last executing test programs: 5.730105969s ago: executing program 2 (id=641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x17, {0x17, 0x23, "29330dc778c7a4cae9a4c9e0bb43bbd22455bab204"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x28) 2.714739778s ago: executing program 2 (id=683): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000004c0)={'raw\x00', 0x2, [{0x88}, {}]}, 0x44) 2.629786446s ago: executing program 2 (id=685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="93e24a327200"/16, 0x10}, {&(0x7f0000000440)="bcc9b1590200de9e5de63a46ef5d84ff3ca4f7cfd6c5bd0380b5408b61548ab173f26bd12d5f6a4606c67a52f258e7756a", 0x31}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000000000000000000e229fba896747a086b26293f80e74228"]) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0x66) r10 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010a3c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}], 0x80, "a90f6f3a4ce8e0"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f000010b3c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0xbb, "052aa703554c90"}) ppoll(&(0x7f0000000180)=[{r8}], 0x1, 0x0, 0x0, 0x0) close(r10) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966309f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd27940415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b00"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r16, 0xd000943d, 0x0) 1.793370137s ago: executing program 3 (id=689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe6d}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@migrate={0x1b0, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@empty, @in=@multicast2, 0x4e20, 0x5, 0x4e23, 0xe90, 0x144f50721f9fdab5, 0xa0, 0x40, 0x3c, r2, r5}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x3503, 0x2, 0x0, 0x42, 0x5, 0x9, 0x10001}, {{@in=@remote, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3507, 0x1, 0x1, 0x7, 0x5, 0x6, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0xff}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0x19, 0x200, 0x1, 0x80}, {{@in6=@remote, 0x4d2, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x0, 0x1, 0xffffff18, 0x2, 0x7}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@private=0xa010100, 0x3504, 0x2, 0x3, 0x3, 0x81, 0x9, 0x43}]}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd28, 0x70bd28, 0x70bd26, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x4000084) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 1.679124961s ago: executing program 0 (id=692): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{}, {0xca, 0xc9, 0x2}}}, 0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x4, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0/file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0xfffffffc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x30}}, 0x0) 1.663725171s ago: executing program 2 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x1}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005340), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000780)={0x14}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) socket$inet_mptcp(0x2, 0x1, 0x106) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r8 = socket$inet(0x2, 0x3, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2f, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r9, 0x0, 0xa00369a4}, 0x38) shutdown(r8, 0x0) recvmmsg(r8, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.663524686s ago: executing program 1 (id=695): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000894, &(0x7f000072e000)={0xa, 0x4e22, 0xd, @local, 0x45}, 0x1c) listen(0xffffffffffffffff, 0xfff) 1.588976484s ago: executing program 0 (id=696): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xd389fcf086103dc0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) mmap(&(0x7f00003b4000/0x3000)=nil, 0x3000, 0x200000f, 0x30, r0, 0x2000) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000280)={0x2, 0x3, 0x6ebd}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x38}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup2(r8, r7) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x1, 0xffffffff, 0x90, 0xffffffffffffffff, 0x4, '\x00', r5, r8, 0x1, 0x2, 0x5, 0xe, @void, @value, @void, @value}, 0x50) iopl(0xb) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) 1.58871019s ago: executing program 1 (id=697): openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$adsp1(0xffffff9c, &(0x7f00000001c0), 0x181000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000240)) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.588456836s ago: executing program 3 (id=698): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(0x0, 0x0, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f000000b500), 0x2, 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$radio(&(0x7f0000000280), 0x0, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r3 = epoll_create1(0x0) (rerun: 32) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x10000004}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x7b, 0x8, 0x2, 0xdd, 0x5}, @generic={0x8b, 0x1, 0x7, 0xa, 0x8}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.469457791s ago: executing program 0 (id=699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) (fail_nth: 12) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfffffe14) 1.100027496s ago: executing program 1 (id=700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000e00)="9cc705617cf1949c82af6d31d9277d85b7a98c4dd2ae76fda956da065c2669213fa3e51a89a6841c2840adf01fbe6daa6bccbbee506d407ec9edb9bab7282ce7a6945256951599fbac8826d9ece108c4e0380ec6c440090be4a4cd4384b4e233c9d40908357087868899cf935cdc68eb62c5eb0348876574278273fe271e218e846936dedfb46ec85bb99b4ffa0466625ebd12f8281035ad036f45b6be438339b35e06732354558e03d035b7799dafc63d445e0cc7f2cadb890e9087f40ebdda7c5687ee07d60facd65e7101838cb9fa63e27140e3145b4c0e21ed20321eea9cea2948876643ed18f94752779f5b44e4"}, {&(0x7f0000002300)="828c167a101d0415e560eeb8285cff4dfd20ed709d2ecd81b5e4cfc61281904cb5678af05909f2a9bc8a70443ab8e3f358616edeb47cc0e216c305031668c98283333a7f9a7e2af3325af462ad97dedc5c188d624f2ee0b06acc480fa9463585662173847b3669d2beadc42a02bd513353166d8647a113af07777612a31cf9fa55c9a4012eb6b4c426e67749a77e5b8460ecfd34ba09993fda9ddd18b9a9344541ad2e3e3564cc4791e36e5baa5fdee797eb06bffb14bbd284ac9f93504b4ebb84b0dcd7ae281c2c44f314f4e0cdaa03c8852dc04e9fb52a5c161a6157b3c11ccb9184f532720c4bccb365a57d95ba68de3bb99dbc631b2a3b65413f91d57e12c6763cea67e8fba34003357d8b25435f23fd2681a921cbe888c7ff70875fe524a75c889a5038ab87bfdcecb3eeed3c29bcdb0df755ca710e105e5846298ef8d1294c5e8b00f469bd0768d6f7d055869053d729c6b45aee50b274f1a9db73b39d01014dbb9398605cf72f0e8bdbcb99c3b3fec7f2b99961db72573b8a59fa06bcfbfb830acd445f8efa4e59ed91d61b2023386fdba399ed23199e3d844b174bd9c1bb92838c70ef8523b908c4fca08d2c6b2862a6c1434fceb1616bc61b32558f7601cdd18b99cc53d4fb4d5d209a4ab6fc2e324bee114e81dcbb7d469d8bf1418e184b9b5d9b7d9af7a758d15e13ad2d64d3754d8479467ebab33e4215d5539f8ba8a59c37610713c7832b2a20e34b865c2d5d851fa182b0e8d9347a1a5705587dd1d397a1bfcc75cfe7c105c2b852c0791dbb712020b1c180952a0b174e53f3842dd5c061f4f8647699408dfe387b3ef3abbdaf5fff5df53de6d7c42ac3a9091d695239e3b970d4b0a02c1a06dac1b1beee72ebe960191541c7f5210d6b174e2a3eee21fcab431e66e29c76433dee5f1d6ada37878e277552005170565b599f535eb80a59cd8d1f7d0d01ea1c2af3a8f24e1ee2b26c215a516cc9b10a3125f34ddfaddedc2b160d7b768c6d846d66a9a6e48715729f48d4ca4b0ef07919949f7fa02f6102a2d67467540524c4f810512d8b4d05a5f7da5737d4bf127b9259eeda9312abb150c0d861290fe8a2f3bdeb8a9167a0b1f2338cc067177c766f9ecf3638050bae3ccdc6a4fdcd1548c45bcdddaa91223656e9298bea4919b884d51e51fd13ede32d6b7e75e53ba8a1d2b7312e3ecb91247c1e34cab7d8d1637d4a41b5309525975aa29ef9726362ea6d23cd0643eafb5baea2f89bb010b479ecff690d4788c22494e8d9f12e7ae30e4a95d42a383644eb6dba537cbe28c6043b0f17ac7cf5da2bf14b2ede29f822c5ddecac767d246c65481d3f946fb7dc5dcfc8f4aa4009b17a12c9188960f8a47da4f4d9f114d266773e068865b701e5688b2961a529ee5559d22e432224399fc6953ab8d8ef7bd2fbefc5ef13a4d9503c10d2d10dc00fd975947cfe113f99bbb308bfc4173d39d3ee011e723accf02a1bf88333ec5863f3397d4508880dc43816c0259afe6883f31dfcbdaa8122436aa13905eae62946efbdb4f0e1d0e4bba72c65b139f2c74b97662aab2632b428507ef57142dad3da02f22c90e6b8f5e2f8b4af03a76f12b5b5c6190b8a772dec7dbaefc5a19fdada8bbb272471df5db5d36cccac7886c8b8a9e3d556686f1c399232613d1a02fff99839e3d230ecbd4c27fe7f7a02c36a2b55d989e68814b5ee22e66fe70915c8b60725d61ccee0c089beb71e8086e21d2cf31294270ae07e81061095f21e17e035ce12ba5c6d6a012d442356ea47cc7f6076e38147814374948ffb1f348d1690fad5a0880f42fd148ef57a2fb8c5202ba2c14597eece6adbf0a3edd9fc0ca3c51b15ff050e9ae9c63a749881a12917746dd59282520f5396fe3e52aa60a43a2dca8595f37124fe87470863b18a3375332eece6980b27b690f7373a85548bcc0472fce727020c50419dca443ce0fcd441738bf426b9504dcf725867527e39df751e63f194dfb0874543354216bda34c31fc11e2a450b05b28776e5741ebfd769ab59bd64f54cc4eaac5da64e9936b58ce901d1457189ce8c58eb0a449c02f32598fc2b07b28dffa7817d88f093dee4c00c412b6c7ceb87ef17403aab6888ecd6be05088fa6e19385a629050a5691c574e25203ccc0ed92c93c8317f326d96c3c2598c682eb026aa3b96596de7ccab0a3bfd5f1dbdc8a3b2b5f1ecc5422363062adc1dd30fb0772f627f6d47e1b2ee21752b9354068d7351eaaca200c1e3465306c9c7a8c1c574348c36c5d48c633894b500c5755be285c9d7d78318368397f4850da48062961d664f4cab3ff94a6cc906d761fe069a3dd9406cb9c2c86fcc543734ad093a2f415e120788198cec7ca263683b60ae3f61d2cbb0e46e4800a3cc9220bac5d286219417d0a4d3087bddc5c1311cc68176868076fb43d0d52b6d3f33d0834aa53ed092cbbd435fa8f03042e80e56dcbc06a00de7f6d2c755aadcc8278c7f3ada39ae1634c4e1cf572f0e568614c326de63dd3672ec95f18ec06b1c50e65e040efcfa9678bac6b1fa353100ef1732154eb6c4db985d7cc954f0e273c14323363a8ca8643c74a80b46c90680331defb1fb1990f6b06890033a00cace56433e4db173f8757f2ecff9ea09afc5b47dac48f04209e8c81c31e5081979c98e8ba14d849ee09958cd52b2d1fba3c39746533c6f3100f857f239843c06ee31e41cd7660ca0830313b5043a63f28741c20cc7305b4983d75d515933793127aa6ce9fe2ed2d33de819d31396f97c76d7fb7e0652d1f93cb18c4f0a2a289348e137be1944c98ec6c71e40407fb0d2ffafb3bfc5aa03f68c9f04242596dee1d0a5604bffebbc6c8de5501c39e884f8f60ec5396e248b8a95d68da21b23ba55a5a80c22eb127aabb188fb4d517e85fa1839ad6dfbb61caae5bf25285e107229678a90b2c7ae3e2eb13df371ed8506423de237d3f9eb04f20a99d93f1e5e93d597726083a5e9201552ea5941b9356c575718f4777f0a5c8a9f8b3db1ae016781cd721e40e5daf816ed447e228a18b1b324b4c7eea95e152750958a449395d63402cd9fb41962ece6606378c53a1a362a27645d7870ddf380f26eafb6b5c61ea9458e0a89b588f5d07e100e2325e596b2c6ddab325e5911579d15c09ceb4a1a9170fbe4a0ff69e8ef608bfd378f0374945d4eb999bc1fde06670633d70308ef7d2636e461c8ffda44559fa78d3db2835b84340e9cacae2a1e3f5995358a81e828c5892e7ffe40aaac1fada63176239f981a67da28e86c88002c27833f1d26aaf3394c0a30b8a0f4ed3cb07d68880601a26b4f98e68e83b4de3b9833c5394230e30b646fb60dd424b2083e5dba0f768ea22b1d8724aa844cfd4bc4d7ee3247f6d873a7ff527c8e07562118450462a8379882bd8951563491bdf186a2fbebdf099327e5f7ea24e3ebbd8b8c093350da5eddb535eb8f66157c7cdd11cc08c8741b01f97ea79bc62150ebf6729d7faf9fcfce6ff90bb6d2a5caffb9462d3f082eff107b55684c7fe3f7f2f1f5e3124fbd46be54074137dc6e9be9e8b87e36bccb0962c6416a9000c9c0620a7abc371266fa77bee943ab9124495d1cb2f000c0b6e4aa05f11e0ccb7e826807582ca9cc83fd5effc10835d2d03ae65dacfcb05b9eb7e7795226f36cb1fa4ec84a68c3becef9aaa2ec0bd0dbbb96818c40d4a2ff66e8d248cc9b98d24af042c38cb46caebd3b27f1d09ddedb985eba8996e178decacb344a373f7237242ffe864712286db8410f112015fa089938ec164741a415d4d29e22126f5100946242fae5f78f81f12246765fb8f1d629d6f55765cb2892e3aff54f16b99178862ace673652853e35cc7219edf527a522acf07734234c8116219d408e3af191cbbbb7433868b758bae223c5434411ab950a48887c3977a825f2488cf4bc5b99c855fb4d607eb851f2f530c623b9db6df34ab3d1b93171fd30103f05c872f93387f5c76d2ad516e65768aa87b1237d66ddd61f7dc7f518f3e6146e5ae361079ebac09b715ae48bb4d033143632ece3134bb86255fb216bccae4b20e1874dd4cfb500eb2034cd115582c16d0756684846fc692f9c59c23fee97e601b01f509c1e85447e672fc8579c7d62e59c245f28dfbf255b2509862f4f18ab7b5b1c51ce9bfd86749d94b0c9ab16773deebbf9fdd5b4739edb2eaa30d2b1d42dabe615c6c5fbdbde34b41fda9e2085db13d63a6415c58476933f2585cd350d3f1a193f72b6ad79ce08bc3985f5b8afa35acadf90252388ad3ee6335397614e0909bc2e68f5965396d491af89510602a77e778322701545330d1969472d6cf3eeaf6ebf80fcbedf40256e39e011cdff8039117f459efe86ae0e9a6ade45e568e4ffeffea3605dcfc71461da44d639a469769b1b3e7639a4a854ef91a056bd32fa56a0c3ecadd4aec2dc113334d2c7250a092532dff919121c9e11348ec7392cc75e256233c7c9647088c9028fc3ecf6e5c2b955226d596ca22a64e024f65464dc38c218ccdada0eeda68ecd45fe48c24e6866ec2c89327e13b57136af3093e9bf0a8a53cc48c5f7362b909b59ee0dd8c6fd49c4f15f24b56575152dfda56a54d0125348718845c30abda667923d0e441f603013480bee998f154a604e5ac757d1b6ca1bdf25886683923576b445b9a8c568c2ae0492cb8caafba0ba426d01fc52be3808fca89be4ac6a5f9fa87cf9de0ddba59665a2a9ae567548bbbaf7326b400e730311105ab6c9e67652c29827092d274401a9396aa557444ed8826ac882305d32f7b407cc35f209d2a8e2934beef91e107c30dff7877f7c0d833164e3062bd27b1e6666eee1804774281ae630e4b37882a2c8119de8e2377de1f675d75a50c924c1f3dd2df5defc0eef95f42a689a0e24a62c18923c64e9c7fa9af34969a4d5b63bbce2891e9e4783838b31f101f01572d29ac8b1f49390eecf89f0d40e89e64ee6e376a3a21d953d6cca7b0750f1f5727b2831aea0e91344d6b7abe98a9f3bb2feae4591633623c6130b65d105458cb0c8f094982741b23d6648661ae654ab7e8873ff6eaac15f1b7b5962f3dc0f28f89c1dc12c1178ec8fe46cdd8939f9271b174c121b77b713aeceb072a6d6c60aed0428349907f4b01acae924e63112ea55acf6408c017ae9f3d82a896d6f00a8e15467ca4cff420b7319d54e87399e68dd9078efbf38adeeb5ee94ff6463403c52c0bc64ec9def1bb1526d004e14e4a377250226e065fc4312c2b8301a41d1ece463372d82d649ce8eaf46532724bf3bd1105300c65518761cfbcd61185472c9089534d6f5a6bcb07c124bc55db95f1678a69a632c227c5c937d9276e6bad1423b70543ce245cd817562631edfe388b30e3f5502409b4677e189d4006d37f20628df87e1c4a418a85a75439f4e910fd0df7c10b68ccf52d14d9654563fe0e49d6f6fe797b4d31fd68d1920c3b7c3ef63716a25638436ce1e5422227b21a999293a63223aacab8d0174fc2977c9778c9026cd29b19a1d992a26ce10a2ccab9ad4985a3fc2cd37fc1ba435452c86c02e39b0ddfd03aef969a2ab1b95cf2d951543fe4232219e16adf6a970e5c66aa472b43f63d1161ab684666d74eb94097b3c28a5215e6dcc37a94b1c952d80b24b9e03e3996a036274df1b76704291422142cfb702f04b8746d126f94e60b0684326ede86efb23b775ee30d897f87ba91132e1b841b7374b0f59fa3e89f26ad13684f5032e4d8232c042db700b568d877af2ad593a57e83ea4840e727b7d1e69120da8"}, {&(0x7f00000009c0)="e5ebe4df6ae6e3e6e3f825e7b577830eeb026ad08858c088f6b18e6ae2cacc9eb7970277a0bd8d49ff6741aa826e16632564af778a31a9ab23968a4fc66e9d4cdee5cd4a42b7fcbbfa6b4707e4c98e46d4716fe68adc7058bee422c96ae399a5a4f89d47c5e9e05176074967e64835399ab5459831459cccdf151dadd5711f15aaaae65ffa065131f3db55755ee886d07916f8d54e1e646066b65b71f9b3699f2ef26788e135b80eec4521827051d4fe698b7fde6eed"}, {&(0x7f0000004400)="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"}, {&(0x7f0000000f00)="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"}, {&(0x7f0000000940)="ba3e2708e327daba99707e77d6e55340ee36f4fc1e223fecfc245212f2cd3e1dc6d053f58b35bf6f26be4297b578c61bbe25a4352d30484a7c46c44243cb22538e2e98a67e341e2b719f998ec52ff8496bc8a86c9d47fdbd7b4b54e1777e32ff2629e3a637a26b366f5478570d0170cd7e3c5aa6c46685dc5a32"}, {&(0x7f0000000bc0)="60aa1af834853e38f81662a8d4c51d2f83c501beb0dea180cf83b51fe1a3e5f885cce549e30567336717aadab3c247721edcd5f27adf8a8287321d92f9a27c35dedc0ff91b97fe2271077005f5dc5e679eec33470e1ca047fb67045eadfaad71a75824fbc2707695c2503ddd3e86296bb1576bbd605169f7001d4741f978a88ec384"}], 0x9be348678f06800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x31, 0x1, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$vhost_vsock(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xffffffffffffff09, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000880), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r1, 0x400454da, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r11, &(0x7f0000000300)='(', 0x1) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x80004d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x0, 0xfffffffc, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x40000024, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe660, 0x40009, 0x7, 0xe338, 0x7fff, 0x4c74, 0x8f00, 0x63e, 0x0, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x2, 0x7, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x3, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0xf, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x32, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x200, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x296, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x8, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x2, 0x1, 0x7, 0x6, 0x3, 0x48c93690, 0x2, 0x100], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x2f9, 0x9, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x8, 0xf, 0x1008, 0x9, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x7, 0x4, 0x2950bfaf, 0x5, 0xa2, 0x6, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0xfffff548, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x1000, 0x938, 0x6, 0x6, 0x0, 0x5, 0x81, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0x3, 0x5, 0x2, 0x205, 0x1, 0x2, 0xe, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0xb602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x4000005, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x204, 0xffff3441, 0xfff]}, 0x45c) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r4, @ANYRES16=r8, @ANYRES32=0x41424344, @ANYBLOB="c4400000907800f9494e871a9c4be317bfcb00080a0800000000000000000b14f6fea52e"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xfffffffffffffffe, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) dup3(0xffffffffffffffff, r2, 0x80000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={r12}, 0x4) ioperm(0x0, 0x5, 0xa) sendmmsg$nfc_llcp(r1, &(0x7f0000000d00)=[{&(0x7f0000000b40)={0x27, 0x0, 0x1, 0x6, 0x9f, 0x1, "c1c9224e5d1107ca92cde058f24d7c75c4c47dc2eebebafaee8c67adc56e2cb4b9f9b067b6e240046bd5db608e70576bb2746d98d7d3aaaf9e6b03c221f8ea", 0x3f}, 