last executing test programs: 14.442376819s ago: executing program 3 (id=321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xe, 0x0, &(0x7f0000000140)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0xf000, 0x0, 0x0) 14.440650101s ago: executing program 3 (id=323): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000140)=""/179, 0x2000, 0x1000, 0x401, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x483, 0x3261, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x33, 0xe0, 0x1, [{{0x9, 0x4, 0x0, 0xf0, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xac3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x30, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x3, 0x23, 0xfb, 0x8, 0x8}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43e}}, {0x21, &(0x7f00000002c0)=@string={0x21, 0x3, "57fcd44e9f657a8e747b1c8a9fe8bc807117ecbb22b071a66aeebe1b024158"}}, {0x41, &(0x7f0000000380)=@string={0x41, 0x3, "2b0ebe21a1cead43c3581e0fe10628319f8689574423f900ddc05c55e82c59c952aead2f8367bda48e2f9589af06080e2129267858ad7ba093adcd95abc87e"}}]}) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x14, &(0x7f0000000400)={0x20, 0x1, 0xd7, {0xd7, 0x8, "b14e5c6b713060bb8cbaa774b75f46021030d81886894e74cd903af2ddffc2c4314127fccbe850fa0a94732dbe466fe089f7b02fae38c906e107db9d1ef876b2a562cef218e3f294eb06c90123324041c1de9c06b0761c9cb45aaecb48f47852bf83d2ff4aec0bf331eceb166ffa394e0853b6ee70f7ed8b10ef1a596343f5feee83dc67e513c634a02baafb2c3dd6191906daba46cdcdaffd8e2a11536065aaf865c099c7a2989f3012cc269a9c67320685ba0bb126f53acf6052de1466b91a664148bb3f63b14df1c8d2c0922229c1f5715c5838"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}, &(0x7f0000000540)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0x4, "84"}, @main=@item_4={0x3, 0x0, 0xa, "d8c9b961"}, @local=@item_012={0x1, 0x2, 0x7, 'Z'}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6add, 0x6, 0x1, {0x22, 0x19d}}}}, &(0x7f0000000800)={0x18, &(0x7f0000000600)={0x40, 0x16, 0x99, "1af6d47d0048d4c5437579e575ec51394dbb4882dc981a25ab09486ed2c70eb8e5177dc251203de00329135336ecf48a09509871740a59be655ce7dc62cdfe4d816edbe2f407962ce0e0a31d2ce0a4cfcc60403e2f3f020fa89a5660e87ec69af355639bd398d67c59c57f5d5de30f1f1da71b0b7ce47f86574cb1c07c83d9081a3b49bdf7dc1fa8a0c3b7f5553dcb119a41d36b201866338f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000000740)={0x20, 0x1, 0x78, "cc9f20b34f0c8c7d34dc336a1c796f8d7196b4c77228d2e4106031e6484cada346fa79b095943e5cc28dd7558dfd238c8f4533f13970aa1a4a6f244fb392d8381cde6d4845865c6ef717b3aa03f1a9451fb9aafcf78f4985ed71e02e23c4e83c122877623687c9a4030168067853720a02947bf5605b76e2"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x1}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x3e, {0x84, 0x0, 0x2, 0x1}}}], 0x18}, 0x24004800) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) 13.84242421s ago: executing program 3 (id=328): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x802) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000040)={0x1, 0x100, 0xb, 0x1d6, 0x0, 0xfffffff8, 0x4, 0x2, 0xf, 0x100, 0x7f, 0x81, 0x7, 0x3}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xf1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40002000}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 2.887556929s ago: executing program 3 (id=346): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') renameat2(r1, &(0x7f0000000180)='./file0/../file0\x00', r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8000, 0x83, 0x1, 0x0}, &(0x7f0000000040)=0x10) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) syz_emit_ethernet(0xe8, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fcb20000b20000fe800000000000000000000000000000fe8000000000000000000000000000aa67"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 2.222158154s ago: executing program 1 (id=351): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) inotify_init1(0x80800) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/69}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000001c0)=""/188, &(0x7f00000002c0)=0xbc) 938.173217ms ago: executing program 1 (id=352): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r2, r1, 0x12, 0x4, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40246608, &(0x7f00000000c0)={0x2, 0x0, 0xfffffffffffffffc, 0x8, 0x3}) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r7, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) close_range(r8, 0xffffffffffffffff, 0x400000000000000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 886.253518ms ago: executing program 2 (id=355): prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x120) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x2, 0x145}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r2, 0x0, &(0x7f0000000180)="1cd2143a427c42333af5", 0xa, 0x40002003, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) sendfile64(r4, r0, &(0x7f00000001c0)=0x8000000000000000, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3a) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$ppp(0xffffff9c, &(0x7f0000000940), 0x40c00, 0x0) readv(r10, &(0x7f0000000d00)=[{0x0}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x30, r5, 0x8000000) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r9, 0x8925, &(0x7f0000000300)={0x8, 0x4, 0xffff, 0xfffe, 0x8, "080000e4dfffffff"}) 880.273611ms ago: executing program 0 (id=358): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'veth0_to_bridge\x00', 0x8000}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_clone3(&(0x7f0000000640)={0x4a00100, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)=0x0, {0x3e}, &(0x7f0000000500)=""/31, 0x1f, &(0x7f0000000540)=""/121, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000006c0)=0x3) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258260f01c2676ac7440f232012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b8010000000f01d90f326635002000000f300f01df66b805000000664ab900200000000a000f01c40f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000280)={0x1, 0x1, 0x7, r5, 0x10001}, 0xc) 865.972214ms ago: executing program 3 (id=359): syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="1e3d1ae5ecc2"}, 0x0, @default, 0x420, @void, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0x6, 0x1, 0xe394, 0x4a}}, @void, @val={0x5, 0x7, {0x4, 0xdd, 0x5, "a0a55394"}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000004c0), 0x1, 0x1e9880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x95c47000) ioctl$EVIOCGKEYCODE(r4, 0x80084504, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x2, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x5, &(0x7f0000000340)=[&(0x7f00000b9000/0x4000)=nil, &(0x7f0000185000/0x3000)=nil, &(0x7f0000f70000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000380)=[0x4, 0x40], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/263, 0x26, 0x107, 0x1, 0x0, 0x0, @void, @value}, 0x20) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 769.91837ms ago: executing program 2 (id=365): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$cec(0x0, 0x0, 0x210380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x3e1100, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="00000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x1f00, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x16a0, &(0x7f0000000480)={0x0, 0x80acab, 0x0, 0x4, 0x113}, &(0x7f00000002c0), &(0x7f0000000080)) 768.386276ms ago: executing program 1 (id=366): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x5, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000000)="8b", 0x1}], 0x1) 722.277756ms ago: executing program 0 (id=367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x360, 0x290, 0x290, 0x0, 0x290, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0xff], [0x0, 0x0, 0x700, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@ipv6={@mcast2, @local, [0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 722.082221ms ago: executing program 0 (id=368): prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x120) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x2, 0x145}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r2, 0x0, &(0x7f0000000180)="1cd2143a427c42333af5", 0xa, 0x40002003, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) sendfile64(r4, r0, &(0x7f00000001c0)=0x8000000000000000, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3a) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$ppp(0xffffff9c, &(0x7f0000000940), 0x40c00, 0x0) readv(r10, &(0x7f0000000d00)=[{0x0}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x30, r5, 0x8000000) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r9, 0x8925, &(0x7f0000000300)={0x8, 0x4, 0xffff, 0xfffe, 0x8, "080000e4dfffffff"}) 662.13972ms ago: executing program 1 (id=369): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000008c0)={{r3}, "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"}) r4 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0xcd, 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5392, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x280100, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) 422.217782ms ago: executing program 2 (id=370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (async) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000060a0904000000000000000002000000400004803c0001800900010068617368000000002c00028008000440000000000800014000000014080002400000000b080003400000001308000640000001ff0900010073797a30000000000900020073797a320000000014000000110001000000d75218980a36ccbc000000000000000000000000000000006e4d25efd77dc6a5ea9411ca0ab7f8"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES16=0x0], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x8d36}, {{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000240)=""/8, 0x8}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000002cc0)=""/152, 0x98}], 0x2}, 0x9}, {{&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002fc0)=[{0x0}, {&(0x7f0000002ec0)=""/187, 0xbb}, {&(0x7f0000002f80)=""/55, 0x37}], 0x3, &(0x7f0000003000)=""/30, 0x1e}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)=""/104, 0x68}}], 0x6, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x8d36}, {{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000240)=""/8, 0x8}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000002cc0)=""/152, 0x98}], 0x2}, 0x9}, {{&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002fc0)=[{0x0}, {&(0x7f0000002ec0)=""/187, 0xbb}, {&(0x7f0000002f80)=""/55, 0x37}], 0x3, &(0x7f0000003000)=""/30, 0x1e}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)=""/104, 0x68}}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5007, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8004) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtclass={0x68, 0x28, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x5, 0xffe0}, {0xa, 0x10}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xd2}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x46}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x82, 0x86}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtclass={0x68, 0x28, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x5, 0xffe0}, {0xa, 0x10}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xd2}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x46}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x82, 0x86}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) 421.895734ms ago: executing program 1 (id=371): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(r4, &(0x7f0000000100)='./bus\x00', 0x80700, 0x80) io_uring_enter(r4, 0x1e86, 0xd770, 0x61, &(0x7f0000000080)={[0x4, 0x101]}, 0x8) connect$unix(r1, &(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) 81.940004ms ago: executing program 0 (id=372): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) openat$incfs(r2, &(0x7f0000000080)='.log\x00', 0x2000, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x3, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x200001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x800000, 0x0, 0x6, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0xfffffffd, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff, 0x0, 0x0, 0x10}}}]}}]}, 0x45c}}, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r8, 0x800c0910, 0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000121401000000000000000027089b9c5f289f080008004b0013000000080003000007000008001500000000000800010000000000"], 0x38}}, 0x4000) 282.62µs ago: executing program 3 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800000100c0"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x5c, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) openat$tun(0xffffff9c, &(0x7f00000003c0), 0x400000, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000080)='signal_generate\x00', r4}, 0x10) ioctl$IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, &(0x7f0000000400)={0x9, 