last executing test programs: 4.860334036s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4622, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x80, 0x0}, 0x240ce040) write$cgroup_subtree(r5, 0x0, 0xfe33) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c7, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0xb}, {}, {0x1}, {0xc}, {0x0, 0x1, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 4.69192639s ago: executing program 1 (id=394): process_vm_readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000000c0)=""/215, 0xffe4}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000640)=""/106, 0x6a}], 0x6, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/6, 0xffffffffffffff42}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f0000000540)=""/162, 0xa2}], 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000004c0)="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", 0xfc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f00000006c0)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x0, {0x2, 0x1, @private=0xa010100}}) 3.950118834s ago: executing program 2 (id=399): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x25, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r1, r2, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) setrlimit(0x2, &(0x7f0000000500)={0x10001, 0x6}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (fail_nth: 1) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r8, 0x5501) 3.690575751s ago: executing program 1 (id=400): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x25, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x169a82, 0x0) sendfile(r1, r2, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r5, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r7 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) setrlimit(0x2, &(0x7f0000000500)={0x10001, 0x6}) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0b45545, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) 3.06068716s ago: executing program 2 (id=402): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000300)='./file1\x00', 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='efs\x00', 0x9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x300, r0}) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) 2.480684404s ago: executing program 1 (id=404): mkdir(&(0x7f0000000180)='./file0\x00', 0x190) sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r3, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='gretap\x00', &(0x7f00000001c0)='gretap\x00', 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='virtiofs\x00', 0x8000, &(0x7f0000000080)='gr\x87\x0e5$\x88\xa4\xfe.\x15!\xe7\xcb\x92\xf1Dquota') 2.340214729s ago: executing program 3 (id=406): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000b009500000000000000abbd75e5bdd93c00ed62a7ddb838217daad7113307caaff7fd53d999d335db51afef3813a7bef818ec505fc059aeef"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x4) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x24, 0x4800) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.008880733s ago: executing program 2 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4622, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x80, 0x0}, 0x240ce040) write$cgroup_subtree(r5, 0x0, 0xfe33) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="f80000002d0001010000000000000000e80000800c0011000000000000000080140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dbdd67534b7e359c08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e588c6675ee97be1ed0c79246c291ae1de45c09a62d82506a19f0b2a0ad4aab7167a379f35829652656ab47b02b9b3f842ae6492cac39868c86ad8a41b7aaf13fe9d6b524b8f262abc61dbccb0a65a88d530d6640966060a3ee356641e292a11bb3d11d82b34fff0d986f4ef47c8daa6a3585f68659ce142467eec8e263b05cf8f68d5bb8ba0bc3742c34ca7224af"], 0xf8}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c7, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0xb}, {}, {0x1}, {0xc}, {0x0, 0x1, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 1.550750671s ago: executing program 1 (id=410): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2ded, 0x3fff, 0x46, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x0, 0xc1, &(0x7f00000009c0)=""/193}, {0x6000, 0x14, &(0x7f0000000200)=""/20}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1.497768022s ago: executing program 3 (id=411): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xc468}], 0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff0000670600002000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x20000, 0x40, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x400, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x24008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1.494483027s ago: executing program 1 (id=412): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {0xfffffffc}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknod$loop(0x0, 0x2000, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kvm_vcpu_wakeup\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x9) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r8}, 0x14) 1.100484938s ago: executing program 2 (id=413): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x3}) ppoll(&(0x7f00000000c0)=[{r0, 0xc468}], 0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 580.935011ms ago: executing program 0 (id=415): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async, rerun: 64) landlock_restrict_self(r0, 0x0) (rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) (rerun: 64) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @buffer={0x29, 0x0, 0x0}, &(0x7f0000000580)="8536b60bfaf93b7c584d22b81fb9b7b8e9eb41914d45f2a51079fb5e2f40b2ea9b", 0x0, 0x9, 0x10000, 0x1, 0x0}) 526.656373ms ago: executing program 0 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 521.768585ms ago: executing program 1 (id=417): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r2 = syz_open_dev$loop(&(0x7f0000000380), 0x4, 0x600) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000780)={@val={0x8, 0x4305}, @val={0x4, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba627aa2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88769ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c93148aa8d2934a15d29cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f686"}}, 0xfce) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='{\x00a\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf25010000000000000008410000004c00180000040175647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x1b, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockname$packet(r5, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000026c0)=0x14) sendto$packet(r5, &(0x7f0000002640)="1cff7ec31eaab47dc6665ac368e9d27d2e810d", 0x13, 0x1, &(0x7f0000002700)={0x11, 0x1, r9, 0x1, 0x9}, 0x14) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r11, @ANYRESHEX=r3, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000000000000d55d000000000000030000000000000005000000810000000300000000000000010000000100000005000000000000000200000000000000010000000000000002000000000000000600000000800020000006000000000000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0600004005000000000000000000000000000000fcffffffffffffff060000000440000026272e3a26280000020000000000000001000000000000000104000000000000050000000000000080000000040000000500000000000000040400000000000005000000000000000400000000000000010800000000d70000ff7f0000004000007f00"/152, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=r3, @ANYRES32=r13, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x0, r7}, {0x2, 0x0, r7}, {0x2, 0x0, r7}, {0x2, 0x1, r7}, {0x2, 0x4, r7}, {0x2, 0x5, r7}], {0x4, 0x5}, [{0x8, 0x6, r8}, {0x8, 0x1, r8}, {0x8, 0x3, r13}], {}, {0x20, 0x2}}, 0x6c, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x80, 0x0, @mcast1, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 430.996649ms ago: executing program 0 (id=418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000006c0)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x0, {0x2, 0x1, @private=0xa010100}}) 430.415115ms ago: executing program 0 (id=419): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000b009500000000000000abbd75e5bdd93c00ed62a7ddb838217daad7113307caaff7fd53d999d335db51afef3813a7bef818ec505fc059aeef"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x4) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x24, 0x4800) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 333.213115ms ago: executing program 3 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 332.908285ms ago: executing program 3 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (fail_nth: 1) 160.669303ms ago: executing program 3 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) (fail_nth: 1) 160.322191ms ago: executing program 3 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x2, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ddfda0618eb1262000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000580)=r4, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f00000035c0)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r7 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008c02"]) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x7a95, 0x0, 0x0, 0x0, 0x3c) 69.579641ms ago: executing program 0 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e507646dcef67df33c9e9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 159.555µs ago: executing program 2 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 0s ago: executing program 0 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32385' (ED25519) to the list of known hosts. [ 41.849809][ T5906] cgroup: Unknown subsys name 'net' [ 41.977206][ T5906] cgroup: Unknown subsys name 'cpuset' [ 41.982614][ T5906] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.918254][ T5906] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.105619][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.110702][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.114162][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.114486][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.116704][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.119628][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.121600][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.123251][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.124466][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.124543][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.124995][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.125614][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.126215][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.126469][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.128809][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.132084][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.133426][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.149355][ T5304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.153125][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.155948][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.343774][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.491811][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.494564][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.497056][ T5949] bridge_slave_0: entered allmulticast mode [ 46.499943][ T5949] bridge_slave_0: entered promiscuous mode [ 46.506212][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.508439][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.510768][ T5949] bridge_slave_1: entered allmulticast mode [ 46.513520][ T5949] bridge_slave_1: entered promiscuous mode [ 46.517061][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 46.528256][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.574988][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.584233][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 46.605026][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.780992][ T5949] team0: Port device team_slave_0 added [ 46.783173][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.785508][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.787757][ T5950] bridge_slave_0: entered allmulticast mode [ 46.790282][ T5950] bridge_slave_0: entered promiscuous mode [ 46.820800][ T5949] team0: Port device team_slave_1 added [ 46.836374][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.838614][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.840851][ T5950] bridge_slave_1: entered allmulticast mode [ 46.844540][ T5950] bridge_slave_1: entered promiscuous mode [ 46.885794][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.888048][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.890283][ T5948] bridge_slave_0: entered allmulticast mode [ 46.893025][ T5948] bridge_slave_0: entered promiscuous mode [ 46.934731][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.937654][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.940457][ T5962] bridge_slave_0: entered allmulticast mode [ 46.946168][ T5962] bridge_slave_0: entered promiscuous mode [ 46.949292][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.952369][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.955477][ T5948] bridge_slave_1: entered allmulticast mode [ 46.959197][ T5948] bridge_slave_1: entered promiscuous mode [ 46.963084][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.965424][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.973389][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.978590][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.981681][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.984083][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.986329][ T5962] bridge_slave_1: entered allmulticast mode [ 46.988911][ T5962] bridge_slave_1: entered promiscuous mode [ 47.009393][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.012358][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.022789][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.028910][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.078016][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.097880][ T5950] team0: Port device team_slave_0 added [ 47.115342][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.119716][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.124394][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.128204][ T5950] team0: Port device team_slave_1 added [ 47.254354][ T5962] team0: Port device team_slave_0 added [ 47.258317][ T5962] team0: Port device team_slave_1 added [ 47.262876][ T5948] team0: Port device team_slave_0 added [ 47.268894][ T5949] hsr_slave_0: entered promiscuous mode [ 47.271114][ T5949] hsr_slave_1: entered promiscuous mode [ 47.274850][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.277697][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.289946][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.319531][ T5948] team0: Port device team_slave_1 added [ 