last executing test programs: 30.580132036s ago: executing program 3 (id=1172): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0xfeda, 0x0, 0x0, 0x53}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x2e, 0x424500, 0x23456}) r5 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x1a) openat(r5, &(0x7f0000000440)='./file0\x00', 0x4001, 0x18) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) r7 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0xb, r6, {0x7, 0x1f, 0x0, 0x4080000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x50) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x6, 0x100, 0x6, 0x4, 0x9, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 29.609182738s ago: executing program 3 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x7f02, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 29.539313406s ago: executing program 3 (id=1178): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000780)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="200000001100010003000000000064000000000064"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x43c, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, 0x80, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 28.819388683s ago: executing program 3 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000180)=0x7, 0x4) r3 = socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x407, 0x5bfa01) r4 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240), 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f00000002c0)='W', 0x0) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setxattr$incfs_metadata(&(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500), 0x0, 0x0, 0x1) add_key(&(0x7f0000000540)='cifs.idmap\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000640)=""/244, 0xf4) r6 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r6, 0x0) removexattr(&(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000800)=@known='user.incfs.metadata\x00') getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000840), 0x0) sendmsg$netlink(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)={0x74, 0x41, 0x300, 0x70bd27, 0x0, "", [@generic="d0eb45b5b34bcce3f1201939fbf6221ff94a6bf13d7de0ff4ccdd88e9f7ba746936b81ee1fae5a55e7568f94bbcf7d8069f1d49e7ffdd7aef394c022a1d2d5273b7e98a0040ca71bbb05b8f4cffd738ae48f691a2efcaa8495eb1a884eb0bb48", @nested={0x4, 0x11f}]}, 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000009c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x0, 0x10, &(0x7f0000001900), 0xfffffffffffffd00}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001940)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x18, 0x0, [{0x7, 0x12, "09b98fe000800000795f70b009eefe63"}]}]}}}}}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newlink={0x3c, 0x10, 0xffffffffffffffed, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10c0, 0x17e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x40000001}]}}}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) sendmsg$nl_route(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe8000"/46, @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00"], 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 28.531967691s ago: executing program 3 (id=1186): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000001005400000009"], 0x14}, 0x1, 0x0, 0x0, 0x40008001}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x3f, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) socket$inet(0x2, 0x2, 