0x58, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@netkit={@void, @void, @void, @value=r12, r3}}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 449.539918ms ago: executing program 3 (id=701): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/92) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) r5 = syz_clone(0x8000, &(0x7f0000000180)="a5c6de4b2ed2d9302070a41f204c2bb55c92b35a8274989fd79ff516ad099e94fb9310b7d89c", 0x26, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="3075568da13549f8947729f7420fb9d45104f26fe0c22830337652f552113386f385a81cba604f7568f05078a0741e4cdca25b82754600b9c0f99fd1f7a9fa30eac9fe631d7c78205c1b137d4775709f72") setpgid(r4, r5) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x9f) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) 380.220329ms ago: executing program 0 (id=702): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) (fail_nth: 13) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x400}}, 0x4c}}, 0x0) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 289.820917ms ago: executing program 0 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) (async) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) (async) r2 = dup(r1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000001}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xf6cb8d1f) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xf6cb8d1f) syz_emit_vhci(0x0, 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10000}, 0x0, &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000080)=0x8, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x46, 0x0, 0x1, 0x2, &(0x7f0000000300)="e5f593be533f0b5425eda9b124bed82be5629439c92317eeff8db2a4ef34dbdc77c4e0ea4604a7c27fd2626b7bb7a777e4224e4dd672794e4f6325494712ce59dd53d0be031615f5703b78f055b3342c476ed935c2475ee8265de265a8891990b8ed4b21f1287489e60ff1788552b3d275a1d32e4e380bbbd07db752463e4a44aafb61491a791ba987ef26f1d0738c635b7cdf08", 0x80, 0x0, 0x1, {0x2}}) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r6, 0x3516, 0x1, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) 289.476788ms ago: executing program 3 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) waitid(0x2, 0x0, 0x0, 0x41000004, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="6d247cdfd9d58f683dd0a29007b056533fff407c725dbf075223c7c267e0c127db5e7c231ba4a04ae1ce1bc4d005de454502e4fd3e5924b667b84b5f7463eb5dd6c916d6ed3a69be20c69b5e55fa6ccdb0996a84b7ac895197e470ec2b", 0x5d}, {&(0x7f00000002c0)="259235", 0x3}], 0x2, &(0x7f0000000340)}}], 0x1, 0x4068800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r6) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x48400) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339b", 0x3}, {0x0}], 0x2) r9 = accept4(r8, 0x0, 0x0, 0x0) sendfile(r9, r6, 0x0, 0xfacf) syz_pidfd_open(r5, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x884) 210.150034ms ago: executing program 3 (id=705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0xb0}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 209.41048ms ago: executing program 1 (id=706): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000894, &(0x7f000072e000)={0xa, 0x4e22, 0xd, @local, 0x45}, 0x1c) listen(0xffffffffffffffff, 0xfff) 209.051057ms ago: executing program 3 (id=707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c001000", @ANYRES16=r2, @ANYBLOB="010000000000000400002800000005002b00030000000a0001007770616e300000000c002d000203aaaaaaaaaaaa05002e0000000000"], 0x3c}}, 0x40094) socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xf, 0x5, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESOCT=r3, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000280)={0x10002, 0x4, 0x0, 0x1000, &(0x7f0000700000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x8000000, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x4000}, {0x0, 0xeeee0000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc}, {0x2000, 0xd000, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xb000}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7100, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000040)={0xd000, 0x80a0000}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000002c0)=[0x2, 0x5a9e, 0xffffff80, 0xafe, 0x7fff, 0xa, 0x80, 0x1, 0x3], &(0x7f0000000000), 0x2) set_mempolicy(0x4003, &(0x7f0000000040)=0x7, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r6], 0x7c}}, 0x4000000) unshare(0x22020400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 176.547772ms ago: executing program 2 (id=708): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x4, 0x2}, 0x10) r2 = openat$vcsu(0xffffff9c, 0x0, 0xe8300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='i2c_write\x00', r2, 0x0, 0x5}, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x700, 0x10, 0x6, 0x3, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x64, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@end, @noop, @ssrr={0x89, 0x1b, 0x4e, [@local, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0xd8, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x4, [{@local, 0x9}]}, @timestamp_prespec={0x44, 0x2c, 0xef, 0x3, 0xc, [{@empty}, {@empty, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x755}, {@loopback, 0x7800000}, {@loopback, 0x6}]}, @noop, @rr={0x7, 0x27, 0x4a, [@remote, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, @multicast2, @loopback, @multicast2, @loopback]}, @end]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x1, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x5, 0x3, 0xb, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x2, 0x0, 0xc, 0xb, 0x800000000000001f, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x1, 0x3, 0x2, 0xb, 0x8, 0x6, 0x4162a886c5cec8ef}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffe01, 0x5d, &(0x7f0000000340)=""/93, 0x40f00, 0x1, '\x00', r6, 0x25, r3, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0xfffffffb, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$CDROMREADAUDIO(r0, 0x530e, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f00000000c0)=0x4cca, 0x4) 106.406173ms ago: executing program 1 (id=709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe6d}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x14, &(0x7f0000000000)={0x2, [0x1, 0x0]}, 0x8) lchown(&(0x7f0000000340)='./bus\x00', r5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@migrate={0x1b0, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@empty, @in=@multicast2, 0x4e20, 0x5, 0x4e23, 0xe90, 0x144f50721f9fdab5, 0xa0, 0x40, 0x3c, r2, r5}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x3503, 0x2, 0x0, 0x42, 0x5, 0x9, 0x10001}, {{@in=@remote, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3507, 0x1, 0x1, 0x7, 0x5, 0x6, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0xff}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0x19, 0x200, 0x1, 0x80}, {{@in6=@remote, 0x4d2, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x0, 0x1, 0xffffff18, 0x2, 0x7}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@private=0xa010100, 0x3504, 0x2, 0x3, 0x3, 0x81, 0x9, 0x43}]}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd28, 0x70bd28, 0x70bd26, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x4000084) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 106.112055ms ago: executing program 0 (id=710): userfaultfd(0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/xfrm_stat\x00') pread64(r4, &(0x7f000001a240)=""/102386, 0x18ff2, 0x1) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x2209000, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000030000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',defaul', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="39001d0127095c8a367a65bf58b7f7954f2b7e934566c35fa92795cb1b58fae21df594177cfd36ae834c46b6795a780e0073cf52614b359aa477551b7151c04798ee14637350bbd85089e25750f8afc901edaa49d050d63406aab7e703002d42715ff0cf5b1d67f3d30e60b4dcbfaf617e71e55156708f"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat$zero(0xffffff9c, &(0x7f0000000240), 0x664d82, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000009dc829682565e12b702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6, 0x0, 0x1}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = creat(&(0x7f0000000140)='./bus\x00', 0x88) ftruncate(r8, 0x7) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.196998ms ago: executing program 2 (id=711): openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 0s ago: executing program 1 (id=712): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, 0x0) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_enter(r2, 0x3516, 0x7b09, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000 [ 75.637721][ T6826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.640524][ T6826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.643145][ T6826] [ 75.645753][ T6826] Mem-Info: [ 75.646673][ T6826] active_anon:11013 inactive_anon:163 isolated_anon:0 [ 75.646673][ T6826] active_file:12197 inactive_file:34120 isolated_file:0 [ 75.646673][ T6826] unevictable:1768 dirty:986 writeback:0 [ 75.646673][ T6826] slab_reclaimable:5493 slab_unreclaimable:55120 [ 75.646673][ T6826] mapped:30377 shmem:8178 pagetables:706 [ 75.646673][ T6826] sec_pagetables:301 bounce:0 [ 75.646673][ T6826] kernel_misc_reclaimable:0 [ 75.646673][ T6826] free:60070 free_pcp:1318 free_cma:0 [ 75.667643][ T6826] Node 0 active_anon:5580kB inactive_anon:652kB active_file:7448kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5588kB dirty:8kB writeback:0kB shmem:5784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9840kB pagetables:672kB sec_pagetables:1160kB all_unreclaimable? yes [ 75.679167][ T6826] Node 1 active_anon:39372kB inactive_anon:0kB active_file:41340kB inactive_file:136480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116996kB dirty:3936kB writeback:0kB shmem:28004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2236kB pagetables:2152kB sec_pagetables:44kB all_unreclaimable? no [ 75.690426][ T6826] Node 0 DMA free:2996kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:408kB inactive_anon:12kB active_file:268kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:684kB local_pcp:108kB free_cma:0kB [ 75.700335][ T6826] lowmem_reserve[]: 0 273 0 0 0 [ 75.702382][ T6826] Node 0 DMA32 free:22408kB boost:4096kB min:18000kB low:21476kB high:24952kB reserved_highatomic:4096KB active_anon:5704kB inactive_anon:640kB active_file:7180kB inactive_file:0kB unevictable:3536kB writepending:8kB present:1032196kB managed:306336kB mlocked:0kB bounce:0kB free_pcp:1116kB local_pcp:272kB free_cma:0kB [ 75.713052][ T6826] lowmem_reserve[]: 0 0 0 0 0 [ 75.715005][ T6826] Node 1 DMA32 free:206784kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:42472kB inactive_anon:0kB active_file:41340kB inactive_file:136480kB unevictable:3536kB writepending:3936kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:6696kB local_pcp:884kB free_cma:0kB [ 75.725814][ T6826] lowmem_reserve[]: 0 0 0 0 0 [ 75.727720][ T6826] Node 0 DMA: 37*4kB (UME) 16*8kB (UE) 8*16kB (UME) 33*32kB (UME) 18*64kB (UME) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2996kB [ 75.733499][ T6826] Node 0 DMA32: 322*4kB (UMEH) 122*8kB (UEH) 28*16kB (UMH) 114*32kB (UEH) 74*64kB (UMEH) 24*128kB (UEH) 12*256kB (UME) 8*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 22360kB [ 75.739969][ T6826] Node 1 DMA32: 3*4kB (UME) 33*8kB (UME) 27*16kB (UE) 106*32kB (UME) 196*64kB (UME) 95*128kB (UME) 51*256kB (UME) 8*512kB (UME) 9*1024kB (UM) 12*2048kB (UM) 31*4096kB (UM) = 206724kB [ 75.746724][ T6826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.750184][ T6826] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.753426][ T6826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.756712][ T6826] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.759953][ T6826] 56603 total pagecache pages [ 75.761642][ T6826] 0 pages in swap cache [ 75.763163][ T6826] Free swap = 124180kB [ 75.764639][ T6826] Total swap = 124996kB [ 75.766073][ T6826] 524155 pages RAM [ 75.767484][ T6826] 0 pages HighMem/MovableOnly [ 75.769163][ T6826] 206668 pages reserved [ 75.770643][ T6826] 0 pages cma reserved [ 75.800677][ T832] cfg80211: failed to load regulatory.db [ 76.235524][ T6837] syz.2.222[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.235570][ T6837] syz.2.222[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.238694][ T6837] syz.2.222[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.251807][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 76.403033][ T6849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.405065][ T6849] overlayfs: failed to set xattr on upper [ 76.406731][ T6849] overlayfs: ...falling back to redirect_dir=nofollow. [ 76.411228][ T6849] overlayfs: ...falling back to index=off. [ 76.413343][ T6849] overlayfs: ...falling back to uuid=null. [ 76.904986][ T6859] xt_NFQUEUE: number of total queues is 0 [ 77.421782][ T6873] FAULT_INJECTION: forcing a failure. [ 77.421782][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 77.425329][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.3.233 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 77.428168][ T6872] vlan2: entered promiscuous mode [ 77.428280][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.429913][ T6872] vlan2: entered allmulticast mode [ 77.432955][ T6873] Call Trace: [ 77.432963][ T6873] [ 77.432968][ T6873] dump_stack_lvl+0x16c/0x1f0 [ 77.432986][ T6873] should_fail_ex+0x497/0x5b0 [ 77.433000][ T6873] ? fs_reclaim_acquire+0xae/0x150 [ 77.434454][ T6872] hsr_slave_1: entered allmulticast mode [ 77.435963][ T6873] should_failslab+0xc2/0x120 [ 77.444990][ T6873] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 77.446652][ T6873] ? netlink_dump+0x9e8/0xd00 [ 77.447911][ T6873] ? __alloc_skb+0x2b3/0x380 [ 77.449469][ T6873] ? __pfx___mutex_lock+0x10/0x10 [ 77.450822][ T6873] __alloc_skb+0x2b3/0x380 [ 77.452021][ T6873] ? __pfx___alloc_skb+0x10/0x10 [ 77.453336][ T6873] ? _copy_to_iter+0x159/0x1400 [ 77.454624][ T6873] netlink_dump+0x699/0xd00 [ 77.455837][ T6873] ? __skb_recv_datagram+0x1b1/0x220 [ 77.457246][ T6873] ? __pfx_netlink_dump+0x10/0x10 [ 77.458567][ T6873] ? __check_object_size+0x31/0x710 [ 77.459977][ T6873] ? skb_recv_datagram+0x89/0xc0 [ 77.461288][ T6873] ? rcu_is_watching+0x12/0xc0 [ 77.462552][ T6873] netlink_recvmsg+0xa0d/0xf30 [ 77.463824][ T6873] ? __pfx_netlink_recvmsg+0x10/0x10 [ 77.465219][ T6873] ? find_held_lock+0x2d/0x110 [ 77.466479][ T6873] ? __might_fault+0x13b/0x190 [ 77.467849][ T6873] ? __pfx_lock_release+0x10/0x10 [ 77.469167][ T6873] ____sys_recvmsg+0x5f8/0x6b0 [ 77.470788][ T6873] ? __pfx_____sys_recvmsg+0x10/0x10 [ 77.472604][ T6873] ___sys_recvmsg+0x115/0x1a0 [ 77.474208][ T6873] ? __pfx____sys_recvmsg+0x10/0x10 [ 77.475988][ T6873] ? __fget_files+0x1fc/0x3a0 [ 77.477718][ T6873] ? trace_lock_acquire+0x14e/0x1f0 [ 77.479530][ T6873] ? __fget_files+0x206/0x3a0 [ 77.481176][ T6873] ? __pfx___might_resched+0x10/0x10 [ 77.482592][ T6873] do_recvmmsg+0x55d/0x740 [ 77.483809][ T6873] ? __pfx_do_recvmmsg+0x10/0x10 [ 77.485676][ T6873] ? vfs_write+0x306/0x1150 [ 77.487291][ T6873] ? __fget_files+0x206/0x3a0 [ 77.488891][ T6873] __sys_recvmmsg+0x21e/0x280 [ 77.490259][ T6873] ? __pfx___sys_recvmmsg+0x10/0x10 [ 77.491636][ T6873] ? __pfx_ksys_write+0x10/0x10 [ 77.492957][ T6873] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 77.494607][ T6873] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.495994][ T6873] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 77.497701][ T6873] __do_fast_syscall_32+0x73/0x120 [ 77.499054][ T6873] do_fast_syscall_32+0x32/0x80 [ 77.500363][ T6873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.502182][ T6873] RIP: 0023:0xf7f54579 [ 77.503198][ T6873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.509189][ T6873] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 77.511399][ T6873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020005c80 [ 77.513461][ T6873] RDX: 000000000000001b RSI: 0000000000010122 RDI: 0000000000000000 [ 77.515509][ T6873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.517545][ T6873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.519596][ T6873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.521810][ T6873] [ 78.516012][ T6914] syz.2.244: attempt to access beyond end of device [ 78.516012][ T6914] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 78.520018][ T6914] (syz.2.244,6914,3):ocfs2_get_sector:1769 ERROR: status = -5 [ 78.522034][ T6914] (syz.2.244,6914,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 78.523965][ T6914] (syz.2.244,6914,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 78.526135][ T6914] (syz.2.244,6914,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 79.138100][ T6923] FAULT_INJECTION: forcing a failure. [ 79.138100][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 79.146959][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.0.246 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 79.150620][ T6923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.154294][ T6923] Call Trace: [ 79.155479][ T6923] [ 79.156570][ T6923] dump_stack_lvl+0x16c/0x1f0 [ 79.158221][ T6923] should_fail_ex+0x497/0x5b0 [ 79.160048][ T6923] ? fs_reclaim_acquire+0xae/0x150 [ 79.161848][ T6923] should_failslab+0xc2/0x120 [ 79.163588][ T6923] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 79.165667][ T6923] ? __alloc_skb+0x2b3/0x380 [ 79.167338][ T6923] __alloc_skb+0x2b3/0x380 [ 79.168995][ T6923] ? __pfx___alloc_skb+0x10/0x10 [ 79.170737][ T6923] ? lock_acquire+0x2f/0xb0 [ 79.172330][ T6923] netlink_alloc_large_skb+0x69/0x130 [ 79.174187][ T6923] netlink_sendmsg+0x689/0xd70 [ 79.175867][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.177740][ T6923] ____sys_sendmsg+0x9ae/0xb40 [ 79.179650][ T6923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.181611][ T6923] ? get_compat_msghdr+0x11b/0x170 [ 