47.323406][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.326332][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.336663][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.417017][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.419806][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.430277][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.460617][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.468308][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.479072][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.511439][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.514471][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.524585][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.528796][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.531734][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.543423][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.601894][ T5950] hsr_slave_0: entered promiscuous mode [ 47.604213][ T5950] hsr_slave_1: entered promiscuous mode [ 47.606246][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.608682][ T5950] Cannot create hsr debugfs directory [ 47.678982][ T5962] hsr_slave_0: entered promiscuous mode [ 47.681185][ T5962] hsr_slave_1: entered promiscuous mode [ 47.684217][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.686600][ T5962] Cannot create hsr debugfs directory [ 47.788584][ T5948] hsr_slave_0: entered promiscuous mode [ 47.791707][ T5948] hsr_slave_1: entered promiscuous mode [ 47.795381][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.798609][ T5948] Cannot create hsr debugfs directory [ 48.047684][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.059474][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.067368][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.072719][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.102267][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.106707][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.110461][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.114369][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.157957][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.161965][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.175135][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.179299][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.184008][ T5960] Bluetooth: hci2: command tx timeout [ 48.184014][ T5957] Bluetooth: hci1: command tx timeout [ 48.193434][ T5960] Bluetooth: hci3: command tx timeout [ 48.193633][ T5957] Bluetooth: hci0: command tx timeout [ 48.250295][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.254136][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.258487][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.264643][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.273488][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.284546][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.297899][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.309840][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.315118][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.317488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.320904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.323600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.331684][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.340647][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.343195][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.347251][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.349513][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.358017][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.377938][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.380214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.389122][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.391347][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.420091][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.460417][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.477139][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.482528][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.485062][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.490724][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.493337][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.529600][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.540179][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.567520][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.581927][ T5949] veth0_vlan: entered promiscuous mode [ 48.586597][ T5950] veth0_vlan: entered promiscuous mode [ 48.594215][ T5949] veth1_vlan: entered promiscuous mode [ 48.598516][ T5950] veth1_vlan: entered promiscuous mode [ 48.612907][ T5962] veth0_vlan: entered promiscuous mode [ 48.623320][ T5962] veth1_vlan: entered promiscuous mode [ 48.637021][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.639511][ T5949] veth0_macvtap: entered promiscuous mode [ 48.648784][ T5949] veth1_macvtap: entered promiscuous mode [ 48.652629][ T5950] veth0_macvtap: entered promiscuous mode [ 48.662605][ T5950] veth1_macvtap: entered promiscuous mode [ 48.670290][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.681114][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.691368][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.696817][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.702101][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.705533][ T5962] veth0_macvtap: entered promiscuous mode [ 48.709075][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711881][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715133][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.717831][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.727240][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.731571][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.737677][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.748597][ T5962] veth1_macvtap: entered promiscuous mode [ 48.752240][ T5948] veth0_vlan: entered promiscuous mode [ 48.756873][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.759623][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.762367][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.765820][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788438][ T5948] veth1_vlan: entered promiscuous mode [ 48.798189][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.801535][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.804892][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.808195][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.812071][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.829244][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.832591][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.836282][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.839813][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.843586][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.849574][ T5962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.852300][ T5962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.855323][ T5962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858436][ T5962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.874688][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.877434][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.883353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.885810][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.890811][ T5948] veth0_macvtap: entered promiscuous mode [ 48.905738][ T5948] veth1_macvtap: entered promiscuous mode [ 48.915466][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.918956][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.942734][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.943011][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.946676][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.949797][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.955851][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.959012][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.962006][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.965362][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.969332][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.976919][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.980138][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.983103][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.986546][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.989743][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.993157][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.997828][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.005985][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.009457][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.012091][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.017910][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.020686][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.023864][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.026659][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.038697][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.041171][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.061617][ T6015] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 49.092048][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.098659][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.102816][ T6018] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 49.116236][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.118759][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.511536][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.515658][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.606695][ T6037] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 49.609196][ T6037] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 49.611609][ T6037] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 50.242567][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.263839][ T5957] Bluetooth: hci1: command tx timeout [ 50.273411][ T5957] Bluetooth: hci0: command tx timeout [ 50.275137][ T5957] Bluetooth: hci2: command tx timeout [ 50.275261][ T5960] Bluetooth: hci3: command tx timeout [ 51.363421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 51.370222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.372906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 52.153390][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.306040][ T5996] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 52.308545][ T5996] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.311390][ T5996] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.316499][ T5996] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.319077][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.321398][ T5996] usb 7-1: Product: syz [ 52.322616][ T5996] usb 7-1: Manufacturer: syz [ 52.324112][ T5996] usb 7-1: SerialNumber: syz [ 52.343767][ T5960] Bluetooth: hci3: command tx timeout [ 52.353715][ T5960] Bluetooth: hci2: command tx timeout [ 52.355055][ T5955] Bluetooth: hci0: command tx timeout [ 52.356080][ T5960] Bluetooth: hci1: command tx timeout [ 53.104204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.719894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 53.805177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 54.128169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 54.153341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.424960][ T5960] Bluetooth: hci0: command tx timeout [ 54.425014][ T5957] Bluetooth: hci2: command tx timeout [ 54.433394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 54.433746][ T5957] Bluetooth: hci1: command tx timeout [ 54.433968][ T5960] Bluetooth: hci3: command tx timeout [ 54.947344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.194317][ T5996] usb 7-1: 0:2 : does not exist [ 55.216291][ T5992] IPVS: starting estimator thread 0... [ 55.254725][ T5996] usb 7-1: USB disconnect, device number 2 [ 55.303488][ T6120] IPVS: using max 43 ests per chain, 103200 per kthread [ 55.507883][ T6125] macsec0: entered promiscuous mode [ 55.508375][ T6125] macsec0: entered allmulticast mode [ 55.508430][ T6125] veth1_macvtap: entered allmulticast mode [ 55.786139][ T6135] Zero length message leads to an empty skb [ 55.836853][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.382607][ T6203] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 59.397298][ T6203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.471438][ T6246] netlink: 64 bytes leftover after parsing attributes in process `syz.3.54'. [ 62.326369][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 62.329112][ T6264] FAULT_INJECTION: forcing a failure. [ 62.329112][ T6264] name failslab, interval 1, probability 0, space 0, times 1 [ 62.332973][ T6264] CPU: 3 UID: 0 PID: 6264 Comm: syz.3.66 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 62.332987][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.332993][ T6264] Call Trace: [ 62.332997][ T6264] [ 62.333001][ T6264] dump_stack_lvl+0x16c/0x1f0 [ 62.333020][ T6264] should_fail_ex+0x512/0x640 [ 62.333033][ T6264] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 62.333051][ T6264] should_failslab+0xc2/0x120 [ 62.333061][ T6264] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 62.333077][ T6264] ? __alloc_skb+0x2b2/0x380 [ 62.333093][ T6264] __alloc_skb+0x2b2/0x380 [ 62.333106][ T6264] ? __pfx___alloc_skb+0x10/0x10 [ 62.333117][ T6264] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 62.333137][ T6264] netlink_ack+0x15d/0xb80 [ 62.333156][ T6264] netlink_rcv_skb+0x347/0x440 [ 62.333172][ T6264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.333188][ T6264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.333210][ T6264] ? netlink_deliver_tap+0x1ae/0xd30 [ 62.333227][ T6264] netlink_unicast+0x53a/0x7f0 [ 62.333244][ T6264] ? __pfx_netlink_unicast+0x10/0x10 [ 62.333276][ T6264] netlink_sendmsg+0x8d1/0xdd0 [ 62.333294][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.333310][ T6264] ? __import_iovec+0x1c8/0x660 [ 62.333326][ T6264] ____sys_sendmsg+0xa95/0xc70 [ 62.333337][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.333346][ T6264] ? get_compat_msghdr+0x11a/0x170 [ 62.333365][ T6264] ___sys_sendmsg+0x134/0x1d0 [ 62.333380][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.333409][ T6264] __sys_sendmsg+0x16d/0x220 [ 62.333423][ T6264] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.333442][ T6264] ? rcu_is_watching+0x12/0xc0 [ 62.333457][ T6264] __do_fast_syscall_32+0x73/0x120 [ 62.333475][ T6264] do_fast_syscall_32+0x32/0x80 [ 62.333491][ T6264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.333504][ T6264] RIP: 0023:0xf7fa4579 [ 62.333512][ T6264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.333522][ T6264] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 62.333532][ T6264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 62.333538][ T6264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.333544][ T6264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.333549][ T6264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.333555][ T6264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.333567][ T6264] [ 65.405692][ T6338] FAULT_INJECTION: forcing a failure. [ 65.405692][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 65.409624][ T6338] CPU: 3 UID: 0 PID: 6338 Comm: syz.3.80 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 65.409638][ T6338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.409645][ T6338] Call Trace: [ 65.409649][ T6338] [ 65.409653][ T6338] dump_stack_lvl+0x16c/0x1f0 [ 65.409672][ T6338] should_fail_ex+0x512/0x640 [ 65.409690][ T6338] should_failslab+0xc2/0x120 [ 65.409701][ T6338] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 65.409719][ T6338] ? __alloc_skb+0x2b2/0x380 [ 65.409734][ T6338] __alloc_skb+0x2b2/0x380 [ 65.409747][ T6338] ? __pfx___alloc_skb+0x10/0x10 [ 65.409762][ T6338] ? if_nlmsg_size+0x475/0xaf0 [ 65.409778][ T6338] rtmsg_ifinfo_build_skb+0x81/0x280 [ 65.409797][ T6338] rtmsg_ifinfo+0x9f/0x1a0 [ 65.409815][ T6338] __dev_notify_flags+0x24c/0x2e0 [ 65.409829][ T6338] ? __pfx___dev_notify_flags+0x10/0x10 [ 65.409842][ T6338] ? __dev_change_flags+0x3d5/0x720 [ 65.409856][ T6338] ? __pfx___dev_change_flags+0x10/0x10 [ 65.409871][ T6338] ? __pfx_validate_linkmsg+0x10/0x10 [ 65.409886][ T6338] netif_change_flags+0x108/0x160 [ 65.409901][ T6338] do_setlink.constprop.0+0xddf/0x44b0 [ 65.409919][ T6338] ? __lock_acquire+0xaa4/0x1ba0 [ 65.409929][ T6338] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 65.409945][ T6338] ? rcu_is_watching+0x12/0xc0 [ 65.409958][ T6338] ? br_switchdev_set_port_flag+0x134/0x380 [ 65.409975][ T6338] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 65.409998][ T6338] ? br_port_flags_change+0x6b/0x1d0 [ 65.410012][ T6338] ? br_setport+0x1180/0x17d0 [ 65.410028][ T6338] ? __pfx_br_setport+0x10/0x10 [ 65.410044][ T6338] ? do_raw_spin_lock+0x12c/0x2b0 [ 65.410057][ T6338] ? __local_bh_enable_ip+0xa4/0x120 [ 65.410073][ T6338] ? br_port_slave_changelink+0xd9/0x190 [ 65.410082][ T6338] ? __local_bh_enable_ip+0xa4/0x120 [ 65.410096][ T6338] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 65.410114][ T6338] rtnl_newlink+0x1446/0x2000 [ 65.410132][ T6338] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.410148][ T6338] ? kasan_quarantine_put+0x10a/0x240 [ 65.410163][ T6338] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.410180][ T6338] ? kfree_skbmem+0x1a4/0x1f0 [ 65.410194][ T6338] ? rcu_is_watching+0x12/0xc0 [ 65.410207][ T6338] ? trace_cap_capable+0x18d/0x200 [ 65.410220][ T6338] ? find_held_lock+0x2b/0x80 [ 65.410234][ T6338] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.410247][ T6338] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.410260][ T6338] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 65.410275][ T6338] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.410289][ T6338] rtnetlink_rcv_msg+0x95b/0xe90 [ 65.410305][ T6338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.410326][ T6338] netlink_rcv_skb+0x16a/0x440 [ 65.410342][ T6338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.410357][ T6338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.410380][ T6338] ? netlink_deliver_tap+0x1ae/0xd30 [ 65.410397][ T6338] netlink_unicast+0x53a/0x7f0 [ 65.410414][ T6338] ? __pfx_netlink_unicast+0x10/0x10 [ 65.410433][ T6338] netlink_sendmsg+0x8d1/0xdd0 [ 65.410450][ T6338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.410467][ T6338] ? __import_iovec+0x1c8/0x660 [ 65.410483][ T6338] ____sys_sendmsg+0xa95/0xc70 [ 65.410494][ T6338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.410503][ T6338] ? get_compat_msghdr+0x11a/0x170 [ 65.410522][ T6338] ___sys_sendmsg+0x134/0x1d0 [ 65.410537][ T6338] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.410566][ T6338] __sys_sendmsg+0x16d/0x220 [ 65.410580][ T6338] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.410599][ T6338] ? rcu_is_watching+0x12/0xc0 [ 65.410614][ T6338] __do_fast_syscall_32+0x73/0x120 [ 65.410631][ T6338] do_fast_syscall_32+0x32/0x80 [ 65.410646][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.410660][ T6338] RIP: 0023:0xf7fa4579 [ 65.410668][ T6338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.410681][ T6338] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 65.410691][ T6338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 65.410698][ T6338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.410703][ T6338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.410709][ T6338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.410714][ T6338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.410727][ T6338] [ 65.412396][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.672372][ T6350] FAULT_INJECTION: forcing a failure. [ 65.672372][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.677123][ T6350] CPU: 3 UID: 0 PID: 6350 Comm: syz.1.83 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 65.677138][ T6350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.677144][ T6350] Call Trace: [ 65.677148][ T6350] [ 65.677151][ T6350] dump_stack_lvl+0x16c/0x1f0 [ 65.677170][ T6350] should_fail_ex+0x512/0x640 [ 65.677185][ T6350] _copy_to_user+0x32/0xd0 [ 65.677199][ T6350] simple_read_from_buffer+0xcb/0x170 [ 65.677215][ T6350] proc_fail_nth_read+0x197/0x270 [ 65.677230][ T6350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.677245][ T6350] ? rw_verify_area+0xcf/0x680 [ 65.677258][ T6350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.677272][ T6350] vfs_read+0x1de/0xc70 [ 65.677288][ T6350] ? __pfx___mutex_lock+0x10/0x10 [ 65.677304][ T6350] ? __pfx_vfs_read+0x10/0x10 [ 65.677322][ T6350] ? __fget_files+0x20e/0x3c0 [ 65.677341][ T6350] ksys_read+0x12a/0x240 [ 65.677354][ T6350] ? __pfx_ksys_read+0x10/0x10 [ 65.677368][ T6350] ? rcu_is_watching+0x12/0xc0 [ 65.677382][ T6350] ? rcu_is_watching+0x12/0xc0 [ 65.677396][ T6350] __do_fast_syscall_32+0x73/0x120 [ 65.677414][ T6350] do_fast_syscall_32+0x32/0x80 [ 65.677430][ T6350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.677443][ T6350] RIP: 0023:0xf7f28579 [ 65.677451][ T6350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.677461][ T6350] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 65.677471][ T6350] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f5046620 [ 65.677477][ T6350] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 65.677483][ T6350] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 65.677488][ T6350] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 65.677494][ T6350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.677506][ T6350] [ 65.948154][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 66.622236][ T6370] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 66.649419][ T6370] bridge_slave_0: left allmulticast mode [ 66.651244][ T6370] bridge_slave_0: left promiscuous mode [ 66.653711][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.663627][ T6370] bridge_slave_1: left allmulticast mode [ 66.667026][ T6370] bridge_slave_1: left promiscuous mode [ 66.669039][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.677753][ T6370] bond0: (slave bond_slave_0): Releasing backup interface [ 66.691137][ T6370] bond0: (slave bond_slave_1): Releasing backup interface [ 66.694338][ T6371] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 66.707554][ T6370] team0: Port device team_slave_0 removed [ 66.714974][ T6370] team0: Port device team_slave_1 removed [ 66.717561][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.719972][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.724447][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.726798][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.748351][ T6371] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 66.752321][ T6371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.951498][ T6376] CUSE: unknown device info "" [ 66.953144][ T6376] CUSE: zero length info key specified [ 67.060555][ T6385] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 67.092723][ T6387] capability: warning: `syz.1.93' uses 32-bit capabilities (legacy support in use) [ 67.232438][ T6402] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 67.236194][ T6402] netlink: 224 bytes leftover after parsing attributes in process `syz.3.100'. [ 67.239660][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 67.256120][ T6403] bridge0: port 3(netdevsim0) entered blocking state [ 67.258438][ T6403] bridge0: port 3(netdevsim0) entered disabled state [ 67.261478][ T6403] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 67.267817][ T6403] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 67.271670][ T6403] bridge0: port 3(netdevsim0) entered blocking state [ 67.273957][ T6403] bridge0: port 3(netdevsim0) entered forwarding state [ 67.290753][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 67.447202][ T6407] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 67.447213][ T6406] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 67.461404][ T6412] lo speed is unknown, defaulting to 1000 [ 67.463891][ T6412] lo speed is unknown, defaulting to 1000 [ 67.470316][ T6412] lo speed is unknown, defaulting to 1000 [ 67.481536][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.499906][ T6412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 67.540228][ T6418] FAULT_INJECTION: forcing a failure. [ 67.540228][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 67.545961][ T6418] CPU: 2 UID: 0 PID: 6418 Comm: syz.1.102 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 67.545976][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.545983][ T6418] Call Trace: [ 67.545986][ T6418] [ 67.545990][ T6418] dump_stack_lvl+0x16c/0x1f0 [ 67.546009][ T6418] should_fail_ex+0x512/0x640 [ 67.546023][ T6418] should_failslab+0xc2/0x120 [ 67.546034][ T6418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 67.546051][ T6418] ? skb_clone+0x190/0x3f0 [ 67.546069][ T6418] skb_clone+0x190/0x3f0 [ 67.546084][ T6418] netlink_deliver_tap+0xabd/0xd30 [ 67.546101][ T6418] netlink_unicast+0x6b2/0x7f0 [ 67.546118][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 67.546137][ T6418] netlink_ack+0x696/0xb80 [ 67.546156][ T6418] netlink_rcv_skb+0x347/0x440 [ 67.546172][ T6418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.546188][ T6418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.546210][ T6418] ? netlink_deliver_tap+0x1ae/0xd30 [ 67.546227][ T6418] netlink_unicast+0x53a/0x7f0 [ 67.546244][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 67.546262][ T6418] netlink_sendmsg+0x8d1/0xdd0 [ 67.546280][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.546296][ T6418] ? __import_iovec+0x1c8/0x660 [ 67.546313][ T6418] ____sys_sendmsg+0xa95/0xc70 [ 67.546324][ T6418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.546333][ T6418] ? get_compat_msghdr+0x11a/0x170 [ 67.546352][ T6418] ___sys_sendmsg+0x134/0x1d0 [ 67.546366][ T6418] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.546395][ T6418] __sys_sendmsg+0x16d/0x220 [ 67.546409][ T6418] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.546428][ T6418] ? rcu_is_watching+0x12/0xc0 [ 67.546443][ T6418] __do_fast_syscall_32+0x73/0x120 [ 67.546460][ T6418] do_fast_syscall_32+0x32/0x80 [ 67.546476][ T6418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.546489][ T6418] RIP: 0023:0xf7f28579 [ 67.546497][ T6418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.546507][ T6418] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 67.546517][ T6418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 67.546524][ T6418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.546529][ T6418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.546535][ T6418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.546540][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.546552][ T6418] [ 67.742365][ T6412] lo speed is unknown, defaulting to 1000 [ 67.745822][ T6412] lo speed is unknown, defaulting to 1000 [ 67.749071][ T6412] lo speed is unknown, defaulting to 1000 [ 67.752009][ T6412] lo speed is unknown, defaulting to 1000 [ 68.036480][ T6435] FAULT_INJECTION: forcing a failure. [ 68.036480][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 68.040551][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.2.109 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 68.040566][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.040572][ T6435] Call Trace: [ 68.040577][ T6435] [ 68.040581][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 68.040601][ T6435] should_fail_ex+0x512/0x640 [ 68.040613][ T6435] ? lock_acquire+0x179/0x350 [ 68.040624][ T6435] should_failslab+0xc2/0x120 [ 68.040634][ T6435] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 68.040651][ T6435] ? __alloc_skb+0x2b2/0x380 [ 68.040666][ T6435] __alloc_skb+0x2b2/0x380 [ 68.040679][ T6435] ? __pfx___alloc_skb+0x10/0x10 [ 68.040690][ T6435] ? rt6_nlmsg_size+0xaf/0x450 [ 68.040705][ T6435] ? rt6_get_route_info+0x940/0x9e0 [ 68.040722][ T6435] inet6_rt_notify+0xc7/0x260 [ 68.040734][ T6435] fib6_del+0xf5a/0x1770 [ 68.040751][ T6435] ? __pfx_fib6_del+0x10/0x10 [ 68.040764][ T6435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.040777][ T6435] ? fib6_ifdown+0xcd/0x8f0 [ 68.040792][ T6435] fib6_clean_node+0x424/0x5b0 [ 68.040806][ T6435] ? __pfx_fib6_clean_node+0x10/0x10 [ 68.040822][ T6435] ? fib6_walk_continue+0x109/0x8d0 [ 68.040833][ T6435] ? fib6_walk_continue+0x328/0x8d0 [ 68.040845][ T6435] fib6_walk_continue+0x44f/0x8d0 [ 68.040859][ T6435] fib6_walk+0x182/0x370 [ 68.040871][ T6435] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.040884][ T6435] fib6_clean_tree+0xd4/0x110 [ 68.040899][ T6435] ? __pfx_fib6_clean_tree+0x10/0x10 [ 68.040913][ T6435] ? __pfx_fib6_clean_node+0x10/0x10 [ 68.040927][ T6435] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.040943][ T6435] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.040956][ T6435] __fib6_clean_all+0x107/0x2d0 [ 68.040971][ T6435] rt6_disable_ip+0x2ec/0x990 [ 68.040981][ T6435] ? __mutex_trylock_common+0xe9/0x250 [ 68.040993][ T6435] ? __pfx___mutex_trylock_common+0x10/0x10 [ 68.041003][ T6435] ? __pfx_rt6_disable_ip+0x10/0x10 [ 68.041014][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041029][ T6435] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 68.041046][ T6435] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 68.041063][ T6435] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 68.041082][ T6435] addrconf_notify+0x220/0x19e0 [ 68.041098][ T6435] ? ip6mr_device_event+0x1bc/0x230 [ 68.041118][ T6435] notifier_call_chain+0xb9/0x410 [ 68.041133][ T6435] ? __pfx_addrconf_notify+0x10/0x10 [ 68.041151][ T6435] call_netdevice_notifiers_info+0xbe/0x140 [ 68.041169][ T6435] __dev_notify_flags+0x1f7/0x2e0 [ 68.041183][ T6435] ? __pfx___dev_notify_flags+0x10/0x10 [ 68.041195][ T6435] ? __dev_change_flags+0x3d5/0x720 [ 68.041210][ T6435] ? __pfx___dev_change_flags+0x10/0x10 [ 68.041224][ T6435] ? __pfx_validate_linkmsg+0x10/0x10 [ 68.041240][ T6435] netif_change_flags+0x108/0x160 [ 68.041255][ T6435] do_setlink.constprop.0+0xddf/0x44b0 [ 68.041272][ T6435] ? __lock_acquire+0xaa4/0x1ba0 [ 68.041281][ T6435] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 68.041296][ T6435] ? irqentry_exit+0x3b/0x90 [ 68.041310][ T6435] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.041326][ T6435] ? __mutex_trylock_common+0xe9/0x250 [ 68.041336][ T6435] ? __pfx___mutex_trylock_common+0x10/0x10 [ 68.041347][ T6435] ? __pfx___might_resched+0x10/0x10 [ 68.041362][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041375][ T6435] ? trace_contention_end+0xdd/0x130 [ 68.041385][ T6435] ? __mutex_lock+0x1ca/0xb90 [ 68.041401][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041413][ T6435] ? rtnl_newlink+0x600/0x2000 [ 68.041426][ T6435] ? trace_cap_capable+0x18d/0x200 [ 68.041437][ T6435] ? __pfx___mutex_lock+0x10/0x10 [ 68.041452][ T6435] ? apparmor_capable+0x114/0x1d0 [ 68.041466][ T6435] ? netlink_ns_capable+0xfa/0x130 [ 68.041482][ T6435] rtnl_newlink+0x1446/0x2000 [ 68.041500][ T6435] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.041516][ T6435] ? __pfx___schedule+0x10/0x10 [ 68.041534][ T6435] ? __lock_acquire+0x5ca/0x1ba0 [ 68.041544][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041556][ T6435] ? trace_cap_capable+0x18d/0x200 [ 68.041569][ T6435] ? find_held_lock+0x2b/0x80 [ 68.041582][ T6435] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.041595][ T6435] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.041608][ T6435] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 68.041623][ T6435] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.041637][ T6435] rtnetlink_rcv_msg+0x95b/0xe90 [ 68.041653][ T6435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.041669][ T6435] ? __lock_acquire+0xaa4/0x1ba0 [ 68.041681][ T6435] netlink_rcv_skb+0x16a/0x440 [ 68.041697][ T6435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.041712][ T6435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.041726][ T6435] ? find_held_lock+0x2b/0x80 [ 68.041749][ T6435] netlink_unicast+0x53a/0x7f0 [ 68.041765][ T6435] ? __pfx_netlink_unicast+0x10/0x10 [ 68.041784][ T6435] netlink_sendmsg+0x8d1/0xdd0 [ 68.041801][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.041818][ T6435] ? __import_iovec+0x1c8/0x660 [ 68.041833][ T6435] ____sys_sendmsg+0xa95/0xc70 [ 68.041844][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.041853][ T6435] ? get_compat_msghdr+0x11a/0x170 [ 68.041869][ T6435] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 68.041885][ T6435] ___sys_sendmsg+0x134/0x1d0 [ 68.041902][ T6435] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.041930][ T6435] __sys_sendmsg+0x16d/0x220 [ 68.041943][ T6435] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.041960][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041974][ T6435] ? rcu_is_watching+0x12/0xc0 [ 68.041988][ T6435] __do_fast_syscall_32+0x73/0x120 [ 68.042004][ T6435] do_fast_syscall_32+0x32/0x80 [ 68.042020][ T6435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.042033][ T6435] RIP: 0023:0xf7f57579 [ 68.042042][ T6435] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.042052][ T6435] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 68.042062][ T6435] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 68.042068][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.042074][ T6435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.042079][ T6435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.042085][ T6435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.042102][ T6435] [ 68.258112][ T6435] netlink: 136 bytes leftover after parsing attributes in process `syz.2.109'. [ 68.261673][ T6435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.386989][ T6445] capability: warning: `syz.3.112' uses deprecated v2 capabilities in a way that may be insecure [ 68.427586][ T6449] FAULT_INJECTION: forcing a failure. [ 68.427586][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 68.431627][ T6449] CPU: 2 UID: 0 PID: 6449 Comm: syz.3.114 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 68.431641][ T6449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.431648][ T6449] Call Trace: [ 68.431652][ T6449] [ 68.431657][ T6449] dump_stack_lvl+0x16c/0x1f0 [ 68.431676][ T6449] should_fail_ex+0x512/0x640 [ 68.431691][ T6449] ? __kvmalloc_node_noprof+0x122/0x600 [ 68.431709][ T6449] should_failslab+0xc2/0x120 [ 68.431719][ T6449] __kvmalloc_node_noprof+0x135/0x600 [ 68.431738][ T6449] ? nf_tables_commit+0xaab/0x6300 [ 68.431756][ T6449] ? nf_tables_commit+0xaab/0x6300 [ 68.431770][ T6449] nf_tables_commit+0xaab/0x6300 [ 68.431792][ T6449] ? __pfx_nf_tables_commit+0x10/0x10 [ 68.431806][ T6449] ? __pfx_nf_tables_newrule+0x10/0x10 [ 68.431823][ T6449] ? __nla_parse+0x40/0x60 [ 68.431840][ T6449] nfnetlink_rcv_batch+0x8b3/0x2350 [ 68.431864][ T6449] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 68.431880][ T6449] ? consume_skb+0xcc/0x100 [ 68.431897][ T6449] ? find_held_lock+0x2b/0x80 [ 68.431912][ T6449] ? __local_bh_enable_ip+0xa4/0x120 [ 68.431926][ T6449] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.431948][ T6449] ? __pfx___dev_queue_xmit+0x10/0x10 [ 68.431973][ T6449] ? __nla_parse+0x40/0x60 [ 68.431989][ T6449] nfnetlink_rcv+0x3c1/0x430 [ 68.432005][ T6449] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.432026][ T6449] netlink_unicast+0x53a/0x7f0 [ 68.432044][ T6449] ? __pfx_netlink_unicast+0x10/0x10 [ 68.432063][ T6449] netlink_sendmsg+0x8d1/0xdd0 [ 68.432080][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.432097][ T6449] ? __import_iovec+0x1c8/0x660 [ 68.432113][ T6449] ____sys_sendmsg+0xa95/0xc70 [ 68.432125][ T6449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.432134][ T6449] ? get_compat_msghdr+0x11a/0x170 [ 68.432153][ T6449] ___sys_sendmsg+0x134/0x1d0 [ 68.432167][ T6449] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.432197][ T6449] __sys_sendmsg+0x16d/0x220 [ 68.432211][ T6449] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.432230][ T6449] ? rcu_is_watching+0x12/0xc0 [ 68.432246][ T6449] __do_fast_syscall_32+0x73/0x120 [ 68.432263][ T6449] do_fast_syscall_32+0x32/0x80 [ 68.432278][ T6449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.432292][ T6449] RIP: 0023:0xf7fa4579 [ 68.432301][ T6449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.432310][ T6449] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 68.432320][ T6449] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 68.432327][ T6449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.432332][ T6449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.432338][ T6449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.432344][ T6449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.432356][ T6449] [ 68.670933][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 68.757208][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.117'. [ 69.603451][ T6011] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.753517][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 69.757462][ T6011] usb 5-1: config 0 has no interfaces? [ 69.762707][ T6011] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 69.767774][ T6011] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 69.771121][ T6011] usb 5-1: Product: syz [ 69.772902][ T6011] usb 5-1: Manufacturer: syz [ 69.775719][ T6011] usb 5-1: SerialNumber: syz [ 69.780048][ T6011] usb 5-1: config 0 descriptor?? [ 70.162332][ T29] usb 5-1: USB disconnect, device number 2 [ 70.827148][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.830631][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.883022][ T6508] FAULT_INJECTION: forcing a failure. [ 70.883022][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 70.886986][ T6508] CPU: 3 UID: 0 PID: 6508 Comm: syz.0.133 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 70.887001][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.887007][ T6508] Call Trace: [ 70.887011][ T6508] [ 70.887015][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 70.887034][ T6508] should_fail_ex+0x512/0x640 [ 70.887046][ T6508] ? fs_reclaim_acquire+0xae/0x150 [ 70.887060][ T6508] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.887075][ T6508] should_failslab+0xc2/0x120 [ 70.887085][ T6508] __kmalloc_noprof+0xd2/0x510 [ 70.887104][ T6508] tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.887119][ T6508] ? tomoyo_profile+0x47/0x60 [ 70.887137][ T6508] tomoyo_path_number_perm+0x245/0x580 [ 70.887148][ T6508] ? tomoyo_path_number_perm+0x237/0x580 [ 70.887161][ T6508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.887174][ T6508] ? find_held_lock+0x2b/0x80 [ 70.887210][ T6508] ? find_held_lock+0x2b/0x80 [ 70.887224][ T6508] ? hook_file_ioctl_common+0x145/0x410 [ 70.887240][ T6508] ? __fget_files+0x20e/0x3c0 [ 70.887257][ T6508] security_file_ioctl_compat+0x9b/0x240 [ 70.887272][ T6508] __do_compat_sys_ioctl+0x4e/0x2c0 [ 70.887302][ T6508] __do_fast_syscall_32+0x73/0x120 [ 70.887320][ T6508] do_fast_syscall_32+0x32/0x80 [ 70.887335][ T6508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.887348][ T6508] RIP: 0023:0xf7ff4579 [ 70.887356][ T6508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.887366][ T6508] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 70.887376][ T6508] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800442d2 [ 70.887383][ T6508] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.887388][ T6508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.887394][ T6508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.887400][ T6508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.887412][ T6508] [ 70.887428][ T6508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.983458][ T29] libceph: connect (1)[c::]:6789 error -101 [ 70.987720][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 71.284422][ T29] libceph: connect (1)[c::]:6789 error -101 [ 71.287769][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 71.578057][ T6509] ceph: No mds server is up or the cluster is laggy [ 71.980734][ T6527] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 71.983120][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.140'. [ 71.986855][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 72.063357][ T6532] FAULT_INJECTION: forcing a failure. [ 72.063357][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 72.068755][ T6532] CPU: 3 UID: 0 PID: 6532 Comm: syz.1.146 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 72.068777][ T6532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.068786][ T6532] Call Trace: [ 72.068792][ T6532] [ 72.068798][ T6532] dump_stack_lvl+0x16c/0x1f0 [ 72.068825][ T6532] should_fail_ex+0x512/0x640 [ 72.068841][ T6532] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 72.068870][ T6532] should_failslab+0xc2/0x120 [ 72.068886][ T6532] __kmalloc_cache_noprof+0x6a/0x3e0 [ 72.068906][ T6532] ? fuse_file_alloc+0xc9/0x2d0 [ 72.068928][ T6532] ? kasan_save_track+0x14/0x30 [ 72.068952][ T6532] fuse_file_alloc+0xc9/0x2d0 [ 72.068972][ T6532] ? __kasan_kmalloc+0xaa/0xb0 [ 72.068993][ T6532] fuse_create_open+0x1a0/0xcc0 [ 72.069016][ T6532] ? __pfx_fuse_create_open+0x10/0x10 [ 72.069032][ T6532] ? find_held_lock+0x2b/0x80 [ 72.069052][ T6532] ? fuse_dentry_settime+0x215/0x280 [ 72.069078][ T6532] ? __pfx_fuse_lookup+0x10/0x10 [ 72.069093][ T6532] ? current_check_access_path+0x33c/0x460 [ 72.069125][ T6532] ? fuse_allow_current_process+0xa2/0x380 [ 72.069149][ T6532] fuse_atomic_open+0x325/0x470 [ 72.069168][ T6532] ? __pfx_fuse_atomic_open+0x10/0x10 [ 72.069186][ T6532] lookup_open.isra.0+0x83a/0x1580 [ 72.069211][ T6532] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 72.069244][ T6532] ? __pfx_down_write+0x10/0x10 [ 72.069256][ T6532] ? mnt_get_write_access+0x20c/0x300 [ 72.069279][ T6532] path_openat+0x905/0x2d40 [ 72.069309][ T6532] ? __pfx_path_openat+0x10/0x10 [ 72.069333][ T6532] ? __lock_acquire+0xaa4/0x1ba0 [ 72.069349][ T6532] do_filp_open+0x20b/0x470 [ 72.069372][ T6532] ? __pfx_do_filp_open+0x10/0x10 [ 72.069410][ T6532] ? _raw_spin_unlock+0x28/0x50 [ 72.069428][ T6532] ? alloc_fd+0x471/0x7d0 [ 72.069457][ T6532] do_sys_openat2+0x11b/0x1d0 [ 72.069472][ T6532] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.069489][ T6532] ? __fget_files+0x20e/0x3c0 [ 72.069516][ T6532] __ia32_sys_creat+0xcb/0x120 [ 72.069533][ T6532] ? __pfx___ia32_sys_creat+0x10/0x10 [ 72.069549][ T6532] ? __pfx_ksys_write+0x10/0x10 [ 72.069570][ T6532] ? rcu_is_watching+0x12/0xc0 [ 72.069588][ T6532] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 72.069610][ T6532] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.069631][ T6532] __do_fast_syscall_32+0x73/0x120 [ 72.069652][ T6532] do_fast_syscall_32+0x32/0x80 [ 72.069674][ T6532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.069692][ T6532] RIP: 0023:0xf7f28579 [ 72.069705][ T6532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.069718][ T6532] RSP: 002b:00000000f502555c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 72.069733][ T6532] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 72.069742][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.069750][ T6532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.069759][ T6532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.069767][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.069806][ T6532] [ 72.336566][ T6536] siw: device registration error -23 [ 73.260631][ T40] audit: type=1326 audit(1744907489.457:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 73.274945][ T40] audit: type=1326 audit(1744907489.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 73.283026][ T40] audit: type=1326 audit(1744907489.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f575a7 code=0x7ffc0000 [ 73.303470][ T40] audit: type=1326 audit(1744907489.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 73.313359][ T40] audit: type=1326 audit(1744907489.467:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f575a7 code=0x7ffc0000 [ 73.320008][ T40] audit: type=1326 audit(1744907489.467:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 73.328430][ T40] audit: type=1326 audit(1744907489.467:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f575a7 code=0x7ffc0000 [ 73.335342][ T40] audit: type=1326 audit(1744907489.467:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 73.345456][ T40] audit: type=1326 audit(1744907489.467:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f575a7 code=0x7ffc0000 [ 73.352836][ T40] audit: type=1326 audit(1744907489.