last executing test programs: 45.554556216s ago: executing program 2 (id=132): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000111000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 45.484515806s ago: executing program 2 (id=133): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000000030000380"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 45.484031377s ago: executing program 2 (id=134): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000012}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x0, 0x404, 0x3, 0x40000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000180)={'stack ', ':\x00~\x1c-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5g\xcc\xd5\v-\xc7g\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x93\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xab \x00\x00\x00F\xd8\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x834}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\x9a\x90\xf3-\xedkt\xed\x10\a\x00\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x00'/173}, 0xb3) readv(0xffffffffffffffff, &(0x7f0000000380), 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2}, 0x56) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0xf4) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x208000) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r7) 45.374737414s ago: executing program 2 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 45.320841901s ago: executing program 2 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0x1}, 0xffffff88) (rerun: 64) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0x9}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300", 0x1f) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x4000000) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x401}) 45.082457157s ago: executing program 2 (id=143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000000030000380"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 45.013061217s ago: executing program 32 (id=143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000000030000380"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.501820075s ago: executing program 1 (id=446): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x6000) (fail_nth: 48) socket(0x10, 0x803, 0x0) 2.17693513s ago: executing program 1 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b31, &(0x7f0000000480)={0x0, 0x0, 0x1}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x98f0a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffffc, 0x0, {}, 0x0, 0x1, 0xfc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x90004, 0x8, 0x0, 'queue1\x00', 0x10000000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)) tkill(r5, 0x7) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, 0x0, 0x0) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x28, 0x2, 0x28, 0x0) 1.936563241s ago: executing program 3 (id=450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001fff5000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 1.9360823s ago: executing program 3 (id=451): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x50, 0x4, 0x0, 0x20000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffffffff, 0x2, 0x80, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x5, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call]}, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x8002, 0x0) 1.816446795s ago: executing program 0 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\n\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000006000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r3}, 0x10) getpid() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1f7220979351aa7c7b477796b726a5672a3d63cb482e573220a58d2359bebf04e4f9d08fbfd20d1ca3c50d1ad11587836b9c41c8355c42c9db848d037aa0b85775031ede2eba644b6c9bb96e433c60fc1ad55d21673b10087d5731cc399435b8a9abdb66d9fe8c7dec570546b7b2834e50b71ce93d8d54c94ce54f1c128c28f0bf4667f056c1039cfe2af9dd0d5feceeb4ae452d61c79b5a0e9ae893b9dc26e97189a018e89d94b3785f5f13a40f0b7b4f9c04b37695d1f12add67a1c80af773c3a0d64834726ee7f0b5b2314613a6710896292cd86d5d568c6781c5fa145ac5d031b0f319dddf04310eb0056b38511b70c", @ANYRES8=r4, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x1, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) 1.816090618s ago: executing program 3 (id=453): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.726085576s ago: executing program 3 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000c00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3) (async, rerun: 32) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r4) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) syz_usb_disconnect(r5) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b00)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000d040000007014961cf8361e24ee4613f16c48215402009d538013142f43ced1c28b3376dda9fcee2b73feabaa94e881eb94c8cc1d97b904de9c5b9bc0728b77126b7a9425050ee0e3e2a8fbe4fc2f02ae500fc288b899e14eb12e7d225dc5af485e0abc8269cf7506507bca2d7abd80cfee05fc82f7fe1e45618918468a428b209f0eefa8c650278d5725a42a6984e1beef9bd1d1b1d73dc021837151adf2dd5bf03aea31e608c43a77b640df263413a19bc09a62c41837cdf81fdd072456aa14000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async, rerun: 64) ioctl$EVIOCRMFF(r5, 0x4004550d, 0x0) (rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x802, &(0x7f0000000340)=ANY=[@ANYBLOB='indo64,grpquota,grpquota_block_hardlimit=7,usrquota,huge=advise,inode32,grpquota_block_hardlimit=te,grpquota,huge=never,grpquota_block_hardlimit=,dont_hash,fowner<', @ANYRESDEC=r9, @ANYBLOB=',rw$subj_role=\x00,se\x00\x00\x00\x00\x00\x00\x00\x00']) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) (async) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r10, 0x0, 0x0) (async) r11 = dup(0xffffffffffffffff) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000480)=0x4000000) (rerun: 32) 1.168302164s ago: executing program 1 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) keyctl$read(0xb, r2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2f, &(0x7f0000000380), &(0x7f00000003c0)=0xc) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29, 0x2, 0x0, 0x0, 0x0, [@private1]}]}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000100000008000000010000000000000000000000000000000000000000000000000000000000000001"]) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000002480)={{0x0, 0x0, 0x80, {0x4}}, "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", "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"}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="77ba00000000000000001f000000080001"], 0x48}}, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r11, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0xfffffff8, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x8, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0x2, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x201, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x3ff, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 983.882046ms ago: executing program 1 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = io_uring_setup(0x428a, &(0x7f0000000240)={0x0, 0x955e, 0x0, 0x0, 0x0, 0x0, r3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r6 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x4}, 0x8) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x3fb0}, [@generic={0xe, 0x5, 0xb, 0x1, 0x7fffffff}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xa5, &(0x7f0000001540)=""/165, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0xc, 0x2e, 0x9}, 0x10, 0x7a8f, r6, 0x2, &(0x7f00000014c0)=[r6, r6, r5, r6, r6, r6], &(0x7f0000001500)=[{0x5, 0x2, 0x8, 0x8}, {0x4, 0x3, 0xb, 0x3}], 0x10, 0x4, @void, @value}, 0x94) close(r7) 913.102326ms ago: executing program 0 (id=459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001f5ff000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 912.755652ms ago: executing program 0 (id=460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendmmsg$inet(r0, 0x0, 0x0, 0x800) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) sendmmsg$inet(r0, 0x0, 0x0, 0x800) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) 842.224554ms ago: executing program 1 (id=461): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x4, 0x2, 0x5}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) memfd_create(0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000500)={{0xc, 0x0, 0x0, 0x1509, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x0, 0x400, 'syz1\x00', 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 842.051304ms ago: executing program 0 (id=462): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a3200000000090001007379"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 841.7487ms ago: executing program 0 (id=463): io_setup(0x5, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x3, 0x1, 0x343}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {}, {0x0, 0x0, 0xddff}, {}, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r5 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfffffff7, 0x294682) io_submit(r0, 0x4, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f00000013c0)="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", 0x1000, 0x0, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000180)="c74fe4d7c27f6bba1d33362e95ffd801f41350e6a7cd0c3dd93327de3a675da8940e8f8bd1e000e9ebd6bc90248b7dcdc101da1b46deebd3c7e36872bbfe0c1b538db4fe51af3db331e90e3aa67ef927fdd98b6b3ce1ea26087db654bcd6201bbd88d6266b8762db0fe3fbf63a2b76dd92b8c378987915b0ba6b2d1bd4997e1b", 0x80, 0xffffffff, 0x0, 0x0, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xb655, r1, &(0x7f0000000280)="3d5925e555d9cf4438687e403b45a3ec970129f9a223b9ba31189fe018d920db3a523c16daf368be83c945316896915a11427ab4f91a583054d5bd42ab323f21", 0x40, 0x714, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000000400)="e2f90e32e7223243553af4609334f22ddbe8bf76e1edec28afa066318816ea7da7e1e7341789de79b58e1e909e36fbf9d16ba44605165531409669643e15af1f9d134febe9e0ccfaa766fa8b8343b5332ee3f60492cae37cc9e3eaaef2440ec3f1474cdbde7c875586b9b3f732c00f07ca5e78da3f7410ba979ca6abdb252fd96cf80942a5e1506d0ba301cb8904f5c1631e0ca9288a4c5e857b3e36d9573805b5f024da9fd25ebda71d382d83371f1a8e94a8102eed17d1beec4a1069faa88e18879abf45632d53ee5f79b670fe1dae5ecab88591e21d6ac751c5fa2a1511bd23f0f84fdf6515fe748a", 0xea, 0x401, 0x0, 0x2, r3}]) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x41}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r6 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8, r6, 0x0}]) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0x27000391) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) 774.533036ms ago: executing program 3 (id=464): setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001}) r0 = io_uring_setup(0x5c01, &(0x7f0000000240)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) setrlimit(0xc, &(0x7f0000000000)={0x1, 0x3}) r2 = memfd_create(&(0x7f0000000080)='h$}\'.&\x00', 0x5) ftruncate(r2, 0x40) 774.153157ms ago: executing program 3 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000cc0)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x1c, 0x5f, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000006200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@struct={0x5, 0x5, 0x0, 0x4, 0x1, 0xc15e, [{0xc, 0x5, 0x5804}, {0xe, 0x4, 0x9}, {0xa, 0x3, 0x9}, {0x6, 0x4, 0xe}, {0xa, 0x5, 0x7}]}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, &(0x7f00000003c0)=""/143, 0x66, 0x8f, 0x1, 0x200, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5, 0x7f, 0x2, 0x8180, 0xffffffffffffffff, 0x0, '\x00', r2, r3, 0x0, 0x2, 0x2, 0xf, @value=r4, @void, @void, @value}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtaction={0x74, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0xd9, 0x3, 0x9, 0xea9}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4420}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000120005005c0012800900010069706970000000004c000280050005000600000005000a0001000000080003"], 0x7c}}, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a6100000001064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0xfffffffe}}, 0x50) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 695.806372ms ago: executing program 0 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b31, &(0x7f0000000480)={0x0, 0x0, 0x1}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x98f0a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xfffffffc, 0x0, {}, 0x0, 0x1, 0xfc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x90004, 0x8, 0x0, 'queue1\x00', 0x10000000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)) tkill(r5, 0x7) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, 0x0, 0x0) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x28, 0x2, 0x28, 0x0) 476.63331ms ago: executing program 1 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\n\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000006000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r3}, 0x10) getpid() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1f7220979351aa7c7b477796b726a5672a3d63cb482e573220a58d2359bebf04e4f9d08fbfd20d1ca3c50d1ad11587836b9c41c8355c42c9db848d037aa0b85775031ede2eba644b6c9bb96e433c60fc1ad55d21673b10087d5731cc399435b8a9abdb66d9fe8c7dec570546b7b2834e50b71ce93d8d54c94ce54f1c128c28f0bf4667f056c1039cfe2af9dd0d5feceeb4ae452d61c79b5a0e9ae893b9dc26e97189a018e89d94b3785f5f13a40f0b7b4f9c04b37695d1f12add67a1c80af773c3a0d64834726ee7f0b5b2314613a6710896292cd86d5d568c6781c5fa145ac5d031b0f319dddf04310eb0056b38511b70c", @ANYRES8=r4, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x1, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) 229.233504ms ago: executing program 4 (id=470): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 229.02476ms ago: executing program 4 (id=471): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES8=r0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005000c000100000005000800000000000500"], 0x90}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r6, 0x0, 0x7, &(0x7f0000000280)='#group\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0xfffffffffffffff2, 0x20, 0xffffa}, 