0000000180)) r5 = openat$iommufd(0xffffff9c, 0x0, 0x541000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000002280)={0x48, 0x1, r7, 0x0, 0x7, 0x9}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x2, 0x0, 0x5, 0x1f2359, 0x1621a7}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000180)={0x28, 0x5, r7, r8, 0xcc, 0x0, 0x100000000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 0s ago: executing program 0 (id=707): socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xaea2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$FUSE_LK(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00', {0x3}, 0xa470}) kernel console output (not intermixed with test programs): 135.077875][ T6959] device_add+0xf33/0x1a70 [ 135.079495][ T6959] ? __pfx_device_add+0x10/0x10 [ 135.081270][ T6959] ? __init_waitqueue_head+0xca/0x150 [ 135.083232][ T6959] netdev_register_kobject+0x187/0x3f0 [ 135.085270][ T6959] register_netdevice+0x1473/0x1e20 [ 135.087219][ T6959] ? __pfx_register_netdevice+0x10/0x10 [ 135.089296][ T6959] ? dev_addr_mod+0x2c9/0x390 [ 135.091053][ T6959] __tun_chr_ioctl+0x25b0/0x4960 [ 135.092886][ T6959] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 135.094800][ T6959] ? __fget_files+0x244/0x3f0 [ 135.096509][ T6959] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 135.098555][ T6959] __do_compat_sys_ioctl+0x259/0x2b0 [ 135.100480][ T6959] __do_fast_syscall_32+0x73/0x120 [ 135.102335][ T6959] do_fast_syscall_32+0x32/0x80 [ 135.104153][ T6959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.106495][ T6959] RIP: 0023:0xf73fe579 [ 135.108046][ T6959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.114993][ T6959] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 135.117954][ T6959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400454ca [ 135.120760][ T6959] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.123591][ T6959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.126476][ T6959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.129377][ T6959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.132293][ T6959] [ 135.402167][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 135.636786][ T5396] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.796846][ T5396] usb 5-1: Using ep0 maxpacket: 32 [ 135.801369][ T5396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.804394][ T5396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.808384][ T5396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.812540][ T5396] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 135.815749][ T5396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.819543][ T5396] usb 5-1: config 0 descriptor?? [ 136.274763][ T5396] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input20 [ 136.340306][ T5396] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input21 [ 136.346688][ T5396] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 136.354304][ T6998] lo speed is unknown, defaulting to 1000 [ 136.356599][ T6998] lo speed is unknown, defaulting to 1000 [ 136.524689][ T7009] overlayfs: cannot append lower layer [ 136.807593][ T7017] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 136.861649][ T7017] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 137.027680][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.048527][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.090092][ T7022] veth1_macvtap: left promiscuous mode [ 137.092023][ T7022] macsec0: entered promiscuous mode [ 137.094357][ T7022] macsec0: entered allmulticast mode [ 137.110094][ T7022] veth1_macvtap: entered promiscuous mode [ 137.112292][ T7022] veth1_macvtap: entered allmulticast mode [ 137.115559][ T7022] macsec0: left promiscuous mode [ 137.120003][ T7022] macsec0: left allmulticast mode [ 137.123114][ T7022] veth1_macvtap: left allmulticast mode [ 137.333386][ C1] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 137.526820][ T30] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 137.596387][ T7030] loop7: detected capacity change from 0 to 16384 [ 137.602198][ T7030] loop6: detected capacity change from 0 to 524287999 [ 137.616085][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.619635][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.623259][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.626620][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.630033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.632478][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.634635][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.638049][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.641136][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.644519][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.653859][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.657312][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.661098][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.664457][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.677056][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.680465][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.683392][ T7030] ldm_validate_partition_table(): Disk read failed. [ 137.686092][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.689468][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.692745][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.695119][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.704026][ T7030] Dev loop6: unable to read RDB block 0 [ 137.713296][ T7030] loop6: unable to read partition table [ 137.715519][ T7030] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 137.767428][ T7032] Invalid logical block size (1) [ 138.152739][ T7036] FAULT_INJECTION: forcing a failure. [ 138.152739][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 138.157747][ T7036] CPU: 3 UID: 0 PID: 7036 Comm: syz.1.432 Not tainted 6.12.0-rc1-syzkaller #0 [ 138.160208][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.163812][ T7036] Call Trace: [ 138.164942][ T7036] [ 138.165948][ T7036] dump_stack_lvl+0x16c/0x1f0 [ 138.167558][ T7036] should_fail_ex+0x497/0x5b0 [ 138.169163][ T7036] ? fs_reclaim_acquire+0xae/0x160 [ 138.170465][ T7036] should_failslab+0xc2/0x120 [ 138.171657][ T7036] __kmalloc_cache_noprof+0x6b/0x310 [ 138.173057][ T7036] ? snd_pcm_oss_change_params_locked+0x1d6/0x3a50 [ 138.175062][ T7036] snd_pcm_oss_change_params_locked+0x1d6/0x3a50 [ 138.177190][ T7036] ? trace_contention_end+0xea/0x140 [ 138.178977][ T7036] ? __mutex_lock+0x1a6/0x9c0 [ 138.180383][ T7036] ? __pfx___lock_acquire+0x10/0x10 [ 138.181746][ T7036] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 138.183483][ T7036] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 138.184919][ T7036] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 138.186801][ T7036] ? __pfx___mutex_lock+0x10/0x10 [ 138.188527][ T7036] ? snd_pcm_stream_unlock_irq+0x90/0xb0 [ 138.190418][ T7036] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 138.192206][ T7036] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 138.194239][ T7036] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.196003][ T7036] snd_pcm_oss_poll+0x96b/0xb30 [ 138.197639][ T7036] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 138.199434][ T7036] ? __fget_files+0x244/0x3f0 [ 138.201121][ T7036] do_select+0xc9a/0x17b0 [ 138.202581][ T7036] ? page_ext_put+0x48/0xd0 [ 138.204136][ T7036] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 138.205908][ T7036] ? __pfx_do_select+0x10/0x10 [ 138.207522][ T7036] ? mark_lock+0xb5/0xc60 [ 138.208987][ T7036] ? mark_lock+0xb5/0xc60 [ 138.210447][ T7036] ? hlock_class+0x4e/0x130 [ 138.211992][ T7036] ? __pfx___pollwait+0x10/0x10 [ 138.213631][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.215214][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.216818][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.218405][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.220001][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.221588][ T7036] ? __pfx_pollwake+0x10/0x10 [ 138.223182][ T7036] ? compat_core_sys_select+0x1de/0x880 [ 138.225045][ T7036] ? __pfx_lock_release+0x10/0x10 [ 138.226735][ T7036] ? trace_lock_acquire+0x14a/0x1d0 [ 138.228517][ T7036] ? compat_core_sys_select+0x687/0x880 [ 138.230361][ T7036] compat_core_sys_select+0x687/0x880 [ 138.232177][ T7036] ? __pfx_compat_core_sys_select+0x10/0x10 [ 138.234148][ T7036] ? get_pid_task+0xfc/0x250 [ 138.235745][ T7036] ? set_compat_user_sigmask+0x20f/0x2a0 [ 138.237632][ T7036] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 138.239366][ T7036] do_compat_pselect+0x202/0x240 [ 138.240678][ T7036] ? __pfx_do_compat_pselect+0x10/0x10 [ 138.242517][ T7036] __ia32_compat_sys_pselect6_time32+0x17c/0x240 [ 138.244640][ T7036] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 138.246390][ T7036] __do_fast_syscall_32+0x73/0x120 [ 138.247752][ T7036] do_fast_syscall_32+0x32/0x80 [ 138.248979][ T7036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.250609][ T7036] RIP: 0023:0xf7f93579 [ 138.251671][ T7036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.256601][ T7036] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000134 [ 138.258744][ T7036] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000200001c0 [ 138.260768][ T7036] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000000 [ 138.262793][ T7036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.264828][ T7036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.266870][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.269078][ T7036] [ 138.340960][ T5397] usb 5-1: USB disconnect, device number 3 [ 138.708961][ T7051] input: syz0 as /devices/virtual/input/input22 [ 139.098821][ T7056] input: syz0 as /devices/virtual/input/input23 [ 139.107199][ T7056] FAULT_INJECTION: forcing a failure. [ 139.107199][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.110726][ T7056] CPU: 3 UID: 0 PID: 7056 Comm: syz.1.437 Not tainted 6.12.0-rc1-syzkaller #0 [ 139.113015][ T7056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.115775][ T7056] Call Trace: [ 139.116677][ T7056] [ 139.117476][ T7056] dump_stack_lvl+0x16c/0x1f0 [ 139.118717][ T7056] should_fail_ex+0x497/0x5b0 [ 139.120374][ T7056] _copy_from_user+0x30/0xf0 [ 139.122059][ T7056] input_event_from_user+0x22d/0x3b0 [ 139.123877][ T7056] ? __pfx_input_event_from_user+0x10/0x10 [ 139.125903][ T7056] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.128070][ T7056] ? input_event+0x8e/0xa0 [ 139.129730][ T7056] uinput_write+0xbb6/0x12b0 [ 139.131407][ T7056] ? __pfx_uinput_write+0x10/0x10 [ 139.133273][ T7056] ? bpf_lsm_file_permission+0x9/0x10 [ 139.135246][ T7056] ? security_file_permission+0x71/0x210 [ 139.137297][ T7056] ? __pfx_uinput_write+0x10/0x10 [ 139.139056][ T7056] vfs_write+0x28e/0x1140 [ 139.140659][ T7056] ? __fget_files+0x23a/0x3f0 [ 139.142398][ T7056] ? __pfx_lock_release+0x10/0x10 [ 139.144294][ T7056] ? trace_lock_acquire+0x14a/0x1d0 [ 139.146209][ T7056] ? __pfx_vfs_write+0x10/0x10 [ 139.147984][ T7056] ? lock_acquire+0x2f/0xb0 [ 139.149676][ T7056] ? __fget_files+0x40/0x3f0 [ 139.151392][ T7056] ? __fget_files+0x244/0x3f0 [ 139.153159][ T7056] ksys_write+0x1fa/0x260 [ 139.154763][ T7056] ? __pfx_ksys_write+0x10/0x10 [ 139.156590][ T7056] __do_fast_syscall_32+0x73/0x120 [ 139.158488][ T7056] do_fast_syscall_32+0x32/0x80 [ 139.160291][ T7056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.162599][ T7056] RIP: 0023:0xf7f93579 [ 139.164115][ T7056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.170868][ T7056] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 139.173921][ T7056] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200005c0 [ 139.176814][ T7056] RDX: 00000000200005d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.179701][ T7056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.182355][ T7056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.184701][ T7056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.187065][ T7056] [ 139.401743][ T7060] serio: Serial port ptm2 [ 139.619577][ T7068] fuse: Unknown parameter 'grupž?eQ [ 139.619577][ T7068] Á{[' [ 139.641589][ T7068] lo speed is unknown, defaulting to 1000 [ 139.643595][ T7068] lo speed is unknown, defaulting to 1000 [ 139.720979][ T7071] syzkaller1: entered promiscuous mode [ 139.723058][ T7071] syzkaller1: entered allmulticast mode [ 139.725118][ T7071] FAULT_INJECTION: forcing a failure. [ 139.725118][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 139.737501][ T7071] CPU: 2 UID: 0 PID: 7071 Comm: syz.0.445 Not tainted 6.12.0-rc1-syzkaller #0 [ 139.740805][ T7071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.744672][ T7071] Call Trace: [ 139.745879][ T7071] [ 139.746953][ T7071] dump_stack_lvl+0x16c/0x1f0 [ 139.748688][ T7071] should_fail_ex+0x497/0x5b0 [ 139.750388][ T7071] should_failslab+0xc2/0x120 [ 139.752098][ T7071] kmem_cache_alloc_node_noprof+0x71/0x310 [ 139.754196][ T7071] ? __alloc_skb+0x2b3/0x380 [ 139.755888][ T7071] __alloc_skb+0x2b3/0x380 [ 139.757512][ T7071] ? __pfx___alloc_skb+0x10/0x10 [ 139.759306][ T7071] ? if_nlmsg_size+0x451/0xa60 [ 139.761051][ T7071] rtmsg_ifinfo_build_skb+0x81/0x280 [ 139.762968][ T7071] rtmsg_ifinfo+0x9f/0x1a0 [ 139.764661][ T7071] __dev_notify_flags+0x24e/0x2e0 [ 139.766532][ T7071] ? __pfx___dev_notify_flags+0x10/0x10 [ 139.768631][ T7071] ? __pfx___dev_change_flags+0x10/0x10 [ 139.770657][ T7071] ? apparmor_capable+0x114/0x1d0 [ 139.772522][ T7071] dev_change_flags+0x10c/0x160 [ 139.774300][ T7071] devinet_ioctl+0x113b/0x1e10 [ 139.776045][ T7071] ? __pfx_devinet_ioctl+0x10/0x10 [ 139.777895][ T7071] ? _copy_from_user+0x5d/0xf0 [ 139.779632][ T7071] inet_ioctl+0x3aa/0x3f0 [ 139.781207][ T7071] ? __pfx_inet_ioctl+0x10/0x10 [ 139.782941][ T7071] ? find_held_lock+0x2d/0x110 [ 139.784633][ T7071] ? tomoyo_path_number_perm+0x292/0x5b0 [ 139.786721][ T7071] ? __pfx_lock_release+0x10/0x10 [ 139.788643][ T7071] ? ipmr_compat_ioctl+0x3a6/0xa00 [ 139.790549][ T7071] ? __pfx_ipmr_compat_ioctl+0x10/0x10 [ 139.792565][ T7071] sock_do_ioctl+0x116/0x280 [ 139.794275][ T7071] ? __pfx_sock_do_ioctl+0x10/0x10 [ 139.796200][ T7071] ? __pfx_compat_raw_ioctl+0x10/0x10 [ 139.798196][ T7071] ? compat_raw_ioctl+0x4b/0x60 [ 139.800020][ T7071] compat_sock_ioctl+0x318/0x7e0 [ 139.801880][ T7071] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 139.803888][ T7071] ? __fget_files+0x244/0x3f0 [ 139.805602][ T7071] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 139.807588][ T7071] __do_compat_sys_ioctl+0x259/0x2b0 [ 139.809515][ T7071] __do_fast_syscall_32+0x73/0x120 [ 139.811356][ T7071] do_fast_syscall_32+0x32/0x80 [ 139.813121][ T7071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.815346][ T7071] RIP: 0023:0xf73fe579 [ 139.816829][ T7071] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.823660][ T7071] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 139.826741][ T7071] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008914 [ 139.829620][ T7071] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.832513][ T7071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.835334][ T7071] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.838150][ T7071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.840984][ T7071] [ 139.842235][ C2] vkms_vblank_simulate: vblank timer overrun [ 140.045751][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 141.610003][ T7095] fuse: Invalid rootmode [ 141.840137][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 142.480180][ T7112] overlayfs: missing 'lowerdir' [ 143.409271][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 143.649656][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 143.684248][ T7134] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.705160][ T7134] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.077542][ T7143] dummy0: entered promiscuous mode [ 144.084028][ T7143] dummy0: left promiscuous mode [ 144.724622][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'. [ 144.758521][ T7153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.777283][ T7153] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.810932][ T7153] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.818148][ T7153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.821601][ T7153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.847237][ T7163] ipt_REJECT: ECHOREPLY no longer supported. [ 145.060026][ T7153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.075263][ T7153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.082545][ T7153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.088589][ T7153] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.111854][ T7153] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.123250][ T7153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.129170][ T7153] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.135856][ T7153] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.568718][ T7178] all: renamed from lo (while UP) [ 145.626157][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 145.756334][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 145.819243][ T7184] Mount JFS Failure: -22 [ 145.823925][ T7186] syz.1.481: attempt to access beyond end of device [ 145.823925][ T7186] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 145.829499][ T7186] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 146.103743][ T7196] FAULT_INJECTION: forcing a failure. [ 146.103743][ T7196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.108153][ T7196] CPU: 0 UID: 0 PID: 7196 Comm: syz.3.484 Not tainted 6.12.0-rc1-syzkaller #0 [ 146.110965][ T7196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.114173][ T7196] Call Trace: [ 146.115461][ T7196] [ 146.116953][ T7196] dump_stack_lvl+0x16c/0x1f0 [ 146.118827][ T7196] should_fail_ex+0x497/0x5b0 [ 146.121223][ T7196] _copy_to_user+0x30/0xc0 [ 146.123165][ T7196] simple_read_from_buffer+0xd0/0x160 [ 146.125587][ T7196] proc_fail_nth_read+0x198/0x270 [ 146.127781][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.129851][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.131954][ T7196] vfs_read+0x1ce/0xbd0 [ 146.133511][ T7196] ? __fget_files+0x23a/0x3f0 [ 146.135268][ T7196] ? fdget_pos+0x24c/0x360 [ 146.136847][ T7196] ? __pfx_lock_release+0x10/0x10 [ 146.138676][ T7196] ? trace_lock_acquire+0x14a/0x1d0 [ 146.140618][ T7196] ? __pfx_vfs_read+0x10/0x10 [ 146.142381][ T7196] ? __pfx___mutex_lock+0x10/0x10 [ 146.144278][ T7196] ? __fget_files+0x244/0x3f0 [ 146.146035][ T7196] ksys_read+0x12f/0x260 [ 146.147638][ T7196] ? __pfx_ksys_read+0x10/0x10 [ 146.149401][ T7196] __do_fast_syscall_32+0x73/0x120 [ 146.151314][ T7196] do_fast_syscall_32+0x32/0x80 [ 146.153114][ T7196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.153794][ T7200] syzkaller0: entered promiscuous mode [ 146.155391][ T7196] RIP: 0023:0xf7fb1579 [ 146.155428][ T7196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.157401][ T7200] syzkaller0: entered allmulticast mode [ 146.158817][ T7196] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 146.169225][ T7196] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5736620 [ 146.171277][ T7196] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 146.173586][ T7196] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 146.176287][ T7196] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 146.179051][ T7196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.181309][ T7196] [ 146.735074][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.816890][ T5352] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.896913][ T5352] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.923285][ T7213] input: syz0 as /devices/virtual/input/input24 [ 147.136999][ T5352] Bluetooth: hci2: command 0x0405 tx timeout [ 147.139805][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.453170][ T7218] input: syz0 as /devices/virtual/input/input25 [ 148.896838][ T5352] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.986878][ T5352] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.216990][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.217004][ T5367] Bluetooth: hci2: command 0x0405 tx timeout [ 150.976836][ T5367] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.056858][ T5367] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.296822][ T5367] Bluetooth: hci2: command 0x0405 tx timeout [ 151.306827][ T5367] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.753634][ T7258] FAULT_INJECTION: forcing a failure. [ 151.753634][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 151.759126][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.502 Not tainted 6.12.0-rc1-syzkaller #0 [ 151.761396][ T7258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.764079][ T7258] Call Trace: [ 151.765041][ T7258] [ 151.765864][ T7258] dump_stack_lvl+0x16c/0x1f0 [ 151.767070][ T7258] should_fail_ex+0x497/0x5b0 [ 151.768481][ T7258] ? fs_reclaim_acquire+0xae/0x160 [ 151.770218][ T7258] should_failslab+0xc2/0x120 [ 151.771808][ T7258] kmem_cache_alloc_node_noprof+0x71/0x310 [ 151.773794][ T7258] ? alloc_vmap_area+0x636/0x2a70 [ 151.775493][ T7258] alloc_vmap_area+0x636/0x2a70 [ 151.777138][ T7258] ? __pfx_alloc_vmap_area+0x10/0x10 [ 151.778902][ T7258] __get_vm_area_node+0x17e/0x2d0 [ 151.780622][ T7258] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 151.782580][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.784450][ T7258] ? hlock_class+0x4e/0x130 [ 151.785997][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.787884][ T7258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.790015][ T7258] ? __pfx___lock_acquire+0x10/0x10 [ 151.791814][ T7258] ? __pfx_aa_get_newest_label+0x10/0x10 [ 151.793697][ T7258] ? __pfx___lock_acquire+0x10/0x10 [ 151.795431][ T7258] ? __pfx_mark_lock+0x10/0x10 [ 151.796983][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.798730][ T7258] __vmalloc_noprof+0x6d/0x90 [ 151.800291][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.802097][ T7258] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.803833][ T7258] ? security_capable+0x7e/0x260 [ 151.805440][ T7258] bpf_prog_alloc+0x3b/0x230 [ 151.806956][ T7258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.809088][ T7258] bpf_prog_load+0x1758/0x2670 [ 151.810688][ T7258] ? __pfx_bpf_prog_load+0x10/0x10 [ 151.812398][ T7258] ? find_held_lock+0x2d/0x110 [ 151.814030][ T7258] __sys_bpf+0x4c8c/0x5780 [ 151.815653][ T7258] ? ksys_write+0x21e/0x260 [ 151.817196][ T7258] ? __pfx___sys_bpf+0x10/0x10 [ 151.818805][ T7258] ? vfs_write+0x14d/0x1140 [ 151.820357][ T7258] ? __mutex_unlock_slowpath+0x164/0x650 [ 151.822289][ T7258] ? fput+0x30/0x390 [ 151.823679][ T7258] ? ksys_write+0x1ad/0x260 [ 151.825201][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 151.826978][ T7258] __ia32_sys_bpf+0x76/0xe0 [ 151.828598][ T7258] __do_fast_syscall_32+0x73/0x120 [ 151.830385][ T7258] do_fast_syscall_32+0x32/0x80 [ 151.832154][ T7258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.834357][ T7258] RIP: 0023:0xf7f93579 [ 151.835786][ T7258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.842533][ T7258] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 151.845448][ T7258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 151.848110][ T7258] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.850779][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.853534][ T7258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.856298][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.858989][ T7258] [ 151.860222][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.879743][ T7258] syz.1.502: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.888910][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.502 Not tainted 6.12.0-rc1-syzkaller #0 [ 151.891219][ T7258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.894806][ T7258] Call Trace: [ 151.895999][ T7258] [ 151.897094][ T7258] dump_stack_lvl+0x16c/0x1f0 [ 151.898834][ T7258] warn_alloc+0x24d/0x3a0 [ 151.900325][ T7258] ? __pfx_warn_alloc+0x10/0x10 [ 151.902030][ T7258] ? kfree+0x14f/0x4b0 [ 151.903398][ T7258] ? __get_vm_area_node+0x1bc/0x2d0 [ 151.904777][ T7258] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 151.906714][ T7258] ? hlock_class+0x4e/0x130 [ 151.908299][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.910251][ T7258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.912441][ T7258] ? __pfx___lock_acquire+0x10/0x10 [ 151.914015][ T7258] ? __pfx_aa_get_newest_label+0x10/0x10 [ 151.915601][ T7258] ? __pfx___lock_acquire+0x10/0x10 [ 151.917256][ T7258] ? __pfx_mark_lock+0x10/0x10 [ 151.918698][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.920343][ T7258] __vmalloc_noprof+0x6d/0x90 [ 151.921878][ T7258] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.923302][ T7258] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.925068][ T7258] ? security_capable+0x7e/0x260 [ 151.926826][ T7258] bpf_prog_alloc+0x3b/0x230 [ 151.928322][ T7258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.930272][ T7258] bpf_prog_load+0x1758/0x2670 [ 151.931591][ T7258] ? __pfx_bpf_prog_load+0x10/0x10 [ 151.933440][ T7258] ? find_held_lock+0x2d/0x110 [ 151.934917][ T7258] __sys_bpf+0x4c8c/0x5780 [ 151.936104][ T7258] ? ksys_write+0x21e/0x260 [ 151.937664][ T7258] ? __pfx___sys_bpf+0x10/0x10 [ 151.939300][ T7258] ? vfs_write+0x14d/0x1140 [ 151.940843][ T7258] ? __mutex_unlock_slowpath+0x164/0x650 [ 151.942353][ T7258] ? fput+0x30/0x390 [ 151.943354][ T7258] ? ksys_write+0x1ad/0x260 [ 151.944696][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 151.946448][ T7258] __ia32_sys_bpf+0x76/0xe0 [ 151.948130][ T7258] __do_fast_syscall_32+0x73/0x120 [ 151.949964][ T7258] do_fast_syscall_32+0x32/0x80 [ 151.951708][ T7258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.953896][ T7258] RIP: 0023:0xf7f93579 [ 151.955322][ T7258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.960941][ T7258] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 151.963148][ T7258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 151.965781][ T7258] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.968656][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.971528][ T7258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.974267][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.976729][ T7258] [ 151.977651][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.981463][ T7258] Mem-Info: [ 151.982383][ T7258] active_anon:3928 inactive_anon:4 isolated_anon:0 [ 151.982383][ T7258] active_file:13369 inactive_file:980 isolated_file:0 [ 151.982383][ T7258] unevictable:768 dirty:954 writeback:0 [ 151.982383][ T7258] slab_reclaimable:4637 slab_unreclaimable:54109 [ 151.982383][ T7258] mapped:17560 shmem:2792 pagetables:604 [ 151.982383][ T7258] sec_pagetables:318 bounce:0 [ 151.982383][ T7258] kernel_misc_reclaimable:0 [ 151.982383][ T7258] free:118166 free_pcp:1334 free_cma:0 [ 151.996869][ T7258] Node 0 active_anon:8kB inactive_anon:0kB active_file:20kB inactive_file:532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:3372kB dirty:544kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9872kB pagetables:1492kB sec_pagetables:1220kB all_unreclaimable? no [ 152.008848][ T7258] Node 1 active_anon:15704kB inactive_anon:16kB active_file:53396kB inactive_file:3448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:66868kB dirty:3272kB writeback:0kB shmem:9632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1352kB pagetables:924kB sec_pagetables:52kB all_unreclaimable? no [ 152.020083][ T7258] Node 0 DMA free:904kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:12kB free_cma:0kB [ 152.029242][ T7258] lowmem_reserve[]: 0 273 0 0 0 [ 152.086965][ T7258] Node 0 DMA32 free:22068kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:552kB unevictable:1536kB writepending:544kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:88kB free_cma:0kB [ 152.104747][ T7258] lowmem_reserve[]: 0 0 0 0 0 [ 152.106200][ T7258] Node 1 DMA32 free:449964kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:15580kB inactive_anon:16kB active_file:53396kB inactive_file:3448kB unevictable:1536kB writepending:3272kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8644kB local_pcp:976kB free_cma:0kB [ 152.114181][ T7258] lowmem_reserve[]: 0 0 0 0 0 [ 152.115621][ T7258] Node 0 DMA: 5*4kB (U) 11*8kB (U) 29*16kB (U) 13*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 988kB [ 152.134888][ T7258] Node 0 DMA32: 1087*4kB (UMH) 304*8kB (UMEH) 27*16kB (UMEH) 33*32kB (UMEH) 32*64kB (UMEH) 23*128kB (UMEH) 7*256kB (MEH) 10*512kB (UM) 2*1024kB (ME) 0*2048kB 0*4096kB = 22220kB [ 152.156891][ T7258] Node 1 DMA32: 9*4kB (UME) 5*8kB (UME) 466*16kB (ME) 293*32kB (UME) 254*64kB (UME) 28*128kB (UME) 16*256kB (UME) 25*512kB (UME) 37*1024kB (UME) 5*2048kB (M) 85*4096kB (UM) = 449932kB [ 152.161946][ T7258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.175667][ T7258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.205413][ T7258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.226826][ T7258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.234197][ T7258] 17632 total pagecache pages [ 152.237487][ T7258] 487 pages in swap cache [ 152.239922][ T7258] Free swap = 112824kB [ 152.241600][ T7258] Total swap = 124996kB [ 152.242892][ T7258] 524155 pages RAM [ 152.243979][ T7258] 0 pages HighMem/MovableOnly [ 152.245298][ T7258] 206681 pages reserved [ 152.246498][ T7258] 0 pages cma reserved [ 152.479271][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 152.479286][ T39] audit: type=1326 audit(1727718178.393:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x0 [ 152.563827][ T39] audit: type=1326 audit(1727718178.473:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.599263][ T39] audit: type=1326 audit(1727718178.473:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.611682][ T39] audit: type=1326 audit(1727718178.473:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.627972][ T39] audit: type=1326 audit(1727718178.473:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.649363][ T39] audit: type=1326 audit(1727718178.473:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.663682][ T39] audit: type=1326 audit(1727718178.493:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.673762][ T39] audit: type=1326 audit(1727718178.493:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 152.685901][ T39] audit: type=1326 audit(1727718178.493:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.1.504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 153.056936][ T39] audit: type=1326 audit(1727718178.963:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.2.505" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 153.136979][ T5367] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.486542][ T7279] fuse: Unknown parameter 'roNtmode' [ 154.689078][ T1423] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 154.710465][ T7308] FAULT_INJECTION: forcing a failure. [ 154.710465][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.715369][ T7308] CPU: 2 UID: 0 PID: 7308 Comm: syz.3.517 Not tainted 6.12.0-rc1-syzkaller #0 [ 154.718596][ T7308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.722598][ T7308] Call Trace: [ 154.723883][ T7308] [ 154.725009][ T7308] dump_stack_lvl+0x16c/0x1f0 [ 154.726787][ T7308] should_fail_ex+0x497/0x5b0 [ 154.728582][ T7308] _copy_from_user+0x30/0xf0 [ 154.730310][ T7308] input_event_from_user+0x22d/0x3b0 [ 154.732293][ T7308] ? __pfx_input_event_from_user+0x10/0x10 [ 154.734460][ T7308] ? input_inject_event+0x193/0x370 [ 154.736410][ T7308] evdev_write+0x377/0x750 [ 154.738097][ T7308] ? __pfx_evdev_write+0x10/0x10 [ 154.739973][ T7308] ? bpf_lsm_file_permission+0x9/0x10 [ 154.741983][ T7308] ? security_file_permission+0x71/0x210 [ 154.744081][ T7308] ? __pfx_evdev_write+0x10/0x10 [ 154.745939][ T7308] vfs_write+0x28e/0x1140 [ 154.747585][ T7308] ? __fget_files+0x23a/0x3f0 [ 154.749362][ T7308] ? __pfx_lock_release+0x10/0x10 [ 154.751253][ T7308] ? trace_lock_acquire+0x14a/0x1d0 [ 154.753206][ T7308] ? __pfx_vfs_write+0x10/0x10 [ 154.755007][ T7308] ? lock_acquire+0x2f/0xb0 [ 154.756748][ T7308] ? __fget_files+0x40/0x3f0 [ 154.758479][ T7308] ? __fget_files+0x244/0x3f0 [ 154.760258][ T7308] ksys_write+0x1fa/0x260 [ 154.761876][ T7308] ? __pfx_ksys_write+0x10/0x10 [ 154.763722][ T7308] __do_fast_syscall_32+0x73/0x120 [ 154.765626][ T7308] do_fast_syscall_32+0x32/0x80 [ 154.767463][ T7308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.769809][ T7308] RIP: 0023:0xf7fb1579 [ 154.771330][ T7308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.778367][ T7308] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 154.781422][ T7308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 154.784333][ T7308] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.787748][ T7308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.790652][ T7308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.793076][ T7308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.795714][ T7308] [ 154.856947][ T1423] usb 7-1: device descriptor read/64, error -71 [ 155.083391][ T7321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.127603][ T1423] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 155.160058][ T7328] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 155.163096][ T7328] netlink: 'syz.1.524': attribute type 2 has an invalid length. [ 155.206553][ T7330] FAULT_INJECTION: forcing a failure. [ 155.206553][ T7330] name failslab, interval 1, probability 0, space 0, times 0 [ 155.216178][ T7330] CPU: 3 UID: 0 PID: 7330 Comm: syz.1.525 Not tainted 6.12.0-rc1-syzkaller #0 [ 155.219367][ T7330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.223231][ T7330] Call Trace: [ 155.224448][ T7330] [ 155.225542][ T7330] dump_stack_lvl+0x16c/0x1f0 [ 155.227286][ T7330] should_fail_ex+0x497/0x5b0 [ 155.229139][ T7330] ? fs_reclaim_acquire+0xae/0x160 [ 155.231032][ T7330] should_failslab+0xc2/0x120 [ 155.232806][ T7330] __kmalloc_noprof+0xcb/0x410 [ 155.234565][ T7330] ? down_write_nested+0x152/0x210 [ 155.236434][ T7330] lsm_blob_alloc+0x68/0x90 [ 155.238092][ T7330] security_sb_alloc+0x28/0x230 [ 155.239905][ T7330] alloc_super+0x245/0xbd0 [ 155.241561][ T7330] ? lock_acquire+0x2f/0xb0 [ 155.243258][ T7330] ? __pfx_super_s_dev_test+0x10/0x10 [ 155.245189][ T7330] sget_fc+0x116/0xb90 [ 155.246658][ T7330] ? __pfx_super_s_dev_set+0x10/0x10 [ 155.248223][ T7330] get_tree_bdev+0x155/0x610 [ 155.249525][ T7330] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 155.250928][ T7330] ? __pfx_get_tree_bdev+0x10/0x10 [ 155.252284][ T7330] ? apparmor_capable+0x114/0x1d0 [ 155.253614][ T7330] erofs_fc_get_tree+0x48/0x1a0 [ 155.255170][ T7330] vfs_get_tree+0x8f/0x380 [ 155.256844][ T7330] path_mount+0x6e1/0x1f10 [ 155.258519][ T7330] ? kmem_cache_free+0x152/0x4b0 [ 155.260382][ T7330] ? __pfx_path_mount+0x10/0x10 [ 155.262210][ T7330] ? putname+0x12e/0x170 [ 155.263818][ T7330] __ia32_sys_mount+0x292/0x310 [ 155.265309][ T7330] ? __pfx___ia32_sys_mount+0x10/0x10 [ 155.267133][ T7330] __do_fast_syscall_32+0x73/0x120 [ 155.268935][ T7330] do_fast_syscall_32+0x32/0x80 [ 155.270230][ T7330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.271919][ T7330] RIP: 0023:0xf7f93579 [ 155.273004][ T7330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.279510][ T7330] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 155.282600][ T7330] RAX: ffffffffffffffda RBX: 0000000020000580 RCX: 0000000020000400 [ 155.285287][ T7330] RDX: 00000000200003c0 RSI: 0000000002000040 RDI: 0000000000000000 [ 155.287370][ T7330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.289444][ T7330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.291504][ T7330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.293456][ T7330] [ 155.295975][ T1423] usb 7-1: device descriptor read/64, error -71 [ 155.407160][ T1423] usb usb7-port1: attempt power cycle [ 155.443901][ T7336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.732911][ T7339] FAULT_INJECTION: forcing a failure. [ 155.732911][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 155.738350][ T7339] CPU: 3 UID: 0 PID: 7339 Comm: syz.3.528 Not tainted 6.12.0-rc1-syzkaller #0 [ 155.741500][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.745233][ T7339] Call Trace: [ 155.746434][ T7339] [ 155.746868][ T1423] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 155.747483][ T7339] dump_stack_lvl+0x16c/0x1f0 [ 155.751981][ T7339] should_fail_ex+0x497/0x5b0 [ 155.753711][ T7339] ? fs_reclaim_acquire+0xae/0x160 [ 155.755580][ T7339] should_failslab+0xc2/0x120 [ 155.757398][ T7339] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 155.759334][ T7339] ? anon_vma_fork+0x200/0x620 [ 155.761058][ T7339] anon_vma_fork+0x200/0x620 [ 155.762733][ T7339] copy_mm+0x193a/0x2550 [ 155.764291][ T7339] ? __pfx_copy_mm+0x10/0x10 [ 155.765976][ T7339] ? copy_process+0x38ef/0x6f00 [ 155.767723][ T7339] ? __raw_spin_lock_init+0x3a/0x110 [ 155.769606][ T7339] copy_process+0x3ab9/0x6f00 [ 155.771343][ T7339] ? __pfx_copy_process+0x10/0x10 [ 155.773216][ T7339] ? find_held_lock+0x2d/0x110 [ 155.774984][ T7339] kernel_clone+0xfd/0x960 [ 155.776607][ T7339] ? __pfx_kernel_clone+0x10/0x10 [ 155.778422][ T7339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.780628][ T7339] __do_compat_sys_ia32_clone+0xb7/0x100 [ 155.782602][ T7339] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 155.784902][ T7339] __do_fast_syscall_32+0x73/0x120 [ 155.786768][ T7339] do_fast_syscall_32+0x32/0x80 [ 155.788548][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.790780][ T7339] RIP: 0023:0xf7fb1579 [ 155.792296][ T7339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.799191][ T7339] RSP: 002b:00000000f573651c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 155.802217][ T7339] RAX: ffffffffffffffda RBX: 0000000004000000 RCX: 00000000200001f0 [ 155.805101][ T7339] RDX: 0000000020000200 RSI: 0000000020000240 RDI: 0000000020000280 [ 155.807956][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.810625][ T7339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.813487][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.816383][ T7339] [ 155.845167][ T1423] usb 7-1: device descriptor read/8, error -71 [ 156.086883][ T1423] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 156.107893][ T1423] usb 7-1: device descriptor read/8, error -71 [ 156.219045][ T1423] usb usb7-port1: unable to enumerate USB device [ 156.435284][ C3] ata1: illegal qc_active transition (00000000->00400000) [ 156.771509][ T1067] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 156.777162][ T1067] ata1.00: configured for UDMA/100 [ 156.942792][ T7360] syzkaller1: entered promiscuous mode [ 156.945912][ T7360] syzkaller1: entered allmulticast mode [ 157.008939][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.013425][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.016320][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.021163][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.024562][ T5352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.027448][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.050575][ T7361] lo speed is unknown, defaulting to 1000 [ 157.052474][ T7361] lo speed is unknown, defaulting to 1000 [ 157.160812][ T7361] chnl_net:caif_netlink_parms(): no params data found [ 157.243618][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.245975][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.248282][ T7361] bridge_slave_0: entered allmulticast mode [ 157.250425][ T7361] bridge_slave_0: entered promiscuous mode [ 157.253146][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.255069][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.263470][ T7361] bridge_slave_1: entered allmulticast mode [ 157.266662][ T7361] bridge_slave_1: entered promiscuous mode [ 157.322445][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.333694][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.378606][ T7361] team0: Port device team_slave_0 added [ 157.385313][ T7373] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.386325][ T7361] team0: Port device team_slave_1 added [ 157.394608][ T7373] CIFS mount error: No usable UNC path provided in device string! [ 157.394608][ T7373] [ 157.401483][ T7373] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 157.429690][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.432160][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.441839][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.447861][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.450587][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.457653][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.506043][ T7361] hsr_slave_0: entered promiscuous mode [ 157.509755][ T7361] hsr_slave_1: entered promiscuous mode [ 157.513247][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.515257][ T7361] Cannot create hsr debugfs directory [ 157.637013][ T7361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.768425][ T7361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.865398][ T7361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.946619][ T7361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.043019][ T7385] input: syz0 as /devices/virtual/input/input26 [ 158.120706][ T7361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.125230][ T7361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.135816][ T7361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.140768][ T7361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.164991][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.167666][ T7361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.218897][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.228644][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.265013][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.271196][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.273741][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.284962][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.287583][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.322644][ T7361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.326329][ T7361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.468124][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.542628][ T7361] veth0_vlan: entered promiscuous mode [ 158.549889][ T7361] veth1_vlan: entered promiscuous mode [ 158.564905][ T7361] veth0_macvtap: entered promiscuous mode [ 158.569194][ T7361] veth1_macvtap: entered promiscuous mode [ 