0x6, 0x5bc}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) rmdir(&(0x7f00000002c0)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 0s ago: executing program 2 (id=374): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003cc0)=@newtaction={0x138, 0x30, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{0x124, 0x1, [@m_ct={0x34, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xec, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}]}, {0xb6, 0x6, "9c612dd29bca0280d48e4432ae8559a5518bab85075a33771142e34c716e6ef53243e6f5a5812c01ef987233cd489cad6277534f66fa3fcb014c93d305adcf540125f09253d23f915290050000000000000070d720249591e64cb371d45ba33bba3ef8af5d89087a648f25ffa72cfbc7180890cb3529a2269606627fecdb3a0f96419fcac3dc0af0f6486abc37b9209c15ebfecdd9f8dbef2cf4653f3a37ebd53f52c7d2065152b86de177d6e348ff3d43b0"}, {0xc}, {0xc}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sysfs$1(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000003a40)=[{{&(0x7f00000015c0)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f0000001640)=""/83, 0x53}], 0x1}, 0xef6}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000540)}, {&(0x7f0000001740)=""/193, 0xc1}, {&(0x7f0000001840)=""/164, 0xa4}, {&(0x7f0000001900)=""/218, 0xda}, {&(0x7f0000003780)=""/230, 0xe6}, {&(0x7f0000001b00)=""/154, 0x9a}, {&(0x7f0000001bc0)=""/12, 0xc}], 0x7, &(0x7f0000001c40)=""/212, 0xd4}, 0x6}, {{&(0x7f0000001d40)=@hci, 0x80, &(0x7f0000003b00)=[{&(0x7f0000001dc0)=""/78, 0x4e}, {&(0x7f0000001e40)=""/176, 0xb0}, {&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/166, 0xa6}, {&(0x7f0000003e00)=""/4108, 0x100c}, {&(0x7f0000002140)}, {&(0x7f0000002080)=""/148, 0x94}, {&(0x7f0000003180)=""/113, 0x71}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000003880)=""/228, 0xe4}], 0xa, &(0x7f0000003240)=""/91, 0x5b}, 0x5}, {{&(0x7f00000032c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003340)=""/128, 0x80}, {&(0x7f00000033c0)=""/231, 0xe7}], 0x2, &(0x7f0000003500)=""/125, 0x7d}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003580)=""/28, 0x1c}, {&(0x7f00000035c0)=""/129, 0x81}, {&(0x7f0000000540)=""/47, 0x2f}], 0x3, &(0x7f0000003700)=""/81, 0x51}, 0xb989}, {{0x0, 0x0, &(0x7f0000003940), 0x0, &(0x7f0000003980)=""/153, 0x99}, 0x8}], 0x6, 0x97a9dae180b2d0e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f00000000c0)='reiserfs\x00', 0x2008400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x40, 0x6, 0x6, 0xfffffffffffffff3, 0x7, 0x3, 0xfffffffffffffff8, 0x1008}, &(0x7f0000000500)={0x2, 0x29, 0xfffffffffffdfffd, 0x8000, 0x287c, 0x5, 0x8000000000000000, 0x1ff}, &(0x7f0000000380)={0xfcd, 0x0, 0x7, 0x8, 0x20, 0x1, 0x5, 0x2}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x40, 0xc39]}, 0x8}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002140)='./file0\x00', &(0x7f00000059c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20505' (ED25519) to the list of known hosts. [ 41.761927][ T5932] cgroup: Unknown subsys name 'net' [ 41.868219][ T5932] cgroup: Unknown subsys name 'cpuset' [ 41.872095][ T5932] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.674663][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.622516][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.625457][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.627087][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.627886][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.630477][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.635585][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.637252][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.637935][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.640425][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.642179][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.644389][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.644900][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.645099][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.645391][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.646977][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.654435][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.655927][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.658049][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.672807][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.676550][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.908176][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.975554][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.025249][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.085514][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.087781][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.090075][ T5945] bridge_slave_0: entered allmulticast mode [ 46.092632][ T5945] bridge_slave_0: entered promiscuous mode [ 46.099394][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.101589][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.103881][ T5945] bridge_slave_1: entered allmulticast mode [ 46.106482][ T5945] bridge_slave_1: entered promiscuous mode [ 46.171172][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.173589][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.175851][ T5959] bridge_slave_0: entered allmulticast mode [ 46.178424][ T5959] bridge_slave_0: entered promiscuous mode [ 46.214461][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.216674][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.218980][ T5959] bridge_slave_1: entered allmulticast mode [ 46.221509][ T5959] bridge_slave_1: entered promiscuous mode [ 46.236082][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.270432][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.315275][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.317851][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.320443][ T5947] bridge_slave_0: entered allmulticast mode [ 46.323273][ T5947] bridge_slave_0: entered promiscuous mode [ 46.341795][ T5945] team0: Port device team_slave_0 added [ 46.347198][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.350311][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.357986][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.360551][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.363052][ T5947] bridge_slave_1: entered allmulticast mode [ 46.366171][ T5947] bridge_slave_1: entered promiscuous mode [ 46.369291][ T5945] team0: Port device team_slave_1 added [ 46.372381][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.459305][ T5959] team0: Port device team_slave_0 added [ 46.475085][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.477206][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.486681][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.495023][ T5959] team0: Port device team_slave_1 added [ 46.500488][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.503722][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.505830][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.514202][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.533850][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.639561][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.641887][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.644905][ T5950] bridge_slave_0: entered allmulticast mode [ 46.647444][ T5950] bridge_slave_0: entered promiscuous mode [ 46.650317][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.652436][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.660753][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.665151][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.667260][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.674913][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.679747][ T5947] team0: Port device team_slave_0 added [ 46.696293][ T5945] hsr_slave_0: entered promiscuous mode [ 46.698541][ T5945] hsr_slave_1: entered promiscuous mode [ 46.714891][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.717023][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.719180][ T5950] bridge_slave_1: entered allmulticast mode [ 46.721612][ T5950] bridge_slave_1: entered promiscuous mode [ 46.728708][ T5947] team0: Port device team_slave_1 added [ 46.762545][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.808671][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.829553][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.831684][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.840224][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.882408][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.884679][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.892282][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.898101][ T5959] hsr_slave_0: entered promiscuous mode [ 46.900254][ T5959] hsr_slave_1: entered promiscuous mode [ 46.902289][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.904996][ T5959] Cannot create hsr debugfs directory [ 46.945373][ T5950] team0: Port device team_slave_0 added [ 46.950588][ T5950] team0: Port device team_slave_1 added [ 47.029404][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.031624][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.039671][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.068180][ T5947] hsr_slave_0: entered promiscuous mode [ 47.071178][ T5947] hsr_slave_1: entered promiscuous mode [ 47.074167][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.077742][ T5947] Cannot create hsr debugfs directory [ 47.100740][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.103006][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.111326][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.238280][ T5950] hsr_slave_0: entered promiscuous mode [ 47.240722][ T5950] hsr_slave_1: entered promiscuous mode [ 47.242864][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.245416][ T5950] Cannot create hsr debugfs directory [ 47.352446][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.360562][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.367314][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.391886][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.425395][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.430604][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.435399][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.441509][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.479879][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.485841][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.489920][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.494701][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.533224][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.537504][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.550627][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.554532][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.589207][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.618644][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.631294][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.644764][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.654717][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.657017][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.660386][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.662575][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.672743][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.675015][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.682459][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.684961][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.693906][ T5962] Bluetooth: hci1: command tx timeout [ 47.695482][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.695809][ T5962] Bluetooth: hci2: command tx timeout [ 47.697414][ T5953] Bluetooth: hci3: command tx timeout [ 47.703325][ T5962] Bluetooth: hci0: command tx timeout [ 47.717255][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.737068][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.739696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.748196][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.759527][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.761694][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.792100][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.821517][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.824530][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.836030][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.838938][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.884634][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.899593][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.930639][ T5945] veth0_vlan: entered promiscuous mode [ 47.940889][ T5959] veth0_vlan: entered