0x2f) (async) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000000000000000000e229fba896747a086b26293f80e74228bda5a28514f8d45e87"]) (async) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0x66) read(r9, 0x0, 0x0) (async) r10 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r8}], 0x1, 0x0, 0x0, 0x0) (async) close(r10) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e1752cc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ed5ff2e013d5d412046", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966309f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd27940415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b00"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, 0x0) (async) r12 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000380)={0x4, @sliced={0x5, [0x3, 0x3be, 0x424e, 0xe5b, 0x4, 0x8, 0x8, 0xb0a0, 0x1, 0x401, 0x4b, 0xfff7, 0x1, 0x1, 0x6210, 0x6, 0x0, 0x0, 0xb, 0x4, 0x9fe9, 0x2, 0x0, 0x9, 0x80, 0x8, 0x0, 0x4aa, 0x5, 0xa, 0xff, 0x81, 0x7, 0x8, 0x6, 0x406, 0x3, 0x800, 0x7f, 0x6, 0x5, 0x7, 0x7, 0x8, 0x9, 0x2, 0x3], 0x1000}}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x100) (async) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) 90.161703ms ago: executing program 4 (id=472): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a3200000000090001007379"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 89.627748ms ago: executing program 4 (id=473): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x4001, 0x3, 0x1b8, 0x0, 0x0, 0x148, 0x90, 0x148, 0x124, 0x240, 0x240, 0x124, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'lo\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x214) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x1, 0x70bd28, 0x25dbdbdf, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r2, r6, r7, 0x0, 0xd0c7, 0x80000001}) r8 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x400040, 0x0) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x23, 0x1, 0x0, 0x0, "d198618dad9ad06f2547f23b82e0d67ba463860b8a4e4b1949f28f1628b08f664f54f63ea1b7aa9dbb0b179510f72a072a33ee1a6e8875a2535c09ec644f341b"}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 197.624µs ago: executing program 4 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x80}}, 0x0) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001}) r2 = memfd_create(&(0x7f0000000080)='h$}\'.&\x00', 0x5) ftruncate(r2, 0x40) 0s ago: executing program 4 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:56383' (ED25519) to the list of known hosts. [ 34.046126][ T5873] cgroup: Unknown subsys name 'net' [ 34.194136][ T5873] cgroup: Unknown subsys name 'cpuset' [ 34.198355][ T5873] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.072025][ T5873] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.072925][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.076453][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.078573][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.081997][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.085202][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.087162][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.094406][ T5300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.096547][ T5300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.098661][ T5300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.102510][ T5300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.104920][ T5300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.107695][ T5300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.110227][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.112170][ T5300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.114542][ T5300] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.116452][ T5300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.118316][ T5300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.118892][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.119231][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.119924][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.120250][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.130294][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.132267][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.132948][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.320668][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 37.363174][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 37.414399][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 37.418834][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.421808][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.424591][ T5946] bridge_slave_0: entered allmulticast mode [ 37.427301][ T5946] bridge_slave_0: entered promiscuous mode [ 37.442876][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 37.451507][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.453716][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.456169][ T5946] bridge_slave_1: entered allmulticast mode [ 37.458663][ T5946] bridge_slave_1: entered promiscuous mode [ 37.541765][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.574461][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.576961][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.578836][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.580800][ T5949] bridge_slave_0: entered allmulticast mode [ 37.583151][ T5949] bridge_slave_0: entered promiscuous mode [ 37.616346][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.618665][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.621900][ T5943] bridge_slave_0: entered allmulticast mode [ 37.624455][ T5943] bridge_slave_0: entered promiscuous mode [ 37.627365][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.629807][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.632191][ T5949] bridge_slave_1: entered allmulticast mode [ 37.634801][ T5949] bridge_slave_1: entered promiscuous mode [ 37.654902][ T5946] team0: Port device team_slave_0 added [ 37.657391][ T5946] team0: Port device team_slave_1 added [ 37.681215][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.683043][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.685154][ T5943] bridge_slave_1: entered allmulticast mode [ 37.687724][ T5943] bridge_slave_1: entered promiscuous mode [ 37.718583][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.720467][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.722237][ T5940] bridge_slave_0: entered allmulticast mode [ 37.724134][ T5940] bridge_slave_0: entered promiscuous mode [ 37.726798][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.728626][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.735589][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.748033][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.753112][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.755713][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.757905][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.759806][ T5940] bridge_slave_1: entered allmulticast mode [ 37.761777][ T5940] bridge_slave_1: entered promiscuous mode [ 37.764350][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.766163][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.772760][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.778843][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.791220][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.811001][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.814676][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.864177][ T5943] team0: Port device team_slave_0 added [ 37.875618][ T5949] team0: Port device team_slave_0 added [ 37.879053][ T5940] team0: Port device team_slave_0 added [ 37.881582][ T5943] team0: Port device team_slave_1 added [ 37.895126][ T5949] team0: Port device team_slave_1 added [ 37.897428][ T5940] team0: Port device team_slave_1 added [ 37.924107][ T5946] hsr_slave_0: entered promiscuous mode [ 37.926171][ T5946] hsr_slave_1: entered promiscuous mode [ 37.947347][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.949296][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.956062][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.992054][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.994511][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.002605][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.011399][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.013177][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.020098][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.023456][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.025199][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.031627][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.052017][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.053828][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.060538][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.076157][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.078435][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.086754][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.108382][ T5943] hsr_slave_0: entered promiscuous mode [ 38.110382][ T5943] hsr_slave_1: entered promiscuous mode [ 38.112220][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.114340][ T5943] Cannot create hsr debugfs directory [ 38.144888][ T5949] hsr_slave_0: entered promiscuous mode [ 38.146704][ T5949] hsr_slave_1: entered promiscuous mode [ 38.148346][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.150314][ T5949] Cannot create hsr debugfs directory [ 38.163715][ T5940] hsr_slave_0: entered promiscuous mode [ 38.165596][ T5940] hsr_slave_1: entered promiscuous mode [ 38.167244][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.169318][ T5940] Cannot create hsr debugfs directory [ 38.329806][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.337701][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.341049][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.345418][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.366590][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.370666][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.376111][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.379486][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.402892][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.407312][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.411122][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.421545][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.441343][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.444735][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.448316][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.457119][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.496187][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.522807][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.530432][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.539383][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.552725][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.555205][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.561673][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.563949][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.570870][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.578400][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.587731][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.590108][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.594048][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.596469][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.608951][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.610829][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.615511][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.617713][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.628823][ T5946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.631928][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.637132][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.656991][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.665823][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.671563][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.673378][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.692169][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.693985][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.700537][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.722169][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.743144][ T5946] veth0_vlan: entered promiscuous mode [ 38.746057][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.751787][ T5946] veth1_vlan: entered promiscuous mode [ 38.771985][ T5940] veth0_vlan: entered promiscuous mode [ 38.775274][ T5946] veth0_macvtap: entered promiscuous mode [ 38.782583][ T5946] veth1_macvtap: entered promiscuous mode [ 38.787217][ T5940] veth1_vlan: entered promiscuous mode [ 38.789798][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.796002][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.804256][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.813413][ T5946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.816291][ T5946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.818485][ T5946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.821249][ T5946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.829079][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.854295][ T5940] veth0_macvtap: entered promiscuous mode [ 38.858839][ T5949] veth0_vlan: entered promiscuous mode [ 38.874452][ T5943] veth0_vlan: entered promiscuous mode [ 38.881871][ T5949] veth1_vlan: entered promiscuous mode [ 38.883770][ T5940] veth1_macvtap: entered promiscuous mode [ 38.888073][ T5943] veth1_vlan: entered promiscuous mode [ 38.893700][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.895783][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.915069][ T5949] veth0_macvtap: entered promiscuous mode [ 