79.183399][ T6923] ___sys_sendmsg+0x135/0x1e0 [ 79.185074][ T6923] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.186903][ T6923] ? __pfx_lock_release+0x10/0x10 [ 79.188778][ T6923] ? trace_lock_acquire+0x14e/0x1f0 [ 79.190630][ T6923] ? __fget_files+0x206/0x3a0 [ 79.192296][ T6923] __sys_sendmsg+0x16e/0x220 [ 79.193930][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.195680][ T6923] __do_fast_syscall_32+0x73/0x120 [ 79.197486][ T6923] do_fast_syscall_32+0x32/0x80 [ 79.199200][ T6923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.201411][ T6923] RIP: 0023:0xf7faf579 [ 79.202836][ T6923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.209237][ T6923] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 79.212106][ T6923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 79.214815][ T6923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.217536][ T6923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.220239][ T6923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.222942][ T6923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.225677][ T6923] [ 79.593435][ T6932] netlink: 180 bytes leftover after parsing attributes in process `syz.2.249'. [ 80.192596][ T6949] syz.1.254 (6949): drop_caches: 2 [ 80.459858][ T6957] FAULT_INJECTION: forcing a failure. [ 80.459858][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 80.463246][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.3.257 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 80.466101][ T6957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.468892][ T6957] Call Trace: [ 80.469788][ T6957] [ 80.470576][ T6957] dump_stack_lvl+0x16c/0x1f0 [ 80.471827][ T6957] should_fail_ex+0x497/0x5b0 [ 80.473076][ T6957] ? fs_reclaim_acquire+0xae/0x150 [ 80.474434][ T6957] should_failslab+0xc2/0x120 [ 80.475688][ T6957] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 80.477234][ T6957] ? __alloc_skb+0x2b3/0x380 [ 80.478457][ T6957] __alloc_skb+0x2b3/0x380 [ 80.479669][ T6957] ? __pfx___alloc_skb+0x10/0x10 [ 80.481006][ T6957] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 80.482361][ T6957] netlink_ack+0x164/0xb20 [ 80.483561][ T6957] netlink_rcv_skb+0x327/0x410 [ 80.484847][ T6957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.486284][ T6957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.487716][ T6957] ? netlink_deliver_tap+0x1ae/0xca0 [ 80.489132][ T6957] netlink_unicast+0x53c/0x7f0 [ 80.490442][ T6957] ? __pfx_netlink_unicast+0x10/0x10 [ 80.492102][ T6957] ? __phys_addr_symbol+0x30/0x80 [ 80.493723][ T6957] ? __check_object_size+0x488/0x710 [ 80.495503][ T6957] netlink_sendmsg+0x8b8/0xd70 [ 80.497157][ T6957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.498903][ T6957] ____sys_sendmsg+0x9ae/0xb40 [ 80.500445][ T6957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.502036][ T6957] ? get_compat_msghdr+0x11b/0x170 [ 80.503338][ T6957] ___sys_sendmsg+0x135/0x1e0 [ 80.504852][ T6957] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.506665][ T6957] ? __pfx_lock_release+0x10/0x10 [ 80.508357][ T6957] ? trace_lock_acquire+0x14e/0x1f0 [ 80.510163][ T6957] ? __fget_files+0x206/0x3a0 [ 80.511361][ T6957] __sys_sendmsg+0x16e/0x220 [ 80.512773][ T6957] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.514410][ T6957] __do_fast_syscall_32+0x73/0x120 [ 80.515874][ T6957] do_fast_syscall_32+0x32/0x80 [ 80.517457][ T6957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.519458][ T6957] RIP: 0023:0xf7f54579 [ 80.520863][ T6957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.526074][ T6957] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 80.528181][ T6957] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280 [ 80.530144][ T6957] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.532142][ T6957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.534070][ T6957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.536143][ T6957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.538516][ T6957] [ 81.232483][ T6977] 9pnet_virtio: no channels available for device syz [ 81.237885][ T6977] overlayfs: overlapping lowerdir path [ 81.440331][ T6973] syz.1.262 (6973) used greatest stack depth: 20688 bytes left [ 81.518256][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 81.523181][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 81.601838][ T6991] syz.1.266 uses obsolete (PF_INET,SOCK_PACKET) [ 81.634214][ T6991] virtio-fs: tag < : 32 [ 81.634214][ T6991] ivsize : 0 [ 81.634214][ T6991] chunksize : 16 [ 81.634214][ T6991] walksize : 16 [ 81.634214][ T6991] statesize : 0 [ 81.634214][ T6991] [ 81.634214][ T6991] name : rfc3686(ctr(aes)) [ 81.634214][ T6991] driver : rfc3686(ctr-aes-aesni) [ 81.634214][ T6991] module : kernel [ 81.634214][ T6991] priority : 400 [ 81.634214][ T6991] refcnt : 1 [ 81.634214][ T6991] selftest : passed [ 81.634214][ T6991] internal : no [ 81.634214][ T6991] type : skcipher [ 81.634214][ T6991] async : yes [ 81.634214][ T6991] blocksize : 1 [ 81.634214][ T6991] min keysize : 20 [ 81.634214][ T6991] max keysize : 36 [ 81.634214][ T6991] ivsize : 8 [ 81.634214][ T6991] chunksize : 16 [ 81.634214][ T6991] walksize : 16 [ 81.634214][ T6991] statesize : 0 [ 81.634214][ T6991] [ 81.634214][ T6991] name : cbc(des) [ 81.634214][ T6991] driver : cbc(ecb(des-generic)) [ 81.634214][ T6991] module : kernel [ 81.634214][ T6991] priority : 100 [ 81.634214][ T6991] refcnt : 1 [ 81.634214][ T6991] selftest : passed [ 81.634214][ T6991] internal : no [ 81.634214][ T6991] type : lskcipher [ 81.634214][ T6991] blocksize : 8 [ 81.634214][ T6991] min keysize : 8 [ 81.634214][ T6991] max keysize : 8 [ 81.634214][ T6991] ivsize : 8 [ 81.634214][ T6991] chunksize : 8 [ 81.634214][ T6991] statesize : 0 [ 81.634214][ T6991] [ 81.634214][ T6991] name : ecb(des) [ 81.634214][ T6991] driver : ecb(des-generic) [ 81.634214][ T6991] module : kernel [ 81.634214][ T6991] priority : 100 [ 81.634214][ T6991] refcnt : 1 [ 81.634214][ T6991] selftest : passed [ 81.634214][ T6991] internal : no [ 81.634214][ T6991] type : lskcipher [ 81.634214][ T6991] blocksize : 8 [ 81.634214][ T6991] min keysize : 8 [ 81.634635][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'. [ 81.721913][ T6998] capability: warning: `syz.1.266' uses deprecated v2 capabilities in a way that may be insecure [ 81.783111][ T6998] 9pnet_rdma: rdma_create_trans (6998): problem binding to privport: 13 [ 82.425678][ T7005] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 82.475543][ T7005] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 82.532363][ T77] net_ratelimit: 1879 callbacks suppressed [ 82.532374][ T77] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.538892][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.593977][ T7020] xt_NFQUEUE: number of total queues is 0 [ 82.663065][ T1137] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.782779][ T7033] random: crng reseeded on system resumption [ 83.854389][ T7049] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 83.856526][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.279'. [ 83.867178][ T7049] team0: entered promiscuous mode [ 83.877139][ T7049] team_slave_0: entered promiscuous mode [ 83.887154][ T7049] team_slave_1: entered promiscuous mode [ 83.897092][ T7049] team0: entered allmulticast mode [ 83.903616][ T7049] team_slave_0: entered allmulticast mode [ 83.905288][ T7049] team_slave_1: entered allmulticast mode [ 83.909197][ T7049] bridge0: port 3(team0) entered blocking state [ 83.910968][ T7049] bridge0: port 3(team0) entered disabled state [ 83.915433][ T7052] 9pnet_virtio: no channels available for device syz [ 83.916410][ T7049] bridge0: port 3(team0) entered blocking state [ 83.919050][ T7049] bridge0: port 3(team0) entered forwarding state [ 83.976718][ T7049] overlayfs: missing 'workdir' [ 84.984295][ T7074] overlay: filesystem on ./bus not supported as upperdir [ 85.021414][ T7076] xt_NFQUEUE: number of total queues is 0 [ 85.101892][ T7080] xt_NFQUEUE: number of total queues is 0 [ 85.156125][ T7081] FAULT_INJECTION: forcing a failure. [ 85.156125][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 85.159327][ T7081] CPU: 2 UID: 0 PID: 7081 Comm: syz.0.287 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 85.161928][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.164398][ T7081] Call Trace: [ 85.165227][ T7081] [ 85.165956][ T7081] dump_stack_lvl+0x16c/0x1f0 [ 85.167080][ T7081] should_fail_ex+0x497/0x5b0 [ 85.168223][ T7081] ? fs_reclaim_acquire+0xae/0x150 [ 85.169482][ T7081] should_failslab+0xc2/0x120 [ 85.170682][ T7081] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 85.172063][ T7081] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 85.173354][ T7081] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 85.174647][ T7081] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 85.176113][ T7081] alloc_inode+0x5d/0x230 [ 85.177164][ T7081] new_inode+0x22/0x210 [ 85.178172][ T7081] hugetlbfs_get_inode+0x358/0x740 [ 85.179625][ T7081] hugetlb_file_setup+0x15b/0x620 [ 85.180937][ T7081] ksys_mmap_pgoff+0x189/0x5c0 [ 85.182125][ T7081] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 85.183460][ T7081] __do_fast_syscall_32+0x73/0x120 [ 85.184729][ T7081] do_fast_syscall_32+0x32/0x80 [ 85.185975][ T7081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.187542][ T7081] RIP: 0023:0xf7faf579 [ 85.188885][ T7081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.193518][ T7081] RSP: 002b:00000000f511557c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 85.195560][ T7081] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000ff5000 [ 85.197471][ T7081] RDX: 0000000002000002 RSI: 000000000004ca31 RDI: 00000000ffffffff [ 85.199365][ T7081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.201447][ T7081] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.203237][ T7081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.205093][ T7081] [ 85.345272][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.289'. [ 85.551776][ T7091] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 85.553872][ T7091] netlink: 55 bytes leftover after parsing attributes in process `syz.3.290'. [ 85.879577][ T7094] tmpfs: Unknown parameter 'nr_in}des' [ 86.091478][ T7109] xt_NFQUEUE: number of total queues is 0 [ 86.106354][ T7108] evm: overlay not supported [ 86.192468][ T7112] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.193153][ T7112] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fd with DS=0x3 [ 86.193336][ C0] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fd with DS=0x3 [ 86.193450][ C0] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fd with DS=0x3 [ 86.459686][ T7120] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 86.500874][ T7120] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 86.746237][ T9] libceph: connect (1)[c::]:6789 error -101 [ 86.748492][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 86.830416][ T7123] ceph: No mds server is up or the cluster is laggy [ 86.894274][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 86.908968][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 86.912588][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 86.915328][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 86.991539][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 87.217015][ T7144] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 87.240428][ T7144] team0: Port device netdevsim0 added [ 87.246526][ T7144] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 87.267356][ T77] tipc: Resetting bearer [ 87.298554][ T7144] team0: Port device netdevsim0 removed [ 87.310396][ T7144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 87.669839][ T7150] xt_NFQUEUE: number of total queues is 0 [ 87.865321][ T7154] capability: warning: `syz.1.310' uses 32-bit capabilities (legacy support in use) [ 88.059605][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 88.068237][ T7158] FAULT_INJECTION: forcing a failure. [ 88.068237][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 88.071524][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.312 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 88.074258][ T7158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.077055][ T7158] Call Trace: [ 88.078331][ T7158] [ 88.079535][ T7158] dump_stack_lvl+0x16c/0x1f0 [ 88.081340][ T7158] should_fail_ex+0x497/0x5b0 [ 88.082964][ T7158] ? fs_reclaim_acquire+0xae/0x150 [ 88.084810][ T7158] should_failslab+0xc2/0x120 [ 88.086589][ T7158] __kmalloc_cache_noprof+0x68/0x420 [ 88.088509][ T7158] ? lock_acquire+0x2f/0xb0 [ 88.090096][ T7158] ? lockref_get+0x15/0x50 [ 88.091684][ T7158] shmem_init_fs_context+0x45/0x2b0 [ 88.093459][ T7158] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 88.095342][ T7158] alloc_fs_context+0x54a/0x9c0 [ 88.096886][ T7158] path_mount+0xaa8/0x1f10 [ 88.098332][ T7158] ? kmem_cache_free+0x152/0x4c0 [ 88.099566][ T7158] ? __pfx_path_mount+0x10/0x10 [ 88.100796][ T7158] ? putname+0x13c/0x180 [ 88.101901][ T7158] __ia32_sys_mount+0x292/0x310 [ 88.103265][ T7158] ? __pfx___ia32_sys_mount+0x10/0x10 [ 88.105143][ T7158] __do_fast_syscall_32+0x73/0x120 [ 88.106869][ T7158] do_fast_syscall_32+0x32/0x80 [ 88.108602][ T7158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.109244][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.110827][ T7158] RIP: 0023:0xf7faf579 [ 88.114492][ T7158] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.120329][ T7158] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 88.123084][ T7158] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 88.125932][ T7158] RDX: 0000000000000000 RSI: 00000000002a00a9 RDI: 0000000020000000 [ 88.128723][ T7158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.131500][ T7158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.134161][ T7158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.136774][ T7158] [ 88.266979][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 88.270213][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.274056][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.277672][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.282462][ T30] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 88.285751][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.289731][ T30] usb 6-1: config 0 descriptor?? [ 88.395479][ T7169] binder: 7165:7169 ioctl c0306201 20000680 returned -14 [ 88.508636][ T7168] /dev/sr0: Can't open blockdev [ 88.593494][ T7176] FAULT_INJECTION: forcing a failure. [ 88.593494][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 88.596755][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.318 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 88.599416][ T7176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.602099][ T7176] Call Trace: [ 88.602977][ T7176] [ 88.603762][ T7176] dump_stack_lvl+0x16c/0x1f0 [ 88.605002][ T7176] should_fail_ex+0x497/0x5b0 [ 88.606233][ T7176] ? fs_reclaim_acquire+0xae/0x150 [ 88.607615][ T7176] should_failslab+0xc2/0x120 [ 88.608719][ T7176] __kmalloc_node_noprof+0xd1/0x520 [ 88.609895][ T7176] ? security_capable+0x7e/0x260 [ 88.611216][ T7176] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 88.612661][ T7176] ? ns_capable_noaudit+0xda/0x110 [ 88.614006][ T7176] __kvmalloc_node_noprof+0xad/0x1a0 [ 88.615405][ T7176] proc_sys_call_handler+0x2f6/0x5d0 [ 88.616810][ T7176] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 88.618281][ T7176] vfs_write+0x5ae/0x1150 [ 88.619412][ T7176] ? __pfx_proc_sys_write+0x10/0x10 [ 88.620671][ T7176] ? __pfx___mutex_lock+0x10/0x10 [ 88.621911][ T7176] ? __pfx_vfs_write+0x10/0x10 [ 88.623107][ T7176] ksys_write+0x12b/0x250 [ 88.624195][ T7176] ? __pfx_ksys_write+0x10/0x10 [ 88.625443][ T7176] __do_fast_syscall_32+0x73/0x120 [ 88.626685][ T7176] do_fast_syscall_32+0x32/0x80 [ 88.627918][ T7176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.629566][ T7176] RIP: 0023:0xf7faf579 [ 88.630655][ T7176] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.635579][ T7176] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 88.637744][ T7176] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000200 [ 88.639819][ T7176] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.641859][ T7176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.643905][ T7176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.644696][ T7177] cgroup: Name too long [ 88.645936][ T7176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.645970][ T7176] [ 88.688597][ T7180] xt_NFQUEUE: number of total queues is 0 [ 88.698610][ T7154] No control pipe specified [ 88.714451][ T30] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 88.716355][ T30] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 88.718529][ T30] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 88.720729][ T30] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 88.722969][ T30] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 88.725305][ T7178] syz.3.317[7178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.725353][ T7178] syz.3.317[7178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.728737][ T7178] syz.3.317[7178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.736239][ T30] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 88.748824][ T30] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 88.750939][ T30] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 88.904253][ T6616] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.908096][ T6616] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.912357][ T6616] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.916592][ T6616] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.922603][ T56] usb 6-1: USB disconnect, device number 4 [ 89.024566][ T7189] cgroup: Name too long [ 89.508066][ T7192] netlink: 'syz.1.322': attribute type 6 has