last executing test programs: 2m10.073150949s ago: executing program 0 (id=733): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=';', 0x1}], 0x1}, 0x20000001) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0xac}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x6}}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="03008b2d", 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2083) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x401, 0x2) 2m9.793261421s ago: executing program 0 (id=735): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x51e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') socket$netlink(0x10, 0x3, 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r6 = dup(r3) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) (async) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) syz_open_dev$dri(&(0x7f0000000180), 0x418c, 0x200000) sendfile(r6, r7, 0x0, 0x80001d00c0d1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x56, 0xa, 0x2, "3258c546dacccfae1e008faa00000000f4ff4000", 0x50424752}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0xee01, 0xee00) (async) setresuid(0x0, 0xee01, 0xee00) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @private2, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000240)='Z', 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xd444, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000840)="1d", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000340)={0x8001, 0x18201, 0x4bf, 0xfff}, &(0x7f0000000580)=0x10) 2m9.292869424s ago: executing program 0 (id=736): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setregid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0xfdfdffff}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) 2m9.138424142s ago: executing program 0 (id=738): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) write$char_usb(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.64113974s ago: executing program 0 (id=753): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m7.519350179s ago: executing program 0 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8940, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x2, 0xfff, 0x5}) 1m51.919627761s ago: executing program 32 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8940, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x2, 0xfff, 0x5}) 4.702337594s ago: executing program 3 (id=1543): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003000000400000190780a010102acfdffaa04009078000000004500000000000000003200"/62], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6f0a25592b853ef5e092805991d2824c474b18", @ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25070000002c0001800500020010000000060005004e2300000500020002000000060001000200000005000200f300000008000300060000000800030008000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000045}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000000000000040000", @ANYBLOB], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 3.497099293s ago: executing program 3 (id=1548): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2020) (fail_nth: 4) 3.496803569s ago: executing program 3 (id=1549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) 3.496562712s ago: executing program 3 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r1, 0x1, 0x29, 0x0, &(0x7f0000017f00)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$sock_int(r1, 0x1, 0x29, 0x0, &(0x7f0000017f00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) 3.402354775s ago: executing program 3 (id=1552): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getpeername$unix(r0, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="99c86b4b0e7ccd1b4ad861531bf5a65ab465593aac3d83ca3477bbc9d82376f08d31d8db04f8f54d7e77752fff0ee9313d447a90d9c91c9ef48b0d353784a6af7184b95c4aaa625abca8f38e706f6ed514325d871929d38beb9b286f515f58d1035e847a5a097177280b7907bdc4b1d30392ed6508137d1790c9a73042556132cd127f43237ee7f2aa22e38aa57f36fdd382bf088d77dab9fb993a0769884452e3aa3291701b9807e5", @ANYRESHEX=r2], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000400)=0x10001, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x2d0, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x2bc, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3ff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x22c, 0x811, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xec6d, 0x9, 0x2, 0x96, 0x10001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0xffffffffeffffff8, 0x5, 0x60}, 0x21d8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x3, 0x332, 0x9}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x4, 0x5, 0xd628}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x1, 0x8033bd7a350858d6, 0x400003, 0x4}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8007, 0x8, 0x80, 0x8}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x100, 0x3, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xb, 0x5, 0xb, 0x5}, 0xfc01}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xffffffff, 0x0, 0x7, 0x80000000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0xcc9a, 0xf1}, 0x6}}]}, {0xe3, 0x6, "8d93729c6b1bac33aaf83bcb0097ee8ce8f297841a122925dae83b2a4756136f9cd8ae66c599869620ecfe78ee519cdd99622585b9a99f0927ba342c95ae966f1efb67b5b28933659fb103c7178c65bea37ce3aeb68f5a36a5cc45306c90aa76090a562167c95115fb26fc9dd488e1fbf6639eb2f1486f95358af84048949759229b94f257099025ab51a9f1081e537146e1b4a5409507b03fe64457a09b27bb2acd5d7a71fe8ba3c17e6ab9225ea6412b93c258cf9d762f6f64f6752ffce47d82cf2468cf02e53bd9c39b44d5ae5f1449b633d8dbd460660c4c4c1dd9fdff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4804}, 0x448b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setresuid(0xee00, 0xee01, 0xee01) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0xa5695000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r9 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) write$proc_mixer(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="545245424c4520274d617374657220506c61796261636b20566f6c756d652720303030303030303030303030303072f5c6ad30300a"], 0x35) 2.53147763s ago: executing program 4 (id=1556): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r6, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400780015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.576449098s ago: executing program 4 (id=1559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) 1.535929332s ago: executing program 4 (id=1560): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x404404c) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 1.48213814s ago: executing program 4 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x1, 0x0, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x6, [{@remote}]}, @ssrr={0x89, 0x13, 0xee, [@remote, @private=0xa010100, @loopback, @local]}, @ssrr={0x89, 0x13, 0xb4, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x32}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe4, [@empty]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x430bd29, 0x25df5c00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d5, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="40003a000a000200ffffffffffff000008000f00"], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x7ff, {{0xb, 0x4, 0x1, 0xd, 0x2c, 0x66, 0x0, 0xa8, 0x21, 0x0, @remote, @broadcast, {[@noop, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x7, 0xe, "c1d381cc9c842ab1f2f10539"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@RTM_NEWMDB={0xf8, 0x54, 0x400, 0x70bd2a, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x2, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x3, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x2, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x2, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86dd}}}]}, 0xf8}}, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000080)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x1, 0x24, 0x64, 0x0, 0xd, 0x21, 0x0, @private=0xa010101, @broadcast}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x3, "3481cd", 0x5, "001000"}}}}}}, 0x0) 1.41149807s ago: executing program 4 (id=1563): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) truncate(0x0, 0xf000) close(r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffccca38b900f000060860eb", 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x24, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x40) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 1.062029889s ago: executing program 2 (id=1564): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close(r0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) (async) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x2200, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) (async) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc1105511, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40009, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 712.131495ms ago: executing program 2 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x3f00, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 572.104804ms ago: executing program 2 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x40000000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040c8}, 0x4000000) 571.845007ms ago: executing program 1 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x25, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8850) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0x1}}, 0x18) 565.422935ms ago: executing program 1 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) 491.522684ms ago: executing program 1 (id=1569): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x8001) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000202020005000300000000000900010073797a3100000000050004"], 0x30}, 0x1, 0x40030000000000}, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x3dc, 0x218, 0x218, 0x218, 0x2fc, 0x2fc, 0x2fc, 0x4, &(0x7f0000000000), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x36}, @multicast1, 0xff000000, 0x0, 0x9, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x3, 0xb1, 0x100, 0x0, 0x81, 'batadv0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x40}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @rand_addr=0x64010102, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr=0x64010100, 0x0, 0xaf002aa4cfae49e3, 0x56, 0x8, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x6d54, 0x7c8, 0x2, 0x0, 0x6, 0x6, 'wlan0\x00', 'virt_wifi0\x00', {0x6513f555337a2d62}, {0xff}, 0x0, 0x160}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xcd2, 0xd}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x428) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="72646d612c00e7de460ed1195888e34de683fee4ee974a5c73dffe55dc4155d4bc50f0c7e9b086090380a3ca91e14ac67973a4b27648d86c1678712e59b56d1aa0eb89f1959b32beff49a7a7d76f83edf515bd9dee481a47dd0fcdae7973d6a4fe1e029f8cb3b9d7c58ace487477029586c5d352aee62270373a8bab14ce12f178f537bb6d00b7276a63fc4416ba55619126a55b1a8b94b788dd604af42c3a488f94717ea205a85e33453f67e8b649e69eccca1ed618666550d30fd23b2af3be24006e580bf897d10629ef11ea9b8aea8ce2f218f272d2d8bd1631577c91dd54b4df761760d360b4d978bb00"/250]) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x40200, 0x0) ioctl$CDROMEJECT_SW(r5, 0x530f, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f0000000180)) ioperm(0x0, 0x7, 0x5) ioperm(0x5, 0x7bb, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x10003, {0x1f00, 0x1}}) 491.217386ms ago: executing program 2 (id=1570): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x300, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x2d, {0xf000, 0x0, 0x1}}, "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", "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"}) read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2020) 412.116177ms ago: executing program 1 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x8000, 0x104) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000200)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1ced000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 411.733951ms ago: executing program 2 (id=1572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0xd, &(0x7f00000000c0)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0), 0x0, 0x1000}]) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=@newtclass={0x30, 0x28, 0x110, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0xffe0, 0xfff1}, {0x3, 0xffe0}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40) 411.000842ms ago: executing program 3 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0f00000001080500000000000000000007010005090001010000003000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) r2 = openat$audio(0xffffff9c, &(0x7f0000000140), 0x4a802, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x40010, r2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = getuid() r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, 0x0) r9 = syz_io_uring_setup(0x3ffc, &(0x7f0000000000)={0x0, 0x7112, 0x800, 0x0, 0xd}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x38a7, &(0x7f0000000100)={0x0, 0x3f3a, 0x4, 0x1, 0x3d7, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0)) bind$netrom(r4, 0x0, 0x0) read(r3, &(0x7f0000000fc0)=""/4, 0x4) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000001000)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)=ANY=[@ANYRES8=0x0], 0x10}, {&(0x7f0000000240)={0x6c, 0x32, 0x4, 0x70bd0a, 0x25dfdbfb, "", [@nested={0xc, 0x95, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}, @generic="77617832b98491f9457c2d4197375916ce68dbc2bc4f6bdd7b8960be8da679cc4f93991cc8b7b6c58634c9d81a1b3de4df2d629eadfe97957d78f5a7bbadd868b246", @typed={0xc, 0x124, 0x0, 0x0, @u64=0x5}]}, 0x6c}, {&(0x7f00000066c0)={0xde0, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x6d9, 0x106, 0x0, 0x1, [@nested={0x4, 0x58}, @nested={0x4, 0x151}, @nested={0x4, 0x14d}, @nested={0x6c8, 0xf3, 0x0, 0x1, [@generic="dd3209faf290ff53b6add7ce446b924b2d8750bf48011f1b02a2a6a7cdb49c7b1b360c9ac561c8a7c169aeafb6292ce232ca66564d43f38d", @generic="799dbc1b167f6bff263282bc6fc3601dc6eef74dbac1748cb110967848050886fdcfc3cd552cfa91918688b1b1ebec416cc9dfcb3c6127ef53a5d642d336a9998f5497703b70e097ca0fb23a881cb0caef790add6d0e609f7bc2c30f163f3a42917b01327581", @nested={0x3c1, 0xcf, 0x0, 0x1, [@nested={0x4, 0xb6}, @generic="d06092f8c65c54a1e702306cd9f22207b4185979caf69809e58d740958c6b3e1df494bab1ccf43107eb0797edd19ef1192261b5bf190ae0f3ba50a55f2558cd8", @typed={0xfe, 0xf6, 0x0, 0x0, @binary="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"}, @generic="8ae4f3842608ad59a77095b443ad628d92ddcc0dc2c6387b88156feccb48521a514df9e44fe2c6f376298fad245ac3b1aac063d3f17bfc3f9d2cd42fdc7a5617efb6c4380189e2bad3c14e563e2193aadf84dbfc689d2bebc081fcdbf991683d0ebb8d37ffc4be14fc6dad1f7280dfeacacfc058d2e809da66c47e3237ca0c32b0cd8b48d722b313e4ea849bcdb2e9d26b2bc3bcb267b566922d313a2e1fb09192885089e89ff4843a58d8a1d65cf9e7506d90020a0e61eb0cb3f67641b579758439e8770ce066b0f578d707aab38534e9fb342e37eb4cc40651fa77330fbc760002f641b5a5179c8b118500", @typed={0xc, 0xe2, 0x0, 0x0, @u64=0x9}, @generic="b48d23066cbcd94c85af04063d163aba2a32b4c5f66940516ecde9552bb092fa6cd0ee1576de92f4520c07f6b1d5c623a913adc52e2c119e92f9d3bda30a3d3088da52e483a2179b8fbd833f171f606ce10c511156b8ec2ff9d3fa915a1bd83483da5ed9b8d84152ac6c8e9e71edbd0a78f3da89d82a4a7efdc03f653920777ebe3f3fbd3a8bb8b8c059ecbf6b9f7336dd09806b7059a7f591a64f709e4c3242159a514da6776aca24ede47062", @generic="ca345f9a25cd1dc6c77e2bfa706780a6892476693ece58b5a26fa54c66cb819f046948c171159a0a6462572616c863b3b22075233604db3924699bbcc57b1245cd7bd1d41d19807cdf2d2186466c447801ce6e781693a91872aa9ae39d5bf540730f839c75f66ad188f300624bd36c98a68ee757f06d65a358666bc53461a2d600995955e612770d17d0cb8fd5ad1e", @generic="583767676f21d1d5df0ffffac94ec7679fe72299741c29e6d10b8903aa446066325abfaf605dc5ae16a7f3e8aeb500919c2412336057c19938d6f08b3f0b045c42bd50cca0"]}, @generic="3c28cddedf2f804eea1774248feb972ede31d8dd23117323bf50750ac69eb0daaade5a1fd0996e8858f8b9f4f9b7052f8686840fde0e6bc754fdbb331e30c36ed429d1baa40f1002748cc41d763f82", @typed={0x8, 0x13d, 0x0, 0x0, @pid}, @nested={0x6f, 0x149, 0x0, 0x1, [@typed={0x4, 0x38}, @nested={0x4, 0xde}, @generic="98ba6d570e9b95576371c8a253d95580047e7f2dbcb10803d87dd9019f5c0fe9eb505d13df2f28eb1b640325ece3a8909eb4e77fbd67ccd4c5d2a4b574b79ecf997b81ab61a5cc414efe6c829d899318bc997854242bcd52f6ddfc4c302e33", @nested={0x4, 0x79}]}, @generic="2ded0e22c3bed476152b28c3ff01ce2aae04415886e21a86efa61203a427b363c98feaabb7afe81eb12171e9626a326de16888a3651a53123476b45ed116b9a2112f4c8676ef70364d2760c23a5a263c3d793f8bdc7eb0907bebbac6bae4e459559e586396abbb28f78b0c4ea2b8c84bb34b29cb51d9f08ea7a032eb2bd1f5762094120fccd05959acb9b0c51c7a8b2cde70ce56422c4929c8bc79544367bbf64fcffbeee7e6d8cff5f1893ee6681b58807a74e600d446d67f6c164b31b642ccb435521bdfb3e49871ad8c", @typed={0x8, 0x140b, 0x0, 0x0, @uid=r7}, @nested={0xc6, 0x11, 0x0, 0x1, [@nested={0x4, 0xef}, @typed={0x12, 0xef, 0x0, 0x0, @str='/dev/swradio#\x00'}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@empty}, @generic="7339a2fb5ce3b3df458d247ab23f842f596597ca1fe22d77e989d859833b084cf068836db4e2bbb21c984dd3ed409f741cb85031bb50d668a7e61022971fd552e56c2839927f412ca0feed2711a67d912b8fe4a2a2b0176bb4dbd8ee16c673304c7314968abb82bf6359ad15105fe5ab88aa959ef7cc6f63b607dbf285bd73114e751783f8495b2cb6350b8d302fbbddc5a89c311c03"]}]}, @generic='H']}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x3}, @nested={0x5fc, 0xa5, 0x0, 0x1, [@generic="2b4d200df38dcf37e19baf5da30b1ca5ff743c21ba46032532476505d7fa7093901a955aa746ad3c92dea95bda8a9178378a3eca6b6f8b5a095a4deda3ed1262857812d07be4ff8e61ee7d78e05b1b498a39203aac23b3df9d697fa55404bf0d9b7c69467025a16afe0a5e2e52a4b7a75bdce9a08a0809583bf17a4137fe877c80d86a0663a4078e2dd357d97e9fe2407c586bc8634608d82f4174da16dee6018074e9e02cfbcacfb7cbb39ea33401f160c213dcaeca01055f44cbb3aaea19a302dea8ce", @typed={0x8, 0x90, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xbc}, @nested={0x32a, 0xd4, 0x0, 0x1, [@generic="eef176fe8c8077b8a0", @typed={0x4, 0x138}, @typed={0xcc, 0xdf, 0x0, 