38.918669][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.923061][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.927507][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.933573][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.936412][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.940350][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.943349][ T5949] veth1_macvtap: entered promiscuous mode [ 38.947662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.952129][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.952548][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.954511][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959937][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.962210][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970140][ T5943] veth0_macvtap: entered promiscuous mode [ 38.978043][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.981207][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.983658][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.986339][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.989659][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.991697][ T5943] veth1_macvtap: entered promiscuous mode [ 38.997215][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.003131][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.005927][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.008598][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.011475][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.014454][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.026951][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.029984][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032213][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.034427][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.055161][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.057980][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.060924][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.063553][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.065935][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.068577][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.072014][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.078794][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.081272][ T6005] loop0: detected capacity change from 0 to 16384 [ 39.082098][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.085211][ T6005] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 39.085876][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.088425][ T6005] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 39.091793][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.091804][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.091815][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.093207][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.125434][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.129420][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132710][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.135503][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.141180][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.143804][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.163134][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.167412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.169921][ T5954] Bluetooth: hci3: command tx timeout [ 39.169926][ T5942] Bluetooth: hci1: command tx timeout [ 39.170339][ T5942] Bluetooth: hci0: command tx timeout [ 39.172197][ T5954] Bluetooth: hci2: command tx timeout [ 39.193273][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.194330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.195411][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.201544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.220658][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.222774][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.245087][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.247355][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.848541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.249502][ T6031] tipc: Started in network mode [ 40.251166][ T6031] tipc: Node identity ffffffff, cluster identity 4711 [ 40.252854][ T6031] tipc: Node number set to 4294967295 [ 40.462802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.501235][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.565191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.667580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.667772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 40.975463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 41.049514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.249931][ T5950] Bluetooth: hci2: command tx timeout [ 41.259338][ T5950] Bluetooth: hci0: command tx timeout [ 41.260824][ T5950] Bluetooth: hci3: command tx timeout [ 41.262152][ T5950] Bluetooth: hci1: command tx timeout [ 41.392377][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.041390][ T6050] input: syz0 as /devices/virtual/input/input5 [ 42.402929][ T6060] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 42.709448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.711838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.716715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.877127][ T6066] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 42.879487][ T6066] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15'. [ 43.312763][ T6072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.329257][ T5950] Bluetooth: hci2: command tx timeout [ 43.329806][ T5947] Bluetooth: hci3: command 0x040f tx timeout [ 43.330965][ T5950] Bluetooth: hci0: command tx timeout [ 43.339620][ T5950] Bluetooth: hci1: command tx timeout [ 43.354923][ T6074] x_tables: duplicate underflow at hook 3 [ 43.396859][ T6072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.501859][ T6072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.520066][ T6077] tipc: Started in network mode [ 43.521927][ T6077] tipc: Node identity ffffffff, cluster identity 4711 [ 43.523718][ T6077] tipc: Node number set to 4294967295 [ 43.558519][ T6072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.633517][ T6072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.638205][ T6072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.642953][ T6072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.649115][ T6072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.752960][ T6082] tmpfs: Unknown parameter ' nr_blockh' [ 44.373926][ T6090] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 45.215214][ T6117] Zero length message leads to an empty skb [ 45.463191][ T5950] Bluetooth: hci3: command 0x040f tx timeout [ 45.464896][ T5950] Bluetooth: hci2: command tx timeout [ 45.466314][ T5950] Bluetooth: hci1: command tx timeout [ 45.467682][ T5950] Bluetooth: hci0: command tx timeout [ 45.660219][ T6121] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(70389967073300) <= P.seqno(0) <= S.SWH(70389967073374)) and (P.ackno exists or LAWL(43122966758132) <= P.ackno(43122966758133) <= S.AWH(43122966758133), sending SYNC... [ 45.749297][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.1.27'. [ 46.086891][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.090761][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.101144][ T6134] bridge_slave_1: left allmulticast mode [ 46.102871][ T6134] bridge_slave_1: left promiscuous mode [ 46.106856][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.112756][ T6134] bridge_slave_0: left allmulticast mode [ 46.114185][ T6134] bridge_slave_0: left promiscuous mode [ 46.115675][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.332428][ T6140] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = -2, id = 0 [ 46.335507][ T6139] IPVS: stopping backup sync thread 6140 ... [ 46.550294][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'. [ 46.871493][ T6155] dvmrp0: entered allmulticast mode [ 46.941712][ T6156] dccp_close: ABORT with 1179 bytes unread [ 47.044477][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 47.075597][ T6171] FAULT_INJECTION: forcing a failure. [ 47.075597][ T6171] name failslab, interval 1, probability 0, space 0, times 1 [ 47.078816][ T6171] CPU: 3 UID: 0 PID: 6171 Comm: syz.3.41 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 47.081786][ T6171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.084495][ T6171] Call Trace: [ 47.085346][ T6171] [ 47.086094][ T6171] dump_stack_lvl+0x16c/0x1f0 [ 47.087289][ T6171] should_fail_ex+0x497/0x5b0 [ 47.088479][ T6171] should_failslab+0xc2/0x120 [ 47.089707][ T6171] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 47.091069][ T6171] ? dst_alloc+0x99/0x1a0 [ 47.092180][ T6171] dst_alloc+0x99/0x1a0 [ 47.093290][ T6171] rt_dst_alloc+0x35/0x3a0 [ 47.094437][ T6171] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 47.096027][ T6171] ? __lock_acquire+0xa45/0x3c40 [ 47.097330][ T6171] ip_route_output_key_hash+0x138/0x2e0 [ 47.098751][ T6171] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 47.100347][ T6171] ? __pfx_lock_release+0x10/0x10 [ 47.101641][ T6171] ? trace_lock_acquire+0x14e/0x1f0 [ 47.102892][ T6171] ? __pfx_mark_lock+0x10/0x10 [ 47.104069][ T6171] ip_route_output_flow+0x27/0x150 [ 47.105397][ T6171] udp_sendmsg+0x1b92/0x29b0 [ 47.106588][ T6171] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 47.108007][ T6171] ? __pfx_udp_sendmsg+0x10/0x10 [ 47.109306][ T6171] ? __pfx___might_resched+0x10/0x10 [ 47.110669][ T6171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.112188][ T6171] ? aa_sk_perm+0x2f5/0xb20 [ 47.113402][ T6171] ? __import_iovec+0x1f2/0x6d0 [ 47.114655][ T6171] ? __pfx_udp_sendmsg+0x10/0x10 [ 47.115959][ T6171] inet_sendmsg+0x105/0x140 [ 47.117151][ T6171] ____sys_sendmsg+0x907/0xb40 [ 47.118400][ T6171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.119766][ T6171] ? get_compat_msghdr+0x11b/0x170 [ 47.121097][ T6171] ? __pfx_lock_release+0x10/0x10 [ 47.122404][ T6171] ? find_held_lock+0x2d/0x110 [ 47.123655][ T6171] ___sys_sendmsg+0x135/0x1e0 [ 47.124887][ T6171] ? __up_read+0x1fb/0x760 [ 47.126045][ T6171] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.127384][ T6171] ? handle_mm_fault+0x497/0xaa0 [ 47.128683][ T6171] ? __pfx___might_resched+0x10/0x10 [ 47.130066][ T6171] ? __sys_sendmmsg+0x30e/0x420 [ 47.131345][ T6171] __sys_sendmmsg+0x2fa/0x420 [ 47.132566][ T6171] ? __pfx___sys_sendmmsg+0x10/0x10 [ 47.133904][ T6171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 47.135447][ T6171] ? fput+0x67/0x440 [ 47.136431][ T6171] ? ksys_write+0x1ba/0x250 [ 47.137566][ T6171] ? __pfx_ksys_write+0x10/0x10 [ 47.138844][ T6171] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 47.140320][ T6171] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 47.142023][ T6171] __do_fast_syscall_32+0x73/0x120 [ 47.143323][ T6171] do_fast_syscall_32+0x32/0x80 [ 47.144552][ T6171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.146147][ T6171] RIP: 0023:0xf739e579 [ 47.147197][ T6171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 47.152657][ T6171] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 47.155153][ T6171] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 47.157781][ T6171] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 47.160132][ T6171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.162127][ T6171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 47.164105][ T6171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.166085][ T6171] [ 47.208105][ T40] audit: type=1326 audit(1733087417.522:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.44" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x0 [ 47.259397][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.419441][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 47.423807][ T25] usb 7-1: config 0 has no interfaces? [ 47.425338][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 47.428605][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.435071][ T25] usb 7-1: config 0 descriptor?? [ 47.489316][ T5954] Bluetooth: hci3: command 0x040f tx timeout [ 47.593383][ T6201] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 47.595785][ T6201] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 47.650109][ T30] usb 7-1: USB disconnect, device number 2 [ 48.066208][ T6213] tipc: Started in network mode [ 48.067491][ T6213] tipc: Node identity ffffffff, cluster identity 4711 [ 48.069954][ T6213] tipc: Node number set to 4294967295 [ 48.213769][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 48.266188][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.268037][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.273605][ T6223] netlink: 56 bytes leftover after parsing attributes in process `syz.2.54'. [ 48.277263][ T6225] bridge_slave_1: left allmulticast mode [ 48.278862][ T6225] bridge_slave_1: left promiscuous mode [ 48.280683][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.284500][ T6225] bridge_slave_0: left allmulticast mode [ 48.286037][ T6225] bridge_slave_0: left promiscuous mode [ 48.287656][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.509653][ T6232] dvmrp0: entered allmulticast mode [ 49.390721][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.59'. [ 49.619295][ T5954] Bluetooth: hci3: command 0x040f tx timeout [ 49.792255][ T6262] netlink: 72 bytes leftover after parsing attributes in process `syz.3.63'. [ 49.833664][ T6264] IPVS: Unknown mcast interface: veth1_virt_wifi [ 50.321900][ T6271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.66'. [ 50.738470][ T6278] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.631434][ T6304] netlink: 72 bytes leftover after parsing attributes in process `syz.3.72'. [ 51.875501][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.73'. [ 52.249635][ T6320] tmpfs: Unknown parameter ' nr_blockh' [ 52.520826][ T6334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.561412][ T6336] x_tables: duplicate underflow at hook 3 [ 52.623760][ T6334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.722372][ T6334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.769765][ T6334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.832973][ T6334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.838623][ T6334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.844363][ T6334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.849898][ T6334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.152867][ T6338] netlink: 72 bytes leftover after parsing attributes in process `syz.2.82'. [ 53.541450][ T6348] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 53.547538][ T6352] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.214412][ T6365] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 54.216464][ T6365] netlink: 55 bytes leftover after parsing attributes in process `syz.0.86'. [ 54.720480][ T6375] input: syz0 as /devices/virtual/input/input6 [ 55.312733][ T6380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.92'. [ 57.616002][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.102'. [ 58.158164][ T6434] input: syz0 as /devices/virtual/input/input7 [ 58.897248][ T6446] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 60.639253][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.112'. [ 61.564742][ T6468] loop0: detected capacity change from 0 to 16384 [ 61.568260][ T6468] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 61.570939][ T6468] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 61.796097][ T6481] FAULT_INJECTION: forcing a failure. [ 61.796097][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 61.799017][ T6481] CPU: 2 UID: 0 PID: 6481 Comm: syz.3.120 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 61.801382][ T6481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.803848][ T6481] Call Trace: [ 61.804647][ T6481] [ 61.805344][ T6481] dump_stack_lvl+0x16c/0x1f0 [ 61.806455][ T6481] should_fail_ex+0x497/0x5b0 [ 61.807571][ T6481] should_failslab+0xc2/0x120 [ 61.808699][ T6481] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 61.809966][ T6481] ? dst_alloc+0x99/0x1a0 [ 61.811016][ T6481] dst_alloc+0x99/0x1a0 [ 61.812008][ T6481] rt_dst_alloc+0x35/0x3a0 [ 61.813077][ T6481] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 61.814481][ T6481] ? __lock_acquire+0xa45/0x3c40 [ 61.815655][ T6481] ip_route_output_key_hash+0x138/0x2e0 [ 61.816933][ T6481] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 61.818311][ T6481] ? __pfx_lock_release+0x10/0x10 [ 61.819496][ T6481] ? trace_lock_acquire+0x14e/0x1f0 [ 61.820723][ T6481] ? __pfx_mark_lock+0x10/0x10 [ 61.821854][ T6481] ip_route_output_flow+0x27/0x150 [ 61.823056][ T6481] udp_sendmsg+0x1b92/0x29b0 [ 61.824154][ T6481] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.825459][ T6481] ? __pfx_udp_sendmsg+0x10/0x10 [ 61.826629][ T6481] ? __pfx___might_resched+0x10/0x10 [ 61.827866][ T6481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.829257][ T6481] ? aa_sk_perm+0x2f5/0xb20 [ 61.830318][ T6481] ? __import_iovec+0x1f2/0x6d0 [ 61.831469][ T6481] ? __pfx_udp_sendmsg+0x10/0x10 [ 61.832650][ T6481] inet_sendmsg+0x105/0x140 [ 61.833725][ T6481] ____sys_sendmsg+0x907/0xb40 [ 61.834868][ T6481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.836119][ T6481] ? get_compat_msghdr+0x11b/0x170 [ 61.837325][ T6481] ? __pfx_lock_release+0x10/0x10 [ 61.838513][ T6481] ? find_held_lock+0x2d/0x110 [ 61.839648][ T6481] ___sys_sendmsg+0x135/0x1e0 [ 61.840765][ T6481] ? __up_read+0x1fb/0x760 [ 61.841821][ T6481] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.843047][ T6481] ? handle_mm_fault+0x497/0xaa0 [ 61.844266][ T6481] ? __pfx___might_resched+0x10/0x10 [ 61.845516][ T6481] ? __sys_sendmmsg+0x30e/0x420 [ 61.846668][ T6481] __sys_sendmmsg+0x2fa/0x420 [ 61.847796][ T6481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.849087][ T6481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.850497][ T6481] ? fput+0x67/0x440 [ 61.851438][ T6481] ? ksys_write+0x1ba/0x250 [ 61.852530][ T6481] ? __pfx_ksys_write+0x10/0x10 [ 61.853710][ T6481] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 61.855057][ T6481] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 61.856604][ T6481] __do_fast_syscall_32+0x73/0x120 [ 61.857807][ T6481] do_fast_syscall_32+0x32/0x80 [ 61.858962][ T6481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.860454][ T6481] RIP: 0023:0xf739e579 [ 61.861420][ T6481] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.865883][ T6481] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 61.867830][ T6481] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 61.869684][ T6481] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 61.871539][ T6481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.873388][ T6481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.875259][ T6481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.877154][ T6481] [ 62.048604][ T40] audit: type=1326 audit(1733087432.362:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.055223][ T40] audit: type=1326 audit(1733087432.362:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.060426][ T40] audit: type=1326 audit(1733087432.372:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.065356][ T40] audit: type=1326 audit(1733087432.372:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.070717][ T40] audit: type=1326 audit(1733087432.372:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.075685][ T40] audit: type=1326 audit(1733087432.372:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.080651][ T40] audit: type=1326 audit(1733087432.372:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.085618][ T40] audit: type=1326 audit(1733087432.372:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.091175][ T40] audit: type=1326 audit(1733087432.372:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.097167][ T40] audit: type=1326 audit(1733087432.372:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 62.983279][ T6514] FAULT_INJECTION: forcing a failure. [ 62.983279][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 62.986422][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.3.129 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 62.988859][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.991380][ T6514] Call Trace: [ 62.992178][ T6514] [ 62.992907][ T6514] dump_stack_lvl+0x16c/0x1f0 [ 62.994036][ T6514] should_fail_ex+0x497/0x5b0 [ 62.995174][ T6514] should_failslab+0xc2/0x120 [ 62.996292][ T6514] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 62.997601][ T6514] ? dst_alloc+0x99/0x1a0 [ 62.998632][ T6514] dst_alloc+0x99/0x1a0 [ 62.999624][ T6514] rt_dst_alloc+0x35/0x3a0 [ 63.000700][ T6514] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 63.002113][ T6514] ? __lock_acquire+0xa45/0x3c40 [ 63.003291][ T6514] ip_route_output_key_hash+0x138/0x2e0 [ 63.004616][ T6514] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 63.006051][ T6514] ? __pfx_lock_release+0x10/0x10 [ 63.007239][ T6514] ? trace_lock_acquire+0x14e/0x1f0 [ 63.008482][ T6514] ? __pfx_mark_lock+0x10/0x10 [ 63.009615][ T6514] ip_route_output_flow+0x27/0x150 [ 63.010821][ T6514] udp_sendmsg+0x1b92/0x29b0 [ 63.011919][ T6514] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 63.013244][ T6514] ? __pfx_udp_sendmsg+0x10/0x10 [ 63.014423][ T6514] ? __pfx___might_resched+0x10/0x10 [ 63.015678][ T6514] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.017095][ T6514] ? aa_sk_perm+0x2f5/0xb20 [ 63.018173][ T6514] ? __import_iovec+0x1f2/0x6d0 [ 63.019326][ T6514] ? __pfx_udp_sendmsg+0x10/0x10 [ 63.020531][ T6514] inet_sendmsg+0x105/0x140 [ 63.021612][ T6514] ____sys_sendmsg+0x907/0xb40 [ 63.022743][ T6514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.023990][ T6514] ? get_compat_msghdr+0x11b/0x170 [ 63.025244][ T6514] ? __pfx_lock_release+0x10/0x10 [ 63.026431][ T6514] ? find_held_lock+0x2d/0x110 [ 63.027574][ T6514] ___sys_sendmsg+0x135/0x1e0 [ 63.028706][ T6514] ? __up_read+0x1fb/0x760 [ 63.029787][ T6514] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.031014][ T6514] ? handle_mm_fault+0x497/0xaa0 [ 63.032195][ T6514] ? __pfx___might_resched+0x10/0x10 [ 63.033473][ T6514] ? __sys_sendmmsg+0x30e/0x420 [ 63.034627][ T6514] __sys_sendmmsg+0x2fa/0x420 [ 63.035748][ T6514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 63.036952][ T6514] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 63.038371][ T6514] ? fput+0x67/0x440 [ 63.039304][ T6514] ? ksys_write+0x1ba/0x250 [ 63.040369][ T6514] ? __pfx_ksys_write+0x10/0x10 [ 63.041494][ T6514] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 63.042826][ T6514] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 63.044383][ T6514] __do_fast_syscall_32+0x73/0x120 [ 63.045602][ T6514] do_fast_syscall_32+0x32/0x80 [ 63.046779][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.048219][ T6514] RIP: 0023:0xf739e579 [ 63.049184][ T6514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.053554][ T6514] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 63.055493][ T6514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 63.057315][ T6514] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 63.059133][ T6514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.060946][ T6514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.062733][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.064592][ T6514] [ 63.065393][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.103053][ T6517] input: syz0 as /devices/virtual/input/input9 [ 63.127414][ T6518] fuse: Bad value for 'fd' [ 64.146003][ T6542] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 64.272377][ T11] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.336067][ T11] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.419941][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.423298][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.427741][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.431100][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.434194][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.436553][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.448374][ T11] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.525858][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 64.548876][ T11] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.607019][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.609725][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.612261][ T6553] bridge_slave_0: entered allmulticast mode [ 64.615296][ T6553] bridge_slave_0: entered promiscuous mode [ 64.620012][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.622037][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.624041][ T6553] bridge_slave_1: entered allmulticast mode [ 64.626101][ T6553] bridge_slave_1: entered promiscuous mode [ 64.656532][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.662326][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.712944][ T6553] team0: Port device team_slave_0 added [ 64.724095][ T6553] team0: Port device team_slave_1 added [ 64.736556][ T11] bridge_slave_1: left allmulticast mode [ 64.738603][ T11] bridge_slave_1: left promiscuous mode [ 64.741166][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.745864][ T11] bridge_slave_0: left allmulticast mode [ 64.747350][ T11] bridge_slave_0: left promiscuous mode [ 64.749106][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.023175][ T6578] FAULT_INJECTION: forcing a failure. [ 65.023175][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 65.026243][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.3.150 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 65.028675][ T6578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.031254][ T6578] Call Trace: [ 65.032113][ T6578] [ 65.032883][ T6578] dump_stack_lvl+0x16c/0x1f0 [ 65.034131][ T6578] should_fail_ex+0x497/0x5b0 [ 65.035308][ T6578] ? fs_reclaim_acquire+0xae/0x150 [ 65.036585][ T6578] should_failslab+0xc2/0x120 [ 65.037764][ T6578] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 65.039212][ T6578] ? __alloc_skb+0x2b3/0x380 [ 65.040369][ T6578] __alloc_skb+0x2b3/0x380 [ 65.041678][ T6578] ? __pfx___alloc_skb+0x10/0x10 [ 65.042920][ T6578] ? xfrm_tmpl_resolve_one+0x288/0xa70 [ 65.044455][ T6578] ? xfrm_tmpl_resolve_one+0x3c0/0xa70 [ 65.045808][ T6578] alloc_skb_with_frags+0xe4/0x850 [ 65.047132][ T6578] ? __pfx_xfrm_tmpl_resolve_one+0x10/0x10 [ 65.048658][ T6578] sock_alloc_send_pskb+0x7f1/0x980 [ 65.050018][ T6578] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 65.051431][ T6578] ? xfrm_tmpl_resolve+0x325/0x3f0 [ 65.052712][ T6578] ? __pfx_xfrm_tmpl_resolve+0x10/0x10 [ 65.054032][ T6578] ? find_held_lock+0x2d/0x110 [ 65.055254][ T6578] __ip_append_data+0x19c7/0x4160 [ 65.056518][ T6578] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 65.057918][ T6578] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 65.059603][ T6578] ? __pfx___ip_append_data+0x10/0x10 [ 65.060976][ T6578] ? find_held_lock+0x2d/0x110 [ 65.062309][ T6578] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 65.064002][ T6578] ip_make_skb+0x27d/0x300 [ 65.065234][ T6578] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 65.066699][ T6578] ? __pfx_ip_make_skb+0x10/0x10 [ 65.067935][ T6578] ? __pfx_lock_release+0x10/0x10 [ 65.069199][ T6578] ? udp_sendmsg+0x185d/0x29b0 [ 65.070406][ T6578] udp_sendmsg+0x185d/0x29b0 [ 65.071596][ T6578] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 65.073022][ T6578] ? __pfx_udp_sendmsg+0x10/0x10 [ 65.074295][ T6578] ? __pfx___might_resched+0x10/0x10 [ 65.075670][ T6578] ? aa_sk_perm+0x2f5/0xb20 [ 65.076902][ T6578] ? __import_iovec+0x1f2/0x6d0 [ 65.078177][ T6578] ? __pfx_udp_sendmsg+0x10/0x10 [ 65.079432][ T6578] inet_sendmsg+0x105/0x140 [ 65.080581][ T6578] ____sys_sendmsg+0x907/0xb40 [ 65.081796][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.083168][ T6578] ? get_compat_msghdr+0x11b/0x170 [ 65.084460][ T6578] ? __pfx_lock_release+0x10/0x10 [ 65.085701][ T6578] ? find_held_lock+0x2d/0x110 [ 65.086921][ T6578] ___sys_sendmsg+0x135/0x1e0 [ 65.088208][ T6578] ? __up_read+0x1fb/0x760 [ 65.089398][ T6578] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.090700][ T6578] ? handle_mm_fault+0x497/0xaa0 [ 65.091986][ T6578] ? __pfx___might_resched+0x10/0x10 [ 65.093344][ T6578] ? __sys_sendmmsg+0x30e/0x420 [ 65.094610][ T6578] __sys_sendmmsg+0x2fa/0x420 [ 65.095809][ T6578] ? __pfx___sys_sendmmsg+0x10/0x10 [ 65.097148][ T6578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.098650][ T6578] ? fput+0x67/0x440 [ 65.099649][ T6578] ? ksys_write+0x1ba/0x250 [ 65.100785][ T6578] ? __pfx_ksys_write+0x10/0x10 [ 65.102016][ T6578] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 65.103418][ T6578] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 65.105052][ T6578] __do_fast_syscall_32+0x73/0x120 [ 65.106329][ T6578] do_fast_syscall_32+0x32/0x80 [ 65.107562][ T6578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.109131][ T6578] RIP: 0023:0xf739e579 [ 65.110126][ T6578] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.114889][ T6578] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 65.116952][ T6578] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 65.118860][ T6578] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 65.120812][ T6578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.122773][ T6578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.124706][ T6578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.126663][ T6578] [ 65.127546][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.175935][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.185501][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.192595][ T11] bond0 (unregistering): Released all slaves [ 65.234228][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.242726][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.254643][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.258726][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.265308][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.275677][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.278713][ T11] tipc: Left network mode [ 65.334469][ T6553] hsr_slave_0: entered promiscuous mode [ 65.339337][ T6553] hsr_slave_1: entered promiscuous mode [ 65.341631][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.343557][ T6553] Cannot create hsr debugfs directory [ 65.485798][ T6553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.504203][ T6553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.511822][ T6553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.528433][ T11] hsr_slave_0: left promiscuous mode [ 65.532522][ T11] hsr_slave_1: left promiscuous mode [ 65.553470][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.555445][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.558205][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.560333][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.575768][ T11] veth1_macvtap: left promiscuous mode [ 65.577360][ T11] veth0_macvtap: left promiscuous mode [ 65.579132][ T11] veth1_vlan: left promiscuous mode [ 65.580856][ T11] veth0_vlan: left promiscuous mode [ 65.845710][ T6602] random: crng reseeded on system resumption [ 66.151586][ T11] team0 (unregistering): Port device team_slave_1 removed [ 66.212340][ T11] team0 (unregistering): Port device team_slave_0 removed [ 66.449804][ T5954] Bluetooth: hci2: command tx timeout [ 66.486530][ T6609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 66.488353][ T6609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.494575][ T6609] vhci_hcd vhci_hcd.0: Device attached [ 66.657510][ T6553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.689317][ T9] vhci_hcd: vhci_device speed not set [ 66.749329][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 66.760003][ T5982] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 66.821488][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.833898][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.840287][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.842174][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.846995][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.848830][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.953663][ T6629] nbd: must specify a device to reconfigure [ 66.960991][ T6629] binder: BINDER_SET_CONTEXT_MGR already set [ 66.963347][ T6629] binder: 6627:6629 ioctl 4018620d 20000200 returned -16 [ 66.978104][ T6635] warning: `syz.0.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.982563][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.984368][ T6635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.986249][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.987864][ T6635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.991706][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.992020][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.993328][ T6635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.997738][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.999362][ T6635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 67.001481][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 67.003090][ T6635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 67.078689][ T6610] vhci_hcd: connection reset by peer [ 67.082700][ T1135] vhci_hcd: stop threads [ 67.084251][ T1135] vhci_hcd: release socket [ 67.085928][ T1135] vhci_hcd: disconnect device [ 67.132416][ T6553] veth0_vlan: entered promiscuous mode [ 67.136373][ T6553] veth1_vlan: entered promiscuous mode [ 67.147525][ T6553] veth0_macvtap: entered promiscuous mode [ 67.150699][ T6553] veth1_macvtap: entered promiscuous mode [ 67.155852][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.158548][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.161523][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.164180][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.166707][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.169447][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.172384][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.178279][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.181401][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.183813][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.186430][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.188842][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.192317][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.195333][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.199371][ T6553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.201623][ T6553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.203915][ T6553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.206226][ T6553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.234103][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.236178][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.246420][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.250383][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.289347][ T6661] capability: warning: `syz.4.144' uses deprecated v2 capabilities in a way that may be insecure [ 68.529348][ T5954] Bluetooth: hci2: command tx timeout [ 70.609442][ T5954] Bluetooth: hci2: command tx timeout [ 70.693102][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.694877][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.879402][ T9] vhci_hcd: vhci_device speed not set [ 72.689462][ T5954] Bluetooth: hci2: command tx timeout [ 75.815516][ T62] cfg80211: failed to load regulatory.db [ 77.698627][ T6746] FAULT_INJECTION: forcing a failure. [ 77.698627][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.703292][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.3.168 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 77.706808][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.710723][ T6746] Call Trace: [ 77.711899][ T6746] [ 77.712950][ T6746] dump_stack_lvl+0x16c/0x1f0 [ 77.714625][ T6746] should_fail_ex+0x497/0x5b0 [ 77.716287][ T6746] _copy_from_user+0x2e/0xd0 [ 77.717909][ T6746] get_compat_msghdr+0xa8/0x170 [ 77.719605][ T6746] ? __pfx_get_compat_msghdr+0x10/0x10 [ 77.721536][ T6746] ? __pfx_lock_release+0x10/0x10 [ 77.723292][ T6746] ? find_held_lock+0x2d/0x110 [ 77.724995][ T6746] ___sys_sendmsg+0x1b0/0x1e0 [ 77.726637][ T6746] ? __up_read+0x1fb/0x760 [ 77.728216][ T6746] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.730053][ T6746] ? handle_mm_fault+0x497/0xaa0 [ 77.731776][ T6746] ? __pfx___might_resched+0x10/0x10 [ 77.733621][ T6746] ? __sys_sendmmsg+0x30e/0x420 [ 77.735375][ T6746] __sys_sendmmsg+0x2fa/0x420 [ 77.737051][ T6746] ? __pfx___sys_sendmmsg+0x10/0x10 [ 77.738883][ T6746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.740995][ T6746] ? fput+0x67/0x440 [ 77.742378][ T6746] ? ksys_write+0x1ba/0x250 [ 77.743971][ T6746] ? __pfx_ksys_write+0x10/0x10 [ 77.745682][ T6746] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 77.747629][ T6746] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 77.749519][ T6746] __do_fast_syscall_32+0x73/0x120 [ 77.750860][ T6746] do_fast_syscall_32+0x32/0x80 [ 77.752132][ T6746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.753782][ T6746] RIP: 0023:0xf739e579 [ 77.754874][ T6746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.759874][ T6746] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 77.762057][ T6746] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 77.764111][ T6746] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 77.766136][ T6746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.768188][ T6746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.770245][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.772252][ T6746] [ 77.980914][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.299943][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 78.309487][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.312529][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.318056][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 78.322956][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 78.328484][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.332786][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.349556][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 78.352295][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 78.355432][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 78.356920][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 78.362736][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 78.364857][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 78.826702][ T6802] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 78.828945][ T6802] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.178'. [ 78.841173][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 78.841230][ T40] audit: type=1326 audit(1733087449.162:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.864186][ T40] audit: type=1326 audit(1733087449.162:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.881267][ T40] audit: type=1326 audit(1733087449.162:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.886736][ T40] audit: type=1326 audit(1733087449.162:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.893308][ T40] audit: type=1326 audit(1733087449.172:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.899089][ T40] audit: type=1326 audit(1733087449.172:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.905092][ T40] audit: type=1326 audit(1733087449.172:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.910683][ T40] audit: type=1326 audit(1733087449.172:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.916607][ T40] audit: type=1326 audit(1733087449.172:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.922287][ T40] audit: type=1326 audit(1733087449.172:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 78.971472][ T6745] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 79.138770][ T6745] usb 5-1: device firmware changed [ 79.141903][ T35] usb 5-1: USB disconnect, device number 2 [ 79.143095][ T6745] cdc_wdm 5-1:1.0: Error autopm - -16 [ 79.195663][ T6817] FAULT_INJECTION: forcing a failure. [ 79.195663][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 79.203366][ T6817] CPU: 2 UID: 0 PID: 6817 Comm: syz.3.181 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 79.207025][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.210819][ T6817] Call Trace: [ 79.212051][ T6817] [ 79.213143][ T6817] dump_stack_lvl+0x16c/0x1f0 [ 79.214896][ T6817] should_fail_ex+0x497/0x5b0 [ 79.216574][ T6817] should_failslab+0xc2/0x120 [ 79.218270][ T6817] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 79.220184][ T6817] ? dst_alloc+0x99/0x1a0 [ 79.221471][ T6817] dst_alloc+0x99/0x1a0 [ 79.222949][ T6817] rt_dst_alloc+0x35/0x3a0 [ 79.224574][ T6817] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 79.226715][ T6817] ? __lock_acquire+0xa45/0x3c40 [ 79.228517][ T6817] ip_route_output_key_hash+0x138/0x2e0 [ 79.230532][ T6817] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 79.232721][ T6817] ? __pfx_lock_release+0x10/0x10 [ 79.234547][ T6817] ? trace_lock_acquire+0x14e/0x1f0 [ 79.236449][ T6817] ? __pfx_mark_lock+0x10/0x10 [ 79.238193][ T6817] ip_route_output_flow+0x27/0x150 [ 79.239704][ T6817] udp_sendmsg+0x1b92/0x29b0 [ 79.240976][ T6817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 79.242459][ T6817] ? __pfx_udp_sendmsg+0x10/0x10 [ 79.244019][ T6817] ? __pfx___might_resched+0x10/0x10 [ 79.245896][ T6817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.247944][ T6817] ? aa_sk_perm+0x2f5/0xb20 [ 79.249573][ T6817] ? __import_iovec+0x1f2/0x6d0 [ 79.250940][ T6817] ? __pfx_udp_sendmsg+0x10/0x10 [ 79.252371][ T6817] inet_sendmsg+0x105/0x140 [ 79.253671][ T6817] ____sys_sendmsg+0x907/0xb40 [ 79.255028][ T6817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.256480][ T6817] ? get_compat_msghdr+0x11b/0x170 [ 79.257889][ T6817] ? __pfx_lock_release+0x10/0x10 [ 79.259467][ T6817] ? find_held_lock+0x2d/0x110 [ 79.261227][ T6817] ___sys_sendmsg+0x135/0x1e0 [ 79.263001][ T6817] ? __up_read+0x1fb/0x760 [ 79.264560][ T6817] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.265925][ T6817] ? handle_mm_fault+0x497/0xaa0 [ 79.267235][ T6817] ? __pfx___might_resched+0x10/0x10 [ 79.268621][ T6817] ? __sys_sendmmsg+0x30e/0x420 [ 79.269902][ T6817] __sys_sendmmsg+0x2fa/0x420 [ 79.271140][ T6817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.272511][ T6817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.274025][ T6817] ? fput+0x67/0x440 [ 79.275082][ T6817] ? ksys_write+0x1ba/0x250 [ 79.276282][ T6817] ? __pfx_ksys_write+0x10/0x10 [ 79.277555][ T6817] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 79.279028][ T6817] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 79.280910][ T6817] __do_fast_syscall_32+0x73/0x120 [ 79.282465][ T6817] do_fast_syscall_32+0x32/0x80 [ 79.283737][ T6817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.285435][ T6817] RIP: 0023:0xf739e579 [ 79.286522][ T6817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.291645][ T6817] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 79.293849][ T6817] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 79.295938][ T6817] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 79.298040][ T6817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.299418][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.300105][ T6817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.300114][ T6817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.300126][ T6817] [ 79.300176][ C2] vkms_vblank_simulate: vblank timer overrun [ 79.337438][ T6822] 9pnet_fd: Insufficient options for proto=fd [ 79.519395][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 79.521869][ T35] usb 5-1: config index 0 descriptor too short (expected 92, got 18) [ 79.523951][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.526258][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.530503][ T35] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.533338][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.551987][ T35] hub 5-1:1.0: bad descriptor, ignoring hub [ 79.553553][ T35] hub 5-1:1.0: probe with driver hub failed with error -5 [ 79.555601][ T35] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 79.989710][ T5982] usb 5-1: USB disconnect, device number 3 [ 80.500320][ T6877] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.760633][ T6881] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.762745][ T6881] overlayfs: failed to set xattr on upper [ 80.764298][ T6881] overlayfs: ...falling back to redirect_dir=nofollow. [ 80.766078][ T6881] overlayfs: ...falling back to index=off. [ 80.767614][ T6881] overlayfs: ...falling back to uuid=null. [ 80.784754][ T6881] evm: overlay not supported [ 80.972592][ T6890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.193'. [ 81.315521][ T6898] ucma_write: process 177 (syz.3.195) changed security contexts after opening file descriptor, this is not allowed. [ 81.440282][ T6906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 81.442078][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.444594][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 81.448638][ T6906] netlink: 120 bytes leftover after parsing attributes in process `syz.0.196'. [ 81.689266][ T25] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 82.053423][ T6907] vhci_hcd: connection closed [ 82.056534][ T1137] vhci_hcd: stop threads [ 82.069322][ T1137] vhci_hcd: release socket [ 82.070913][ T1137] vhci_hcd: disconnect device [ 82.202480][ T6923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.362727][ T6935] Bluetooth: MGMT ver 1.23 [ 82.666744][ T6948] ata1.00: invalid command format 189 [ 84.369899][ T5954] Bluetooth: hci0: command tx timeout [ 84.564696][ T7021] tmpfs: Unknown parameter '0x0000000000000000' [ 84.609793][ T7024] overlay: Unknown parameter 'fscontext' [ 84.685764][ T7026] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.687636][ T7026] overlayfs: failed to set xattr on upper [ 84.689270][ T7026] overlayfs: ...falling back to redirect_dir=nofollow. [ 84.691079][ T7026] overlayfs: ...falling back to index=off. [ 84.692629][ T7026] overlayfs: ...falling back to uuid=null. [ 84.920071][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 84.920085][ T40] audit: type=1326 audit(1733087455.242:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.922366][ T7031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.929082][ T40] audit: type=1326 audit(1733087455.242:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.936737][ T40] audit: type=1326 audit(1733087455.242:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.947604][ T40] audit: type=1326 audit(1733087455.252:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.959442][ T40] audit: type=1326 audit(1733087455.262:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.971537][ T40] audit: type=1326 audit(1733087455.262:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.977095][ T40] audit: type=1326 audit(1733087455.262:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.987534][ T40] audit: type=1326 audit(1733087455.272:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 84.995807][ T40] audit: type=1326 audit(1733087455.272:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 85.006268][ T40] audit: type=1326 audit(1733087455.272:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 86.057486][ T5981] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 86.171276][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 86.203214][ T5981] usb 8-1: Using ep0 maxpacket: 8 [ 86.205756][ T5981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.208345][ T5981] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.210606][ T5981] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 86.213692][ T5981] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 86.217089][ T5981] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 86.219622][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.227037][ T5981] hub 8-1:1.0: bad descriptor, ignoring hub [ 86.228632][ T5981] hub 8-1:1.0: probe with driver hub failed with error -5 [ 86.231084][ T5981] cdc_wdm 8-1:1.0: skipping garbage [ 86.232561][ T5981] cdc_wdm 8-1:1.0: skipping garbage [ 86.234682][ T5981] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 86.236470][ T5981] cdc_wdm 8-1:1.0: Unknown control protocol [ 86.307784][ T7070] fuse: Unknown parameter 'þ' [ 86.757528][ T5982] usb 8-1: USB disconnect, device number 2 [ 86.804590][ T25] vhci_hcd: vhci_device speed not set [ 86.951751][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.009036][ T7095] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 87.013274][ T7094] IPVS: stopping master sync thread 7095 ... [ 87.107048][ T5981] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 87.261214][ T5981] usb 8-1: Using ep0 maxpacket: 8 [ 87.264143][ T5981] usb 8-1: config index 0 descriptor too short (expected 92, got 18) [ 87.266260][ T5981] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.268535][ T5981] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.271871][ T5981] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.274315][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.279173][ T5981] hub 8-1:1.0: bad descriptor, ignoring hub [ 87.282158][ T5981] hub 8-1:1.0: probe with driver hub failed with error -5 [ 87.312484][ T5981] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 87.576658][ T7107] overlayfs: failed to resolve './file0': -2 [ 87.688866][ T5983] usb 8-1: USB disconnect, device number 3 [ 87.956784][ T7126] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 88.109610][ C0] net_ratelimit: 1052 callbacks suppressed [ 88.109622][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 88.318548][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 88.743836][ T7180] kAFS: unable to lookup cell ' [ 88.743836][ T7180] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 88.743836][ T7180] ' [ 89.695539][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 90.119841][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 90.119852][ T40] audit: type=1326 audit(1733087460.566:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.132510][ T40] audit: type=1326 audit(1733087460.566:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.141246][ T40] audit: type=1326 audit(1733087460.576:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.154250][ T40] audit: type=1326 audit(1733087460.576:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.167229][ T40] audit: type=1326 audit(1733087460.576:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.174782][ T40] audit: type=1326 audit(1733087460.576:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.180332][ T40] audit: type=1326 audit(1733087460.576:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.185979][ T40] audit: type=1326 audit(1733087460.576:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.193325][ T40] audit: type=1326 audit(1733087460.576:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.199265][ T40] audit: type=1326 audit(1733087460.576:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 90.787468][ T7302] veth0_to_team: entered promiscuous mode [ 90.794762][ T7302] veth0_to_team: entered allmulticast mode [ 91.421446][ T7340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.149228][ T7385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.143069][ T7429] netlink: 'syz.1.333': attribute type 21 has an invalid length. [ 93.145215][ T7429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.333'. [ 94.520200][ T7469] veth0_to_team: entered promiscuous mode [ 94.522157][ T7469] veth0_to_team: entered allmulticast mode [ 94.933189][ T7490] mkiss: ax0: crc mode is auto. [ 95.319476][ T1016] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 95.468509][ T1016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.473856][ T1016] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.476412][ T1016] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.479469][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.485614][ T1016] usb 6-1: config 0 descriptor?? [ 95.489660][ T1016] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.492622][ T1016] dvb-usb: bulk message failed: -22 (3/0) [ 95.499647][ T1016] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.505119][ T1016] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.508834][ T1016] usb 6-1: media controller created [ 95.513288][ T1016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.529499][ T1016] dvb-usb: bulk message failed: -22 (6/0) [ 95.531842][ T1016] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.538905][ T1016] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input10 [ 95.552061][ T1016] dvb-usb: schedule remote query interval to 150 msecs. [ 95.555757][ T1016] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.658398][ T7506] netlink: 'syz.0.355': attribute type 11 has an invalid length. [ 95.662856][ T7506] netlink: 140 bytes leftover after parsing attributes in process `syz.0.355'. [ 95.738893][ T1016] dvb-usb: bulk message failed: -22 (1/0) [ 95.740564][ T1016] dvb-usb: error while querying for an remote control event. [ 95.912105][ T1016] dvb-usb: bulk message failed: -22 (1/0) [ 95.913750][ T1016] dvb-usb: error while querying for an remote control event. [ 96.066966][ T1016] dvb-usb: bulk message failed: -22 (1/0) [ 96.068608][ T1016] dvb-usb: error while querying for an remote control event. [ 96.224446][ T1016] dvb-usb: bulk message failed: -22 (1/0) [ 96.225938][ T1016] dvb-usb: error while querying for an remote control event. [ 96.402242][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 96.403771][ T56] dvb-usb: error while querying for an remote control event. [ 96.544221][ T6003] usb 6-1: USB disconnect, device number 2 [ 96.566926][ T6003] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.036708][ T7519] netlink: 112 bytes leftover after parsing attributes in process `syz.3.358'. [ 97.223841][ T7525] syzkaller0: entered promiscuous mode [ 97.225435][ T7525] syzkaller0: entered allmulticast mode [ 98.392865][ T7531] bond0: entered promiscuous mode [ 98.394173][ T7531] bond_slave_0: entered promiscuous mode [ 98.395708][ T7531] bond_slave_1: entered promiscuous mode [ 98.401940][ T7532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.447324][ T7534] 9pnet_fd: Insufficient options for proto=fd [ 98.513725][ T7530] bond0: left promiscuous mode [ 98.515855][ T7530] bond_slave_0: left promiscuous mode [ 98.519810][ T7530] bond_slave_1: left promiscuous mode [ 98.701420][ T40] kauditd_printk_skb: 119 callbacks suppressed [ 98.701435][ T40] audit: type=1326 audit(1733087469.303:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.732815][ T40] audit: type=1326 audit(1733087469.313:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.746518][ T40] audit: type=1326 audit(1733087469.324:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.753935][ T40] audit: type=1326 audit(1733087469.324:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.763887][ T40] audit: type=1326 audit(1733087469.324:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.771638][ T40] audit: type=1326 audit(1733087469.334:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.778094][ T40] audit: type=1326 audit(1733087469.334:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.784153][ T40] audit: type=1326 audit(1733087469.334:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.790830][ T40] audit: type=1326 audit(1733087469.334:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 98.797835][ T40] audit: type=1326 audit(1733087469.334:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.1.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 99.550166][ T7574] binder: Unknown parameter 'smackfsroot' [ 99.762977][ T7585] bond0: entered promiscuous mode [ 99.764495][ T7585] bond_slave_0: entered promiscuous mode [ 99.766550][ T7585] bond_slave_1: entered promiscuous mode [ 99.782225][ T7585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.863446][ T7584] bond0: left promiscuous mode [ 99.864890][ T7584] bond_slave_0: left promiscuous mode [ 99.866522][ T7584] bond_slave_1: left promiscuous mode [ 100.250480][ T7600] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 100.369734][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 100.396232][ T7600] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.989438][ T7647] overlayfs: failed to resolve './file0': -2 [ 101.038391][ T7651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.390'. [ 101.046101][ T7651] netlink: 59 bytes leftover after parsing attributes in process `syz.3.390'. [ 101.537608][ T7662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.703806][ T7676] program syz.0.