158.577760][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.581241][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.584458][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.588158][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.591370][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.594832][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.598285][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.601761][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.605021][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.608596][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.612972][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.624579][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.631070][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.634348][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.637985][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.641262][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.644733][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.648066][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.651523][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.654814][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.658465][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.662864][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.670272][ T7361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.673224][ T7361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.676140][ T7361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.679558][ T7361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.722766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.725411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.744967][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.752371][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.056826][ T5367] Bluetooth: hci0: command tx timeout [ 159.216989][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 159.217002][ T39] audit: type=1326 audit(1727718185.063:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 159.224183][ T39] audit: type=1326 audit(1727718185.063:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 159.370073][ T7412] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.031408][ T7414] FAULT_INJECTION: forcing a failure. [ 160.031408][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 160.057048][ T7414] CPU: 3 UID: 0 PID: 7414 Comm: syz.1.549 Not tainted 6.12.0-rc1-syzkaller #0 [ 160.060300][ T7414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.064172][ T7414] Call Trace: [ 160.065433][ T7414] [ 160.066519][ T7414] dump_stack_lvl+0x16c/0x1f0 [ 160.068265][ T7414] should_fail_ex+0x497/0x5b0 [ 160.069984][ T7414] ? fs_reclaim_acquire+0xae/0x160 [ 160.071854][ T7414] should_failslab+0xc2/0x120 [ 160.073584][ T7414] __kmalloc_noprof+0xcb/0x410 [ 160.075344][ T7414] io_alloc_async_data+0x9d/0x150 [ 160.077187][ T7414] io_msg_alloc_async+0x82/0x390 [ 160.079003][ T7414] io_connect_prep+0x228/0x350 [ 160.080754][ T7414] io_submit_sqes+0x8aa/0x2530 [ 160.082519][ T7414] __do_sys_io_uring_enter+0xc0f/0x1170 [ 160.084539][ T7414] ? __fget_files+0x244/0x3f0 [ 160.086260][ T7414] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 160.088446][ T7414] ? fput+0x30/0x390 [ 160.089887][ T7414] ? ksys_write+0x1ad/0x260 [ 160.091550][ T7414] ? __pfx_ksys_write+0x10/0x10 [ 160.093345][ T7414] __do_fast_syscall_32+0x73/0x120 [ 160.095214][ T7414] do_fast_syscall_32+0x32/0x80 [ 160.097002][ T7414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.099301][ T7414] RIP: 0023:0xf740e579 [ 160.100800][ T7414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.107690][ T7414] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 160.110689][ T7414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047ba [ 160.113533][ T7414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.116386][ T7414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.119230][ T7414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.122074][ T7414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.124940][ T7414] [ 160.259277][ T7417] netlink: 'syz.1.550': attribute type 13 has an invalid length. [ 160.262478][ T7417] 9pnet_fd: Insufficient options for proto=fd [ 160.378168][ T7420] FAULT_INJECTION: forcing a failure. [ 160.378168][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 160.381964][ T7420] CPU: 2 UID: 0 PID: 7420 Comm: syz.1.552 Not tainted 6.12.0-rc1-syzkaller #0 [ 160.384471][ T7420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.387206][ T7420] Call Trace: [ 160.388082][ T7420] [ 160.388850][ T7420] dump_stack_lvl+0x16c/0x1f0 [ 160.390102][ T7420] should_fail_ex+0x497/0x5b0 [ 160.391317][ T7420] ? __pfx_lock_release+0x10/0x10 [ 160.392628][ T7420] should_failslab+0xc2/0x120 [ 160.393855][ T7420] __kmalloc_cache_noprof+0x6b/0x310 [ 160.395214][ T7420] ? __hw_addr_add_ex+0x310/0x700 [ 160.396527][ T7420] __hw_addr_add_ex+0x310/0x700 [ 160.397792][ T7420] dev_addr_init+0x13b/0x230 [ 160.398988][ T7420] ? __pfx_dev_addr_init+0x10/0x10 [ 160.400336][ T7420] alloc_netdev_mqs+0x32f/0x12a0 [ 160.401610][ T7420] ? __pfx_caifdev_setup+0x10/0x10 [ 160.402938][ T7420] ldisc_open+0x153/0x910 [ 160.404058][ T7420] ? tty_set_ldisc+0x2a5/0x720 [ 160.405292][ T7420] ? __pfx_ldisc_open+0x10/0x10 [ 160.406551][ T7420] ? down_write+0x14e/0x200 [ 160.407750][ T7420] ? __pfx_ldisc_open+0x10/0x10 [ 160.409007][ T7420] tty_ldisc_open+0x9c/0x120 [ 160.410226][ T7420] tty_set_ldisc+0x318/0x720 [ 160.411421][ T7420] tty_ioctl+0xc22/0x1640 [ 160.412568][ T7420] ? __pfx_tty_ioctl+0x10/0x10 [ 160.413811][ T7420] ? trace_lock_acquire+0x14a/0x1d0 [ 160.415152][ T7420] ? __fget_files+0x244/0x3f0 [ 160.416375][ T7420] tty_compat_ioctl+0x24a/0x4d0 [ 160.417633][ T7420] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 160.419017][ T7420] __do_compat_sys_ioctl+0x259/0x2b0 [ 160.420420][ T7420] __do_fast_syscall_32+0x73/0x120 [ 160.421738][ T7420] do_fast_syscall_32+0x32/0x80 [ 160.422999][ T7420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.424627][ T7420] RIP: 0023:0xf740e579 [ 160.425683][ T7420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.430658][ T7420] RSP: 002b:00000000f56d556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 160.432798][ T7420] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005423 [ 160.434856][ T7420] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.436884][ T7420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.438906][ T7420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.441035][ T7420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.443062][ T7420] [ 161.110830][ T7435] FAULT_INJECTION: forcing a failure. [ 161.110830][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 161.114092][ T7435] CPU: 3 UID: 0 PID: 7435 Comm: syz.1.558 Not tainted 6.12.0-rc1-syzkaller #0 [ 161.116404][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.119170][ T7435] Call Trace: [ 161.120054][ T7435] [ 161.120835][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 161.122072][ T7435] should_fail_ex+0x497/0x5b0 [ 161.123308][ T7435] should_failslab+0xc2/0x120 [ 161.124549][ T7435] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 161.125952][ T7435] ? dst_alloc+0x99/0x1a0 [ 161.127084][ T7435] dst_alloc+0x99/0x1a0 [ 161.128189][ T7435] ? fib_validate_source+0x13d/0x730 [ 161.129571][ T7435] rt_dst_alloc+0x35/0x3a0 [ 161.130728][ T7435] ip_route_input_slow+0x19bd/0x39a0 [ 161.132113][ T7435] ? __pfx_ip_route_input_slow+0x10/0x10 [ 161.133581][ T7435] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 161.135051][ T7435] ? lock_acquire+0x2f/0xb0 [ 161.136253][ T7435] ? ip_route_input_noref+0xb9/0x2e0 [ 161.137655][ T7435] ip_route_input_noref+0x124/0x2e0 [ 161.139009][ T7435] ? __pfx_ip_route_input_noref+0x10/0x10 [ 161.140493][ T7435] ? tcp_v4_early_demux+0x46c/0xb50 [ 161.141845][ T7435] ? tcp_v4_early_demux+0xae/0xb50 [ 161.143179][ T7435] ip_rcv_finish_core.constprop.0+0x469/0x2280 [ 161.144786][ T7435] ip_rcv+0x1c0/0x5d0 [ 161.145840][ T7435] ? __pfx_ip_rcv+0x10/0x10 [ 161.147026][ T7435] __netif_receive_skb_one_core+0x199/0x1e0 [ 161.148695][ T7435] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.150363][ T7435] ? trace_lock_acquire+0x14a/0x1d0 [ 161.151727][ T7435] ? netif_receive_skb+0x109/0x7b0 [ 161.153062][ T7435] __netif_receive_skb+0x1d/0x160 [ 161.154382][ T7435] netif_receive_skb+0x13f/0x7b0 [ 161.155682][ T7435] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.157109][ T7435] ? __pfx___lock_acquire+0x10/0x10 [ 161.158463][ T7435] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 161.158599][ T5367] Bluetooth: hci0: command tx timeout [ 161.160067][ T7435] tun_rx_batched+0x429/0x780 [ 161.162946][ T7435] ? __pfx_tun_rx_batched+0x10/0x10 [ 161.164309][ T7435] ? lock_acquire+0x2f/0xb0 [ 161.165496][ T7435] ? tun_get_user+0x13ae/0x3d70 [ 161.166766][ T7435] tun_get_user+0x2a3c/0x3d70 [ 161.168022][ T7435] ? find_held_lock+0x2d/0x110 [ 161.169268][ T7435] ? __pfx_tun_get_user+0x10/0x10 [ 161.170580][ T7435] ? find_held_lock+0x2d/0x110 [ 161.171837][ T7435] ? __pfx_lock_release+0x10/0x10 [ 161.173132][ T7435] tun_chr_write_iter+0xdc/0x210 [ 161.174421][ T7435] vfs_write+0x6b5/0x1140 [ 161.175556][ T7435] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.176986][ T7435] ? trace_lock_acquire+0x14a/0x1d0 [ 161.178337][ T7435] ? __pfx_vfs_write+0x10/0x10 [ 161.179587][ T7435] ? __fget_files+0x40/0x3f0 [ 161.180797][ T7435] ksys_write+0x12f/0x260 [ 161.181932][ T7435] ? __pfx_ksys_write+0x10/0x10 [ 161.183205][ T7435] __do_fast_syscall_32+0x73/0x120 [ 161.184547][ T7435] do_fast_syscall_32+0x32/0x80 [ 161.185817][ T7435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.187458][ T7435] RIP: 0023:0xf740e579 [ 161.188533][ T7435] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.193471][ T7435] RSP: 002b:00000000f56f6530 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 161.195624][ T7435] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000440 [ 161.197758][ T7435] RDX: 0000000000000052 RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 161.199803][ T7435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.201836][ T7435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.203876][ T7435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.205920][ T7435] [ 162.991492][ T7456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.228036][ T5367] Bluetooth: hci0: command tx timeout [ 163.984292][ T7472] input: syz0 as /devices/virtual/input/input27 [ 164.459264][ T7475] [U] : [ 164.460373][ T7475] [U] [ 164.461124][ T7475] [U] [ 164.461866][ T7475] [U] [ 164.462711][ T7475] [U] [ 164.463787][ T7475] [U] [ 164.464843][ T7475] [U] [ 164.465896][ T7475] [U] [ 164.486204][ T7475] [U] [ 164.486996][ T7475] [U] [ 164.487758][ T7475] [U] [ 164.488631][ T7475] [U] [ 164.489475][ T7475] [U] [ 164.490204][ T7475] [U] [ 164.490936][ T7475] [U] [ 164.491676][ T7475] [U] [ 164.498709][ T7475] [U] [ 164.499753][ T7475] [U] [ 164.500731][ T7475] [U] [ 164.501708][ T7475] [U] [ 164.502684][ T7475] [U] [ 164.503667][ T7475] [U] [ 164.504638][ T7475] [U] [ 164.505614][ T7475] [U] [ 164.506695][ T7475] [U] [ 164.507721][ T7475] [U] [ 164.508705][ T7475] [U] [ 164.509687][ T7475] [U] [ 164.510669][ T7475] [U] [ 164.511660][ T7475] [U] [ 164.512646][ T7475] [U] [ 164.513630][ T7475] [U] [ 164.520896][ T7475] [U] [ 164.521920][ T7475] [U] [ 164.522901][ T7475] [U] [ 164.523899][ T7475] [U] [ 164.524881][ T7475] [U] [ 164.525869][ T7475] [U] [ 164.526853][ T7475] [U] [ 164.527857][ T7475] [U] [ 164.541040][ T7475] [U] [ 164.542068][ T7475] [U] [ 164.543048][ T7475] [U] [ 164.544035][ T7475] [U] [ 164.545011][ T7475] [U] [ 164.545987][ T7475] [U] [ 164.546960][ T7475] [U] [ 164.547948][ T7475] [U] [ 164.564352][ T7475] [U] [ 164.565387][ T7475] [U] [ 164.566369][ T7475] [U] [ 164.567362][ T7475] [U] [ 164.568357][ T7475] [U] [ 164.569344][ T7475] [U] [ 164.570320][ T7475] [U] [ 164.571297][ T7475] [U] [ 164.576869][ T7475] [U] [ 164.577891][ T7475] [U] [ 164.578876][ T7475] [U] [ 164.579861][ T7475] [U] [ 164.580823][ T7475] [U] [ 164.581803][ T7475] [U] [ 164.582785][ T7475] [U] [ 164.583773][ T7475] [U] [ 164.602879][ T7475] [U] [ 164.603917][ T7475] [U] [ 164.604899][ T7475] [U] [ 164.605876][ T7475] [U] [ 164.606863][ T7475] [U] [ 164.607857][ T7475] [U] [ 164.608833][ T7475] [U] [ 164.609807][ T7475] [U] [ 164.635307][ T7475] [U] [ 164.636355][ T7475] [U] [ 164.637342][ T7475] [U] [ 164.638327][ T7475] [U] [ 164.639306][ T7475] [U] [ 164.640294][ T7475] [U] [ 164.641271][ T7475] [U] [ 164.642250][ T7475] [U] [ 164.644139][ T7475] [U] [ 164.645142][ T7475] [U] [ 164.646127][ T7475] [U] [ 164.647109][ T7475] [U] [ 164.648102][ T7475] [U] [ 164.649078][ T7475] [U] [ 164.650059][ T7475] [U] [ 164.651038][ T7475] [U] [ 164.656392][ T7475] [U] [ 164.657408][ T7475] [U] [ 164.658393][ T7475] [U] [ 164.659377][ T7475] [U] [ 164.660373][ T7475] [U] [ 164.661357][ T7475] [U] [ 164.662343][ T7475] [U] [ 164.663318][ T7475] [U] [ 164.672710][ T7475] [U] [ 164.673720][ T7475] [U] [ 164.674735][ T7475] [U] [ 164.675727][ T7475] [U] [ 164.676687][ T7475] [U] [ 164.677666][ T7475] [U] [ 164.678641][ T7475] [U] [ 164.679628][ T7475] [U] [ 164.697931][ T7475] [U] [ 164.698956][ T7475] [U] [ 164.699955][ T7475] [U] [ 164.700936][ T7475] [U] [ 164.701929][ T7475] [U] [ 164.702907][ T7475] [U] [ 164.703893][ T7475] [U] [ 164.704879][ T7475] [U] [ 164.723391][ T7475] [U] [ 164.724426][ T7475] [U] [ 164.725406][ T7475] [U] [ 164.726409][ T7475] [U] [ 164.727392][ T7475] [U] [ 164.728394][ T7475] [U] [ 164.729379][ T7475] [U] [ 164.730363][ T7475] [U] [ 164.743162][ T7475] [U] [ 164.744157][ T7475] [U] [ 164.745102][ T7475] [U] [ 164.746053][ T7475] [U] [ 164.747008][ T7475] [U] [ 164.747982][ T7475] [U] [ 164.748918][ T7475] [U] [ 164.758749][ T7474] [U] [ 165.298965][ T5352] Bluetooth: hci0: command tx timeout [ 165.456898][ T5367] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.622829][ T7507] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 169.625744][ T7507] ipvlan1: entered promiscuous mode [ 169.688290][ T7509] autofs: Bad value for 'fd' [ 169.706968][ T7507] team0: Device ipvlan1 failed to register rx_handler [ 169.750576][ T5367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.754902][ T5367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.758549][ T5367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.761893][ T5367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.765050][ T5367] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.767810][ T5367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.795923][ T7511] lo speed is unknown, defaulting to 1000 [ 169.804168][ T7511] lo speed is unknown, defaulting to 1000 [ 170.038888][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 170.236493][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.251650][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.254281][ T7511] bridge_slave_0: entered allmulticast mode [ 170.262351][ T7511] bridge_slave_0: entered promiscuous mode [ 170.273329][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.280889][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.283618][ T7511] bridge_slave_1: entered allmulticast mode [ 170.294974][ T7511] bridge_slave_1: entered promiscuous mode [ 170.423050][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.435550][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.457389][ T7530] siw: device registration error -23 [ 170.465178][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 170.470215][ T7511] team0: Port device team_slave_0 added [ 170.472912][ T7511] team0: Port device team_slave_1 added [ 170.532569][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.534599][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.541915][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.556131][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.560626][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.573778][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.017919][ T7511] hsr_slave_0: entered promiscuous mode [ 171.027831][ T7511] hsr_slave_1: entered promiscuous mode [ 171.046204][ T7511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.055820][ T7511] Cannot create hsr debugfs directory [ 171.356361][ T7511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.520757][ T7511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.618751][ T7511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.720837][ T7549] CIFS mount error: No usable UNC path provided in device string! [ 171.720837][ T7549] [ 171.724407][ T7549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.860963][ T7511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.106773][ T5352] Bluetooth: hci4: command tx timeout [ 172.115175][ T7511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.175538][ T7511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.205841][ T7511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.231676][ T7511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.447114][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.470682][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.490863][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.493372][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.532245][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.534754][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.540312][ T7554] siw: device registration error -23 [ 172.893978][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.959056][ T7511] veth0_vlan: entered promiscuous mode [ 172.986677][ T7511] veth1_vlan: entered promiscuous mode [ 173.021030][ T7511] veth0_macvtap: entered promiscuous mode [ 173.025018][ T7511] veth1_macvtap: entered promiscuous mode [ 173.035839][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.039802][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.043608][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.047823][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.050366][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.053769][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.057668][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.060404][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.063262][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.086670][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.097486][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.101726][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.109532][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.115874][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.121822][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.125330][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.131429][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.134963][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.145830][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.150177][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.153964][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.157914][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.161706][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.165179][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.169120][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.172876][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.183016][ T7511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.185445][ T7511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.188585][ T7511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.191972][ T7511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.246675][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.255387][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.278209][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.280294][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.859488][ T7574] netlink: 1680 bytes leftover after parsing attributes in process `syz.0.595'. [ 173.868675][ T7573] CIFS mount error: No usable UNC path provided in device string! [ 173.868675][ T7573] [ 173.873257][ T7573] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.900057][ T7573] Cannot find set identified by id 0 to match [ 174.177860][ T5352] Bluetooth: hci4: command tx timeout [ 174.214572][ T7583] siw: device registration error -23 [ 174.872053][ T39] audit: type=1326 audit(1727718200.783:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.881544][ T7589] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 174.884391][ T7589] audit: out of memory in audit_log_start [ 174.887958][ T39] audit: type=1326 audit(1727718200.783:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.896323][ T39] audit: type=1326 audit(1727718200.793:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.904876][ T39] audit: type=1326 audit(1727718200.793:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.920120][ T39] audit: type=1326 audit(1727718200.793:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.932766][ T39] audit: type=1326 audit(1727718200.793:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.941664][ T39] audit: type=1326 audit(1727718200.793:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 174.947600][ T39] audit: type=1326 audit(1727718200.793:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.601" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 175.161242][ T7595] netlink: 'syz.0.604': attribute type 7 has an invalid length. [ 175.163886][ T7595] netlink: 'syz.0.604': attribute type 8 has an invalid length. [ 175.166462][ T7595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.604'. [ 175.415496][ T7598] Bluetooth: MGMT ver 1.23 [ 176.256969][ T5352] Bluetooth: hci4: command tx timeout [ 176.386748][ T7607] siw: device registration error -23 [ 176.476100][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 176.512649][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 176.610624][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 176.767921][ T7620] FAULT_INJECTION: forcing a failure. [ 176.767921][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 176.772797][ T7620] CPU: 2 UID: 0 PID: 7620 Comm: syz.0.613 Not tainted 6.12.0-rc1-syzkaller #0 [ 176.776043][ T7620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.779934][ T7620] Call Trace: [ 176.781182][ T7620] [ 176.782297][ T7620] dump_stack_lvl+0x16c/0x1f0 [ 176.783948][ T7620] should_fail_ex+0x497/0x5b0 [ 176.785706][ T7620] should_failslab+0xc2/0x120 [ 176.787478][ T7620] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 176.789450][ T7620] ? __lock_acquire+0xbdd/0x3ce0 [ 176.791254][ T7620] ? skb_clone+0x190/0x3f0 [ 176.792892][ T7620] skb_clone+0x190/0x3f0 [ 176.794395][ T7620] raw6_local_deliver+0x3cd/0xa40 [ 176.796286][ T7620] ? __pfx_lock_release+0x10/0x10 [ 176.798157][ T7620] ? __pfx_raw6_local_deliver+0x10/0x10 [ 176.800213][ T7620] ip6_protocol_deliver_rcu+0x1e9/0x1510 [ 176.802299][ T7620] ip6_input_finish+0x14f/0x2f0 [ 176.804103][ T7620] ip6_input+0xa1/0xd0 [ 176.805617][ T7620] ip6_sublist_rcv_finish+0xb0/0x620 [ 176.807586][ T7620] ip6_list_rcv_finish.constprop.0+0x77c/0xb50 [ 176.809666][ T7620] ? __pfx_ip6_list_rcv_finish.constprop.0+0x10/0x10 [ 176.811375][ T7620] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 176.812701][ T7620] ipv6_list_rcv+0x33d/0x460 [ 176.813893][ T7620] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 176.815208][ T7620] ? __pfx___lock_acquire+0x10/0x10 [ 176.816558][ T7620] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 176.817877][ T7620] __netif_receive_skb_list_core+0x558/0x950 [ 176.819523][ T7620] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 176.821897][ T7620] ? trace_lock_acquire+0x14a/0x1d0 [ 176.823820][ T7620] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 176.826133][ T7620] ? lock_acquire+0x2f/0xb0 [ 176.827839][ T7620] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 176.829900][ T7620] netif_receive_skb_list_internal+0x753/0xdb0 [ 176.831498][ T7620] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 176.833205][ T7620] ? __pfx_eth_type_trans+0x10/0x10 [ 176.834544][ T7620] ? __build_skb_around+0x278/0x3b0 [ 176.835897][ T7620] netif_receive_skb_list+0x4f/0x4a0 [ 176.837260][ T7620] xdp_test_run_batch.constprop.0+0x1296/0x1880 [ 176.838873][ T7620] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 176.841134][ T7620] ? ktime_get+0xfb/0x1a0 [ 176.842738][ T7620] bpf_test_run_xdp_live+0x365/0x500 [ 176.844694][ T7620] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 176.846856][ T7620] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 176.849052][ T7620] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 176.851224][ T7620] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 176.853394][ T7620] ? 0xffffffffa00045c0 [ 176.854936][ T7620] ? 0xffffffffa00045c0 [ 176.856475][ T7620] ? 0xffffffffa00045c0 [ 176.858004][ T7620] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 176.860190][ T7620] bpf_prog_test_run_xdp+0x827/0x1580 [ 176.862193][ T7620] ? lock_acquire+0x2f/0xb0 [ 176.863898][ T7620] ? __fget_files+0x40/0x3f0 [ 176.865621][ T7620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.867802][ T7620] ? fput+0x30/0x390 [ 176.869218][ T7620] ? __bpf_prog_get+0xa0/0x290 [ 176.870952][ T7620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.873101][ T7620] __sys_bpf+0x1921/0x5780 [ 176.874760][ T7620] ? ksys_write+0x21e/0x260 [ 176.876447][ T7620] ? __pfx___sys_bpf+0x10/0x10 [ 176.878222][ T7620] ? vfs_write+0x14d/0x1140 [ 176.879906][ T7620] ? __mutex_unlock_slowpath+0x164/0x650 [ 176.881987][ T7620] ? fput+0x30/0x390 [ 176.883452][ T7620] ? ksys_write+0x1ad/0x260 [ 176.884730][ T7620] ? __pfx_ksys_write+0x10/0x10 [ 176.885995][ T7620] __ia32_sys_bpf+0x76/0xe0 [ 176.887186][ T7620] __do_fast_syscall_32+0x73/0x120 [ 176.888549][ T7620] do_fast_syscall_32+0x32/0x80 [ 176.890072][ T7620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.892424][ T7620] RIP: 0023:0xf73fe579 [ 176.893942][ T7620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.900896][ T7620] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 176.903920][ T7620] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 176.906786][ T7620] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.909659][ T7620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.912497][ T7620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.915392][ T7620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.918290][ T7620] [ 178.057812][ T7640] siw: device registration error -23 [ 178.203074][ T7642] lo speed is unknown, defaulting to 1000 [ 178.205933][ T7642] lo speed is unknown, defaulting to 1000 [ 178.347006][ T5352] Bluetooth: hci4: command tx timeout [ 178.480196][ T7653] CIFS mount error: No usable UNC path provided in device string! [ 178.480196][ T7653] [ 178.483636][ T7653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 178.518276][ T58] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 178.876828][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 178.904876][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.908870][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.912305][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 178.936802][ T58] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 178.940169][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.967512][ T58] usb 7-1: config 0 descriptor?? [ 179.259540][ T7670] siw: device registration error -23 [ 179.376443][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 179.380893][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 179.390311][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input29 [ 179.463255][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input30 [ 179.500716][ T58] kye 0003:0458:5011.0006: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 179.596226][ T7678] CIFS mount error: No usable UNC path provided in device string! [ 179.596226][ T7678] [ 179.599423][ T7678] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 179.603805][ T7678] Cannot find set identified by id 0 to match [ 179.782118][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 179.793101][ T7690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.635'. [ 179.812910][ T7691] overlayfs: missing 'lowerdir' [ 180.394234][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 180.394246][ T39] audit: type=1326 audit(1727718206.303:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.417130][ T39] audit: type=1326 audit(1727718206.323:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.424184][ T39] audit: type=1326 audit(1727718206.323:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.464753][ T39] audit: type=1326 audit(1727718206.323:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.483580][ T39] audit: type=1326 audit(1727718206.323:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.490362][ T39] audit: type=1326 audit(1727718206.323:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.496942][ T39] audit: type=1326 audit(1727718206.363:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.506224][ T39] audit: type=1326 audit(1727718206.363:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.512631][ T39] audit: type=1326 audit(1727718206.363:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.521934][ T39] audit: type=1326 