an invalid length. [ 89.510101][ T7192] netlink: 'syz.1.322': attribute type 8 has an invalid length. [ 89.720379][ T7200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'. [ 89.722220][ T7198] FAULT_INJECTION: forcing a failure. [ 89.722220][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.726265][ T7198] CPU: 2 UID: 0 PID: 7198 Comm: syz.1.325 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 89.728974][ T7198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.731740][ T7198] Call Trace: [ 89.732614][ T7198] [ 89.733393][ T7198] dump_stack_lvl+0x16c/0x1f0 [ 89.734626][ T7198] should_fail_ex+0x497/0x5b0 [ 89.735866][ T7198] _copy_from_user+0x2e/0xd0 [ 89.737081][ T7198] copy_from_buffer+0x86/0xb0 [ 89.738319][ T7198] copy_uabi_to_xstate+0x26e/0x670 [ 89.739669][ T7198] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 89.741134][ T7198] ? __pfx_lock_release+0x10/0x10 [ 89.742452][ T7198] ? trace_lock_acquire+0x14e/0x1f0 [ 89.743925][ T7198] ? __local_bh_enable_ip+0xa4/0x120 [ 89.745316][ T7198] __fpu_restore_sig+0x1062/0x1430 [ 89.746666][ T7198] ? __pfx___fpu_restore_sig+0x10/0x10 [ 89.748103][ T7198] ? lock_acquire+0x2f/0xb0 [ 89.749294][ T7198] ? __might_fault+0xe3/0x190 [ 89.750548][ T7198] fpu__restore_sig+0x113/0x190 [ 89.751836][ T7198] ia32_restore_sigcontext+0x40f/0x5d0 [ 89.753256][ T7198] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 89.754822][ T7198] ? __pfx_lock_release+0x10/0x10 [ 89.756139][ T7198] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.757494][ T7198] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.758835][ T7198] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 89.760403][ T7198] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 89.762064][ T7198] do_int80_emulation+0x104/0x200 [ 89.763389][ T7198] asm_int80_emulation+0x1a/0x20 [ 89.764693][ T7198] RIP: 0023:0xf742e577 [ 89.765762][ T7198] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 89.770741][ T7198] RSP: 002b:00000000f511657c EFLAGS: 00000292 [ 89.772332][ T7198] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000020000180 [ 89.774290][ T7198] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.776311][ T7198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.778332][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.780334][ T7198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.782378][ T7198] [ 89.819906][ T7205] xt_NFQUEUE: number of total queues is 0 [ 89.951319][ T7208] netlink: 220 bytes leftover after parsing attributes in process `syz.0.330'. [ 90.952869][ T7221] syz.3.331[7221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.952916][ T7221] syz.3.331[7221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.955899][ T7221] syz.3.331[7221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.979211][ T7222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.097427][ T7226] FAULT_INJECTION: forcing a failure. [ 91.097427][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.101012][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.1.332 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 91.103921][ T7226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.106699][ T7226] Call Trace: [ 91.107589][ T7226] [ 91.108384][ T7226] dump_stack_lvl+0x16c/0x1f0 [ 91.109625][ T7226] should_fail_ex+0x497/0x5b0 [ 91.110871][ T7226] _copy_from_iter+0x29b/0x1400 [ 91.112172][ T7226] ? trace_lock_acquire+0x14e/0x1f0 [ 91.113543][ T7226] ? __pfx__copy_from_iter+0x10/0x10 [ 91.114928][ T7226] ? __virt_addr_valid+0x1a4/0x590 [ 91.116278][ T7226] ? __virt_addr_valid+0x5e/0x590 [ 91.117600][ T7226] ? __phys_addr_symbol+0x30/0x80 [ 91.118928][ T7226] ? __check_object_size+0x488/0x710 [ 91.120317][ T7226] file_tty_write.constprop.0+0x48d/0x9a0 [ 91.121827][ T7226] vfs_write+0x5ae/0x1150 [ 91.122959][ T7226] ? __pfx_tty_write+0x10/0x10 [ 91.124229][ T7226] ? __pfx_vfs_write+0x10/0x10 [ 91.125489][ T7226] ? __fget_files+0x40/0x3a0 [ 91.126702][ T7226] ksys_write+0x12b/0x250 [ 91.127846][ T7226] ? __pfx_ksys_write+0x10/0x10 [ 91.129120][ T7226] __do_fast_syscall_32+0x73/0x120 [ 91.130474][ T7226] do_fast_syscall_32+0x32/0x80 [ 91.131754][ T7226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.133418][ T7226] RIP: 0023:0xf742e579 [ 91.134496][ T7226] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.139457][ T7226] RSP: 002b:00000000f50d457c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 91.141628][ T7226] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020001040 [ 91.143682][ T7226] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 91.145720][ T7226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.147793][ T7226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.149846][ T7226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.151928][ T7226] [ 91.666966][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 91.775780][ T7238] binder: BINDER_SET_CONTEXT_MGR already set [ 91.778753][ T7238] binder: 7236:7238 ioctl 4018620d 200001c0 returned -16 [ 91.812729][ T7238] syz.1.338 (7238): drop_caches: 2 [ 91.816996][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 91.821863][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.824702][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.827380][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.831074][ T25] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 91.833421][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.837487][ T25] usb 8-1: config 0 descriptor?? [ 92.203305][ T7263] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.240426][ T7264] FAULT_INJECTION: forcing a failure. [ 92.240426][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.240461][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.0.344 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 92.240484][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.240491][ T7264] Call Trace: [ 92.240495][ T7264] [ 92.240500][ T7264] dump_stack_lvl+0x16c/0x1f0 [ 92.240516][ T7264] should_fail_ex+0x497/0x5b0 [ 92.240533][ T7264] _copy_from_iter+0x29b/0x1400 [ 92.240550][ T7264] ? trace_lock_acquire+0x14e/0x1f0 [ 92.240566][ T7264] ? __pfx__copy_from_iter+0x10/0x10 [ 92.240580][ T7264] ? __virt_addr_valid+0x1a4/0x590 [ 92.240595][ T7264] ? __virt_addr_valid+0x5e/0x590 [ 92.240608][ T7264] ? __phys_addr_symbol+0x30/0x80 [ 92.240621][ T7264] ? __check_object_size+0x488/0x710 [ 92.240638][ T7264] file_tty_write.constprop.0+0x48d/0x9a0 [ 92.240657][ T7264] vfs_write+0x5ae/0x1150 [ 92.240670][ T7264] ? __pfx_tty_write+0x10/0x10 [ 92.240684][ T7264] ? __pfx_vfs_write+0x10/0x10 [ 92.240697][ T7264] ? __fget_files+0x40/0x3a0 [ 92.240716][ T7264] ksys_write+0x12b/0x250 [ 92.240727][ T7264] ? __pfx_ksys_write+0x10/0x10 [ 92.240743][ T7264] __do_fast_syscall_32+0x73/0x120 [ 92.240757][ T7264] do_fast_syscall_32+0x32/0x80 [ 92.240770][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.240786][ T7264] RIP: 0023:0xf7faf579 [ 92.240796][ T7264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.240806][ T7264] RSP: 002b:00000000f50f457c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 92.240817][ T7264] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001040 [ 92.240824][ T7264] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 92.240831][ T7264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.240837][ T7264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.240843][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.240856][ T7264] [ 92.449596][ T7234] FAULT_INJECTION: forcing a failure. [ 92.449596][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 92.453090][ T7234] CPU: 3 UID: 0 PID: 7234 Comm: syz.3.336 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 92.456035][ T7234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.459007][ T7234] Call Trace: [ 92.459930][ T7234] [ 92.460725][ T7234] dump_stack_lvl+0x16c/0x1f0 [ 92.462115][ T7234] should_fail_ex+0x497/0x5b0 [ 92.462818][ T25] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 92.463376][ T7234] ? fs_reclaim_acquire+0xae/0x150 [ 92.465712][ T25] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 92.467065][ T7234] should_failslab+0xc2/0x120 [ 92.467085][ T7234] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 92.467101][ T7234] ? __alloc_skb+0x2b3/0x380 [ 92.467117][ T7234] __alloc_skb+0x2b3/0x380 [ 92.467131][ T7234] ? __pfx___alloc_skb+0x10/0x10 [ 92.467146][ T7234] ? lock_acquire+0x2f/0xb0 [ 92.467160][ T7234] netlink_alloc_large_skb+0x69/0x130 [ 92.469454][ T25] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 92.470690][ T7234] netlink_sendmsg+0x689/0xd70 [ 92.472883][ T25] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 92.474080][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.475756][ T25] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 92.477059][ T7234] ____sys_sendmsg+0x9ae/0xb40 [ 92.477077][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.477088][ T7234] ? get_compat_msghdr+0x11b/0x170 [ 92.477104][ T7234] ___sys_sendmsg+0x135/0x1e0 [ 92.477120][ T7234] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.477139][ T7234] ? __pfx_lock_release+0x10/0x10 [ 92.477150][ T7234] ? trace_lock_acquire+0x14e/0x1f0 [ 92.481014][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 92.482055][ T7234] ? __fget_files+0x206/0x3a0 [ 92.488766][ T25] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 92.489877][ T7234] __sys_sendmsg+0x16e/0x220 [ 92.491310][ T25] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 92.492676][ T7234] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.509104][ T7234] __do_fast_syscall_32+0x73/0x120 [ 92.510646][ T7234] do_fast_syscall_32+0x32/0x80 [ 92.511976][ T7234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.513674][ T7234] RIP: 0023:0xf7f54579 [ 92.514762][ T7234] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.520066][ T7234] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.522268][ T7234] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200001c0 [ 92.524546][ T7234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.526868][ T7234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.528992][ T7234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.531113][ T7234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.533253][ T7234] [ 92.548521][ T5951] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 92.554942][ T5951] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 92.558898][ T25] usb 8-1: USB disconnect, device number 3 [ 92.560653][ T5951] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 92.563503][ T5951] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 92.654047][ T7274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.131573][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 93.744832][ T7323] xt_NFQUEUE: number of total queues is 0 [ 94.087250][ T7335] FAULT_INJECTION: forcing a failure. [ 94.087250][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 94.091068][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.3.368 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 94.093838][ T7335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.096673][ T7335] Call Trace: [ 94.097765][ T7335] [ 94.098581][ T7335] dump_stack_lvl+0x16c/0x1f0 [ 94.099850][ T7335] should_fail_ex+0x497/0x5b0 [ 94.101235][ T7335] ? fs_reclaim_acquire+0xae/0x150 [ 94.103004][ T7335] should_failslab+0xc2/0x120 [ 94.104660][ T7335] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 94.106678][ T7335] ? __pfx___might_resched+0x10/0x10 [ 94.107985][ T7337] netlink: 'syz.2.369': attribute type 33 has an invalid length. [ 94.108568][ T7335] ? alloc_vmap_area+0x636/0x2a70 [ 94.108622][ T7335] alloc_vmap_area+0x636/0x2a70 [ 94.113363][ T7335] ? __pfx_alloc_vmap_area+0x10/0x10 [ 94.114746][ T7335] __get_vm_area_node+0x19e/0x2f0 [ 94.116086][ T7335] __vmalloc_node_range_noprof+0x26a/0x1530 [ 94.118111][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.120225][ T7335] ? __pfx_osq_unlock+0x10/0x10 [ 94.121656][ T7335] ? trace_contention_end+0xee/0x140 [ 94.123046][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.124481][ T7335] ? kasan_save_stack+0x42/0x60 [ 94.125878][ T7335] ? translate_compat_table+0x1b5/0x18e0 [ 94.127307][ T7335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.129251][ T7335] ? __pfx___mutex_lock+0x10/0x10 [ 94.130590][ T7335] ? __lock_acquire+0x15a9/0x3c40 [ 94.131930][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.133371][ T7335] vmalloc_noprof+0x6b/0x90 [ 94.134580][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.136013][ T7335] xt_compat_init_offsets+0xe1/0x1f0 [ 94.137443][ T7335] translate_compat_table+0x1f0/0x18e0 [ 94.138898][ T7335] ? __pfx_translate_compat_table+0x10/0x10 [ 94.140458][ T7335] ? __might_fault+0x13b/0x190 [ 94.141749][ T7335] ? trace_lock_acquire+0x14e/0x1f0 [ 94.143018][ T7335] compat_do_replace+0x35d/0x500 [ 94.144314][ T7335] ? __pfx_compat_do_replace+0x10/0x10 [ 94.145720][ T7335] ? aa_get_newest_label+0x376/0x680 [ 94.147092][ T7335] ? __pfx_aa_get_newest_label+0x10/0x10 [ 94.148571][ T7335] ? bpf_lsm_capable+0x9/0x10 [ 94.149802][ T7335] ? security_capable+0x7e/0x260 [ 94.151114][ T7335] do_ip6t_set_ctl+0x686/0xc20 [ 94.152376][ T7335] ? __mutex_lock+0x1cc/0xa60 [ 94.153630][ T7335] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 94.155012][ T7335] ? __mutex_unlock_slowpath+0x164/0x690 [ 94.156491][ T7335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.158064][ T7335] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 94.159623][ T7335] nf_setsockopt+0x8a/0xf0 [ 94.160787][ T7335] ipv6_setsockopt+0x135/0x170 [ 94.162038][ T7335] tcp_setsockopt+0xa4/0x100 [ 94.163258][ T7335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.164802][ T7335] do_sock_setsockopt+0x222/0x480 [ 94.166104][ T7335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 94.167546][ T7335] ? lock_acquire+0x2f/0xb0 [ 94.168748][ T7335] __sys_setsockopt+0x1a0/0x230 [ 94.170034][ T7335] __ia32_sys_setsockopt+0xbc/0x160 [ 94.171397][ T7335] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.172759][ T7335] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 94.174452][ T7335] __do_fast_syscall_32+0x73/0x120 [ 94.175783][ T7335] do_fast_syscall_32+0x32/0x80 [ 94.177062][ T7335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.178725][ T7335] RIP: 0023:0xf7f54579 [ 94.179806][ T7335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.184765][ T7335] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 94.186927][ T7335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 94.188987][ T7335] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000630 [ 94.191046][ T7335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.193089][ T7335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.195134][ T7335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.197194][ T7335] [ 94.199450][ T7335] syz.3.368: vmalloc error: size 48, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.206463][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.3.368 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 94.209356][ T7335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.212272][ T7335] Call Trace: [ 94.213166][ T7335] [ 94.213956][ T7335] dump_stack_lvl+0x16c/0x1f0 [ 94.215209][ T7335] warn_alloc+0x24d/0x3a0 [ 94.216383][ T7335] ? __pfx_warn_alloc+0x10/0x10 [ 94.217753][ T7335] ? kfree+0x14f/0x4b0 [ 94.218886][ T7335] ? __get_vm_area_node+0x1dc/0x2f0 [ 94.220302][ T7335] __vmalloc_node_range_noprof+0xd27/0x1530 [ 94.221862][ T7335] ? __pfx_osq_unlock+0x10/0x10 [ 94.223154][ T7335] ? trace_contention_end+0xee/0x140 [ 94.224603][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.226117][ T7335] ? kasan_save_stack+0x42/0x60 [ 94.227454][ T7335] ? translate_compat_table+0x1b5/0x18e0 [ 94.228939][ T7335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.230642][ T7335] ? __pfx___mutex_lock+0x10/0x10 [ 94.231976][ T7335] ? __lock_acquire+0x15a9/0x3c40 [ 94.233316][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.234764][ T7335] vmalloc_noprof+0x6b/0x90 [ 94.235990][ T7335] ? xt_compat_init_offsets+0xe1/0x1f0 [ 94.237426][ T7335] xt_compat_init_offsets+0xe1/0x1f0 [ 94.238879][ T7335] translate_compat_table+0x1f0/0x18e0 [ 94.240397][ T7335] ? __pfx_translate_compat_table+0x10/0x10 [ 94.241975][ T7335] ? __might_fault+0x13b/0x190 [ 94.243283][ T7335] ? trace_lock_acquire+0x14e/0x1f0 [ 94.244661][ T7335] compat_do_replace+0x35d/0x500 [ 94.245968][ T7335] ? __pfx_compat_do_replace+0x10/0x10 [ 94.247404][ T7335] ? aa_get_newest_label+0x376/0x680 [ 94.248796][ T7335] ? __pfx_aa_get_newest_label+0x10/0x10 [ 94.250354][ T7335] ? bpf_lsm_capable+0x9/0x10 [ 94.251595][ T7335] ? security_capable+0x7e/0x260 [ 94.252941][ T7335] do_ip6t_set_ctl+0x686/0xc20 [ 94.254272][ T7335] ? __mutex_lock+0x1cc/0xa60 [ 94.255512][ T7335] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 94.256907][ T7335] ? __mutex_unlock_slowpath+0x164/0x690 [ 94.258382][ T7335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.259971][ T7335] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 94.261579][ T7335] nf_setsockopt+0x8a/0xf0 [ 94.262819][ T7335] ipv6_setsockopt+0x135/0x170 [ 94.264090][ T7335] tcp_setsockopt+0xa4/0x100 [ 94.265309][ T7335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.266857][ T7335] do_sock_setsockopt+0x222/0x480 [ 94.268223][ T7335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 94.269763][ T7335] ? lock_acquire+0x2f/0xb0 [ 94.270984][ T7335] __sys_setsockopt+0x1a0/0x230 [ 94.272292][ T7335] __ia32_sys_setsockopt+0xbc/0x160 [ 94.273674][ T7335] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.275043][ T7335] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 94.276827][ T7335] __do_fast_syscall_32+0x73/0x120 [ 94.278237][ T7335] do_fast_syscall_32+0x32/0x80 [ 94.279545][ T7335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.281267][ T7335] RIP: 0023:0xf7f54579 [ 94.282342][ T7335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.287395][ T7335] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 94.289585][ T7335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 94.291744][ T7335] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000630 [ 94.293806][ T7335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.296018][ T7335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.298117][ T7335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.300195][ T7335] [ 94.301209][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.304889][ T7335] Mem-Info: [ 94.305790][ T7335] active_anon:8291 inactive_anon:755 isolated_anon:0 [ 94.305790][ T7335] active_file:15102 inactive_file:31466 isolated_file:0 [ 94.305790][ T7335] unevictable:1768 dirty:108 writeback:0 [ 94.305790][ T7335] slab_reclaimable:5591 slab_unreclaimable:57961 [ 94.305790][ T7335] mapped:28492 shmem:5931 pagetables:741 [ 94.305790][ T7335] sec_pagetables:303 bounce:0 [ 94.305790][ T7335] kernel_misc_reclaimable:0 [ 94.305790][ T7335] free:45767 free_pcp:3295 free_cma:0 [ 94.334318][ T7335] Node 0 active_anon:5080kB inactive_anon:604kB active_file:7536kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5216kB dirty:0kB writeback:0kB shmem:5308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9816kB pagetables:568kB sec_pagetables:1160kB all_unreclaimable? yes [ 94.342669][ T7335] Node 1 active_anon:27884kB inactive_anon:2416kB active_file:52872kB inactive_file:125864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94164kB dirty:432kB writeback:0kB shmem:18216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2392kB pagetables:2296kB sec_pagetables:52kB all_unreclaimable? no [ 94.351123][ T7335] Node 0 DMA free:2984kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:404kB inactive_anon:12kB active_file:356kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:620kB local_pcp:168kB free_cma:0kB [ 94.361381][ T7335] lowmem_reserve[]: 0 273 0 0 0 [ 94.362708][ T7335] Node 0 DMA32 free:26448kB boost:10240kB min:24144kB low:27620kB high:31096kB reserved_highatomic:4096KB active_anon:4676kB inactive_anon:592kB active_file:7180kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:306336kB mlocked:0kB bounce:0kB free_pcp:188kB local_pcp:32kB free_cma:0kB [ 94.370325][ T7335] lowmem_reserve[]: 0 0 0 0 0 [ 94.371668][ T7335] Node 1 DMA32 free:154184kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:18484kB inactive_anon:2416kB active_file:52872kB inactive_file:125864kB unevictable:3536kB writepending:432kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:21984kB local_pcp:812kB free_cma:0kB [ 94.380396][ T7335] lowmem_reserve[]: 0 0 0 0 0 [ 94.396091][ T7335] Node 0 DMA: 22*4kB (UE) 16*8kB (UME) 11*16kB (UM) 33*32kB (UME) 18*64kB (UME) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2984kB [ 94.404383][ T7335] Node 0 DMA32: 386*4kB (UMEH) 139*8kB (UMEH) 27*16kB (UMEH) 164*32kB (UMEH) 81*64kB (UMEH) 27*128kB (UMEH) 11*256kB (UME) 7*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 26448kB [ 94.409221][ T7335] Node 1 DMA32: 2*4kB (ME) 38*8kB (UE) 102*16kB (UME) 533*32kB (UME) 422*64kB (UME) 53*128kB (UME) 22*256kB (UME) 11*512kB (UME) 10*1024kB (UM) 7*2048kB (UM) 16*4096kB (M) = 154168kB [ 94.414096][ T7335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.416580][ T7335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.419117][ T7335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.421606][ T7335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.423992][ T7335] 49649 total pagecache pages [ 94.425391][ T7335] 0 pages in swap cache [ 94.426763][ T7335] Free swap = 124180kB [ 94.428458][ T7335] Total swap = 124996kB [ 94.429649][ T7335] 524155 pages RAM [ 94.430974][ T7335] 0 pages HighMem/MovableOnly [ 94.432629][ T7335] 206668 pages reserved [ 94.434063][ T7335] 0 pages cma reserved [ 94.435970][ T7338] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 94.501322][ T7347] xt_NFQUEUE: number of total queues is 0 [ 94.513389][ T7349] FAULT_INJECTION: forcing a failure. [ 94.513389][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 94.517735][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.1.371 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 94.521088][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.524438][ T7349] Call Trace: [ 94.525416][ T7349] [ 94.526348][ T7349] dump_stack_lvl+0x16c/0x1f0 [ 94.527857][ T7349] should_fail_ex+0x497/0x5b0 [ 94.529346][ T7349] ? fs_reclaim_acquire+0xae/0x150 [ 94.530728][ T7349] should_failslab+0xc2/0x120 [ 94.531942][ T7349] __kmalloc_noprof+0xce/0x4f0 [ 94.533118][ T7349] ? __pfx_d_absolute_path+0x10/0x10 [ 94.534397][ T7349] ? tomoyo_encode2+0x100/0x3e0 [ 94.535802][ T7349] tomoyo_encode2+0x100/0x3e0 [ 94.537121][ T7349] tomoyo_realpath_from_path+0x1a7/0x710 [ 94.538737][ T7349] tomoyo_mount_acl+0x1af/0x880 [ 94.540063][ T7349] ? hlock_class+0x4e/0x130 [ 94.541200][ T7349] ? __lock_acquire+0x15a9/0x3c40 [ 94.542428][ T7349] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 94.543760][ T7349] ? __pfx___lock_acquire+0x10/0x10 [ 94.545016][ T7349] ? stack_trace_save+0x95/0xd0 [ 94.546201][ T7349] ? __pfx_lock_release+0x10/0x10 [ 94.547519][ T7349] ? trace_lock_acquire+0x14e/0x1f0 [ 94.548872][ T7349] ? tomoyo_mount_permission+0x149/0x420 [ 94.550284][ T7349] ? lock_acquire+0x2f/0xb0 [ 94.551409][ T7349] ? tomoyo_mount_permission+0x149/0x420 [ 94.552805][ T7349] tomoyo_mount_permission+0x16e/0x420 [ 94.554140][ T7349] ? tomoyo_mount_permission+0x149/0x420 [ 94.555513][ T7349] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 94.557105][ T7349] ? get_current_fs_domain+0x184/0x1f0 [ 94.558423][ T7349] security_sb_mount+0x9b/0x260 [ 94.559755][ T7349] path_mount+0x129/0x1f10 [ 94.560949][ T7349] ? kmem_cache_free+0x152/0x4c0 [ 94.562225][ T7349] ? __pfx_path_mount+0x10/0x10 [ 94.563525][ T7349] ? putname+0x13c/0x180 [ 94.564663][ T7349] __ia32_sys_mount+0x292/0x310 [ 94.565900][ T7349] ? __pfx___ia32_sys_mount+0x10/0x10 [ 94.567216][ T7349] __do_fast_syscall_32+0x73/0x120 [ 94.568494][ T7349] do_fast_syscall_32+0x32/0x80 [ 94.569684][ T7349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.571341][ T7349] RIP: 0023:0xf742e579 [ 94.572380][ T7349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.577262][ T7349] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 94.579261][ T7349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 94.581168][ T7349] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 94.583046][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.584928][ T7349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.586819][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.589022][ T7349] [ 94.590675][ T7349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.460971][ T7368] FAULT_INJECTION: forcing a failure. [ 95.460971][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 95.464531][ T7368] CPU: 3 UID: 0 PID: 7368 Comm: syz.2.376 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 95.467245][ T7368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.470195][ T7368] Call Trace: [ 95.471083][ T7368] [ 95.472137][ T7368] dump_stack_lvl+0x16c/0x1f0 [ 95.473641][ T7368] should_fail_ex+0x497/0x5b0 [ 95.474984][ T7368] ? fs_reclaim_acquire+0xae/0x150 [ 95.476355][ T7368] should_failslab+0xc2/0x120 [ 95.477621][ T7368] __kmalloc_noprof+0xce/0x4f0 [ 95.478981][ T7368] ? iter_file_splice_write+0x1cd/0x10b0 [ 95.480470][ T7368] iter_file_splice_write+0x1cd/0x10b0 [ 95.481877][ T7368] ? mark_held_locks+0x9f/0xe0 [ 95.483140][ T7368] ? irqentry_exit+0x3b/0x90 [ 95.484378][ T7368] ? __pfx_iter_file_splice_write+0x10/0x10 [ 95.485924][ T7368] ? hlock_class+0x4e/0x130 [ 95.487117][ T7368] ? lock_acquire.part.0+0x155/0x380 [ 95.488542][ T7368] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 95.490012][ T7368] ? splice_direct_to_actor+0x346/0xa40 [ 95.491454][ T7368] ? __pfx_iter_file_splice_write+0x10/0x10 [ 95.492993][ T7368] direct_splice_actor+0x18f/0x6c0 [ 95.494334][ T7368] splice_direct_to_actor+0x346/0xa40 [ 95.495711][ T7368] ? __pfx_direct_splice_actor+0x10/0x10 [ 95.497160][ T7368] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 95.498696][ T7368] ? do_splice_direct+0x155/0x250 [ 95.500020][ T7368] ? __pfx_direct_splice_actor+0x10/0x10 [ 95.501482][ T7368] do_splice_direct+0x178/0x250 [ 95.502747][ T7368] ? __pfx_do_splice_direct+0x10/0x10 [ 95.504157][ T7368] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 95.505696][ T7368] do_sendfile+0xaed/0xe30 [ 95.506861][ T7368] ? __pfx_do_sendfile+0x10/0x10 [ 95.508157][ T7368] ? __fget_files+0x206/0x3a0 [ 95.509376][ T7368] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 95.510856][ T7368] ? ksys_write+0x1ba/0x250 [ 95.512046][ T7368] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 95.513694][ T7368] __do_fast_syscall_32+0x73/0x120 [ 95.515033][ T7368] do_fast_syscall_32+0x32/0x80 [ 95.516322][ T7368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.517966][ T7368] RIP: 0023:0xf7fe2579 [ 95.519046][ T7368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.524001][ T7368] RSP: 002b:00000000f514557c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 95.526121][ T7368] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 95.528202][ T7368] RDX: 0000000000000000 RSI: 00000000001000a3 RDI: 0000000000000000 [ 95.530249][ T7368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.532288][ T7368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.534332][ T7368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.536396][ T7368] [ 95.640497][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 95.642687][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 95.647662][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 96.127924][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 96.134264][ T7388] netlink: 50 bytes leftover after parsing attributes in process `syz.1.382'. [ 96.137903][ T7388] netlink: 50 bytes leftover after parsing attributes in process `syz.1.382'. [ 96.177168][ T7389] tipc: Resetting bearer [ 96.253628][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 96.325815][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 96.358680][ T7394] fuse: Unknown parameter '0x00000000000000030x0000000000000006' [ 96.368875][ T7394] netlink: 'syz.1.383': attribute type 12 has an invalid length. [ 96.417775][ T7396] xt_NFQUEUE: number of total queues is 0 [ 97.328544][ T7417] netlink: 'syz.1.390': attribute type 12 has an invalid length. [ 97.912824][ T7426] (syz.0.393,7426,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 97.917062][ T7426] (syz.0.393,7426,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 98.023420][ T7433] FAULT_INJECTION: forcing a failure. [ 98.023420][ T7433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.027027][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.3.395 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 98.029832][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.032869][ T7433] Call Trace: [ 98.033768][ T7433] [ 98.034561][ T7433] dump_stack_lvl+0x16c/0x1f0 [ 98.035864][ T7433] should_fail_ex+0x497/0x5b0 [ 98.037206][ T7433] ? fs_reclaim_acquire+0xae/0x150 [ 98.038575][ T7433] should_fail_alloc_page+0xe7/0x130 [ 98.039994][ T7433] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 98.041614][ T7433] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.043229][ T7433] __alloc_pages_noprof+0x190/0x25b0 [ 98.044650][ T7433] ? __kernel_text_address+0xd/0x40 [ 98.046080][ T7433] ? arch_stack_walk+0xa7/0x100 [ 98.047361][ T7433] ? hlock_class+0x4e/0x130 [ 98.048693][ T7433] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 98.050236][ T7433] ? __pfx___lock_acquire+0x10/0x10 [ 98.051611][ T7433] ? kasan_save_stack+0x42/0x60 [ 98.052888][ T7433] ? kasan_save_stack+0x33/0x60 [ 98.054166][ T7433] ? kasan_save_track+0x14/0x30 [ 98.055490][ T7433] ? __kasan_slab_alloc+0x89/0x90 [ 98.056825][ T7433] ? kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 98.058409][ T7433] ? alloc_vmap_area+0x636/0x2a70 [ 98.059723][ T7433] ? __get_vm_area_node+0x19e/0x2f0 [ 98.061076][ T7433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.062613][ T7433] ? policy_nodemask+0xea/0x4e0 [ 98.063896][ T7433] alloc_pages_mpol_noprof+0x2c9/0x610 [ 98.065313][ T7433] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 98.066874][ T7433] ? do_raw_spin_lock+0x12d/0x2c0 [ 98.068197][ T7433] ? lock_acquire+0x2f/0xb0 [ 98.069381][ T7433] ? kasan_populate_vmalloc_pte+0xfb/0x160 [ 98.070911][ T7433] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 98.072556][ T7433] get_free_pages_noprof+0xc/0x40 [ 98.073871][ T7433] kasan_populate_vmalloc_pte+0x2d/0x160 [ 98.075339][ T7433] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 98.076966][ T7433] __apply_to_page_range+0x5fd/0xd30 [ 98.078348][ T7433] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 98.079973][ T7433] ? __pfx___apply_to_page_range+0x10/0x10 [ 98.081493][ T7433] ? insert_vmap_area+0x2ef/0x4d0 [ 98.082805][ T7433] alloc_vmap_area+0x93e/0x2a70 [ 98.084087][ T7433] ? __pfx_alloc_vmap_area+0x10/0x10 [ 98.085477][ T7433] __get_vm_area_node+0x19e/0x2f0 [ 98.086785][ T7433] __vmalloc_node_range_noprof+0x26a/0x1530 [ 98.088330][ T7433] ? sock_hash_alloc+0x336/0x510 [ 98.089623][ T7433] ? sock_hash_alloc+0x336/0x510 [ 98.090936][ T7433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.092589][ T7433] ? rcu_is_watching+0x12/0xc0 [ 98.093846][ T7433] ? trace_kmalloc+0x2d/0xd0 [ 98.095056][ T7433] ? __kmalloc_node_noprof+0x23d/0x520 [ 98.096489][ T7433] ? sock_hash_alloc+0x336/0x510 [ 98.097781][ T7433] __bpf_map_area_alloc+0xea/0x190 [ 98.099194][ T7433] ? sock_hash_alloc+0x336/0x510 [ 98.100507][ T7433] sock_hash_alloc+0x336/0x510 [ 98.101761][ T7433] map_create+0x5c5/0x1f20 [ 98.102938][ T7433] ? __pfx_lock_release+0x10/0x10 [ 98.104268][ T7433] ? trace_lock_acquire+0x14e/0x1f0 [ 98.105632][ T7433] ? __pfx_map_create+0x10/0x10 [ 98.106906][ T7433] ? lock_acquire+0x2f/0xb0 [ 98.108099][ T7433] ? __might_fault+0xe3/0x190 [ 98.109338][ T7433] ? __might_fault+0xe3/0x190 [ 98.110592][ T7433] __sys_bpf+0x4f58/0x57a0 [ 98.111764][ T7433] ? __pfx_lock_release+0x10/0x10 [ 98.113079][ T7433] ? __pfx___sys_bpf+0x10/0x10 [ 98.114337][ T7433] ? vfs_write+0x306/0x1150 [ 98.115546][ T7433] ? __mutex_unlock_slowpath+0x164/0x690 [ 98.117015][ T7433] ? fput+0x67/0x440 [ 98.118201][ T7433] ? ksys_write+0x1ba/0x250 [ 98.119407][ T7433] ? __pfx_ksys_write+0x10/0x10 [ 98.120691][ T7433] __ia32_sys_bpf+0x76/0xe0 [ 98.121931][ T7433] __do_fast_syscall_32+0x73/0x120 [ 98.123277][ T7433] do_fast_syscall_32+0x32/0x80 [ 98.124566][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.126210][ T7433] RIP: 0023:0xf7f54579 [ 98.127277][ T7433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.132263][ T7433] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 98.134430][ T7433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000600 [ 98.136467][ T7433] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.138509][ T7433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.140552][ T7433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.142597][ T7433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.144648][ T7433] [ 98.180665][ T7436] xt_NFQUEUE: number of total queues is 0 [ 98.757075][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 98.843596][ T7454] pim6reg: entered allmulticast mode [ 98.896258][ T7461] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 [ 98.901016][ T7461] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 98.903766][ T7461] syz_tun: entered promiscuous mode [ 98.909017][ T7461] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.926018][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.928371][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.930954][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.933206][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.938699][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.942823][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.945025][ T25] usb 8-1: Product: syz [ 98.946119][ T25] usb 8-1: Manufacturer: syz [ 98.946462][ T7465] xt_NFQUEUE: number of total queues is 0 [ 98.949879][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 98.951687][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 98.955589][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 98.957688][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 99.265720][ T8] usb 8-1: USB disconnect, device number 4 [ 99.265793][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 99.269060][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 99.270602][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 99.427906][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 99.471269][ T39] audit: type=1326 audit(1733156098.833:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.400" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x0 [ 99.827194][ T8] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 99.957026][ T8] usb 8-1: device descriptor read/64, error -71 [ 100.024413][ T7516] FAULT_INJECTION: forcing a failure. [ 100.024413][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 100.027948][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.1.419 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 100.030608][ T7516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.033262][ T7516] Call Trace: [ 100.034085][ T7516] [ 100.034810][ T7516] dump_stack_lvl+0x16c/0x1f0 [ 100.035991][ T7516] should_fail_ex+0x497/0x5b0 [ 100.037149][ T7516] ? fs_reclaim_acquire+0xae/0x150 [ 100.038441][ T7516] should_failslab+0xc2/0x120 [ 100.039627][ T7516] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 100.041031][ T7516] ? __d_alloc+0x35/0x8c0 [ 100.042133][ T7516] __d_alloc+0x35/0x8c0 [ 100.043201][ T7516] d_alloc+0x4a/0x1e0 [ 100.044215][ T7516] d_alloc_parallel+0xe9/0x12b0 [ 100.045454][ T7516] ? __d_lookup+0x25c/0x4a0 [ 100.046582][ T7516] ? trace_lock_acquire+0x14e/0x1f0 [ 100.047976][ T7516] ? lookup_open.isra.0+0x229/0x14c0 [ 100.049284][ T7516] ? __pfx_d_alloc_parallel+0x10/0x10 [ 100.050630][ T7516] ? __d_lookup+0x266/0x4a0 [ 100.051849][ T7516] lookup_open.isra.0+0xab5/0x14c0 [ 100.053080][ T7516] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 100.054411][ T7516] ? copy_huge_pmd+0x2320/0x2400 [ 100.055630][ T7516] ? lock_acquire+0x2f/0xb0 [ 100.056738][ T7516] ? path_openat+0x153e/0x2d60 [ 100.057943][ T7516] ? copy_huge_pmd+0x2320/0x2400 [ 100.059226][ T7516] ? __pfx_down_write+0x10/0x10 [ 100.060419][ T7516] ? mnt_get_write_access+0x20c/0x300 [ 100.061714][ T7516] path_openat+0x904/0x2d60 [ 100.062848][ T7516] ? __pfx_path_openat+0x10/0x10 [ 100.064067][ T7516] ? __pfx___lock_acquire+0x10/0x10 [ 100.065378][ T7516] ? lock_acquire.part.0+0x11b/0x380 [ 100.066658][ T7516] ? find_held_lock+0x2d/0x110 [ 100.067796][ T7516] do_filp_open+0x20c/0x470 [ 100.068932][ T7516] ? __pfx_do_filp_open+0x10/0x10 [ 100.070253][ T7516] ? find_held_lock+0x2d/0x110 [ 100.071497][ T7516] ? alloc_fd+0x41f/0x760 [ 100.072589][ T7516] do_sys_openat2+0x17a/0x1e0 [ 100.073763][ T7516] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.075055][ T7516] ? __fget_files+0x206/0x3a0 [ 100.076295][ T7516] __ia32_compat_sys_openat+0x16e/0x210 [ 100.077754][ T7516] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.079265][ T7516] ? ksys_write+0x1ba/0x250 [ 100.080445][ T7516] __do_fast_syscall_32+0x73/0x120 [ 100.081728][ T7516] do_fast_syscall_32+0x32/0x80 [ 100.082973][ T7516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.084537][ T7516] RIP: 0023:0xf742e579 [ 100.085574][ T7516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.090610][ T7516] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 100.092796][ T7516] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000100 [ 100.094842][ T7516] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 100.096947][ T7516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.098997][ T7516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.101052][ T7516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.103115][ T7516] [ 100.130302][ T7520] input: syz0 as /devices/virtual/input/input15 [ 100.246975][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 100.248261][ T7523] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.251302][ T7523] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.253468][ T7523] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.255705][ T7523] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.258113][ T7523] vxlan0: entered promiscuous mode [ 100.259802][ T7523] vxlan0: entered allmulticast mode [ 100.387076][ T8] usb 8-1: device descriptor read/64, error -71 [ 100.412410][ T7528] syz.1.423 (7528): drop_caches: 2 [ 100.497082][ T8] usb usb8-port1: attempt power cycle [ 100.760525][ T7533] syz.0.424[7533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.766836][ T7533] syz.0.424[7533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.802951][ T7533] syz.0.424[7533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.076967][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 101.098357][ T8] usb 8-1: device descriptor read/8, error -71 [ 101.384584][ T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 101.408289][ T8] usb 8-1: device descriptor read/8, error -71 [ 101.463608][ T7544] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 101.527992][ T8] usb usb8-port1: unable to enumerate USB device [ 101.563478][ T7552] binder: 7551:7552 ioctl c0306201 20000580 returned -14 [ 101.565764][ T7552] binder: 7551:7552 ioctl c0306201 200002c0 returned -22 [ 101.726195][ T7558] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.919122][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.020926][ T7564] syz.3.434[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.021187][ T7564] syz.3.434[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.024576][ T7564] syz.3.434[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.032406][ T7560] bridge_slave_1 (unregistering): left allmulticast mode [ 102.037287][ T7560] bridge_slave_1 (unregistering): left promiscuous mode [ 102.039183][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.207127][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.435'. [ 102.442215][ T7570] FAULT_INJECTION: forcing a failure. [ 102.442215][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 102.445500][ T7570] CPU: 1 UID: 0 PID: 7570 Comm: syz.1.436 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 102.448745][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.451959][ T7570] Call Trace: [ 102.453207][ T7570] [ 102.454260][ T7570] dump_stack_lvl+0x16c/0x1f0 [ 102.455992][ T7570] should_fail_ex+0x497/0x5b0 [ 102.457482][ T7570] should_failslab+0xc2/0x120 [ 102.459197][ T7570] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 102.460704][ T7570] ? skb_clone+0x190/0x3f0 [ 102.462465][ T7570] skb_clone+0x190/0x3f0 [ 102.463776][ T7570] netlink_deliver_tap+0xafd/0xca0 [ 102.465588][ T7570] netlink_unicast+0x5e1/0x7f0 [ 102.467350][ T7570] ? __pfx_netlink_unicast+0x10/0x10 [ 102.468805][ T7570] ? __phys_addr_symbol+0x30/0x80 [ 102.470373][ T7570] ? __check_object_size+0x488/0x710 [ 102.472407][ T7570] netlink_sendmsg+0x8b8/0xd70 [ 102.473953][ T7570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.475599][ T7570] ____sys_sendmsg+0x9ae/0xb40 [ 102.476984][ T7570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.478490][ T7570] ? get_compat_msghdr+0x11b/0x170 [ 102.479971][ T7570] ___sys_sendmsg+0x135/0x1e0 [ 102.481212][ T7570] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.482583][ T7570] ? __pfx_lock_release+0x10/0x10 [ 102.483922][ T7570] ? trace_lock_acquire+0x14e/0x1f0 [ 102.485373][ T7570] ? __fget_files+0x206/0x3a0 [ 102.486606][ T7570] __sys_sendmsg+0x16e/0x220 [ 102.487856][ T7570] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.489215][ T7570] __do_fast_syscall_32+0x73/0x120 [ 102.490614][ T7570] do_fast_syscall_32+0x32/0x80 [ 102.491907][ T7570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.493558][ T7570] RIP: 0023:0xf742e579 [ 102.494660][ T7570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.500136][ T7570] RSP: 002b:00000000f50d457c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 102.502676][ T7570] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 102.505061][ T7570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.507335][ T7570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.509412][ T7570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.511479][ T7570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.513567][ T7570] [ 102.572783][ T7573] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 102.577243][ T7573] bridge0: port 4(team0) entered disabled state [ 102.579974][ T7573] team0: left allmulticast mode [ 102.581273][ T7573] team_slave_0: left allmulticast mode [ 102.582692][ T7573] team_slave_1: left allmulticast mode [ 102.584127][ T7573] team0: left promiscuous mode [ 102.585447][ T7573] team_slave_0: left promiscuous mode [ 102.587445][ T7573] team_slave_1: left promiscuous mode [ 102.589870][ T7573] bridge0: port 4(team0) entered disabled state [ 102.594190][ T7573] batman_adv: batadv0: Adding interface: team0 [ 102.596443][ T7573] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.605327][ T7573] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 103.420879][ T7587] binder: BINDER_SET_CONTEXT_MGR already set [ 103.422770][ T7587] binder: 7585:7587 ioctl 4018620d 20000000 returned -16 [ 103.477257][ T7586] binder: 7585:7586 ioctl c0306201 20000380 returned -14 [ 103.514022][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.442'. [ 103.516825][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 103.520338][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.442'. [ 103.523253][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.442'. [ 103.530610][ T7590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.714176][ T7593] input: syz0 as /devices/virtual/input/input16 [ 103.790158][ T7597] xt_NFQUEUE: number of total queues is 0 [ 103.895051][ T7600] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 103.895070][ T7600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.446'. [ 103.895164][ T7600] team0: entered promiscuous mode [ 103.895174][ T7600] team_slave_0: entered promiscuous mode [ 103.895437][ T7600] team_slave_1: entered promiscuous mode [ 103.895522][ T7600] team0: entered allmulticast mode [ 103.895531][ T7600] team_slave_0: entered allmulticast mode [ 103.895539][ T7600] team_slave_1: entered allmulticast mode [ 103.896619][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.913161][ T7600] bridge0: port 3(team0) entered blocking state [ 103.913233][ T7600] bridge0: port 3(team0) entered disabled state [ 103.914265][ T7600] bridge0: port 3(team0) entered blocking state [ 103.918957][ T7600] bridge0: port 3(team0) entered forwarding state [ 104.007179][ T7602] overlayfs: missing 'workdir' [ 104.618575][ T7621] ip6_vti0: entered allmulticast mode [ 104.627742][ T5951] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.864113][ T7633] syz.3.455[7633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.864345][ T7633] syz.3.455[7633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.867855][ T7633] syz.3.455[7633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.016183][ T5951] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.023220][ T5951] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.025873][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.028311][ T5951] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.031120][ T5951] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.035033][ T5951] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.037566][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.039613][ T5951] usb 6-1: Product: syz [ 105.040688][ T5951] usb 6-1: Manufacturer: syz [ 105.046823][ T5951] cdc_wdm 6-1:1.0: skipping garbage [ 105.048293][ T5951] cdc_wdm 6-1:1.0: skipping garbage [ 105.052155][ T5951] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 105.053737][ T5951] cdc_wdm 6-1:1.0: Unknown control protocol [ 105.304181][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 105.304622][ T1330] usb 6-1: USB disconnect, device number 5 [ 105.306268][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 105.309996][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 106.306644][ T7665] virtio-fs: tag < 8 [ 106.306644][ T7665] maxauthsize : 16 [ 106.306644][ T7665] geniv : [ 106.306644][ T7665] [ 106.306644][ T7665] name : seqiv(rfc4106(gcm(aes))) [ 106.306644][ T7665] driver : seqiv(rfc4106-gcm-vaes-avx10_256) [ 106.306644][ T7665] module : kernel [ 106.306644][ T7665] priority : 700 [ 106.306644][ T7665] refcnt : 2 [ 106.306644][ T7665] selftest : passed [ 106.306644][ T7665] internal : no [ 106.306644][ T7665] type : aead [ 106.306644][ T7665] async : yes [ 106.306644][ T7665] blocksize : 1 [ 106.306644][ T7665] ivsize : 8 [ 106.306644][ T7665] maxauthsize : 16 [ 106.306644][ T7665] geniv : [ 106.306644][ T7665] [ 106.306644][ T7665] name : pcbc(fcrypt) [ 106.306644][ T7665] driver : cryptd(pcbc(fcrypt-generic)) [ 106.306644][ T7665] module : kernel [ 106.306644][ T7665] priority : 50 [ 106.306644][ T7665] refcnt : 1 [ 106.306644][ T7665] selftest : passed [ 106.306644][ T7665] internal : no [ 106.306644][ T7665] type : skcipher [ 106.306644][ T7665] async : yes [ 106.306644][ T7665] blocksize : 8 [ 106.306644][ T7665] min keysize : 8 [ 106.306644][ T7665] max keysize : 8 [ 106.306644][ T7665] ivsize : 8 [ 106.306644][ T7665] chunksize : 8 [ 106.306644][ T7665] walksize : 8 [ 106.306644][ T7665] statesize : 0 [ 106.306644][ T7665] [ 106.306644][ T7665] name : vmac64(aes) [ 106.306644][ T7665] driver : vmac64(aes-generic) [ 106.306644][ T7665] module : kernel [ 106.306644][ T7665] priority : 100 [ 106.306644][ T7665] refcnt : 1 [ 106.306644][ T7665] selftest : passed [ 106.306644][ T7665] internal : no [ 106.306644][ T7665] type : shash [ 106.306644][ T7665] blocksize : 16 [ 106.306644][ T7665] digestsize : 8 [ 106.306644][ T7665] [ 106.306644][ T7665] name : __ecb(cast6) [ 106.310262][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.363525][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.368620][ T7670] 9pnet_rdma: rdma_create_trans (7670): problem binding to privport: 13 [ 106.442579][ T7673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.519007][ T7676] bad cache= option: none [ 106.519007][ T7676] [ 106.520977][ T7676] CIFS: VFS: bad cache= option: none [ 106.540019][ T7678] netlink: 'syz.1.471': attribute type 23 has an invalid length. [ 106.542499][ T7678] FAULT_INJECTION: forcing a failure. [ 106.542499][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 106.546023][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.1.471 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 106.549568][ T7678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.552365][ T7678] Call Trace: [ 106.553248][ T7678] [ 106.554041][ T7678] dump_stack_lvl+0x16c/0x1f0 [ 106.555299][ T7678] should_fail_ex+0x497/0x5b0 [ 106.556741][ T7678] ? fs_reclaim_acquire+0xae/0x150 [ 106.558108][ T7678] should_failslab+0xc2/0x120 [ 106.559347][ T7678] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 106.560778][ T7678] ? __kernfs_new_node+0xd3/0x890 [ 106.562096][ T7678] __kernfs_new_node+0xd3/0x890 [ 106.563371][ T7678] ? __pfx___kernfs_new_node+0x10/0x10 [ 106.564796][ T7678] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 106.566499][ T7678] ? rwsem_read_trylock+0x12d/0x250 [ 106.567821][ T7678] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 106.569147][ T7678] kernfs_new_node+0x186/0x240 [ 106.570421][ T7678] __kernfs_create_file+0x53/0x350 [ 106.571784][ T7678] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 106.573215][ T7678] sysfs_merge_group+0x1b1/0x340 [ 106.574525][ T7678] ? __pfx_sysfs_merge_group+0x10/0x10 [ 106.575965][ T7678] ? __pfx_dev_add_physical_location+0x10/0x10 [ 106.577582][ T7678] ? bus_to_subsys+0x12d/0x160 [ 106.578897][ T7678] dpm_sysfs_add+0x237/0x280 [ 106.580114][ T7678] device_add+0x9a8/0x1a70 [ 106.581279][ T7678] ? __pfx_device_add+0x10/0x10 [ 106.582574][ T7678] ? kfree+0x274/0x4b0 [ 106.583655][ T7678] device_create_groups_vargs+0x1f8/0x270 [ 106.585134][ T7678] device_create+0xe9/0x130 [ 106.586325][ T7678] ? __pfx_device_create+0x10/0x10 [ 106.587674][ T7678] ? rcu_is_watching+0x12/0xc0 [ 106.588935][ T7678] ? do_init_timer+0xc9/0x110 [ 106.590188][ T7678] ? ieee80211_roc_setup+0x136/0x270 [ 106.591583][ T7678] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 106.593026][ T7678] mac80211_hwsim_new_radio+0x3df/0x56c0 [ 106.594518][ T7678] ? _printk+0xc8/0x100 [ 106.595635][ T7678] ? __pfx__printk+0x10/0x10 [ 106.596935][ T7678] ? ___ratelimit+0x24c/0x570 [ 106.598194][ T7678] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 106.599789][ T7678] hwsim_new_radio_nl+0xb42/0x12b0 [ 106.601134][ T7678] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 106.602575][ T7678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 106.604484][ T7678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 106.606413][ T7678] genl_family_rcv_msg_doit+0x202/0x2f0 [ 106.607841][ T7678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 106.609428][ T7678] ? genl_get_cmd+0x195/0x580 [ 106.610687][ T7678] ? bpf_lsm_capable+0x9/0x10 [ 106.611930][ T7678] ? security_capable+0x7e/0x260 [ 106.613217][ T7678] ? ns_capable+0xd7/0x110 [ 106.614403][ T7678] genl_rcv_msg+0x565/0x800 [ 106.615603][ T7678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.616895][ T7678] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 106.618326][ T7678] netlink_rcv_skb+0x165/0x410 [ 106.619580][ T7678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.620918][ T7678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.622310][ T7678] ? down_read+0xc9/0x330 [ 106.623481][ T7678] ? __pfx_down_read+0x10/0x10 [ 106.624762][ T7678] ? netlink_deliver_tap+0x1ae/0xca0 [ 106.626146][ T7678] genl_rcv+0x28/0x40 [ 106.627202][ T7678] netlink_unicast+0x53c/0x7f0 [ 106.628473][ T7678] ? __pfx_netlink_unicast+0x10/0x10 [ 106.629877][ T7678] ? __phys_addr_symbol+0x30/0x80 [ 106.630392][ T7680] syz.0.468[7680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.631209][ T7678] ? __check_object_size+0x488/0x710 [ 106.634465][ T7680] syz.0.468[7680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.635824][ T7678] netlink_sendmsg+0x8b8/0xd70 [ 106.639398][ T7680] syz.0.468[7680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.640491][ T7678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.644754][ T7678] ____sys_sendmsg+0x9ae/0xb40 [ 106.646006][ T7678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.647393][ T7678] ? get_compat_msghdr+0x11b/0x170 [ 106.648757][ T7678] ___sys_sendmsg+0x135/0x1e0 [ 106.650017][ T7678] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.651392][ T7678] ? __pfx_lock_release+0x10/0x10 [ 106.652766][ T7678] ? trace_lock_acquire+0x14e/0x1f0 [ 106.654124][ T7678] ? __fget_files+0x206/0x3a0 [ 106.655369][ T7678] __sys_sendmsg+0x16e/0x220 [ 106.656566][ T7678] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.657914][ T7678] __do_fast_syscall_32+0x73/0x120 [ 106.659496][ T7678] do_fast_syscall_32+0x32/0x80 [ 106.661141][ T7678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.662808][ T7678] RIP: 0023:0xf742e579 [ 106.663918][ T7678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.668909][ T7678] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 106.671086][ T7678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 106.673152][ T7678] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.675218][ T7678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.677303][ T7678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.679486][ T7678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.681557][ T7678] [ 106.722658][ T7685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'. [ 106.830855][ T7695] tmpfs: Unknown parameter 'smackfshat' [ 107.449898][ T7706] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 107.452655][ T7706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.478'. [ 107.599908][ T7713] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.712643][ T7715] ata1.00: non-matching transfer count (1530558389/0) [ 108.035670][ T7723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.483'. [ 108.083587][ T7725] input: syz0 as /devices/virtual/input/input17 [ 108.219156][ T7729] Cannot find del_set index 4 as target [ 108.229540][ T7729] input: syz0 as /devices/virtual/input/input18 [ 108.286973][ T7733] bad cache= option: none [ 108.286973][ T7733] [ 108.289044][ T7733] CIFS: VFS: bad cache= option: none [ 108.411585][ T7750] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 108.439473][ T7751] input: syz0 as /devices/virtual/input/input19 [ 108.847364][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 109.298530][ T39] audit: type=1326 audit(1733156108.