0x0, @binary="d1b9bbf5ed342455e5d60987b771979443492aeb91cc29bebf9534cdb96e8d833e7c0e06316502916be612f0c2cdd9943df20b54186ee83fa4a315db74700d7cd746938bc06139dd9e3d432084a7dcb9f0d92eea9df0f973c12bc3ceb27015f80f20840f2d1996c478423519c2faec51d952953389c547e77deff0718a845a36283f47ec45fa650f68ed7bd1bd8f4d72f7a6a909dee4c8ffca0a0175c50bab86345bbbf0888aeb89a2408bff509dc1446108caf904739ad3741401297fa7c8b5e3e09edefe7b780d"}, @generic="782f1a1e0509445395e705d6c652ce29c2163955f3660fbbb4353e293a3f3776b541fdc2eb107c6b30240791c0a4027ab62e0888d433c1c73b6ef59f0f3ebafbf643cf8e85e1ee29fe31c58a3bac60848ac3368b6a4679f0540dc1ce62a2bb86fec565ccd9726990d21e2895896c2558411237394eee07f8b375641f55545fa3c97213a16675b9384ac3b5f7c17f28d098443c5d8e10a54f0c92c19519036e278dcd4940dbd4e696c17dd49bda54ee14e0587a13e41475b66645d5a50097ef1cb0e91acbe1f704b0af40e756044145eddcc1878e31", @typed={0x8, 0x20, 0x0, 0x0, @u32=0x3}, @nested={0xe8, 0x5, 0x0, 0x1, [@generic="011454302ad0df024530e55d6c705114fda1b80195c3d1573653886701ccff326e4132123275178625b169434e5102d084d198e899d847b14df990ad807be0ad9c96efd68b00be761a189dbc6fb0e50db75aba45d71a7c6166643c762f157492fd5a0ac0e4a241d58caf3924a20003b903b44d22b5df17afbfd9a14706767e06c202ab91c1e4f03376cb97f46935f63bda77130ad6658526239baca06c9b2bce9753aadd8d3099bf7f78f0c064db8e67491fddcf0ecc27f562d271fbaacc4a57460d3ae8272c64e68b9c22c7a91e4b8567fd835df50be8eb817507fc988730ae57a2593e"]}, @generic="e921a7cc9bb578ce568510094d6faecdd17069a377a0e380a1f6b0b9349aad88435fb3c688f0188ada9b18a7bfd073cfb43f9395b09900429c1d11fdb04c29f3e3d6daf873a93c4c25fb11fd7f19fceabd15c983adbec00c5c83713b18d3b19d9751f1e184aaa6a10a8aaa0014bf9f99c06571529084ebb6d6335325dff3e88539b4a549347a9b42"]}, @typed={0x8, 0x133, 0x0, 0x0, @fd=r1}, @typed={0x7, 0x108, 0x0, 0x0, @str='+-\x00'}, @typed={0xf0, 0x85, 0x0, 0x0, @binary="ad22c441270b4f478ef917e4c02da205029e76b00ed767abd1b7bfc9377734ca51feeca3d6e01ca784fc8e898d95d0c537a2db6b2c5e232a4245882e9ca12e8de6571b0953ffb7bfd1845597e7a4c0dea96a40647c46d04cf4841b59dc75e2a45f284459b6e20bf2ffc40ee9185e0dd2480948dfb7ae68c0d0cccc49713072206623c6a16c01b214359efdf1d5794b5091b9a7939b6fe046fca12a776354e09d20a6765af2a0de6de922d16a5544cd54f2dee87c61a1de2a37a780e86089b37bc95166a0f0be0ebce762cad8c15c3bda562eb4cd06e5893bc621e3fa1e050d6a9b26e65d8149bf6a12701d78"}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0xa}, @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@local}, @typed={0xdf, 0x70, 0x0, 0x0, @binary="324aa8344b04f34a4ab8d278d3c5892cdf94aaf4123c186934b815ed2ae3b823035b4a0c258cec9c02604b24f189704a503815fdd382c93c44fa2726f9ff2bfbf23f9c9a0dd60743af413ad40fd7eae14e2b61071908c14dba03cfeb2f1a9631ca307d747268672036ac36f21a33e0d3a048b048ff92609ddf0421bdb58cec34704a20a5b517b4cf360dab53a90b5caf43124f19ce52eafc4ff91a1299fbba568aadd974ad80bfcf3315e603de22b7953d0b25f0efb687d2a3d00682303a6728b0c511e09a8b7d4f304592b30766fd24a64ddec4edbcd91e39c91b"}]}, @nested={0xdc, 0x95, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @u32=0x1}, @typed={0xf, 0x4, 0x0, 0x0, @binary="f37afb52497d99826d8395"}, @generic="4d7c08371626058f63889c525526ed9e961e4f700d893dd887b472fb570e25a92fe1ad36684db8c030eb0185213275408d2513d600c93c12d9a6ba5f4f113bbba9a2a11763d93be359bf395ed9b008d79e92bf53be134538a009fba1d994154476265bcee452768d78b8b9e8572174755d718a0732c56593c11f0f9b89f224f6ffe0ca9defc5fb72b21340a8b0fd1e8cfb7f6574c5388180c9c81713", @nested={0x4, 0xf0}, @typed={0x8, 0x10d, 0x0, 0x0, @fd}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xa1, 0x0, 0x0, @fd}, @nested={0x4, 0x54}]}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@mcast2}]}, 0xde0}, {&(0x7f0000004580)={0x1114, 0x15, 0x4, 0x70bd2c, 0x25dfdbff, "", [@generic="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", @nested={0xcf, 0x57, 0x0, 0x1, [@typed={0x4, 0x8e}, @generic="61bd4480e2484bf7233e3c0aa909ccc73d83d34540989f7f21fb5b531100f1121c210346c4cd237dc16e543cae24610927027e24fd3722f4ded76be444c3e3045b00bd02eece66df79f2c9408b3ccf316a916db017bf8cbf5414037257ba2b17f3fa20cf0f4b394d8068b2d54ddd07ddce55073883d6794101f0a2c9a45f87c10c53a5dec41bb847deae226ec0591379d9b494bf71fb1b21757ac3884d45a7ba77507343b24f7574710d69c2cec75146146da9ba3a52f22c5cb8022fc44ea36d4300661099b8b7"]}, @nested={0x34, 0x74, 0x0, 0x1, [@typed={0x2f, 0x94, 0x0, 0x0, @binary="8c9343e869fb342dc25b6ed443c7fea59bcf34e2f43af4243e830be59f7f5f3a47afa68429f6bab865de37"}]}]}, 0x1114}, {&(0x7f0000002180)={0x23ec, 0x15, 0x300, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0xf6, 0x0, 0x0, @fd=r3}, @generic="7acd16ac05b301fb93e999284db14402ce28e2856b83babaf956e374da9dff3c6e3172b0cf5c4bbfd9f074d87f176c7e4ac2b9a770b5e6136aaa8ae1d8be76d697a721726210c91f2320f45662c17ee32f2fc8944efa775ac08d145de8f0531f675ab83330dc55d77c35471fc824b8199ab01608f460a728ec198628a5e3cfa7ff45a5b218df813a3566d4d2aecdc04740239c4b599d2d9db686ae78868a8dce584f738e105e28b20165", @typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @generic="8ae0c9d6e7473b9cc77a548931606c99ce644c395b07a7e30a5b234e576128e9388f3753e2d9c52d024c3fe2e2fbebeb602ea0e6a218bc44dfd882ea82fc045f33aaea12e56feb761eef835323218e86d099adc4db51d5d22701c9d6dcefae6f8982b0712e7c8ec2f6c4a25faf3c1721d281aeca112ff158a713eaf165eb9c3970c50e90dd2432243a4f19ceebeaffc1f5fb94df436640", @typed={0x8, 0x10e, 0x0, 0x0, @str='@#,\x00'}, @nested={0x117f, 0xc7, 0x0, 0x1, [@generic="ef7236bc1fd8e9a9fc505675c959fe3af78d057438d7df831c1ef319d02303d9c55b93bb216626043f5592374c500c77dfc2f25f3e218eca4b8eaf85d8eb3a4faaca855297033c362d369fd562c9ee7b7e0a40282e40451a1bc814a3f39ff73fa22d9ea36c00dffe04f0c21909598394a6fe2f4cde740e7073bc0196e1d8f84c750d6f8e2ed4ca29d51365742a1822a080901dcb394127e4de3623f3f65bbd6fe38d6bd0340bf98f687c41300cc14c45d9544af36286893888b7db7d30e3874f22c9951a8f7e7af7dbda661d2f1a338bab187faa", @generic="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", @generic="7f6dd34e033bbc82d607decd1b3df0c1aa1794a44094765fd186335c2247d0fed7699b21cde3f37240d04d13e12a63efda5ae7f895540c1953fe43a95ea0558aba51ff09f2d1c5a66556737705f94a80c0ef66d59b3f19c054dd8d1c7fb865d72573489696c8e6327168c17ce2a7087e6e5d11c2a18c87d3fa351e6cf0c7de97d90ee1feac6255f06690bc22ca7dd2350b3c7fb77f9c8c", @nested={0x4, 0xd6}, @typed={0x6, 0x2b, 0x0, 0x0, @binary="2ac5"}, @nested={0x4, 0xb7}]}, @generic="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", @nested={0x100, 0x54, 0x0, 0x1, [@generic="4071d805cccc8e994b538a423f9298a485b15d1a188b562c7b6f3b1efa783f7f23c36f45bd5385afde91320d26b37b72114234277d454ca00d36b2c6b9f0b8ba30f79275935bf1758932fd05a1a9ee677e0953214a9d67eaf4fe1822f71a1d955dfd11798c54cd6ac824c6375c0ae049123387a64fefebbaee4398ecec08d0e90d99eea9d898b34947190220a1532fb3b790757f6bb32ce2e6", @nested={0x4, 0xd3}, @generic="b91663a291a8ec8ffb5a0dff46494ecfa9f11770874c6f71abc1706579ed47e2865b05baa6e8946ec66c1dc466e2eaa69cd00e3241873e4eef1299539644c9e78021aab3c8efd515bc2d06437fd6c158f9c4872717f731", @typed={0x8, 0x52, 0x0, 0x0, @pid}]}]}, 0x23ec}], 0x5, 0x0, 0x0, 0x4101}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 182.248268ms ago: executing program 2 (id=1574): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x8000, 0x20) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) (fail_nth: 5) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1ced000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 82.266325ms ago: executing program 1 (id=1575): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r2, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) tkill(r1, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x15c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x774b}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1d0}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x810, r3, 0xfd44f000) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 417.612µs ago: executing program 1 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x160, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x14c, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x1, 0x8, {0x0, 0x1}}}}, @m_ife={0x104, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xbe, 0x6, "7059df1faa8f6c49fc831cb6151ca9c297459cf3d74c31af403a87158edf0ca1ab78d74bc9e12d74ab1df0e75aa926d75f22c51019bf01128c25ceadcc24baa3839f707b0e1ba848a1ff09497dcd338b52d75fc907cae5a5e840c2e80e465be3383885a01e8800a18a1111e26c2edc730eda0d0b8345147d21f6f5800da43d8b0c277305633f5d4f724253abf46d0985fe412002ace096648ccf2ccea9a9b30a6b8ad8554a34e04ce38c99f0bcd97e07df8fc73a55775dd0d97c"}, {0xc}, {0xc}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x8, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f00000001c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306dc9c274200000500010007991f27deab646aaab818927e315dd36cc0d82e7eaa2b213c17c28626cefddbbcc72fbf72d7d93375125a87dd3ea8243a"], 0x1c}, 0x1, 0x0, 0x0, 0x4041000}, 0x840) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x1) 0s ago: executing program 4 (id=1577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ? __pfx_ksys_read+0x10/0x10 [ 178.290121][ T9104] ? rcu_is_watching+0x12/0xc0 [ 178.290135][ T9104] ? rcu_is_watching+0x12/0xc0 [ 178.290150][ T9104] __do_fast_syscall_32+0x73/0x120 [ 178.290168][ T9104] do_fast_syscall_32+0x32/0x80 [ 178.290184][ T9104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.290197][ T9104] RIP: 0023:0xf7ff5579 [ 178.290207][ T9104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.290221][ T9104] RSP: 002b:00000000f5116590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 178.290237][ T9104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5116620 [ 178.290247][ T9104] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 178.290256][ T9104] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 178.290264][ T9104] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 178.290276][ T9104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.290295][ T9104] [ 178.307491][ T9076] hsr_slave_0: entered promiscuous mode [ 178.376355][ T9076] hsr_slave_1: entered promiscuous mode [ 178.378948][ T9076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.381602][ T9076] Cannot create hsr debugfs directory [ 178.434685][ T9113] FAULT_INJECTION: forcing a failure. [ 178.434685][ T9113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.439087][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.2.857 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 178.439103][ T9113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.439109][ T9113] Call Trace: [ 178.439114][ T9113] [ 178.439119][ T9113] dump_stack_lvl+0x16c/0x1f0 [ 178.439139][ T9113] should_fail_ex+0x512/0x640 [ 178.439155][ T9113] _copy_to_user+0x32/0xd0 [ 178.439170][ T9113] simple_read_from_buffer+0xcb/0x170 [ 178.439187][ T9113] proc_fail_nth_read+0x197/0x270 [ 178.439203][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.439218][ T9113] ? rw_verify_area+0xcf/0x680 [ 178.439231][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.439245][ T9113] vfs_read+0x1de/0xc70 [ 178.439261][ T9113] ? __pfx___mutex_lock+0x10/0x10 [ 178.439277][ T9113] ? __pfx_vfs_read+0x10/0x10 [ 178.439295][ T9113] ? __fget_files+0x20e/0x3c0 [ 178.439314][ T9113] ksys_read+0x12a/0x240 [ 178.439328][ T9113] ? __pfx_ksys_read+0x10/0x10 [ 178.439343][ T9113] ? rcu_is_watching+0x12/0xc0 [ 178.439359][ T9113] __do_fast_syscall_32+0x73/0x120 [ 178.439377][ T9113] do_fast_syscall_32+0x32/0x80 [ 178.439392][ T9113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.439406][ T9113] RIP: 0023:0xf7ff5579 [ 178.439415][ T9113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.439425][ T9113] RSP: 002b:00000000f5116590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 178.439435][ T9113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5116620 [ 178.439441][ T9113] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 178.439447][ T9113] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 178.439453][ T9113] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 178.439459][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.439472][ T9113] [ 178.492192][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 178.516378][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 178.956203][ T9076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.962891][ T9076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.972075][ T9076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.988891][ T9076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.227617][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.248806][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.256315][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.258707][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.265319][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.267652][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.416501][ T5958] Bluetooth: hci0: command tx timeout [ 179.860087][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.022332][ T9159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.026695][ T9159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 180.067017][ T9164] 9pnet_virtio: no channels available for device syz [ 180.070828][ T9164] overlayfs: failed to clone upperpath [ 180.078778][ T9076] veth0_vlan: entered promiscuous mode [ 180.094028][ T9076] veth1_vlan: entered promiscuous mode [ 180.118588][ T9076] veth0_macvtap: entered promiscuous mode [ 180.123324][ T9076] veth1_macvtap: entered promiscuous mode [ 180.132036][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.142017][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.145090][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.150512][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.154611][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.158976][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.162424][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.165409][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.168945][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.169621][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.1.868'. [ 180.173370][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.183930][ T9076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.187289][ T9076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.190641][ T9076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.193670][ T9076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.247826][ T7872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.251034][ T7872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.269366][ T7872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.272380][ T7872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.315700][ T4252] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 180.439033][ T9175] Bluetooth: MGMT ver 1.23 [ 180.440561][ T9175] Bluetooth: hci0: invalid len left 7, exp >= 11 [ 180.486910][ T4252] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 180.489546][ T4252] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.493219][ T4252] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 180.499194][ T4252] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 180.503214][ T4252] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.507869][ T4252] usb 8-1: config 0 interface 0 has no altsetting 0 [ 180.511585][ T4252] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.514517][ T4252] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.517392][ T4252] usb 8-1: Product: syz [ 180.518818][ T4252] usb 8-1: Manufacturer: syz [ 180.520306][ T4252] usb 8-1: SerialNumber: syz [ 180.523440][ T4252] usb 8-1: config 0 descriptor?? [ 180.534137][ T9165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.539912][ T4252] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 180.543711][ T4252] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 181.040260][ T5950] usb 8-1: USB disconnect, device number 15 [ 181.051291][ T5950] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 181.138666][ T9182] wg1 speed is unknown, defaulting to 1000 [ 181.475694][ T5958] Bluetooth: hci0: command tx timeout [ 181.638100][ T9194] bridge_slave_0: left allmulticast mode [ 181.640980][ T9194] bridge_slave_0: left promiscuous mode [ 181.643750][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.652865][ T9194] bridge_slave_1: left allmulticast mode [ 181.654962][ T9194] bridge_slave_1: left promiscuous mode [ 181.659497][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.671789][ T9194] bond0: (slave bond_slave_0): Releasing backup interface [ 181.678565][ T9197] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 181.703295][ T9194] bond0: (slave bond_slave_1): Releasing backup interface [ 181.733451][ T9194] team0: Port device team_slave_0 removed [ 181.742583][ T9194] team0: Port device team_slave_1 removed [ 181.747811][ T9194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.750892][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.760124][ T9194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.763409][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.833484][ T9197] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.844722][ T9199] FAULT_INJECTION: forcing a failure. [ 181.844722][ T9199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.851537][ T9199] CPU: 2 UID: 0 PID: 9199 Comm: syz.3.876 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 181.851565][ T9199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.851572][ T9199] Call Trace: [ 181.851576][ T9199] [ 181.851581][ T9199] dump_stack_lvl+0x16c/0x1f0 [ 181.851601][ T9199] should_fail_ex+0x512/0x640 [ 181.851616][ T9199] _copy_to_user+0x32/0xd0 [ 181.851632][ T9199] simple_read_from_buffer+0xcb/0x170 [ 181.851648][ T9199] proc_fail_nth_read+0x197/0x270 [ 181.851664][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.851679][ T9199] ? rw_verify_area+0xcf/0x680 [ 181.851691][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.851706][ T9199] vfs_read+0x1de/0xc70 [ 181.851721][ T9199] ? __pfx___mutex_lock+0x10/0x10 [ 181.851737][ T9199] ? __pfx_vfs_read+0x10/0x10 [ 181.851755][ T9199] ? __fget_files+0x20e/0x3c0 [ 181.851774][ T9199] ksys_read+0x12a/0x240 [ 181.851788][ T9199] ? __pfx_ksys_read+0x10/0x10 [ 181.851803][ T9199] ? rcu_is_watching+0x12/0xc0 [ 181.851819][ T9199] __do_fast_syscall_32+0x73/0x120 [ 181.851836][ T9199] do_fast_syscall_32+0x32/0x80 [ 181.851852][ T9199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.851865][ T9199] RIP: 0023:0xf703e579 [ 181.851874][ T9199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.851885][ T9199] RSP: 002b:00000000f502e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 181.851895][ T9199] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f502e620 [ 181.851901][ T9199] RDX: 000000000000000f RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 181.851907][ T9199] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 181.851913][ T9199] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 181.851919][ T9199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.851932][ T9199] [ 182.038734][ T9210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.879'. [ 182.072117][ T9215] FAULT_INJECTION: forcing a failure. [ 182.072117][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 182.080388][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.3.881 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 182.080415][ T9215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.080426][ T9215] Call Trace: [ 182.080433][ T9215] [ 182.080442][ T9215] dump_stack_lvl+0x16c/0x1f0 [ 182.080471][ T9215] should_fail_ex+0x512/0x640 [ 182.080491][ T9215] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 182.080520][ T9215] should_failslab+0xc2/0x120 [ 182.080538][ T9215] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 182.080563][ T9215] ? __alloc_skb+0x2b2/0x380 [ 182.080589][ T9215] __alloc_skb+0x2b2/0x380 [ 182.080609][ T9215] ? __pfx___alloc_skb+0x10/0x10 [ 182.080633][ T9215] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 182.080663][ T9215] netlink_alloc_large_skb+0x69/0x130 [ 182.080689][ T9215] netlink_sendmsg+0x6a1/0xdd0 [ 182.080717][ T9215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.080743][ T9215] ? __import_iovec+0x1c8/0x660 [ 182.080770][ T9215] ____sys_sendmsg+0xa95/0xc70 [ 182.080788][ T9215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.080803][ T9215] ? get_compat_msghdr+0x11a/0x170 [ 182.080835][ T9215] ___sys_sendmsg+0x134/0x1d0 [ 182.080858][ T9215] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.080905][ T9215] __sys_sendmsg+0x16d/0x220 [ 182.080928][ T9215] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.080960][ T9215] ? rcu_is_watching+0x12/0xc0 [ 182.080986][ T9215] __do_fast_syscall_32+0x73/0x120 [ 182.081012][ T9215] do_fast_syscall_32+0x32/0x80 [ 182.081041][ T9215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.081062][ T9215] RIP: 0023:0xf703e579 [ 182.081076][ T9215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.081092][ T9215] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 182.081109][ T9215] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 182.081119][ T9215] RDX: 0000000024008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.081129][ T9215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.081139][ T9215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.081148][ T9215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.081170][ T9215] [ 182.864804][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 182.893954][ T24] wg1 speed is unknown, defaulting to 1000 [ 182.901794][ T9246] geneve1: entered promiscuous mode [ 182.954993][ T9242] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 182.961948][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.967070][ T9242] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.222693][ T9264] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 183.445573][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 183.547346][ T5963] Bluetooth: hci0: command tx timeout [ 183.596116][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 183.599916][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.603449][ T34] usb 8-1: config 192 has an invalid interface number: 17 but max is 0 [ 183.607557][ T34] usb 8-1: config 192 has no interface number 0 [ 183.609900][ T34] usb 8-1: config 192 interface 17 has no altsetting 0 [ 183.614146][ T34] usb 8-1: New USB device found, idVendor=0bfd, idProduct=000f, bcdDevice=89.07 [ 183.617121][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.619664][ T34] usb 8-1: Product: syz [ 183.621031][ T34] usb 8-1: Manufacturer: syz [ 183.622906][ T34] usb 8-1: SerialNumber: syz [ 183.834745][ T34] kvaser_usb 8-1:192.17: error -ENODEV: Cannot get usb endpoint(s) [ 183.841965][ T34] usb 8-1: USB disconnect, device number 16 [ 185.316409][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.437476][ T9274] wg1 speed is unknown, defaulting to 1000 [ 185.625769][ T5963] Bluetooth: hci0: command tx timeout [ 186.723855][ T9312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.912'. [ 186.817768][ T9307] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 186.980596][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 188.146825][ T9343] netlink: 830 bytes leftover after parsing attributes in process `syz.2.920'. [ 188.155416][ T9345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.156420][ T9345] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 188.209670][ T9349] netlink: 96 bytes leftover after parsing attributes in process `syz.1.923'. [ 188.229122][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 188.344916][ T9354] syz.4.924 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 188.475869][ T58] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 188.632561][ T58] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 188.636708][ T58] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 188.641122][ T58] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 188.645775][ T58] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 188.650264][ T58] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 188.655186][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.660916][ T58] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 188.664597][ T58] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 188.672584][ T58] usb 8-1: Product: syz [ 188.674316][ T58] usb 8-1: Manufacturer: syz [ 188.676380][ T58] usb 8-1: SerialNumber: syz [ 188.680845][ T58] usb 8-1: config 0 descriptor?? [ 188.683846][ T9350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.689211][ T58] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 188.694543][ T58] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 189.076401][ T5989] usb 8-1: USB disconnect, device number 17 [ 189.080736][ T5989] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 189.095015][ T9361] wg1 speed is unknown, defaulting to 1000 [ 189.132342][ T9367] fuse: Unknown parameter '00000000000000000000' [ 189.762326][ T9380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.932'. [ 189.801283][ T9382] overlayfs: failed to resolve '9 ': -2 [ 190.112743][ T9390] netlink: 830 bytes leftover after parsing attributes in process `syz.2.936'. [ 190.381700][ T9397] bridge0: port 3(syz_tun) entered blocking state [ 190.383964][ T9397] bridge0: port 3(syz_tun) entered disabled state [ 190.388999][ T9397] syz_tun: entered allmulticast mode [ 190.391608][ T9397] syz_tun: entered promiscuous mode [ 190.393601][ T9397] bridge0: port 3(syz_tun) entered blocking state [ 190.395760][ T9397] bridge0: port 3(syz_tun) entered forwarding state [ 191.054438][ T9404] bridge0: port 1(syz_tun) entered blocking state [ 191.058501][ T9404] bridge0: port 1(syz_tun) entered disabled state [ 191.060741][ T9404] syz_tun: entered allmulticast mode [ 191.065119][ T9404] syz_tun: entered promiscuous mode [ 191.067854][ T9404] bridge0: port 1(syz_tun) entered blocking state [ 191.069998][ T9404] bridge0: port 1(syz_tun) entered forwarding state [ 191.422532][ T6134] libceph: connect (1)[c::]:6789 error -101 [ 191.424745][ T6134] libceph: mon0 (1)[c::]:6789 connect error [ 191.685936][ T6134] libceph: connect (1)[c::]:6789 error -101 [ 191.688112][ T6134] libceph: mon0 (1)[c::]:6789 connect error [ 191.878361][ T9398] ceph: No mds server is up or the cluster is laggy [ 191.879168][ T9] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 191.951096][ T9] libceph: connect (1)[c::]:6789 error -101 [ 191.953116][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 192.195755][ T6134] libceph: connect (1)[c::]:6789 error -101 [ 192.198260][ T6134] libceph: mon0 (1)[c::]:6789 connect error [ 192.205890][ T9] libceph: connect (1)[c::]:6789 error -101 [ 192.207941][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 192.296991][ T9406] ceph: No mds server is up or the cluster is laggy [ 192.516401][ T9413] ceph: No mds server is up or the cluster is laggy [ 192.650900][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 192.657492][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 193.581339][ T9444] random: crng reseeded on system resumption [ 193.692216][ T9459] Illegal XDP return value 4294967294 on prog (id 156) dev N/A, expect packet loss! [ 193.793565][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.796576][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.964805][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 193.971697][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 194.078749][ T9464] random: crng reseeded on system resumption [ 194.316874][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 194.319770][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 194.827865][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 194.830557][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 195.338843][ T9467] ceph: No mds server is up or the cluster is laggy [ 195.467456][ T9486] FAULT_INJECTION: forcing a failure. [ 195.467456][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 195.472661][ T9486] CPU: 3 UID: 0 PID: 9486 Comm: syz.3.958 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 195.472686][ T9486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.472696][ T9486] Call Trace: [ 195.472702][ T9486] [ 195.472708][ T9486] dump_stack_lvl+0x16c/0x1f0 [ 195.472738][ T9486] should_fail_ex+0x512/0x640 [ 195.472756][ T9486] ? __kvmalloc_node_noprof+0x122/0x600 [ 195.472780][ T9486] should_failslab+0xc2/0x120 [ 195.472795][ T9486] __kvmalloc_node_noprof+0x135/0x600 [ 195.472816][ T9486] ? bpf_test_init.isra.0+0x9e/0x140 [ 195.472834][ T9486] ? kasan_save_stack+0x42/0x60 [ 195.472852][ T9486] ? kasan_save_stack+0x33/0x60 [ 195.472871][ T9486] ? bpf_test_run_xdp_live+0x13b/0x500 [ 195.472889][ T9486] ? __kasan_kmalloc+0xaa/0xb0 [ 195.472913][ T9486] ? bpf_test_run_xdp_live+0x13b/0x500 [ 195.472931][ T9486] bpf_test_run_xdp_live+0x13b/0x500 [ 195.472952][ T9486] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 195.472981][ T9486] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 195.473022][ T9486] ? _copy_from_user+0x59/0xd0 [ 195.473041][ T9486] ? bpf_test_init.isra.0+0x6b/0x140 [ 195.473062][ T9486] bpf_prog_test_run_xdp+0x824/0x1540 [ 195.473091][ T9486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.473112][ T9486] ? __might_fault+0xd0/0x190 [ 195.473140][ T9486] ? fput+0x70/0xf0 [ 195.473153][ T9486] ? __bpf_prog_get+0xa0/0x290 [ 195.473183][ T9486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.473204][ T9486] __sys_bpf+0x1485/0x4d80 [ 195.473223][ T9486] ? __pfx___sys_bpf+0x10/0x10 [ 195.473235][ T9486] ? ksys_write+0x190/0x240 [ 195.473251][ T9486] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 195.473274][ T9486] ? fput+0x70/0xf0 [ 195.473283][ T9486] ? ksys_write+0x1b9/0x240 [ 195.473297][ T9486] ? __pfx_ksys_write+0x10/0x10 [ 195.473314][ T9486] __ia32_sys_bpf+0x76/0xe0 [ 195.473327][ T9486] __do_fast_syscall_32+0x73/0x120 [ 195.473346][ T9486] do_fast_syscall_32+0x32/0x80 [ 195.473369][ T9486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.473389][ T9486] RIP: 0023:0xf703e579 [ 195.473401][ T9486] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 195.473416][ T9486] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 195.473432][ T9486] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 195.473442][ T9486] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.473450][ T9486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.473459][ T9486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 195.473468][ T9486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.473490][ T9486] [ 195.559625][ C3] vkms_vblank_simulate: vblank timer overrun [ 195.629017][ T9484] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 195.939600][ T9504] overlayfs: failed to resolve './file0': -2 [ 196.555291][ T9513] xt_connbytes: Forcing CT accounting to be enabled [ 196.558495][ T9513] SET target dimension over the limit! [ 197.462646][ T9518] ceph: No mds server is up or the cluster is laggy [ 198.829174][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 198.832899][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 198.836876][ T9567] netlink: 'syz.2.976': attribute type 5 has an invalid length. [ 199.228261][ T57] libceph: connect (1)[c::]:6789 error -101 [ 199.232039][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 199.399547][ T9574] 9pnet_fd: Insufficient options for proto=fd [ 199.505807][ T57] libceph: connect (1)[c::]:6789 error -101 [ 199.508216][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 200.029965][ T57] libceph: connect (1)[c::]:6789 error -101 [ 200.032028][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 200.039584][ T9575] ceph: No mds server is up or the cluster is laggy [ 200.106840][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 200.121228][ T9604] syzkaller1: entered promiscuous mode [ 200.123664][ T9604] syzkaller1: entered allmulticast mode [ 200.481575][ T9605] wg1 speed is unknown, defaulting to 1000 [ 200.744314][ T9617] No such timeout policy "syz0" [ 200.943729][ T9625] ======================================================= [ 200.943729][ T9625] WARNING: The mand mount option has been deprecated and [ 200.943729][ T9625] and is ignored by this kernel. Remove the mand [ 200.943729][ T9625] option from the mount to silence this warning. [ 200.943729][ T9625] ======================================================= [ 201.010146][ T9625] netfs: Couldn't get user pages (rc=-14) [ 202.302646][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 202.460510][ T9653] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.496653][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.500335][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.504812][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.508665][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.512411][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.516775][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 203.450235][ T6056] IPVS: starting estimator thread 0... [ 203.595576][ T9681] IPVS: using max 43 ests per chain, 103200 per kthread [ 203.683857][ T9685] macsec0: entered promiscuous mode [ 203.686503][ T9685] macsec0: entered allmulticast mode [ 203.688609][ T9685] veth1_macvtap: entered allmulticast mode [ 204.376656][ T9697] __nla_validate_parse: 72 callbacks suppressed [ 204.376670][ T9697] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1013'. [ 206.400492][ T9727] overlayfs: failed to clone upperpath [ 206.435122][ T9729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.438828][ T9729] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 206.516545][ T9731] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.745692][ T10] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 206.928622][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 206.931664][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 206.936035][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 206.939837][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 206.943886][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.948459][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 206.952437][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.955646][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.958384][ T10] usb 8-1: Product: syz [ 206.959793][ T10] usb 8-1: Manufacturer: syz [ 206.961481][ T10] usb 8-1: SerialNumber: syz [ 206.964667][ T10] usb 8-1: config 0 descriptor?? [ 206.967049][ T9732] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.970789][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.975185][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.406792][ T10] usb 8-1: USB disconnect, device number 18 [ 207.412204][ T10] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 207.729633][ T9750] bridge0: port 1(syz_tun) entered blocking state [ 207.732490][ T9750] bridge0: port 1(syz_tun) entered disabled state [ 207.735177][ T9750] syz_tun: entered allmulticast mode [ 207.739382][ T9750] syz_tun: entered promiscuous mode [ 207.742694][ T9750] bridge0: port 1(syz_tun) entered blocking state [ 207.744959][ T9750] bridge0: port 1(syz_tun) entered forwarding state [ 207.980854][ T57] libceph: connect (1)[c::]:6789 error -101 [ 207.983668][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 208.261032][ T57] libceph: connect (1)[c::]:6789 error -101 [ 208.263427][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 208.302072][ T9766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.310860][ T9766] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.586130][ T9754] ceph: No mds server is up or the cluster is laggy [ 208.615601][ T10] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 208.777481][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 208.780837][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 208.786142][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 208.792575][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 208.797508][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 208.802913][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 208.810645][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 208.814403][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 208.831868][ T10] usb 8-1: Product: syz [ 208.835574][ T10] usb 8-1: Manufacturer: syz [ 208.837415][ T10] usb 8-1: SerialNumber: syz [ 208.857071][ T10] usb 8-1: config 0 descriptor?? [ 208.859272][ T9767] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 208.862738][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 208.867306][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.007107][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 209.154185][ T9778] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1033'. [ 209.186323][ T9764] random: crng reseeded on system resumption [ 209.303153][ T6134] usb 8-1: USB disconnect, device number 19 [ 209.308786][ T6134] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 210.041251][ T9799] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1042'. [ 210.493225][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 210.495346][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 210.688840][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 210.743789][ T9820] wg1 speed is unknown, defaulting to 1000 [ 210.757643][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 210.773015][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 211.289684][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 211.293069][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 211.314665][ T9808] ceph: No mds server is up or the cluster is laggy [ 211.337642][ T9826] wg1 speed is unknown, defaulting to 1000 [ 211.431806][ T9832] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1051'. [ 211.439827][ T9829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.443390][ T9829] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 211.805726][ T6056] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 211.965681][ T6056] usb 8-1: Using ep0 maxpacket: 32 [ 211.972220][ T6056] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 211.975180][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.978509][ T6056] usb 8-1: Product: syz [ 211.979853][ T6056] usb 8-1: Manufacturer: syz [ 211.981307][ T6056] usb 8-1: SerialNumber: syz [ 211.984544][ T6056] usb 8-1: config 0 descriptor?? [ 211.990232][ T6056] as10x_usb: device has been detected [ 211.992440][ T6056] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 212.003960][ T6056] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 212.026352][ T6056] as10x_usb: error during firmware upload part1 [ 212.028686][ T6056] Registered device Abilis Systems DVB-Titan [ 212.198600][ T10] usb 8-1: USB disconnect, device number 20 [ 212.217851][ T10] Unregistered device Abilis Systems DVB-Titan [ 212.218604][ T10] as10x_usb: device has been disconnected [ 212.734515][ T9855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1059'. [ 213.005838][ T6056] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 213.157739][ T6056] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.162297][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.167593][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.168418][ T9867] 9pnet_virtio: no channels available for device syz [ 213.171651][ T6056] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.172857][ T6056] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.183975][ T6056] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.187818][ T6056] usb 8-1: Manufacturer: syz [ 213.191879][ T6056] usb 8-1: config 0 descriptor?? [ 213.599183][ T6056] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 213.604069][ T6056] appleir 0003:05AC:8243.0017: No inputs registered, leaving [ 213.617580][ T6056] appleir 0003:05AC:8243.0017: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 213.894370][ T5950] usb 8-1: USB disconnect, device number 21 [ 213.978155][ T9884] program syz.3.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.983803][ T9884] FAULT_INJECTION: forcing a failure. [ 213.983803][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.988257][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.3.1068 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 213.988274][ T9884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.988281][ T9884] Call Trace: [ 213.988284][ T9884] [ 213.988289][ T9884] dump_stack_lvl+0x16c/0x1f0 [ 213.988321][ T9884] should_fail_ex+0x512/0x640 [ 213.988337][ T9884] _copy_from_user+0x2e/0xd0 [ 213.988352][ T9884] kvm_arch_dev_ioctl+0x3c9/0x760 [ 213.988368][ T9884] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 213.988381][ T9884] ? do_vfs_ioctl+0x512/0x1990 [ 213.988395][ T9884] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.988411][ T9884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.988424][ T9884] kvm_dev_ioctl+0x787/0x1ad0 [ 213.988441][ T9884] ? find_held_lock+0x2b/0x80 [ 213.988454][ T9884] ? hook_file_ioctl_common+0x145/0x410 [ 213.988467][ T9884] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 213.988482][ T9884] ? __fget_files+0x20e/0x3c0 [ 213.988500][ T9884] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 213.988513][ T9884] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 213.988528][ T9884] __do_fast_syscall_32+0x73/0x120 [ 213.988545][ T9884] do_fast_syscall_32+0x32/0x80 [ 213.988561][ T9884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.988574][ T9884] RIP: 0023:0xf703e579 [ 213.988583][ T9884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.988593][ T9884] RSP: 002b:00000000f500d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 213.988603][ T9884] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c008ae05 [ 213.988609][ T9884] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.988615][ T9884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.988621][ T9884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 213.988627][ T9884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.988639][ T9884] [ 214.202396][ T9892] syz1: rxe_newlink: already configured on syz_tun [ 214.255653][ T9890] wg1 speed is unknown, defaulting to 1000 [ 214.351926][ T7872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.420797][ T9901] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.551734][ T7872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.713186][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.773832][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 215.001800][ T7872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.073757][ T7872] bridge0: port 3(netdevsim0) entered disabled state [ 215.087512][ T7872] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 215.090683][ T7872] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 215.096110][ T7872] bridge0: port 3(netdevsim0) entered disabled state [ 215.133950][ T7872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.275037][ T7872] bridge_slave_1: left allmulticast mode [ 215.279192][ T7872] bridge_slave_1: left promiscuous mode [ 215.282375][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.286513][ T9926] autofs: Bad value for 'fd' [ 215.296829][ T7872] bridge_slave_0: left allmulticast mode [ 215.298704][ T7872] bridge_slave_0: left promiscuous mode [ 215.300562][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.749163][ T7872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.754073][ T7872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.760555][ T7872] bond0 (unregistering): Released all slaves [ 216.395405][ T40] audit: type=1804 audit(1744849744.657:134): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1091" name="/newroot/37/file0" dev="tmpfs" ino=217 res=1 errno=0 [ 216.429050][ T7872] hsr_slave_0: left promiscuous mode [ 216.431788][ T7872] hsr_slave_1: left promiscuous mode [ 216.434469][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.439698][ T7872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.447222][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.450191][ T7872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.483017][ T7872] veth1_macvtap: left promiscuous mode [ 216.485244][ T7872] veth0_macvtap: left promiscuous mode [ 216.488917][ T7872] veth1_vlan: left promiscuous mode [ 216.491269][ T7872] veth0_vlan: left promiscuous mode [ 216.604463][ T7872] pim6reg (unregistering): left allmulticast mode [ 217.900936][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1100'. [ 217.998230][T10004] tmpfs: Bad value for 'mpol' [ 218.130931][ T7872] team0 (unregistering): Port device team_slave_1 removed [ 218.227956][ T7872] team0 (unregistering): Port device team_slave_0 removed [ 218.942389][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 219.060291][T10026] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 219.170705][T10040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 219.188600][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 219.189119][T10043] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.338747][T10055] syzkaller0: entered promiscuous mode [ 219.340605][T10055] syzkaller0: entered allmulticast mode [ 221.368103][T10082] syz.3.1120: attempt to access beyond end of device [ 221.368103][T10082] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.395639][T10082] random: crng reseeded on system resumption [ 221.693223][T10059] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1115'. [ 222.127479][T10083] wg1 speed is unknown, defaulting to 1000 [ 222.308288][T10114] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1129'. [ 223.574876][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1135'. [ 223.631664][T10164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.648763][T10166] FAULT_INJECTION: forcing a failure. [ 223.648763][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 223.652653][T10166] CPU: 3 UID: 0 PID: 10166 Comm: syz.3.1138 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 223.652669][T10166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.652675][T10166] Call Trace: [ 223.652680][T10166] [ 223.652684][T10166] dump_stack_lvl+0x16c/0x1f0 [ 223.652706][T10166] should_fail_ex+0x512/0x640 [ 223.652720][T10166] ? dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 223.652734][T10166] should_failslab+0xc2/0x120 [ 223.652746][T10166] __kmalloc_noprof+0xd2/0x510 [ 223.652762][T10166] ? stack_trace_save+0x8e/0xc0 [ 223.652776][T10166] ? __pfx_stack_trace_save+0x10/0x10 [ 223.652793][T10166] dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 223.652809][T10166] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 223.652825][T10166] ? lockdep_init_map_type+0x5c/0x280 [ 223.652838][T10166] register_netdevice+0x49d/0x2270 [ 223.652856][T10166] ? find_held_lock+0x2b/0x80 [ 223.652869][T10166] ? __pfx_register_netdevice+0x10/0x10 [ 223.652884][T10166] ? __asan_memcpy+0x3c/0x60 [ 223.652903][T10166] ? vxlan_config_apply+0x653/0x7e0 [ 223.652917][T10166] __vxlan_dev_create+0x7d7/0xa80 [ 223.652935][T10166] ? __pfx___vxlan_dev_create+0x10/0x10 [ 223.652956][T10166] vxlan_newlink+0x135/0x1e0 [ 223.652972][T10166] ? __pfx_vxlan_newlink+0x10/0x10 [ 223.652994][T10166] ? rtnl_create_link+0xb2b/0x1200 [ 223.653009][T10166] ? __pfx_vxlan_newlink+0x10/0x10 [ 223.653025][T10166] rtnl_newlink+0xc42/0x2000 [ 223.653043][T10166] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.653064][T10166] ? kfree_skbmem+0x1a4/0x1f0 [ 223.653078][T10166] ? rcu_is_watching+0x12/0xc0 [ 223.653091][T10166] ? trace_cap_capable+0x18d/0x200 [ 223.653106][T10166] ? find_held_lock+0x2b/0x80 [ 223.653118][T10166] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.653132][T10166] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.653145][T10166] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 223.653171][T10166] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.653187][T10166] rtnetlink_rcv_msg+0x95b/0xe90 [ 223.653203][T10166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.653225][T10166] netlink_rcv_skb+0x16a/0x440 [ 223.653261][T10166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.653277][T10166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.653300][T10166] ? netlink_deliver_tap+0x1ae/0xd30 [ 223.653318][T10166] netlink_unicast+0x53a/0x7f0 [ 223.653335][T10166] ? __pfx_netlink_unicast+0x10/0x10 [ 223.653365][T10166] netlink_sendmsg+0x8d1/0xdd0 [ 223.653385][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.653401][T10166] ? __import_iovec+0x1c8/0x660 [ 223.653419][T10166] ____sys_sendmsg+0xa95/0xc70 [ 223.653430][T10166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.653439][T10166] ? get_compat_msghdr+0x11a/0x170 [ 223.653459][T10166] ___sys_sendmsg+0x134/0x1d0 [ 223.653475][T10166] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.653506][T10166] __sys_sendmsg+0x16d/0x220 [ 223.653520][T10166] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.653540][T10166] ? rcu_is_watching+0x12/0xc0 [ 223.653564][T10166] __do_fast_syscall_32+0x73/0x120 [ 223.653582][T10166] do_fast_syscall_32+0x32/0x80 [ 223.653598][T10166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.653611][T10166] RIP: 0023:0xf703e579 [ 223.653620][T10166] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.653631][T10166] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 223.653641][T10166] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000800000c0 [ 223.653648][T10166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.653654][T10166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.653659][T10166] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.653665][T10166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.653679][T10166] [ 223.788490][T10169] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1139'. [ 224.071029][ T40] audit: type=1326 audit(1744849752.337:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.079078][ T40] audit: type=1326 audit(1744849752.337:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.092320][ T40] audit: type=1326 audit(1744849752.337:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.101395][ T40] audit: type=1326 audit(1744849752.337:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.108166][ T40] audit: type=1326 audit(1744849752.337:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.114721][ T40] audit: type=1326 audit(1744849752.337:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.122117][ T40] audit: type=1326 audit(1744849752.337:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.129727][ T40] audit: type=1326 audit(1744849752.337:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.137874][ T40] audit: type=1326 audit(1744849752.337:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.144776][ T40] audit: type=1326 audit(1744849752.337:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.1.1144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 224.200727][T10193] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1147'. [ 224.204489][T10193] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1147'. [ 224.830860][T10214] syzkaller1: entered promiscuous mode [ 224.832763][T10214] syzkaller1: entered allmulticast mode [ 225.655537][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1156'. [ 225.782491][T10231] FAULT_INJECTION: forcing a failure. [ 225.782491][T10231] name failslab, interval 1, probability 0, space 0, times 0 [ 225.787384][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.2.1158 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 225.787411][T10231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.787419][T10231] Call Trace: [ 225.787423][T10231] [ 225.787428][T10231] dump_stack_lvl+0x16c/0x1f0 [ 225.787449][T10231] should_fail_ex+0x512/0x640 [ 225.787468][T10231] should_failslab+0xc2/0x120 [ 225.787479][T10231] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 225.787496][T10231] ? fib6_add_1+0x2df/0x17d0 [ 225.787512][T10231] fib6_add_1+0x2df/0x17d0 [ 225.787529][T10231] fib6_add+0x1e6/0x4b60 [ 225.787550][T10231] ? __lock_acquire+0xaa4/0x1ba0 [ 225.787571][T10231] ? netlink_broadcast_filtered+0x47a/0xf10 [ 225.787589][T10231] ? __pfx_fib6_add+0x10/0x10 [ 225.787601][T10231] ? do_raw_spin_lock+0x12c/0x2b0 [ 225.787613][T10231] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.787628][T10231] ? ip6_ins_rt+0xb5/0x110 [ 225.787643][T10231] ip6_ins_rt+0xb5/0x110 [ 225.787658][T10231] ? __pfx_ip6_ins_rt+0x10/0x10 [ 225.787674][T10231] ? nlmsg_notify+0xac/0x220 [ 225.787689][T10231] ? nlmsg_notify+0x11e/0x220 [ 225.787703][T10231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.787716][T10231] __ipv6_ifa_notify+0xa6b/0xd60 [ 225.787731][T10231] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 225.787744][T10231] ? __local_bh_enable_ip+0xa4/0x120 [ 225.787760][T10231] ? __fib6_clean_all+0x18c/0x2d0 [ 225.787775][T10231] ? add_addr+0x242/0x350 [ 225.787787][T10231] add_addr+0x242/0x350 [ 225.787800][T10231] ? __pfx_add_addr+0x10/0x10 [ 225.787819][T10231] addrconf_init_auto_addrs+0xd3/0x820 [ 225.787834][T10231] addrconf_notify+0x6e2/0x19e0 [ 225.787850][T10231] ? ip6mr_device_event+0x1bc/0x230 [ 225.787870][T10231] notifier_call_chain+0xb9/0x410 [ 225.787885][T10231] ? __pfx_addrconf_notify+0x10/0x10 [ 225.787904][T10231] call_netdevice_notifiers_info+0xbe/0x140 [ 225.787923][T10231] netif_state_change+0x113/0x150 [ 225.787940][T10231] ? __pfx_netif_state_change+0x10/0x10 [ 225.787961][T10231] do_setlink.constprop.0+0x3632/0x44b0 [ 225.787980][T10231] ? __lock_acquire+0xaa4/0x1ba0 [ 225.787996][T10231] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 225.788011][T10231] ? kasan_save_stack+0x42/0x60 [ 225.788026][T10231] ? kasan_save_stack+0x33/0x60 [ 225.788040][T10231] ? __kasan_kmalloc+0xaa/0xb0 [ 225.788056][T10231] ? __mutex_trylock_common+0xe9/0x250 [ 225.788066][T10231] ? __pfx___mutex_trylock_common+0x10/0x10 [ 225.788077][T10231] ? __pfx___might_resched+0x10/0x10 [ 225.788093][T10231] ? rcu_is_watching+0x12/0xc0 [ 225.788106][T10231] ? trace_contention_end+0xdd/0x130 [ 225.788116][T10231] ? __mutex_lock+0x1ca/0xb90 [ 225.788132][T10231] ? rcu_is_watching+0x12/0xc0 [ 225.788144][T10231] ? rtnl_newlink+0x600/0x2000 [ 225.788159][T10231] ? __pfx___mutex_lock+0x10/0x10 [ 225.788174][T10231] ? irqentry_exit+0x3b/0x90 [ 225.788191][T10231] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.788206][T10231] ? rtnl_newlink+0x4df/0x2000 [ 225.788222][T10231] rtnl_newlink+0x18e0/0x2000 [ 