audit(1727718206.363:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.2.620" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 180.572322][ T7698] kvm: vcpu 2046: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer. [ 180.737223][ T7701] siw: device registration error -23 [ 180.814326][ T7703] FAULT_INJECTION: forcing a failure. [ 180.814326][ T7703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.831356][ T7703] CPU: 3 UID: 0 PID: 7703 Comm: syz.1.639 Not tainted 6.12.0-rc1-syzkaller #0 [ 180.834494][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.838254][ T7703] Call Trace: [ 180.839467][ T7703] [ 180.840528][ T7703] dump_stack_lvl+0x16c/0x1f0 [ 180.842221][ T7703] should_fail_ex+0x497/0x5b0 [ 180.843918][ T7703] ? fs_reclaim_acquire+0xae/0x160 [ 180.845739][ T7703] should_fail_alloc_page+0xe7/0x130 [ 180.847646][ T7703] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 180.849837][ T7703] __alloc_pages_noprof+0x190/0x25c0 [ 180.851724][ T7703] ? stack_depot_save_flags+0x31b/0x900 [ 180.853690][ T7703] ? __pfx_lock_release+0x10/0x10 [ 180.855490][ T7703] ? hlock_class+0x4e/0x130 [ 180.857192][ T7703] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 180.859204][ T7703] ? __pfx___lock_acquire+0x10/0x10 [ 180.861058][ T7703] ? kasan_save_stack+0x42/0x60 [ 180.862786][ T7703] ? kasan_save_stack+0x33/0x60 [ 180.864535][ T7703] ? kasan_save_track+0x14/0x30 [ 180.866269][ T7703] ? __kasan_slab_alloc+0x89/0x90 [ 180.868091][ T7703] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 180.870231][ T7703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.872340][ T7703] ? policy_nodemask+0xea/0x4e0 [ 180.874078][ T7703] alloc_pages_mpol_noprof+0x2c9/0x610 [ 180.876025][ T7703] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 180.878133][ T7703] ? do_raw_spin_lock+0x12d/0x2c0 [ 180.879882][ T7703] ? lock_acquire+0x2f/0xb0 [ 180.881458][ T7703] ? kasan_populate_vmalloc_pte+0xfb/0x160 [ 180.883481][ T7703] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 180.885649][ T7703] get_free_pages_noprof+0xc/0x40 [ 180.887404][ T7703] kasan_populate_vmalloc_pte+0x2d/0x160 [ 180.889339][ T7703] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 180.891485][ T7703] __apply_to_page_range+0x5fd/0xd30 [ 180.893306][ T7703] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 180.895455][ T7703] ? __pfx___apply_to_page_range+0x10/0x10 [ 180.897459][ T7703] ? insert_vmap_area+0x2ef/0x4d0 [ 180.899233][ T7703] alloc_vmap_area+0x93e/0x2a70 [ 180.900971][ T7703] ? __pfx_alloc_vmap_area+0x10/0x10 [ 180.902842][ T7703] __get_vm_area_node+0x17e/0x2d0 [ 180.904623][ T7703] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 180.906699][ T7703] ? stack_map_alloc+0x3c6/0x650 [ 180.908456][ T7703] ? stack_map_alloc+0x3c6/0x650 [ 180.910169][ T7703] ? __mutex_unlock_slowpath+0x164/0x650 [ 180.912103][ T7703] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.914260][ T7703] ? rcu_is_watching+0x12/0xc0 [ 180.915918][ T7703] ? __kmalloc_node_noprof+0x22f/0x440 [ 180.917781][ T7703] ? get_callchain_buffers+0x1ec/0x450 [ 180.919652][ T7703] ? stack_map_alloc+0x3c6/0x650 [ 180.921345][ T7703] __bpf_map_area_alloc+0xea/0x190 [ 180.923123][ T7703] ? stack_map_alloc+0x3c6/0x650 [ 180.924848][ T7703] stack_map_alloc+0x3c6/0x650 [ 180.926508][ T7703] map_create+0x5c5/0x1ed0 [ 180.928085][ T7703] ? __pfx_lock_release+0x10/0x10 [ 180.929831][ T7703] ? trace_lock_acquire+0x14a/0x1d0 [ 180.931631][ T7703] ? __pfx_map_create+0x10/0x10 [ 180.933312][ T7703] ? lock_acquire+0x2f/0xb0 [ 180.934888][ T7703] ? __might_fault+0xe3/0x190 [ 180.936520][ T7703] ? __might_fault+0xe3/0x190 [ 180.938152][ T7703] __sys_bpf+0x506a/0x5780 [ 180.939717][ T7703] ? ksys_write+0x21e/0x260 [ 180.941282][ T7703] ? __pfx___sys_bpf+0x10/0x10 [ 180.942923][ T7703] ? vfs_write+0x14d/0x1140 [ 180.944493][ T7703] ? __mutex_unlock_slowpath+0x164/0x650 [ 180.946415][ T7703] ? fput+0x30/0x390 [ 180.947795][ T7703] ? ksys_write+0x1ad/0x260 [ 180.949350][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 180.951018][ T7703] __ia32_sys_bpf+0x76/0xe0 [ 180.952595][ T7703] __do_fast_syscall_32+0x73/0x120 [ 180.954347][ T7703] do_fast_syscall_32+0x32/0x80 [ 180.956021][ T7703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.958177][ T7703] RIP: 0023:0xf740e579 [ 180.959593][ T7703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.966131][ T7703] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 180.969002][ T7703] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200005c0 [ 180.971701][ T7703] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.974389][ T7703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.977094][ T7703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.979794][ T7703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.982495][ T7703] [ 181.101420][ T7706] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 181.103584][ T7706] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.108165][ T7706] vhci_hcd vhci_hcd.0: Device attached [ 181.111456][ T7707] usbip_core: unknown command [ 181.113007][ T7707] vhci_hcd: unknown pdu 0 [ 181.114445][ T7707] usbip_core: unknown command [ 181.118069][ T1098] vhci_hcd: stop threads [ 181.119404][ T1098] vhci_hcd: release socket [ 181.120604][ T1098] vhci_hcd: disconnect device [ 181.507531][ T58] usb 7-1: USB disconnect, device number 7 [ 182.191076][ T5367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.203821][ T5367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.209774][ T5366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.217719][ T4790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.219654][ T5366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.219928][ T5366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.223590][ T4790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.224279][ T5366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.226458][ T4790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.232555][ T5352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.235431][ T5352] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.238870][ T5352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.297139][ T7711] lo speed is unknown, defaulting to 1000 [ 182.303144][ T7711] lo speed is unknown, defaulting to 1000 [ 182.322504][ T7713] lo speed is unknown, defaulting to 1000 [ 182.325311][ T7713] lo speed is unknown, defaulting to 1000 [ 182.524881][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 182.583208][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 182.873517][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.875509][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.886882][ T7713] bridge_slave_0: entered allmulticast mode [ 182.897481][ T7713] bridge_slave_0: entered promiscuous mode [ 182.925408][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.936953][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.939657][ T7713] bridge_slave_1: entered allmulticast mode [ 182.942615][ T7713] bridge_slave_1: entered promiscuous mode [ 183.100133][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.103072][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.126990][ T7711] bridge_slave_0: entered allmulticast mode [ 183.130545][ T7711] bridge_slave_0: entered promiscuous mode [ 183.149025][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.151671][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.154318][ T7711] bridge_slave_1: entered allmulticast mode [ 183.184001][ T7711] bridge_slave_1: entered promiscuous mode [ 183.188840][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.237658][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.405963][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.415222][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.636479][ T7711] team0: Port device team_slave_0 added [ 183.651477][ T7713] team0: Port device team_slave_0 added [ 183.677859][ T7713] team0: Port device team_slave_1 added [ 183.704770][ T7711] team0: Port device team_slave_1 added [ 183.873955][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.876503][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.886991][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.891797][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.894344][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.906943][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.911807][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.920956][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.932994][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.949853][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.952447][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.966977][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.117020][ T7711] hsr_slave_0: entered promiscuous mode [ 184.127960][ T7711] hsr_slave_1: entered promiscuous mode [ 184.137982][ T7711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.140791][ T7711] Cannot create hsr debugfs directory [ 184.150089][ T7713] hsr_slave_0: entered promiscuous mode [ 184.153173][ T7713] hsr_slave_1: entered promiscuous mode [ 184.157088][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.159895][ T7713] Cannot create hsr debugfs directory [ 184.256876][ T5367] Bluetooth: hci1: command tx timeout [ 184.342710][ T5367] Bluetooth: hci4: command tx timeout [ 184.729618][ T7711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.851309][ T7711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.942719][ T7711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.050185][ T7711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.211108][ T7713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.312319][ T7713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.421879][ T7713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.544573][ T7739] siw: device registration error -23 [ 185.550845][ T7713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.566699][ T7741] ip6t_srh: unknown srh invflags 6BE9 [ 185.706308][ T7711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.718651][ T7711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.725377][ T7711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.758391][ T7711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.774502][ T7713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.789069][ T7713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.806258][ T7713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.815167][ T7713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.949395][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.969056][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.986697][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.996297][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.012296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.014735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.029836][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.031915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.044935][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.047665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.059157][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.061799][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.336821][ T5367] Bluetooth: hci1: command tx timeout [ 186.416874][ T5367] Bluetooth: hci4: command tx timeout [ 186.438901][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.559857][ T7713] veth0_vlan: entered promiscuous mode [ 186.569050][ T7713] veth1_vlan: entered promiscuous mode [ 186.609849][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.647788][ T7713] veth0_macvtap: entered promiscuous mode [ 186.675026][ T7713] veth1_macvtap: entered promiscuous mode [ 186.692155][ T7760] CIFS mount error: No usable UNC path provided in device string! [ 186.692155][ T7760] [ 186.695829][ T7760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.703534][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.703888][ T7760] Cannot find set identified by id 0 to match [ 186.766774][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.770359][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.774165][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.777897][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.786923][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.790818][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.794610][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.806803][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.810617][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.816914][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.826973][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.830555][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.834335][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.877334][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.943752][ T7711] veth0_vlan: entered promiscuous mode [ 186.948796][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.952582][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.955139][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.958325][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.960834][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.963490][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.967912][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.970648][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.973233][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.976038][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.979564][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.982513][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.985226][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.988319][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.992205][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.002551][ T7713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.004784][ T7713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.007412][ T7713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.009762][ T7713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.054541][ T7711] veth1_vlan: entered promiscuous mode [ 187.227854][ T7711] veth0_macvtap: entered promiscuous mode [ 187.232641][ T7711] veth1_macvtap: entered promiscuous mode [ 