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.147" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 74.117488][ T6570] trusted_key: encrypted_key: insufficient parameters specified [ 74.776549][ T6585] pim6reg: entered allmulticast mode [ 74.794759][ T6582] pim6reg: left allmulticast mode [ 74.842423][ T6585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.045367][ T6589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.315425][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.348146][ T6593] fuse: Bad value for 'fd' [ 75.518641][ T6608] syz.2.162: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.523689][ T6608] CPU: 3 UID: 0 PID: 6608 Comm: syz.2.162 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 75.523705][ T6608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.523712][ T6608] Call Trace: [ 75.523717][ T6608] [ 75.523721][ T6608] dump_stack_lvl+0x16c/0x1f0 [ 75.523741][ T6608] warn_alloc+0x248/0x3a0 [ 75.523758][ T6608] ? __pfx_warn_alloc+0x10/0x10 [ 75.523777][ T6608] ? find_held_lock+0x2b/0x80 [ 75.523791][ T6608] ? __might_fault+0xe3/0x190 [ 75.523806][ T6608] ? __might_fault+0xe3/0x190 [ 75.523820][ T6608] ? __might_fault+0x13b/0x190 [ 75.523840][ T6608] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 75.523855][ T6608] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 75.523873][ T6608] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 75.523890][ T6608] ? __perf_event_task_sched_in+0x27a/0xa10 [ 75.523903][ T6608] ? compat_do_replace+0x1af/0x7c0 [ 75.523917][ T6608] ? __asan_memcpy+0x3c/0x60 [ 75.523933][ T6608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.523950][ T6608] ? compat_do_replace+0x1af/0x7c0 [ 75.523967][ T6608] vmalloc_noprof+0x6b/0x90 [ 75.523980][ T6608] ? compat_do_replace+0x1af/0x7c0 [ 75.523995][ T6608] compat_do_replace+0x1af/0x7c0 [ 75.524013][ T6608] ? __pfx_compat_do_replace+0x10/0x10 [ 75.524028][ T6608] ? aa_get_newest_label+0x375/0x680 [ 75.524040][ T6608] ? __pfx_aa_get_newest_label+0x10/0x10 [ 75.524056][ T6608] ? bpf_lsm_capable+0x9/0x10 [ 75.524070][ T6608] ? security_capable+0x7e/0x260 [ 75.524082][ T6608] do_ebt_set_ctl+0x429/0x4d0 [ 75.524099][ T6608] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 75.524117][ T6608] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 75.524130][ T6608] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 75.524147][ T6608] nf_setsockopt+0x8a/0xf0 [ 75.524163][ T6608] ip_setsockopt+0xcb/0xf0 [ 75.524174][ T6608] tcp_setsockopt+0xa4/0x100 [ 75.524187][ T6608] smc_setsockopt+0x1b3/0xa00 [ 75.524197][ T6608] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 75.524215][ T6608] ? __pfx_smc_setsockopt+0x10/0x10 [ 75.524226][ T6608] ? errseq_sample+0x53/0x70 [ 75.524242][ T6608] ? __pfx_smc_setsockopt+0x10/0x10 [ 75.524253][ T6608] do_sock_setsockopt+0x221/0x470 [ 75.524268][ T6608] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 75.524291][ T6608] __sys_setsockopt+0x1a0/0x230 [ 75.524306][ T6608] __ia32_sys_setsockopt+0xbc/0x160 [ 75.524318][ T6608] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.524332][ T6608] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 75.524347][ T6608] __do_fast_syscall_32+0x73/0x120 [ 75.524363][ T6608] do_fast_syscall_32+0x32/0x80 [ 75.524379][ T6608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.524391][ T6608] RIP: 0023:0xf7f57579 [ 75.524400][ T6608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.524410][ T6608] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 75.524420][ T6608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 75.524426][ T6608] RDX: 0000000000000080 RSI: 0000000080000180 RDI: 00000000000000e0 [ 75.524432][ T6608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.524438][ T6608] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 75.524443][ T6608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.524455][ T6608] [ 75.524459][ T6608] Mem-Info: [ 75.627883][ T6613] process 'syz.2.162' launched './file0' with NULL argv: empty string added [ 75.631082][ T6608] active_anon:13120 inactive_anon:0 isolated_anon:0 [ 75.631082][ T6608] active_file:1553 inactive_file:38173 isolated_file:0 [ 75.631082][ T6608] unevictable:1768 dirty:410 writeback:0 [ 75.631082][ T6608] slab_reclaimable:9800 slab_unreclaimable:54836 [ 75.631082][ T6608] mapped:29560 shmem:9450 pagetables:921 [ 75.631082][ T6608] sec_pagetables:298 bounce:0 [ 75.631082][ T6608] kernel_misc_reclaimable:0 [ 75.631082][ T6608] free:51895 free_pcp:5447 free_cma:0 [ 75.661530][ T6613] fuseblk: Bad value for 'fd' [ 75.672743][ T6608] Node 0 active_anon:2492kB inactive_anon:0kB active_file:0kB inactive_file:17036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5980kB dirty:20kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8720kB pagetables:592kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 75.672776][ T6608] Node 1 active_anon:49988kB inactive_anon:0kB active_file:6212kB inactive_file:135656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112260kB dirty:1620kB writeback:0kB shmem:33776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3484kB pagetables:2992kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB [ 75.696311][ T6608] Node 0 DMA free:2808kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:44kB free_cma:0kB [ 75.705167][ T6608] lowmem_reserve[]: 0 290 290 290 290 [ 75.707124][ T6608] Node 0 DMA32 free:27864kB boost:12288kB min:25624kB low:28956kB high:32288kB reserved_highatomic:4096KB active_anon:2492kB inactive_anon:0kB active_file:0kB inactive_file:17032kB unevictable:3536kB writepending:20kB present:1032196kB managed:297472kB mlocked:0kB bounce:0kB free_pcp:4472kB local_pcp:468kB free_cma:0kB [ 75.716554][ T6608] lowmem_reserve[]: 0 0 0 0 0 [ 75.718555][ T6608] Node 1 DMA32 free:175172kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:49988kB inactive_anon:0kB active_file:6212kB inactive_file:135656kB unevictable:3536kB writepending:1620kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:14052kB local_pcp:536kB free_cma:0kB [ 75.727945][ T6608] lowmem_reserve[]: 0 0 0 0 0 [ 75.729724][ T6608] Node 0 DMA: 56*4kB (UM) 15*8kB (UM) 6*16kB (U) 10*32kB (UM) 4*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2808kB [ 75.734990][ T6608] Node 0 DMA32: 762*4kB (UMH) 222*8kB (UMEH) 60*16kB (UMH) 276*32kB (UEH) 91*64kB (UMEH) 20*128kB (UMEH) 9*256kB (UME) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27864kB [ 75.740342][ T6608] Node 1 DMA32: 82*4kB (UME) 65*8kB (UME) 40*16kB (UME) 32*32kB (UME) 68*64kB (UME) 130*128kB (UME) 98*256kB (UM) 57*512kB (UM) 25*1024kB (UME) 13*2048kB (UME) 11*4096kB (UM) = 175056kB [ 75.746140][ T6608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.749143][ T6608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.752109][ T6608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.755529][ T6608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.758745][ T6608] 49158 total pagecache pages [ 75.760488][ T6608] 0 pages in swap cache [ 75.762018][ T6608] Free swap = 124996kB [ 75.763755][ T6608] Total swap = 124996kB [ 75.765348][ T6608] 524155 pages RAM [ 75.766742][ T6608] 0 pages HighMem/MovableOnly [ 75.768215][ T6608] 208876 pages reserved [ 75.769489][ T6608] 0 pages cma reserved [ 77.098600][ T6636] FAULT_INJECTION: forcing a failure. [ 77.098600][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 77.103747][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.3.169 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 77.103767][ T6636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.103776][ T6636] Call Trace: [ 77.103781][ T6636] [ 77.103787][ T6636] dump_stack_lvl+0x16c/0x1f0 [ 77.103813][ T6636] should_fail_ex+0x512/0x640 [ 77.103830][ T6636] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 77.103856][ T6636] should_failslab+0xc2/0x120 [ 77.103870][ T6636] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 77.103893][ T6636] ? security_file_alloc+0x34/0x2b0 [ 77.103916][ T6636] security_file_alloc+0x34/0x2b0 [ 77.103935][ T6636] init_file+0x93/0x4c0 [ 77.103952][ T6636] alloc_empty_file+0x73/0x1e0 [ 77.103968][ T6636] alloc_file_pseudo+0x13a/0x230 [ 77.103986][ T6636] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 77.104002][ T6636] ? tipc_sk_finish_conn+0x580/0x790 [ 77.104030][ T6636] sock_alloc_file+0x50/0x210 [ 77.104053][ T6636] __sys_socketpair+0x31c/0x5a0 [ 77.104070][ T6636] ? __pfx___sys_socketpair+0x10/0x10 [ 77.104084][ T6636] ? __might_fault+0x13b/0x190 [ 77.104107][ T6636] ? find_held_lock+0x2b/0x80 [ 77.104127][ T6636] ? syscall_trace_enter+0x1cb/0x260 [ 77.104148][ T6636] __ia32_sys_socketpair+0x95/0x100 [ 77.104164][ T6636] __do_fast_syscall_32+0x73/0x120 [ 77.104188][ T6636] do_fast_syscall_32+0x32/0x80 [ 77.104211][ T6636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.104229][ T6636] RIP: 0023:0xf7fa4579 [ 77.104240][ T6636] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.104254][ T6636] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 77.104268][ T6636] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000001 [ 77.104278][ T6636] RDX: 0000000000000000 RSI: 0000000080000040 RDI: 0000000000000000 [ 77.104286][ T6636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.104295][ T6636] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.104303][ T6636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.104322][ T6636] [ 77.400776][ T6648] trusted_key: encrypted_key: insufficient parameters specified [ 77.413215][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.425060][ T6647] bond0: (slave rose0): Enslaving as an active interface with an up link [ 77.538332][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 77.679533][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 77.823329][ T6661] vivid-003: ================= START STATUS ================= [ 77.831567][ T6661] vivid-003: RDS Tx I/O Mode: Controls [ 77.841654][ T6661] vivid-003: RDS Program ID: 32904 [ 77.844914][ T6661] vivid-003: RDS Program Type: 3 [ 77.846530][ T6661] vivid-003: RDS PS Name: VIVID-TX [ 77.848236][ T6661] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 77.851427][ T6661] vivid-003: RDS Stereo: true [ 77.852984][ T6661] vivid-003: RDS Artificial Head: false [ 77.855904][ T6661] vivid-003: RDS Compressed: false [ 77.858523][ T6661] vivid-003: RDS Dynamic PTY: false [ 77.860220][ T6661] vivid-003: RDS Traffic Announcement: false [ 77.862171][ T6661] vivid-003: RDS Traffic Program: true [ 77.884373][ T6661] vivid-003: RDS Music: true [ 77.888778][ T6661] vivid-003: ================== END STATUS ================== [ 77.890605][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 78.541257][ T6692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.543590][ T6692] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 78.599977][ T6692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.602840][ T6692] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 78.654027][ T6692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.656199][ T6692] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 78.665940][ T6705] ufs: Invalid option: "grpquota" or missing value [ 78.668243][ T6705] ufs: wrong mount options [ 78.677525][ T6692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.681828][ T6692] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.045860][ T6716] trusted_key: encrypted_key: insufficient parameters specified [ 79.441698][ T6739] pim6reg: entered allmulticast mode [ 79.456513][ T6739] pim6reg: left allmulticast mode [ 79.891276][ T6763] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 79.893865][ T6763] netlink: 'syz.1.192': attribute type 2 has an invalid length. [ 79.896225][ T6763] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 80.256732][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 80.788863][ T6785] netlink: 'syz.0.197': attribute type 11 has an invalid length. [ 80.791310][ T6785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.197'. [ 80.844250][ T6786] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 80.901023][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 81.067425][ T34] cfg80211: failed to load regulatory.db [ 81.366730][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 81.923448][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 82.083470][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 82.087450][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 82.090652][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.096554][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.101526][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.106571][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.111077][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 82.113712][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.117233][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.121278][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.125335][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.129354][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 82.131771][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.135580][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.139461][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.142865][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.149581][ T34] usb 8-1: string descriptor 0 read error: -22 [ 82.152330][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.156719][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.169607][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 82.833373][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.985728][ T34] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 82.989260][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.991658][ T34] usb 7-1: can't read configurations, error -61 [ 83.019545][ T5996] usb 8-1: USB disconnect, device number 2 [ 83.123382][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.443910][ T34] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 83.451732][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 83.456520][ T34] usb 7-1: can't read configurations, error -61 [ 83.460883][ T34] usb usb7-port1: attempt power cycle [ 83.803758][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.859904][ T34] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 83.864326][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 83.866704][ T34] usb 7-1: can't read configurations, error -61 [ 84.024747][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 84.162184][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.184392][ T34] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 84.188037][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 84.190611][ T34] usb 7-1: can't read configurations, error -61 [ 84.192885][ T34] usb usb7-port1: unable to enumerate USB device [ 84.204755][ T6856] syzkaller0: entered allmulticast mode [ 84.360926][ T6862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.425301][ T6862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.507859][ T6862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.605937][ T6862] bridge0: port 3(netdevsim0) entered disabled state [ 84.615125][ T6862] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 84.618895][ T6862] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 84.622793][ T6862] bridge0: port 3(netdevsim0) entered disabled state [ 84.627897][ T6862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.715909][ T6862] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.722950][ T6862] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.729821][ T6862] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.736255][ T6862] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.128796][ T6875] lo speed is unknown, defaulting to 1000 [ 85.144049][ T1116] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 85.149059][ T1116] sr 2:0:0:0: [sr0] tag#25 Sense Key : Illegal Request [current] [ 85.151627][ T1116] sr 2:0:0:0: [sr0] tag#25 Add. Sense: Invalid command operation code [ 85.154431][ T1116] sr 2:0:0:0: [sr0] tag#25 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 85.157341][ T1116] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 85.160745][ T1116] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 86.513789][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 86.513798][ T40] audit: type=1326 audit(1744907502.717:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.2.