last executing test programs: 18.091817677s ago: executing program 2 (id=221): openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0xf4240) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80500) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe4) 18.091566495s ago: executing program 2 (id=222): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa800"], 0xd0}, 0x1, 0x0, 0x0, 0x48d5}, 0x10000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(adiantum(ecb-aes-neonbs,tea-generic,blake2b-384),hmac(s'}, 0xae) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$sysctl(0xffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x200}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x6, 0x9, 0x0, 0x5, 0x23, 0x0, 0x0, 0x1, 0xa, 0x4, 0xad, 0x0, 0x0, 0x8, 0x8, 0x8, 0x1, 0x7f, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r8, 0x4b4b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x66c3, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 17.770778658s ago: executing program 2 (id=225): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r5, r5, 0x0, 0x800000006) r7 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffa, 0x13580, 0x0, 0x100cd}, &(0x7f0000001200), &(0x7f0000001240)) io_uring_enter(r7, 0x15f1, 0xff98, 0x79, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) capset(0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setresuid(0x0, 0xee01, 0xffffffffffffffff) fanotify_init(0x0, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000440)={r9, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x2]}}) 17.641436379s ago: executing program 2 (id=226): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000003d00ffffffffffffffff0000047c0000040008"], 0x28}}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x19, 0x0, &(0x7f00000001c0)="b8aae28ce3aeeb36ae1632e87afa2553df0759233876bdc111", 0x0, 0x401, 0x0, 0x93, 0xbe0, &(0x7f0000000680)="4f0d8eb0f006eef992669ab6528f33c59276300050aa119abfb2a0c1066e1c8fc0fd4ed8a9ed6dfb34a872e78e0119fbd701c2c391c2acd978996e656b38e0415e5e3aad81e1fb71c5562a56b6b4063e70385cfda5674ef3a78154d6a2e1105f050dc1a23732249efec95769c007945ba50bbf8c8ca963c8730db056f6674fb11d7941d0a0b368483e84b62dc66337b17a925f", &(0x7f0000000a00)="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", 0x6}, 0x4c) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.661277899s ago: executing program 2 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400002ac685e164b0c1869743930010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="11030000000000001c0012800b000100697036746e6c00000c000280050006000900000008000a00", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x100}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa51}]}, &(0x7f0000000b00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c, '\x00', r1, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0xdb, 0x401}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-010d \x00'}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pi6 \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000da00000095000000000000007121feff100000009500"/40], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000002080)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x3, &(0x7f0000000900)=[0xffffffffffffffff, r4, r5], &(0x7f0000000940)=[{0x3, 0x1, 0x5, 0x8}, {0x3, 0x2, 0xa, 0x2}, {0x5, 0x4, 0xb, 0x3}], 0x10, 0x9, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) syz_open_dev$MSR(&(0x7f0000000180), 0x80000000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000280)={0x1, @vbi={0x0, 0x0, 0x32314152, 0x34325241, [], [], 0x2}}) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_WAKE(r11, 0x8010aa02, &(0x7f0000000080)={&(0x7f00004c5000/0x1000)=nil, 0x1000}) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905"], 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r13, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, r13, 0x3, &(0x7f0000000140)) 16.141739422s ago: executing program 2 (id=237): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') write$binfmt_script(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x34, r6, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006a0003012a247000ffffffff021b0000", @ANYBLOB], 0x30}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.588942357s ago: executing program 3 (id=310): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x7, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffff7}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001040)="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"/4031, 0xfbf}], 0x1, 0x0, 0x0, 0x40001}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) pipe(&(0x7f0000000000)) 2.831063062s ago: executing program 0 (id=314): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getuid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000400), 0x0}, 0x1c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.660996492s ago: executing program 0 (id=315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000dce154ceb2f4f7bdc0f54184f8c190a4cdc147811ceffe536c74ac0f73"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x8640, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000010"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.660575779s ago: executing program 3 (id=316): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 2.660093495s ago: executing program 0 (id=317): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000340)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000300)=0x4) wait4(0x0, 0x0, 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32314247, 0x0, 0x6, [{0x0, 0x1000000}, {0x12}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0x0, 0x25, 0x148, 0x0, 0x60, 0x394, 0x2a8, 0x2a8, 0x394, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x0, 0x4, '\x00', {0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x298) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314152, 0x0, [0x0, 0x8]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402000, 0xc, 0xc}, 0x18) 2.611052578s ago: executing program 3 (id=318): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000100)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={r3, 0xaf, 0x0, 0x0, 0x4, [], [0x0, 0x1, 0x9], [], [0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000018}) epoll_wait(r7, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) socket$packet(0x11, 0x2, 0x300) close_range(r5, 0xffffffffffffffff, 0x0) 2.441573906s ago: executing program 1 (id=319): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x228, 0x30, 0x100, 0x70bd2c, 0x0, {}, [{0x214, 0x1, [@m_mirred={0x1d8, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x5, 0x3, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0xc, 0x20000000, 0x0, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x48, 0x7, 0x3, 0xffff, 0x1c9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x20000006, 0x9, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0xffffffffffffffff, 0x30, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffffff61, 0x7, 0x6, 0xfffffffe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x20000000, 0x4, 0xd57}, 0x4}}]}, {0xc9, 0x6, "e9b0a63c6e636ddcfb5d3d3df9a7fb4f99c18997056adba20afd39e5eb147ebe9130b236dbe9222c7301466cd9245ce00e43f3fefd6fabc7ca25094ad278d756bac8cc104c0567a66f02646b3d2e76e2b0846e7b1fc1f88f9b7960a778dc521e42b7aeea5a240726027a03078183337b19599b7d40b618c161df0861040b0264039ee7c4ff90f0b500bd13751a9402d887091ea785b01cd18309b43c3ea18af4d921b09e1b93761628ef6bec26e22123c7cf42f702952e8e023325e6134a84d6d64a252cf9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008c14}, 0x40) close(r6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @timestamp, @sack_perm, @sack_perm], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, &(0x7f00000005c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.751396081s ago: executing program 3 (id=320): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000003d00ffffffffffffffff0000047c0000040008"], 0x28}}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x19, 0x0, &(0x7f00000001c0)="b8aae28ce3aeeb36ae1632e87afa2553df0759233876bdc111", 0x0, 0x401, 0x0, 0x93, 0xbe8, &(0x7f0000000680)="4f0d8eb0f006eef992669ab6528f33c59276300050aa119abfb2a0c1066e1c8fc0fd4ed8a9ed6dfb34a872e78e0119fbd701c2c391c2acd978996e656b38e0415e5e3aad81e1fb71c5562a56b6b4063e70385cfda5674ef3a78154d6a2e1105f050dc1a23732249efec95769c007945ba50bbf8c8ca963c8730db056f6674fb11d7941d0a0b368483e84b62dc66337b17a925f", &(0x7f0000000a00)="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", 0x6}, 0x4c) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.750971877s ago: executing program 0 (id=321): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x25, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x10000, 0x1000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x81}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf2512000000bc0c0f34205cbcc31a66f226d3c7269be382ae3da473374d4e604adaf3a26e91ef5e72a1b38d8e79464cddd118f7d62b85ff38c8f84c2a4db05266e6cf845586ee756f23586ca720edf5beef4deecb1fd1ea9dda3732f6bc107e943cd479d947ab70cda90eb2994ca1eb032a2c6e8efbf3"], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) syz_emit_ethernet(0x20d, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x2, [0x899, 0x465, 0x975, 0x63b]}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x4, &(0x7f0000000300)=0x0) io_getevents(r12, 0x0, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x44004) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001600156f000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="14000100ff0100000000000000009eab9b0e0000"], 0x2c}}, 0x0) read$qrtrtun(r13, 0x0, 0xeffd) r15 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cachefiles(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r16 = fsmount(r15, 0x0, 0x9c) write$tcp_mem(r16, &(0x7f0000000000)={0x2, 0x20, 0x5, 0x20, 0x7f}, 0x48) 1.541529462s ago: executing program 1 (id=322): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2404c800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r3}, 0x10) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x480c1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000400)) dup3(r1, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x11100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 1.321618759s ago: executing program 1 (id=323): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getuid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000400), 0x0}, 0x1c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.201649623s ago: executing program 1 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x2000000000000087, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) (async) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x24008080) 1.201441044s ago: executing program 1 (id=325): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x7, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffff7}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001040)="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"/4031, 0xfbf}], 0x1, 0x0, 0x0, 0x40001}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) pipe(&(0x7f0000000000)) 949.989712ms ago: executing program 32 (id=237): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') write$binfmt_script(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x34, r6, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006a0003012a247000ffffffff021b0000", @ANYBLOB], 0x30}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 889.394621ms ago: executing program 3 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) dup(r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 509.568311ms ago: executing program 0 (id=328): r0 = socket(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x1, 0x1000000, @dev, @dev, 0x0, 0x0, 0x3}}) 509.204599ms ago: executing program 0 (id=329): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000340)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000300)=0x4) wait4(0x0, 0x0, 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32314247, 0x0, 0x6, [{0x0, 0x1000000}, {0x12}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0x0, 0x25, 0x148, 0x0, 0x60, 0x394, 0x2a8, 0x2a8, 0x394, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x0, 0x4, '\x00', {0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x298) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314152, 0x0, [0x0, 0x8]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402000, 0xc, 0xc}, 0x18) 231.294676ms ago: executing program 1 (id=330): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x228, 0x30, 0x100, 0x70bd2c, 0x0, {}, [{0x214, 0x1, [@m_mirred={0x1d8, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x5, 0x3, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0xc, 0x20000000, 0x0, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x48, 0x7, 0x3, 0xffff, 0x1c9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x20000006, 0x9, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0xffffffffffffffff, 0x30, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffffff61, 0x7, 0x6, 0xfffffffe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x20000000, 0x4, 0xd57}, 0x4}}]}, {0xc9, 0x6, "e9b0a63c6e636ddcfb5d3d3df9a7fb4f99c18997056adba20afd39e5eb147ebe9130b236dbe9222c7301466cd9245ce00e43f3fefd6fabc7ca25094ad278d756bac8cc104c0567a66f02646b3d2e76e2b0846e7b1fc1f88f9b7960a778dc521e42b7aeea5a240726027a03078183337b19599b7d40b618c161df0861040b0264039ee7c4ff90f0b500bd13751a9402d887091ea785b01cd18309b43c3ea18af4d921b09e1b93761628ef6bec26e22123c7cf42f702952e8e023325e6134a84d6d64a252cf9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) shmat(0x0, &(0x7f00003e8000/0x1000)=nil, 0x4000) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008c14}, 0x40) close(r6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @timestamp, @sack_perm, @sack_perm], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, &(0x7f00000005c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 0s ago: executing program 3 (id=331): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2404c800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r3}, 0x10) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x480c1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000400)) dup3(r1, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x11100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) kernel