187.257599][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.266868][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.266969][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.272416][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.306688][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.310411][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.313738][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.318073][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.327000][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.330922][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.337078][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.340786][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.351907][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.355815][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.365973][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.371910][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.375487][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.390953][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.394525][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.399956][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.405882][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.455731][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.470655][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.486924][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.497017][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.500517][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.505662][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.509581][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.514321][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.518281][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.521953][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.525487][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.529645][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.532970][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.537217][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.540724][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.544431][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.558576][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.578954][ T7711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.582199][ T7711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.585389][ T7711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.604468][ T7711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.762596][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.765477][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.810077][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.813137][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.188827][ T7774] FAULT_INJECTION: forcing a failure. [ 188.188827][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.193338][ T7774] CPU: 2 UID: 0 PID: 7774 Comm: syz.2.655 Not tainted 6.12.0-rc1-syzkaller #0 [ 188.196374][ T7774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.200112][ T7774] Call Trace: [ 188.201296][ T7774] [ 188.202347][ T7774] dump_stack_lvl+0x16c/0x1f0 [ 188.204036][ T7774] should_fail_ex+0x497/0x5b0 [ 188.205685][ T7774] _copy_from_user+0x30/0xf0 [ 188.207335][ T7774] get_compat_msghdr+0xa8/0x170 [ 188.209053][ T7774] ? __pfx_get_compat_msghdr+0x10/0x10 [ 188.210977][ T7774] ? find_held_lock+0x2d/0x110 [ 188.212766][ T7774] ___sys_recvmsg+0x193/0x1a0 [ 188.214523][ T7774] ? __pfx____sys_recvmsg+0x10/0x10 [ 188.216434][ T7774] ? lock_acquire+0x2f/0xb0 [ 188.218023][ T7774] ? __fget_files+0x40/0x3f0 [ 188.219649][ T7774] ? __pfx___might_resched+0x10/0x10 [ 188.221503][ T7774] ? fdget+0x176/0x210 [ 188.222950][ T7774] do_recvmmsg+0x51a/0x750 [ 188.224544][ T7774] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.226303][ T7774] ? __pfx_lock_release+0x10/0x10 [ 188.228116][ T7774] ? vfs_write+0x14d/0x1140 [ 188.229731][ T7774] ? __fget_files+0x244/0x3f0 [ 188.231384][ T7774] __sys_recvmmsg+0x21e/0x280 [ 188.233057][ T7774] ? __pfx___sys_recvmmsg+0x10/0x10 [ 188.234885][ T7774] ? __pfx_ksys_write+0x10/0x10 [ 188.236595][ T7774] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 188.238778][ T7774] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.240610][ T7774] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 188.242968][ T7774] __do_fast_syscall_32+0x73/0x120 [ 188.244719][ T7774] do_fast_syscall_32+0x32/0x80 [ 188.246416][ T7774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.248590][ T7774] RIP: 0023:0xf7f51579 [ 188.250029][ T7774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.256679][ T7774] RSP: 002b:00000000f56b556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 188.259530][ T7774] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000600 [ 188.262277][ T7774] RDX: 00000000cb88ff8b RSI: 0000000000000002 RDI: 0000000000000000 [ 188.265046][ T7774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.267837][ T7774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.270713][ T7774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.273415][ T7774] [ 188.416843][ T5367] Bluetooth: hci1: command tx timeout [ 188.514675][ T5367] Bluetooth: hci4: command tx timeout [ 188.793030][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 188.796354][ T7781] netlink: 'syz.3.657': attribute type 7 has an invalid length. [ 188.799981][ T7781] netlink: 'syz.3.657': attribute type 8 has an invalid length. [ 188.803076][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 188.808537][ T7781] FAULT_INJECTION: forcing a failure. [ 188.808537][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 188.813041][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.3.657 Not tainted 6.12.0-rc1-syzkaller #0 [ 188.816145][ T7781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.819875][ T7781] Call Trace: [ 188.821019][ T7781] [ 188.822060][ T7781] dump_stack_lvl+0x16c/0x1f0 [ 188.823671][ T7781] should_fail_ex+0x497/0x5b0 [ 188.825326][ T7781] ? fs_reclaim_acquire+0xae/0x160 [ 188.827204][ T7781] should_failslab+0xc2/0x120 [ 188.828995][ T7781] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 188.830987][ T7781] ? __kernfs_new_node+0xd3/0x890 [ 188.832893][ T7781] __kernfs_new_node+0xd3/0x890 [ 188.834716][ T7781] ? __pfx___kernfs_new_node+0x10/0x10 [ 188.836743][ T7781] ? __pfx_lock_release+0x10/0x10 [ 188.838597][ T7781] ? kernfs_add_one+0x39d/0x520 [ 188.840427][ T7781] ? up_write+0x1b2/0x520 [ 188.842038][ T7781] kernfs_new_node+0x186/0x240 [ 188.843834][ T7781] __kernfs_create_file+0x53/0x350 [ 188.845830][ T7781] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 188.847945][ T7781] internal_create_group+0x565/0xe50 [ 188.849915][ T7781] ? __pfx_internal_create_group+0x10/0x10 [ 188.852086][ T7781] ? kernfs_create_link+0x1bd/0x240 [ 188.854012][ T7781] internal_create_groups+0x9d/0x150 [ 188.855985][ T7781] device_add+0x781/0x1a70 [ 188.857666][ T7781] ? __pfx_device_add+0x10/0x10 [ 188.859491][ T7781] ? __init_waitqueue_head+0xca/0x150 [ 188.861482][ T7781] netdev_register_kobject+0x187/0x3f0 [ 188.863518][ T7781] register_netdevice+0x1473/0x1e20 [ 188.865457][ T7781] ? __pfx_register_netdevice+0x10/0x10 [ 188.867528][ T7781] ? hsr_add_port+0x584/0x880 [ 188.869284][ T7781] hsr_dev_finalize+0x5e6/0xad0 [ 188.871099][ T7781] hsr_newlink+0x409/0x8d0 [ 188.872743][ T7781] ? __pfx_hsr_newlink+0x10/0x10 [ 188.874543][ T7781] ? rtnl_create_link+0xa2e/0xf10 [ 188.876400][ T7781] ? __pfx_hsr_newlink+0x10/0x10 [ 188.878223][ T7781] __rtnl_newlink+0x119c/0x1920 [ 188.880033][ T7781] ? __pfx___rtnl_newlink+0x10/0x10 [ 188.881965][ T7781] rtnl_newlink+0x67/0xa0 [ 188.883522][ T7781] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.885337][ T7781] rtnetlink_rcv_msg+0x3c7/0xea0 [ 188.887089][ T7781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.889030][ T7781] ? __pfx___dev_queue_xmit+0x10/0x10 [ 188.890971][ T7781] netlink_rcv_skb+0x165/0x410 [ 188.892722][ T7781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.894748][ T7781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.896830][ T7781] ? netlink_deliver_tap+0x1ae/0xcf0 [ 188.898784][ T7781] netlink_unicast+0x53c/0x7f0 [ 188.900584][ T7781] ? __pfx_netlink_unicast+0x10/0x10 [ 188.902663][ T7781] ? __phys_addr_symbol+0x30/0x80 [ 188.904558][ T7781] ? __check_object_size+0x488/0x710 [ 188.906532][ T7781] netlink_sendmsg+0x8b8/0xd70 [ 188.908345][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.910323][ T7781] ? lock_acquire+0x2f/0xb0 [ 188.912039][ T7781] ____sys_sendmsg+0x9ae/0xb40 [ 188.913812][ T7781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.915771][ T7781] ? get_compat_msghdr+0x11b/0x170 [ 188.917681][ T7781] ? __pfx___lock_acquire+0x10/0x10 [ 188.919629][ T7781] ___sys_sendmsg+0x135/0x1e0 [ 188.921367][ T7781] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.923287][ T7781] ? lock_acquire+0x2f/0xb0 [ 188.925042][ T7781] ? __fget_files+0x40/0x3f0 [ 188.926762][ T7781] ? fdget+0x176/0x210 [ 188.928297][ T7781] __sys_sendmsg+0x117/0x1f0 [ 188.930024][ T7781] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.931936][ T7781] ? __fget_files+0x244/0x3f0 [ 188.933646][ T7781] __do_fast_syscall_32+0x73/0x120 [ 188.935534][ T7781] do_fast_syscall_32+0x32/0x80 [ 188.937309][ T7781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.939645][ T7781] RIP: 0023:0xf7fb1579 [ 188.941138][ T7781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.947947][ T7781] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 188.950958][ T7781] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 188.953822][ T7781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.956688][ T7781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.959556][ T7781] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.962429][ T7781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.965366][ T7781] [ 189.186891][ T7786] input: syz0 as /devices/virtual/input/input31 [ 189.204611][ T7787] netlink: 'syz.2.659': attribute type 5 has an invalid length. [ 189.207877][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 190.506833][ T5352] Bluetooth: hci1: command tx timeout [ 190.536254][ T7795] Cannot find set identified by id 0 to match [ 190.596934][ T5352] Bluetooth: hci4: command tx timeout [ 190.817011][ T5352] Bluetooth: hci5: command 0x1003 tx timeout [ 190.818616][ T5367] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 192.499460][ T7806] 9pnet_fd: Insufficient options for proto=fd [ 193.247566][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 193.628490][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.630260][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.987247][ T7815] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 194.114167][ T7816] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 194.922161][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 194.926001][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 194.931108][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 194.934342][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 195.208934][ T7824] overlayfs: statfs failed on './file0' [ 195.248577][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.671'. [ 195.923598][ T7832] FAULT_INJECTION: forcing a failure. [ 195.923598][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 195.927381][ T7832] CPU: 3 UID: 0 PID: 7832 Comm: syz.3.673 Not tainted 6.12.0-rc1-syzkaller #0 [ 195.929593][ T7832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.932254][ T7832] Call Trace: [ 195.933102][ T7832] [ 195.933845][ T7832] dump_stack_lvl+0x16c/0x1f0 [ 195.935061][ T7832] should_fail_ex+0x497/0x5b0 [ 195.936294][ T7832] ? fs_reclaim_acquire+0xae/0x160 [ 195.937643][ T7832] should_failslab+0xc2/0x120 [ 195.938855][ T7832] __kmalloc_node_noprof+0xd1/0x440 [ 195.940161][ T7832] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 195.941530][ T7832] ? __nf_unregister_net_hook+0x2d5/0x680 [ 195.942973][ T7832] __kvmalloc_node_noprof+0xad/0x1a0 [ 195.944318][ T7832] __nf_hook_entries_try_shrink+0x15f/0x400 [ 195.945812][ T7832] __nf_unregister_net_hook+0x2e5/0x680 [ 195.947261][ T7832] nf_unregister_net_hooks+0x11b/0x160 [ 195.948649][ T7832] nf_ct_netns_do_put+0x10d/0x2f0 [ 195.949955][ T7832] nf_ct_netns_put+0x71/0x80 [ 195.951133][ T7832] __nft_release_table+0x52e/0x1150 [ 195.952503][ T7832] ? __pfx_nft_ct_get_destroy+0x10/0x10 [ 195.953918][ T7832] ? __pfx___nft_release_table+0x10/0x10 [ 195.955342][ T7832] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 195.956697][ T7832] nft_rcv_nl_event+0x4c9/0x6b0 [ 195.957950][ T7832] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 195.959341][ T7832] ? nfulnl_rcv_nl_event+0x64/0x270 [ 195.960657][ T7832] notifier_call_chain+0xb9/0x410 [ 195.961946][ T7832] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 195.963264][ T7832] blocking_notifier_call_chain+0x69/0xa0 [ 195.964719][ T7832] netlink_release+0x184c/0x2000 [ 195.965982][ T7832] ? netlink_release+0x1df/0x2000 [ 195.967288][ T7832] ? __pfx_netlink_release+0x10/0x10 [ 195.968662][ T7832] ? __pfx_locks_remove_file+0x10/0x10 [ 195.970054][ T7832] __sock_release+0xb0/0x270 [ 195.971239][ T7832] ? __pfx_sock_close+0x10/0x10 [ 195.972466][ T7832] sock_close+0x1c/0x30 [ 195.973517][ T7832] __fput+0x3f6/0xb60 [ 195.974545][ T7832] __fput_sync+0x45/0x50 [ 195.975641][ T7832] __ia32_sys_close+0x86/0x100 [ 195.976870][ T7832] __do_fast_syscall_32+0x73/0x120 [ 195.978172][ T7832] do_fast_syscall_32+0x32/0x80 [ 195.979443][ T7832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.981071][ T7832] RIP: 0023:0xf7fb1579 [ 195.982133][ T7832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 195.987093][ T7832] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000006 [ 195.989358][ T7832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 195.991401][ T7832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.993440][ T7832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.995486][ T7832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 195.997525][ T7832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.999603][ T7832] [ 196.780961][ T7847] Cannot find set identified by id 0 to match [ 197.003887][ T7854] input: syz1 as /devices/virtual/input/input32 [ 197.204117][ T7869] Cannot find set identified by id 0 to match [ 197.882727][ T7888] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.688'. [ 