promiscuous mode [ 47.944929][ T5945] veth1_vlan: entered promiscuous mode [ 47.950962][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.955483][ T5959] veth1_vlan: entered promiscuous mode [ 47.984734][ T5945] veth0_macvtap: entered promiscuous mode [ 47.989049][ T5945] veth1_macvtap: entered promiscuous mode [ 47.992036][ T5959] veth0_macvtap: entered promiscuous mode [ 47.997663][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.002878][ T5959] veth1_macvtap: entered promiscuous mode [ 48.022550][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.025465][ T5947] veth0_vlan: entered promiscuous mode [ 48.031932][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.035596][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.039264][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.042880][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.048496][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.051195][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.053879][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.056525][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.062221][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.066160][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.070333][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.074378][ T5947] veth1_vlan: entered promiscuous mode [ 48.082200][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.085768][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088848][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.092084][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.119449][ T5950] veth0_vlan: entered promiscuous mode [ 48.141460][ T5950] veth1_vlan: entered promiscuous mode [ 48.153782][ T5947] veth0_macvtap: entered promiscuous mode [ 48.157017][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.159520][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.160607][ T5947] veth1_macvtap: entered promiscuous mode [ 48.174047][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.176503][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.190128][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.190235][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.192470][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.198467][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.201569][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.205904][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.209453][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.213754][ T5950] veth0_macvtap: entered promiscuous mode [ 48.225649][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.228764][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.231649][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.235049][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.238678][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.241552][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.241718][ T5950] veth1_macvtap: entered promiscuous mode [ 48.244341][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.250145][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.252715][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.255529][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.258117][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.271584][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.275201][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.278259][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.281320][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.284788][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.286542][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.287934][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.288683][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.303671][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.307575][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.311002][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.315475][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.318856][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.322859][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.328198][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.352149][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.356904][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.359634][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362464][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.382511][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.386236][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.406824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.410469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.426693][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.433149][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.450987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.454539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.489637][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.647991][ T6027] fuse: Unknown parameter 'grou00000000000000000000' [ 48.976204][ T6028] random: crng reseeded on system resumption [ 49.031954][ T6026] 9pnet_virtio: no channels available for device syz [ 49.433856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.523285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.523783][ T6036] tmpfs: Unknown parameter 's' [ 49.543317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.647410][ T6049] No control pipe specified [ 49.713337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 49.716138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.718820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.792902][ T5962] Bluetooth: hci0: command tx timeout [ 49.794830][ T67] Bluetooth: hci3: command tx timeout [ 49.794866][ T5951] Bluetooth: hci1: command tx timeout [ 49.799068][ T5953] Bluetooth: hci2: command tx timeout [ 50.160423][ T6061] netlink: 'syz.3.9': attribute type 12 has an invalid length. [ 50.529157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.531738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.534453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.537092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.928657][ T6073] fuse: Unknown parameter 'group_i00000000000000000000' [ 51.185646][ T6081] vlan2: entered promiscuous mode [ 51.187461][ T6081] erspan0: entered promiscuous mode [ 51.372818][ T6084] x_tables: duplicate underflow at hook 2 [ 51.489790][ T6084] mkiss: ax0: crc mode is auto. [ 51.512218][ T6088] mmap: syz.3.19 (6088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.529097][ T5951] Bluetooth: hci1: adv larger than maximum supported [ 51.543965][ T6091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.680460][ T6094] netlink: 'syz.2.21': attribute type 12 has an invalid length. [ 51.763817][ T6096] ======================================================= [ 51.763817][ T6096] WARNING: The mand mount option has been deprecated and [ 51.763817][ T6096] and is ignored by this kernel. Remove the mand [ 51.763817][ T6096] option from the mount to silence this warning. [ 51.763817][ T6096] ======================================================= [ 51.775877][ T6096] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 51.854080][ T5953] Bluetooth: hci2: command tx timeout [ 51.859995][ T5962] Bluetooth: hci0: command tx timeout [ 51.861826][ T5962] Bluetooth: hci3: command tx timeout [ 51.863877][ T5951] Bluetooth: hci1: command tx timeout [ 52.628017][ T6114] process 'syz.2.27' launched '/dev/fd/9' with NULL argv: empty string added [ 52.704162][ T6122] sp0: Synchronizing with TNC [ 52.730050][ T6123] Zero length message leads to an empty skb [ 52.732733][ T6123] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.765272][ T6124] netlink: 'syz.0.25': attribute type 12 has an invalid length. [ 52.907214][ T6116] [U] è [ 53.188812][ T6129] fuse: Unknown parameter 'group_i00000000000000000000' [ 53.693725][ T6142] FAULT_INJECTION: forcing a failure. [ 53.693725][ T6142] name failslab, interval 1, probability 0, space 0, times 1 [ 53.697668][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.0.31 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 53.697694][ T6142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.697701][ T6142] Call Trace: [ 53.697705][ T6142] [ 53.697709][ T6142] dump_stack_lvl+0x16c/0x1f0 [ 53.697728][ T6142] should_fail_ex+0x512/0x640 [ 53.697740][ T6142] ? __kmalloc_noprof+0xbf/0x510 [ 53.697757][ T6142] ? nla_strdup+0xc6/0x150 [ 53.697770][ T6142] should_failslab+0xc2/0x120 [ 53.697780][ T6142] __kmalloc_noprof+0xd2/0x510 [ 53.697798][ T6142] nla_strdup+0xc6/0x150 [ 53.697812][ T6142] nf_tables_newtable+0xdeb/0x1b40 [ 53.697825][ T6142] ? __pfx___nla_validate_parse+0x10/0x10 [ 53.697841][ T6142] ? __pfx_nf_tables_newtable+0x10/0x10 [ 53.697854][ T6142] ? __nla_parse+0x40/0x60 [ 53.697870][ T6142] nfnetlink_rcv_batch+0x1908/0x2350 [ 53.697912][ T6142] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 53.697928][ T6142] ? consume_skb+0xcc/0x100 [ 53.697945][ T6142] ? find_held_lock+0x2b/0x80 [ 53.697960][ T6142] ? __local_bh_enable_ip+0xa4/0x120 [ 53.697975][ T6142] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.697997][ T6142] ? __pfx___dev_queue_xmit+0x10/0x10 [ 53.698021][ T6142] ? __nla_parse+0x40/0x60 [ 53.698037][ T6142] nfnetlink_rcv+0x3c1/0x430 [ 53.698054][ T6142] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 53.698074][ T6142] netlink_unicast+0x53a/0x7f0 [ 53.698092][ T6142] ? __pfx_netlink_unicast+0x10/0x10 [ 53.698111][ T6142] netlink_sendmsg+0x8d1/0xdd0 [ 53.698128][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.698145][ T6142] ? __import_iovec+0x1c8/0x660 [ 53.698161][ T6142] ____sys_sendmsg+0xa95/0xc70 [ 53.698172][ T6142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.698181][ T6142] ? get_compat_msghdr+0x11a/0x170 [ 53.698200][ T6142] ___sys_sendmsg+0x134/0x1d0 [ 53.698214][ T6142] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.698244][ T6142] __sys_sendmsg+0x16d/0x220 [ 53.698258][ T6142] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.698277][ T6142] ? rcu_is_watching+0x12/0xc0 [ 53.698292][ T6142] __do_fast_syscall_32+0x73/0x120 [ 53.698313][ T6142] do_fast_syscall_32+0x32/0x80 [ 53.698329][ T6142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.698342][ T6142] RIP: 0023:0xf7fb1579 [ 53.698351][ T6142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 53.698360][ T6142] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 53.698371][ T6142] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000008000c2c0 [ 53.698378][ T6142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.698383][ T6142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.698389][ T6142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 53.698394][ T6142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.698407][ T6142] [ 53.944006][ T5953] Bluetooth: hci2: command tx timeout [ 53.945860][ T5953] Bluetooth: hci1: command tx timeout [ 53.947587][ T5953] Bluetooth: hci0: command tx timeout [ 53.949495][ T5962] Bluetooth: hci3: command tx timeout [ 54.567351][ T6165] sp0: Synchronizing with TNC [ 54.658007][ T6159] [U] è [ 55.112981][ T6179] fuse: Unknown parameter 'group_i00000000000000000000' [ 55.437302][ T6182] FAULT_INJECTION: forcing a failure. [ 55.437302][ T6182] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.441335][ T6182] CPU: 3 UID: 0 PID: 6182 Comm: syz.0.44 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 55.441349][ T6182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.441356][ T6182] Call Trace: [ 55.441360][ T6182] [ 55.441365][ T6182] dump_stack_lvl+0x16c/0x1f0 [ 55.441384][ T6182] should_fail_ex+0x512/0x640 [ 55.441399][ T6182] strncpy_from_user+0x3b/0x2e0 [ 55.441412][ T6182] bpf_prog_load+0x1aef/0x2490 [ 55.441427][ T6182] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.441452][ T6182] ? bpf_lsm_bpf+0x9/0x10 [ 55.441468][ T6182] __sys_bpf+0x433c/0x4d80 [ 55.441480][ T6182] ? __pfx___sys_bpf+0x10/0x10 [ 55.441492][ T6182] ? ksys_write+0x190/0x240 [ 55.441509][ T6182] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 55.441532][ T6182] ? fput+0x70/0xf0 [ 55.441542][ T6182] ? ksys_write+0x1b9/0x240 [ 55.441556][ T6182] ? __pfx_ksys_write+0x10/0x10 [ 55.441572][ T6182] __ia32_sys_bpf+0x76/0xe0 [ 55.441585][ T6182] __do_fast_syscall_32+0x73/0x120 [ 55.441602][ T6182] do_fast_syscall_32+0x32/0x80 [ 55.441618][ T6182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.441631][ T6182] RIP: 0023:0xf7fb1579 [ 55.441639][ T6182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.441649][ T6182] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 55.441659][ T6182] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800004c0 [ 55.441665][ T6182] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.441671][ T6182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.441677][ T6182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 55.441682][ T6182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.441694][ T6182] [ 55.629414][ T6194] FAULT_INJECTION: forcing a failure. [ 55.629414][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 55.634389][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.3.48 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 55.634403][ T6194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.634410][ T6194] Call Trace: [ 55.634413][ T6194] [ 55.634417][ T6194] dump_stack_lvl+0x16c/0x1f0 [ 55.634438][ T6194] should_fail_ex+0x512/0x640 [ 55.634451][ T6194] ? __kmalloc_noprof+0xbf/0x510 [ 55.634468][ T6194] ? mpi_alloc_limb_space+0x31/0x60 [ 55.634484][ T6194] should_failslab+0xc2/0x120 [ 55.634494][ T6194] __kmalloc_noprof+0xd2/0x510 [ 55.634513][ T6194] mpi_alloc_limb_space+0x31/0x60 [ 55.634529][ T6194] mpihelp_mul_karatsuba_case+0x116/0xc20 [ 55.634547][ T6194] ? mpihelp_divrem+0x66e/0x1420 [ 55.634564][ T6194] ? __pfx_mpihelp_mul_karatsuba_case+0x10/0x10 [ 55.634585][ T6194] mpi_powm+0xf63/0x1bf0 [ 55.634606][ T6194] ? __pfx_mpi_powm+0x10/0x10 [ 55.634625][ T6194] ? kasan_save_track+0x14/0x30 [ 55.634641][ T6194] ? __kasan_kmalloc+0xaa/0xb0 [ 55.634657][ T6194] dh_compute_value+0x1b1/0x3b0 [ 55.634673][ T6194] ? __pfx_dh_compute_value+0x10/0x10 [ 55.634687][ T6194] ? trace_kmalloc+0x2b/0xd0 [ 55.634697][ T6194] ? __virt_addr_valid+0x5e/0x590 [ 55.634713][ T6194] ? __phys_addr+0xc6/0x150 [ 55.634730][ T6194] __keyctl_dh_compute+0x7bf/0x10e0 [ 55.634748][ T6194] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 55.634778][ T6194] compat_keyctl_dh_compute+0x143/0x1c0 [ 55.634792][ T6194] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 55.634812][ T6194] ? ksys_write+0x1b9/0x240 [ 55.634827][ T6194] ? __pfx_ksys_write+0x10/0x10 [ 55.634843][ T6194] __do_compat_sys_keyctl+0x27b/0x440 [ 55.634857][ T6194] __do_fast_syscall_32+0x73/0x120 [ 55.634875][ T6194] do_fast_syscall_32+0x32/0x80 [ 55.634890][ T6194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.634903][ T6194] RIP: 0023:0xf711e579 [ 55.634912][ T6194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.634921][ T6194] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 55.634931][ T6194] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000100 [ 55.634938][ T6194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000180 [ 55.634943][ T6194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.634949][ T6194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 55.634955][ T6194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.634967][ T6194] [ 55.824678][ T6205] mkiss: ax0: crc mode is auto. [ 55.847269][ T6205] sp0: Synchronizing with TNC [ 55.938922][ T6201] [U] è [ 55.998154][ T6217] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 56.955950][ T6239] FAULT_INJECTION: forcing a failure. [ 56.955950][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.960460][ T6239] CPU: 3 UID: 0 PID: 6239 Comm: syz.3.59 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 56.960474][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.960481][ T6239] Call Trace: [ 56.960485][ T6239] [ 56.960489][ T6239] dump_stack_lvl+0x16c/0x1f0 [ 56.960507][ T6239] should_fail_ex+0x512/0x640 [ 56.960522][ T6239] _copy_from_iter+0x2a4/0x15b0 [ 56.960537][ T6239] ? __lock_acquire+0xaa4/0x1ba0 [ 56.960547][ T6239] ? __pfx__copy_from_iter+0x10/0x10 [ 56.960562][ T6239] ? find_held_lock+0x2b/0x80 [ 56.960577][ T6239] tun_get_user+0x13da/0x3b10 [ 56.960596][ T6239] ? __lock_acquire+0x5ca/0x1ba0 [ 56.960606][ T6239] ? __pfx_tun_get_user+0x10/0x10 [ 56.960620][ T6239] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 56.960637][ T6239] ? find_held_lock+0x2b/0x80 [ 56.960650][ T6239] ? tun_get+0x191/0x370 [ 56.960666][ T6239] tun_chr_write_iter+0xdc/0x210 [ 56.960681][ T6239] vfs_write+0x5ba/0x1180 [ 56.960697][ T6239] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.960713][ T6239] ? __pfx_vfs_write+0x10/0x10 [ 56.960726][ T6239] ? find_held_lock+0x2b/0x80 [ 56.960746][ T6239] ksys_write+0x12a/0x240 [ 56.960760][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 56.960775][ T6239] ? rcu_is_watching+0x12/0xc0 [ 56.960791][ T6239] __do_fast_syscall_32+0x73/0x120 [ 56.960808][ T6239] do_fast_syscall_32+0x32/0x80 [ 56.960824][ T6239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.960837][ T6239] RIP: 0023:0xf711e579 [ 56.960845][ T6239] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.960855][ T6239] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 56.960865][ T6239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 56.960871][ T6239] RDX: 00000000000000be RSI: 0000000000000000 RDI: 0000000000000000 [ 56.960877][ T6239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.960882][ T6239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.960888][ T6239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.960899][ T6239] [ 57.533692][ T6254] mkiss: ax0: crc mode is auto. [ 57.545613][ T6254] sp0: Synchronizing with TNC [ 57.812223][ T6248] [U] è [ 58.003278][ T6263] sp0: Synchronizing with TNC [ 58.523815][ T6278] netlink: 92 bytes leftover after parsing attributes in process `syz.2.71'. [ 58.608213][ T6284] FAULT_INJECTION: forcing a failure. [ 58.608213][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 58.612119][ T6284] CPU: 2 UID: 0 PID: 6284 Comm: syz.0.74 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 58.612133][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.612140][ T6284] Call Trace: [ 58.612144][ T6284] [ 58.612148][ T6284] dump_stack_lvl+0x16c/0x1f0 [ 58.612167][ T6284] should_fail_ex+0x512/0x640 [ 58.612181][ T6284] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 58.612202][ T6284] should_failslab+0xc2/0x120 [ 58.612213][ T6284] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 58.612228][ T6284] ? d_instantiate+0x77/0x90 [ 58.612238][ T6284] ? alloc_empty_file+0x55/0x1e0 [ 58.612251][ T6284] alloc_empty_file+0x55/0x1e0 [ 58.612263][ T6284] alloc_file_pseudo+0x13a/0x230 [ 58.612275][ T6284] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 58.612286][ T6284] ? do_raw_spin_unlock+0x172/0x230 [ 58.612302][ T6284] __anon_inode_getfile+0xf7/0x370 [ 58.612321][ T6284] anon_inode_getfd+0x52/0xb0 [ 58.612337][ T6284] __ia32_sys_fsopen+0x18f/0x240 [ 58.612349][ T6284] __do_fast_syscall_32+0x73/0x120 [ 58.612365][ T6284] do_fast_syscall_32+0x32/0x80 [ 58.612381][ T6284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.612394][ T6284] RIP: 0023:0xf7fb1579 [ 58.612402][ T6284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 58.612412][ T6284] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ae [ 58.612423][ T6284] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000001 [ 58.612429][ T6284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.612435][ T6284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.612440][ T6284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 58.612446][ T6284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.612458][ T6284] [ 58.953406][ T6294] netlink: 'syz.0.77': attribute type 12 has an invalid length. [ 59.075401][ T6296] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 59.883277][ T6311] sp0: Synchronizing with TNC [ 59.890648][ T6310] [U] è [ 60.323259][ T6321] fuse: Unknown parameter 'r' [ 60.325264][ T6321] 9pnet_fd: Insufficient options for proto=fd [ 60.761901][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 61.366826][ T6350] random: crng reseeded on system resumption [ 61.489652][ T6352] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 61.503533][ T6352] bond1: entered promiscuous mode [ 61.505930][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.523780][ T6352] bond1: (slave bridge1): making interface the new active one [ 61.526243][ T6352] bridge1: entered promiscuous mode [ 61.528752][ T6352] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 61.614098][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 61.831611][ T6349] syz.1.92 (6349) used greatest stack depth: 20216 bytes left [ 62.122736][ T6365] tipc: Enabling of bearer rejected, failed to enable media [ 63.944509][ T6385] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 63.957310][ T6389] nr0: entered promiscuous mode [ 64.133353][ T6415] mkiss: ax0: crc mode is auto. [ 64.194353][ T6415] sp0: Synchronizing with TNC [ 64.278493][ T6416] geneve2: entered promiscuous mode [ 64.280193][ T6416] geneve2: entered allmulticast mode [ 64.756195][ T6411] [U] è [ 64.772854][ T6438] netlink: 'syz.0.111': attribute type 3 has an invalid length. [ 65.307352][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 65.310548][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 65.763240][ T5954] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.117181][ T5954] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 66.120971][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.124149][ T5954] usb 7-1: Product: syz [ 66.125859][ T5954] usb 7-1: Manufacturer: syz [ 66.127727][ T5954] usb 7-1: SerialNumber: syz [ 66.131798][ T5954] usb 7-1: config 0 descriptor?? [ 66.867599][ T6497] netlink: 'syz.3.122': attribute type 32 has an invalid length. [ 66.870184][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 66.874731][ T6497] netlink: 'syz.3.122': attribute type 32 has an invalid length. [ 66.910740][ T6497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.924156][ T6497] 9pnet_fd: Insufficient options for proto=fd [ 67.520960][ T6525] block device autoloading is deprecated and will be removed. [ 67.557019][ T6528] netlink: 'syz.0.127': attribute type 13 has an invalid length. [ 67.687141][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.690002][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.774261][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.780286][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.825009][ T6528] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.827800][ T6528] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.830534][ T6528] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.833828][ T6528] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.205498][ T6531] 9pnet_virtio: no channels available for device syz [ 68.312316][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 68.388363][ T6560] netlink: 'syz.0.134': attribute type 32 has an invalid length. [ 68.391625][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 68.397245][ T6560] netlink: 'syz.0.134': attribute type 32 has an invalid length. [ 68.411069][ T6560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.419987][ T6560] 9pnet_fd: Insufficient options for proto=fd [ 68.441909][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 68.516320][ T5954] mos7840 7-1:0.0: required endpoints missing [ 68.532723][ T5954] usb 7-1: USB disconnect, device number 2 [ 68.636039][ T6574] netlink: 136 bytes leftover after parsing attributes in process `syz.0.137'. [ 68.638954][ T6574] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 68.660254][ T40] audit: type=1326 audit(1744920737.477:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.670526][ T40] audit: type=1326 audit(1744920737.477:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.682239][ T40] audit: type=1326 audit(1744920737.