console output (not intermixed with test programs): : unexpected cc 0x0c38 length: 249 > 2 [ 45.985134][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.988004][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.991555][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.993810][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.277416][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.319109][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.325909][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 46.349232][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.461895][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.464232][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.466675][ T5951] bridge_slave_0: entered allmulticast mode [ 46.469148][ T5951] bridge_slave_0: entered promiscuous mode [ 46.472566][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.474817][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.476889][ T5951] bridge_slave_1: entered allmulticast mode [ 46.479215][ T5951] bridge_slave_1: entered promiscuous mode [ 46.605488][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.607975][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.610028][ T5950] bridge_slave_0: entered allmulticast mode [ 46.612443][ T5950] bridge_slave_0: entered promiscuous mode [ 46.631246][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.639682][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.671699][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.674404][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.676541][ T5950] bridge_slave_1: entered allmulticast mode [ 46.678876][ T5950] bridge_slave_1: entered promiscuous mode [ 46.707791][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.710389][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.712948][ T5959] bridge_slave_0: entered allmulticast mode [ 46.717069][ T5959] bridge_slave_0: entered promiscuous mode [ 46.742940][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.745018][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.747109][ T5961] bridge_slave_0: entered allmulticast mode [ 46.749940][ T5961] bridge_slave_0: entered promiscuous mode [ 46.765475][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.767515][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.769565][ T5959] bridge_slave_1: entered allmulticast mode [ 46.771924][ T5959] bridge_slave_1: entered promiscuous mode [ 46.806845][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.808894][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.810924][ T5961] bridge_slave_1: entered allmulticast mode [ 46.813312][ T5961] bridge_slave_1: entered promiscuous mode [ 46.817479][ T5951] team0: Port device team_slave_0 added [ 46.820789][ T5951] team0: Port device team_slave_1 added [ 46.839786][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.908715][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.912330][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.916524][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.919548][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.921485][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.928563][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.937942][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.957248][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.961197][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.963907][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.973108][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.053280][ T5961] team0: Port device team_slave_0 added [ 47.074622][ T5959] team0: Port device team_slave_0 added [ 47.078978][ T5950] team0: Port device team_slave_0 added [ 47.082857][ T5961] team0: Port device team_slave_1 added [ 47.087301][ T5959] team0: Port device team_slave_1 added [ 47.105046][ T5950] team0: Port device team_slave_1 added [ 47.200339][ T5951] hsr_slave_0: entered promiscuous mode [ 47.202430][ T5951] hsr_slave_1: entered promiscuous mode [ 47.222001][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.225014][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.231792][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.235426][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.237274][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.244261][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.248455][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.250366][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.258941][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.262330][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.264490][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.271523][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.275319][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.277774][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.286619][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.327227][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.329508][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.336307][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.452314][ T5961] hsr_slave_0: entered promiscuous mode [ 47.454659][ T5961] hsr_slave_1: entered promiscuous mode [ 47.456612][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.458787][ T5961] Cannot create hsr debugfs directory [ 47.462610][ T5959] hsr_slave_0: entered promiscuous mode [ 47.464729][ T5959] hsr_slave_1: entered promiscuous mode [ 47.467154][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.469318][ T5959] Cannot create hsr debugfs directory [ 47.491174][ T5950] hsr_slave_0: entered promiscuous mode [ 47.493292][ T5950] hsr_slave_1: entered promiscuous mode [ 47.495354][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.497469][ T5950] Cannot create hsr debugfs directory [ 47.790101][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.799043][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.803135][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.816227][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.830681][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.836875][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.840802][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.846341][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.894789][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.899037][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.902652][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.914845][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.949990][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.956095][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.965389][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.969746][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.997406][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.013774][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.022741][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.033346][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.035561][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.044969][ T5964] Bluetooth: hci3: command tx timeout [ 48.045093][ T5958] Bluetooth: hci2: command tx timeout [ 48.045136][ T5962] Bluetooth: hci1: command tx timeout [ 48.045241][ T5962] Bluetooth: hci0: command tx timeout [ 48.055089][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.057110][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.061837][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.067972][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.069967][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.081682][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.084308][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.096025][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.112681][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.133192][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.135239][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.151089][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.153716][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.165167][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.208510][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.220988][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.222985][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.226924][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.229170][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.255170][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.267004][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.288850][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.298467][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.319166][ T5950] veth0_vlan: entered promiscuous mode [ 48.328854][ T5951] veth0_vlan: entered promiscuous mode [ 48.334246][ T5950] veth1_vlan: entered promiscuous mode [ 48.341932][ T5951] veth1_vlan: entered promiscuous mode [ 48.350000][ T5959] veth0_vlan: entered promiscuous mode [ 48.360682][ T5959] veth1_vlan: entered promiscuous mode [ 48.373229][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.381573][ T5951] veth0_macvtap: entered promiscuous mode [ 48.385788][ T5950] veth0_macvtap: entered promiscuous mode [ 48.391051][ T5950] veth1_macvtap: entered promiscuous mode [ 48.394208][ T5951] veth1_macvtap: entered promiscuous mode [ 48.407269][ T5959] veth0_macvtap: entered promiscuous mode [ 48.413469][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.419460][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.422359][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.426222][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.429355][ T5959] veth1_macvtap: entered promiscuous mode [ 48.435174][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.437992][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.440862][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.444385][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.452543][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.455676][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.458086][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.460476][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.466292][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.468767][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.471120][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.473636][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.481272][ T5961] veth0_vlan: entered promiscuous mode [ 48.491724][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.494684][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.497382][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.500179][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.503601][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.511719][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.515732][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.518410][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.521250][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.524893][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.533793][ T5961] veth1_vlan: entered promiscuous mode [ 48.543533][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.546174][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.548562][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.550921][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.573481][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.576631][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.585515][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.588095][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.603793][ T5961] veth0_macvtap: entered promiscuous mode [ 48.611433][ T5961] veth1_macvtap: entered promiscuous mode [ 48.611530][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.616648][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.621388][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.623546][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.625734][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.625752][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.631289][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.634309][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.637015][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.639850][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.643429][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.654409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.657361][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.657417][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.660227][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.660238][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.669007][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.671667][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.674562][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.678658][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.684516][ T5961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.684764][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.686844][ T5961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.693188][ T5961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.695774][ T5961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720054][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.722238][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.767668][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.769874][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.786226][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.788605][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.867017][ T6028] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 48.998184][ T6025] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 49.947876][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.979323][ T6049] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 50.123933][ T5958] Bluetooth: hci3: command tx timeout [ 50.150732][ T5964] Bluetooth: hci2: command