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7fc00000 [ 86.523647][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 86.687228][ T6910] sp0: Synchronizing with TNC [ 86.721929][ T6910] sp1: Synchronizing with TNC [ 87.430583][ T6899] [U] [ 88.682357][ T6949] FAULT_INJECTION: forcing a failure. [ 88.682357][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 88.686435][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.1.242 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 88.686466][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.686476][ T6949] Call Trace: [ 88.686480][ T6949] [ 88.686484][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 88.686503][ T6949] should_fail_ex+0x512/0x640 [ 88.686515][ T6949] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 88.686533][ T6949] should_failslab+0xc2/0x120 [ 88.686543][ T6949] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 88.686560][ T6949] ? __alloc_skb+0x2b2/0x380 [ 88.686576][ T6949] __alloc_skb+0x2b2/0x380 [ 88.686593][ T6949] ? __pfx___alloc_skb+0x10/0x10 [ 88.686608][ T6949] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 88.686626][ T6949] netlink_alloc_large_skb+0x69/0x130 [ 88.686642][ T6949] netlink_sendmsg+0x6a1/0xdd0 [ 88.686660][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.686681][ T6949] sock_write_iter+0x4fc/0x5b0 [ 88.686691][ T6949] ? __pfx_sock_write_iter+0x10/0x10 [ 88.686700][ T6949] ? find_held_lock+0x2b/0x80 [ 88.686717][ T6949] ? bpf_lsm_file_permission+0x9/0x10 [ 88.686731][ T6949] ? security_file_permission+0x71/0x210 [ 88.686746][ T6949] ? rw_verify_area+0xcf/0x680 [ 88.686765][ T6949] vfs_write+0x5ba/0x1180 [ 88.686780][ T6949] ? __pfx_sock_write_iter+0x10/0x10 [ 88.686790][ T6949] ? __pfx_vfs_write+0x10/0x10 [ 88.686803][ T6949] ? find_held_lock+0x2b/0x80 [ 88.686824][ T6949] ksys_write+0x205/0x240 [ 88.686838][ T6949] ? __pfx_ksys_write+0x10/0x10 [ 88.686853][ T6949] ? rcu_is_watching+0x12/0xc0 [ 88.686869][ T6949] __do_fast_syscall_32+0x73/0x120 [ 88.686886][ T6949] do_fast_syscall_32+0x32/0x80 [ 88.686902][ T6949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.686915][ T6949] RIP: 0023:0xf7f28579 [ 88.686923][ T6949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.686933][ T6949] RSP: 002b:00000000f500455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 88.686943][ T6949] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 88.686949][ T6949] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 88.686955][ T6949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.686961][ T6949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.686966][ T6949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.686979][ T6949] [ 88.750362][ T6951] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 88.753645][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.776598][ T6951] netlink: 'syz.2.243': attribute type 2 has an invalid length. [ 88.779190][ T6951] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 89.094237][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.384735][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.389263][ T64] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.393117][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.399315][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.405347][ T64] usb 5-1: config 0 descriptor?? [ 89.439512][ T6973] vlan2: entered promiscuous mode [ 89.441694][ T6973] erspan0: entered promiscuous mode [ 89.612947][ T6948] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 89.833665][ T6983] FAULT_INJECTION: forcing a failure. [ 89.833665][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.838359][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.2.252 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 89.838382][ T6983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.838407][ T6983] Call Trace: [ 89.838413][ T6983] [ 89.838420][ T6983] dump_stack_lvl+0x16c/0x1f0 [ 89.838447][ T6983] should_fail_ex+0x512/0x640 [ 89.838469][ T6983] _copy_from_user+0x2e/0xd0 [ 89.838499][ T6983] move_addr_to_kernel+0x65/0x170 [ 89.838518][ T6983] __sys_bind+0x11b/0x260 [ 89.838535][ T6983] ? __pfx___sys_bind+0x10/0x10 [ 89.838551][ T6983] ? __fget_files+0x20e/0x3c0 [ 89.838582][ T6983] ? __pfx_ksys_write+0x10/0x10 [ 89.838609][ T6983] __ia32_sys_bind+0x71/0xb0 [ 89.838626][ T6983] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 89.838649][ T6983] __do_fast_syscall_32+0x73/0x120 [ 89.838675][ T6983] do_fast_syscall_32+0x32/0x80 [ 89.838699][ T6983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.838717][ T6983] RIP: 0023:0xf7f57579 [ 89.838729][ T6983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.838743][ T6983] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 89.838760][ T6983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 89.838770][ T6983] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 89.838778][ T6983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.838787][ T6983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.838796][ T6983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.838819][ T6983] [ 89.913181][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.326412][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.333477][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.350629][ T6993] dummy0: entered promiscuous mode [ 90.352572][ T6993] dummy0: entered allmulticast mode [ 91.754312][ T7015] overlayfs: failed to resolve './file1': -2 [ 91.764958][ T5954] usb 5-1: USB disconnect, device number 3 [ 92.856521][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 94.465607][ T7078] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 94.468773][ T7078] netlink: 'syz.2.279': attribute type 2 has an invalid length. [ 94.472007][ T7078] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 94.654031][ T7084] bridge0: port 3(netdevsim0) entered blocking state [ 94.656262][ T7084] bridge0: port 3(netdevsim0) entered disabled state [ 94.658455][ T7084] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 94.661527][ T7084] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 94.666066][ T7084] bridge0: port 3(netdevsim0) entered blocking state [ 94.668272][ T7084] bridge0: port 3(netdevsim0) entered forwarding state [ 94.672898][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 94.811268][ T7090] 9pnet_fd: Insufficient options for proto=fd [ 94.822282][ T7092] 9pnet_fd: Insufficient options for proto=fd [ 94.995466][ T7109] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 94.997958][ T7109] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 95.000901][ T7109] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 95.713380][ T5992] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 95.883719][ T5992] usb 7-1: Using ep0 maxpacket: 16 [ 95.891411][ T5992] usb 7-1: config 3 has an invalid interface number: 22 but max is 1 [ 95.896909][ T5992] usb 7-1: config 3 has an invalid interface number: 3 but max is 1 [ 95.901235][ T5992] usb 7-1: config 3 has no interface number 0 [ 95.903818][ T5992] usb 7-1: config 3 has no interface number 1 [ 95.906855][ T5992] usb 7-1: config 3 interface 22 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 64 [ 95.910177][ T5992] usb 7-1: config 3 interface 22 altsetting 7 endpoint 0xE has invalid maxpacket 1048, setting to 1024 [ 95.914564][ T5992] usb 7-1: config 3 interface 22 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 95.919262][ T5992] usb 7-1: config 3 interface 3 altsetting 255 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 95.923628][ T5992] usb 7-1: config 3 interface 3 altsetting 255 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 95.924586][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 95.927072][ T5992] usb 7-1: config 3 interface 3 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 95.933362][ T5992] usb 7-1: config 3 interface 22 has no altsetting 0 [ 95.935511][ T5992] usb 7-1: config 3 interface 3 has no altsetting 0 [ 95.946591][ T5992] usb 7-1: New USB device found, idVendor=0413, idProduct=2101, bcdDevice=76.bf [ 95.949552][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.952144][ T5992] usb 7-1: Product: 跹뉩㌫萼ნ쐂뾃ꌉ㤦鍶ꊻⱴ㏅榨⇈ꛯ鸢厦嚿⡘㼭粳쨞㴈铈屌汻葀쎄풯ቅ痄遮㒕䔥漱룂ꌿ뱴蓡ᗋ쌭쨷꿕֜氲꬯饆沍汴룏应嘖帖⑌ⴒ徂늈鍣ğ쬀꜐ծ↷錊㣓甒윉࿓콹㚢曞꼭럎 [ 95.960220][ T5992] usb 7-1: SerialNumber: ㅌ曕꧈왋鯆摨퉹怶莙龹䒝혳ᐟꞨᎡ㥶捰楐Ꮴ땁⁥k栕헨蕉伡ꨥࣂ剠猳㣹徣닜쇤◌ꄡ蟒䄳넘મឿ橺퍌풅旳✓쿋埕볐ⴠ⑨ݽ扏쐛듃뭒苷ਤὛ㖻ⶭ⃏睄ꤩꐆ돽ܶ仌‭랗걔伾붩쪅淳婵꯹⎩㰓늾Lj醑⤮깷ឣ죬ᇒ揤ꉼ [ 95.971747][ T7126] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.189385][ T5992] pl2303 7-1:3.22: required endpoints missing [ 96.196574][ T5992] pl2303 7-1:3.3: required endpoints missing [ 96.203680][ T5992] usb 7-1: USB disconnect, device number 7 [ 96.367420][ T7148] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 96.374354][ T836] lo speed is unknown, defaulting to 1000 [ 96.376287][ T836] syz0: Port: 1 Link DOWN [ 97.183664][ T7168] FAULT_INJECTION: forcing a failure. [ 97.183664][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 97.187869][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.2.306 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 97.187884][ T7168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.187890][ T7168] Call Trace: [ 97.187895][ T7168] [ 97.187899][ T7168] dump_stack_lvl+0x16c/0x1f0 [ 97.187918][ T7168] should_fail_ex+0x512/0x640 [ 97.187931][ T7168] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 97.187949][ T7168] should_failslab+0xc2/0x120 [ 97.187960][ T7168] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 97.187976][ T7168] ? __alloc_skb+0x2b2/0x380 [ 97.187991][ T7168] __alloc_skb+0x2b2/0x380 [ 97.188004][ T7168] ? __pfx___alloc_skb+0x10/0x10 [ 97.188021][ T7168] netlink_alloc_large_skb+0x69/0x130 [ 97.188038][ T7168] netlink_sendmsg+0x6a1/0xdd0 [ 97.188055][ T7168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.188072][ T7168] ? __import_iovec+0x1c8/0x660 [ 97.188088][ T7168] ____sys_sendmsg+0xa95/0xc70 [ 97.188099][ T7168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.188108][ T7168] ? get_compat_msghdr+0x11a/0x170 [ 97.188127][ T7168] ___sys_sendmsg+0x134/0x1d0 [ 97.188144][ T7168] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.188189][ T7168] __sys_sendmsg+0x16d/0x220 [ 97.188212][ T7168] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.188239][ T7168] ? rcu_is_watching+0x12/0xc0 [ 97.188262][ T7168] ? rcu_is_watching+0x12/0xc0 [ 97.188283][ T7168] __do_fast_syscall_32+0x73/0x120 [ 97.188309][ T7168] do_fast_syscall_32+0x32/0x80 [ 97.188334][ T7168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.188353][ T7168] RIP: 0023:0xf7f57579 [ 97.188367][ T7168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.188381][ T7168] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 97.188396][ T7168] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 97.188405][ T7168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.188411][ T7168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.188420][ T7168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.188426][ T7168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.188438][ T7168] [ 97.583372][ T836] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.737468][ T836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.741451][ T836] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.745320][ T836] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.748960][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.756631][ T836] usb 7-1: config 0 descriptor?? [ 97.964818][ T7171] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 98.678068][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.681307][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.687856][ T7200] dummy0: entered promiscuous mode [ 98.689802][ T7200] dummy0: entered allmulticast mode [ 100.322688][ T34] usb 7-1: USB disconnect, device number 8 [ 100.967353][ T7237] siw: device registration error -23 [ 101.039449][ T7238] kAFS: unable to lookup cell '.,' [ 101.450444][ T7246] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 101.452961][ T7246] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 101.457665][ T7246] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 102.482204][ T7280] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 102.485448][ T7280] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 102.487878][ T7280] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 102.543803][ T40] audit: type=1326 audit(1744907518.747:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.1.337" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x0 [ 102.813358][ T5963] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 103.196823][ T5963] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.200715][ T5963] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.204086][ T5963] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.210526][ T5963] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.213588][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.216249][ T5963] usb 8-1: Product: syz [ 103.217644][ T5963] usb 8-1: Manufacturer: syz [ 103.219213][ T5963] usb 8-1: SerialNumber: syz [ 103.428848][ T5963] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.701321][ T7313] input: syz1 as /devices/virtual/input/input5 [ 103.730478][ T7289] usblp0:failed reading printer status (-71) [ 103.730726][ T24] usb 8-1: USB disconnect, device number 3 [ 103.745418][ T24] usblp0: removed [ 103.778962][ T7318] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 103.781420][ T7318] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 103.785309][ T7318] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 103.845058][ T7330] ucma_write: process 271 (syz.0.350) changed security contexts after opening file descriptor, this is not allowed. [ 103.936692][ T7334] netlink: 'syz.0.351': attribute type 12 has an invalid length. [ 104.253382][ T836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.413377][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 104.417040][ T836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.421218][ T836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.426037][ T836] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 104.428880][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.431397][ T836] usb 5-1: Product: syz [ 104.433130][ T836] usb 5-1: Manufacturer: syz [ 104.435229][ T836] usb 5-1: SerialNumber: syz [ 104.440546][ T836] usb 5-1: config 0 descriptor?? [ 105.702655][ T7365] FAULT_INJECTION: forcing a failure. [ 105.702655][ T7365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.706829][ T7365] CPU: 0 UID: 0 PID: 7365 Comm: syz.3.360 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 105.706844][ T7365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.706850][ T7365] Call Trace: [ 105.706854][ T7365] [ 105.706858][ T7365] dump_stack_lvl+0x16c/0x1f0 [ 105.706878][ T7365] should_fail_ex+0x512/0x640 [ 105.706893][ T7365] _copy_from_user+0x2e/0xd0 [ 105.706907][ T7365] get_old_itimerspec32+0x82/0x1d0 [ 105.706924][ T7365] ? __pfx_get_old_itimerspec32+0x10/0x10 [ 105.706940][ T7365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.706959][ T7365] __ia32_sys_timer_settime32+0x1a5/0x2c0 [ 105.707000][ T7365] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 105.707014][ T7365] ? ksys_write+0x1b9/0x240 [ 105.707030][ T7365] ? rcu_is_watching+0x12/0xc0 [ 105.707046][ T7365] __do_fast_syscall_32+0x73/0x120 [ 105.707063][ T7365] do_fast_syscall_32+0x32/0x80 [ 105.707078][ T7365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.707092][ T7365] RIP: 0023:0xf7fa4579 [ 105.707100][ T7365] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.707110][ T7365] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000104 [ 105.707120][ T7365] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 105.707127][ T7365] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.707132][ T7365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.707138][ T7365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.707144][ T7365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.707156][ T7365] [ 106.930144][ T7393] FAULT_INJECTION: forcing a failure. [ 106.930144][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.936752][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.2.364 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 106.936767][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.936774][ T7393] Call Trace: [ 106.936778][ T7393] [ 106.936782][ T7393] dump_stack_lvl+0x16c/0x1f0 [ 106.936801][ T7393] should_fail_ex+0x512/0x640 [ 106.936816][ T7393] _copy_from_iter+0x2a4/0x15b0 [ 106.936832][ T7393] ? policy_nodemask+0xea/0x4e0 [ 106.936842][ T7393] ? __pfx__copy_from_iter+0x10/0x10 [ 106.936855][ T7393] ? alloc_pages_mpol+0x25a/0x550 [ 106.936865][ T7393] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.936878][ T7393] copy_page_from_iter+0xa5/0x120 [ 106.936892][ T7393] anon_pipe_write+0xbe7/0x1a70 [ 106.936914][ T7393] ? __pfx_anon_pipe_write+0x10/0x10 [ 106.936931][ T7393] ? apparmor_file_permission+0x251/0x400 [ 106.936957][ T7393] ? bpf_lsm_file_permission+0x9/0x10 [ 106.936971][ T7393] ? security_file_permission+0x71/0x210 [ 106.936986][ T7393] ? rw_verify_area+0xcf/0x680 [ 106.937000][ T7393] vfs_write+0x5ba/0x1180 [ 106.937015][ T7393] ? __pfx_anon_pipe_write+0x10/0x10 [ 106.937032][ T7393] ? __pfx_vfs_write+0x10/0x10 [ 106.937045][ T7393] ? find_held_lock+0x2b/0x80 [ 106.937068][ T7393] ksys_write+0x205/0x240 [ 106.937082][ T7393] ? __pfx_ksys_write+0x10/0x10 [ 106.937098][ T7393] ? rcu_is_watching+0x12/0xc0 [ 106.937113][ T7393] __do_fast_syscall_32+0x73/0x120 [ 106.937130][ T7393] do_fast_syscall_32+0x32/0x80 [ 106.937146][ T7393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.937159][ T7393] RIP: 0023:0xf7f57579 [ 106.937168][ T7393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.937178][ T7393] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 106.937188][ T7393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 106.937195][ T7393] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.937200][ T7393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.937206][ T7393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.937212][ T7393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.937235][ T7393] [ 107.176324][ T836] usb 5-1: USB disconnect, device number 4 [ 107.182723][ T7398] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 107.185262][ T7398] netlink: 'syz.1.366': attribute type 2 has an invalid length. [ 107.190762][ T7398] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 108.595505][ T7430] ======================================================= [ 108.595505][ T7430] WARNING: The mand mount option has been deprecated and [ 108.595505][ T7430] and is ignored by this kernel. Remove the mand [ 108.595505][ T7430] option from the mount to silence this warning. [ 108.595505][ T7430] ======================================================= [ 108.628941][ T7430] lo speed is unknown, defaulting to 1000 [ 108.633702][ T7430] lo speed is unknown, defaulting to 1000 [ 108.637119][ T7430] lo speed is unknown, defaulting to 1000 [ 108.739346][ T7430] infiniband sz1: set active [ 108.740993][ T7430] infiniband sz1: added lo [ 108.746311][ T7427] virtiofs: Unknown parameter 'gr5$.!˒Dquota' [ 108.746715][ T5954] lo speed is unknown, defaulting to 1000 [ 108.764482][ T7430] RDS/IB: sz1: added [ 108.766120][ T7430] smc: adding ib device sz1 with port count 1 [ 108.768182][ T7430] smc: ib device sz1 port 1 has pnetid [ 108.771450][ T7430] lo speed is unknown, defaulting to 1000 [ 108.776894][ T5954] lo speed is unknown, defaulting to 1000 [ 108.858381][ T7430] lo speed is unknown, defaulting to 1000 [ 108.936958][ T7430] lo speed is unknown, defaulting to 1000 [ 109.013630][ T7430] lo speed is unknown, defaulting to 1000 [ 109.227790][ T7436] tmpfs: User quota block hardlimit too large. [ 109.919988][ T7447] IPVS: set_ctl: invalid protocol: 47 172.20.20.33:20003 [ 109.924482][ T7445] lo speed is unknown, defaulting to 1000 [ 109.927544][ T7445] lo speed is unknown, defaulting to 1000 [ 110.025557][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.378'. [ 110.028453][ T7450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.378'. [ 110.035661][ T7450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 110.039424][ T7450] gretap1: entered promiscuous mode [ 110.041048][ T7450] gretap1: entered allmulticast mode [ 110.262344][ T7461] FAULT_INJECTION: forcing a failure. [ 110.262344][ T7461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.266614][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.3.379 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 110.266640][ T7461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.266646][ T7461] Call Trace: [ 110.266650][ T7461] [ 110.266654][ T7461] dump_stack_lvl+0x16c/0x1f0 [ 110.266673][ T7461] should_fail_ex+0x512/0x640 [ 110.266687][ T7461] _copy_from_user+0x2e/0xd0 [ 110.266701][ T7461] do_ip_vs_set_ctl+0xdfa/0x11d0 [ 110.266711][ T7461] ? __lock_acquire+0xaa4/0x1ba0 [ 110.266723][ T7461] ? __mutex_trylock_common+0x90/0x250 [ 110.266734][ T7461] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 110.266743][ T7461] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.266754][ T7461] ? __pfx___might_resched+0x10/0x10 [ 110.266772][ T7461] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 110.266788][ T7461] ? find_held_lock+0x2b/0x80 [ 110.266802][ T7461] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 110.266829][ T7461] ? nf_setsockopt+0x8a/0xf0 [ 110.266843][ T7461] nf_setsockopt+0x8a/0xf0 [ 110.266859][ T7461] ip_setsockopt+0xcb/0xf0 [ 110.266871][ T7461] sctp_setsockopt+0x169/0xb870 [ 110.266886][ T7461] ? __pfx_sctp_setsockopt+0x10/0x10 [ 110.266897][ T7461] ? __lock_acquire+0x5ca/0x1ba0 [ 110.266905][ T7461] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.266932][ T7461] ? __schedule+0x1186/0x5de0 [ 110.266949][ T7461] ? sock_common_setsockopt+0x2e/0xf0 [ 110.266966][ T7461] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.266982][ T7461] do_sock_setsockopt+0x221/0x470 [ 110.266998][ T7461] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 110.267022][ T7461] __sys_setsockopt+0x1a0/0x230 [ 110.267037][ T7461] __ia32_sys_setsockopt+0xbc/0x160 [ 110.267049][ T7461] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.267064][ T7461] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 110.267080][ T7461] __do_fast_syscall_32+0x73/0x120 [ 110.267096][ T7461] do_fast_syscall_32+0x32/0x80 [ 110.267112][ T7461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.267126][ T7461] RIP: 0023:0xf7fa4579 [ 110.267134][ T7461] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.267144][ T7461] RSP: 002b:00000000f508455c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 110.267154][ T7461] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 110.267160][ T7461] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.267166][ T7461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.267172][ T7461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.267177][ T7461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.267189][ T7461] [ 110.735681][ T7469] vxcan0: tx address claim with dest, not broadcast [ 110.738659][ T7469] netlink: 'syz.1.372': attribute type 9 has an invalid length. [ 110.741142][ T7469] netlink: 'syz.1.372': attribute type 7 has an invalid length. [ 110.744197][ T7469] netlink: 'syz.1.372': attribute type 8 has an invalid length. [ 110.999279][ T7481] overlay: Unknown parameter 'measure' [ 111.066848][ T7484] overlayfs: failed to resolve './file1/file0': -2 [ 111.303193][ T7496] FAULT_INJECTION: forcing a failure. [ 111.303193][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 111.317185][ T7496] CPU: 1 UID: 0 PID: 7496 Comm: syz.1.385 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 111.317210][ T7496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.317220][ T7496] Call Trace: [ 111.317226][ T7496] [ 111.317233][ T7496] dump_stack_lvl+0x16c/0x1f0 [ 111.317267][ T7496] should_fail_ex+0x512/0x640 [ 111.317286][ T7496] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 111.317314][ T7496] should_failslab+0xc2/0x120 [ 111.317330][ T7496] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 111.317353][ T7496] ? netlink_dump+0x9e7/0xd00 [ 111.317375][ T7496] ? __alloc_skb+0x2b2/0x380 [ 111.317396][ T7496] ? __pfx___mutex_lock+0x10/0x10 [ 111.317422][ T7496] __alloc_skb+0x2b2/0x380 [ 111.317442][ T7496] ? __pfx___alloc_skb+0x10/0x10 [ 111.317462][ T7496] ? _copy_to_iter+0x161/0x15a0 [ 111.317489][ T7496] netlink_dump+0x698/0xd00 [ 111.317512][ T7496] ? __skb_recv_datagram+0x1b2/0x220 [ 111.317532][ T7496] ? __pfx_netlink_dump+0x10/0x10 [ 111.317553][ T7496] ? __pfx___skb_recv_datagram+0x10/0x10 [ 111.317582][ T7496] ? skb_recv_datagram+0x88/0xc0 [ 111.317609][ T7496] netlink_recvmsg+0xa15/0xf20 [ 111.317633][ T7496] ? __pfx_netlink_recvmsg+0x10/0x10 [ 111.317655][ T7496] ? __lock_acquire+0xaa4/0x1ba0 [ 111.317674][ T7496] ? __lock_acquire+0xaa4/0x1ba0 [ 111.317694][ T7496] ? iovec_from_user+0xbb/0x140 [ 111.317717][ T7496] ____sys_recvmsg+0x5f6/0x6b0 [ 111.317749][ T7496] ? __pfx_____sys_recvmsg+0x10/0x10 [ 111.317772][ T7496] ? import_iovec+0x109/0x140 [ 111.317802][ T7496] ? __lock_acquire+0x5ca/0x1ba0 [ 111.317821][ T7496] ___sys_recvmsg+0x114/0x1a0 [ 111.317843][ T7496] ? __pfx____sys_recvmsg+0x10/0x10 [ 111.317878][ T7496] ? get_pid_task+0xe0/0x250 [ 111.317894][ T7496] ? __pfx___might_resched+0x10/0x10 [ 111.317923][ T7496] do_recvmmsg+0x568/0x740 [ 111.317948][ T7496] ? __pfx_do_recvmmsg+0x10/0x10 [ 111.318004][ T7496] ? __fget_files+0x20e/0x3c0 [ 111.318033][ T7496] __sys_recvmmsg+0x21c/0x280 [ 111.318056][ T7496] ? __pfx___sys_recvmmsg+0x10/0x10 [ 111.318079][ T7496] ? __pfx_ksys_write+0x10/0x10 [ 111.318107][ T7496] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 111.318130][ T7496] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.318153][ T7496] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 111.318177][ T7496] __do_fast_syscall_32+0x73/0x120 [ 111.318203][ T7496] do_fast_syscall_32+0x32/0x80 [ 111.318227][ T7496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.318254][ T7496] RIP: 0023:0xf7f28579 [ 111.318267][ T7496] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.318282][ T7496] RSP: 002b:00000000f500455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 111.318299][ T7496] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800021c0 [ 111.318309][ T7496] RDX: 000000000000005b RSI: 0000000000000002 RDI: 0000000000000000 [ 111.318318][ T7496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.318327][ T7496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.318337][ T7496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.318359][ T7496] [ 111.617354][ T7498] nvme_fabrics: unknown parameter or missing value 'sev~+Vݭ߃:l' in ctrl creation request [ 111.654044][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.389'. [ 111.926519][ T7514] netlink: 'syz.1.394': attribute type 12 has an invalid length. [ 111.994224][ T7517] FAULT_INJECTION: forcing a failure. [ 111.994224][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 111.999990][ T7517] CPU: 0 UID: 0 PID: 7517 Comm: syz.3.395 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 112.000016][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.000024][ T7517] Call Trace: [ 112.000028][ T7517] [ 112.000033][ T7517] dump_stack_lvl+0x16c/0x1f0 [ 112.000052][ T7517] should_fail_ex+0x512/0x640 [ 112.000065][ T7517] ? fs_reclaim_acquire+0xae/0x150 [ 112.000079][ T7517] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.000094][ T7517] should_failslab+0xc2/0x120 [ 112.000105][ T7517] __kmalloc_noprof+0xd2/0x510 [ 112.000124][ T7517] tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.000140][ T7517] ? tomoyo_profile+0x47/0x60 [ 112.000158][ T7517] tomoyo_path_number_perm+0x245/0x580 [ 112.000170][ T7517] ? tomoyo_path_number_perm+0x237/0x580 [ 112.000182][ T7517] ? finish_task_switch.isra.0+0x1a4/0xc10 [ 112.000197][ T7517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.000209][ T7517] ? rcu_is_watching+0x12/0xc0 [ 112.000237][ T7517] ? find_held_lock+0x2b/0x80 [ 112.000250][ T7517] ? hook_file_ioctl_common+0x145/0x410 [ 112.000265][ T7517] ? __fget_files+0x20e/0x3c0 [ 112.000286][ T7517] security_file_ioctl_compat+0x9b/0x240 [ 112.000301][ T7517] __do_compat_sys_ioctl+0x4e/0x2c0 [ 112.000316][ T7517] __do_fast_syscall_32+0x73/0x120 [ 112.000334][ T7517] do_fast_syscall_32+0x32/0x80 [ 112.000349][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.000363][ T7517] RIP: 0023:0xf7fa4579 [ 112.000372][ T7517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.000382][ T7517] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 112.000392][ T7517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040045701 [ 112.000399][ T7517] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.000405][ T7517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.000411][ T7517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.000417][ T7517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.000430][ T7517] [ 112.000492][ T7517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.830122][ T7536] FAULT_INJECTION: forcing a failure. [ 112.830122][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 112.834170][ T7536] CPU: 1 UID: 0 PID: 7536 Comm: syz.2.399 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 112.834196][ T7536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.834203][ T7536] Call Trace: [ 112.834208][ T7536] [ 112.834213][ T7536] dump_stack_lvl+0x16c/0x1f0 [ 112.834232][ T7536] should_fail_ex+0x512/0x640 [ 112.834245][ T7536] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 112.834263][ T7536] should_failslab+0xc2/0x120 [ 112.834274][ T7536] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 112.834289][ T7536] ? trace_sched_exit_tp+0xde/0x130 [ 112.834306][ T7536] ? getname_flags.part.0+0x4c/0x550 [ 112.834320][ T7536] getname_flags.part.0+0x4c/0x550 [ 112.834337][ T7536] getname_flags+0x93/0xf0 [ 112.834352][ T7536] do_sys_openat2+0xb8/0x1d0 [ 112.834363][ T7536] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.834375][ T7536] ? __pfx___schedule+0x10/0x10 [ 112.834388][ T7536] ? __fget_files+0x20e/0x3c0 [ 112.834406][ T7536] __ia32_compat_sys_openat+0x16d/0x210 [ 112.834419][ T7536] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.834431][ T7536] ? ksys_write+0x1b9/0x240 [ 112.834447][ T7536] ? rcu_is_watching+0x12/0xc0 [ 112.834463][ T7536] __do_fast_syscall_32+0x73/0x120 [ 112.834481][ T7536] do_fast_syscall_32+0x32/0x80 [ 112.834497][ T7536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.834510][ T7536] RIP: 0023:0xf7f57579 [ 112.834519][ T7536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.834529][ T7536] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 112.834539][ T7536] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 112.834546][ T7536] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.834551][ T7536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.834557][ T7536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.834564][ T7536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.834581][ T7536] [ 112.839415][ T7536] input: syz0 as /devices/virtual/input/input6 [ 112.906814][ T7536] input: failed to attach handler leds to device input6, error: -6 [ 114.034173][ T7548] efs: device does not support 512 byte blocks [ 114.036265][ T7548] device does not support 512 byte blocks [ 114.036265][ T7548] [ 114.759902][ T7570] rdma_rxe: rxe_newlink: failed to add lo [ 114.771942][ T7570] virtiofs: Unknown parameter 'gr5$.!