0x5) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x61) write(r5, &(0x7f0000000500)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) syz_clone(0x40200000, &(0x7f0000000140)="fa54f1c966316dc22383fbfb88ad4c688be1a26471b72330d88974c802924064b14c1f8b126f023711a97569769f0fd5113ed383c0b9d728faf9e57f30188b4f60c79fe5ed4a849f56a74c323d2c2deb89eb0ff07df00e66d40f4a2a468bf867c1a9a9462d1db7cde476f34277601bd145820cfb715e90b9200c177b965db4a0b8f7f2e87dd9f620cfe6b169e4af63c11d25bf73b77a6b4b790721896d5c020412bcbc9c5fdb431d53d46700e32c52eb71c66117aee8b678cbc7be5375de9b7a8839531bfabedc99e37cf2c0633bf83eb4feafc9b29febf3a7c053c5ca8a135f3d95b36d31435f21b5d2c6fbf72e3b62d1601bb92e80", 0xf6, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b0864c8dc59e30accfd84a1ecfe08792afd16481e2b43106c1e2f424e4c89dc48266213dd2e580f8baca5fbfc312df686f940f502c5dd71ab7b22761504f34ea58cb8f4e5b158f3d2eb9778f5eac66e655ff64c03b490e09c340634f52c8420ce47c3b2bb258698229e4a44bbf4c8fff747dc4a1e48fff50363b80e4917c850e7135efa00a613190e7542fbb9974fefa7ec89d6dfdce049709c0deff52e9af2833") r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000780)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x8, 0x0, &(0x7f0000000840)=[@increfs]}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000940)=[@acquire]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a40)={@fd={0x66642a85, 0x0, r9, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000ac0)=[r9, r9], 0x8, 0x0, 0x24}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000b00)=[r9, r8, r7], 0xc, 0x1, 0x10}}, &(0x7f0000000b40)={0x0, 0x18, 0x40}}, 0x1000}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r4}, './proc\x00'}) 28.055309489s ago: executing program 3 (id=1187): r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 13.013152668s ago: executing program 32 (id=1187): r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 3.479501624s ago: executing program 2 (id=1309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) r3 = eventfd2(0x6, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000004c0)={0xffffffffbffffc04, 0xffffffff, 0x8, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000500)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000540)={0x2780080ffff, 0x0, 0x1, r2, 0x5}) 3.41976143s ago: executing program 2 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x1728, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x16fc, 0x2, [@TCA_FW_ACT={0x16f0, 0x4, [@m_vlan={0xf8, 0x3, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x792}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0xfffffe29, 0x2, {{0x2, 0x7795, 0x7, 0x8001, 0x6}, 0x1}}]}, {0x9d, 0x6, "ede554eecc96422362cb8890ecb21047765e0cef7a5f83ac75851fe111993f207842fa5da7771f4c3d970576c07131bc81d91b3ca3aec43f3e08f57182eee03544d23dedea123b7620df2533094f2d35ecbc46731e482db8cf806f2c9f50cfc19d7f7463dc0d621bb42dc9dabb2ceaffa75c70398da48b11f71552a454ddb25adbe9a2dad81821419f4d8472dd93adcbe1c607e9e3caf0a0d9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x148, 0xb, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x7, 0xffffffffffffffff, 0x5b7, 0x60}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6e61}]}, {0xc1, 0x6, "436783d68ec51c445845c928b262650c785586cfca4cd53e1ea0205a9f5e2bf829dce2d8a29b7937e4bb485b1c5261e092e67c9b27ab725e57729b07fbe9f8b71597b81ca40ffaf1a6b3f6fbb40bdfd3025837e364b89224bef76373e57d4071e3314a54c0012d28b13b2cfcc4f6062dc51d787f1c114bcaf698cb1d001175337f76c1036062398b4c6381bf7d65e0903f24a9295cfd6faa2d9f26bb3fd34b0ee9b31b3c15f054d2aabebada4c11b76f04ea846fb89b162491cddebeaa"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0x3, 0x1, 0x7, 0x8, 0x3}, 0xb}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0xd}, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x400}, @TCA_SKBMOD_DMAC={0x0, 0x3, @random="0c4d7628977a"}, @TCA_SKBMOD_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_SKBMOD_SMAC, @TCA_SKBMOD_DMAC={0x0, 