225.788242][T10231] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.788258][T10231] ? kasan_quarantine_put+0x10a/0x240 [ 225.788272][T10231] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.788289][T10231] ? kfree_skbmem+0x1a4/0x1f0 [ 225.788301][T10231] ? __lock_acquire+0x5ca/0x1ba0 [ 225.788319][T10231] ? rcu_is_watching+0x12/0xc0 [ 225.788331][T10231] ? trace_cap_capable+0x18d/0x200 [ 225.788346][T10231] ? find_held_lock+0x2b/0x80 [ 225.788358][T10231] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.788371][T10231] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.788384][T10231] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 225.788399][T10231] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.788413][T10231] rtnetlink_rcv_msg+0x95b/0xe90 [ 225.788429][T10231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.788450][T10231] netlink_rcv_skb+0x16a/0x440 [ 225.788466][T10231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.788481][T10231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.788504][T10231] ? netlink_deliver_tap+0x1ae/0xd30 [ 225.788521][T10231] netlink_unicast+0x53a/0x7f0 [ 225.788544][T10231] ? __pfx_netlink_unicast+0x10/0x10 [ 225.788563][T10231] netlink_sendmsg+0x8d1/0xdd0 [ 225.788581][T10231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.788597][T10231] ? __import_iovec+0x1c8/0x660 [ 225.788613][T10231] ____sys_sendmsg+0xa95/0xc70 [ 225.788625][T10231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.788634][T10231] ? get_compat_msghdr+0x11a/0x170 [ 225.788653][T10231] ___sys_sendmsg+0x134/0x1d0 [ 225.788668][T10231] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.788698][T10231] __sys_sendmsg+0x16d/0x220 [ 225.788712][T10231] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.788731][T10231] ? rcu_is_watching+0x12/0xc0 [ 225.788746][T10231] __do_fast_syscall_32+0x73/0x120 [ 225.788762][T10231] do_fast_syscall_32+0x32/0x80 [ 225.788778][T10231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.788793][T10231] RIP: 0023:0xf7ff5579 [ 225.788802][T10231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.788814][T10231] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 225.788829][T10231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 225.788838][T10231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.788847][T10231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.788855][T10231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.788863][T10231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.788883][T10231] [ 226.007120][T10234] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1160'. [ 226.586296][ T5963] Bluetooth: hci0: command tx timeout [ 226.664351][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 226.679397][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 226.697187][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 226.707606][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 226.975795][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 226.982089][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 226.986093][T10255] ceph: No mds server is up or the cluster is laggy [ 227.192840][T10278] 9pnet_fd: Insufficient options for proto=fd [ 227.196779][T10278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1166'. [ 228.943031][T10304] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1176'. [ 229.687325][T10297] ceph: No mds server is up or the cluster is laggy [ 230.063941][T10335] bridge0: port 2(netdevsim0) entered blocking state [ 230.066445][T10335] bridge0: port 2(netdevsim0) entered disabled state [ 230.070482][T10335] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 230.079982][T10335] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 230.084398][T10335] bridge0: port 2(netdevsim0) entered blocking state [ 230.086638][T10335] bridge0: port 2(netdevsim0) entered forwarding state [ 230.103935][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 230.472638][T10354] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 230.559395][ T34] libceph: connect (1)[c::]:6789 error -101 [ 230.561462][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 230.815967][ T34] libceph: connect (1)[c::]:6789 error -101 [ 230.817974][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 230.904852][T10360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1191'. [ 231.007991][ T34] kernel write not supported for file /dsp (pid: 34 comm: kworker/3:0) [ 231.136777][T10353] ceph: No mds server is up or the cluster is laggy [ 231.227619][T10379] FAULT_INJECTION: forcing a failure. [ 231.227619][T10379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.231859][T10379] CPU: 2 UID: 0 PID: 10379 Comm: syz.2.1195 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 231.231876][T10379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.231883][T10379] Call Trace: [ 231.231887][T10379] [ 231.231892][T10379] dump_stack_lvl+0x16c/0x1f0 [ 231.231913][T10379] should_fail_ex+0x512/0x640 [ 231.231928][T10379] _copy_to_iter+0x477/0x15a0 [ 231.231945][T10379] ? __pfx__copy_to_iter+0x10/0x10 [ 231.231958][T10379] ? __asan_memcpy+0x3c/0x60 [ 231.231972][T10379] ? find_held_lock+0x2b/0x80 [ 231.231988][T10379] ? ip6mr_vif_seq_stop+0x31/0xb0 [ 231.231998][T10379] ? mr_vif_seq_next+0x1bd/0x3c0 [ 231.232016][T10379] seq_read_iter+0xcf8/0x12c0 [ 231.232037][T10379] seq_read+0x39e/0x4e0 [ 231.232050][T10379] ? __pfx_seq_read+0x10/0x10 [ 231.232067][T10379] ? get_pid_task+0xfc/0x250 [ 231.232083][T10379] ? __pfx_seq_read+0x10/0x10 [ 231.232096][T10379] proc_reg_read+0x23d/0x330 [ 231.232107][T10379] ? __pfx_proc_reg_read+0x10/0x10 [ 231.232118][T10379] vfs_read+0x1de/0xc70 [ 231.232134][T10379] ? __pfx___mutex_lock+0x10/0x10 [ 231.232150][T10379] ? __pfx_vfs_read+0x10/0x10 [ 231.232168][T10379] ? __fget_files+0x20e/0x3c0 [ 231.232187][T10379] ksys_read+0x12a/0x240 [ 231.232201][T10379] ? __pfx_ksys_read+0x10/0x10 [ 231.232214][T10379] ? rcu_is_watching+0x12/0xc0 [ 231.232229][T10379] ? rcu_is_watching+0x12/0xc0 [ 231.232243][T10379] __do_fast_syscall_32+0x73/0x120 [ 231.232260][T10379] do_fast_syscall_32+0x32/0x80 [ 231.232276][T10379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.232289][T10379] RIP: 0023:0xf7ff5579 [ 231.232297][T10379] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 231.232307][T10379] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 231.232317][T10379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 231.232324][T10379] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.232330][T10379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.232336][T10379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 231.232341][T10379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.232366][T10379] [ 231.784603][T10392] random: crng reseeded on system resumption [ 231.950227][T10398] random: crng reseeded on system resumption [ 232.045606][T10415] fuse: Bad value for 'fd' [ 232.083580][T10411] FAULT_INJECTION: forcing a failure. [ 232.083580][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.088968][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.4.1206 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 232.088983][T10411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.088989][T10411] Call Trace: [ 232.088993][T10411] [ 232.088998][T10411] dump_stack_lvl+0x16c/0x1f0 [ 232.089017][T10411] should_fail_ex+0x512/0x640 [ 232.089032][T10411] _copy_to_user+0x32/0xd0 [ 232.089047][T10411] simple_read_from_buffer+0xcb/0x170 [ 232.089063][T10411] proc_fail_nth_read+0x197/0x270 [ 232.089078][T10411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.089093][T10411] ? rw_verify_area+0xcf/0x680 [ 232.089106][T10411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.089120][T10411] vfs_read+0x1de/0xc70 [ 232.089153][T10411] ? __pfx___mutex_lock+0x10/0x10 [ 232.089189][T10411] ? __pfx_vfs_read+0x10/0x10 [ 232.089207][T10411] ? __fget_files+0x20e/0x3c0 [ 232.089226][T10411] ksys_read+0x12a/0x240 [ 232.089241][T10411] ? __pfx_ksys_read+0x10/0x10 [ 232.089254][T10411] ? rcu_is_watching+0x12/0xc0 [ 232.089269][T10411] ? rcu_is_watching+0x12/0xc0 [ 232.089283][T10411] __do_fast_syscall_32+0x73/0x120 [ 232.089300][T10411] do_fast_syscall_32+0x32/0x80 [ 232.089316][T10411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.089329][T10411] RIP: 0023:0xf711e579 [ 232.089338][T10411] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.089348][T10411] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 232.089358][T10411] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 232.089365][T10411] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 232.089370][T10411] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 232.089376][T10411] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 232.089382][T10411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.089395][T10411] [ 232.439679][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 232.810887][T10422] ceph: No mds server is up or the cluster is laggy [ 233.046897][T10460] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1213'. [ 233.165611][ T5989] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 233.336891][ T5989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.340087][ T5989] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.345561][ T5989] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.348302][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.351005][ T5989] usb 8-1: Product: syz [ 233.352367][ T5989] usb 8-1: Manufacturer: syz [ 233.368107][ T5989] usb 8-1: SerialNumber: syz [ 233.375972][T10482] syz.1.1215: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.381041][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.1.1215 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 233.381071][T10482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.381078][T10482] Call Trace: [ 233.381084][T10482] [ 233.381090][T10482] dump_stack_lvl+0x16c/0x1f0 [ 233.381110][T10482] warn_alloc+0x248/0x3a0 [ 233.381128][T10482] ? __pfx_warn_alloc+0x10/0x10 [ 233.381162][T10482] ? find_held_lock+0x2b/0x80 [ 233.381178][T10482] ? __might_fault+0xe3/0x190 [ 233.381194][T10482] ? __might_fault+0xe3/0x190 [ 233.381209][T10482] ? __might_fault+0x13b/0x190 [ 233.381230][T10482] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 233.381246][T10482] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 233.381264][T10482] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 233.381281][T10482] ? __perf_event_task_sched_in+0x27a/0xa10 [ 233.381294][T10482] ? compat_do_replace+0x1af/0x7c0 [ 233.381309][T10482] ? __asan_memcpy+0x3c/0x60 [ 233.381326][T10482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.381343][T10482] ? compat_do_replace+0x1af/0x7c0 [ 233.381359][T10482] vmalloc_noprof+0x6b/0x90 [ 233.381372][T10482] ? compat_do_replace+0x1af/0x7c0 [ 233.381387][T10482] compat_do_replace+0x1af/0x7c0 [ 233.381404][T10482] ? __pfx_compat_do_replace+0x10/0x10 [ 233.381419][T10482] ? aa_get_newest_label+0x375/0x680 [ 233.381431][T10482] ? __pfx_aa_get_newest_label+0x10/0x10 [ 233.381448][T10482] ? bpf_lsm_capable+0x9/0x10 [ 233.381462][T10482] ? security_capable+0x7e/0x260 [ 233.381474][T10482] do_ebt_set_ctl+0x429/0x4d0 [ 233.381496][T10482] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 233.381515][T10482] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 233.381531][T10482] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 233.381550][T10482] nf_setsockopt+0x8a/0xf0 [ 233.381567][T10482] ip_setsockopt+0xcb/0xf0 [ 233.381580][T10482] tcp_setsockopt+0xa4/0x100 [ 233.381595][T10482] smc_setsockopt+0x1b3/0xa00 [ 233.381607][T10482] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 233.381627][T10482] ? __pfx_smc_setsockopt+0x10/0x10 [ 233.381638][T10482] ? task_mm_cid_work+0x37b/0x910 [ 233.381653][T10482] ? __pfx_smc_setsockopt+0x10/0x10 [ 233.381664][T10482] do_sock_setsockopt+0x221/0x470 [ 233.381693][T10482] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 233.381717][T10482] __sys_setsockopt+0x1a0/0x230 [ 233.381733][T10482] __ia32_sys_setsockopt+0xbc/0x160 [ 233.381745][T10482] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.381759][T10482] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 233.381775][T10482] __do_fast_syscall_32+0x73/0x120 [ 233.381792][T10482] do_fast_syscall_32+0x32/0x80 [ 233.381808][T10482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.381821][T10482] RIP: 0023:0xf709e579 [ 233.381830][T10482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.381841][T10482] RSP: 002b:00000000f504c55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 233.381850][T10482] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 233.381857][T10482] RDX: 0000000000000080 RSI: 0000000080000180 RDI: 00000000000000e0 [ 233.381863][T10482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.381868][T10482] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 233.381874][T10482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.381887][T10482] [ 233.381970][T10482] Mem-Info: [ 233.499284][ T5989] usb 8-1: config 0 descriptor?? [ 233.528309][T10482] active_anon:12861 inactive_anon:9607 isolated_anon:0 [ 233.528309][T10482] active_file:8778 inactive_file:10334 isolated_file:0 [ 233.528309][T10482] unevictable:1768 dirty:445 writeback:0 [ 233.528309][T10482] slab_reclaimable:5542 slab_unreclaimable:61634 [ 233.528309][T10482] mapped:37340 shmem:18529 pagetables:1123 [ 233.528309][T10482] sec_pagetables:318 bounce:0 [ 233.528309][T10482] kernel_misc_reclaimable:0 [ 233.528309][T10482] free:52766 free_pcp:4022 free_cma:0 [ 233.542170][T10482] Node 0 active_anon:4472kB inactive_anon:0kB active_file:8kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5268kB dirty:0kB writeback:0kB shmem:7272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9572kB pagetables:1264kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 233.557200][T10482] Node 1 active_anon:46972kB inactive_anon:38428kB active_file:35104kB inactive_file:41316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:144092kB dirty:1780kB writeback:0kB shmem:66844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3844kB pagetables:3328kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 233.567844][T10482] Node 0 DMA free:2088kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:332kB local_pcp:112kB free_cma:0kB [ 233.594724][T10482] lowmem_reserve[]: 0 290 290 290 290 [ 233.598220][T10482] Node 0 DMA32 free:16436kB boost:0kB min:13336kB low:16668kB high:20000kB reserved_highatomic:4096KB active_anon:4320kB inactive_anon:0kB active_file:8kB inactive_file:20kB unevictable:3536kB writepending:0kB present:1032196kB managed:297476kB mlocked:0kB bounce:0kB free_pcp:3092kB local_pcp:396kB free_cma:0kB [ 233.626740][T10482] lowmem_reserve[]: 0 0 0 0 0 [ 233.637604][T10482] Node 1 DMA32 free:189896kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:47172kB inactive_anon:38328kB active_file:35104kB inactive_file:41316kB unevictable:3536kB writepending:1780kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:13912kB local_pcp:10352kB free_cma:0kB [ 233.647162][T10482] lowmem_reserve[]: 0 0 0 0 0 [ 233.649213][T10482] Node 0 DMA: 2*4kB (UM) 13*8kB (U) 16*16kB (UM) 8*32kB (UM) 2*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2032kB [ 233.655660][T10482] Node 0 DMA32: 2*4kB (E) 21*8kB (MEH) 62*16kB (ME) 58*32kB (UMEH) 70*64kB (UMEH) 35*128kB (UME) 15*256kB (UME) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17360kB [ 233.660960][T10482] Node 1 DMA32: 3*4kB (ME) 54*8kB (E) 31*16kB (E) 87*32kB (UME) 87*64kB (UME) 188*128kB (UME) 120*256kB (UME) 75*512kB (UME) 33*1024kB (UM) 4*2048kB (UM) 11*4096kB (UM) = 189516kB [ 233.666615][T10482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.669849][T10482] Node 0 hugepages_total=15 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.673756][T10482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.686838][T10482] Node 1 hugepages_total=4294967289 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 233.690227][T10482] 37983 total pagecache pages [ 233.692023][T10482] 367 pages in swap cache [ 233.693634][T10482] Free swap = 121036kB [ 233.695135][T10482] Total swap = 124996kB [ 233.696570][T10482] 524155 pages RAM [ 233.697844][T10482] 0 pages HighMem/MovableOnly [ 233.700696][T10482] 208875 pages reserved [ 233.725681][T10482] 0 pages cma reserved [ 233.939077][T10508] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.523535][ T5989] usb 8-1: USB disconnect, device number 22 [ 235.709332][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 235.719303][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 235.739360][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 235.746739][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 236.048077][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 236.050104][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 236.199418][T10551] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1227'. [ 236.261261][T10537] ceph: No mds server is up or the cluster is laggy [ 237.094938][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1231'. [ 237.195761][T10575] fuse: Bad value for 'fd' [ 237.441984][T10582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.812827][T10590] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1240'. [ 238.225424][T10588] ceph: No mds server is up or the cluster is laggy [ 239.523189][T10624] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 240.026133][T10613] syz.3.1245 (10613) used greatest stack depth: 20808 bytes left [ 240.249613][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 240.264340][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 240.266940][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 240.451574][T10647] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1256'. [ 240.525792][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 240.527884][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 240.640010][T10628] ceph: No mds server is up or the cluster is laggy [ 241.756393][T10682] 9pnet_fd: Insufficient options for proto=fd [ 241.895634][T10684] FAULT_INJECTION: forcing