tx timeout [ 50.537888][ T6055] Cannot find set identified by id 0 to match [ 50.581632][ T6056] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 50.677494][ T6053] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 50.773986][ T5958] Bluetooth: hci0: command tx timeout [ 51.266022][ T6066] ptrace attach of "/syz-executor exec"[5961] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 51.409419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.494063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.619804][ T6072] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 52.133434][ T6085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.145741][ T6085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.203959][ T5958] Bluetooth: hci2: command tx timeout [ 52.912037][ T6095] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 53.083960][ T5958] Bluetooth: hci3: command 0x0419 tx timeout [ 53.436901][ T6101] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 53.485045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.624030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.723988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 53.724833][ T5964] Bluetooth: hci1: command tx timeout [ 53.726587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.804757][ T6109] Cannot find set identified by id 0 to match [ 53.895019][ T6111] Cannot find set identified by id 0 to match [ 54.136061][ T6113] xt_cgroup: path and classid specified [ 54.299711][ T6118] fuse: Bad value for 'fd' [ 54.334968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.337517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.410449][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.413119][ T6126] netlink: 100 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.415939][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.418617][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.423796][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 54.807698][ T6134] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 54.860057][ T6137] ptrace attach of "/syz-executor exec"[5959] was attempted by "/syz-executor exec"[6137] [ 54.994501][ T6139] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 55.164299][ T5964] Bluetooth: hci3: command 0x0419 tx timeout [ 55.418488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.395374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.421329][ T6163] kvm: MONITOR instruction emulated as NOP! [ 57.077821][ T6175] Cannot find set identified by id 0 to match [ 57.679125][ T6187] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 58.551669][ T6202] overlayfs: missing 'workdir' [ 58.669142][ T6202] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 59.168671][ T5964] Bluetooth: hci3: unexpected event for opcode 0x200a [ 59.422616][ T6218] ptrace attach of "/syz-executor exec"[5961] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 60.077302][ T6229] Cannot find set identified by id 0 to match [ 60.454461][ T5958] Bluetooth: hci3: unexpected event for opcode 0x200a [ 60.673373][ T6240] ptrace attach of "/syz-executor exec"[5961] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 61.327550][ T6250] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 61.506635][ T6251] Cannot find set identified by id 0 to match [ 61.623529][ T6254] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 61.643990][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.643998][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 61.885322][ T6260] Cannot find set identified by id 0 to match [ 62.117845][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 62.123966][ T6264] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 62.157824][ T6267] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 62.157824][ T6267] program syz.1.58 not setting count and/or reply_len properly [ 62.292969][ T6270] Cannot find set identified by id 0 to match [ 62.790535][ T6277] Cannot find set identified by id 0 to match [ 63.091219][ T40] audit: type=1804 audit(1743946542.223:2): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.63" name="/newroot/15/file0" dev="tmpfs" ino=100 res=1 errno=0 [ 63.195195][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.206063][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.208804][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.212214][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.215125][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.218503][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.221833][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.224584][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.227228][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 63.245406][ T6295] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 63.856948][ T6310] Cannot find set identified by id 0 to match [ 64.183339][ T6316] FAULT_INJECTION: forcing a failure. [ 64.183339][ T6316] name failslab, interval 1, probability 0, space 0, times 1 [ 64.186981][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.0.72 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 64.186994][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.187000][ T6316] Call Trace: [ 64.187004][ T6316] [ 64.187008][ T6316] dump_stack_lvl+0x16c/0x1f0 [ 64.187025][ T6316] should_fail_ex+0x512/0x640 [ 64.187037][ T6316] ? __kmalloc_noprof+0xbf/0x510 [ 64.187052][ T6316] ? ovl_alloc_entry+0x21/0x70 [ 64.187067][ T6316] should_failslab+0xc2/0x120 [ 64.187080][ T6316] __kmalloc_noprof+0xd2/0x510 [ 64.187093][ T6316] ? __pfx_ovl_lookup_index+0x10/0x10 [ 64.187110][ T6316] ovl_alloc_entry+0x21/0x70 [ 64.187125][ T6316] ovl_lookup+0x842/0x2270 [ 64.187143][ T6316] ? __pfx_ovl_lookup+0x10/0x10 [ 64.187158][ T6316] ? d_alloc_parallel+0x6ae/0x12e0 [ 64.187171][ T6316] ? mark_lock+0x32d/0x610 [ 64.187190][ T6316] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.187204][ T6316] ? lockdep_init_map_type+0x5c/0x280 [ 64.187216][ T6316] __lookup_slow+0x24e/0x460 [ 64.187228][ T6316] ? __pfx___lookup_slow+0x10/0x10 [ 64.187247][ T6316] ? lookup_fast+0x156/0x610 [ 64.187261][ T6316] walk_component+0x353/0x5b0 [ 64.187274][ T6316] path_lookupat+0x17e/0x780 [ 64.187289][ T6316] filename_lookup+0x224/0x5f0 [ 64.187302][ T6316] ? __do_fast_syscall_32+0x73/0x120 [ 64.187318][ T6316] ? __pfx_filename_lookup+0x10/0x10 [ 64.187347][ T6316] do_linkat+0x14c/0x5a0 [ 64.187357][ T6316] ? __pfx_do_linkat+0x10/0x10 [ 64.187365][ T6316] ? strncpy_from_user+0x203/0x2e0 [ 64.187377][ T6316] ? getname_flags.part.0+0x1c2/0x540 [ 64.187390][ T6316] __ia32_sys_link+0x7c/0xa0 [ 64.187399][ T6316] __do_fast_syscall_32+0x73/0x120 [ 64.187414][ T6316] do_fast_syscall_32+0x32/0x80 [ 64.187427][ T6316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.187439][ T6316] RIP: 0023:0xf7f71579 [ 64.187447][ T6316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.187456][ T6316] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000009 [ 64.187465][ T6316] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000140 [ 64.187471][ T6316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.187476][ T6316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.187481][ T6316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.187486][ T6316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.187498][ T6316] [ 64.272378][ T6318] tipc: Started in network mode [ 64.273807][ T6318] tipc: Node identity 7, cluster identity 4711 [ 64.275879][ T6318] tipc: Node number set to 7 [ 64.277325][ T6318] FAULT_INJECTION: forcing a failure. [ 64.277325][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 64.280805][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.1.73 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 64.280817][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.280823][ T6318] Call Trace: [ 64.280827][ T6318] [ 64.280831][ T6318] dump_stack_lvl+0x16c/0x1f0 [ 64.280848][ T6318] should_fail_ex+0x512/0x640 [ 64.280861][ T6318] should_failslab+0xc2/0x120 [ 64.280871][ T6318] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 64.280887][ T6318] ? __alloc_skb+0x2b2/0x380 [ 64.280901][ T6318] __alloc_skb+0x2b2/0x380 [ 64.280912][ T6318] ? __pfx___alloc_skb+0x10/0x10 [ 64.280928][ T6318] tipc_buf_acquire+0x26/0xe0 [ 64.280939][ T6318] named_prepare_buf+0x29/0x170 [ 64.280952][ T6318] tipc_named_publish+0x1f2/0x770 [ 64.280965][ T6318] tipc_nametbl_publish+0x17d/0x280 [ 64.280981][ T6318] tipc_net_finalize+0x126/0x180 [ 64.280995][ T6318] ? __pfx_tipc_net_finalize+0x10/0x10 [ 64.281010][ T6318] ? net_generic+0xea/0x2a0 [ 64.281025][ T6318] ? tipc_net_init+0xdd/0x180 [ 64.281040][ T6318] tipc_net_init+0x135/0x180 [ 64.281054][ T6318] __tipc_nl_net_set+0x411/0x590 [ 64.281072][ T6318] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 64.281086][ T6318] ? __pfx___mutex_lock+0x10/0x10 [ 64.281102][ T6318] ? __nla_parse+0x40/0x60 [ 64.281120][ T6318] tipc_nl_net_set+0x21/0x40 [ 64.281134][ T6318] genl_family_rcv_msg_doit+0x206/0x2f0 [ 64.281151][ T6318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 64.281170][ T6318] ? genl_get_cmd+0x194/0x580 [ 64.281191][ T6318] ? __local_bh_enable_ip+0xa4/0x120 [ 64.281204][ T6318] ? __dev_queue_xmit+0x896/0x43e0 [ 64.281214][ T6318] ? __radix_tree_lookup+0x21f/0x2c0 [ 64.281229][ T6318] genl_rcv_msg+0x55c/0x800 [ 64.281239][ T6318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.281247][ T6318] ? __pfx___dev_queue_xmit+0x10/0x10 [ 64.281257][ T6318] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 64.281273][ T6318] ? __lock_acquire+0xaa4/0x1ba0 [ 64.281284][ T6318] netlink_rcv_skb+0x16a/0x440 [ 64.281298][ T6318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.281308][ T6318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.281327][ T6318] ? __pfx_down_read+0x10/0x10 [ 64.281343][ T6318] ? netlink_deliver_tap+0x1ae/0xd30 [ 64.281358][ T6318] genl_rcv+0x28/0x40 [ 64.281371][ T6318] netlink_unicast+0x53a/0x7f0 [ 64.281386][ T6318] ? __pfx_netlink_unicast+0x10/0x10 [ 64.281403][ T6318] netlink_sendmsg+0x8d1/0xdd0 [ 64.281419][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.281434][ T6318] ? __import_iovec+0x1c8/0x660 [ 64.281449][ T6318] ____sys_sendmsg+0xa95/0xc70 [ 64.281459][ T6318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.281467][ T6318] ? get_compat_msghdr+0x11a/0x170 [ 64.281485][ T6318] ___sys_sendmsg+0x134/0x1d0 [ 64.281499][ T6318] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.281526][ T6318] __sys_sendmsg+0x16d/0x220 [ 64.281538][ T6318] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.281556][ T6318] ? rcu_is_watching+0x12/0xc0 [ 64.281570][ T6318] __do_fast_syscall_32+0x73/0x120 [ 64.281585][ T6318] do_fast_syscall_32+0x32/0x80 [ 64.281599][ T6318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.281612][ T6318] RIP: 0023:0xf7fd6579 [ 64.281620][ T6318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.281629][ T6318] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 64.281638][ T6318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 64.281643][ T6318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.281648][ T6318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.281653][ T6318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.281658][ T6318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.281670][ T6318] [ 64.281674][ T6318] tipc: Publication distribution failure [ 64.390313][ T6318] tipc: Cannot configure node identity twice [ 64.459751][ T6321] process 'syz.0.74' launched './file1' with NULL argv: empty string added [ 64.659034][ T6329] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 65.689343][ T6351] Cannot find set identified by id 0 to match [ 65.902997][ T6357] capability: warning: `syz.2.85' uses deprecated v2 capabilities in a way that may be insecure [ 65.932602][ T6363] FAULT_INJECTION: forcing a failure. [ 65.932602][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 65.936416][ T6363] CPU: 3 UID: 0 PID: 6363 Comm: syz.2.87 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 65.936431][ T6363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.936438][ T6363] Call Trace: [ 65.936442][ T6363] [ 65.936446][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 65.936464][ T6363] should_fail_ex+0x512/0x640 [ 65.936475][ T6363] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 65.936492][ T6363] should_failslab+0xc2/0x120 [ 65.936502][ T6363] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 65.936516][ T6363] ? __d_alloc+0x31/0xaa0 [ 65.936527][ T6363] __d_alloc+0x31/0xaa0 [ 65.936538][ T6363] d_alloc+0x4a/0x1e0 [ 65.936547][ T6363] d_alloc_parallel+0xe3/0x12e0 [ 65.936560][ T6363] ? map_id_range_up+0x2ce/0x3b0 [ 65.936572][ T6363] ? register_lock_class+0x41/0x4c0 [ 65.936582][ T6363] ? save_trace+0x4e/0x380 [ 65.936595][ T6363] ? __pfx_d_alloc_parallel+0x10/0x10 [ 65.936608][ T6363] ? lockdep_init_map_type+0x5c/0x280 [ 65.936618][ T6363] ? lockdep_init_map_type+0x5c/0x280 [ 65.936629][ T6363] __lookup_slow+0x193/0x460 [ 65.936641][ T6363] ? __pfx___lookup_slow+0x10/0x10 [ 65.936653][ T6363] ? __kmem_cache_create_args+0x2a0/0x390 [ 65.936671][ T6363] ? __kmem_cache_create_args+0x2a0/0x390 [ 65.936685][ T6363] ? d_lookup+0xe7/0x190 [ 65.936699][ T6363] lookup_one_unlocked+0x140/0x160 [ 65.936710][ T6363] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 65.936725][ T6363] ovl_lookup_single+0x1fe/0xfb0 [ 65.936742][ T6363] ? __pfx_ovl_lookup_single+0x10/0x10 [ 65.936759][ T6363] ovl_lookup_layer+0x3d4/0x480 [ 65.936775][ T6363] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 65.936788][ T6363] ? __kmalloc_noprof+0x242/0x510 [ 65.936804][ T6363] ovl_lookup+0x1417/0x2270 [ 65.936823][ T6363] ? __pfx_ovl_lookup+0x10/0x10 [ 65.936836][ T6363] ? generic_permission+0xad/0x7d0 [ 65.936847][ T6363] ? bpf_lsm_inode_permission+0x9/0x10 [ 65.936858][ T6363] ? security_inode_permission+0xbf/0x260 [ 65.936870][ T6363] ? inode_permission+0xdd/0x5f0 [ 65.936881][ T6363] ? ovl_revert_creds+0x13/0x50 [ 65.936895][ T6363] ? ovl_permission+0xcd/0x290 [ 65.936908][ T6363] ? __pfx_ovl_permission+0x10/0x10 [ 65.936922][ T6363] ? bpf_lsm_inode_permission+0x9/0x10 [ 65.936932][ T6363] ? security_inode_permission+0xbf/0x260 [ 65.936944][ T6363] ? inode_permission+0xdd/0x5f0 [ 65.936955][ T6363] ? __pfx_ovl_lookup+0x10/0x10 [ 65.936968][ T6363] lookup_open.isra.0+0x4d7/0x1580 [ 65.936983][ T6363] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 65.937002][ T6363] ? __pfx_down_write+0x10/0x10 [ 65.937016][ T6363] ? mnt_get_write_access+0x20c/0x300 [ 65.937030][ T6363] path_openat+0x905/0x2d40 [ 65.937048][ T6363] ? __pfx_path_openat+0x10/0x10 [ 65.937065][ T6363] do_filp_open+0x20b/0x470 [ 65.937079][ T6363] ? __pfx_do_filp_open+0x10/0x10 [ 65.937102][ T6363] ? _raw_spin_unlock+0x28/0x50 [ 65.937113][ T6363] ? alloc_fd+0x471/0x7d0 [ 65.937136][ T6363] do_sys_openat2+0x11b/0x1d0 [ 65.937146][ T6363] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.937156][ T6363] ? __fget_files+0x20e/0x3c0 [ 65.937173][ T6363] __ia32_sys_creat+0xcb/0x120 [ 65.937184][ T6363] ? __pfx___ia32_sys_creat+0x10/0x10 [ 65.937194][ T6363] ? __pfx_ksys_write+0x10/0x10 [ 65.937208][ T6363] ? rcu_is_watching+0x12/0xc0 [ 65.937220][ T6363] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 65.937234][ T6363] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.937247][ T6363] __do_fast_syscall_32+0x73/0x120 [ 65.937272][ T6363] do_fast_syscall_32+0x32/0x80 [ 65.937289][ T6363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.937301][ T6363] RIP: 0023:0xf73be579 [ 65.937308][ T6363] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.937317][ T6363] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 65.937326][ T6363] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 00000000000000ca [ 65.937332][ T6363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.937337][ T6363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.937342][ T6363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.937348][ T6363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.937360][ T6363] [ 66.414340][ T6378] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 67.291666][ T6391] Zero length message leads to an empty skb [ 67.431055][ T6401] FAULT_INJECTION: forcing a failure. [ 67.431055][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 67.434704][ T6403] IPVS: set_ctl: invalid protocol: 192 164.0.0.0:20000 [ 67.437199][ T6401] CPU: 3 UID: 0 PID: 6401 Comm: syz.2.99 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 67.437213][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.437219][ T6401] Call Trace: [ 67.437222][ T6401] [ 67.437226][ T6401] dump_stack_lvl+0x16c/0x1f0 [ 67.437244][ T6401] should_fail_ex+0x512/0x640 [ 67.437256][ T6401] ? __kvmalloc_node_noprof+0x122/0x600 [ 67.437271][ T6401] should_failslab+0xc2/0x120 [ 67.437281][ T6401] __kvmalloc_node_noprof+0x135/0x600 [ 67.437294][ T6401] ? lockdep_init_map_type+0x5c/0x280 [ 67.437305][ T6401] ? alloc_netdev_mqs+0xcf8/0x1570 [ 67.437321][ T6401] ? alloc_netdev_mqs+0xcf8/0x1570 [ 67.437333][ T6401] alloc_netdev_mqs+0xcf8/0x1570 [ 67.437349][ T6401] rtnl_create_link+0xc10/0xfa0 [ 67.437364][ T6401] rtnl_newlink+0xb69/0x2000 [ 67.437381][ T6401] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.437399][ T6401] ? kfree_skbmem+0x1a4/0x1f0 [ 67.437412][ T6401] ? rcu_is_watching+0x12/0xc0 [ 67.437425][ T6401] ? trace_cap_capable+0x18d/0x200 [ 67.437439][ T6401] ? find_held_lock+0x2b/0x80 [ 67.437450][ T6401] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.437462][ T6401] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.437474][ T6401] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 67.437487][ T6401] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.437500][ T6401] rtnetlink_rcv_msg+0x95b/0xe90 [ 67.437514][ T6401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.437533][ T6401] netlink_rcv_skb+0x16a/0x440 [ 67.437547][ T6401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.437561][ T6401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.437582][ T6401] ? netlink_deliver_tap+0x1ae/0xd30 [ 67.437597][ T6401] netlink_unicast+0x53a/0x7f0 [ 67.437612][ T6401] ? __pfx_netlink_unicast+0x10/0x10 [ 67.437629][ T6401] netlink_sendmsg+0x8d1/0xdd0 [ 67.437645][ T6401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.437659][ T6401] ? __import_iovec+0x1c8/0x660 [ 67.437675][ T6401] ____sys_sendmsg+0xa95/0xc70 [ 67.437685][ T6401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.437693][ T6401] ? get_compat_msghdr+0x11a/0x170 [ 67.437711][ T6401] ___sys_sendmsg+0x134/0x1d0 [ 67.437724][ T6401] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.437751][ T6401] __sys_sendmsg+0x16d/0x220 [ 67.437764][ T6401] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.437782][ T6401] ? rcu_is_watching+0x12/0xc0 [ 67.437795][ T6401] __do_fast_syscall_32+0x73/0x120 [ 67.437810][ T6401] do_fast_syscall_32+0x32/0x80 [ 67.437824][ T6401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.437836][ T6401] RIP: 0023:0xf73be579 [ 67.437843][ T6401] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.437852][ T6401] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 67.437861][ T6401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 67.437867][ T6401] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.437872][ T6401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.437877][ T6401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.437883][ T6401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.437894][ T6401] [ 67.438278][ T6401] program syz.2.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.767071][ T6412] FAULT_INJECTION: forcing a failure. [ 67.767071][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 67.771144][ T6412] CPU: 2 UID: 0 PID: 6412 Comm: syz.3.102 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 67.771158][ T6412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.771165][ T6412] Call Trace: [ 67.771169][ T6412] [ 67.771173][ T6412] dump_stack_lvl+0x16c/0x1f0 [ 67.771190][ T6412] should_fail_ex+0x512/0x640 [ 67.771201][ T6412] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 67.771216][ T6412] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 67.771230][ T6412] should_failslab+0xc2/0x120 [ 67.771240][ T6412] __kmalloc_cache_noprof+0x6a/0x3e0 [ 67.771252][ T6412] ? __lock_acquire+0xaa4/0x1ba0 [ 67.771261][ T6412] ? flow_indr_dev_setup_offload+0x27f/0x8d0 [ 67.771274][ T6412] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 67.771287][ T6412] flow_indr_dev_setup_offload+0x27f/0x8d0 [ 67.771302][ T6412] tcf_block_offload_cmd.isra.0+0x2c6/0x310 [ 67.771324][ T6412] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 67.771341][ T6412] ? __pfx_down_write+0x10/0x10 [ 67.771360][ T6412] tcf_block_get_ext+0x7d9/0x1800 [ 67.771377][ T6412] tcf_block_get+0xa8/0x100 [ 67.771390][ T6412] ? __pfx_tcf_block_get+0x10/0x10 [ 67.771403][ T6412] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 67.771416][ T6412] ? __pfx_prio_init+0x10/0x10 [ 67.771430][ T6412] prio_init+0x3b/0x80 [ 67.771442][ T6412] ? __pfx_prio_init+0x10/0x10 [ 67.771455][ T6412] qdisc_create+0x454/0xfa0 [ 67.771466][ T6412] tc_modify_qdisc+0x1287/0x2100 [ 67.771479][ T6412] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 67.771499][ T6412] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 67.771509][ T6412] rtnetlink_rcv_msg+0x3c6/0xe90 [ 67.771523][ T6412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.771543][ T6412] netlink_rcv_skb+0x16a/0x440 [ 67.771557][ T6412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.771571][ T6412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.771592][ T6412] ? netlink_deliver_tap+0x1ae/0xd30 [ 67.771614][ T6412] netlink_unicast+0x53a/0x7f0 [ 67.771636][ T6412] ? __pfx_netlink_unicast+0x10/0x10 [ 67.771660][ T6412] netlink_sendmsg+0x8d1/0xdd0 [ 67.771684][ T6412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.771705][ T6412] ? __import_iovec+0x1c8/0x660 [ 67.771729][ T6412] ____sys_sendmsg+0xa95/0xc70 [ 67.771747][ T6412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.771760][ T6412] ? get_compat_msghdr+0x11a/0x170 [ 67.771786][ T6412] ___sys_sendmsg+0x134/0x1d0 [ 67.771805][ T6412] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.771849][ T6412] __sys_sendmsg+0x16d/0x220 [ 67.771869][ T6412] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.771900][ T6412] ? rcu_is_watching+0x12/0xc0 [ 67.771922][ T6412] __do_fast_syscall_32+0x73/0x120 [ 67.771946][ T6412] do_fast_syscall_32+0x32/0x80 [ 67.771969][ T6412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.771988][ T6412] RIP: 0023:0xf7f46579 [ 67.772001][ T6412] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.772015][ T6412] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 67.772028][ T6412] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 67.772037][ T6412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.772045][ T6412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.772053][ T6412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.772061][ T6412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.772077][ T6412] [ 68.064284][ T24] IPVS: starting estimator thread 0... [ 68.118156][ T6422] Cannot find set identified by id 0 to match [ 68.175462][ T6420] IPVS: using max 46 ests per chain, 110400 per kthread [ 68.245394][ T6421] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 68.366183][ T6428] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 68.585883][ T6430] __nla_validate_parse: 62 callbacks suppressed [ 68.585900][ T6430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.107'. [ 68.628101][ T6430] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.107'. [ 68.630788][ T6430] netlink: zone id is out of range [ 68.632206][ T6430] netlink: zone id is out of range [ 68.633649][ T6430] netlink: zone id is out of range [ 68.635907][ T6430] netlink: get zone limit has 8 unknown bytes [ 68.638515][ T6430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.107'. [ 68.641268][ T6430] program syz.2.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.675907][ T6434] program syz.2.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.738729][ T6436] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.758629][ T6436] kvm: pic: non byte read [ 68.775495][ T6436] kvm: pic: level sensitive irq not supported [ 68.775849][ T6436] kvm: pic: non byte read [ 69.133903][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.258037][ T6449] overlayfs: missing 'lowerdir' [ 69.294260][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 69.336218][ T64] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.373221][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.379723][ T64] usb 7-1: Product: syz [ 69.383069][ T64] usb 7-1: Manufacturer: syz [ 69.385495][ T64] usb 7-1: SerialNumber: syz [ 69.396695][ T64] r8152-cfgselector 7-1: Unknown version 0x0000 [ 69.398591][ T64] r8152-cfgselector 7-1: config 0 descriptor?? [ 69.399621][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 69.418327][ T6456] vivid-007: disconnect [ 69.423946][ T6455] vivid-007: reconnect [ 69.610247][ T64] r8152-cfgselector 7-1: Unknown version 0x0000 [ 69.613628][ T64] r8152-cfgselector 7-1: bad CDC descriptors [ 69.627456][ T64] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 69.901496][ T6465] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 70.022988][ T6469] syz.0.119 (6469): attempted to duplicate a private mapping with mremap. This is not supported. [ 70.284150][ T1330] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.484814][ T1330] usb 8-1: Using ep0 maxpacket: 8 [ 70.514876][ T1330] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 70.522473][ T1330] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.526076][ T1330] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.529021][ T1330] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.532940][ T1330] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.539191][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.763406][ T1330] usb 8-1: GET_CAPABILITIES returned 0 [ 70.767154][ T1330] usbtmc 8-1:16.0: can't read capabilities [ 70.778591][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.781483][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.826709][ T6486] tipc: Enabled bearer , priority 0 [ 70.832376][ T6485] tipc: Resetting bearer [ 70.973715][ T6472] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 70.983330][ T5302] usb 8-1: USB disconnect, device number 2 [ 71.520375][ T6485] tipc: Disabling bearer [ 71.867556][ T6504] wireguard0: entered promiscuous mode [ 71.869099][ T6504] wireguard0: entered allmulticast mode [ 73.202073][ T6526] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 73.526879][ T6536] FAULT_INJECTION: forcing a failure. [ 73.526879][ T6536] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.532249][ T6536] CPU: 3 UID: 0 PID: 6536 Comm: syz.1.139 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 73.532269][ T6536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.532278][ T6536] Call Trace: [ 73.532294][ T6536] [ 73.532302][ T6536] dump_stack_lvl+0x16c/0x1f0 [ 73.532327][ T6536] should_fail_ex+0x512/0x640 [ 73.532346][ T6536] _copy_from_user+0x2e/0xd0 [ 73.532359][ T6536] kstrtouint_from_user+0xd6/0x1d0 [ 73.532374][ T6536] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 73.532389][ T6536] ? __lock_acquire+0xaa4/0x1ba0 [ 73.532404][ T6536] proc_fail_nth_write+0x83/0x250 [ 73.532418][ T6536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.532435][ T6536] vfs_write+0x25c/0x1180 [ 73.532448][ T6536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.532463][ T6536] ? __pfx___mutex_lock+0x10/0x10 [ 73.532477][ T6536] ? __pfx_vfs_write+0x10/0x10 [ 73.532494][ T6536] ? __fget_files+0x20e/0x3c0 [ 73.532512][ T6536] ksys_write+0x12a/0x240 [ 73.532525][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 73.532537][ T6536] ? rcu_is_watching+0x12/0xc0 [ 73.532549][ T6536] ? rcu_is_watching+0x12/0xc0 [ 73.532563][ T6536] __do_fast_syscall_32+0x73/0x120 [ 73.532578][ T6536] do_fast_syscall_32+0x32/0x80 [ 73.532592][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.532604][ T6536] RIP: 0023:0xf7fd6579 [ 73.532612][ T6536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.532621][ T6536] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 73.532630][ T6536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 73.532636][ T6536] RDX: 0000000000000001 RSI: 00000000f745cff4 RDI: 0000000000000000 [ 73.532641][ T6536] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 