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 68.693790][ T40] audit: type=1326 audit(1744920737.487:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.700458][ T40] audit: type=1326 audit(1744920737.487:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 68.707412][ T40] audit: type=1326 audit(1744920737.487:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 68.714087][ T40] audit: type=1326 audit(1744920737.487:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.720869][ T40] audit: type=1326 audit(1744920737.487:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 68.727590][ T40] audit: type=1326 audit(1744920737.487:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.734700][ T40] audit: type=1326 audit(1744920737.487:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 68.902469][ T6586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.197243][ T6608] mkiss: ax0: crc mode is auto. [ 70.218605][ T6608] sp0: Synchronizing with TNC [ 70.821292][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.853231][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.964042][ T6603] [U] è [ 71.142611][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 73.144832][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 73.147608][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 73.895288][ T6633] netlink: 96 bytes leftover after parsing attributes in process `syz.1.154'. [ 74.058958][ T6635] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 74.058958][ T6635] [ 75.191541][ T6694] FAULT_INJECTION: forcing a failure. [ 75.191541][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 75.195736][ T6694] CPU: 3 UID: 0 PID: 6694 Comm: syz.1.171 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 75.195750][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.195757][ T6694] Call Trace: [ 75.195761][ T6694] [ 75.195765][ T6694] dump_stack_lvl+0x16c/0x1f0 [ 75.195784][ T6694] should_fail_ex+0x512/0x640 [ 75.195797][ T6694] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 75.195815][ T6694] should_failslab+0xc2/0x120 [ 75.195825][ T6694] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.195841][ T6694] ? d_instantiate+0x77/0x90 [ 75.195851][ T6694] ? alloc_empty_file+0x55/0x1e0 [ 75.195864][ T6694] alloc_empty_file+0x55/0x1e0 [ 75.195875][ T6694] alloc_file_pseudo+0x13a/0x230 [ 75.195887][ T6694] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 75.195898][ T6694] ? alloc_fd+0x471/0x7d0 [ 75.195915][ T6694] sock_alloc_file+0x50/0x210 [ 75.195931][ T6694] __sys_socket+0x1c0/0x260 [ 75.195942][ T6694] ? __pfx___sys_socket+0x10/0x10 [ 75.195956][ T6694] __do_compat_sys_socketcall+0x556/0x720 [ 75.195971][ T6694] ? __fget_files+0x20e/0x3c0 [ 75.195985][ T6694] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 75.196000][ T6694] ? fput+0x70/0xf0 [ 75.196013][ T6694] ? rcu_is_watching+0x12/0xc0 [ 75.196028][ T6694] __do_fast_syscall_32+0x73/0x120 [ 75.196046][ T6694] do_fast_syscall_32+0x32/0x80 [ 75.196061][ T6694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.196081][ T6694] RIP: 0023:0xf710e579 [ 75.196089][ T6694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.196099][ T6694] RSP: 002b:00000000f50fd3c0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 75.196109][ T6694] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f50fd3d0 [ 75.196115][ T6694] RDX: 00000000f7472ff4 RSI: 0000000080000040 RDI: 00000000f50fd42c [ 75.196121][ T6694] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 75.196126][ T6694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.196132][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.196144][ T6694] [ 75.341552][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 76.022376][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 76.113260][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.263192][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 76.267679][ T63] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 76.272161][ T63] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.278489][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.281747][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.285055][ T63] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.290600][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.293603][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.500384][ T63] usb 6-1: GET_CAPABILITIES returned 0 [ 76.502193][ T63] usbtmc 6-1:16.0: can't read capabilities [ 76.643566][ T6737] could not allocate digest TFM handle tgr160-generic [ 76.798787][ T24] usb 6-1: USB disconnect, device number 2 [ 77.404168][ T6749] ufs: Invalid option: "grpquota‡9 [ 77.404168][ T6749] ŽòÁ÷&3h|é•q͉O_Ò†o‰´c¨a1[ð+@ÍEJȨR [ 77.404168][ T6749] ›Á³®(T./file0" or missing value [ 77.411911][ T6749] ufs: wrong mount options [ 77.485657][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 77.489876][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 77.839769][ T6770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.898573][ T6809] xt_TCPMSS: Only works on TCP SYN packets [ 79.323673][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.204'. [ 79.430011][ T6815] syz.0.204: attempt to access beyond end of device [ 79.430011][ T6815] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 79.435070][ T6815] syz.0.204: attempt to access beyond end of device [ 79.435070][ T6815] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 79.440548][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.445459][ T6815] syz.0.204: attempt to access beyond end of device [ 79.445459][ T6815] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 79.449564][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.452606][ T6815] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 79.455361][ T6815] UDF-fs: Scanning with blocksize 512 failed [ 79.458198][ T6815] syz.0.204: attempt to access beyond end of device [ 79.458198][ T6815] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 79.462802][ T6815] syz.0.204: attempt to access beyond end of device [ 79.462802][ T6815] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 79.467869][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.471094][ T6815] syz.0.204: attempt to access beyond end of device [ 79.471094][ T6815] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 79.475403][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.478480][ T6815] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 79.480844][ T6815] UDF-fs: Scanning with blocksize 1024 failed [ 79.483424][ T6815] syz.0.204: attempt to access beyond end of device [ 79.483424][ T6815] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 79.487505][ T6815] syz.0.204: attempt to access beyond end of device [ 79.487505][ T6815] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 79.491574][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.495027][ T6815] syz.0.204: attempt to access beyond end of device [ 79.495027][ T6815] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 79.499190][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.502377][ T6815] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 79.505420][ T6815] UDF-fs: Scanning with blocksize 2048 failed [ 79.508178][ T6815] syz.0.204: attempt to access beyond end of device [ 79.508178][ T6815] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 79.512397][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 79.516458][ T6815] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 79.519455][ T6815] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 79.521855][ T6815] UDF-fs: Scanning with blocksize 4096 failed [ 79.524809][ T6815] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 79.895538][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 79.898407][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 79.943814][ T40] kauditd_printk_skb: 2621 callbacks suppressed [ 79.943832][ T40] audit: type=1326 audit(1744920748.767:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 80.209835][ T6858] FAULT_INJECTION: forcing a failure. [ 80.209835][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.214166][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.0.214 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 80.214181][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.214188][ T6858] Call Trace: [ 80.214192][ T6858] [ 80.214196][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 80.214222][ T6858] should_fail_ex+0x512/0x640 [ 80.214237][ T6858] _copy_to_iter+0x477/0x15a0 [ 80.214254][ T6858] ? __pfx__copy_to_iter+0x10/0x10 [ 80.214266][ T6858] ? __pfx___might_resched+0x10/0x10 [ 80.214282][ T6858] ? rcu_is_watching+0x12/0xc0 [ 80.214297][ T6858] ? __lock_acquire+0xaa4/0x1ba0 [ 80.214309][ T6858] simple_copy_to_iter+0x46/0x90 [ 80.214321][ T6858] __skb_datagram_iter+0x5a9/0x8c0 [ 80.214331][ T6858] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 80.214346][ T6858] skb_copy_datagram_iter+0x40/0x50 [ 80.214358][ T6858] unix_stream_read_actor+0x7b/0xc0 [ 80.214375][ T6858] unix_stream_read_generic+0xe15/0x28b0 [ 80.214393][ T6858] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 80.214409][ T6858] ? __pfx_autoremove_wake_function+0x10/0x10 [ 80.214429][ T6858] unix_stream_recvmsg+0x190/0x1c0 [ 80.214440][ T6858] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 80.214450][ T6858] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.214462][ T6858] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 80.214482][ T6858] sock_recvmsg+0x1f6/0x250 [ 80.214500][ T6858] ____sys_recvmsg+0x218/0x6b0 [ 80.214519][ T6858] ? __pfx_____sys_recvmsg+0x10/0x10 [ 80.214535][ T6858] ? import_iovec+0x109/0x140 [ 80.214552][ T6858] ? __lock_acquire+0x5ca/0x1ba0 [ 80.214563][ T6858] ___sys_recvmsg+0x114/0x1a0 [ 80.214577][ T6858] ? __pfx____sys_recvmsg+0x10/0x10 [ 80.214597][ T6858] ? get_pid_task+0xe0/0x250 [ 80.214611][ T6858] do_recvmmsg+0x568/0x740 [ 80.214626][ T6858] ? __pfx_do_recvmmsg+0x10/0x10 [ 80.214648][ T6858] ? __fget_files+0x20e/0x3c0 [ 80.214666][ T6858] __sys_recvmmsg+0x21c/0x280 [ 80.214680][ T6858] ? __pfx___sys_recvmmsg+0x10/0x10 [ 80.214695][ T6858] ? __pfx_ksys_write+0x10/0x10 [ 80.214711][ T6858] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 80.214726][ T6858] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.214741][ T6858] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 80.214757][ T6858] __do_fast_syscall_32+0x73/0x120 [ 80.214774][ T6858] do_fast_syscall_32+0x32/0x80 [ 80.214789][ T6858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.214802][ T6858] RIP: 0023:0xf7fb1579 [ 80.214811][ T6858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.214820][ T6858] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 80.214830][ T6858] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800034c0 [ 80.214837][ T6858] RDX: 000000000000013c RSI: 0000000000000700 RDI: 0000000000000000 [ 80.214842][ T6858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.214848][ T6858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.214854][ T6858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.214865][ T6858] [ 80.319161][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.845712][ T6880] FAULT_INJECTION: forcing a failure. [ 80.845712][ T6880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.851244][ T6880] CPU: 3 UID: 0 PID: 6880 Comm: syz.3.220 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 80.851264][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.851274][ T6880] Call Trace: [ 80.851280][ T6880] [ 80.851286][ T6880] dump_stack_lvl+0x16c/0x1f0 [ 80.851315][ T6880] should_fail_ex+0x512/0x640 [ 80.851337][ T6880] should_fail_alloc_page+0xe7/0x130 [ 80.851354][ T6880] prepare_alloc_pages+0x3c2/0x610 [ 80.851374][ T6880] ? rcu_is_watching+0x12/0xc0 [ 80.851397][ T6880] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 80.851425][ T6880] ? do_raw_spin_lock+0x12c/0x2b0 [ 80.851445][ T6880] ? find_held_lock+0x2b/0x80 [ 80.851468][ T6880] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.851493][ T6880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.851516][ T6880] ? stack_depot_save_flags+0x3e6/0xa50 [ 80.851540][ T6880] ? kasan_save_stack+0x42/0x60 [ 80.851565][ T6880] ? __lock_acquire+0xaa4/0x1ba0 [ 80.851577][ T6880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.851597][ T6880] ? policy_nodemask+0xea/0x4e0 [ 80.851614][ T6880] alloc_pages_mpol+0x1fb/0x550 [ 80.851631][ T6880] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.851644][ T6880] ? __page_table_check_ptes_set+0x1ae/0x420 [ 80.851670][ T6880] ? find_held_lock+0x2b/0x80 [ 80.851693][ T6880] alloc_pages_noprof+0x131/0x390 [ 80.851709][ T6880] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 80.851731][ T6880] get_free_pages_noprof+0xc/0x40 [ 80.851747][ T6880] kasan_populate_vmalloc_pte+0x2d/0x160 [ 80.851770][ T6880] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 80.851793][ T6880] __apply_to_page_range+0x617/0xd60 [ 80.851815][ T6880] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 80.851841][ T6880] ? __pfx___apply_to_page_range+0x10/0x10 [ 80.851862][ T6880] ? alloc_vmap_area+0x872/0x2970 [ 80.851885][ T6880] alloc_vmap_area+0x919/0x2970 [ 80.851913][ T6880] ? __pfx_alloc_vmap_area+0x10/0x10 [ 80.851938][ T6880] __get_vm_area_node+0x1a7/0x300 [ 80.851962][ T6880] __vmalloc_node_range_noprof+0x277/0x1540 [ 80.851983][ T6880] ? sock_hash_alloc+0x336/0x510 [ 80.852015][ T6880] ? sock_hash_alloc+0x336/0x510 [ 80.852041][ T6880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.852064][ T6880] ? rcu_is_watching+0x12/0xc0 [ 80.852083][ T6880] ? trace_kmalloc+0x2b/0xd0 [ 80.852100][ T6880] ? __kmalloc_node_noprof+0x23b/0x500 [ 80.852123][ T6880] ? trace_cap_capable+0x18d/0x200 [ 80.852140][ T6880] ? sock_hash_alloc+0x336/0x510 [ 80.852162][ T6880] __bpf_map_area_alloc+0xeb/0x190 [ 80.852183][ T6880] ? sock_hash_alloc+0x336/0x510 [ 80.852207][ T6880] sock_hash_alloc+0x336/0x510 [ 80.852240][ T6880] map_create+0x58f/0x1db0 [ 80.852265][ T6880] ? __pfx_map_create+0x10/0x10 [ 80.852279][ T6880] ? __might_fault+0xe3/0x190 [ 80.852302][ T6880] ? __might_fault+0xe3/0x190 [ 80.852324][ T6880] ? __might_fault+0x13b/0x190 [ 80.852357][ T6880] __sys_bpf+0x47cc/0x4d80 [ 80.852378][ T6880] ? __pfx___sys_bpf+0x10/0x10 [ 80.852397][ T6880] ? ksys_write+0x190/0x240 [ 80.852422][ T6880] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 80.852460][ T6880] ? fput+0x70/0xf0 [ 80.852476][ T6880] ? ksys_write+0x1b9/0x240 [ 80.852498][ T6880] ? __pfx_ksys_write+0x10/0x10 [ 80.852524][ T6880] __ia32_sys_bpf+0x76/0xe0 [ 80.852544][ T6880] __do_fast_syscall_32+0x73/0x120 [ 80.852570][ T6880] do_fast_syscall_32+0x32/0x80 [ 80.852595][ T6880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.852615][ T6880] RIP: 0023:0xf711e579 [ 80.852629][ T6880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.852644][ T6880] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 80.852661][ T6880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000600 [ 80.852671][ T6880] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.852680][ T6880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.852689][ T6880] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.852699][ T6880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.852719][ T6880] [ 81.055880][ T836] cfg80211: failed to load regulatory.db [ 81.194331][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 82.313905][ T40] audit: type=1326 audit(1744920751.137:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.320980][ T40] audit: type=1326 audit(1744920751.137:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.328801][ T40] audit: type=1326 audit(1744920751.137:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.336125][ T40] audit: type=1326 audit(1744920751.137:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.343080][ T40] audit: type=1326 audit(1744920751.137:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.349522][ T40] audit: type=1326 audit(1744920751.147:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.356392][ T40] audit: type=1326 audit(1744920751.147:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.363424][ T40] audit: type=1326 audit(1744920751.147:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.370013][ T40] audit: type=1326 audit(1744920751.147:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.234" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 82.494324][ T6930] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 83.465166][ T6967] mkiss: ax0: crc mode is auto. [ 83.474536][ T6967] sp0: Synchronizing with TNC [ 83.562517][ T6971] FAULT_INJECTION: forcing a failure. [ 83.562517][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 83.567737][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.0.247 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 83.567752][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.567758][ T6971] Call Trace: [ 83.567762][ T6971] [ 83.567766][ T6971] dump_stack_lvl+0x16c/0x1f0 [ 83.567785][ T6971] should_fail_ex+0x512/0x640 [ 83.567808][ T6971] ? __kmalloc_noprof+0xbf/0x510 [ 83.567827][ T6971] ? ovl_cache_entry_new+0x3d/0x730 [ 83.567838][ T6971] should_failslab+0xc2/0x120 [ 83.567848][ T6971] __kmalloc_noprof+0xd2/0x510 [ 83.567867][ T6971] ovl_cache_entry_new+0x3d/0x730 [ 83.567881][ T6971] ovl_fill_merge+0x601/0xa90 [ 83.567895][ T6971] ? __pfx_ovl_fill_merge+0x10/0x10 [ 83.567906][ T6971] offset_readdir+0x455/0x6d0 [ 83.567921][ T6971] ? apparmor_file_permission+0x251/0x400 [ 83.567936][ T6971] iterate_dir+0x293/0xb40 [ 83.567952][ T6971] ovl_dir_read_merged+0x21c/0x5d0 [ 83.567964][ T6971] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 83.567978][ T6971] ? __pfx_ovl_fill_merge+0x10/0x10 [ 83.567995][ T6971] ? kasan_save_track+0x14/0x30 [ 83.568012][ T6971] ovl_iterate+0x86c/0xe40 [ 83.568025][ T6971] ? __pfx_down_read_killable+0x10/0x10 [ 83.568037][ T6971] ? __pfx_ovl_iterate+0x10/0x10 [ 83.568048][ T6971] wrap_directory_iterator+0x9f/0xe0 [ 83.568062][ T6971] iterate_dir+0x293/0xb40 [ 83.568077][ T6971] __ia32_sys_getdents64+0x14d/0x2d0 [ 83.568092][ T6971] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 83.568106][ T6971] ? fput+0x70/0xf0 [ 83.568115][ T6971] ? __pfx_filldir64+0x10/0x10 [ 83.568130][ T6971] ? rcu_is_watching+0x12/0xc0 [ 83.568146][ T6971] __do_fast_syscall_32+0x73/0x120 [ 83.568163][ T6971] do_fast_syscall_32+0x32/0x80 [ 83.568179][ T6971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.568192][ T6971] RIP: 0023:0xf7fb1579 [ 83.568200][ T6971] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.568210][ T6971] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 83.568220][ T6971] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 83.568231][ T6971] RDX: 000000000000009a RSI: 0000000000000000 RDI: 0000000000000000 [ 83.568237][ T6971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.568242][ T6971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.568248][ T6971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.568261][ T6971] [ 83.611474][ T6956] [U] è [ 83.621733][ T6972] netlink: 'syz.1.246': attribute type 32 has an invalid length. [ 83.660795][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 83.666468][ T6972] netlink: 'syz.1.246': attribute type 32 has an invalid length. [ 83.704468][ T6976] FAULT_INJECTION: forcing a failure. [ 83.704468][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 83.708420][ T6976] CPU: 3 UID: 0 PID: 6976 Comm: syz.0.249 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 83.708433][ T6976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.708440][ T6976] Call Trace: [ 83.708444][ T6976] [ 83.708448][ T6976] dump_stack_lvl+0x16c/0x1f0 [ 83.708467][ T6976] should_fail_ex+0x512/0x640 [ 83.708479][ T6976] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 83.708497][ T6976] should_failslab+0xc2/0x120 [ 83.708507][ T6976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 83.708523][ T6976] ? __kernfs_new_node+0xd2/0x8a0 [ 83.708542][ T6976] __kernfs_new_node+0xd2/0x8a0 [ 83.708559][ T6976] ? kernfs_add_one+0x37d/0x840 [ 83.708570][ T6976] ? __pfx___kernfs_new_node+0x10/0x10 [ 83.708589][ T6976] ? find_held_lock+0x2b/0x80 [ 83.708603][ T6976] ? kernfs_root+0xee/0x2a0 [ 83.708622][ T6976] kernfs_new_node+0x13c/0x1e0 [ 83.708635][ T6976] __kernfs_create_file+0x53/0x350 [ 83.708651][ T6976] sysfs_add_file_mode_ns+0x207/0x3c0 [ 83.708670][ T6976] sysfs_create_file_ns+0x13d/0x1d0 [ 83.708685][ T6976] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 83.708700][ T6976] ? down_read+0x13d/0x480 [ 83.708710][ T6976] ? __pfx___up_read+0x10/0x10 [ 83.708721][ T6976] ? acpi_device_notify+0x351/0x480 [ 83.708740][ T6976] device_create_file+0xf2/0x1e0 [ 83.708754][ T6976] device_add+0x2bf/0x1a70 [ 83.708766][ T6976] ? __pfx_dev_set_name+0x10/0x10 [ 83.708778][ T6976] ? __pfx_device_add+0x10/0x10 [ 83.708789][ T6976] ? lockdep_init_map_type+0x5c/0x280 [ 83.708799][ T6976] ? __init_waitqueue_head+0xca/0x150 [ 83.708815][ T6976] netdev_register_kobject+0x182/0x3a0 [ 83.708833][ T6976] register_netdevice+0x13dc/0x2270 [ 83.708851][ T6976] ? __pfx_register_netdevice+0x10/0x10 [ 83.708870][ T6976] br_dev_newlink+0x6a/0x170 [ 83.708887][ T6976] ? __pfx_br_dev_newlink+0x10/0x10 [ 83.708904][ T6976] rtnl_newlink+0xc42/0x2000 [ 83.708923][ T6976] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.708938][ T6976] ? kernel_text_address+0x8d/0x100 [ 83.708956][ T6976] ? arch_stack_walk+0xa6/0x100 [ 83.708977][ T6976] ? rcu_is_watching+0x12/0xc0 [ 83.708991][ T6976] ? trace_cap_capable+0x18d/0x200 [ 83.709005][ T6976] ? find_held_lock+0x2b/0x80 [ 83.709017][ T6976] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.709030][ T6976] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.709043][ T6976] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 83.709058][ T6976] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.709073][ T6976] rtnetlink_rcv_msg+0x95b/0xe90 [ 83.709089][ T6976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.709110][ T6976] netlink_rcv_skb+0x16a/0x440 [ 83.709126][ T6976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.709141][ T6976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.709164][ T6976] ? netlink_deliver_tap+0x1ae/0xd30 [ 83.709181][ T6976] netlink_unicast+0x53a/0x7f0 [ 83.709198][ T6976] ? __pfx_netlink_unicast+0x10/0x10 [ 83.709217][ T6976] netlink_sendmsg+0x8d1/0xdd0 [ 83.709235][ T6976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.709251][ T6976] ? __import_iovec+0x1c8/0x660 [ 83.709268][ T6976] ____sys_sendmsg+0xa95/0xc70 [ 83.709280][ T6976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.709289][ T6976] ? get_compat_msghdr+0x11a/0x170 [ 83.709308][ T6976] ___sys_sendmsg+0x134/0x1d0 [ 83.709323][ T6976] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.709353][ T6976] __sys_sendmsg+0x16d/0x220 [ 83.709366][ T6976] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.709386][ T6976] ? rcu_is_watching+0x12/0xc0 [ 83.709400][ T6976] __do_fast_syscall_32+0x73/0x120 [ 83.709418][ T6976] do_fast_syscall_32+0x32/0x80 [ 83.709434][ T6976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.709447][ T6976] RIP: 0023:0xf7fb1579 [ 83.709455][ T6976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.709465][ T6976] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 83.709475][ T6976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 83.709481][ T6976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.709487][ T6976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.709492][ T6976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.709498][ T6976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.709510][ T6976] [ 84.423275][ T5850] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.563184][ T6996] capability: warning: `syz.1.256' uses 32-bit capabilities (legacy support in use) [ 84.574308][ T5850] usb 7-1: Using ep0 maxpacket: 8 [ 84.580896][ T5850] usb 7-1: unable to get BOS descriptor or descriptor too short [ 84.585871][ T5850] usb 7-1: config 8 interface 0 has no altsetting 0 [ 84.591017][ T5850] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 84.593956][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.596620][ T5850] usb 7-1: Product: syz [ 84.598012][ T5850] usb 7-1: Manufacturer: syz [ 84.599526][ T5850] usb 7-1: SerialNumber: syz [ 84.814961][ T5850] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.817258][ T5850] usb 7-1: selecting invalid altsetting 0 [ 84.832741][ T5850] snd-usb-audio 7-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 84.837356][ T5850] usb 7-1: USB disconnect, device number 3 [ 85.659904][ T7026] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 85.814762][ T7022] netfs: Couldn't get user pages (rc=-14) [ 86.044990][ T7034] mkiss: ax0: crc mode is auto. [ 86.082872][ T7034] sp0: Synchronizing with TNC [ 86.216781][ T7036] FAULT_INJECTION: forcing a failure. [ 86.216781][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 86.221006][ T7036] CPU: 2 UID: 0 PID: 7036 Comm: syz.2.268 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 86.221020][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.221027][ T7036] Call Trace: [ 86.221031][ T7036] [ 86.221035][ T7036] dump_stack_lvl+0x16c/0x1f0 [ 86.221054][ T7036] should_fail_ex+0x512/0x640 [ 86.221067][ T7036] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.221084][ T7036] should_failslab+0xc2/0x120 [ 86.221095][ T7036] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.221111][ T7036] ? __alloc_skb+0x2b2/0x380 [ 86.221126][ T7036] __alloc_skb+0x2b2/0x380 [ 86.221139][ T7036] ? __pfx___alloc_skb+0x10/0x10 [ 86.221156][ T7036] netlink_alloc_large_skb+0x69/0x130 [ 86.221173][ T7036] netlink_sendmsg+0x6a1/0xdd0 [ 86.221191][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.221207][ T7036] ? __import_iovec+0x1c8/0x660 [ 86.221223][ T7036] ____sys_sendmsg+0xa95/0xc70 [ 86.221237][ T7036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.221246][ T7036] ? get_compat_msghdr+0x11a/0x170 [ 86.221264][ T7036] ___sys_sendmsg+0x134/0x1d0 [ 86.221279][ T7036] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.221306][ T7036] __sys_sendmsg+0x16d/0x220 [ 86.221320][ T7036] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.221337][ T7036] ? rcu_is_watching+0x12/0xc0 [ 86.221352][ T7036] ? rcu_is_watching+0x12/0xc0 [ 86.221366][ T7036] __do_fast_syscall_32+0x73/0x120 [ 86.221383][ T7036] do_fast_syscall_32+0x32/0x80 [ 86.221399][ T7036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.221413][ T7036] RIP: 0023:0xf7f68579 [ 86.221421][ T7036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.221434][ T7036] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 86.221449][ T7036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 86.221459][ T7036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.221469][ T7036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.221478][ T7036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.221489][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.221505][ T7036] [ 86.297094][ C2] hpet_rtc_timer_reinit: 11 callbacks suppressed [ 86.297106][ C2] hpet: Lost 4 RTC interrupts [ 86.349150][ T7032] [U] è [ 86.574688][ T7045] ERROR: device name not specified. [ 86.579274][ T7045] 9pnet_fd: Insufficient options for proto=fd [ 87.541286][ T7084] FAULT_INJECTION: forcing a failure. [ 87.541286][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 87.546678][ T7084] CPU: 2 UID: 0 PID: 7084 Comm: syz.1.281 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 87.546693][ T7084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.546701][ T7084] Call Trace: [ 87.546704][ T7084] [ 87.546709][ T7084] dump_stack_lvl+0x16c/0x1f0 [ 87.546729][ T7084] should_fail_ex+0x512/0x640 [ 87.546741][ T7084] ? fs_reclaim_acquire+0xae/0x150 [ 87.546755][ T7084] ? p9_fcall_init+0x97/0x260 [ 87.546769][ T7084] should_failslab+0xc2/0x120 [ 87.546779][ T7084] __kmalloc_noprof+0xd2/0x510 [ 87.546795][ T7084] ? rcu_is_watching+0x12/0xc0 [ 87.546809][ T7084] ? trace_kmem_cache_alloc+0x28/0xc0 [ 87.546821][ T7084] p9_fcall_init+0x97/0x260 [ 87.546836][ T7084] p9_tag_alloc+0x161/0x640 [ 87.546852][ T7084] ? __pfx_p9_tag_alloc+0x10/0x10 [ 87.546866][ T7084] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.546885][ T7084] p9_client_prepare_req+0x19b/0x4d0 [ 87.546902][ T7084] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 87.546925][ T7084] p9_client_zc_rpc.constprop.0+0x104/0x880 [ 87.546938][ T7084] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 87.546950][ T7084] ? check_irq_usage+0xcb/0x920 [ 87.546970][ T7084] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 87.546983][ T7084] p9_client_read_once+0x3d2/0x860 [ 87.546996][ T7084] ? __pfx_p9_client_read_once+0x10/0x10 [ 87.547007][ T7084] ? lockdep_unlock+0x64/0xe0 [ 87.547019][ T7084] ? __lock_acquire+0xf7f/0x1ba0 [ 87.547031][ T7084] p9_client_read+0x13f/0x1b0 [ 87.547043][ T7084] v9fs_issue_read+0x117/0x380 [ 87.547059][ T7084] ? __pfx_v9fs_issue_read+0x10/0x10 [ 87.547076][ T7084] ? netfs_read_to_pagecache+0x499/0xd20 [ 87.547098][ T7084] netfs_read_to_pagecache+0x593/0xd20 [ 87.547123][ T7084] netfs_read_folio+0x419/0xf50 [ 87.547141][ T7084] ? reacquire_held_locks+0xcd/0x1f0 [ 87.547153][ T7084] ? filemap_fault+0x625/0x2740 [ 87.547177][ T7084] ? __up_read+0x1f8/0x750 [ 87.547195][ T7084] ? __pfx_netfs_read_folio+0x10/0x10 [ 87.547215][ T7084] filemap_read_folio+0xc5/0x2a0 [ 87.547230][ T7084] ? __pfx_filemap_read_folio+0x10/0x10 [ 87.547252][ T7084] filemap_fault+0x1cf4/0x2740 [ 87.547273][ T7084] ? __pfx_filemap_fault+0x10/0x10 [ 87.547300][ T7084] __do_fault+0x10a/0x490 [ 87.547317][ T7084] do_pte_missing+0x1031/0x3fb0 [ 87.547339][ T7084] ? mtree_range_walk+0x718/0xc00 [ 87.547360][ T7084] ? find_held_lock+0x2b/0x80 [ 87.547380][ T7084] __handle_mm_fault+0x103d/0x2a40 [ 87.547407][ T7084] ? __pfx___handle_mm_fault+0x10/0x10 [ 87.547440][ T7084] ? find_vma+0xbf/0x140 [ 87.547456][ T7084] ? __pfx_find_vma+0x10/0x10 [ 87.547475][ T7084] handle_mm_fault+0x3fe/0xad0 [ 87.547499][ T7084] do_user_addr_fault+0x7a6/0x1370 [ 87.547521][ T7084] ? rcu_is_watching+0x12/0xc0 [ 87.547541][ T7084] exc_page_fault+0x5c/0xc0 [ 87.547563][ T7084] asm_exc_page_fault+0x26/0x30 [ 87.547577][ T7084] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 87.547594][ T7084] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 a7 65 bc fc 48 83 fd 07 76 22 e8 2c 6a bc fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 58 65 bc fc 45 85 ff 0f 84 [ 87.547607][ T7084] RSP: 0018:ffffc90002b8fd00 EFLAGS: 00050246 [ 87.547620][ T7084] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84fed1f6 [ 87.547630][ T7084] RDX: ffff88802253a440 RSI: ffffffff84fed294 RDI: 0000000000000007 [ 87.547639][ T7084] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 87.547651][ T7084] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000080000080 [ 87.547660][ T7084] R13: ffff88806babe620 R14: 0000000000000fe0 R15: 0000000000000000 [ 87.547676][ T7084] ? strncpy_from_user+0xa6/0x2e0 [ 87.547690][ T7084] ? strncpy_from_user+0x144/0x2e0 [ 87.547712][ T7084] getname_flags.part.0+0x8f/0x550 [ 87.547733][ T7084] getname_flags+0x93/0xf0 [ 87.547753][ T7084] do_sys_openat2+0xb8/0x1d0 [ 87.547770][ T7084] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.547788][ T7084] ? __fget_files+0x20e/0x3c0 [ 87.547814][ T7084] __ia32_compat_sys_openat+0x16d/0x210 [ 87.547831][ T7084] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 87.547848][ T7084] ? ksys_write+0x1b9/0x240 [ 87.547870][ T7084] ? rcu_is_watching+0x12/0xc0 [ 87.547891][ T7084] __do_fast_syscall_32+0x73/0x120 [ 87.547916][ T7084] do_fast_syscall_32+0x32/0x80 [ 87.547937][ T7084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.547955][ T7084] RIP: 0023:0xf710e579 [ 87.547966][ T7084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.547979][ T7084] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 87.547993][ T7084] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 87.548002][ T7084] RDX: 0000000000004002 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.548011][ T7084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.548020][ T7084] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.548028][ T7084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.548049][ T7084] [ 87.680460][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 87.681639][ C2] hpet: Lost 8 RTC interrupts [ 87.714413][ C2] hpet: Lost 1 RTC interrupts [ 88.468268][ T7118] overlayfs: failed to resolve './file0': -2 [ 89.132627][ T7128] ipt_REJECT: ECHOREPLY no longer supported. [ 89.136338][ T7128] netfs: Couldn't get user pages (rc=-14) [ 89.152177][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 89.537172][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 89.693171][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 89.699685][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.703219][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.706344][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.710419][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.713646][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.718853][ T9] usb 7-1: config 0 descriptor?? [ 89.913402][ T7160] input: syz1 as /devices/virtual/input/input8 [ 89.956213][ T7160] Bluetooth: MGMT ver 1.23 [ 90.134482][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 90.140512][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input9 [ 90.151818][ T9] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 90.218196][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 90.438488][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 90.441379][ T7174] netlink: 'syz.2.298': attribute type 5 has an invalid length. [ 90.446949][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 90.456330][ T7174] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 90.459187][ T7174] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 90.461887][ T7174] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 90.464799][ T7174] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 90.467597][ T7174] geneve2: entered promiscuous mode [ 90.469519][ T7174] geneve2: entered allmulticast mode [ 90.627183][ T7180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.308'. [ 90.742510][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'. [ 90.843768][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 91.282557][ T7203] mkiss: ax0: crc mode is auto. [ 91.302689][ T7203] sp0: Synchronizing with TNC [ 91.303492][ T5954] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 91.399817][ T7197] [U] è [ 92.174962][ T7216] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.719010][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 92.736524][ T7238] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.738792][ T7238] overlayfs: failed to set xattr on upper [ 92.740563][ T7238] overlayfs: ...falling back to redirect_dir=nofollow. [ 92.742768][ T7238] overlayfs: ...falling back to index=off. [ 92.744721][ T7238] overlayfs: ...falling back to uuid=null. [ 92.746894][ T7238] overlayfs: conflicting lowerdir path [ 93.117916][ T9] usb 7-1: USB disconnect, device number 4 [ 93.183180][ T5850] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 93.354574][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.358022][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.361089][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.365217][ T5850] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.370364][ T7251] mkiss: ax0: crc mode is auto. [ 93.374451][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.397816][ T5850] usb 8-1: config 0 descriptor?? [ 93.620216][ T7266] gre0: Master is either lo or non-ether device [ 93.634065][ T1462] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 93.643278][ T7268] mkiss: ax0: crc mode is auto. [ 93.654681][ T7268] sp0: Synchronizing with TNC [ 93.755838][ T7264] [U] è [ 93.810650][ T5850] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 93.821597][ T5850] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.978538][ T7287] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 93.999612][ T7288] mkiss: ax0: crc mode is auto. [ 94.021300][ T7288] sp0: Synchronizing with TNC [ 94.114642][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 94.131695][ T9] usb 8-1: USB disconnect, device number 2 [ 94.140068][ T7283] [U] è [ 94.342660][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 94.349443][ T7298] unsupported nlmsg_type 40 [ 94.507163][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 103.934971][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'. [ 103.938523][ T7321] pim6reg1: entered promiscuous mode [ 103.940191][ T7321] pim6reg1: entered allmulticast mode [ 103.957312][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 103.983316][ T7325] bridge_slave_1 (unregistering): left allmulticast mode [ 103.986406][ T7325] bridge_slave_1 (unregistering): left promiscuous mode [ 103.989269][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.193191][ T5850] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 104.335951][ T7333] ip6tnl1: entered promiscuous mode [ 104.337787][ T7333] ip6tnl1: entered allmulticast mode [ 104.341398][ T7333] team0: Device ip6tnl1 is of different type [ 104.493233][ T5850] usb 8-1: Using ep0 maxpacket: 8 [ 104.498500][ T5850] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.504150][ T5850] usb 8-1: config 0 has no interface number 0 [ 104.508169][ T5850] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.514646][ T5850] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.520637][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.526648][ T5850] usb 8-1: config 0 descriptor?? [ 104.534918][ T5850] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 104.827290][ T5954] usb 8-1: USB disconnect, device number 3 [ 104.835304][ T1462] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 105.034563][ T7359] mkiss: ax0: crc mode is auto. [ 105.039649][ T7359] sp0: Synchronizing with TNC [ 105.226408][ T7357] [U] è [ 105.603221][ T1462] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 105.763230][ T1462] usb 8-1: Using ep0 maxpacket: 8 [ 105.766054][ T1462] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.769137][ T1462] usb 8-1: config 0 has no interface number 0 [ 105.771586][ T1462] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.776787][ T1462] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.781253][ T1462] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.785607][ T1462] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 105.789876][ T1462] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.795306][ T1462] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.799086][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.804077][ T1462] usb 8-1: config 0 descriptor?? [ 105.810028][ T1462] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 106.080987][ T1462] libceph: connect (1)[c::]:6789 error -101 [ 106.083021][ T1462] libceph: mon0 (1)[c::]:6789 connect error [ 106.113835][ T7372] ceph: No mds server is up or the cluster is laggy [ 106.202462][ T1021] usb 8-1: USB disconnect, device number 4 [ 106.216537][ T1021] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 106.232554][ T7403] mkiss: ax0: crc mode is auto. [ 106.251410][ T7403] sp0: Synchronizing with TNC [ 106.256428][ T7400] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 106.425804][ T7392] [U] è [ 106.693356][ T7416] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 106.761499][ T7420] block device autoloading is deprecated and will be removed. [ 106.767416][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.372'. [ 106.795274][ T7407] ================================================================== [ 106.797834][ T7407] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 106.800262][ T7407] Write of size 4064 at addr ffffc90003055020 by task syz.1.371/7407 [ 106.804183][ T7407] [ 106.804983][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.371 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 106.804997][ T7407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.805004][ T7407] Call Trace: [ 106.805008][ T7407] [ 106.805011][ T7407] dump_stack_lvl+0x116/0x1f0 [ 106.805029][ T7407] print_report+0xc3/0x670 [ 106.805039][ T7407] ? __virt_addr_valid+0x5e/0x590 [ 106.805056][ T7407] ? vrealloc_noprof+0x132/0x320 [ 106.805069][ T7407] kasan_report+0xe0/0x110 [ 106.805078][ T7407] ? vrealloc_noprof+0x132/0x320 [ 106.805092][ T7407] kasan_check_range+0xef/0x1a0 [ 106.805104][ T7407] __asan_memset+0x23/0x50 [ 106.805117][ T7407] vrealloc_noprof+0x132/0x320 [ 106.805130][ T7407] push_insn_history+0x2ae/0x6c0 [ 106.805148][ T7407] do_check_common+0xbd3/0xc2a0 [ 106.805167][ T7407] ? __pfx_do_check_common+0x10/0x10 [ 106.805182][ T7407] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.805197][ T7407] ? kfree+0x2b6/0x4d0 [ 106.805209][ T7407] ? bpf_check+0x6c86/0xb460 [ 106.805223][ T7407] ? bpf_check+0x7b2f/0xb460 [ 106.805238][ T7407] bpf_check+0x7f51/0xb460 [ 106.805256][ T7407] ? __pfx_bpf_check+0x10/0x10 [ 106.805270][ T7407] ? pcpu_alloc_noprof+0x949/0x1470 [ 106.805288][ T7407] ? __lock_acquire+0xaa4/0x1ba0 [ 106.805301][ T7407] ? find_held_lock+0x2b/0x80 [ 106.805314][ T7407] ? __asan_memset+0x23/0x50 [ 106.805327][ T7407] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 106.805338][ T7407] bpf_prog_load+0xe41/0x2490 [ 106.805350][ T7407] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.805360][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 106.805375][ T7407] ? bpf_lsm_bpf+0x9/0x10 [ 106.805403][ T7407] __sys_bpf+0x433c/0x4d80 [ 106.805418][ T7407] ? __pfx___sys_bpf+0x10/0x10 [ 106.805429][ T7407] ? __pfx___mm_populate+0x10/0x10 [ 106.805444][ T7407] ? do_futex+0x122/0x350 [ 106.805458][ T7407] ? __pfx_do_futex+0x10/0x10 [ 106.805475][ T7407] ? xfd_validate_state+0x5d/0x180 [ 106.805487][ T7407] ? rcu_is_watching+0x12/0xc0 [ 106.805500][ T7407] __ia32_sys_bpf+0x76/0xe0 [ 106.805512][ T7407] __do_fast_syscall_32+0x73/0x120 [ 106.805529][ T7407] do_fast_syscall_32+0x32/0x80 [ 106.805544][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.805558][ T7407] RIP: 0023:0xf710e579 [ 106.805566][ T7407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.805576][ T7407] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 106.805586][ T7407] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 106.805593][ T7407] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.805599][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.805605][ T7407] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 106.805611][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.805620][ T7407] [ 106.805623][ T7407] [ 106.894808][ T7407] The buggy address belongs to the virtual mapping at [ 106.894808][ T7407] [ffffc90003035000, ffffc90003057000) created by: [ 106.894808][ T7407] kvrealloc_noprof+0x7d/0xd0 [ 106.900160][ T7407] [ 106.900919][ T7407] The buggy address belongs to the physical page: [ 106.902883][ T7407] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x8005e pfn:0x4a025 [ 106.905604][ T7407] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 106.907789][ T7407] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 106.910371][ T7407] raw: 000000000008005e 0000000000000000 00000001ffffffff 0000000000000000 [ 106.912952][ T7407] page dumped because: kasan: bad access detected [ 106.914900][ T7407] page_owner tracks the page as allocated [ 106.916582][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 7407, tgid 7406 (syz.1.371), ts 106795132578, free_ts 106725660432 [ 106.921665][ T7407] post_alloc_hook+0x181/0x1b0 [ 106.923124][ T7407] get_page_from_freelist+0x135c/0x3920 [ 106.924830][ T7407] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 106.926647][ T7407] alloc_pages_mpol+0x1fb/0x550 [ 106.928157][ T7407] alloc_pages_noprof+0x131/0x390 [ 106.929760][ T7407] __vmalloc_node_range_noprof+0x732/0x1540 [ 106.931629][ T7407] __kvmalloc_node_noprof+0x2ff/0x600 [ 106.933358][ T7407] kvrealloc_noprof+0x7d/0xd0 [ 106.934835][ T7407] push_insn_history+0x2ae/0x6c0 [ 106.936322][ T7407] do_check_common+0xbd3/0xc2a0 [ 106.937824][ T7407] bpf_check+0x7f51/0xb460 [ 106.939231][ T7407] bpf_prog_load+0xe41/0x2490 [ 106.940693][ T7407] __sys_bpf+0x433c/0x4d80 [ 106.942116][ T7407] __ia32_sys_bpf+0x76/0xe0 [ 106.943548][ T7407] __do_fast_syscall_32+0x73/0x120 [ 106.945126][ T7407] do_fast_syscall_32+0x32/0x80 [ 106.946646][ T7407] page last free pid 5959 tgid 5959 stack trace: [ 106.948594][ T7407] __free_frozen_pages+0x69d/0xff0 [ 106.950216][ T7407] vfree+0x176/0x960 [ 106.951449][ T7407] __do_replace+0x7bc/0x9e0 [ 106.952987][ T7407] compat_do_replace+0x2a6/0x3c0 [ 106.954504][ T7407] do_ipt_set_ctl+0x5d3/0xae0 [ 106.955911][ T7407] nf_setsockopt+0x8a/0xf0 [ 106.957315][ T7407] ip_setsockopt+0xcb/0xf0 [ 106.958735][ T7407] tcp_setsockopt+0xa4/0x100 [ 106.960194][ T7407] do_sock_setsockopt+0x221/0x470 [ 106.961801][ T7407] __sys_setsockopt+0x1a0/0x230 [ 106.963351][ T7407] __do_compat_sys_socketcall+0x4fd/0x720 [ 106.965125][ T7407] __do_fast_syscall_32+0x73/0x120 [ 106.966740][ T7407] do_fast_syscall_32+0x32/0x80 [ 106.968272][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.970261][ T7407] [ 106.971029][ T7407] Memory state around the buggy address: [ 106.972862][ T7407] ffffc90003054f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.975345][ T7407] ffffc90003054f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.977856][ T7407] >ffffc90003055000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.980338][ T7407] ^ [ 106.981896][ T7407] ffffc90003055080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.984405][ T7407] ffffc90003055100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 106.986841][ T7407] ================================================================== [ 107.063213][ T7407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.066197][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.371 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 107.070670][ T7407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.075003][ T7407] Call Trace: [ 107.076397][ T7407] [ 107.077630][ T7407] dump_stack_lvl+0x3d/0x1f0 [ 107.079510][ T7407] panic+0x71c/0x800 [ 107.081085][ T7407] ? __pfx_panic+0x10/0x10 [ 107.082926][ T7407] ? rcu_is_watching+0x12/0xc0 [ 107.084919][ T7407] ? preempt_schedule_thunk+0x16/0x30 [ 107.086703][ T7407] ? vrealloc_noprof+0x132/0x320 [ 107.088221][ T7407] ? preempt_schedule_common+0x44/0xc0 [ 107.089951][ T7407] ? vrealloc_noprof+0x132/0x320 [ 107.091496][ T7407] check_panic_on_warn+0xab/0xb0 [ 107.093045][ T7407] end_report+0x107/0x170 [ 107.094421][ T7407] kasan_report+0xee/0x110 [ 107.095821][ T7407] ? vrealloc_noprof+0x132/0x320 [ 107.097375][ T7407] kasan_check_range+0xef/0x1a0 [ 107.098924][ T7407] __asan_memset+0x23/0x50 [ 107.100335][ T7407] vrealloc_noprof+0x132/0x320 [ 107.101860][ T7407] push_insn_history+0x2ae/0x6c0 [ 107.103426][ T7407] do_check_common+0xbd3/0xc2a0 [ 107.104988][ T7407] ? __pfx_do_check_common+0x10/0x10 [ 107.106648][ T7407] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.108280][ T7407] ? kfree+0x2b6/0x4d0 [ 107.109576][ T7407] ? bpf_check+0x6c86/0xb460 [ 107.111049][ T7407] ? bpf_check+0x7b2f/0xb460 [ 107.112508][ T7407] bpf_check+0x7f51/0xb460 [ 107.113932][ T7407] ? __pfx_bpf_check+0x10/0x10 [ 107.115446][ T7407] ? pcpu_alloc_noprof+0x949/0x1470 [ 107.117087][ T7407] ? __lock_acquire+0xaa4/0x1ba0 [ 107.118654][ T7407] ? find_held_lock+0x2b/0x80 [ 107.120145][ T7407] ? __asan_memset+0x23/0x50 [ 107.121611][ T7407] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 107.123195][ T7407] bpf_prog_load+0xe41/0x2490 [ 107.124682][ T7407] ? __pfx_bpf_prog_load+0x10/0x10 [ 107.126297][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 107.127832][ T7407] ? bpf_lsm_bpf+0x9/0x10 [ 107.129165][ T7407] __sys_bpf+0x433c/0x4d80 [ 107.130584][ T7407] ? __pfx___sys_bpf+0x10/0x10 [ 107.132089][ T7407] ? __pfx___mm_populate+0x10/0x10 [ 107.133725][ T7407] ? do_futex+0x122/0x350 [ 107.135089][ T7407] ? __pfx_do_futex+0x10/0x10 [ 107.136574][ T7407] ? xfd_validate_state+0x5d/0x180 [ 107.138191][ T7407] ? rcu_is_watching+0x12/0xc0 [ 107.139695][ T7407] __ia32_sys_bpf+0x76/0xe0 [ 107.141129][ T7407] __do_fast_syscall_32+0x73/0x120 [ 107.142742][ T7407] do_fast_syscall_32+0x32/0x80 [ 107.144279][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.146254][ T7407] RIP: 0023:0xf710e579 [ 107.147536][ T7407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.153467][ T7407] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 107.156039][ T7407] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 107.158488][ T7407] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.160933][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.163384][ T7407] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 107.165860][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.168306][ T7407] [ 107.169957][ T7407] Kernel Offset: disabled [ 107.171317][ T7407] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:12:55 Registers: info registers vcpu 0 CPU#0 RAX=00000000002612b1 RBX=0000000000000000 RCX=ffffffff8b703439 RDX=0000000000000000 RSI=ffffffff8dbeb567 RDI=ffffffff8bf45100 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90868110 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff874fcc CR3=000000004ca7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7492ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bdb65 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc90006236f00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3039636666667257 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ae12b00 R15=ffffffff854bdb00 RIP=ffffffff854bdb8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006be24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000099f RBX=0000000000000008 RCX=0000000000000008 RDX=0000000000000008 RSI=ffff88802267afd0 RDI=ffff88802267a440 RBP=ffffc9000792fa28 RSP=ffffc9000792f990 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff8e581ee8 R12=ffff88802267afd0 R13=0000000000000100 R14=ffff88802267a440 R15=ffff88802267a440 RIP=ffffffff8197f11d RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000099999999 CR3=000000002342e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=b7f05ad472adc7de 697b3d3c9d7fa4d2 b7f05ad472adc7de 697b3d3c9d7fa4d2 b7f05ad472adc7de 697b3d3c9d7fa4d2 b7f05ad472adc7de 697b3d3c9d7fa4d2 ZMM18=8ff185fa81b86bd9 25e012ca1d56c4b2 8ff185fa81b86bd9 25e012ca1d56c4b2 8ff185fa81b86bd9 25e012ca1d56c4b2 8ff185fa81b86bd9 25e012ca1d56c4b2 ZMM19=3906000000000000 0000000000000004 3906000000000000 0000000000000003 3906000000000000 0000000000000002 3906000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c 697b3d3c697b3d3c ZMM22=72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de 72adc7de72adc7de ZMM23=b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 b7f05ad4b7f05ad4 ZMM24=1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 1d56c4b21d56c4b2 ZMM25=25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca 25e012ca25e012ca ZMM26=81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 81b86bd981b86bd9 ZMM27=8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa 8ff185fa8ff185fa ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3806000038060000 3806000038060000 3806000038060000 3806000038060000 3806000038060000 3806000038060000 3806000038060000 3806000038060000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea00016a6d80 RCX=1ffffd40002d4db9 RDX=ffff8880448b8000 RSI=ffffffff81f8543b RDI=ffff8880404b01a8 RBP=ffffea00016a6dc8 RSP=ffffc900010df220 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200021be47 R13=ffffea00016a6d88 R14=04fff00000000001 R15=ffffea00016a6d90 RIP=ffffffff81bb3d01 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801e6018 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d91caa16a5d889ca 3433d53b8fcf0d60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47a8b20c6c77105f 589f96e6a11078ad ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 88b3bb10aff508fc b87166ba4e0d07db ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d78168748c58fe11 914da49d97db3d4f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 feee0000b29e0000 0041c3ce0041c715 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97cd00009f760000 a7dc0000c3a40000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ade600000041c373 000001e10041bdda ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001360041c71a c652000000000181 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 962aae5fe5fbff49 e9d1dec38eeaa263 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48e37253114d77d4 f53420c5d12093f6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000