0x3, @remote}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}]}, {0x0, 0x6, "d74cf5c5f07d935cfe726989ea04564848846fa5a64861c224df7efdbe6df321ca4f063764e63a9584e667c97950ba802c20c95392bd9af8ddd5c0a6eb52aef793b9e8a22dde7e052f5e"}, {0x0, 0x7, {0x1, 0x1}}}}, @m_gact={0xa0, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cb2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffffff, 0x0, 0x10, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x2, 0x5, 0x2, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x156c, 0x10000000}}]}, {0x2b, 0x6, "fc06d67251abc7584f0dfbd4f700e6f37ce1b2cea7eef701fd6071408065220ec5b6054e9579c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0xd4, 0x1d, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x70}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}]}, {0x43, 0x6, "13b3a4f5c133a699034a563f2d84a4d9ece078eddb1198e276a932d5e1f18e208015fd2b5d71477df8b480d0b4834992f0ceb821a82a9137e6c97bc2af9662"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x118, 0xe, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xcc, 0x6, "9dd24d308a7cc6085849e3b94d275e181deb64cdefd95300dce49a873f77f401ef94f9ff176c92a540dca72c2facc488eb9f24260dd15ce03cb8ffa5317d6e1c4ccc056195fcadc0274bd4be87b364fabefce49a9607a6b0c02fc73d57a8ccf8c6eeb145326bd5f909a57e71ff6e33f592f90b867a26ba7c9bbcdd00206fc8ed7d7f12598051c0ab1f1f98a0714ea34b4b8d86c8d701af434aa7ab333e4db2c6adb8d4b1f799f2c986f3d545a315d718f72cdf1236e1a844bba1b2c46498df9453ac9ef64e095547"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x1048, 0x4, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9a71e}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x124, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x37}}]}, {0xb5, 0x6, "3ad36d304fd2300f24873a5515495313e43e9cabdb9fbb65c8ff83178c675da2659b84e110a2dbcca16c500580551af7d1b7a15f3380596ea8ce5837e64f23fd4225a03199d3a6079cba767bf9581aa3cda6d432b69c0ba072d01941610f484b4e94aa4223cfa517bf2196e7c5990a7b16543edaaf893aa06b4aafd4a4605fa3709eabf79455a84ed2fc5a766a3fecf4305466c97be9434fe9a175196434056795167b7dc59eaa92e4006e52cb0536c023"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffff}}]}}]}, 0x1728}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.375835941s ago: executing program 2 (id=1311): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x18, 0x40, 0xfa02, {{0x6000000, 0x4b21, 0x40001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, {0x2, 0xfff9, 0xc60, @empty, 0x8000}, r1, 0x9dff8000}}, 0x48) 3.292792687s ago: executing program 2 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.stat\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="104004002035a8dd750012800b00010067656e65766500001000028005000402030000000400060077ec269fd1e4299e4171e8643f1272a96bf5290fddea79b4e7aa16dbb2d9bf53c59e1a268f9a46c07424ed2f95c7d2b97225a746216a8a80ee358dea580d9641ab4bea6558ec228ff9b196d757ae85b6389f9663bcf7aaa072049f2193a6df1e39ccf6c99c3ede375abef6da99bd6acd000000"], 0x40}, 0x1, 0x0, 0x0, 0x200008d1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0x0, 0x0, 0x0) unshare(0x8000280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x8, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xe, 0xa}, {0xf, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x48845}, 0x0) recvfrom$inet(r3, &(0x7f0000000980)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd3f) shutdown(r3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3.29231678s ago: executing program 0 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6837c, 0x4711}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x24000000) (fail_nth: 4) 3.129469413s ago: executing program 0 (id=1316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000800), 