73.532646][ T6536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.532651][ T6536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.532663][ T6536] [ 74.527293][ T6563] FAULT_INJECTION: forcing a failure. [ 74.527293][ T6563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.532013][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.0.148 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 74.532026][ T6563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.532032][ T6563] Call Trace: [ 74.532036][ T6563] [ 74.532040][ T6563] dump_stack_lvl+0x16c/0x1f0 [ 74.532058][ T6563] should_fail_ex+0x512/0x640 [ 74.532072][ T6563] _copy_to_user+0x32/0xd0 [ 74.532085][ T6563] simple_read_from_buffer+0xcb/0x170 [ 74.532100][ T6563] proc_fail_nth_read+0x197/0x270 [ 74.532114][ T6563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.532128][ T6563] ? rw_verify_area+0xcf/0x680 [ 74.532140][ T6563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.532153][ T6563] vfs_read+0x1de/0xc70 [ 74.532167][ T6563] ? __pfx___mutex_lock+0x10/0x10 [ 74.532181][ T6563] ? __pfx_vfs_read+0x10/0x10 [ 74.532221][ T6563] ? __fget_files+0x20e/0x3c0 [ 74.532240][ T6563] ksys_read+0x12a/0x240 [ 74.532252][ T6563] ? __pfx_ksys_read+0x10/0x10 [ 74.532264][ T6563] ? rcu_is_watching+0x12/0xc0 [ 74.532277][ T6563] ? rcu_is_watching+0x12/0xc0 [ 74.532291][ T6563] __do_fast_syscall_32+0x73/0x120 [ 74.532306][ T6563] do_fast_syscall_32+0x32/0x80 [ 74.532320][ T6563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.532332][ T6563] RIP: 0023:0xf7f71579 [ 74.532340][ T6563] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.532349][ T6563] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.532358][ T6563] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5096620 [ 74.532364][ T6563] RDX: 000000000000000f RSI: 00000000f73fcff4 RDI: 0000000000000000 [ 74.532369][ T6563] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 74.532374][ T6563] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 74.532379][ T6563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.532391][ T6563] [ 74.611976][ T6565] FAULT_INJECTION: forcing a failure. [ 74.611976][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 74.617204][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.0.149 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 74.617218][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.617224][ T6565] Call Trace: [ 74.617227][ T6565] [ 74.617231][ T6565] dump_stack_lvl+0x16c/0x1f0 [ 74.617249][ T6565] should_fail_ex+0x512/0x640 [ 74.617261][ T6565] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 74.617277][ T6565] should_failslab+0xc2/0x120 [ 74.617287][ T6565] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 74.617302][ T6565] ? __alloc_skb+0x2b2/0x380 [ 74.617317][ T6565] __alloc_skb+0x2b2/0x380 [ 74.617328][ T6565] ? __pfx___alloc_skb+0x10/0x10 [ 74.617340][ T6565] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 74.617353][ T6565] ? mld_in_v1_mode+0x240/0x3a0 [ 74.617371][ T6565] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 74.617385][ T6565] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 74.617400][ T6565] ? mld_del_delrec+0x38/0xd80 [ 74.617417][ T6565] __ipv6_dev_mc_inc+0x733/0xc10 [ 74.617430][ T6565] __ipv6_sock_mc_join+0x5ca/0x930 [ 74.617443][ T6565] do_ipv6_mcast_group_source+0x20c/0x260 [ 74.617458][ T6565] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 74.617486][ T6565] ? __local_bh_enable_ip+0xa4/0x120 [ 74.617499][ T6565] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.617515][ T6565] do_ipv6_setsockopt+0x26bf/0x4420 [ 74.617531][ T6565] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 74.617546][ T6565] ? find_held_lock+0x2b/0x80 [ 74.617558][ T6565] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 74.617570][ T6565] ? __lock_acquire+0x5ca/0x1ba0 [ 74.617590][ T6565] ? __pfx___might_resched+0x10/0x10 [ 74.617607][ T6565] ? aa_sk_perm+0x2f4/0xb10 [ 74.617619][ T6565] ? ipv6_setsockopt+0xcb/0x170 [ 74.617632][ T6565] ipv6_setsockopt+0xcb/0x170 [ 74.617646][ T6565] udpv6_setsockopt+0x7d/0xd0 [ 74.617656][ T6565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.617672][ T6565] do_sock_setsockopt+0x221/0x470 [ 74.617686][ T6565] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 74.617709][ T6565] __sys_setsockopt+0x1a0/0x230 [ 74.617723][ T6565] __ia32_sys_setsockopt+0xbc/0x160 [ 74.617734][ T6565] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.617747][ T6565] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 74.617761][ T6565] __do_fast_syscall_32+0x73/0x120 [ 74.617776][ T6565] do_fast_syscall_32+0x32/0x80 [ 74.617790][ T6565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.617802][ T6565] RIP: 0023:0xf7f71579 [ 74.617810][ T6565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.617819][ T6565] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 74.617828][ T6565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 74.617833][ T6565] RDX: 000000000000002e RSI: 0000000080000080 RDI: 0000000000000108 [ 74.617839][ T6565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.617844][ T6565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 74.617849][ T6565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.617861][ T6565] [ 75.034393][ T6576] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 75.040092][ T6576] syz_tun: entered promiscuous mode [ 75.048896][ T6576] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.050179][ T6577] Cannot find set identified by id 0 to match [ 75.621933][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 76.831723][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 76.991589][ T6629] FAULT_INJECTION: forcing a failure. [ 76.991589][ T6629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.999080][ T6629] CPU: 3 UID: 0 PID: 6629 Comm: syz.2.168 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 76.999094][ T6629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.999100][ T6629] Call Trace: [ 76.999104][ T6629] [ 76.999108][ T6629] dump_stack_lvl+0x16c/0x1f0 [ 76.999133][ T6629] should_fail_ex+0x512/0x640 [ 76.999154][ T6629] _copy_to_user+0x32/0xd0 [ 76.999174][ T6629] simple_read_from_buffer+0xcb/0x170 [ 76.999188][ T6629] proc_fail_nth_read+0x197/0x270 [ 76.999203][ T6629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.999216][ T6629] ? rw_verify_area+0xcf/0x680 [ 76.999228][ T6629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.999241][ T6629] vfs_read+0x1de/0xc70 [ 76.999256][ T6629] ? __pfx___mutex_lock+0x10/0x10 [ 76.999270][ T6629] ? __pfx_vfs_read+0x10/0x10 [ 76.999286][ T6629] ? __fget_files+0x20e/0x3c0 [ 76.999303][ T6629] ksys_read+0x12a/0x240 [ 76.999316][ T6629] ? __pfx_ksys_read+0x10/0x10 [ 76.999328][ T6629] ? rcu_is_watching+0x12/0xc0 [ 76.999341][ T6629] ? rcu_is_watching+0x12/0xc0 [ 76.999354][ T6629] __do_fast_syscall_32+0x73/0x120 [ 76.999369][ T6629] do_fast_syscall_32+0x32/0x80 [ 76.999383][ T6629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.999395][ T6629] RIP: 0023:0xf73be579 [ 76.999403][ T6629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.999411][ T6629] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 76.999421][ T6629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5046620 [ 76.999427][ T6629] RDX: 000000000000000f RSI: 00000000f73acff4 RDI: 0000000000000000 [ 76.999432][ T6629] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 76.999437][ T6629] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 76.999442][ T6629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.999453][ T6629] [ 77.282868][ T6650] ======================================================= [ 77.282868][ T6650] WARNING: The mand mount option has been deprecated and [ 77.282868][ T6650] and is ignored by this kernel. Remove the mand [ 77.282868][ T6650] option from the mount to silence this warning. [ 77.282868][ T6650] ======================================================= [ 77.293987][ T6650] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 77.553917][ T5302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.729136][ T5302] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.731737][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.734064][ T5302] usb 5-1: Product: syz [ 77.735283][ T5302] usb 5-1: Manufacturer: syz [ 77.736584][ T5302] usb 5-1: SerialNumber: syz [ 77.740016][ T5302] usb 5-1: config 0 descriptor?? [ 77.946804][ T6651] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 77.950167][ T5302] usb 5-1: USB disconnect, device number 2 [ 77.999756][ T6656] FAULT_INJECTION: forcing a failure. [ 77.999756][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 78.003825][ T6656] CPU: 3 UID: 0 PID: 6656 Comm: syz.3.178 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 78.003850][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.003856][ T6656] Call Trace: [ 78.003860][ T6656] [ 78.003864][ T6656] dump_stack_lvl+0x16c/0x1f0 [ 78.003881][ T6656] should_fail_ex+0x512/0x640 [ 78.003894][ T6656] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 78.003908][ T6656] ? __pfx_sync_thread_master+0x10/0x10 [ 78.003921][ T6656] should_failslab+0xc2/0x120 [ 78.003931][ T6656] __kmalloc_cache_noprof+0x6a/0x3e0 [ 78.003943][ T6656] ? lockdep_init_map_type+0x5c/0x280 [ 78.003952][ T6656] ? __kthread_create_on_node+0xce/0x3f0 [ 78.003975][ T6656] ? __init_swait_queue_head+0xca/0x150 [ 78.003988][ T6656] ? __pfx_sync_thread_master+0x10/0x10 [ 78.004000][ T6656] __kthread_create_on_node+0xce/0x3f0 [ 78.004015][ T6656] ? __pfx___kthread_create_on_node+0x10/0x10 [ 78.004036][ T6656] ? kernel_connect+0x104/0x180 [ 78.004050][ T6656] ? __pfx_sync_thread_master+0x10/0x10 [ 78.004063][ T6656] kthread_create_on_node+0xc7/0x100 [ 78.004078][ T6656] ? __pfx_kthread_create_on_node+0x10/0x10 [ 78.004097][ T6656] ? inet_select_addr+0x639/0xb80 [ 78.004113][ T6656] start_sync_thread+0xecd/0x28b0 [ 78.004125][ T6656] ? __pfx_sync_thread_master+0x10/0x10 [ 78.004142][ T6656] ? __pfx_start_sync_thread+0x10/0x10 [ 78.004179][ T6656] ? __might_fault+0xe3/0x190 [ 78.004204][ T6656] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 78.004213][ T6656] do_ip_vs_set_ctl+0x451/0x11d0 [ 78.004223][ T6656] ? __lock_acquire+0xaa4/0x1ba0 [ 78.004234][ T6656] ? __mutex_trylock_common+0xa0/0x250 [ 78.004243][ T6656] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 78.004251][ T6656] ? __pfx___mutex_trylock_common+0x10/0x10 [ 78.004261][ T6656] ? __pfx___might_resched+0x10/0x10 [ 78.004278][ T6656] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 78.004295][ T6656] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 78.004320][ T6656] ? nf_setsockopt+0x8a/0xf0 [ 78.004333][ T6656] nf_setsockopt+0x8a/0xf0 [ 78.004347][ T6656] ip_setsockopt+0xcb/0xf0 [ 78.004358][ T6656] sctp_setsockopt+0x169/0xb870 [ 78.004373][ T6656] ? __pfx_sctp_setsockopt+0x10/0x10 [ 78.004383][ T6656] ? __lock_acquire+0x5ca/0x1ba0 [ 78.004391][ T6656] ? __pfx_aa_sk_perm+0x10/0x10 [ 78.004403][ T6656] ? find_held_lock+0x2b/0x80 [ 78.004416][ T6656] ? sock_common_setsockopt+0x2e/0xf0 [ 78.004431][ T6656] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.004446][ T6656] do_sock_setsockopt+0x221/0x470 [ 78.004460][ T6656] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 78.004482][ T6656] __sys_setsockopt+0x1a0/0x230 [ 78.004497][ T6656] __ia32_sys_setsockopt+0xbc/0x160 [ 78.004508][ T6656] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.004521][ T6656] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 78.004535][ T6656] __do_fast_syscall_32+0x73/0x120 [ 78.004550][ T6656] do_fast_syscall_32+0x32/0x80 [ 78.004569][ T6656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.004584][ T6656] RIP: 0023:0xf7f46579 [ 78.004595][ T6656] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.004608][ T6656] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 78.004618][ T6656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 78.004624][ T6656] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 78.004629][ T6656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.004634][ T6656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.004639][ T6656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.004652][ T6656] [ 78.139627][ T6663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.201253][ T6667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.218459][ T6668] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 80.659039][ T6728] FAULT_INJECTION: forcing a failure. [ 80.659039][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 80.663469][ T6728] CPU: 3 UID: 0 PID: 6728 Comm: syz.2.198 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 80.663488][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.663496][ T6728] Call Trace: [ 80.663502][ T6728] [ 80.663508][ T6728] dump_stack_lvl+0x16c/0x1f0 [ 80.663534][ T6728] should_fail_ex+0x512/0x640 [ 80.663553][ T6728] ? __kmalloc_node_noprof+0xc5/0x500 [ 80.663580][ T6728] should_failslab+0xc2/0x120 [ 80.663596][ T6728] __kmalloc_node_noprof+0xd8/0x500 [ 80.663620][ T6728] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 80.663641][ T6728] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 80.663663][ T6728] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 80.663683][ T6728] crypto_create_tfm_node+0x83/0x320 [ 80.663703][ T6728] crypto_alloc_tfm_node+0x102/0x260 [ 80.663725][ T6728] macsec_alloc_tfm+0x24/0xc0 [ 80.663742][ T6728] macsec_validate_attr+0x5f1/0x7e0 [ 80.663756][ T6728] ? __pfx_macsec_validate_attr+0x10/0x10 [ 80.663770][ T6728] ? rtnl_link_ops_get+0x17b/0x2c0 [ 80.663794][ T6728] ? __nla_parse+0x40/0x60 [ 80.663813][ T6728] ? __pfx_macsec_validate_attr+0x10/0x10 [ 80.663826][ T6728] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.663863][ T6728] rtnl_newlink+0x3e9/0x2000 [ 80.663891][ T6728] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.663912][ T6728] ? kasan_quarantine_put+0x10a/0x240 [ 80.663930][ T6728] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.663954][ T6728] ? kfree_skbmem+0x1a4/0x1f0 [ 80.663986][ T6728] ? rcu_is_watching+0x12/0xc0 [ 80.664004][ T6728] ? trace_cap_capable+0x18d/0x200 [ 80.664024][ T6728] ? find_held_lock+0x2b/0x80 [ 80.664040][ T6728] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.664057][ T6728] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.664073][ T6728] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 80.664092][ T6728] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.664111][ T6728] rtnetlink_rcv_msg+0x95b/0xe90 [ 80.664132][ T6728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.664182][ T6728] netlink_rcv_skb+0x16a/0x440 [ 80.664202][ T6728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.664222][ T6728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.664252][ T6728] ? netlink_deliver_tap+0x1ae/0xd30 [ 80.664275][ T6728] netlink_unicast+0x53a/0x7f0 [ 80.664297][ T6728] ? __pfx_netlink_unicast+0x10/0x10 [ 80.664322][ T6728] netlink_sendmsg+0x8d1/0xdd0 [ 80.664346][ T6728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.664367][ T6728] ? __import_iovec+0x1c8/0x660 [ 80.664389][ T6728] ____sys_sendmsg+0xa95/0xc70 [ 80.664404][ T6728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.664416][ T6728] ? get_compat_msghdr+0x11a/0x170 [ 80.664443][ T6728] ___sys_sendmsg+0x134/0x1d0 [ 80.664462][ T6728] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.664506][ T6728] __sys_sendmsg+0x16d/0x220 [ 80.664524][ T6728] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.664551][ T6728] ? rcu_is_watching+0x12/0xc0 [ 80.664570][ T6728] __do_fast_syscall_32+0x73/0x120 [ 80.664590][ T6728] do_fast_syscall_32+0x32/0x80 [ 80.664610][ T6728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.664627][ T6728] RIP: 0023:0xf73be579 [ 80.664639][ T6728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.664652][ T6728] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 80.664666][ T6728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 80.664675][ T6728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.664682][ T6728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.664690][ T6728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.664698][ T6728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.664717][ T6728] [ 80.745806][ T6725] "syz.3.197" (6725) uses obsolete ecb(arc4) skcipher [ 80.793486][ T6726] 9pnet_virtio: no channels available for device syz [ 80.800788][ T6726] 9pnet_virtio: no channels available for device syz [ 80.802818][ T6726] 9pnet_virtio: no channels available for device syz [ 80.805485][ T6726] 9pnet_virtio: no channels available for device syz [ 80.807494][ T6726] 9pnet_virtio: no channels available for device syz [ 80.818014][ T6726] 9pnet_virtio: no channels available for device syz [ 80.820005][ T6726] 9pnet_virtio: no channels available for device syz [ 80.821997][ T6726] 9pnet_virtio: no channels available for device syz [ 80.824412][ T6726] 9pnet_virtio: no channels available for device syz [ 80.826937][ T6726] 9pnet_virtio: no channels available for device syz [ 80.829004][ T6726] 9pnet_virtio: no channels available for device syz [ 80.831010][ T6726] 9pnet_virtio: no channels available for device syz [ 80.832976][ T6726] 9pnet_virtio: no channels available for device syz [ 80.835621][ T6726] 9pnet_virtio: no channels available for device syz [ 80.837861][ T6726] 9pnet_virtio: no channels available for device syz [ 80.840093][ T6726] 9pnet_virtio: no channels available for device syz [ 80.842284][ T6726] 9pnet_virtio: no channels available for device syz [ 80.844521][ T6726] 9pnet_virtio: no channels available for device syz [ 80.846793][ T6726] 9pnet_virtio: no channels available for device syz [ 80.848896][ T6726] 9pnet_virtio: no channels available for device syz [ 80.851289][ T6726] 9pnet_virtio: no channels available for device syz [ 80.853747][ T6726] 9pnet_virtio: no channels available for device syz [ 80.856212][ T6726] 9pnet_virtio: no channels available for device syz [ 80.858373][ T6726] 9pnet_virtio: no channels available for device syz [ 80.860734][ T6726] 9pnet_virtio: no channels available for device syz [ 80.862764][ T6726] 9pnet_virtio: no channels available for device syz [ 80.865176][ T6726] 9pnet_virtio: no channels available for device syz [ 80.867152][ T6726] 9pnet_virtio: no channels available for device syz [ 80.869197][ T6726] 9pnet_virtio: no channels available for device syz [ 80.871292][ T6726] 9pnet_virtio: no channels available for device syz [ 80.873623][ T6726] 9pnet_virtio: no channels available for device syz [ 80.875871][ T6726] 9pnet_virtio: no channels available for device syz [ 81.012157][ T29] cfg80211: failed to load regulatory.db [ 81.050354][ T6747] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 81.069731][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 81.093074][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.365778][ T6755] vivid-007: disconnect [ 81.368888][ T6754] vivid-007: reconnect [ 81.451552][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 81.473363][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.503356][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.506647][ T6758] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 81.511634][ T6758] bond1: (slave vcan1): Error -95 calling set_mac_address [ 83.441647][ T6797] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 83.489135][ T6800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.529214][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 83.542083][ T6799] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 83.576417][ T6800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.655876][ T6800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.732600][ T6800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.737048][ T6805] capability: warning: `syz.2.222' uses 32-bit capabilities (legacy support in use) [ 83.813012][ T6800] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.819379][ T6800] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.826578][ T6800] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.832659][ T6800] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.391231][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.358281][ T6846] lo speed is unknown, defaulting to 1000 [ 85.361952][ T6846] lo speed is unknown, defaulting to 1000 [ 85.364388][ T6846] lo speed is unknown, defaulting to 1000 [ 85.410097][ T6849] netlink: 'syz.1.236': attribute type 3 has an invalid length. [ 85.412251][ T6849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.236'. [ 85.415703][ T6849] 7: renamed from lo (while UP) [ 85.436189][ T6846] infiniband sz1: set active [ 85.437577][ T6846] infiniband sz1: added 7 [ 85.442439][ T64] 7 speed is unknown, defaulting to 1000 [ 85.457863][ T6846] RDS/IB: sz1: added [ 85.459190][ T6846] smc: adding ib device sz1 with port count 1 [ 85.460965][ T6846] smc: ib device sz1 port 1 has pnetid [ 85.464209][ T6846] 7 speed is unknown, defaulting to 1000 [ 85.544024][ T6846] 7 speed is unknown, defaulting to 1000 [ 85.621527][ T6846] 7 speed is unknown, defaulting to 1000 [ 85.702955][ T6846] 7 speed is unknown, defaulting to 1000 [ 85.785880][ T29] 7 speed is unknown, defaulting to 1000 [ 85.788878][ T6848] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 86.760382][ T6870] overlayfs: overlapping lowerdir path [ 86.796239][ T6870] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 87.180310][ T6879] FAULT_INJECTION: forcing a failure. [ 87.180310][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.183976][ T6879] CPU: 3 UID: 0 PID: 6879 Comm: syz.0.244 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 87.183990][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.183996][ T6879] Call Trace: [ 87.183999][ T6879] [ 87.184003][ T6879] dump_stack_lvl+0x16c/0x1f0 [ 87.184020][ T6879] should_fail_ex+0x512/0x640 [ 87.184034][ T6879] _copy_to_user+0x32/0xd0 [ 87.184048][ T6879] simple_read_from_buffer+0xcb/0x170 [ 87.184063][ T6879] proc_fail_nth_read+0x197/0x270 [ 87.184092][ T6879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.184108][ T6879] ? rw_verify_area+0xcf/0x680 [ 87.184119][ T6879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.184132][ T6879] vfs_read+0x1de/0xc70 [ 87.184147][ T6879] ? __pfx___mutex_lock+0x10/0x10 [ 87.184165][ T6879] ? __pfx_vfs_read+0x10/0x10 [ 87.184182][ T6879] ? __fget_files+0x20e/0x3c0 [ 87.184200][ T6879] ksys_read+0x12a/0x240 [ 87.184213][ T6879] ? __pfx_ksys_read+0x10/0x10 [ 87.184226][ T6879] ? rcu_is_watching+0x12/0xc0 [ 87.184240][ T6879] __do_fast_syscall_32+0x73/0x120 [ 87.184256][ T6879] do_fast_syscall_32+0x32/0x80 [ 87.184270][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.184282][ T6879] RIP: 0023:0xf7f71579 [ 87.184290][ T6879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.184298][ T6879] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 87.184308][ T6879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620 [ 87.184313][ T6879] RDX: 000000000000000f RSI: 00000000f73fcff4 RDI: 0000000000000000 [ 87.184319][ T6879] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 87.184324][ T6879] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 87.184329][ T6879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.184340][ T6879] [ 87.651127][ T6887] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 88.327924][ T6900] FAULT_INJECTION: forcing a failure. [ 88.327924][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.362732][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.0.251 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 88.362754][ T6900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.362764][ T6900] Call Trace: [ 88.362769][ T6900] [ 88.362775][ T6900] dump_stack_lvl+0x16c/0x1f0 [ 88.362802][ T6900] should_fail_ex+0x512/0x640 [ 88.362831][ T6900] _copy_to_user+0x32/0xd0 [ 88.362853][ T6900] simple_read_from_buffer+0xcb/0x170 [ 88.362877][ T6900] proc_fail_nth_read+0x197/0x270 [ 88.362900][ T6900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.362924][ T6900] ? rw_verify_area+0xcf/0x680 [ 88.362943][ T6900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.362965][ T6900] vfs_read+0x1de/0xc70 [ 88.362989][ T6900] ? __pfx___mutex_lock+0x10/0x10 [ 88.363011][ T6900] ? __pfx_vfs_read+0x10/0x10 [ 88.363039][ T6900] ? __fget_files+0x20e/0x3c0 [ 88.363068][ T6900] ksys_read+0x12a/0x240 [ 88.363088][ T6900] ? __pfx_ksys_read+0x10/0x10 [ 88.363111][ T6900] ? rcu_is_watching+0x12/0xc0 [ 88.363134][ T6900] __do_fast_syscall_32+0x73/0x120 [ 88.363160][ T6900] do_fast_syscall_32+0x32/0x80 [ 88.363184][ T6900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.363202][ T6900] RIP: 0023:0xf7f71579 [ 88.363215][ T6900] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.363229][ T6900] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 88.363244][ T6900] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620 [ 88.363253][ T6900] RDX: 000000000000000f RSI: 00000000f73fcff4 RDI: 0000000000000000 [ 88.363261][ T6900] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 88.363270][ T6900] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 88.363279][ T6900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.363298][ T6900] [ 88.453175][ T6903] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 88.463115][ T6903] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 88.759056][ T6914] FAULT_INJECTION: forcing a failure. [ 88.759056][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.762599][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.1.255 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 88.762612][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.762619][ T6914] Call Trace: [ 88.762622][ T6914] [ 88.762626][ T6914] dump_stack_lvl+0x16c/0x1f0 [ 88.762643][ T6914] should_fail_ex+0x512/0x640 [ 88.762657][ T6914] _copy_to_user+0x32/0xd0 [ 88.762671][ T6914] simple_read_from_buffer+0xcb/0x170 [ 88.762687][ T6914] proc_fail_nth_read+0x197/0x270 [ 88.762702][ T6914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.762716][ T6914] ? rw_verify_area+0xcf/0x680 [ 88.762727][ T6914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.762740][ T6914] vfs_read+0x1de/0xc70 [ 88.762755][ T6914] ? __pfx___mutex_lock+0x10/0x10 [ 88.762769][ T6914] ? __pfx_vfs_read+0x10/0x10 [ 88.762785][ T6914] ? __fget_files+0x20e/0x3c0 [ 88.762803][ T6914] ksys_read+0x12a/0x240 [ 88.762815][ T6914] ? __pfx_ksys_read+0x10/0x10 [ 88.762829][ T6914] ? rcu_is_watching+0x12/0xc0 [ 88.762844][ T6914] __do_fast_syscall_32+0x73/0x120 [ 88.762859][ T6914] do_fast_syscall_32+0x32/0x80 [ 88.762873][ T6914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.762885][ T6914] RIP: 0023:0xf7fd6579 [ 88.762893][ T6914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.762902][ T6914] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 88.762911][ T6914] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 88.762916][ T6914] RDX: 000000000000000f RSI: 00000000f745cff4 RDI: 0000000000000000 [ 88.762922][ T6914] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 88.762927][ T6914] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 88.762932][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.762943][ T6914] [ 89.399085][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 89.495916][ T6923] 7 speed is unknown, defaulting to 1000 [ 89.704366][ T5993] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 90.435645][ T6942] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 91.414511][ T6949] random: crng reseeded on system resumption [ 91.439159][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.732403][ T6967] overlayfs: overlapping lowerdir path [ 92.986613][ T6978] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 94.025549][ T7003] FAULT_INJECTION: forcing a failure. [ 94.025549][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 94.053993][ T7003] CPU: 1 UID: 0 PID: 7003 Comm: syz.0.280 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 94.054023][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.054032][ T7003] Call Trace: [ 94.054036][ T7003] [ 94.054040][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 94.054057][ T7003] should_fail_ex+0x512/0x640 [ 94.054069][ T7003] ? __kvmalloc_node_noprof+0x122/0x600 [ 94.054084][ T7003] should_failslab+0xc2/0x120 [ 94.054094][ T7003] __kvmalloc_node_noprof+0x135/0x600 [ 94.054108][ T7003] ? nf_tables_addchain.constprop.0+0x5dc/0x1ab0 [ 94.054125][ T7003] ? nf_tables_addchain.constprop.0+0x5dc/0x1ab0 [ 94.054137][ T7003] nf_tables_addchain.constprop.0+0x5dc/0x1ab0 [ 94.054154][ T7003] ? __rcu_read_unlock+0x2b4/0x580 [ 94.054171][ T7003] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 94.054187][ T7003] ? __pfx_nft_chain_lookup+0x10/0x10 [ 94.054201][ T7003] ? __lock_acquire+0x5ca/0x1ba0 [ 94.054223][ T7003] ? nla_strcmp+0xff/0x130 [ 94.054237][ T7003] ? nft_table_lookup.part.0+0x1e3/0x230 [ 94.054251][ T7003] nf_tables_newchain+0x1d03/0x2830 [ 94.054267][ T7003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.054284][ T7003] ? __nla_validate_parse+0x571/0x2880 [ 94.054299][ T7003] ? __pfx_nf_tables_newchain+0x10/0x10 [ 94.054312][ T7003] ? __pfx___nla_validate_parse+0x10/0x10 [ 94.054331][ T7003] ? __nla_parse+0x40/0x60 [ 94.054346][ T7003] nfnetlink_rcv_batch+0x1908/0x2350 [ 94.054370][ T7003] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 94.054384][ T7003] ? preempt_schedule_common+0x44/0xc0 [ 94.054400][ T7003] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 94.054424][ T7003] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.054448][ T7003] ? __nla_parse+0x40/0x60 [ 94.054463][ T7003] nfnetlink_rcv+0x3c1/0x430 [ 94.054478][ T7003] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 94.054497][ T7003] netlink_unicast+0x53a/0x7f0 [ 94.054513][ T7003] ? __pfx_netlink_unicast+0x10/0x10 [ 94.054530][ T7003] netlink_sendmsg+0x8d1/0xdd0 [ 94.054546][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.054561][ T7003] ? __import_iovec+0x1c8/0x660 [ 94.054577][ T7003] ____sys_sendmsg+0xa95/0xc70 [ 94.054587][ T7003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.054596][ T7003] ? get_compat_msghdr+0x11a/0x170 [ 94.054614][ T7003] ___sys_sendmsg+0x134/0x1d0 [ 94.054627][ T7003] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.054659][ T7003] __sys_sendmsg+0x16d/0x220 [ 94.054672][ T7003] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.054692][ T7003] ? rcu_is_watching+0x12/0xc0 [ 94.054706][ T7003] __do_fast_syscall_32+0x73/0x120 [ 94.054721][ T7003] do_fast_syscall_32+0x32/0x80 [ 94.054735][ T7003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.054747][ T7003] RIP: 0023:0xf7f71579 [ 94.054755][ T7003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.054764][ T7003] RSP: 002b:00000000f505455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 94.054774][ T7003] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 94.054780][ T7003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.054785][ T7003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.054793][ T7003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.054800][ T7003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.054818][ T7003] [ 94.157527][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.457911][ T7012] FAULT_INJECTION: forcing a failure. [ 94.457911][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.461534][ T7012] CPU: 1 UID: 0 PID: 7012 Comm: syz.3.282 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 94.461547][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.461554][ T7012] Call Trace: [ 94.461557][ T7012] [ 94.461561][ T7012] dump_stack_lvl+0x16c/0x1f0 [ 94.461579][ T7012] should_fail_ex+0x512/0x640 [ 94.461592][ T7012] _copy_to_user+0x32/0xd0 [ 94.461606][ T7012] semctl_main+0xa34/0x2a30 [ 94.461620][ T7012] ? __pfx_semctl_main+0x10/0x10 [ 94.461650][ T7012] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 94.461667][ T7012] compat_ksys_semctl+0x2a8/0x360 [ 94.461678][ T7012] ? __pfx_compat_ksys_semctl+0x10/0x10 [ 94.461694][ T7012] ? rcu_is_watching+0x12/0xc0 [ 94.461708][ T7012] __do_fast_syscall_32+0x73/0x120 [ 94.461723][ T7012] do_fast_syscall_32+0x32/0x80 [ 94.461737][ T7012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.461749][ T7012] RIP: 0023:0xf7f46579 [ 94.461757][ T7012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.461766][ T7012] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000018a [ 94.461775][ T7012] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 94.461781][ T7012] RDX: 000000000000000d RSI: 0000000080000000 RDI: 0000000000000000 [ 94.461786][ T7012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.461791][ T7012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.461796][ T7012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.461807][ T7012] [ 94.510033][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.597444][ T7014] sp0: Synchronizing with TNC [ 94.602471][ T7014] FAULT_INJECTION: forcing a failure. [ 94.602471][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 94.606394][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.3.283 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 94.606407][ T7014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.606413][ T7014] Call Trace: [ 94.606417][ T7014] [ 94.606421][ T7014] dump_stack_lvl+0x16c/0x1f0 [ 94.606438][ T7014] should_fail_ex+0x512/0x640 [ 94.606449][ T7014] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 94.606466][ T7014] should_failslab+0xc2/0x120 [ 94.606476][ T7014] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 94.606490][ T7014] ? __alloc_skb+0x2b2/0x380 [ 94.606504][ T7014] __alloc_skb+0x2b2/0x380 [ 94.606516][ T7014] ? __pfx___alloc_skb+0x10/0x10 [ 94.606526][ T7014] ? __pfx_add_uevent_var+0x10/0x10 [ 94.606535][ T7014] ? trace_kmalloc+0x2b/0xd0 [ 94.606547][ T7014] ? __asan_memcpy+0x3c/0x60 [ 94.606560][ T7014] alloc_uevent_skb+0x7d/0x210 [ 94.606569][ T7014] ? __pfx_netdev_queue_namespace+0x10/0x10 [ 94.606584][ T7014] kobject_uevent_env+0x11cc/0x1870 [ 94.606596][ T7014] ? kernfs_remove_by_name_ns+0x9f/0x110 [ 94.606611][ T7014] __kobject_del+0x168/0x1f0 [ 94.606626][ T7014] kobject_put+0x327/0x5a0 [ 94.606641][ T7014] netdev_queue_update_kobjects+0x4e5/0x720 [ 94.606659][ T7014] netdev_unregister_kobject+0x168/0x540 [ 94.606675][ T7014] unregister_netdevice_many_notify+0x17eb/0x25a0 [ 94.606693][ T7014] ? rcu_is_watching+0x12/0xc0 [ 94.606706][ T7014] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 94.606723][ T7014] ? rtnl_net_dev_lock+0x146/0x360 [ 94.606736][ T7014] ? __pfx___mutex_lock+0x10/0x10 [ 94.606755][ T7014] unregister_netdevice_queue+0x305/0x3f0 [ 94.606769][ T7014] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 94.606784][ T7014] ? rtnl_net_dev_lock+0x28/0x360 [ 94.606795][ T7014] ? rtnl_net_dev_lock+0x146/0x360 [ 94.606806][ T7014] ? rtnl_lock+0x9/0x20 [ 94.606820][ T7014] ? rtnl_net_dev_lock+0x146/0x360 [ 94.606833][ T7014] unregister_netdev+0x1f/0x60 [ 94.606847][ T7014] sixpack_close+0x1e7/0x2f0 [ 94.606859][ T7014] ? __pfx_sixpack_close+0x10/0x10 [ 94.606872][ T7014] tty_ldisc_close+0x111/0x1a0 [ 94.606887][ T7014] tty_ldisc_kill+0x8e/0x150 [ 94.606900][ T7014] tty_ldisc_hangup+0x365/0x730 [ 94.606916][ T7014] __tty_hangup.part.0+0x3eb/0x890 [ 94.606935][ T7014] tty_ioctl+0x10bf/0x1610 [ 94.606950][ T7014] ? __pfx_tty_ioctl+0x10/0x10 [ 94.606971][ T7014] ? find_held_lock+0x2b/0x80 [ 94.606983][ T7014] ? hook_file_ioctl_common+0x145/0x410 [ 94.606997][ T7014] ? __fget_files+0x20e/0x3c0 [ 94.607013][ T7014] tty_compat_ioctl+0xb9/0x4d0 [ 94.607021][ T7014] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 94.607031][ T7014] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 94.607044][ T7014] __do_fast_syscall_32+0x73/0x120 [ 94.607059][ T7014] do_fast_syscall_32+0x32/0x80 [ 94.607073][ T7014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.607085][ T7014] RIP: 0023:0xf7f46579 [ 94.607093][ T7014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.607103][ T7014] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 94.607112][ T7014] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005437 [ 94.607118][ T7014] RDX: 0000000000001916 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.607124][ T7014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.607129][ T7014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.607134][ T7014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.607156][ T7014] [ 94.717759][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.736447][ T7016] netlink: 'syz.1.284': attribute type 2 has an invalid length. [ 94.738740][ T7016] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 94.791147][ T7014] [U] [ 94.974891][ T7031] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 95.320921][ T7034] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 95.719644][ T7042] FAULT_INJECTION: forcing a failure. [ 95.719644][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.723288][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.293 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 95.723302][ T7042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.723308][ T7042] Call Trace: [ 95.723312][ T7042] [ 95.723316][ T7042] dump_stack_lvl+0x16c/0x1f0 [ 95.723335][ T7042] should_fail_ex+0x512/0x640 [ 95.723349][ T7042] _copy_from_user+0x2e/0xd0 [ 95.723361][ T7042] copy_from_sockptr_offset+0x15c/0x1b0 [ 95.723378][ T7042] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 95.723393][ T7042] ? find_held_lock+0x2b/0x80 [ 95.723408][ T7042] do_tcp_getsockopt+0x165/0x26c0 [ 95.723421][ T7042] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 95.723435][ T7042] ? __lock_acquire+0x5ca/0x1ba0 [ 95.723445][ T7042] ? __lock_acquire+0xaa4/0x1ba0 [ 95.723453][ T7042] ? _parse_integer_limit+0x17f/0x1d0 [ 95.723469][ T7042] ? _kstrtoull+0x145/0x200 [ 95.723484][ T7042] ? __pfx__kstrtoull+0x10/0x10 [ 95.723497][ T7042] ? aa_label_sk_perm+0x19b/0x5a0 [ 95.723511][ T7042] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 95.723523][ T7042] ? __lock_acquire+0x5ca/0x1ba0 [ 95.723539][ T7042] ? get_pid_task+0xfc/0x250 [ 95.723549][ T7042] ? __pfx___might_resched+0x10/0x10 [ 95.723565][ T7042] ? aa_sk_perm+0x2f4/0xb10 [ 95.723578][ T7042] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.723590][ T7042] tcp_getsockopt+0xdf/0x100 [ 95.723601][ T7042] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 95.723617][ T7042] do_sock_getsockopt+0x3fc/0x800 [ 95.723634][ T7042] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 95.723648][ T7042] ? __fget_files+0x204/0x3c0 [ 95.723668][ T7042] __sys_getsockopt+0x12f/0x260 [ 95.723683][ T7042] __ia32_sys_getsockopt+0xbc/0x160 [ 95.723694][ T7042] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.723707][ T7042] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 95.723721][ T7042] __do_fast_syscall_32+0x73/0x120 [ 95.723736][ T7042] do_fast_syscall_32+0x32/0x80 [ 95.723750][ T7042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.723762][ T7042] RIP: 0023:0xf7f46579 [ 95.723771][ T7042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.723780][ T7042] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 95.723790][ T7042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 95.723796][ T7042] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080001040 [ 95.723801][ T7042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.723806][ T7042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.723812][ T7042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.723823][ T7042] [ 95.797973][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.178150][ T7061] ptrace attach of "/syz-executor exec"[5959] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 96.261516][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.651926][ T7079] FAULT_INJECTION: forcing a failure. [ 97.651926][ T7079] name failslab, interval 1, probability 0, space 0, times 0 [ 97.651964][ T7079] CPU: 1 UID: 0 PID: 7079 Comm: syz.3.305 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 97.651999][ T7079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.652007][ T7079] Call Trace: [ 97.652011][ T7079] [ 97.652015][ T7079] dump_stack_lvl+0x16c/0x1f0 [ 97.652033][ T7079] should_fail_ex+0x512/0x640 [ 97.652045][ T7079] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 97.652063][ T7079] should_failslab+0xc2/0x120 [ 97.652073][ T7079] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 97.652089][ T7079] ? drm_atomic_get_connector_state+0x231/0x740 [ 97.652103][ T7079] krealloc_noprof+0x1fb/0x380 [ 97.652119][ T7079] drm_atomic_get_connector_state+0x231/0x740 [ 97.652133][ T7079] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 97.652145][ T7079] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 97.652157][ T7079] ? modeset_lock+0x114/0x6e0 [ 97.652173][ T7079] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 97.652186][ T7079] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 97.652199][ T7079] ? drm_client_rotation+0x4d9/0x6a0 [ 97.652211][ T7079] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 97.652224][ T7079] ? trace_contention_end+0xdd/0x130 [ 97.652235][ T7079] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 97.652244][ T7079] ? __mutex_lock+0x1ca/0xb90 [ 97.652258][ T7079] ? __mutex_lock+0x1ca/0xb90 [ 97.652279][ T7079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.652298][ T7079] drm_client_modeset_commit_locked+0x14d/0x580 [ 97.652310][ T7079] drm_fb_helper_pan_display+0x32d/0xa40 [ 97.652330][ T7079] fb_pan_display+0x479/0x7d0 [ 97.652345][ T7079] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 97.652359][ T7079] bit_update_start+0x49/0x1f0 [ 97.652370][ T7079] fbcon_switch+0xbf5/0x14c0 [ 97.652383][ T7079] ? __pfx_fbcon_switch+0x10/0x10 [ 97.652399][ T7079] ? __pfx_bit_cursor+0x10/0x10 [ 97.652408][ T7079] ? fbcon_cursor+0x409/0x5f0 [ 97.652418][ T7079] ? is_console_locked+0x9/0x20 [ 97.652431][ T7079] ? con_is_visible+0x65/0x150 [ 97.652445][ T7079] redraw_screen+0x2be/0x760 [ 97.652458][ T7079] ? mark_held_locks+0x49/0x80 [ 97.652474][ T7079] ? __pfx_redraw_screen+0x10/0x10 [ 97.652487][ T7079] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 97.652504][ T7079] vc_do_resize+0xed0/0x10e0 [ 97.652525][ T7079] ? __pfx_vc_do_resize+0x10/0x10 [ 97.652539][ T7079] ? xfd_validate_state+0x5d/0x180 [ 97.652551][ T7079] ? save_fpregs_to_fpstate+0x144/0x270 [ 97.652568][ T7079] fbcon_do_set_font+0x449/0x940 [ 97.652588][ T7079] fbcon_set_font+0x9ed/0xb80 [ 97.652619][ T7079] ? __pfx_fbcon_set_font+0x10/0x10 [ 97.652633][ T7079] con_font_op+0x7fb/0xf50 [ 97.652645][ T7079] ? __pfx_con_font_op+0x10/0x10 [ 97.652655][ T7079] ? __might_fault+0xe3/0x190 [ 97.652669][ T7079] ? __might_fault+0xe3/0x190 [ 97.652682][ T7079] ? __might_fault+0x13b/0x190 [ 97.652701][ T7079] vt_compat_ioctl+0x369/0x4e0 [ 97.652715][ T7079] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 97.652727][ T7079] ? hook_file_ioctl_common+0x145/0x410 [ 97.652742][ T7079] ? __fget_files+0x20e/0x3c0 [ 97.652761][ T7079] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 97.652774][ T7079] tty_compat_ioctl+0x2ee/0x4d0 [ 97.652783][ T7079] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 97.652792][ T7079] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 97.652806][ T7079] __do_fast_syscall_32+0x73/0x120 [ 97.652821][ T7079] do_fast_syscall_32+0x32/0x80 [ 97.652835][ T7079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.652848][ T7079] RIP: 0023:0xf7f46579 [ 97.652855][ T7079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.652864][ T7079] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 97.652873][ T7079] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004b72 [ 97.652879][ T7079] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.652885][ T7079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.652890][ T7079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.652896][ T7079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.652909][ T7079] [ 98.000668][ T7091] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 98.397130][ T7098] ptrace attach of "/syz-executor exec"[5950] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 99.167038][ T40] audit: type=1326 audit(1743946578.