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.951094][ T7685] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 101.953705][ T7685] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 101.958024][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.399'. [ 102.456436][ T5981] IPVS: starting estimator thread 0... [ 102.551200][ T7700] IPVS: using max 39 ests per chain, 93600 per kthread [ 102.576694][ T7704] netlink: zone id is out of range [ 102.856357][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'. [ 102.946042][ T7713] FAULT_INJECTION: forcing a failure. [ 102.946042][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.951599][ T7713] CPU: 2 UID: 0 PID: 7713 Comm: syz.0.407 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 102.955245][ T7713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.958630][ T7713] Call Trace: [ 102.959584][ T7713] [ 102.960413][ T7713] dump_stack_lvl+0x16c/0x1f0 [ 102.961748][ T7713] should_fail_ex+0x497/0x5b0 [ 102.963067][ T7713] _copy_to_user+0x32/0xd0 [ 102.964298][ T7713] simple_read_from_buffer+0xd0/0x160 [ 102.965750][ T7713] proc_fail_nth_read+0x198/0x270 [ 102.967206][ T7713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.968771][ T7713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.970261][ T7713] vfs_read+0x1df/0xbe0 [ 102.971386][ T7713] ? __fget_files+0x1fc/0x3a0 [ 102.972725][ T7713] ? __pfx___mutex_lock+0x10/0x10 [ 102.974128][ T7713] ? __pfx_vfs_read+0x10/0x10 [ 102.975421][ T7713] ? __fget_files+0x206/0x3a0 [ 102.976891][ T7713] ksys_read+0x12b/0x250 [ 102.978259][ T7713] ? __pfx_ksys_read+0x10/0x10 [ 102.979582][ T7713] __do_fast_syscall_32+0x73/0x120 [ 102.981055][ T7713] do_fast_syscall_32+0x32/0x80 [ 102.982405][ T7713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.984111][ T7713] RIP: 0023:0xf740e579 [ 102.985263][ T7713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.991708][ T7713] RSP: 002b:00000000f50f65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 102.994674][ T7713] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 102.997476][ T7713] RDX: 000000000000000f RSI: 00000000f7400ff4 RDI: 0000000000000000 [ 103.000286][ T7713] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 103.003101][ T7713] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.005915][ T7713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.008141][ T7713] [ 103.342803][ T5954] Bluetooth: hci0: ACL packet too small [ 103.377869][ T7735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.617190][ T7749] sctp: [Deprecated]: syz.4.419 (pid 7749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.617190][ T7749] Use struct sctp_sack_info instead [ 104.622206][ T5981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 104.780518][ T5981] usb 6-1: config 0 has no interfaces? [ 104.782436][ T5981] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.785702][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.805937][ T5981] usb 6-1: config 0 descriptor?? [ 104.816393][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 104.816402][ T40] audit: type=1326 audit(1733087475.482:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.825959][ T7778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.828613][ T40] audit: type=1326 audit(1733087475.492:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.835684][ T40] audit: type=1326 audit(1733087475.502:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.843124][ T40] audit: type=1326 audit(1733087475.502:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.848963][ T40] audit: type=1326 audit(1733087475.502:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.854135][ T40] audit: type=1326 audit(1733087475.502:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.860375][ T40] audit: type=1326 audit(1733087475.502:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.865294][ T40] audit: type=1326 audit(1733087475.502:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.874705][ T40] audit: type=1326 audit(1733087475.502:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 104.885886][ T40] audit: type=1326 audit(1733087475.502:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 105.529864][ T6003] usb 6-1: USB disconnect, device number 3 [ 105.715198][ T7787] binder: 7786:7787 ioctl c0306201 20000080 returned -11 [ 105.715359][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 106.069359][ T7827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.087565][ T5954] Bluetooth: hci0: command tx timeout [ 106.390029][ T7835] 9pnet_fd: Insufficient options for proto=fd [ 106.425296][ T7837] input: syz1 as /devices/virtual/input/input12 [ 106.511879][ T7841] dccp_invalid_packet: P.Data Offset(100) too large [ 106.791854][ T7862] FAULT_INJECTION: forcing a failure. [ 106.791854][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 106.796989][ T7862] CPU: 3 UID: 0 PID: 7862 Comm: syz.1.446 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 106.799817][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.802646][ T7862] Call Trace: [ 106.803532][ T7862] [ 106.804333][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 106.805590][ T7862] should_fail_ex+0x497/0x5b0 [ 106.806832][ T7862] should_failslab+0xc2/0x120 [ 106.808133][ T7862] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 106.809752][ T7862] ? __alloc_skb+0x2b3/0x380 [ 106.810995][ T7862] __alloc_skb+0x2b3/0x380 [ 106.812201][ T7862] ? __pfx___alloc_skb+0x10/0x10 [ 106.813528][ T7862] xfrm_send_acquire+0x172/0xc60 [ 106.814870][ T7862] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 106.816563][ T7862] ? trace_lock_acquire+0x14e/0x1f0 [ 106.818435][ T7862] ? rcu_is_watching+0x12/0xc0 [ 106.819795][ T7862] ? km_query+0x43/0x260 [ 106.820953][ T7862] ? lock_acquire+0x2f/0xb0 [ 106.822192][ T7862] ? km_query+0x43/0x260 [ 106.823338][ T7862] km_query+0xb1/0x260 [ 106.824526][ T7862] xfrm_state_find+0x3aab/0x7cf0 [ 106.825864][ T7862] ? __pfx_xfrm_state_find+0x10/0x10 [ 106.827287][ T7862] ? hlock_class+0x4e/0x130 [ 106.828539][ T7862] ? __pfx_mark_lock+0x10/0x10 [ 106.829846][ T7862] ? hlock_class+0x4e/0x130 [ 106.831068][ T7862] xfrm_tmpl_resolve_one+0x288/0xa70 [ 106.832497][ T7862] ? __pfx_xfrm_tmpl_resolve_one+0x10/0x10 [ 106.834066][ T7862] ? __pfx___lock_acquire+0x10/0x10 [ 106.835479][ T7862] xfrm_tmpl_resolve+0x1fd/0x3f0 [ 106.836829][ T7862] ? __pfx_xfrm_tmpl_resolve+0x10/0x10 [ 106.838274][ T7862] ? find_held_lock+0x2d/0x110 [ 106.839582][ T7862] ? xfrm_sk_policy_lookup+0x4dd/0x730 [ 106.841059][ T7862] ? __pfx_lock_release+0x10/0x10 [ 106.842518][ T7862] ? trace_lock_acquire+0x14e/0x1f0 [ 106.843933][ T7862] ? find_held_lock+0x2d/0x110 [ 106.845345][ T7862] xfrm_resolve_and_create_bundle+0x104/0x410 [ 106.846960][ T7862] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 106.848729][ T7862] ? find_held_lock+0x2d/0x110 [ 106.850011][ T7862] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 106.851710][ T7862] xfrm_lookup_with_ifid+0x2b0/0x1f40 [ 106.853151][ T7862] ? ip_route_output_key_hash_rcu+0xdf7/0x2770 [ 106.854826][ T7862] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 106.856433][ T7862] ? ip_route_output_key_hash+0x16c/0x2e0 [ 106.857970][ T7862] ? __pfx_lock_release+0x10/0x10 [ 106.859282][ T7862] xfrm_lookup_route+0x3b/0x200 [ 106.860594][ T7862] ip_route_output_flow+0x11e/0x150 [ 106.861974][ T7862] udp_sendmsg+0x1b92/0x29b0 [ 106.863226][ T7862] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 106.864712][ T7862] ? __pfx_udp_sendmsg+0x10/0x10 [ 106.866030][ T7862] ? __pfx___might_resched+0x10/0x10 [ 106.867437][ T7862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.869009][ T7862] ? aa_sk_perm+0x2f5/0xb20 [ 106.870223][ T7862] ? __import_iovec+0x1f2/0x6d0 [ 106.871604][ T7862] ? __pfx_udp_sendmsg+0x10/0x10 [ 106.872934][ T7862] inet_sendmsg+0x105/0x140 [ 106.874144][ T7862] ____sys_sendmsg+0x907/0xb40 [ 106.875457][ T7862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.876863][ T7862] ? get_compat_msghdr+0x11b/0x170 [ 106.878223][ T7862] ? __pfx_lock_release+0x10/0x10 [ 106.879568][ T7862] ? find_held_lock+0x2d/0x110 [ 106.880860][ T7862] ___sys_sendmsg+0x135/0x1e0 [ 106.882114][ T7862] ? __up_read+0x1fb/0x760 [ 106.883302][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.884705][ T7862] ? handle_mm_fault+0x497/0xaa0 [ 106.886035][ T7862] ? __pfx___might_resched+0x10/0x10 [ 106.887492][ T7862] ? __sys_sendmmsg+0x30e/0x420 [ 106.888800][ T7862] __sys_sendmmsg+0x2fa/0x420 [ 106.890055][ T7862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.891459][ T7862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.893060][ T7862] ? fput+0x67/0x440 [ 106.894109][ T7862] ? ksys_write+0x1ba/0x250 [ 106.895322][ T7862] ? __pfx_ksys_write+0x10/0x10 [ 106.896626][ T7862] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 106.898110][ T7862] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 106.899845][ T7862] __do_fast_syscall_32+0x73/0x120 [ 106.901218][ T7862] do_fast_syscall_32+0x32/0x80 [ 106.902592][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.904271][ T7862] RIP: 0023:0xf7f50579 [ 106.905378][ T7862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.910488][ T7862] RSP: 002b:00000000f50d657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 106.912701][ T7862] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 106.914791][ T7862] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 106.916894][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.919056][ T7862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.921158][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.923266][ T7862] [ 107.188311][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 107.437193][ T7876] sch_fq: defrate 0 ignored. [ 107.546219][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.453'. [ 107.813625][ T5983] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 107.986281][ T5983] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.988584][ T5983] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.991066][ T5983] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.993828][ T5983] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 107.996388][ T7892] FAULT_INJECTION: forcing a failure. [ 107.996388][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 107.996953][ T5983] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 108.000097][ T7892] CPU: 2 UID: 0 PID: 7892 Comm: syz.4.455 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 108.004416][ T5983] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.005589][ T7892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.005597][ T7892] Call Trace: [ 108.005600][ T7892] [ 108.005604][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 108.005621][ T7892] should_fail_ex+0x497/0x5b0 [ 108.008132][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.010761][ T7892] ? fs_reclaim_acquire+0xae/0x150 [ 108.010777][ T7892] should_failslab+0xc2/0x120 [ 108.010790][ T7892] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 108.011730][ T5983] usb 8-1: Product: syz [ 108.012478][ T7892] ? __alloc_skb+0x2b3/0x380 [ 108.012496][ T7892] __alloc_skb+0x2b3/0x380 [ 108.012508][ T7892] ? __pfx___alloc_skb+0x10/0x10 [ 108.012521][ T7892] ? xfrm_tmpl_resolve_one+0x288/0xa70 [ 108.012534][ T7892] ? xfrm_tmpl_resolve_one+0x3c0/0xa70 [ 108.012545][ T7892] alloc_skb_with_frags+0xe4/0x850 [ 108.012555][ T7892] ? __pfx_xfrm_tmpl_resolve_one+0x10/0x10 [ 108.012565][ T7892] sock_alloc_send_pskb+0x7f1/0x980 [ 108.012582][ T7892] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 108.012593][ T7892] ? xfrm_tmpl_resolve+0x325/0x3f0 [ 108.012603][ T7892] ? __pfx_xfrm_tmpl_resolve+0x10/0x10 [ 108.012612][ T7892] ? find_held_lock+0x2d/0x110 [ 108.012626][ T7892] __ip_append_data+0x19c7/0x4160 [ 108.014945][ T5983] usb 8-1: Manufacturer: syz [ 108.015107][ T7892] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 108.015126][ T7892] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 108.019817][ T5983] cdc_wdm 8-1:1.0: skipping garbage [ 108.019972][ T7892] ? __pfx___ip_append_data+0x10/0x10 [ 108.021499][ T5983] cdc_wdm 8-1:1.0: skipping garbage [ 108.022571][ T7892] ? find_held_lock+0x2d/0x110 [ 108.022586][ T7892] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 108.022598][ T7892] ip_make_skb+0x27d/0x300 [ 108.022608][ T7892] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 108.024916][ T5983] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 108.025024][ T7892] ? __pfx_ip_make_skb+0x10/0x10 [ 108.026586][ T5983] cdc_wdm 8-1:1.0: Unknown control protocol [ 108.027787][ T7892] ? __pfx_lock_release+0x10/0x10 [ 108.027802][ T7892] ? udp_sendmsg+0x185d/0x29b0 [ 108.061899][ T7892] udp_sendmsg+0x185d/0x29b0 [ 108.061923][ T7892] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 108.061940][ T7892] ? __pfx_udp_sendmsg+0x10/0x10 [ 108.061960][ T7892] ? __pfx___might_resched+0x10/0x10 [ 108.061973][ T7892] ? aa_sk_perm+0x2f5/0xb20 [ 108.061986][ T7892] ? __import_iovec+0x1f2/0x6d0 [ 108.062001][ T7892] ? __pfx_udp_sendmsg+0x10/0x10 [ 108.062015][ T7892] inet_sendmsg+0x105/0x140 [ 108.062025][ T7892] ____sys_sendmsg+0x907/0xb40 [ 108.062037][ T7892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.062047][ T7892] ? get_compat_msghdr+0x11b/0x170 [ 108.062058][ T7892] ? __pfx_lock_release+0x10/0x10 [ 108.062067][ T7892] ? find_held_lock+0x2d/0x110 [ 108.062080][ T7892] ___sys_sendmsg+0x135/0x1e0 [ 108.062093][ T7892] ? __up_read+0x1fb/0x760 [ 108.062103][ T7892] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.062117][ T7892] ? handle_mm_fault+0x497/0xaa0 [ 108.062139][ T7892] ? __pfx___might_resched+0x10/0x10 [ 108.062149][ T7892] ? __sys_sendmmsg+0x30e/0x420 [ 108.062163][ T7892] __sys_sendmmsg+0x2fa/0x420 [ 108.062177][ T7892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.062194][ T7892] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.062211][ T7892] ? fput+0x67/0x440 [ 108.062224][ T7892] ? ksys_write+0x1ba/0x250 [ 108.062234][ T7892] ? __pfx_ksys_write+0x10/0x10 [ 108.062247][ T7892] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 108.062257][ T7892] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 108.062269][ T7892] __do_fast_syscall_32+0x73/0x120 [ 108.062282][ T7892] do_fast_syscall_32+0x32/0x80 [ 108.062294][ T7892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.062308][ T7892] RIP: 0023:0xf73ae579 [ 108.062318][ T7892] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.062327][ T7892] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 108.062338][ T7892] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020007fc0 [ 108.062344][ T7892] RDX: 000000000800001d RSI: 0000000000006000 RDI: 0000000000000000 [ 108.062350][ T7892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.062355][ T7892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.062361][ T7892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.062372][ T7892] [ 108.212864][ T7898] netlink: 44 bytes leftover after parsing attributes in process `syz.1.457'. [ 108.218514][ T833] usb 8-1: USB disconnect, device number 4 [ 108.466036][ T7915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.462'. [ 108.538693][ T833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 109.124140][ T7946] netlink: 112 bytes leftover after parsing attributes in process `syz.4.471'. [ 109.227033][ T7951] netlink: 48 bytes leftover after parsing attributes in process `syz.4.472'. [ 109.265647][ T7953] xt_TCPMSS: Only works on TCP SYN packets [ 109.344912][ T7956] [ 109.345571][ T7956] ============================= [ 109.346803][ T7956] [ BUG: Invalid wait context ] [ 109.348074][ T7956] 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 Not tainted [ 109.349872][ T7956] ----------------------------- [ 109.352739][ T7956] syz.4.475/7956 is trying to lock: [ 109.354072][ T7956] ffffffff8e01dd98 (kernfs_rename_lock){....