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.316740][ T39] audit: type=1326 audit(1733156108.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.323111][ T39] audit: type=1326 audit(1733156108.673:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.331393][ T39] audit: type=1326 audit(1733156108.673:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.337135][ T39] audit: type=1326 audit(1733156108.673:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.342645][ T39] audit: type=1326 audit(1733156108.683:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.348614][ T39] audit: type=1326 audit(1733156108.683:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.355148][ T39] audit: type=1326 audit(1733156108.683:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.362665][ T39] audit: type=1326 audit(1733156108.703:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 109.368866][ T39] audit: type=1326 audit(1733156108.713:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 110.218814][ T7790] netlink: 76 bytes leftover after parsing attributes in process `syz.3.500'. [ 110.281710][ T7800] bad cache= option: none [ 110.281710][ T7800] [ 110.283490][ T7800] CIFS: VFS: bad cache= option: none [ 111.320030][ T7823] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 111.321942][ T7823] PKCS7: Only support pkcs7_signedData type [ 111.514517][ T7840] vivid-007: disconnect [ 111.517240][ T7840] 9pnet_virtio: no channels available for device syz [ 111.594802][ T7847] openvswitch: netlink: Unknown nsh attribute 0 [ 111.597099][ T7847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.636505][ T7849] dlm: no local IP address has been set [ 111.640372][ T7849] dlm: cannot start dlm midcomms -107 [ 112.369955][ T7849] vivid-007: reconnect [ 112.465551][ T7870] netlink: 18 bytes leftover after parsing attributes in process `syz.1.525'. [ 112.474033][ T7870] netlink: 18 bytes leftover after parsing attributes in process `syz.1.525'. [ 112.628228][ T7883] input: syz0 as /devices/virtual/input/input20 [ 112.639864][ T7883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.529'. [ 112.964962][ T7897] syz.2.531[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.965771][ T7897] syz.2.531[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.981075][ T7897] syz.2.531[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.076067][ T7928] binder: BINDER_SET_CONTEXT_MGR already set [ 114.078819][ T7930] FAULT_INJECTION: forcing a failure. [ 114.078819][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.079065][ T7928] binder: 7927:7928 ioctl 4018620d 200001c0 returned -16 [ 114.080617][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.0.544 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 114.088925][ T7930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.091732][ T7930] Call Trace: [ 114.092616][ T7930] [ 114.093398][ T7930] dump_stack_lvl+0x16c/0x1f0 [ 114.094646][ T7930] should_fail_ex+0x497/0x5b0 [ 114.095822][ T7930] _copy_to_user+0x32/0xd0 [ 114.097018][ T7930] simple_read_from_buffer+0xd0/0x160 [ 114.098430][ T7930] proc_fail_nth_read+0x198/0x270 [ 114.099770][ T7930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.101228][ T7930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.101575][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 114.102682][ T7930] vfs_read+0x1df/0xbe0 [ 114.105370][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 114.106455][ T7930] ? __fget_files+0x1fc/0x3a0 [ 114.110931][ T7930] ? __pfx___mutex_lock+0x10/0x10 [ 114.112436][ T7930] ? __pfx_vfs_read+0x10/0x10 [ 114.113707][ T7930] ? __fget_files+0x206/0x3a0 [ 114.114947][ T7930] ksys_read+0x12b/0x250 [ 114.116083][ T7930] ? __pfx_ksys_read+0x10/0x10 [ 114.117261][ T7932] veth1_to_bridge: entered promiscuous mode [ 114.117343][ T7930] __do_fast_syscall_32+0x73/0x120 [ 114.119144][ T7932] macvlan2: entered promiscuous mode [ 114.120323][ T7930] do_fast_syscall_32+0x32/0x80 [ 114.122151][ T7932] macvlan2: entered allmulticast mode [ 114.123403][ T7930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.123421][ T7930] RIP: 0023:0xf7faf579 [ 114.125241][ T7932] veth1_to_bridge: entered allmulticast mode [ 114.126856][ T7930] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 114.126869][ T7930] RSP: 002b:00000000f51365b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 114.126881][ T7930] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5136620 [ 114.126888][ T7930] RDX: 000000000000000f RSI: 00000000f743fff4 RDI: 0000000000000000 [ 114.126894][ T7930] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 114.126900][ T7930] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.126907][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.126920][ T7930] [ 114.239537][ T7942] bad cache= option: none [ 114.239537][ T7942] [ 114.241437][ T7942] CIFS: VFS: bad cache= option: none [ 114.468850][ T7963] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 114.660884][ T7973] bond0: (slave syz_tun): Releasing backup interface [ 114.664464][ T7973] bridge0: port 3(team0) entered disabled state [ 114.670766][ T7973] bridge_slave_0: left allmulticast mode [ 114.672281][ T7973] bridge_slave_0: left promiscuous mode [ 114.673795][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.678441][ T7973] bridge_slave_1: left allmulticast mode [ 114.679983][ T7973] bridge_slave_1: left promiscuous mode [ 114.681524][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.686292][ T7973] bond0: (slave bond_slave_0): Releasing backup interface [ 114.692291][ T7973] bond0: (slave bond_slave_1): Releasing backup interface [ 114.695525][ T7973] team_slave_0: left promiscuous mode [ 114.697682][ T7973] team_slave_0: left allmulticast mode [ 114.711688][ T7973] team0: Port device team_slave_0 removed [ 114.714448][ T7973] team_slave_1: left promiscuous mode [ 114.716464][ T7973] team_slave_1: left allmulticast mode [ 114.721441][ T7973] team0: Port device team_slave_1 removed [ 114.723883][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.726731][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.730781][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.733354][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.741841][ T7973] bond0: (slave netdevsim0): Releasing backup interface [ 115.013435][ T7980] syz.1.554[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.013648][ T7980] syz.1.554[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.016807][ T7980] syz.1.554[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.402942][ T7988] syz.2.555[7988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.406148][ T7988] syz.2.555[7988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.409314][ T7988] syz.2.555[7988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.688337][ T7993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.842504][ T8001] overlayfs: overlapping lowerdir path [ 116.048458][ T8011] bad cache= option: none [ 116.048458][ T8011] [ 116.050402][ T8011] CIFS: VFS: bad cache= option: none [ 116.222667][ T8023] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 116.225795][ T8023] PKCS7: Only support pkcs7_signedData type [ 116.359669][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 116.359678][ T39] audit: type=1326 audit(1733156115.723:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.377430][ T39] audit: type=1326 audit(1733156115.723:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.384075][ T39] audit: type=1326 audit(1733156115.733:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.391860][ T39] audit: type=1326 audit(1733156115.733:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.398578][ T39] audit: type=1326 audit(1733156115.733:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.404693][ T39] audit: type=1326 audit(1733156115.743:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.410441][ T39] audit: type=1326 audit(1733156115.743:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7faf5a7 code=0x7ffc0000 [ 116.417696][ T8023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.565'. [ 116.420373][ T39] audit: type=1326 audit(1733156115.743:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.428974][ T39] audit: type=1326 audit(1733156115.743:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7faf5a7 code=0x7ffc0000 [ 116.434467][ T39] audit: type=1326 audit(1733156115.743:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 116.950366][ T8044] overlayfs: overlapping lowerdir path [ 117.291973][ T8056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.575'. [ 117.357860][ T8064] bad cache= option: none [ 117.357860][ T8064] [ 117.359617][ T8064] CIFS: VFS: bad cache= option: none [ 117.699696][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.576'. [ 118.328915][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 118.332171][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 119.090336][ T8083] FAULT_INJECTION: forcing a failure. [ 119.090336][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 119.093614][ T8083] CPU: 2 UID: 0 PID: 8083 Comm: syz.3.582 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 119.096359][ T8083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.099197][ T8083] Call Trace: [ 119.100119][ T8083] [ 119.100896][ T8083] dump_stack_lvl+0x16c/0x1f0 [ 119.102141][ T8083] should_fail_ex+0x497/0x5b0 [ 119.103388][ T8083] ? fs_reclaim_acquire+0xae/0x150 [ 119.104729][ T8083] should_failslab+0xc2/0x120 [ 119.105966][ T8083] __kmalloc_noprof+0xce/0x4f0 [ 119.107221][ T8083] ? tomoyo_encode2+0x100/0x3e0 [ 119.108508][ T8083] tomoyo_encode2+0x100/0x3e0 [ 119.109761][ T8083] tomoyo_realpath_from_path+0x1a7/0x710 [ 119.111221][ T8083] ? tomoyo_path_number_perm+0x235/0x5b0 [ 119.112699][ T8083] tomoyo_path_number_perm+0x248/0x5b0 [ 119.114117][ T8083] ? tomoyo_path_number_perm+0x235/0x5b0 [ 119.115588][ T8083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.117177][ T8083] ? __pfx_lock_release+0x10/0x10 [ 119.118504][ T8083] ? trace_lock_acquire+0x14e/0x1f0 [ 119.119867][ T8083] ? lock_acquire+0x2f/0xb0 [ 119.121057][ T8083] ? __fget_files+0x40/0x3a0 [ 119.122277][ T8083] ? __fget_files+0x206/0x3a0 [ 119.123518][ T8083] security_file_ioctl_compat+0x9b/0x240 [ 119.124999][ T8083] __do_compat_sys_ioctl+0x4e/0x2c0 [ 119.126368][ T8083] __do_fast_syscall_32+0x73/0x120 [ 119.127722][ T8083] do_fast_syscall_32+0x32/0x80 [ 119.129008][ T8083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.130676][ T8083] RIP: 0023:0xf7f54579 [ 119.131765][ T8083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.136782][ T8083] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 119.138969][ T8083] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000000089a2 [ 119.141040][ T8083] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.143092][ T8083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.145177][ T8083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.147229][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.149295][ T8083] [ 119.150788][ T8083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.218006][ T8090] bridge0: port 1(syz_tun) entered blocking state [ 119.219770][ T8090] bridge0: port 1(syz_tun) entered disabled state [ 119.221531][ T8090] syz_tun: entered allmulticast mode [ 119.228444][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 119.258120][ T8102] 9pnet_fd: Insufficient options for proto=fd [ 119.437022][ T8111] bad cache= option: none [ 119.437022][ T8111] [ 119.438777][ T8111] CIFS: VFS: bad cache= option: none [ 120.349373][ T8134] FAULT_INJECTION: forcing a failure. [ 120.349373][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 120.353679][ T8134] CPU: 2 UID: 0 PID: 8134 Comm: syz.1.595 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 120.357250][ T8134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.360108][ T8134] Call Trace: [ 120.360981][ T8134] [ 120.361758][ T8134] dump_stack_lvl+0x16c/0x1f0 [ 120.362999][ T8134] should_fail_ex+0x497/0x5b0 [ 120.364243][ T8134] ? fs_reclaim_acquire+0xae/0x150 [ 120.365657][ T8134] should_failslab+0xc2/0x120 [ 120.366890][ T8134] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 120.368440][ T8134] ? __alloc_skb+0x2b3/0x380 [ 120.369718][ T8134] __alloc_skb+0x2b3/0x380 [ 120.370910][ T8134] ? __pfx___alloc_skb+0x10/0x10 [ 120.372222][ T8134] ? get_current_settings+0x674/0x900 [ 120.373614][ T8134] ? __pfx_get_current_settings+0x10/0x10 [ 120.375269][ T8134] mgmt_cmd_complete+0x4c/0x540 [ 120.376559][ T8134] set_debug_keys+0x2bf/0x5d0 [ 120.377806][ T8134] ? __pfx_set_debug_keys+0x10/0x10 [ 120.379189][ T8134] ? lock_acquire+0x2f/0xb0 [ 120.380385][ T8134] ? hci_dev_get+0x46/0x1e0 [ 120.381575][ T8134] ? do_raw_read_unlock+0x44/0xe0 [ 120.382887][ T8134] ? _raw_read_unlock+0x28/0x50 [ 120.384191][ T8134] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 120.385974][ T8134] hci_sock_sendmsg+0x1528/0x25e0 [ 120.387660][ T8134] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 120.389054][ T8134] sock_write_iter+0x4fe/0x5b0 [ 120.390465][ T8134] ? __pfx_sock_write_iter+0x10/0x10 [ 120.391856][ T8134] ? bpf_lsm_file_permission+0x9/0x10 [ 120.393264][ T8134] ? security_file_permission+0x71/0x210 [ 120.394723][ T8134] vfs_write+0x5ae/0x1150 [ 120.395041][ T8137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.596'. [ 120.395881][ T8134] ? __pfx_sock_write_iter+0x10/0x10 [ 120.399903][ T8134] ? __pfx_vfs_write+0x10/0x10 [ 120.401172][ T8134] ? __fget_files+0x40/0x3a0 [ 120.402383][ T8134] ksys_write+0x207/0x250 [ 120.403524][ T8134] ? __pfx_ksys_write+0x10/0x10 [ 120.404817][ T8134] __do_fast_syscall_32+0x73/0x120 [ 120.406171][ T8134] do_fast_syscall_32+0x32/0x80 [ 120.407461][ T8134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.409112][ T8134] RIP: 0023:0xf742e579 [ 120.410261][ T8134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.415552][ T8134] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 120.418239][ T8134] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000300 [ 120.420353][ T8134] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.422388][ T8134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.424441][ T8134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.426487][ T8134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.428542][ T8134] [ 120.988157][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.606'. [ 121.207992][ T8171] 9pnet_fd: Insufficient options for proto=fd [ 121.983536][ T8191] syz.1.613: attempt to access beyond end of device [ 121.983536][ T8191] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 121.987269][ T8191] syz.1.613: attempt to access beyond end of device [ 121.987269][ T8191] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 121.990668][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 121.993397][ T8191] syz.1.613: attempt to access beyond end of device [ 121.993397][ T8191] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 121.996787][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 122.001819][ T8191] syz.1.613: attempt to access beyond end of device [ 122.001819][ T8191] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 122.006189][ T8191] syz.1.613: attempt to access beyond end of device [ 122.006189][ T8191] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 122.011112][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 122.013676][ T8191] syz.1.613: attempt to access beyond end of device [ 122.013676][ T8191] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 122.018741][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 122.021776][ T8191] syz.1.613: attempt to access beyond end of device [ 122.021776][ T8191] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 122.027540][ T8191] syz.1.613: attempt to access beyond end of device [ 122.027540][ T8191] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 122.031867][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 122.035426][ T8191] syz.1.613: attempt to access beyond end of device [ 122.035426][ T8191] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 122.040691][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 122.046784][ T8191] syz.1.613: attempt to access beyond end of device [ 122.046784][ T8191] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 122.050834][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 122.053900][ T8191] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 122.056333][ T8191] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 122.099727][ T8196] FAULT_INJECTION: forcing a failure. [ 122.099727][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.103201][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.3.614 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 122.105960][ T8196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.108778][ T8196] Call Trace: [ 122.109664][ T8196] [ 122.110459][ T8196] dump_stack_lvl+0x16c/0x1f0 [ 122.111712][ T8196] should_fail_ex+0x497/0x5b0 [ 122.112947][ T8196] _copy_to_user+0x32/0xd0 [ 122.114127][ T8196] vti6_siocdevprivate+0x1ab/0x7b0 [ 122.115477][ T8196] ? kasan_save_track+0x14/0x30 [ 122.116753][ T8196] ? kasan_save_free_info+0x3b/0x60 [ 122.118119][ T8196] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 122.119642][ T8196] ? full_name_hash+0xbc/0x110 [ 122.120922][ T8196] ? netdev_name_node_lookup+0xf0/0x140 [ 122.122374][ T8196] ? trace_contention_end+0xee/0x140 [ 122.123779][ T8196] dev_ifsioc+0x529/0x10b0 [ 122.124973][ T8196] ? __pfx_dev_ifsioc+0x10/0x10 [ 122.126270][ T8196] ? __pfx___mutex_lock+0x10/0x10 [ 122.127812][ T8196] ? __pfx_lock_release+0x10/0x10 [ 122.129143][ T8196] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 122.130735][ T8196] dev_ioctl+0x1b2/0x10c0 [ 122.131891][ T8196] sock_ioctl+0x5b9/0x6c0 [ 122.133034][ T8196] ? __pfx_sock_ioctl+0x10/0x10 [ 122.134310][ T8196] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.135652][ T8196] compat_sock_ioctl+0x619/0x7e0 [ 122.136969][ T8196] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 122.138399][ T8196] ? __fget_files+0x206/0x3a0 [ 122.139724][ T8196] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 122.141137][ T8196] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 122.142509][ T8196] __do_fast_syscall_32+0x73/0x120 [ 122.143853][ T8196] do_fast_syscall_32+0x32/0x80 [ 122.145139][ T8196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.146782][ T8196] RIP: 0023:0xf7f54579 [ 122.147858][ T8196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.152796][ T8196] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 122.154971][ T8196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 122.157029][ T8196] RDX: 0000000020001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.159074][ T8196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.161164][ T8196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 122.163204][ T8196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.165280][ T8196] [ 122.814588][ T8221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.167273][ T39] kauditd_printk_skb: 2466 callbacks suppressed [ 123.167301][ T39] audit: type=1800 audit(1733156122.523:2516): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="file0" dev="9p" ino=37617876 res=0 errno=0 [ 123.201154][ T8239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.608732][ T8254] syz.0.630[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.609043][ T8254] syz.0.630[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.613226][ T8254] syz.0.630[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.439775][ T8275] bad cache= option: none [ 124.439775][ T8275] [ 124.444604][ T8275] CIFS: VFS: bad cache= option: none [ 125.178199][ T8299] FAULT_INJECTION: forcing a failure. [ 125.178199][ T8299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.181619][ T8299] CPU: 3 UID: 0 PID: 8299 Comm: syz.1.642 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 125.184351][ T8299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.187520][ T8299] Call Trace: [ 125.188750][ T8299] [ 125.189853][ T8299] dump_stack_lvl+0x16c/0x1f0 [ 125.191109][ T8299] should_fail_ex+0x497/0x5b0 [ 125.192359][ T8299] _copy_to_user+0x32/0xd0 [ 125.193646][ T8299] simple_read_from_buffer+0xd0/0x160 [ 125.195101][ T8299] proc_fail_nth_read+0x198/0x270 [ 125.196521][ T8299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.198135][ T8299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.199569][ T8299] vfs_read+0x1df/0xbe0 [ 125.200655][ T8299] ? __fget_files+0x1fc/0x3a0 [ 125.201896][ T8299] ? __pfx___mutex_lock+0x10/0x10 [ 125.203208][ T8299] ? __pfx_vfs_read+0x10/0x10 [ 125.204444][ T8299] ? __fget_files+0x206/0x3a0 [ 125.205679][ T8299] ksys_read+0x12b/0x250 [ 125.206980][ T8299] ? __pfx_ksys_read+0x10/0x10 [ 125.208379][ T8299] __do_fast_syscall_32+0x73/0x120 [ 125.209730][ T8299] do_fast_syscall_32+0x32/0x80 [ 125.211009][ T8299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.212811][ T8299] RIP: 0023:0xf742e579 [ 125.213879][ T8299] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 125.218812][ T8299] RSP: 002b:00000000f51165b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 125.220954][ T8299] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5116620 [ 125.223042][ T8299] RDX: 000000000000000f RSI: 00000000f741fff4 RDI: 0000000000000000 [ 125.225104][ T8299] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 125.227161][ T8299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.229220][ T8299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.231281][ T8299] [ 125.675407][ T8323] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.682534][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 125.887030][ T8334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.357054][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.359876][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.362260][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.364910][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.367708][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.370374][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.373134][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.375709][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.378924][ T8356] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 126.533407][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 127.501794][ T8387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.668'. [ 127.661976][ T8397] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 127.664483][ T8397] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 127.790110][ T8404] ucma_write: process 501 (syz.3.675) changed security contexts after opening file descriptor, this is not allowed. [ 127.943931][ T8418] netlink: 188 bytes leftover after parsing attributes in process `syz.0.679'. [ 127.946517][ T8418] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 127.976712][ T8420] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.348741][ T8443] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 129.182496][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 129.512168][ T8484] FAULT_INJECTION: forcing a failure. [ 129.512168][ T8484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.515646][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.0.699 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 129.518390][ T8484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.521150][ T8484] Call Trace: [ 129.522020][ T8484] [ 129.522797][ T8484] dump_stack_lvl+0x16c/0x1f0 [ 129.524044][ T8484] should_fail_ex+0x497/0x5b0 [ 129.525238][ T8484] save_fsave_header+0x17c/0x2e0 [ 129.526536][ T8484] ? __pfx_save_fsave_header+0x10/0x10 [ 129.527973][ T8484] ? __local_bh_enable_ip+0xa4/0x120 [ 129.529370][ T8484] copy_fpstate_to_sigframe+0x77a/0xaf0 [ 129.530834][ T8484] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 129.532527][ T8484] ? __pfx___schedule+0x10/0x10 [ 129.533857][ T8484] get_sigframe+0x4aa/0x9c0 [ 129.535087][ T8484] ? __pfx_get_sigframe+0x10/0x10 [ 129.536575][ T8484] ? siginfo_layout+0x177/0x290 [ 129.537877][ T8484] ia32_setup_rt_frame+0xe4/0xb30 [ 129.539216][ T8484] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 129.540722][ T8484] ? __pfx_vfs_read+0x10/0x10 [ 129.541986][ T8484] ? __fget_files+0x40/0x3a0 [ 129.543213][ T8484] arch_do_signal_or_restart+0x47b/0x7e0 [ 129.544702][ T8484] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.546333][ T8484] ? ksys_read+0x1ba/0x250 [ 129.547535][ T8484] ? __pfx_ksys_read+0x10/0x10 [ 129.548929][ T8484] syscall_exit_to_user_mode+0x150/0x2a0 [ 129.550445][ T8484] do_int80_emulation+0x111/0x200 [ 129.551819][ T8484] asm_int80_emulation+0x1a/0x20 [ 129.553153][ T8484] RIP: 0023:0xf7faf577 [ 129.554245][ T8484] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 129.559245][ T8484] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 129.561434][ T8484] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000020001140 [ 129.563494][ T8484] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.565552][ T8484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.567614][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.569689][ T8484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.571766][ T8484] [ 130.009527][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.332575][ T8494] FAULT_INJECTION: forcing a failure. [ 130.332575][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 130.335700][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.0.702 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 130.338271][ T8494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.340938][ T8494] Call Trace: [ 130.341770][ T8494] [ 130.342521][ T8494] dump_stack_lvl+0x16c/0x1f0 [ 130.343717][ T8494] should_fail_ex+0x497/0x5b0 [ 130.344901][ T8494] ? fs_reclaim_acquire+0xae/0x150 [ 130.346199][ T8494] should_failslab+0xc2/0x120 [ 130.347401][ T8494] __kmalloc_cache_noprof+0x68/0x420 [ 130.348701][ T8494] ? __get_fs_type+0x21/0x170 [ 130.349858][ T8494] alloc_fs_context+0x57/0x9c0 [ 130.351070][ T8494] path_mount+0xbfb/0x1f10 [ 130.352201][ T8494] ? kmem_cache_free+0x152/0x4c0 [ 130.353447][ T8494] ? __pfx_path_mount+0x10/0x10 [ 130.354676][ T8494] ? putname+0x13c/0x180 [ 130.355745][ T8494] __ia32_sys_mount+0x292/0x310 [ 130.356971][ T8494] ? __pfx___ia32_sys_mount+0x10/0x10 [ 130.358492][ T8494] __do_fast_syscall_32+0x73/0x120 [ 130.359832][ T8494] do_fast_syscall_32+0x32/0x80 [ 130.361093][ T8494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.362719][ T8494] RIP: 0023:0xf7faf579 [ 130.363773][ T8494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.368650][ T8494] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 130.370808][ T8494] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000000 [ 130.372839][ T8494] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.375025][ T8494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.377023][ T8494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.379047][ T8494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.381157][ T8494] [ 130.382054][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.469221][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 130.633796][ T8512] netlink: 'syz.0.710': attribute type 39 has an invalid length. [ 130.850109][ T8522] [ 130.850791][ T8522] ============================= [ 130.852067][ T8522] [ BUG: Invalid wait context ] [ 130.853331][ T8522] 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 Not tainted [ 130.855213][ T8522] ----------------------------- [ 130.857141][ T8522] syz.1.712/8522 is trying to lock: [ 130.859382][ T8522] ffff888021222518 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 130.861872][ T8522] other info that might help us debug this: [ 130.863414][ T8522] context-{5:5} [ 130.864330][ T8522] 4 locks held by syz.1.712/8522: [ 130.865639][ T8522] #0: ffff88806bcd60a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xd38/0x1620 [ 130.868358][ T8522] #1: ffff8880238ff128 (&acct->lock){+.+.}-{2:2}, at: io_wq_enqueue+0x20a/0xb30 [ 130.870726][ T8522] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 130.873154][ T8522] #3: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 130.875653][ T8522] stack backtrace: [ 130.876636][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.712 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 130.879348][ T8522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.882114][ T8522] Call Trace: [ 130.882992][ T8522] [ 130.883781][ T8522] dump_stack_lvl+0x116/0x1f0 [ 130.885020][ T8522] __lock_acquire+0x878/0x3c40 [ 130.886270][ T8522] ? __pfx___lock_acquire+0x10/0x10 [ 130.887642][ T8522] ? __pfx___lock_acquire+0x10/0x10 [ 130.889013][ T8522] lock_acquire.part.0+0x11b/0x380 [ 130.890367][ T8522] ? __lock_task_sighand+0xc2/0x340 [ 130.891749][ T8522] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 130.893221][ T8522] ? rcu_is_watching+0x12/0xc0 [ 130.894482][ T8522] ? trace_lock_acquire+0x14e/0x1f0 [ 130.895751][ T8522] ? trace_lock_acquire+0x14e/0x1f0 [ 130.897109][ T8522] ? __lock_task_sighand+0xc2/0x340 [ 130.898467][ T8522] ? lock_acquire+0x2f/0xb0 [ 130.899670][ T8522] ? __lock_task_sighand+0xc2/0x340 [ 130.901026][ T8522] _raw_spin_lock_irqsave+0x3a/0x60 [ 130.902391][ T8522] ? __lock_task_sighand+0xc2/0x340 [ 130.903760][ T8522] __lock_task_sighand+0xc2/0x340 [ 130.905131][ T8522] group_send_sig_info+0x290/0x300 [ 130.906471][ T8522] ? __pfx_group_send_sig_info+0x10/0x10 [ 130.908075][ T8522] ? __pfx___lock_acquire+0x10/0x10 [ 130.909443][ T8522] ? is_bpf_text_address+0x30/0x1a0 [ 130.910824][ T8522] ? bpf_ksym_find+0x124/0x1c0 [ 130.912086][ T8522] bpf_send_signal_common+0x415/0x520 [ 130.913500][ T8522] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 130.915047][ T8522] ? trace_lock_acquire+0x14e/0x1f0 [ 130.916403][ T8522] ? bpf_trace_run2+0x1c2/0x590 [ 130.917697][ T8522] bpf_send_signal+0x1d/0x30 [ 130.918906][ T8522] bpf_prog_631417f49dd64198+0x25/0x48 [ 130.920325][ T8522] bpf_trace_run2+0x231/0x590 [ 130.921561][ T8522] ? __pfx_bpf_trace_run2+0x10/0x10 [ 130.922919][ T8522] ? hlock_class+0x4e/0x130 [ 130.924117][ T8522] trace_contention_end.constprop.0+0xf0/0x170 [ 130.925709][ T8522] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 130.927290][ T8522] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 130.928999][ T8522] ? lock_acquire.part.0+0x11b/0x380 [ 130.930393][ T8522] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 130.931861][ T8522] do_raw_spin_lock+0x210/0x2c0 [ 130.933137][ T8522] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.934525][ T8522] ? lock_acquire+0x2f/0xb0 [ 130.935734][ T8522] ? io_wq_enqueue+0x20a/0xb30 [ 130.936996][ T8522] io_wq_enqueue+0x20a/0xb30 [ 130.938213][ T8522] ? io_arm_poll_handler+0x133/0xc60 [ 130.939604][ T8522] ? __pfx_io_wq_enqueue+0x10/0x10 [ 130.940954][ T8522] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 130.942598][ T8522] ? io_prep_async_work+0x654/0x770 [ 130.943987][ T8522] io_queue_iowq+0x232/0x4a0 [ 130.945218][ T8522] io_queue_async+0x1e7/0x420 [ 130.946460][ T8522] io_submit_sqes+0x177a/0x25f0 [ 130.947876][ T8522] __do_sys_io_uring_enter+0xd43/0x1620 [ 130.949326][ T8522] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 130.950900][ T8522] ? __ia32_sys_futex_time32+0x1da/0x460 [ 130.952378][ T8522] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 130.953834][ T8522] ? xfd_validate_state+0x5d/0x180 [ 130.955159][ T8522] ? rcu_is_watching+0x12/0xc0 [ 130.956393][ T8522] __do_fast_syscall_32+0x73/0x120 [ 130.957723][ T8522] do_fast_syscall_32+0x32/0x80 [ 130.958979][ T8522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.960632][ T8522] RIP: 0023:0xf742e579 [ 130.961693][ T8522] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.966642][ T8522] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 130.968802][ T8522] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000003516 [ 130.970782][ T8522] RDX: 0000000000007b09 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.972835][ T8522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.974858][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.976926][ T8522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.978968][ T8522] [ 130.979900][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.001901][ T25] libceph: connect (1)[c::]:6789 error -101 [ 131.003508][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 131.037304][ T8528] ceph: No mds server is up or the cluster is laggy [ 132.128190][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.129931][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 16:15:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851531d5 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc90007b37008 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85153170 R15=0000000000000000 RIP=ffffffff851531ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3e7574 CR3=0000000068510000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff2039c92 RDX=ffff88802956c880 RSI=ffffffff81484a34 RDI=ffffffff81484a21 RBP=ffff8880238ff110 RSP=ffffc90007ac7b28 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cb197 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b53fc40 R15=ffffed100471fe22 RIP=ffffffff81484a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3d265d CR3=0000000068510000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=ffffea0001bb67c0 RCX=ffffffff81e1d2fc RDX=ffff888024f8a440 RSI=ffffffff81e1d30a RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90007c27678 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005f2b R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffc90007c27ad8 RIP=ffffffff81994098 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7273c60 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88802b446740 RCX=ffffffff818d43fc RDX=ffff888023600000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000751f598 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffed1005688ce9 R13=0000000000000001 R14=ffff88802b446748 R15=ffff88802b73ff80 RIP=ffffffff818d43fc RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2f3398 CR3=000000006b0fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000