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.3.318" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 100.109883][ T7129] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 100.748942][ T7145] ptrace attach of "/syz-executor exec"[5951] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 100.966521][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.995013][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.997679][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.000445][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.003018][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.019499][ T7149] 7 speed is unknown, defaulting to 1000 [ 101.183793][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.193065][ T7149] chnl_net:caif_netlink_parms(): no params data found [ 101.268002][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.269994][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.272000][ T7149] bridge_slave_0: entered allmulticast mode [ 101.274621][ T7149] bridge_slave_0: entered promiscuous mode [ 101.286490][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.292308][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.295217][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.297352][ T7149] bridge_slave_1: entered allmulticast mode [ 101.299724][ T7149] bridge_slave_1: entered promiscuous mode [ 101.331029][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.335049][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.360018][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.380089][ T7149] team0: Port device team_slave_0 added [ 101.383437][ T7149] team0: Port device team_slave_1 added [ 101.416711][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.422888][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.424980][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.431700][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.435482][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.437316][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.444441][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.478446][ T7149] hsr_slave_0: entered promiscuous mode [ 101.480396][ T7149] hsr_slave_1: entered promiscuous mode [ 101.482210][ T7149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.484727][ T7149] Cannot create hsr debugfs directory [ 101.571616][ T1145] bridge_slave_1: left allmulticast mode [ 101.573573][ T1145] bridge_slave_1: left promiscuous mode [ 101.579239][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.583968][ T1145] bridge_slave_0: left allmulticast mode [ 101.585568][ T1145] bridge_slave_0: left promiscuous mode [ 101.587202][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.822143][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.826200][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.829366][ T1145] bond0 (unregistering): Released all slaves [ 101.945471][ T7149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.979244][ T7149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.984986][ T7149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.994348][ T7149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.106694][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.120990][ T1145] ------------[ cut here ]------------ [ 102.122657][ T1145] Have pending ack frames! [ 102.125997][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.127838][ T1145] WARNING: CPU: 1 PID: 1145 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x5a/0x60 [ 102.127870][ T1145] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.127884][ T1145] CPU: 1 UID: 0 PID: 1145 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 102.136714][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.139788][ T1145] Workqueue: netns cleanup_net [ 102.141154][ T1145] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 102.142916][ T1145] Code: 31 ff e8 f9 ea 64 fe 31 c0 5b 5d c3 cc cc cc cc e8 ab 59 de f6 c6 05 0b f5 91 05 01 90 48 c7 c7 e0 2c e4 8c e8 07 e9 9d f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.148333][ T1145] RSP: 0018:ffffc90006c67958 EFLAGS: 00010282 [ 102.149948][ T1145] RAX: 0000000000000000 RBX: ffff88802a8a4c80 RCX: ffffffff817ad098 [ 102.152054][ T1145] RDX: ffff8880257e0000 RSI: ffffffff817ad0a5 RDI: 0000000000000001 [ 102.154319][ T1145] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 102.156441][ T1145] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 102.158698][ T1145] R13: ffffffff8adce5a0 R14: 0000000080000000 R15: 0000000000000000 [ 102.160813][ T1145] FS: 0000000000000000(0000) GS:ffff8880978b9000(0000) knlGS:0000000000000000 [ 102.163116][ T1145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.164950][ T1145] CR2: 000000008002b000 CR3: 000000004c9c0000 CR4: 0000000000352ef0 [ 102.167091][ T1145] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.169170][ T1145] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.171276][ T1145] Call Trace: [ 102.172184][ T1145] [ 102.172984][ T1145] idr_for_each+0x140/0x270 [ 102.174258][ T1145] ? __pfx_idr_for_each+0x10/0x10 [ 102.175612][ T1145] ? kfree+0x2b6/0x4d0 [ 102.176809][ T1145] ? kfree_const+0x55/0x60 [ 102.178000][ T1145] ieee80211_free_hw+0x9c/0x2d0 [ 102.179330][ T1145] ? kobject_put+0x210/0x5a0 [ 102.180611][ T1145] hwsim_exit_net+0x3fd/0x7d0 [ 102.181892][ T1145] ? __pfx_hwsim_exit_net+0x10/0x10 [ 102.183323][ T1145] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 102.184815][ T1145] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 102.186361][ T1145] ? __pfx_hwsim_exit_net+0x10/0x10 [ 102.187764][ T1145] ops_exit_list+0xb0/0x180 [ 102.188998][ T1145] cleanup_net+0x5c1/0xb30 [ 102.190246][ T1145] ? __pfx_cleanup_net+0x10/0x10 [ 102.191660][ T1145] ? rcu_is_watching+0x12/0xc0 [ 102.193050][ T1145] process_one_work+0x9cc/0x1b70 [ 102.194460][ T1145] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 102.196482][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 102.197969][ T1145] ? assign_work+0x1a0/0x250 [ 102.199253][ T1145] worker_thread+0x6c8/0xf10 [ 102.200553][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 102.201912][ T1145] kthread+0x3c2/0x780 [ 102.203023][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.204380][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.205701][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.206939][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.208170][ T1145] ? rcu_is_watching+0x12/0xc0 [ 102.209495][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.210743][ T1145] ret_from_fork+0x45/0x80 [ 102.211920][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.213187][ T1145] ret_from_fork_asm+0x1a/0x30 [ 102.214716][ T1145] [ 102.215719][ T1145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.217664][ T1145] CPU: 1 UID: 0 PID: 1145 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 102.220746][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.223574][ T1145] Workqueue: netns cleanup_net [ 102.224963][ T1145] Call Trace: [ 102.225872][ T1145] [ 102.226667][ T1145] dump_stack_lvl+0x3d/0x1f0 [ 102.227915][ T1145] panic+0x71c/0x800 [ 102.228987][ T1145] ? __pfx_panic+0x10/0x10 [ 102.230190][ T1145] ? show_trace_log_lvl+0x29b/0x3e0 [ 102.231583][ T1145] ? check_panic_on_warn+0x1f/0xb0 [ 102.232988][ T1145] ? ieee80211_free_ack_frame+0x5a/0x60 [ 102.234483][ T1145] check_panic_on_warn+0xab/0xb0 [ 102.235788][ T1145] __warn+0xf6/0x3c0 [ 102.236867][ T1145] ? ieee80211_free_ack_frame+0x5a/0x60 [ 102.238349][ T1145] report_bug+0x3c3/0x580 [ 102.239506][ T1145] ? ieee80211_free_ack_frame+0x5a/0x60 [ 102.240990][ T1145] handle_bug+0x184/0x210 [ 102.242145][ T1145] exc_invalid_op+0x17/0x50 [ 102.243400][ T1145] asm_exc_invalid_op+0x1a/0x20 [ 102.244723][ T1145] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 102.246389][ T1145] Code: 31 ff e8 f9 ea 64 fe 31 c0 5b 5d c3 cc cc cc cc e8 ab 59 de f6 c6 05 0b f5 91 05 01 90 48 c7 c7 e0 2c e4 8c e8 07 e9 9d f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.251604][ T1145] RSP: 0018:ffffc90006c67958 EFLAGS: 00010282 [ 102.253286][ T1145] RAX: 0000000000000000 RBX: ffff88802a8a4c80 RCX: ffffffff817ad098 [ 102.255454][ T1145] RDX: ffff8880257e0000 RSI: ffffffff817ad0a5 RDI: 0000000000000001 [ 102.257621][ T1145] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 102.259781][ T1145] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 102.261948][ T1145] R13: ffffffff8adce5a0 R14: 0000000080000000 R15: 0000000000000000 [ 102.264121][ T1145] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 102.265808][ T1145] ? __warn_printk+0x198/0x350 [ 102.267145][ T1145] ? __warn_printk+0x1a5/0x350 [ 102.268655][ T1145] ? ieee80211_free_ack_frame+0x59/0x60 [ 102.270205][ T1145] idr_for_each+0x140/0x270 [ 102.271480][ T1145] ? __pfx_idr_for_each+0x10/0x10 [ 102.272900][ T1145] ? kfree+0x2b6/0x4d0 [ 102.274053][ T1145] ? kfree_const+0x55/0x60 [ 102.275332][ T1145] ieee80211_free_hw+0x9c/0x2d0 [ 102.276711][ T1145] ? kobject_put+0x210/0x5a0 [ 102.278020][ T1145] hwsim_exit_net+0x3fd/0x7d0 [ 102.279341][ T1145] ? __pfx_hwsim_exit_net+0x10/0x10 [ 102.280803][ T1145] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 102.282296][ T1145] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 102.283850][ T1145] ? __pfx_hwsim_exit_net+0x10/0x10 [ 102.285331][ T1145] ops_exit_list+0xb0/0x180 [ 102.286602][ T1145] cleanup_net+0x5c1/0xb30 [ 102.287870][ T1145] ? __pfx_cleanup_net+0x10/0x10 [ 102.289264][ T1145] ? rcu_is_watching+0x12/0xc0 [ 102.290594][ T1145] process_one_work+0x9cc/0x1b70 [ 102.291980][ T1145] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 102.294054][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 102.295546][ T1145] ? assign_work+0x1a0/0x250 [ 102.296850][ T1145] worker_thread+0x6c8/0xf10 [ 102.298152][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 102.299574][ T1145] kthread+0x3c2/0x780 [ 102.300727][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.302017][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.303305][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.304609][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.305921][ T1145] ? rcu_is_watching+0x12/0xc0 [ 102.307278][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.308574][ T1145] ret_from_fork+0x45/0x80 [ 102.309825][ T1145] ? __pfx_kthread+0x10/0x10 [ 102.311112][ T1145] ret_from_fork_asm+0x1a/0x30 [ 102.312464][ T1145] [ 102.313777][ T1145] Kernel Offset: disabled [ 102.315031][ T1145] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:36:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000240113 RBX=0000000000000000 RCX=ffffffff8b700439 RDX=0000000000000000 RSI=ffffffff8dbeaaf3 RDI=ffffffff8bf45180 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6feccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f53500 CR3=00000000288fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001801 Opmask01=00000000000c00c0 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef7e363b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cb902c0ab986130 785c999f89efb028 4a87470000657669 74636120746f6e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56b302c0a1926130 7256939583e5b022 4087470000657663 7463612074656400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2340f732327256f4 4263357256c57296 82c770a28426a5f5 30c12545d7778473 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23182332324c5663 2040354700006330 635c623020193730 0000200266667545 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a7256939583e5ba 22408d4d0a0a6f7c 637e696b2a7e6564 0a002a2366667f6c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 234af738387256fe 42693f7256c57896 88cd70a28426afff 3ac12f45d77d8e73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854bd600 RDI=ffffffff9ae12bc0 RBP=ffffffff9ae12b80 RSP=ffffc90006c67268 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c25ca R15=dffffc0000000000 RIP=ffffffff854bd627 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008002b000 CR3=000000004c9c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000010898f RBX=0000000000000002 RCX=ffffffff8b700439 RDX=0000000000000000 RSI=ffffffff8dbeaaf3 RDI=ffffffff8bf45180 RBP=ffffed1003b55910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801daac880 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6feccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f53aba06690 CR3=0000000072894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000eec79 RBX=0000000000000003 RCX=ffffffff8b700439 RDX=0000000000000000 RSI=ffffffff8dbeaaf3 RDI=ffffffff8bf45180 RBP=ffffed1003b58000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dac0000 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6feccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080ef2000 CR3=0000000072894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000