a failure. [ 241.895634][T10684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.900197][T10684] CPU: 0 UID: 0 PID: 10684 Comm: syz.2.1265 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 241.900213][T10684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.900220][T10684] Call Trace: [ 241.900225][T10684] [ 241.900231][T10684] dump_stack_lvl+0x16c/0x1f0 [ 241.900252][T10684] should_fail_ex+0x512/0x640 [ 241.900267][T10684] _copy_from_user+0x2e/0xd0 [ 241.900282][T10684] ia32_restore_sigcontext+0xc3/0x630 [ 241.900296][T10684] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 241.900312][T10684] ? rcu_is_watching+0x12/0xc0 [ 241.900325][T10684] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.900339][T10684] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.900356][T10684] __do_compat_sys_rt_sigreturn+0x120/0x1f0 [ 241.900369][T10684] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 241.900384][T10684] ? rcu_is_watching+0x12/0xc0 [ 241.900398][T10684] do_int80_emulation+0x104/0x200 [ 241.900415][T10684] asm_int80_emulation+0x1a/0x20 [ 241.900426][T10684] RIP: 0023:0xf7ff55a7 [ 241.900435][T10684] Code: 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 58 b8 77 00 00 00 cd 80 90 8d b4 26 00 00 00 00 b8 ad 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 90 55 89 e5 57 8d 3d 2c dc ff ff 56 53 e8 [ 241.900446][T10684] RSP: 002b:00000000f5115940 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 241.900456][T10684] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f51159cc [ 241.900463][T10684] RDX: 00000000f511594c RSI: 0000000000000000 RDI: 0000000000000000 [ 241.900468][T10684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.900474][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.900480][T10684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.900492][T10684] [ 241.956783][T10690] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 242.024167][T10692] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1269'. [ 243.120911][T10696] ceph: No mds server is up or the cluster is laggy [ 243.577659][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.582012][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.587349][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.590693][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.594371][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.600075][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.603957][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.609521][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 243.613746][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 244.389623][T10743] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.603062][T10757] sd 0:0:0:0: PR command failed: 1026 [ 244.605093][T10757] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 244.608328][T10757] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 244.747137][ T57] libceph: connect (1)[c::]:6789 error -101 [ 244.756450][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 244.759981][ T57] libceph: connect (1)[c::]:6789 error -101 [ 244.762531][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 245.017901][ T57] libceph: connect (1)[c::]:6789 error -101 [ 245.020528][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 245.348515][T10765] ceph: No mds server is up or the cluster is laggy [ 245.785262][T10803] hub 6-0:1.0: USB hub found [ 245.787740][T10803] hub 6-0:1.0: 1 port detected [ 247.441951][T10821] netlink: 'syz.3.1297': attribute type 2 has an invalid length. [ 247.445815][T10821] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 247.587451][T10822] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 247.591895][T10822] overlayfs: failed to set xattr on upper [ 247.594851][T10822] overlayfs: ...falling back to redirect_dir=nofollow. [ 247.598391][T10822] overlayfs: ...falling back to index=off. [ 247.601364][T10822] overlayfs: ...falling back to uuid=null. [ 247.635795][T10822] overlayfs: maximum fs stacking depth exceeded [ 247.659396][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 247.659415][ T40] audit: type=1804 audit(1744849775.927:150): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1297" name="/newroot/320/file0/bus/file1" dev="hugetlbfs" ino=27124 res=1 errno=0 [ 248.240136][ T57] libceph: connect (1)[c::]:6789 error -101 [ 248.242750][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 248.370043][T10846] __nla_validate_parse: 37 callbacks suppressed [ 248.370061][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1302'. [ 248.505951][ T57] libceph: connect (1)[c::]:6789 error -101 [ 248.508322][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 248.519404][T10839] ceph: No mds server is up or the cluster is laggy [ 248.550668][T10854] fuse: root generation should be zero [ 248.629037][T10858] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1306'. [ 248.887447][T10863] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 249.419621][T10872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.516824][T10875] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1311'. [ 249.538152][T10873] syz.4.1310 (10873): drop_caches: 2 [ 249.545068][ T40] audit: type=1326 audit(1744849777.807:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.4.1310" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 250.307488][T10887] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 250.311727][T10887] program syz.4.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.347725][T10889] FAULT_INJECTION: forcing a failure. [ 250.347725][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 250.351809][T10889] CPU: 3 UID: 0 PID: 10889 Comm: syz.4.1316 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 250.351825][T10889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.351833][T10889] Call Trace: [ 250.351839][T10889] [ 250.351845][T10889] dump_stack_lvl+0x16c/0x1f0 [ 250.351867][T10889] should_fail_ex+0x512/0x640 [ 250.351881][T10889] ? fs_reclaim_acquire+0xae/0x150 [ 250.351896][T10889] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.351911][T10889] should_failslab+0xc2/0x120 [ 250.351922][T10889] __kmalloc_noprof+0xd2/0x510 [ 250.351941][T10889] tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.351957][T10889] ? tomoyo_profile+0x47/0x60 [ 250.351975][T10889] tomoyo_path_number_perm+0x245/0x580 [ 250.351986][T10889] ? tomoyo_path_number_perm+0x237/0x580 [ 250.352000][T10889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.352013][T10889] ? find_held_lock+0x2b/0x80 [ 250.352039][T10889] ? find_held_lock+0x2b/0x80 [ 250.352051][T10889] ? hook_file_ioctl_common+0x145/0x410 [ 250.352066][T10889] ? __fget_files+0x20e/0x3c0 [ 250.352084][T10889] security_file_ioctl_compat+0x9b/0x240 [ 250.352099][T10889] __do_compat_sys_ioctl+0x4e/0x2c0 [ 250.352114][T10889] __do_fast_syscall_32+0x73/0x120 [ 250.352132][T10889] do_fast_syscall_32+0x32/0x80 [ 250.352148][T10889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.352163][T10889] RIP: 0023:0xf711e579 [ 250.352172][T10889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.352182][T10889] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 250.352192][T10889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104593 [ 250.352199][T10889] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.352205][T10889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.352211][T10889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.352216][T10889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.352229][T10889] [ 250.352234][T10889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.475725][T10891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 251.395985][ T5989] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 251.548019][ T5989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.605522][ T5989] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.610305][ T5989] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.613246][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.625912][ T5989] usb 8-1: Product: syz [ 251.627328][ T5989] usb 8-1: Manufacturer: syz [ 251.629398][ T5989] usb 8-1: SerialNumber: syz [ 251.637661][ T5989] usb 8-1: config 0 descriptor?? [ 252.009879][T10922] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 252.012792][T10922] PKCS7: Only support pkcs7_signedData type [ 252.659661][T10947] FAULT_INJECTION: forcing a failure. [ 252.659661][T10947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.665752][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.4.1333 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 252.665778][T10947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.665787][T10947] Call Trace: [ 252.665792][T10947] [ 252.665799][T10947] dump_stack_lvl+0x16c/0x1f0 [ 252.665829][T10947] should_fail_ex+0x512/0x640 [ 252.665853][T10947] _copy_from_iter+0x2a4/0x15b0 [ 252.665880][T10947] ? __pfx__copy_from_iter+0x10/0x10 [ 252.665899][T10947] ? rcu_is_watching+0x12/0xc0 [ 252.665919][T10947] ? trace_kmalloc+0x2b/0xd0 [ 252.665934][T10947] ? __kmalloc_noprof+0x242/0x510 [ 252.665961][T10947] kernfs_fop_write_iter+0x19a/0x510 [ 252.665986][T10947] vfs_write+0x5ba/0x1180 [ 252.666009][T10947] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 252.666030][T10947] ? __pfx___mutex_lock+0x10/0x10 [ 252.666052][T10947] ? __pfx_vfs_write+0x10/0x10 [ 252.666087][T10947] ksys_write+0x12a/0x240 [ 252.666107][T10947] ? __pfx_ksys_write+0x10/0x10 [ 252.666122][T10947] ? rcu_is_watching+0x12/0xc0 [ 252.666137][T10947] __do_fast_syscall_32+0x73/0x120 [ 252.666155][T10947] do_fast_syscall_32+0x32/0x80 [ 252.666172][T10947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.666186][T10947] RIP: 0023:0xf711e579 [ 252.666195][T10947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 252.666206][T10947] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 252.666217][T10947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 252.666223][T10947] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.666229][T10947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.666235][T10947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 252.666241][T10947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.666254][T10947] [ 252.802051][T10952] netlink: 'syz.4.1335': attribute type 3 has an invalid length. [ 252.868912][T10938] ceph: No mds server is up or the cluster is laggy [ 252.907278][T10952] wg1 speed is unknown, defaulting to 1000 [ 253.099103][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 253.107316][T10967] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1340'. [ 253.110282][T10967] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1340'. [ 253.137531][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 253.872644][ T5989] usb 8-1: USB disconnect, device number 23 [ 253.981957][T10990] netlink: 'syz.4.1348': attribute type 2 has an invalid length. [ 253.984465][T10990] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 254.081106][T11001] FAULT_INJECTION: forcing a failure. [ 254.081106][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.085390][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.2.1351 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 254.085406][T11001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.085413][T11001] Call Trace: [ 254.085418][T11001] [ 254.085424][T11001] dump_stack_lvl+0x16c/0x1f0 [ 254.085459][T11001] should_fail_ex+0x512/0x640 [ 254.085475][T11001] _copy_from_user+0x2e/0xd0 [ 254.085489][T11001] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 254.085507][T11001] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 254.085524][T11001] ? __local_bh_enable_ip+0xa4/0x120 [ 254.085542][T11001] rds_setsockopt+0x3dd/0xba0 [ 254.085560][T11001] ? __pfx_rds_setsockopt+0x10/0x10 [ 254.085574][T11001] ? __lock_acquire+0x5ca/0x1ba0 [ 254.085592][T11001] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.085617][T11001] ? find_held_lock+0x2b/0x80 [ 254.085636][T11001] ? __pfx_rds_setsockopt+0x10/0x10 [ 254.085649][T11001] do_sock_setsockopt+0x221/0x470 [ 254.085667][T11001] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 254.085691][T11001] __sys_setsockopt+0x1a0/0x230 [ 254.085707][T11001] __ia32_sys_setsockopt+0xbc/0x160 [ 254.085720][T11001] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.085734][T11001] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 254.085751][T11001] __do_fast_syscall_32+0x73/0x120 [ 254.085768][T11001] do_fast_syscall_32+0x32/0x80 [ 254.085784][T11001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.085798][T11001] RIP: 0023:0xf7ff5579 [ 254.085808][T11001] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.085819][T11001] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 254.085830][T11001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 254.085836][T11001] RDX: 0000000000000008 RSI: 00000000800008c0 RDI: 0000000000000004 [ 254.085842][T11001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.085848][T11001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.085854][T11001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.085866][T11001] [ 254.226720][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 254.241943][T11012] mkiss: ax0: crc mode is auto. [ 254.435866][T11012] syzkaller0: entered promiscuous mode [ 254.438636][T11012] syzkaller0: entered allmulticast mode [ 255.185865][T11029] /dev/nullb0: Can't open blockdev [ 255.231981][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.234326][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.289818][T11034] netlink: 800 bytes leftover after parsing attributes in process `syz.1.1362'. [ 256.379467][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 256.994381][T11048] random: crng reseeded on system resumption [ 257.275203][T11064] x_tables: duplicate underflow at hook 3 [ 257.942738][T11070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1372'. [ 257.945900][T11070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1372'. [ 257.948836][T11070] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1372'. [ 258.149599][ T40] audit: type=1326 audit(1744849786.417:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11076 comm="syz.3.1375" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e579 code=0x0 [ 258.414315][T11084] fuse: Bad value for 'fd' [ 259.334715][T11094] random: crng reseeded on system resumption [ 259.609824][ T5989] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 259.791826][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.808161][T11111] /dev/nullb0: Can't open blockdev [ 259.874981][ T5989] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.881472][ T5989] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.884628][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.888437][ T5989] usb 7-1: Product: syz [ 259.891188][ T5989] usb 7-1: Manufacturer: syz [ 259.894242][ T5989] usb 7-1: SerialNumber: syz [ 259.902088][ T5989] usb 7-1: config 0 descriptor?? [ 260.276740][T11116] overlay: Unknown parameter 'appraise_type' [ 260.392363][ T57] libceph: connect (1)[c::]:6789 error -101 [ 260.414079][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 260.437940][ T57] libceph: connect (1)[c::]:6789 error -101 [ 260.447813][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 260.618712][T11123] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 260.705954][ T57] libceph: connect (1)[c::]:6789 error -101 [ 260.708056][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 260.945555][T11117] ceph: No mds server is up or the cluster is laggy [ 261.599966][T11193] netlink: 'syz.1.1394': attribute type 10 has an invalid length. [ 261.602759][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 261.606879][T11193] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.609614][T11193] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.612354][T11193] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.615116][T11193] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.984280][T11198] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1396'. [ 261.990527][ T57] usb 7-1: USB disconnect, device number 18 [ 263.849026][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 263.857782][T11238] FAULT_INJECTION: forcing a failure. [ 263.857782][T11238] name failslab, interval 1, probability 0, space 0, times 0 [ 263.861563][T11238] CPU: 0 UID: 0 PID: 11238 Comm: syz.4.1408 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 263.861579][T11238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.861586][T11238] Call Trace: [ 263.861590][T11238] [ 263.861594][T11238] dump_stack_lvl+0x16c/0x1f0 [ 263.861615][T11238] should_fail_ex+0x512/0x640 [ 263.861630][T11238] should_failslab+0xc2/0x120 [ 263.861641][T11238] __kmalloc_cache_noprof+0x6a/0x3e0 [ 263.861656][T11238] ? __pfx___might_resched+0x10/0x10 [ 263.861671][T11238] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 263.861684][T11238] __hw_addr_add_ex+0x3c9/0x7c0 [ 263.861696][T11238] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 263.861706][T11238] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 263.861725][T11238] ? __pfx_br_dev_setup+0x10/0x10 [ 263.861740][T11238] dev_addr_init+0x161/0x250 [ 263.861752][T11238] ? __pfx_dev_addr_init+0x10/0x10 [ 263.861768][T11238] alloc_netdev_mqs+0x3d2/0x1570 [ 263.861786][T11238] rtnl_create_link+0xce9/0x1200 [ 263.861803][T11238] rtnl_newlink+0xb69/0x2000 [ 263.861822][T11238] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.861842][T11238] ? kfree_skbmem+0x1a4/0x1f0 [ 263.861857][T11238] ? rcu_is_watching+0x12/0xc0 [ 263.861871][T11238] ? trace_cap_capable+0x18d/0x200 [ 263.861886][T11238] ? find_held_lock+0x2b/0x80 [ 263.861899][T11238] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.861913][T11238] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.861926][T11238] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 263.861941][T11238] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.861955][T11238] rtnetlink_rcv_msg+0x95b/0xe90 [ 263.861971][T11238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.861992][T11238] netlink_rcv_skb+0x16a/0x440 [ 263.862008][T11238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.862023][T11238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.862046][T11238] ? netlink_deliver_tap+0x1ae/0xd30 [ 263.862064][T11238] netlink_unicast+0x53a/0x7f0 [ 263.862081][T11238] ? __pfx_netlink_unicast+0x10/0x10 [ 263.862100][T11238] netlink_sendmsg+0x8d1/0xdd0 [ 263.862118][T11238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.862134][T11238] ? __import_iovec+0x1c8/0x660 [ 263.862152][T11238] ____sys_sendmsg+0xa95/0xc70 [ 263.862164][T11238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.862174][T11238] ? get_compat_msghdr+0x11a/0x170 [ 263.862194][T11238] ___sys_sendmsg+0x134/0x1d0 [ 263.862209][T11238] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.862239][T11238] __sys_sendmsg+0x16d/0x220 [ 263.862254][T11238] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.862274][T11238] ? rcu_is_watching+0x12/0xc0 [ 263.862289][T11238] __do_fast_syscall_32+0x73/0x120 [ 263.862307][T11238] do_fast_syscall_32+0x32/0x80 [ 263.862323][T11238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.862338][T11238] RIP: 0023:0xf711e579 [ 263.862348][T11238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 263.862360][T11238] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 263.862371][T11238] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 263.862378][T11238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.862384][T11238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.862391][T11238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 263.862397][T11238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.862411][T11238] [ 263.935561][ T57] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 263.940297][T11241] 9pnet_fd: Insufficient options for proto=fd [ 264.106989][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.112304][ T57] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.124998][ T57] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.132004][ T57] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.135064][ T57] usb 8-1: Product: syz [ 264.139464][ T57] usb 8-1: Manufacturer: syz [ 264.141082][ T57] usb 8-1: SerialNumber: syz [ 264.153226][ T57] usb 8-1: config 0 descriptor?? [ 264.355787][ T836] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 264.515642][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 264.519625][ T836] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 264.522583][ T836] usb 7-1: config 0 has no interface number 0 [ 264.524738][ T836] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.528212][ T836] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 264.531783][ T836] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 264.536048][ T836] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.543060][ T836] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 264.546469][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.549335][ T836] usb 7-1: Product: syz [ 264.550956][ T836] usb 7-1: Manufacturer: syz [ 264.552811][ T836] usb 7-1: SerialNumber: syz [ 264.560598][ T836] usb 7-1: config 0 descriptor?? [ 264.801618][ T836] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 265.048284][ T6134] usb 7-1: USB disconnect, device number 19 [ 265.600046][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 265.758381][T11267] CIFS mount error: No usable UNC path provided in device string! [ 265.758381][T11267] [ 265.761832][T11267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.881383][T11267] fuse: Unknown parameter 'group_io' [ 265.967409][T11276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 266.405584][T11268] ceph: No mds server is up or the cluster is laggy [ 266.464546][T11295] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 266.478148][ T57] usb 8-1: USB disconnect, device number 24 [ 266.549195][T11299] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 266.552804][T11299] CUSE: unknown device info "3ܟ,̘" [ 266.554733][T11299] CUSE: DEVNAME unspecified [ 267.557737][T11311] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 267.645997][ T57] libceph: connect (1)[c::]:6789 error -101 [ 267.650473][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 267.915218][ T57] libceph: connect (1)[c::]:6789 error -101 [ 267.917477][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 268.257318][T11334] random: crng reseeded on system resumption [ 268.289489][T11314] ceph: No mds server is up or the cluster is laggy [ 268.401314][ T40] audit: type=1800 audit(1744849796.667:153): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1440" name="/newroot/344/bus" dev="tmpfs" ino=1868 res=0 errno=0 [ 268.493801][T11357] FAULT_INJECTION: forcing a failure. [ 268.493801][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 268.499592][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.3.1445 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 268.499609][T11357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.499616][T11357] Call Trace: [ 268.499621][T11357] [ 268.499626][T11357] dump_stack_lvl+0x16c/0x1f0 [ 268.499648][T11357] should_fail_ex+0x512/0x640 [ 268.499664][T11357] should_failslab+0xc2/0x120 [ 268.499678][T11357] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 268.499696][T11357] ? skb_clone+0x190/0x3f0 [ 268.499716][T11357] skb_clone+0x190/0x3f0 [ 268.499732][T11357] netlink_deliver_tap+0xabd/0xd30 [ 268.499752][T11357] netlink_unicast+0x5df/0x7f0 [ 268.499771][T11357] ? __pfx_netlink_unicast+0x10/0x10 [ 268.499792][T11357] netlink_sendmsg+0x8d1/0xdd0 [ 268.499811][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.499830][T11357] ? __import_iovec+0x1c8/0x660 [ 268.499848][T11357] ____sys_sendmsg+0xa95/0xc70 [ 268.499858][T11357] ? init_inodes+0x23f0/0x2eb0 [ 268.499871][T11357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.499880][T11357] ? get_compat_msghdr+0x11a/0x170 [ 268.499902][T11357] ___sys_sendmsg+0x134/0x1d0 [ 268.499918][T11357] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.499951][T11357] __sys_sendmsg+0x16d/0x220 [ 268.499967][T11357] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.499989][T11357] ? rcu_is_watching+0x12/0xc0 [ 268.500013][T11357] __do_fast_syscall_32+0x73/0x120 [ 268.500043][T11357] do_fast_syscall_32+0x32/0x80 [ 268.500070][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.500093][T11357] RIP: 0023:0xf703e579 [ 268.500110][T11357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.500124][T11357] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 268.500136][T11357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 268.500143][T11357] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.500150][T11357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.500156][T11357] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 268.500163][T11357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.500179][T11357] [ 268.682152][T11364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1448'. [ 269.575985][T11383] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1454'. [ 269.579141][T11383] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 269.905544][ T57] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 270.065556][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 270.089292][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.096837][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.100355][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 270.103320][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.107622][ T57] usb 8-1: config 0 descriptor?? [ 270.175122][T11404] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1463'. [ 270.429348][T11407] raw_sendmsg: syz.1.1464 forgot to set AF_INET. Fix it! [ 270.589489][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 270.591818][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 270.596252][ T57] usb 8-1: USB disconnect, device number 25 [ 271.133866][T11420] sctp: [Deprecated]: syz.3.1468 (pid 11420) Use of int in maxseg socket option. [ 271.133866][T11420] Use struct sctp_assoc_value instead [ 271.552373][T11433] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1472'. [ 272.195579][ T57] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 272.367492][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.382807][ T57] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.417672][ T57] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.420912][ T57] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.423703][ T57] usb 7-1: Product: syz [ 272.425211][ T57] usb 7-1: Manufacturer: syz [ 272.435598][ T57] usb 7-1: SerialNumber: syz [ 272.439071][ T57] usb 7-1: config 0 descriptor?? [ 272.773533][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1478'. [ 272.867471][T11464] fuse: Unknown parameter '0000000000000000000400000000000000000000000' [ 272.919572][T11469] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1483'. [ 273.795124][T11479] random: crng reseeded on system resumption [ 274.358218][ T57] libceph: connect (1)[c::]:6789 error -101 [ 274.360935][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 274.364275][ T57] libceph: connect (1)[c::]:6789 error -101 [ 274.366551][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 274.625837][ T57] libceph: connect (1)[c::]:6789 error -101 [ 274.633832][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 274.658674][ T836] usb 7-1: USB disconnect, device number 20 [ 274.953764][T11487] ceph: No mds server is up or the cluster is laggy [ 275.775980][T11514] random: crng reseeded on system resumption [ 276.729954][T11540] ceph: No mds server is up or the cluster is laggy [ 276.781984][T11535] FAULT_INJECTION: forcing a failure. [ 276.781984][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 276.786477][T11535] CPU: 2 UID: 0 PID: 11535 Comm: syz.2.1503 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 276.786502][T11535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.786512][T11535] Call Trace: [ 276.786518][T11535] [ 276.786527][T11535] dump_stack_lvl+0x16c/0x1f0 [ 276.786558][T11535] should_fail_ex+0x512/0x640 [ 276.786577][T11535] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 276.786596][T11535] should_failslab+0xc2/0x120 [ 276.786607][T11535] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 276.786623][T11535] ? __do_fast_syscall_32+0x73/0x120 [ 276.786640][T11535] ? do_fast_syscall_32+0x32/0x80 [ 276.786661][T11535] ? __alloc_skb+0x2b2/0x380 [ 276.786687][T11535] __alloc_skb+0x2b2/0x380 [ 276.786709][T11535] ? __pfx___alloc_skb+0x10/0x10 [ 276.786740][T11535] __ip6_append_data+0x2bb6/0x4710 [ 276.786771][T11535] ? __pfx_raw6_getfrag+0x10/0x10 [ 276.786802][T11535] ? __pfx___ip6_append_data+0x10/0x10 [ 276.786827][T11535] ? ip6_setup_cork+0xd01/0x15d0 [ 276.786855][T11535] ip6_append_data+0x1bd/0x4c0 [ 276.786881][T11535] ? __pfx_raw6_getfrag+0x10/0x10 [ 276.786908][T11535] rawv6_sendmsg+0x175a/0x4890 [ 276.786944][T11535] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 276.786973][T11535] ? __pfx_get_page_from_freelist+0x10/0x10 [ 276.786999][T11535] ? should_fail_alloc_page+0xee/0x130 [ 276.787029][T11535] ? __pfx___might_resched+0x10/0x10 [ 276.787066][T11535] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.787089][T11535] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 276.787113][T11535] ? inet_sendmsg+0x119/0x140 [ 276.787128][T11535] inet_sendmsg+0x119/0x140 [ 276.787147][T11535] ____sys_sendmsg+0x973/0xc70 [ 276.787167][T11535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.787182][T11535] ? get_compat_msghdr+0x11a/0x170 [ 276.787208][T11535] ? __pfx__kstrtoull+0x10/0x10 [ 276.787240][T11535] ___sys_sendmsg+0x134/0x1d0 [ 276.787264][T11535] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.787299][T11535] ? find_held_lock+0x2b/0x80 [ 276.787348][T11535] __sys_sendmmsg+0x2f9/0x420 [ 276.787375][T11535] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.787407][T11535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.787445][T11535] ? fput+0x70/0xf0 [ 276.787462][T11535] ? ksys_write+0x1b9/0x240 [ 276.787485][T11535] ? __pfx_ksys_write+0x10/0x10 [ 276.787513][T11535] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 276.787537][T11535] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 276.787561][T11535] __do_fast_syscall_32+0x73/0x120 [ 276.787588][T11535] do_fast_syscall_32+0x32/0x80 [ 276.787611][T11535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.787627][T11535] RIP: 0023:0xf7ff5579 [ 276.787637][T11535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 276.787648][T11535] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 276.787659][T11535] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002940 [ 276.787666][T11535] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.787673][T11535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.787679][T11535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 276.787686][T11535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.787700][T11535] [ 277.451881][ T10] libceph: connect (1)[c::]:6789 error -101 [ 277.454083][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 277.715913][ T10] libceph: connect (1)[c::]:6789 error -101 [ 277.718113][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 278.079343][T11549] ceph: No mds server is up or the cluster is laggy [ 279.190671][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.195701][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.862192][T11590] wg1 speed is unknown, defaulting to 1000 [ 280.215883][T11593] random: crng reseeded on system resumption [ 281.125618][ T57] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 281.336473][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.339658][ T57] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.344118][ T57] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.347074][ T57] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.349635][ T57] usb 7-1: Product: syz [ 281.350961][ T57] usb 7-1: Manufacturer: syz [ 281.352465][ T57] usb 7-1: SerialNumber: syz [ 281.371301][ T57] usb 7-1: config 0 descriptor?? [ 281.667387][T11632] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1527'. [ 282.487944][ T57] libceph: connect (1)[c::]:6789 error -101 [ 282.492878][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 282.745849][ T57] libceph: connect (1)[c::]:6789 error -101 [ 282.754420][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 282.904942][T11658] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1534'. [ 282.970395][T11653] ceph: No mds server is up or the cluster is laggy [ 283.500152][T11672] overlayfs: missing 'lowerdir' [ 283.646065][ T5989] usb 7-1: USB disconnect, device number 22 [ 284.150530][T11682] FAULT_INJECTION: forcing a failure. [ 284.150530][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 284.154756][T11682] CPU: 3 UID: 0 PID: 11682 Comm: syz.3.1540 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 284.154772][T11682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.154780][T11682] Call Trace: [ 284.154785][T11682] [ 284.154791][T11682] dump_stack_lvl+0x16c/0x1f0 [ 284.154813][T11682] should_fail_ex+0x512/0x640 [ 284.154827][T11682] ? fs_reclaim_acquire+0xae/0x150 [ 284.154842][T11682] ? tomoyo_encode2+0x100/0x3e0 [ 284.154857][T11682] should_failslab+0xc2/0x120 [ 284.154868][T11682] __kmalloc_noprof+0xd2/0x510 [ 284.154885][T11682] ? d_absolute_path+0x136/0x1a0 [ 284.154900][T11682] tomoyo_encode2+0x100/0x3e0 [ 284.154917][T11682] tomoyo_encode+0x29/0x50 [ 284.154932][T11682] tomoyo_realpath_from_path+0x18f/0x6e0 [ 284.154951][T11682] tomoyo_mount_acl+0x664/0x850 [ 284.154965][T11682] ? kernel_text_address+0x8d/0x100 [ 284.154979][T11682] ? __kernel_text_address+0xd/0x40 [ 284.154995][T11682] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 284.155025][T11682] ? tomoyo_domain+0xbb/0x150 [ 284.155041][T11682] ? tomoyo_profile+0x47/0x60 [ 284.155064][T11682] tomoyo_mount_permission+0x16d/0x420 [ 284.155077][T11682] ? tomoyo_mount_permission+0x14f/0x420 [ 284.155092][T11682] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 284.155115][T11682] security_sb_mount+0x9b/0x260 [ 284.155130][T11682] path_mount+0x128/0x1f30 [ 284.155142][T11682] ? kmem_cache_free+0x2d4/0x4d0 [ 284.155158][T11682] ? __pfx_path_mount+0x10/0x10 [ 284.155170][T11682] ? putname+0x154/0x1a0 [ 284.155183][T11682] __ia32_sys_mount+0x28b/0x310 [ 284.155194][T11682] ? __pfx___ia32_sys_mount+0x10/0x10 [ 284.155206][T11682] ? rcu_is_watching+0x12/0xc0 [ 284.155223][T11682] __do_fast_syscall_32+0x73/0x120 [ 284.155241][T11682] do_fast_syscall_32+0x32/0x80 [ 284.155259][T11682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.155275][T11682] RIP: 0023:0xf703e579 [ 284.155285][T11682] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 284.155296][T11682] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 284.155307][T11682] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000800002c0 [ 284.155314][T11682] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.155321][T11682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.155327][T11682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.155333][T11682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.155347][T11682] [ 284.155364][T11682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.251453][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 285.431065][T11716] FAULT_INJECTION: forcing a failure. [ 285.431065][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.435975][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.3.1548 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 285.436006][T11716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.436014][T11716] Call Trace: [ 285.436019][T11716] [ 285.436025][T11716] dump_stack_lvl+0x16c/0x1f0 [ 285.436048][T11716] should_fail_ex+0x512/0x640 [ 285.436066][T11716] _copy_to_user+0x32/0xd0 [ 285.436083][T11716] simple_read_from_buffer+0xcb/0x170 [ 285.436110][T11716] proc_fail_nth_read+0x197/0x270 [ 285.436127][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.436144][T11716] ? rw_verify_area+0xcf/0x680 [ 285.436159][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.436175][T11716] vfs_read+0x1de/0xc70 [ 285.436194][T11716] ? __pfx___mutex_lock+0x10/0x10 [ 285.436212][T11716] ? __pfx_vfs_read+0x10/0x10 [ 285.436232][T11716] ? __fget_files+0x20e/0x3c0 [ 285.436254][T11716] ksys_read+0x12a/0x240 [ 285.436270][T11716] ? __pfx_ksys_read+0x10/0x10 [ 285.436287][T11716] ? rcu_is_watching+0x12/0xc0 [ 285.436306][T11716] __do_fast_syscall_32+0x73/0x120 [ 285.436325][T11716] do_fast_syscall_32+0x32/0x80 [ 285.436344][T11716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.436361][T11716] RIP: 0023:0xf703e579 [ 285.436372][T11716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.436384][T11716] RSP: 002b:00000000f502e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 285.436396][T11716] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f502e620 [ 285.436403][T11716] RDX: 000000000000000f RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 285.436410][T11716] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 285.436417][T11716] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 285.436423][T11716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.436438][T11716] [ 285.495718][ T836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 285.676939][ T836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.680169][ T836] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.684535][ T836] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.687637][ T836] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 285.690202][ T836] usb 7-1: Product: syz [ 285.691565][ T836] usb 7-1: Manufacturer: syz [ 285.693072][ T836] usb 7-1: SerialNumber: syz [ 285.696338][ T836] usb 7-1: config 0 descriptor?? [ 285.825625][ T34] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 285.965604][ T34] usb 8-1: device descriptor read/64, error -71 [ 286.185071][T11733] netlink: 'syz.4.1553': attribute type 4 has an invalid length. [ 286.188479][T11733] FAULT_INJECTION: forcing a failure. [ 286.188479][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 286.192762][T11733] CPU: 2 UID: 0 PID: 11733 Comm: syz.4.1553 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 286.192778][T11733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.192785][T11733] Call Trace: [ 286.192790][T11733] [ 286.192796][T11733] dump_stack_lvl+0x16c/0x1f0 [ 286.192816][T11733] should_fail_ex+0x512/0x640 [ 286.192830][T11733] ? __kmalloc_noprof+0xbf/0x510 [ 286.192847][T11733] ? tcf_idr_create+0x62/0x8c0 [ 286.192857][T11733] should_failslab+0xc2/0x120 [ 286.192869][T11733] __kmalloc_noprof+0xd2/0x510 [ 286.192888][T11733] tcf_idr_create+0x62/0x8c0 [ 286.192897][T11733] ? tcf_idr_check_alloc+0x81/0x770 [ 286.192907][T11733] ? find_held_lock+0x2b/0x80 [ 286.192923][T11733] tcf_idr_create_from_flags+0x4f/0x70 [ 286.192936][T11733] tcf_mirred_init+0x6db/0xee0 [ 286.192953][T11733] ? __pfx_tcf_mirred_init+0x10/0x10 [ 286.192972][T11733] ? __asan_memcpy+0x3c/0x60 [ 286.193000][T11733] tcf_action_init_1+0x45d/0x6c0 [ 286.193013][T11733] ? __pfx_tcf_action_init_1+0x10/0x10 [ 286.193032][T11733] ? __nla_parse+0x40/0x60 [ 286.193048][T11733] tcf_action_init+0x42c/0x9c0 [ 286.193064][T11733] ? __pfx_tcf_action_init+0x10/0x10 [ 286.193074][T11733] ? lock_acquire+0x179/0x350 [ 286.193095][T11733] ? kernel_text_address+0x8d/0x100 [ 286.193108][T11733] ? __kernel_text_address+0xd/0x40 [ 286.193120][T11733] ? unwind_get_return_address+0x59/0xa0 [ 286.193149][T11733] ? kasan_save_stack+0x42/0x60 [ 286.193164][T11733] ? kasan_save_stack+0x33/0x60 [ 286.193178][T11733] ? kasan_save_track+0x14/0x30 [ 286.193191][T11733] ? kasan_save_free_info+0x3b/0x60 [ 286.193203][T11733] ? __kasan_slab_free+0x51/0x70 [ 286.193220][T11733] tcf_action_add+0xee/0x5c0 [ 286.193234][T11733] ? __pfx_tcf_action_add+0x10/0x10 [ 286.193265][T11733] ? __nla_parse+0x40/0x60 [ 286.193281][T11733] tc_ctl_action+0x35b/0x470 [ 286.193293][T11733] ? __pfx_tc_ctl_action+0x10/0x10 [ 286.193313][T11733] ? __pfx_tc_ctl_action+0x10/0x10 [ 286.193325][T11733] rtnetlink_rcv_msg+0x3c6/0xe90 [ 286.193342][T11733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.193364][T11733] netlink_rcv_skb+0x16a/0x440 [ 286.193380][T11733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.193396][T11733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.193419][T11733] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.193436][T11733] netlink_unicast+0x53a/0x7f0 [ 286.193454][T11733] ? __pfx_netlink_unicast+0x10/0x10 [ 286.193473][T11733] netlink_sendmsg+0x8d1/0xdd0 [ 286.193490][T11733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.193507][T11733] ? __import_iovec+0x1c8/0x660 [ 286.193525][T11733] ____sys_sendmsg+0xa95/0xc70 [ 286.193536][T11733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.193545][T11733] ? get_compat_msghdr+0x11a/0x170 [ 286.193565][T11733] ___sys_sendmsg+0x134/0x1d0 [ 286.193580][T11733] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.193610][T11733] __sys_sendmsg+0x16d/0x220 [ 286.193624][T11733] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.193643][T11733] ? rcu_is_watching+0x12/0xc0 [ 286.193660][T11733] __do_fast_syscall_32+0x73/0x120 [ 286.193677][T11733] do_fast_syscall_32+0x32/0x80 [ 286.193693][T11733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.193707][T11733] RIP: 0023:0xf711e579 [ 286.193715][T11733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 286.193726][T11733] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 286.193736][T11733] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 286.193743][T11733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.193748][T11733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.193754][T11733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 286.193760][T11733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.193773][T11733] [ 286.205629][ T34] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 286.248292][T11735] /dev/nullb0: Can't open blockdev [ 286.299685][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 286.307055][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 286.308861][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 286.310946][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 286.313620][T11736] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 286.361877][T11736] bond1: entered allmulticast mode [ 286.364480][T11736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.368115][T11737] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 286.391189][T11737] bond2: entered allmulticast mode [ 286.393126][T11737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.395604][ T34] usb 8-1: device descriptor read/64, error -71 [ 286.505908][ T34] usb usb8-port1: attempt power cycle [ 286.855758][ T34] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 286.887359][ T34] usb 8-1: device descriptor read/8, error -71 [ 287.135699][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 287.166064][ T34] usb 8-1: device descriptor read/8, error -71 [ 287.285869][ T34] usb usb8-port1: unable to enumerate USB device [ 287.328889][T11749] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 287.450682][T11756] netlink: 'syz.4.1560': attribute type 10 has an invalid length. [ 287.483693][T11760] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 287.613686][T11766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.858742][ T57] usb 7-1: USB disconnect, device number 23 [ 288.405125][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 288.907776][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 288.948959][T11795] random: crng reseeded on system resumption [ 289.064702][T11797] FAULT_INJECTION: forcing a failure. [ 289.064702][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 289.064736][T11811] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.076427][T11797] CPU: 3 UID: 0 PID: 11797 Comm: syz.2.1574 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 289.076456][T11797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.076463][T11797] Call Trace: [ 289.076467][T11797] [ 289.076472][T11797] dump_stack_lvl+0x16c/0x1f0 [ 289.076495][T11797] should_fail_ex+0x512/0x640 [ 289.076510][T11797] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 289.076528][T11797] should_failslab+0xc2/0x120 [ 289.076539][T11797] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 289.076555][T11797] ? mas_alloc_nodes+0x18b/0x8b0 [ 289.076571][T11797] mas_alloc_nodes+0x18b/0x8b0 [ 289.076587][T11797] mas_node_count_gfp+0x105/0x130 [ 289.076602][T11797] mas_preallocate+0x53e/0xcd0 [ 289.076613][T11797] ? __lock_acquire+0xaa4/0x1ba0 [ 289.076654][T11797] ? __pfx_mas_preallocate+0x10/0x10 [ 289.076669][T11797] ? mark_held_locks+0x49/0x80 [ 289.076690][T11797] ? __asan_memset+0x23/0x50 [ 289.076707][T11797] commit_merge+0x29a/0x1020 [ 289.076724][T11797] ? __pfx_commit_merge+0x10/0x10 [ 289.076742][T11797] ? vma_merge_existing_range+0x113e/0x1c80 [ 289.076758][T11797] ? dup_anon_vma.constprop.0+0x74/0x320 [ 289.076774][T11797] vma_merge_existing_range+0xc52/0x1c80 [ 289.076794][T11797] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 289.076810][T11797] ? rwsem_down_write_slowpath+0x83c/0x1310 [ 289.076824][T11797] vma_modify+0x87/0x410 [ 289.076840][T11797] vma_modify_flags_uffd+0x226/0x2e0 [ 289.076857][T11797] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 289.076883][T11797] userfaultfd_clear_vma+0x91/0x130 [ 289.076897][T11797] userfaultfd_release_all+0x2ad/0x4b0 [ 289.076911][T11797] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 289.076926][T11797] ? __lock_acquire+0xaa4/0x1ba0 [ 289.076945][T11797] ? __pfx_userfaultfd_release+0x10/0x10 [ 289.076957][T11797] userfaultfd_release+0xf3/0x1c0 [ 289.076969][T11797] ? __pfx_userfaultfd_release+0x10/0x10 [ 289.076980][T11797] ? __pfx___might_resched+0x10/0x10 [ 289.076997][T11797] ? evm_file_release+0xd0/0x200 [ 289.077017][T11797] __fput+0x3ff/0xb70 [ 289.077030][T11797] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.077045][T11797] task_work_run+0x14d/0x240 [ 289.077058][T11797] ? __pfx_task_work_run+0x10/0x10 [ 289.077070][T11797] ? __pfx_do_readv+0x10/0x10 [ 289.077086][T11797] syscall_exit_to_user_mode+0x27b/0x2a0 [ 289.077103][T11797] __do_fast_syscall_32+0x80/0x120 [ 289.077120][T11797] do_fast_syscall_32+0x32/0x80 [ 289.077135][T11797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.077149][T11797] RIP: 0023:0xf7ff5579 [ 289.077158][T11797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.077169][T11797] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 289.077180][T11797] RAX: 0000000000000020 RBX: 0000000000000003 RCX: 0000000080000240 [ 289.077186][T11797] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.077191][T11797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.077197][T11797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.077203][T11797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.077227][T11797] [ 289.077420][T11797] BUG: unable to handle page fault for address: fffffffffffffff4 [ 289.183866][T11797] #PF: supervisor read access in kernel mode [ 289.185929][T11797] #PF: error_code(0x0000) - not-present page [ 289.189306][T11797] PGD e186067 P4D e186067 PUD e188067 PMD 0 [ 289.191787][T11797] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 289.193670][T11797] CPU: 3 UID: 0 PID: 11797 Comm: syz.2.1574 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 289.197453][T11797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.200768][T11797] RIP: 0010:vma_merge_existing_range+0x25a/0x1c80 [ 289.202846][T11797] Code: ff 4d 85 f6 0f 84 56 05 00 00 e8 71 0b ab ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 08 16 00 00 <4d> 8b 3e 48 8b 34 24 4c 89 ff e8 f7 05 ab ff 48 8b 04 24 49 39 c7 [ 289.209102][T11797] RSP: 0018:ffffc900032cf988 EFLAGS: 00010246 [ 289.211333][T11797] RAX: dffffc0000000000 RBX: ffffc900032cfae8 RCX: ffffffff82103641 [ 289.214303][T11797] RDX: 1ffffffffffffffe RSI: ffffffff8210314f RDI: 0000000000000005 [ 289.216848][T11797] RBP: ffff888040ecd900 R08: 0000000000000005 R09: 0000000000000000 [ 289.219342][T11797] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080ce2000 [ 289.221888][T11797] R13: ffffc900032cfb08 R14: fffffffffffffff4 R15: 0000000080ce2000 [ 289.224325][T11797] FS: 0000000000000000(0000) GS:ffff888097ab9000(0063) knlGS:00000000f5116b40 [ 289.227089][T11797] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 289.229171][T11797] CR2: fffffffffffffff4 CR3: 000000001227e000 CR4: 0000000000352ef0 [ 289.231711][T11797] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.234202][T11797] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.236764][T11797] Call Trace: [ 289.237828][T11797] [ 289.238770][T11797] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 289.240697][T11797] ? rwsem_down_write_slowpath+0x83c/0x1310 [ 289.242564][T11797] vma_modify+0x87/0x410 [ 289.243903][T11797] vma_modify_flags_uffd+0x226/0x2e0 [ 289.245575][T11797] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 289.247409][T11797] userfaultfd_clear_vma+0x91/0x130 [ 289.249071][T11797] userfaultfd_release_all+0x2ad/0x4b0 [ 289.250796][T11797] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 289.252762][T11797] ? __lock_acquire+0xaa4/0x1ba0 [ 289.254339][T11797] ? __pfx_userfaultfd_release+0x10/0x10 [ 289.256069][T11797] userfaultfd_release+0xf3/0x1c0 [ 289.257660][T11797] ? __pfx_userfaultfd_release+0x10/0x10 [ 289.259440][T11797] ? __pfx___might_resched+0x10/0x10 [ 289.261163][T11797] ? evm_file_release+0xd0/0x200 [ 289.262789][T11797] __fput+0x3ff/0xb70 [ 289.264092][T11797] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.265810][T11797] task_work_run+0x14d/0x240 [ 289.267335][T11797] ? __pfx_task_work_run+0x10/0x10 [ 289.269118][T11797] ? __pfx_do_readv+0x10/0x10 [ 289.270745][T11797] syscall_exit_to_user_mode+0x27b/0x2a0 [ 289.272862][T11797] __do_fast_syscall_32+0x80/0x120 [ 289.274661][T11797] do_fast_syscall_32+0x32/0x80 [ 289.276343][T11797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.278374][T11797] RIP: 0023:0xf7ff5579 [ 289.279692][T11797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.286029][T11797] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 289.288894][T11797] RAX: 0000000000000020 RBX: 0000000000000003 RCX: 0000000080000240 [ 289.291469][T11797] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.294003][T11797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.296501][T11797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.299101][T11797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.301698][T11797] [ 289.302708][T11797] Modules linked in: [ 289.303938][T11797] CR2: fffffffffffffff4 [ 289.305261][T11797] ---[ end trace 0000000000000000 ]--- [ 289.306955][T11797] RIP: 0010:vma_merge_existing_range+0x25a/0x1c80 [ 289.309002][T11797] Code: ff 4d 85 f6 0f 84 56 05 00 00 e8 71 0b ab ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 08 16 00 00 <4d> 8b 3e 48 8b 34 24 4c 89 ff e8 f7 05 ab ff 48 8b 04 24 49 39 c7 [ 289.315038][T11797] RSP: 0018:ffffc900032cf988 EFLAGS: 00010246 [ 289.316979][T11797] RAX: dffffc0000000000 RBX: ffffc900032cfae8 RCX: ffffffff82103641 [ 289.319627][T11797] RDX: 1ffffffffffffffe RSI: ffffffff8210314f RDI: 0000000000000005 [ 289.322080][T11797] RBP: ffff888040ecd900 R08: 0000000000000005 R09: 0000000000000000 [ 289.324552][T11797] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080ce2000 [ 289.327006][T11797] R13: ffffc900032cfb08 R14: fffffffffffffff4 R15: 0000000080ce2000 [ 289.329483][T11797] FS: 0000000000000000(0000) GS:ffff888097ab9000(0063) knlGS:00000000f5116b40 [ 289.332334][T11797] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 289.334438][T11797] CR2: fffffffffffffff4 CR3: 000000001227e000 CR4: 0000000000352ef0 [ 289.337012][T11797] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.339610][T11797] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.342269][T11797] Kernel panic - not syncing: Fatal exception [ 289.344768][T11797] Kernel Offset: disabled [ 289.346130][T11797] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:30:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b53f880 RCX=ffffffff81af2589 RDX=ffff888022212440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900215a7930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff9ad082a8 R12=ffffed10056a7f11 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b23b180 RIP=ffffffff81bb3682 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3e20a6 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006d14ac RBX=0000000000000001 RCX=ffffffff8b702439 RDX=ffffed10056665be RSI=ffffffff8bf45080 RDI=ffffffff8191a751 RBP=ffffed1003b55488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000001 R12=0000000000000001 R13=ffff88801daaa440 R14=ffffffff90868010 R15=0000000000000000 RIP=ffffffff8b700ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c326f7e CR3=0000000073198000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b541460 RCX=ffffffff81af2589 RDX=ffff888024592440 RSI=ffffffff81af2563 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003b07720 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=ffffed10056a828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180 RIP=ffffffff81af2565 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c63d4 CR3=00000000742da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854bca60 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc900032cf120 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3638316520444750 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c25ba R15=dffffc0000000000 RIP=ffffffff854bca87 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ab9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffff4 CR3=000000001227e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000810002 Opmask01=0000000000020001 Opmask02=0000000000000010 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36cf16c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a20273520303020 302e20303020000a 6e65636f61702067 69206e6563206200 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000