0x56) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r7 = dup(r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6}]}, 0x8) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="198306bdda3797aee170cfe3b9766be72841f4f62bc246b2ddf8eadfa8383175dc93", 0x22}], 0x1}, 0x0) 2.530105083s ago: executing program 0 (id=1321): io_setup(0x6, &(0x7f0000000300)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x1a1081, 0x4) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0xf5, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000480)='9', 0x20000108}]) 2.349127515s ago: executing program 0 (id=1322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe4) setuid(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) 2.029361224s ago: executing program 0 (id=1323): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000000c0)={0x1, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x1, 0x20}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x4) sendmmsg$alg(r2, &(0x7f0000002f00)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b4f7107b71c1d96428ecc1696f2c738bee408274a61b8b62b805dd367dc0ec5311bd47a83ed710ca31f71f76a9a96768d86cde958a85fd6be52eae81c327012a254b2e1bc4d2d6eb02f645ee423eb576bfadad38ff8602bd62b28e17bdce7982931f87730cfa877b0581faf77fac07a0ad698d3f9be4a8e9642f31e5f4e7bb8616c59f20", 0x84}, {&(0x7f0000000280)="0a2d0ffc74708550a1e3a5005332b3c085153198758b27a8e571be8d90631bc78bdaf425b849a62af2317d5e82b6906e8c122b4ab86183121fb76eb1c31e00afb23f871f0bfee33fb3025b44ccb2353ca24cc935b3e01162ec749e10a04dbdb481958522938dd862ddba5de14a26394cded5debd906f71368ebb4e5234f5e04df8bb6f2464798e7a313e725e10420fd6a86fb6aadea5", 0x96}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x40}, @iv={0xc8, 0x117, 0x2, 0xb7, "9c1212d55c25ce0dd63b17fa7f640b980747220b0c9311b3409cba2c7c6c6ce2fbbb4f8a1c1fea85fe8f333dfc6a79b826697bad44131f7707143725caac5f7d5f835c174f567a5c3c614d21e0b5e2a971d3c345e3bbe43a9b9b948128d0a1a61db05f1cff1768dff18a1562bd83704c67055b70d86095353cab67779a346ba37791da58d658dd888e893e282331709f3d74ec5b0d1cb372530f13205f95f004a9a7987da9188566c0bb1be967da1e3a5bf3ab9fa13bb2"}, @iv={0x34, 0x117, 0x2, 0x24, "3030c6c7a58e10db59b2ad83d690d30795cfd66b5e7528cbbb593d2cfbf193cd5db554d9"}, @iv={0xd8, 0x117, 0x2, 0xc5, "180cb0c2e6cba4b00f90a6c26f34768db54b7add797134ddd9898d6bab55340831a20928f09529cfcfc1967d8205b6fe2e661069ff2f656cf1c61fc74d1e16e42be7737e4c03d10acc216e238de7dda4d5207876de895ab2711a217d7fdf20d4b1cc34b3224a9c38f46849e311549e556f4d8d0e6fcd2406a3c9258dbe4b6d2e6f3fa874913da7629cc5bacc56ec6579f39b62134505ab1da600d4106bbc6fd26ac3be2266785203b52dfa9621a7789dff0ddfdad14f5c349629ec91b0700c83e65e518a3e"}, @assoc={0x10, 0x117, 0x4, 0x3}, @iv={0x110, 0x117, 0x2, 0xff, "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"}], 0x324, 0x20000004}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)="d05cb2ddf4857d8001741a8200b49556498b5221666fedea8994a3d65af8ce9a84303d8c845bcaa975261df8bdd42b89f2f265ea38fb386d89c64ca9140a455d2ff17564bc48b386a3da2a6d1f4197db576af8d3f70ea17677708cc4d10a5c7e4b705fbb66db572b970183e752d3f5f7aba54968ea18226b3458d35b05b0472c03e2e789ae47618cf02bc1cf16f82bdf39f55b09a0559a0892485c21ac3ccc83932e7d3d627326ee6e919f220fd8c81f1878aea8e342e994263e6596a8", 0xbd}, {&(0x7f0000000780)="9cc5f99840575049658beccf0d16ddbe4241f4960b577c755472627d1ea9f894a582ca2a1cde1674cf85bf09fa95f576488725cd0279353087a745c8ede189521eefa0d24a16db3a09a85c15e7ed20c759326ff7e29fa22481d584863e6f87ff1907aeb89ab973a317842bc57ed295cda7640a0edce18f60d361b7ce68c9", 