˒Dquota' [ 116.281176][ T7605] FAULT_INJECTION: forcing a failure. [ 116.281176][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.291895][ T7605] CPU: 2 UID: 0 PID: 7605 Comm: syz.3.421 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 116.291911][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.291918][ T7605] Call Trace: [ 116.291922][ T7605] [ 116.291926][ T7605] dump_stack_lvl+0x16c/0x1f0 [ 116.291945][ T7605] should_fail_ex+0x512/0x640 [ 116.291960][ T7605] _copy_from_user+0x2e/0xd0 [ 116.291974][ T7605] get_compat_msghdr+0xa7/0x170 [ 116.291988][ T7605] ? __pfx_get_compat_msghdr+0x10/0x10 [ 116.292006][ T7605] ___sys_sendmsg+0x1ae/0x1d0 [ 116.292021][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.292051][ T7605] __sys_sendmsg+0x16d/0x220 [ 116.292065][ T7605] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.292085][ T7605] ? rcu_is_watching+0x12/0xc0 [ 116.292100][ T7605] __do_fast_syscall_32+0x73/0x120 [ 116.292118][ T7605] do_fast_syscall_32+0x32/0x80 [ 116.292147][ T7605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.292161][ T7605] RIP: 0023:0xf7fa4579 [ 116.292169][ T7605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.292180][ T7605] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 116.292190][ T7605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 116.292197][ T7605] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.292207][ T7605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.292213][ T7605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.292219][ T7605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.292232][ T7605] [ 116.347618][ C2] hpet: Lost 2 RTC interrupts [ 116.512260][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 116.741272][ T7593] ================================================================== [ 116.744088][ T7593] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 116.746637][ T7593] Write of size 4064 at addr ffffc9000447b020 by task syz.1.417/7593 [ 116.750543][ T7593] [ 116.751719][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.1.417 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 116.751733][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.751740][ T7593] Call Trace: [ 116.751744][ T7593] [ 116.751749][ T7593] dump_stack_lvl+0x116/0x1f0 [ 116.751767][ T7593] print_report+0xc3/0x670 [ 116.751776][ T7593] ? __virt_addr_valid+0x5e/0x590 [ 116.751793][ T7593] ? vrealloc_noprof+0x132/0x320 [ 116.751807][ T7593] kasan_report+0xe0/0x110 [ 116.751816][ T7593] ? vrealloc_noprof+0x132/0x320 [ 116.751831][ T7593] kasan_check_range+0xef/0x1a0 [ 116.751843][ T7593] __asan_memset+0x23/0x50 [ 116.751857][ T7593] vrealloc_noprof+0x132/0x320 [ 116.751870][ T7593] push_insn_history+0x2ae/0x6c0 [ 116.751887][ T7593] do_check_common+0xbd3/0xc2a0 [ 116.751909][ T7593] ? __pfx_do_check_common+0x10/0x10 [ 116.751923][ T7593] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.751939][ T7593] ? kfree+0x2b6/0x4d0 [ 116.751952][ T7593] ? bpf_check+0x6c86/0xb460 [ 116.751966][ T7593] ? bpf_check+0x7b2f/0xb460 [ 116.751982][ T7593] bpf_check+0x7f51/0xb460 [ 116.752001][ T7593] ? __pfx_bpf_check+0x10/0x10 [ 116.752015][ T7593] ? pcpu_alloc_noprof+0x949/0x1470 [ 116.752034][ T7593] ? __lock_acquire+0xaa4/0x1ba0 [ 116.752047][ T7593] ? find_held_lock+0x2b/0x80 [ 116.752062][ T7593] ? __asan_memset+0x23/0x50 [ 116.752075][ T7593] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 116.752086][ T7593] bpf_prog_load+0xe41/0x2490 [ 116.752098][ T7593] ? __pfx_bpf_prog_load+0x10/0x10 [ 116.752109][ T7593] ? __pfx___futex_wait+0x10/0x10 [ 116.752124][ T7593] ? bpf_lsm_bpf+0x9/0x10 [ 116.752139][ T7593] __sys_bpf+0x433c/0x4d80 [ 116.752151][ T7593] ? __pfx___sys_bpf+0x10/0x10 [ 116.752162][ T7593] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 116.752174][ T7593] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.752189][ T7593] ? do_futex+0x122/0x350 [ 116.752205][ T7593] ? __pfx_do_futex+0x10/0x10 [ 116.752222][ T7593] ? xfd_validate_state+0x5d/0x180 [ 116.752233][ T7593] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 116.752244][ T7593] ? syscall_user_dispatch+0x78/0x140 [ 116.752257][ T7593] __ia32_sys_bpf+0x76/0xe0 [ 116.752270][ T7593] __do_fast_syscall_32+0x73/0x120 [ 116.752286][ T7593] do_fast_syscall_32+0x32/0x80 [ 116.752302][ T7593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.752315][ T7593] RIP: 0023:0xf7f28579 [ 116.752323][ T7593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.752334][ T7593] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 116.752344][ T7593] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 116.752351][ T7593] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.752357][ T7593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.752363][ T7593] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 116.752369][ T7593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.752378][ T7593] [ 116.752381][ T7593] [ 116.847272][ T7593] The buggy address belongs to the virtual mapping at [ 116.847272][ T7593] [ffffc9000445b000, ffffc9000447d000) created by: [ 116.847272][ T7593] kvrealloc_noprof+0x7d/0xd0 [ 116.852687][ T7593] [ 116.853456][ T7593] The buggy address belongs to the physical page: [ 116.855452][ T7593] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x994d pfn:0x4e093 [ 116.858262][ T7593] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 116.860526][ T7593] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 116.863202][ T7593] raw: 000000000000994d 0000000000000000 00000001ffffffff 0000000000000000 [ 116.865868][ T7593] page dumped because: kasan: bad access detected [ 116.867884][ T7593] page_owner tracks the page as allocated [ 116.869691][ T7593] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 7593, tgid 7592 (syz.1.417), ts 116741187899, free_ts 116588524635 [ 116.875038][ T7593] post_alloc_hook+0x181/0x1b0 [ 116.876573][ T7593] get_page_from_freelist+0x135c/0x3920 [ 116.878315][ T7593] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 116.880179][ T7593] alloc_pages_mpol+0x1fb/0x550 [ 116.881738][ T7593] alloc_pages_noprof+0x131/0x390 [ 116.883331][ T7593] __vmalloc_node_range_noprof+0x732/0x1540 [ 116.885215][ T7593] __kvmalloc_node_noprof+0x2ff/0x600 [ 116.886938][ T7593] kvrealloc_noprof+0x7d/0xd0 [ 116.888439][ T7593] push_insn_history+0x2ae/0x6c0 [ 116.890016][ T7593] do_check_common+0xbd3/0xc2a0 [ 116.891584][ T7593] bpf_check+0x7f51/0xb460 [ 116.893017][ T7593] bpf_prog_load+0xe41/0x2490 [ 116.894499][ T7593] __sys_bpf+0x433c/0x4d80 [ 116.895927][ T7593] __ia32_sys_bpf+0x76/0xe0 [ 116.897392][ T7593] __do_fast_syscall_32+0x73/0x120 [ 116.899276][ T7593] do_fast_syscall_32+0x32/0x80 [ 116.901259][ T7593] page last free pid 115 tgid 115 stack trace: [ 116.903631][ T7593] free_unref_folios+0x999/0x1630 [ 116.905680][ T7593] shrink_folio_list+0x3255/0x40e0 [ 116.907659][ T7593] evict_folios+0x779/0x1b60 [ 116.909552][ T7593] try_to_shrink_lruvec+0x5a3/0x990 [ 116.911442][ T7593] shrink_one+0x3e3/0x7a0 [ 116.913241][ T7593] shrink_node+0x268e/0x3d20 [ 116.914989][ T7593] balance_pgdat+0xba5/0x19c0 [ 116.916609][ T7593] kswapd+0x590/0xb90 [ 116.918240][ T7593] kthread+0x3c2/0x780 [ 116.919767][ T7593] ret_from_fork+0x45/0x80 [ 116.921180][ T7593] ret_from_fork_asm+0x1a/0x30 [ 116.922718][ T7593] [ 116.923501][ T7593] Memory state around the buggy address: [ 116.925252][ T7593] ffffc9000447af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.927757][ T7593] ffffc9000447af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.930285][ T7593] >ffffc9000447b000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 116.932812][ T7593] ^ [ 116.934452][ T7593] ffffc9000447b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 116.936973][ T7593] ffffc9000447b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 116.939457][ T7593] ================================================================== [ 116.943188][ T7593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.945556][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.1.417 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 116.949198][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.952517][ T7593] Call Trace: [ 116.953575][ T7593] [ 116.954515][ T7593] dump_stack_lvl+0x3d/0x1f0 [ 116.956039][ T7593] panic+0x71c/0x800 [ 116.957277][ T7593] ? __pfx_panic+0x10/0x10 [ 116.958772][ T7593] ? rcu_is_watching+0x12/0xc0 [ 116.960295][ T7593] ? preempt_schedule_thunk+0x16/0x30 [ 116.961965][ T7593] ? vrealloc_noprof+0x132/0x320 [ 116.963523][ T7593] ? preempt_schedule_common+0x44/0xc0 [ 116.965222][ T7593] ? vrealloc_noprof+0x132/0x320 [ 116.966773][ T7593] check_panic_on_warn+0xab/0xb0 [ 116.968332][ T7593] end_report+0x107/0x170 [ 116.969699][ T7593] kasan_report+0xee/0x110 [ 116.971050][ T7593] ? vrealloc_noprof+0x132/0x320 [ 116.972610][ T7593] kasan_check_range+0xef/0x1a0 [ 116.974132][ T7593] __asan_memset+0x23/0x50 [ 116.975570][ T7593] vrealloc_noprof+0x132/0x320 [ 116.977071][ T7593] push_insn_history+0x2ae/0x6c0 [ 116.978619][ T7593] do_check_common+0xbd3/0xc2a0 [ 116.980158][ T7593] ? __pfx_do_check_common+0x10/0x10 [ 116.981849][ T7593] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.983495][ T7593] ? kfree+0x2b6/0x4d0 [ 116.984780][ T7593] ? bpf_check+0x6c86/0xb460 [ 116.986235][ T7593] ? bpf_check+0x7b2f/0xb460 [ 116.987699][ T7593] bpf_check+0x7f51/0xb460 [ 116.989104][ T7593] ? __pfx_bpf_check+0x10/0x10 [ 116.990555][ T7593] ? pcpu_alloc_noprof+0x949/0x1470 [ 116.992153][ T7593] ? __lock_acquire+0xaa4/0x1ba0 [ 116.993672][ T7593] ? find_held_lock+0x2b/0x80 [ 116.995159][ T7593] ? __asan_memset+0x23/0x50 [ 116.996596][ T7593] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 116.998106][ T7593] bpf_prog_load+0xe41/0x2490 [ 116.999545][ T7593] ? __pfx_bpf_prog_load+0x10/0x10 [ 117.001076][ T7593] ? __pfx___futex_wait+0x10/0x10 [ 117.002584][ T7593] ? bpf_lsm_bpf+0x9/0x10 [ 117.003874][ T7593] __sys_bpf+0x433c/0x4d80 [ 117.005220][ T7593] ? __pfx___sys_bpf+0x10/0x10 [ 117.006698][ T7593] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 117.008544][ T7593] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.010128][ T7593] ? do_futex+0x122/0x350 [ 117.011465][ T7593] ? __pfx_do_futex+0x10/0x10 [ 117.012909][ T7593] ? xfd_validate_state+0x5d/0x180 [ 117.014456][ T7593] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 117.016337][ T7593] ? syscall_user_dispatch+0x78/0x140 [ 117.017945][ T7593] __ia32_sys_bpf+0x76/0xe0 [ 117.019352][ T7593] __do_fast_syscall_32+0x73/0x120 [ 117.020885][ T7593] do_fast_syscall_32+0x32/0x80 [ 117.022422][ T7593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.024326][ T7593] RIP: 0023:0xf7f28579 [ 117.025588][ T7593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.031312][ T7593] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 117.033812][ T7593] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 117.036221][ T7593] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.038585][ T7593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.040929][ T7593] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 117.043320][ T7593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.045690][ T7593] [ 117.047190][ T7593] Kernel Offset: disabled [ 117.048535][ T7593] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:32:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000100 RBX=ffff88801b442c80 RCX=0000000000000000 RDX=0000000000100002 RSI=ffff88804c10a800 RDI=ffffc9000359f5c0 RBP=ffffc9000359f5f0 RSP=ffffc9000359f540 R8 =0000000000000001 R9 =ffffffff821fd0e9 R10=0000000000000000 R11=0000000000000000 R12=ffff88804c10b800 R13=ffffea0001304200 R14=ffffc9000359f638 R15=0000000000100001 RIP=ffffffff82151fa6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff12b92d280 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff12b5ef580 CR3=000000002315a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a4ea97cd0 0000559a4ea8c040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1e5c7630 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1e5c6c50 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130dfef2c323311 737326ec647fda5b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003175 70632f302f716d2f 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4243ac9c5f414062 0000559f170cc3b7 0000000000000051 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68303e3b3a38253b 3a253e3a6e68303b 21383b657a687438 2739243c3b243b27 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bdb65 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc90003c16f00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3039636666667257 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9ae12b00 R15=ffffffff854bdb00 RIP=ffffffff854bdb8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe55c0 CR3=000000005a9d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341460 RCX=ffffffff81af2589 RDX=ffff888000c82440 RSI=ffffffff81af2563 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000362f7e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100566828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180 RIP=ffffffff81af2565 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057cad448 CR3=000000004cdc2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8e3c14a0 RBX=ffff8880238dd410 RCX=ffff8880238dd410 RDX=ffffffff8e3c14c8 RSI=0000000000000488 RDI=ffff88804e618a10 RBP=ffff88804e618a10 RSP=ffffc900005e8d70 R8 =0000000000000007 R9 =0000000000000000 R10=0000000001398600 R11=0000000000000000 R12=ffff88804e618e98 R13=0000000000000202 R14=ffff8880238dc880 R15=0000000000000000 RIP=ffffffff8197d42a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7b9d3b6d00 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b9ce7796e CR3=000000004f628000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=c334cb0a2b8aa952 d7ba0a6d7c917728 c334cb0a2b8aa952 d7ba0a6d7c917728 c334cb0a2b8aa952 d7ba0a6d7c917728 c334cb0a2b8aa952 d7ba0a6d7c917728 ZMM18=2d61e9119aac55d4 d75ab5d53ea78792 2d61e9119aac55d4 d75ab5d53ea78792 2d61e9119aac55d4 d75ab5d53ea78792 2d61e9119aac55d4 d75ab5d53ea78792 ZMM19=0708000000000000 000000000000000e 0708000000000000 000000000000000d 0708000000000000 000000000000000c 0708000000000000 000000000000000b ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d d7ba0a6dd7ba0a6d ZMM22=2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 2b8aa9522b8aa952 ZMM23=c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a c334cb0ac334cb0a ZMM24=3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 3ea787923ea78792 ZMM25=d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 d75ab5d5d75ab5d5 ZMM26=9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 9aac55d49aac55d4 ZMM27=2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 2d61e9112d61e911 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000