197.923036][ T7891] netlink: 'syz.0.689': attribute type 3 has an invalid length. [ 197.925808][ T7891] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 197.931955][ T7891] netlink: 220 bytes leftover after parsing attributes in process `syz.0.689'. [ 197.936321][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 198.809274][ T1098] bridge_slave_1: left allmulticast mode [ 198.811256][ T1098] bridge_slave_1: left promiscuous mode [ 198.813266][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.817955][ T1098] bridge_slave_0: left allmulticast mode [ 198.820636][ T1098] bridge_slave_0: left promiscuous mode [ 198.822695][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.060769][ T7902] siw: device registration error -23 [ 199.287969][ T7910] siw: device registration error -23 [ 199.289812][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.694'. [ 199.414386][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.425358][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.438236][ T1098] bond0 (unregistering): Released all slaves [ 199.841963][ T1098] hsr_slave_0: left promiscuous mode [ 199.853583][ T1098] hsr_slave_1: left promiscuous mode [ 199.860402][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.863191][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.866458][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.869507][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.935882][ T1098] veth1_macvtap: left promiscuous mode [ 199.941142][ T1098] veth0_macvtap: left promiscuous mode [ 199.943386][ T1098] veth1_vlan: left promiscuous mode [ 199.945426][ T1098] veth0_vlan: left promiscuous mode [ 203.237846][ T7951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x6f6 pfn:0x53c82 [ 203.241526][ T7951] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 203.256771][ T7951] page_type: f0(buddy) [ 203.258010][ T7951] raw: 04fff00000000000 ffffea0001415088 ffffea00013b8d88 0000000000000000 [ 203.260347][ T7951] raw: 00000000000006f6 0000000000000001 00000000f0000000 0000000000000000 [ 203.262470][ T7951] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 203.267422][ T7951] page_owner tracks the page as freed [ 203.269829][ T7951] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7837, tgid 7833 (syz.3.674), ts 196420339631, free_ts 198282793286 [ 203.286773][ T7951] post_alloc_hook+0x2d1/0x350 [ 203.288447][ T7951] get_page_from_freelist+0x101e/0x3070 [ 203.290316][ T7951] __alloc_pages_noprof+0x223/0x25c0 [ 203.303787][ T7951] alloc_pages_mpol_noprof+0x2c9/0x610 [ 203.305660][ T7951] folio_alloc_mpol_noprof+0x36/0xd0 [ 203.310082][ T7951] shmem_alloc_folio+0x135/0x160 [ 203.311613][ T7951] shmem_alloc_and_add_folio+0x48b/0xc00 [ 203.313293][ T7951] shmem_get_folio_gfp+0x689/0x1530 [ 203.314862][ T7951] shmem_fault+0x200/0xae0 [ 203.316219][ T7951] __do_fault+0x10a/0x490 [ 203.319684][ T7951] do_pte_missing+0xea8/0x3e50 [ 203.321131][ T7951] __handle_mm_fault+0x100a/0x2a10 [ 203.322640][ T7951] handle_mm_fault+0x3fa/0xaa0 [ 203.324102][ T7951] __get_user_pages+0x90f/0x3b90 [ 203.325593][ T7951] populate_vma_page_range+0x27f/0x3a0 [ 203.330699][ T7951] __mm_populate+0x1d6/0x380 [ 203.332135][ T7951] page last free pid 7834 tgid 7833 stack trace: [ 203.334039][ T7951] free_unref_folios+0x956/0x1310 [ 203.335601][ T7951] folios_put_refs+0x551/0x750 [ 203.342613][ T7951] shmem_undo_range+0x586/0x1170 [ 203.344252][ T7951] shmem_evict_inode+0x3a3/0xba0 [ 203.345810][ T7951] evict+0x409/0x970 [ 203.350531][ T7951] iput+0x530/0x890 [ 203.351894][ T7951] dentry_unlink_inode+0x29c/0x480 [ 203.354320][ T7951] __dentry_kill+0x1d0/0x600 [ 203.355963][ T7951] dput.part.0+0x4b1/0x9b0 [ 203.364570][ T7951] dput+0x1f/0x30 [ 203.365854][ T7951] __fput+0x513/0xb60 [ 203.370770][ T7951] task_work_run+0x14e/0x250 [ 203.372410][ T7951] do_exit+0xadd/0x2d70 [ 203.373843][ T7951] do_group_exit+0xd3/0x2a0 [ 203.376235][ T7951] get_signal+0x2658/0x26d0 [ 203.382067][ T7951] arch_do_signal_or_restart+0x90/0x7e0 [ 203.385741][ T7951] ------------[ cut here ]------------ [ 203.387803][ T7951] kernel BUG at include/linux/mm.h:1444! [ 203.398460][ T7951] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 203.400269][ T7951] CPU: 2 UID: 0 PID: 7951 Comm: syz.0.707 Not tainted 6.12.0-rc1-syzkaller #0 [ 203.402456][ T7951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.405745][ T7951] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.407445][ T7951] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 203.412246][ T7951] RSP: 0018:ffffc90003856fa8 EFLAGS: 00010293 [ 203.414286][ T7951] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 203.416995][ T7951] RDX: ffff88801f73a440 RSI: ffffffff8487389f RDI: ffff88801f73a884 [ 203.419759][ T7951] RBP: ffffea00014f20b4 R08: 0000000000000001 R09: fffffbfff2d315ab [ 203.422492][ T7951] R10: ffffffff9698ad5f R11: ffff88802b428a40 R12: ffffea00014f2080 [ 203.425181][ T7951] R13: ffff88805c80bc00 R14: 0000000000001000 R15: 0000000000001000 [ 203.427884][ T7951] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:0000000056fc7440 [ 203.430906][ T7951] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 203.433192][ T7951] CR2: 0000555df685e000 CR3: 0000000068558000 CR4: 0000000000352ef0 [ 203.435899][ T7951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.438577][ T7951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.441282][ T7951] Call Trace: [ 203.442423][ T7951] [ 203.443447][ T7951] ? die+0x31/0x80 [ 203.444737][ T7951] ? do_trap+0x232/0x430 [ 203.446224][ T7951] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.448347][ T7951] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.450460][ T7951] ? do_error_trap+0xf4/0x230 [ 203.452100][ T7951] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.454158][ T7951] ? handle_invalid_op+0x34/0x40 [ 203.455894][ T7951] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.458004][ T7951] ? exc_invalid_op+0x2e/0x50 [ 203.459620][ T7951] ? asm_exc_invalid_op+0x1a/0x20 [ 203.461377][ T7951] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 203.463222][ T7951] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.464792][ T7951] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 203.466338][ T7951] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 203.467973][ T7951] ? delete_node+0x207/0x8e0 [ 203.469183][ T7951] iov_iter_get_pages_alloc2+0x53/0xf0 [ 203.470568][ T7951] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 203.472270][ T7951] ? p9pdu_vwritef+0x368/0x21d0 [ 203.473884][ T7951] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 203.476397][ T7951] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 203.478139][ T7951] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 203.479909][ T7951] ? p9_tag_alloc+0x4cc/0x870 [ 203.481532][ T7951] ? reacquire_held_locks+0x464/0x4c0 [ 203.483374][ T7951] p9_virtio_zc_request+0x991/0x1460 [ 203.485180][ T7951] ? p9pdu_writef+0xc4/0x100 [ 203.486861][ T7951] ? __pfx_p9pdu_writef+0x10/0x10 [ 203.488607][ T7951] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 203.490394][ T7951] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 203.492363][ T7951] ? rcu_is_watching+0x12/0xc0 [ 203.494024][ T7951] ? trace_9p_protocol_dump+0x192/0x220 [ 203.495950][ T7951] ? rcu_is_watching+0x12/0xc0 [ 203.497660][ T7951] ? p9_client_prepare_req+0x111/0x4d0 [ 203.499472][ T7951] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 203.500925][ T7951] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 203.502424][ T7951] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 203.504097][ T7951] ? __pfx_lockdep_lock+0x10/0x10 [ 203.505374][ T7951] ? lockdep_unlock+0x11a/0x290 [ 203.506588][ T7951] ? __lock_acquire+0x2110/0x3ce0 [ 203.507877][ T7951] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 203.509329][ T7951] p9_client_read_once+0x443/0x820 [ 203.510623][ T7951] ? __pfx_p9_client_read_once+0x10/0x10 [ 203.512037][ T7951] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 203.513838][ T7951] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.515517][ T7951] p9_client_read+0x13f/0x1b0 [ 203.517038][ T7951] v9fs_issue_read+0x115/0x310 [ 203.518746][ T7951] ? __pfx_v9fs_issue_read+0x10/0x10 [ 203.520552][ T7951] ? __local_bh_enable_ip+0xa4/0x120 [ 203.522311][ T7951] netfs_read_to_pagecache+0x5c9/0x9a0 [ 203.524143][ T7951] netfs_readahead+0x7fa/0xaa0 [ 203.525783][ T7951] ? __pfx_netfs_readahead+0x10/0x10 [ 203.527599][ T7951] read_pages+0x1a8/0xd80 [ 203.529109][ T7951] ? __folio_batch_add_and_move+0x689/0xc60 [ 203.530740][ T7951] ? __folio_batch_add_and_move+0x612/0xc60 [ 203.532263][ T7951] ? __pfx_read_pages+0x10/0x10 [ 203.533838][ T7951] ? mark_lock+0xb5/0xc60 [ 203.535277][ T7951] ? __pfx___lock_acquire+0x10/0x10 [ 203.537017][ T7951] ? xas_load+0x49/0x5b0 [ 203.538201][ T7951] page_cache_ra_unbounded+0x3c0/0x6c0 [ 203.539582][ T7951] page_cache_ra_order+0x7d9/0xc90 [ 203.540878][ T7951] filemap_fault+0x148d/0x2820 [ 203.542100][ T7951] ? __pfx_filemap_fault+0x10/0x10 [ 203.543658][ T7951] ? mark_held_locks+0x9f/0xe0 [ 203.545307][ T7951] ? pte_alloc_one+0x293/0x360 [ 203.547083][ T7951] ? __pfx_filemap_map_pages+0x10/0x10 [ 203.548968][ T7951] __do_fault+0x10a/0x490 [ 203.550449][ T7951] ? __pfx_filemap_map_pages+0x10/0x10 [ 203.552124][ T7951] do_pte_missing+0x1a8/0x3e50 [ 203.553399][ T7951] __handle_mm_fault+0x100a/0x2a10 [ 203.554805][ T7951] ? __pfx_mt_find+0x10/0x10 [ 203.555983][ T7951] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 203.557389][ T7951] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.558789][ T7951] ? find_vma+0xc0/0x140 [ 203.559893][ T7951] ? __pfx_find_vma+0x10/0x10 [ 203.561062][ T7951] handle_mm_fault+0x3fa/0xaa0 [ 203.562271][ T7951] do_user_addr_fault+0x7a3/0x13f0 [ 203.563899][ T7951] exc_page_fault+0x5c/0xc0 [ 203.565387][ T7951] asm_exc_page_fault+0x26/0x30 [ 203.566773][ T7951] RIP: 0023:0xf71e2426 [ 203.567842][ T7951] Code: 03 76 37 f7 c6 03 00 00 00 74 16 a4 49 f7 c6 03 00 00 00 74 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 [ 203.572806][ T7951] RSP: 002b:00000000ffe84c98 EFLAGS: 00010202 [ 203.574751][ T7951] RAX: 0000000000000002 RBX: 00000000f739bff4 RCX: 0000000000000003 [ 203.577364][ T7951] RDX: 000000000000000e RSI: 00000000f6ca0174 RDI: 00000000200000c0 [ 203.580076][ T7951] RBP: 00000000ffe84f18 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.582751][ T7951] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 203.585734][ T7951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.588502][ T7951] [ 203.589590][ T7951] Modules linked in: [ 203.591723][ T7951] ---[ end trace 0000000000000000 ]--- [ 203.607354][ T7951] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 203.609837][ T7951] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 203.617330][ T7951] RSP: 0018:ffffc90003856fa8 EFLAGS: 00010293 [ 203.619592][ T7951] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 203.633536][ T7951] RDX: ffff88801f73a440 RSI: ffffffff8487389f RDI: ffff88801f73a884 [ 203.636205][ T7951] RBP: ffffea00014f20b4 R08: 0000000000000001 R09: fffffbfff2d315ab [ 203.644331][ T7951] R10: ffffffff9698ad5f R11: ffff88802b428a40 R12: ffffea00014f2080 [ 203.647498][ T7951] R13: ffff88805c80bc00 R14: 0000000000001000 R15: 0000000000001000 [ 203.650394][ T7951] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:0000000056fc7440 [ 203.653651][ T7951] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 203.655929][ T7951] CR2: 00000000f7f66e40 CR3: 0000000068558000 CR4: 0000000000352ef0 [ 203.667153][ T7951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.670092][ T7951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.672989][ T7951] Kernel panic - not syncing: Fatal exception [ 203.675915][ T7951] Kernel Offset: disabled [ 203.677471][ T7951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:43:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000316fb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b8d174 RDI=ffffc9000316fb60 RBP=ffffffff84b8d160 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000316fb28 RIP=ffffffff84b8d19d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f434d3fc CR3=0000000053168000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff9a385820 RCX=1ffffffff2039f1f RDX=0000000000000004 RSI=ffffffff8bb11fa0 RDI=ffffffff8d819b88 RBP=ffffc9000316fb80 RSP=ffffc9000316f9d8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff901cc60f R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000002 R14=ffffc9000316fa70 R15=ffff888068c60000 RIP=ffffffff8169e195 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020032000 CR3=0000000053168000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff848ee3ee RDX=1ffff92000687ea9 RSI=ffffffff848ee3f8 RDI=0000000000000001 RBP=ffffc9000343f538 RSP=ffffc9000343f2c8 R8 =0000000000000001 R9 =0000000000000007 R10=000000000000000d R11=0000000000000000 R12=0000000000000001 R13=ffffc9000343f380 R14=ffff88805fb1f576 R15=ffffc9000343f540 RIP=ffffffff818caf70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0278fd6d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555df685a000 CR3=00000000485d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 9430cb079430cb07 ZMM22=2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef 2d6f4cef2d6f4cef ZMM23=ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ff265cbcff265cbc ZMM24=0f5463410f546341 0f5463410f546341 0f5463410f546341 0f5463410f546341 0f5463410f546341 0f5463410f546341 0f5463410f546341 0f5463410f546341 ZMM25=bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 bd2fcd40bd2fcd40 ZMM26=f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 f67423f9f67423f9 ZMM27=573570fd573570fd 573570fd573570fd 573570fd573570fd 573570fd573570fd 573570fd573570fd 573570fd573570fd 573570fd573570fd 573570fd573570fd ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a8060000a8060000 a8060000a8060000 a8060000a8060000 a8060000a8060000 a8060000a8060000 a8060000a8060000 a8060000a8060000 a8060000a8060000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81cafafa RDX=ffff88801f892440 RSI=ffffffff81cafbe7 RDI=0000000000000005 RBP=ffff888044d57320 RSP=ffffc9000113f7b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888044d57300 R13=dffffc0000000000 R14=0000000000000002 R15=ffff88801cea6000 RIP=ffffffff81cafbe7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200000c0 CR3=000000005bc68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000