0x7e}, {&(0x7f0000000800)="447da4ede0554604b3ac4b60227a850ff57e1bf1b234c5e3a269939a702fb254183b31843531be7f195fe11cdab534e47f1732f7871355255e4eb8d568d98d4e792ad24c488ec858487cd9f8ba47bbf85019c97b78cf5150832cc80bfda4f636d1396f36f29cdbce9074d86c4e2f8935cbbec9c28675579beb86feef3ac8142b5367d537811a8c13a8ac7f19bba66da33ea89c49bdb7d548c56c6e6d3703583cd27015533a603866cbc96a40719a1ce8f34f15803a8b11966f8fe1d3eb475dbbf13b034aa6d953ced131df1f4096dbcc6a2b2618c85af8034bcf944ecf0fea4411b56dc1e6daf4", 0xe7}, {&(0x7f0000000900)="0daa2049d51721d9ef961a20af7e0f2b226585cd8f", 0x15}, {&(0x7f0000000940)="5f3d689f1218dd042c284ba99e3e2951ec1d8a2444d6c3ae34f234df4be2c1d273a06e333539fd24694730c6783ea63aa2a1721fbb5222f0b9d9eb753a64210b9b8dc131887b43560c8c01f2cc7fb46463cd85b6178ea4f290e33e1877ac6db4d6122efe732b7bf04c0aa2d8fc602ea5307ed868134b5a5545e3c9cc7af9958625a41ab10d581ed3d9d1e53174b975bb52ee5aed4ee5e704b1", 0x99}, {&(0x7f0000000a00)="aa4f8ac756e4ab4aa7000994826799163c4d98db106bee42f380c3ec75a70cf42e4b6631b189a628faa336919eba9b0a5fd56a991f45333a00913467d98e5abf33a0c6026c7e6811bf83f01bdcab2c8d512c38a7c1c43e5c2f666bfc34b7a2b4ef58e14bf6ceac8eef343e1926b75afc15170ad19cd9729827ba5ea5f10eb19dc78ddffc9b03f9c52ded32d8962112fb397e51b8b5124393b40bbe8363d9cf2fe080ec5fd45b1415373f7de86e8c6eb91c9e6f30e77c1d2204ea3311bfd5e414da10fd58514422ccbacb3bf052b25ec3276c2b88a68946f3e115950e8bbc39542d159c602966af97", 0xe8}, {&(0x7f0000000b00)="3c712099fdb1fa10c87dacb76fd76ba7d6a841ab7280ede447089a7c22469761c0fc6c781ce0fa695343cfb4fc9b2b2dd19f7f0c904c0d8707120207c91083f49c59c4d6952af9092ff338fefec4e5293481d983af36b33d3fd1a060c04ea93db4819535c8627149624c2a353d5984f05f8914ae84ca239c4efbfb2576c3fa30d63ca551bf9de2a7f7cc3159be255fc31fec12ffb8b707530d1b42b2c567f8eb3dc431a48c6a31b90514", 0xaa}, {&(0x7f0000000bc0)="c979bcc7276631fc3f4a33be7a9ced379c3321cb2d8323a4470159dcf5ef7bc393466ba04df459fe9d2138ce6d501c2f3be2ee5f3a0b7e82530361ea76dc6867a27d7a6fe28692a9a5e93f9e2815bc7c2ddf3afe56bc83b292d44f3e019b856ae90a1d64155c95d461d306ac563fdd40ea1ac2b363aa3377f2345247148e5094b0ea89f2a43a84efc84daf3f6571cd2728161c79db415808f17bb2b886eb6b1b146bd83a7f2291518fc0802ed40de90c57e2b80306670af769ab6f8f2d2b8eaea535adefe4e17de017ec399f47f774dd3e631873c7232bebd262ffadb9e93e19f786e7a57e489a800a03135880725a53625c", 0xf2}], 0x8, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)="9b60c5cc1ff0d82d303425837d751d76ba95997253f4822978f2f483b9f91c9d082f5583d03812fc294c50aaa27d6bf7d25f9158a8f06f16a8f3d4a8e0e943e99987e06deba8460f32fffded70a29654d5561191f582cc", 0x57}, {&(0x7f0000000dc0)="f5b16ba87088eb639dd725eb64327f33249a15b1bdaa67f28bf08415b272d103ee297362e22b1d2c828947bf0e88ef8da38b375a0b60ebdbdca502feac5cf3d655c9ac65af3dbd25a7361596851d8edbdc1e35825348bfa84a5b1920424ca088fedb8c7dc177feb96144b1d98be54df37829aa4dd44507f6aa5b5dfd5edb80407c6ffbf30f086b34b8f3d3b377f8596a12b0c0b24e9dec22406a55dec47a14330791", 0xa2}, {&(0x7f0000000e80)="388c90723b5d375311ca617213b310cb5c9550e15b01e753497693804fb9", 0x1e}, {&(0x7f0000000ec0)="661a1eae20d7bea6c5c6edefa92fbc16cedf6bfad58fd5f5a32018810361a3cabbf14ba35760a77669b60f165aa6513bd5d74c1112781377c93814604a626b0f119c7d77c2f2c1165bb61c919ea245a3a9b79120faca33658b5b291415d84403150740804a82b3d3aba0713f45a39dc51a7d668e07c91211eada0480f49efc89db5bbe6337aca4959b91fe6a8529938e77bc7b63bac728596dccdc78a4a06c5d65", 0xa1}, {&(0x7f0000000f80)="f0ed8215524cde3db9cd67dc3ab21c0c7829ccc0389508067a3efebfcff99ae5e04dc6ac8ac0a5ee3c221c2624e510f94bdba4f3ab11f0fd1bdbc7ba7626a263fba76d85fa4307157a8ac901f18f97d94655a1ff805a8e9ea162b501098534c2d8e1fe3f8316da77c496f932badae141d90ba921a6727fd72dc22743fd735db4955599d909fca08bdb57c3ffbb1dcbd3c1b5edc917db0a5f940efdec9b9ba36b02eaa643acef", 0xa6}], 0x6, &(0x7f0000001080)=[@iv={0x38, 0x117, 0x2, 0x25, "a4ab0fd16c451b3a094f39d68aba404dd2fe3a61590dc75cb2dc06cc9280d01763a760e870"}, @assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x8}, @iv={0x104, 0x117, 0x2, 