}-{3:3}, at: kernfs_path_from_node+0x29/0x60 [ 109.356575][ T7956] other info that might help us debug this: [ 109.358083][ T7956] context-{5:5} [ 109.359008][ T7956] 3 locks held by syz.4.475/7956: [ 109.360309][ T7956] #0: ffff88802b43ed18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 109.362842][ T7956] #1: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 109.365228][ T7956] #2: ffff888012bf81e0 (&mm->mmap_lock){++++}-{4:4}, at: stack_map_get_build_id_offset+0x236/0x700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.367931][ T7956] stack backtrace: [ 109.369166][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.4.475 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 109.371771][ T7956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.374465][ T7956] Call Trace: [ 109.375316][ T7956] [ 109.376082][ T7956] dump_stack_lvl+0x116/0x1f0 [ 109.377284][ T7956] __lock_acquire+0x878/0x3c40 [ 109.378512][ T7956] ? __pfx___lock_acquire+0x10/0x10 [ 109.379910][ T7956] ? __pfx___lock_acquire+0x10/0x10 [ 109.381591][ T7956] ? lock_acquire+0x2f/0xb0 [ 109.383086][ T7956] lock_acquire.part.0+0x11b/0x380 [ 109.384391][ T7956] ? kernfs_path_from_node+0x29/0x60 [ 109.385728][ T7956] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 109.387155][ T7956] ? rcu_is_watching+0x12/0xc0 [ 109.388320][ T7956] ? trace_lock_acquire+0x14e/0x1f0 [ 109.389605][ T7956] ? trace_lock_acquire+0x14e/0x1f0 [ 109.390927][ T7956] ? kernfs_path_from_node+0x29/0x60 [ 109.392260][ T7956] ? lock_acquire+0x2f/0xb0 [ 109.393393][ T7956] ? kernfs_path_from_node+0x29/0x60 [ 109.394699][ T7956] _raw_read_lock_irqsave+0x74/0x90 [ 109.395995][ T7956] ? kernfs_path_from_node+0x29/0x60 [ 109.397260][ T7956] kernfs_path_from_node+0x29/0x60 [ 109.398500][ T7956] get_mm_memcg_path.constprop.0+0xb7/0x3d0 [ 109.400033][ T7956] __mmap_lock_do_trace_acquire_returned.part.0+0x95/0x2d0 [ 109.401863][ T7956] ? __pfx___mmap_lock_do_trace_acquire_returned.part.0+0x10/0x10 [ 109.403928][ T7956] ? down_read_trylock+0x1ed/0x3f0 [ 109.405280][ T7956] ? stack_map_get_build_id_offset+0x236/0x700 [ 109.406900][ T7956] ? __pfx_down_read_trylock+0x10/0x10 [ 109.408326][ T7956] __mmap_lock_do_trace_acquire_returned+0x33/0x40 [ 109.410006][ T7956] stack_map_get_build_id_offset+0x5d6/0x700 [ 109.411569][ T7956] __bpf_get_stack+0x309/0xa30 [ 109.412843][ T7956] ? __pfx___bpf_get_stack+0x10/0x10 [ 109.414230][ T7956] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 109.415698][ T7956] bpf_get_stack+0x32/0x40 [ 109.417079][ T7956] bpf_get_stack_raw_tp+0x124/0x160 [ 109.418557][ T7956] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 109.419996][ T7956] bpf_trace_run2+0x231/0x590 [ 109.421255][ T7956] ? __pfx_bpf_trace_run2+0x10/0x10 [ 109.422985][ T7956] trace_tlb_flush+0xf7/0x180 [ 109.424281][ T7956] switch_mm_irqs_off+0x395/0xb10 [ 109.425615][ T7956] __schedule+0xc6f/0x5ad0 [ 109.426969][ T7956] ? __pfx___lock_acquire+0x10/0x10 [ 109.428691][ T7956] ? find_held_lock+0x2d/0x110 [ 109.430330][ T7956] ? __pfx___schedule+0x10/0x10 [ 109.431893][ T7956] ? schedule+0x298/0x350 [ 109.433427][ T7956] ? __pfx_lock_release+0x10/0x10 [ 109.435202][ T7956] ? lock_acquire+0x2f/0xb0 [ 109.436697][ T7956] ? schedule+0x1fd/0x350 [ 109.437836][ T7956] ? futex_wait_queue+0x41/0x1f0 [ 109.439137][ T7956] schedule+0xe7/0x350 [ 109.440227][ T7956] futex_wait_queue+0xfc/0x1f0 [ 109.441477][ T7956] __futex_wait+0x291/0x3c0 [ 109.442672][ T7956] ? __pfx___futex_wait+0x10/0x10 [ 109.443999][ T7956] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.445370][ T7956] ? ktime_add_safe+0x60/0x70 [ 109.446596][ T7956] futex_wait+0xe9/0x380 [ 109.447698][ T7956] ? __pfx_futex_wait+0x10/0x10 [ 109.449011][ T7956] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 109.450379][ T7956] ? __ia32_sys_futex_time32+0x352/0x460 [ 109.451853][ T7956] do_futex+0x22b/0x350 [ 109.452970][ T7956] ? __pfx_do_futex+0x10/0x10 [ 109.454209][ T7956] ? ktime_get+0x206/0x300 [ 109.455395][ T7956] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.456770][ T7956] ? read_tsc+0x9/0x20 [ 109.457847][ T7956] __ia32_sys_futex_time32+0x1da/0x460 [ 109.459297][ T7956] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 109.460886][ T7956] __do_fast_syscall_32+0x73/0x120 [ 109.462243][ T7956] do_fast_syscall_32+0x32/0x80 [ 109.463521][ T7956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.465241][ T7956] RIP: 0023:0xf73ae579 [ 109.466316][ T7956] Code: Unable to access opcode bytes at 0xf73ae54f. [ 109.468064][ T7956] RSP: 002b:00000000ffe16eac EFLAGS: 00000202 ORIG_RAX: 00000000000000f0 [ 109.470223][ T7956] RAX: ffffffffffffffda RBX: 00000000f73d4f8c RCX: 0000000000000080 [ 109.472274][ T7956] RDX: 0000000000000000 RSI: 00000000ffe17078 RDI: 00000000f73a0ff4 [ 109.474329][ T7956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.476382][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.478545][ T7956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.480647][ T7956] [ 109.481605][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.752574][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.822713][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.941950][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.982400][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.031795][ T64] bridge_slave_1: left allmulticast mode [ 110.033329][ T64] bridge_slave_1: left promiscuous mode [ 110.034891][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.037303][ T64] bridge_slave_0: left allmulticast mode [ 110.038941][ T64] bridge_slave_0: left promiscuous mode [ 110.040529][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.210656][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.214196][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.217598][ T64] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 110.220718][ T64] bond0 (unregistering): Released all slaves [ 110.487578][ T64] hsr_slave_0: left promiscuous mode [ 110.489909][ T64] hsr_slave_1: left promiscuous mode [ 110.492025][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.493909][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.497589][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.500303][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.503482][ T64] veth1_macvtap: left promiscuous mode [ 110.505000][ T64] veth0_macvtap: left promiscuous mode [ 110.506558][ T64] veth1_vlan: left promiscuous mode [ 110.508123][ T64] veth0_vlan: left promiscuous mode [ 110.672770][ T64] team0 (unregistering): Port device team_slave_1 removed [ 110.705311][ T64] team0 (unregistering): Port device team_slave_0 removed [ 111.116566][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.183958][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.243374][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.322328][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.429138][ T64] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.490738][ T64] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.550729][ T64] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.610502][ T64] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.693030][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.750415][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.821782][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.891114][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.965114][ T64] bridge_slave_1: left allmulticast mode [ 111.967786][ T64] bridge_slave_1: left promiscuous mode [ 111.969907][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.977132][ T64] bridge_slave_0: left allmulticast mode [ 111.979131][ T64] bridge_slave_0: left promiscuous mode [ 111.981667][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.050269][ T64] dvmrp0 (unregistering): left allmulticast mode [ 112.053988][ T64] dvmrp0 (unregistering): left allmulticast mode [ 112.347762][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.350728][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.353340][ T64] bond0 (unregistering): Released all slaves [ 112.358126][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.360971][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.363591][ T64] bond0 (unregistering): Released all slaves [ 112.368193][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.371283][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.374220][ T64] bond0 (unregistering): Released all slaves [ 112.436095][ T64] tipc: Left network mode [ 112.452449][ T64] tipc: Left network mode [ 112.871511][ T64] hsr_slave_0: left promiscuous mode [ 112.873231][ T64] hsr_slave_1: left promiscuous mode [ 112.875231][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.877316][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.879297][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.881208][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.884709][ T64] hsr_slave_0: left promiscuous mode [ 112.886900][ T64] hsr_slave_1: left promiscuous mode [ 112.888932][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.891235][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.893551][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.895490][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.898719][ T64] hsr_slave_0: left promiscuous mode [ 112.900495][ T64] hsr_slave_1: left promiscuous mode [ 112.902601][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.904535][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.906783][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.908767][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.913698][ T64] veth1_macvtap: left promiscuous mode [ 112.915144][ T64] veth0_macvtap: left promiscuous mode [ 112.916755][ T64] veth1_vlan: left promiscuous mode [ 112.918243][ T64] veth0_vlan: left promiscuous mode [ 112.919982][ T64] veth1_macvtap: left promiscuous mode [ 112.921818][ T64] veth0_macvtap: left promiscuous mode [ 112.923261][ T64] veth1_vlan: left promiscuous mode [ 112.924637][ T64] veth0_vlan: left promiscuous mode [ 112.926365][ T64] veth1_macvtap: left promiscuous mode [ 112.928052][ T64] veth0_macvtap: left promiscuous mode [ 112.930052][ T64] veth1_vlan: left promiscuous mode [ 112.932001][ T64] veth0_vlan: left promiscuous mode [ 113.161205][ T64] team0 (unregistering): Port device team_slave_1 removed [ 113.194579][ T64] team0 (unregistering): Port device team_slave_0 removed [ 113.616321][ T64] team0 (unregistering): Port device team_slave_1 removed [ 113.651625][ T64] team0 (unregistering): Port device team_slave_0 removed [ 113.984300][ T64] team0 (unregistering): Port device team_slave_1 removed [ 114.033259][ T64] team0 (unregistering): Port device team_slave_0 removed [ 115.150231][ T64] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 21:11:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85153115 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc900036cecc8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff851530b0 R15=0000000000000000 RIP=ffffffff8515313f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c261f0d CR3=000000005a128000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000038af0c RBX=0000000000000001 RCX=ffffffff8b1ab949 RDX=ffffed10056a6fee RSI=ffffffff8bb13640 RDI=ffffffff81701e09 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acd2f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a7244 CR3=000000006bc18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b446700 RCX=ffffffff818d430c RDX=ffff88801e77a440 RSI=ffffffff818d42e6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000a079a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005688ce1 R13=0000000000000001 R14=ffff88802b446708 R15=ffff88802b63ff80 RIP=ffffffff818d42ed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973d0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=1ffff92000625f77 RCX=ffff888022e52474 RDX=ffffed10045ca48e RSI=ffffffff8bb13640 RDI=ffff88802b43ed40 RBP=0000000000000000 RSP=ffffc9000312fb90 R8 =0000000000000000 R9 =ffffed10045ca50e R10=ffff888022e52877 R11=0000000000000000 R12=ffff888022e52454 R13=ffff888022e52e40 R14=ffff888022e52440 R15=0000000000000007 RIP=ffffffff816a0fea RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000068ebc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000