0xf3, "d2dfecedb3e503d49c3790426a13f6b17ff21494a14f1ef9a88d9266f229614bd350f11441bca3605319417652a09cf88508bd3b63cb86b1bc4ddc203f60859fea9aab9e9de38ca9ba82e0895254ec5fda4bcc1c258fd1f932ce882f267f6e248762c081bb833df30d0ef81e94923c02c8ba52d349b3d13beef3f88338ec76a7bdf8b4e192c037bc7f800085d56bd49e656672cdb4f45104038bb823408a7c5f13663eddb3925acfad0d108d1ffdfa9050902d59290b14c6b82a89efbd6f5f6a933c7cf6a55355341cd62c3e754ca5093f40c35930a82aebe100f73fe20547d10e2c3ef90ff02e026b7ccb5e092d354b8c08af"}], 0x17c}, {0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001200)="96a3f779c4620e990cfccb49c6a37d254712d78e9a056e5d64b0a6a71a2f525422e10c58995b3683358f6b82838504b6a67ccb6e6561db91715fc470760bf38a80bbf53d6113036f4b432ddd979b96525c15de5c0f7a46580fd64a8822454c804b0f7be77bd796c62fd6ecb82b67ffab00d4c6eccc89ab206772a90653465aec36d861fa183d7ad65e4c727f927384fbfefe77ea3677b69399c1df86e3474026efc2f887fac34b766b19909944b0147cb63e1c5137d53909a2d85a00dfc9f1152508aac6fb81df2807a07eac144712b9279120246174", 0xd6}, {&(0x7f0000001300)="cf875295b733b1a4030c46d7c4192104333c524c925480ce6da52d8bcf828af28e658a080c671c563961f13506a9d4830c6c36e247de1c352ab1f5665ffeb1", 0x3f}, {&(0x7f0000001340)="718d729239b71d7ab0b43eb07e2ed0f5c2e1247f8b2aad9c4da66c5a71e58e9c32df36610a8238fd9b85c9083b79e2185dcc3e8b3bdca8448274ae0dedc182910722a9835dc67f9fd22eee66330cf4da1f2459d68fea5e052d666deb2a687ff4e560b8f9669d2a3512c01c7bc062241509596c88d03fd6745a7f21fab53a29d2233bdf4fa43b5e8417d5d02255307d4e88416528ca7843ae5861458f679bfbea89cc123844a236ac40d99a96bbc426164e0eedc20fa9b845ac8eb5d4b371ba71b99b074096f21307c7e15a28f903ff0643d215b7b8870fd7abac3e36e7d5f9844155d74b77c058", 0xe7}, {&(0x7f0000001440)="f10e603d85e93438151cf53b5334f141c63403fd8f2133ef0cd1cddaa48a1b89a3dcf45658631b8e649fd1ae04c283eff4020aaed6fbe1a3e21bbe6e30f56e5b", 0x40}, {&(0x7f0000001480)="81d5bd9f9d5b01bf14b06e48278e7954f3c2fb4960de1422ded32209e5834719ea8ccc57aa9fceca6f9e0d39d79d4bcae3b29cf44e77aef970f7b79f889df020b9d302786a656ea0e368999b739baded1f2694", 0x53}, {&(0x7f0000001500)="f6088c3414d66d839046f868076abfd132abb91abb93911b29322b7b0570ce8de673d9f32b292ff80cbf3d88b315f0ccbd3918692279ca84bbfd2e6e2c699568daf8e80ab25eea088c3200e3", 0x4c}, {&(0x7f0000001580)="1f033e946afe3e3f98edc2bbe386e98b123ba67a8097d26ef7b5a2006593c8f16a5301b5ddaa22da7afab038", 0x2c}, {&(0x7f00000015c0)="fe292a42fee51a2f7321ee3ba37c3b357b02c6f95efac9ec90a2151bc3ddaaf9d3c11543d4bb4a9a470915063dea294773f863ea2c135d803ddd5d9de2e660c6ab057757f975a2a34ed162fc605ff8dd913efa4a4c8fc98868e3344c27d2fe59ca3cd885e8ea4ec178881b799bd9757d19ce02d9a60c445e0ce20fd6af5506e1afcc6ff1d8e0041e647cd727d0388460caa088d3b1d1b788847a7052c8896f2913422ff92a59ecea81f84f3527069a2acaa51cd1d2df2192961b22743f326d14cee9325b634e7be2", 0xc8}, {&(0x7f00000016c0)="1d21437785d51d3919cf5c64327fe5bdc75cd20775e37bc43e9d1881d30f62ee1d3f096cc74fb3ddb4ea29d8f917fe5e519deaef5fdb29aef538621d83bc7036bfd74fe6", 0x44}, {&(0x7f0000001740)="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", 0x1000}], 0xa, &(0x7f00000027c0)=[@assoc={0x10, 0x117, 0x4, 0xa}, @assoc={0x10, 0x117, 0x4, 0xa8}, @op={0x10}], 0x30, 0x40000}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002800)="983554e9c04f850e1829bfb96fdf8530e10b840435f974063a219e9618bcb6b1debf33fa95dc8c53ed3b20f7d4911f12cfdde012787fb41ccc1798a59a4978acf8920a15cd4a82a75899cd4e762c20b1d551d2e4aaefba4b4151b801760a1e9abb19a4218b7c1d7d80ce2fb55d2e8bd5d3b74400bf8df219d657e4073093f0dca136f9120900c8a42337240f964b6f64d8fece39633dc52fcb45f4bb8f2c65472ef50c263fcb252157", 0xa9}, {&(0x7f00000028c0)="def7899f58c5e609", 0x8}], 0x2, &(0x7f0000002940)=[@iv={0xe4, 0x117, 0x2, 0xd3, "0324a9e92a21afbf9869fd73af9bd0270d77b4927d694c3ab03a626f03b9c2d675289f5123ed99f7e5524eec40f5008a3cc5fa8c5681752c7cf783af7ebf04614921c77616cba6c8fc5a6e92425bd0e830e269d8fd6042bf92e54e896738915ffda6cf4040758e8c1b71bda7b512f8b12d2dd45a80e84ac284ca40f50b8a794a46fcb859ebf89950417ce001c65a5d664c6cae164ee27deeb4644bec489a71a9efa046744e25c3312fb7d03624dd7c8489f246d1a281a1bf38ce0b74c7029637867f84564beb6e8817a82953e488db1dff1fa5"}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x124, 0x20040800}, {0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002a80)="a76f00207780c197f62b95552def40ef7da0050b7da2f60e73c8b209ffbab2e27d3200556574cbff72db088f575436f05d96ce668757f0d9b57b29c59973e16fcca76dacb15e2c03db18bdcf90289ee9297f7d8cf2dd35960a401742589ad644449e45dbcfc703802587b3bc7798c829e12a9cdea781440258081385b2a33937b5eaba338926f8249d9136839e93aad0a72356ea52f3eb2a5f22e986a8efb47096c597bfe718d2d775b3d0fb60c430635f80cba43030473564b1453d5fff1a1ba2affd828140d4bacdaa98c8b43db72e5b10a4681ac84f9a8f27de6fb09f74c3", 0xe0}, {&(0x7f0000002b80)="3a18a485396206bde71c697316372eadebb0c6bdb23bd0ab0e716eba39", 0x1d}, {&(0x7f0000002bc0)="140b7a3cb749d8858bd8c0e42d3dd5fbd5f32fc4c156831daf2b85d4481f1191e2acb39c09187390562d36", 0x2b}, {&(0x7f0000002c00)="c8a2642d63430562afa1375a9c48f1808afc15957d63171980a04b1d33afea4dc4310c047645361c72b82daa642bc39213a99e3bb1769e937df0b3127fa84df8d71baf270a783ee3958b6c7e4d0df0c8334d89779e669751454908853cdffe3142403ca8b5a2efa84c0ff68800dccc971d3a21911aef4698f2", 0x79}, {&(0x7f0000002c80)="912097d96fc3f802a7abb726fe1b098cbfc1d7329fc14133bc4cb9f30c665835102c48effc2fe5cd43c59ffbc3b52241ff84b4e7b4fc9d026b0acc7b90ee38cd17ece072b0b700b70658ea854f4f5758c559145dab7dd2", 0x57}, {&(0x7f0000002d00)="748371f5888bf5f8ad80e520acb5cbb20ac3bea087220f4764b29420e6447b466ceba968a58a4985f3eeae31a25dd0495844583861fcf5f7e04fb3a21750fbf423f525dfbe39933abbfef9da5cad2c3bbf7e27d99200951356594de4a88cc50d3b61b2c7e61cea53a963981e264132c0e9664687ef6ec462257ff82c8024f309eb19eb24e2c1b53e6b879699d5e168781b127a0be37c66acaca59eeef29bd5b97e07651ca01e26ea064b15aa2cffc6b1fa86b034bcdf2dd564351f4a92bf0627d13fd9bb92a155e9a301ce7e68c277bfa5c2079118fb6e47e232aa2fb90bc5676230314654b6ecd02bd73d9f4e90ed966aee651797", 0xf5}, {&(0x7f0000002e00)="83a60a709f1989dece9e554aaf1c8928b895284fad03f7175926c8ae5488a5109a5c7d67a1ed8a8680b55c8654c5d93ea27456fc3baf9316d694c9191845fe0d1f5c0be84a46e209ab5f013f54ca700c2e0ffc9e53dd0dae2ff4a034512df3cd4f392a0de5d7e9e4849704b2b152e5c3512b5523d7d7518764bf7f62f36cf03373baf47acadade", 0x87}], 0x7, 0x0, 0x0, 0x4044010}], 0x6, 0x24008010) close(r1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x7) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000002fc0)={r3, 0x1}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x48005) openat$pidfd(0xffffff9c, &(0x7f0000003140), 0x111000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000003180)={0x0, 0x0, r0}) unlinkat(r1, &(0x7f00000031c0)='./file0\x00', 0x200) r5 = open(&(0x7f0000003200)='./file0\x00', 0x4000, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000033c0)={0x1, 0x0, &(0x7f0000003380)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000003400)={&(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003280)=[{}, {}, {}, {}, {}], r6, 0x0, '\x00', 0x5, 0x5}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000003440)=0x86c264b8ffd9fdae, 0x4) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000003480)={0xa1a9, 0x10000, 0x6}) r7 = geteuid() quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, r7, &(0x7f00000034c0)='./file0\x00') connect$inet6(r1, &(0x7f0000003500)={0xa, 0x4e21, 0x7, @empty, 0xfc4d}, 0x1c) openat$sr(0xffffff9c, &(0x7f0000003540), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000003580)={'veth0_to_batadv\x00', 0x20}) mkdirat(0xffffffffffffff9c, &(0x7f00000035c0)='./file0\x00', 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xf4) 1.783611553s ago: executing program 0 (id=1325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003600)=@newqdisc={0xf4, 0x24, 0x605, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0xb], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x0, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0xf4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003780)={0x11, 0x3, &(0x7f0000003840)=ANY=[], &(0x7f0000003880)='GPL\x00', 0x2, 0xaf, &(0x7f00000038c0)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000003980)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000039c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000003a00)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x4a8000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f0000003a80)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r1, 0x2, &(0x7f0000003b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000003bc0)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c40), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000003c80)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003cc0), 0x10106, 0x2, 0x0) prlimit64(r1, 0xf, 0x0, &(0x7f0000003d00)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000003d80)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x908a, 0x840) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) connect$inet6(r3, &(0x7f0000003e00)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f80)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 779.021806ms ago: executing program 2 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r8 = dup(r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6}]}, 0x8) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="198306bdda3797aee170cfe3b9766be72841f4f62bc246b2ddf8eadfa8383175dc93", 0x22}], 0x1}, 0x0) 539.974499ms ago: executing program 4 (id=1344): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000100)={0x3f, 0x4e20, @loopback}, 0x10) 539.811152ms ago: executing program 4 (id=1345): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1008, 0x0, 0x48, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, 'P', 0x20, '7'}}]}) (fail_nth: 4) 468.238125ms ago: executing program 4 (id=1346): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) close_range(r0, r0, 0x0) 467.821025ms ago: executing program 2 (id=1347): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0xfffffffffffffeea) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) syz_emit_ethernet(0xa2, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "820200e64f11020a00aefdb34493917f0000006336516768a7949bb10800", "402f65631d661c18460675368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000180)={0x1, 0x5, 0x0, 0x1003, 0x3, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000006c0)={0x3, 0x0, [{0xc0000083, 0x0, 0x7}, {0x386, 0x0, 0x10}, {0x2ce, 0x0, 0x6}]}) 467.297245ms ago: executing program 4 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x85) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbcf2501"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) 329.783955ms ago: executing program 4 (id=1350): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x2, 0xe9a, 0x7, 0xff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000000c0)={0x1, 0x8004, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x7, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r1, 0x84, 0x85, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xb}, 0x88) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000240), 0x208400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f00000002c0)={0x9a0000, 0x5, 0xff, r3, 0x0, &(0x7f0000000280)={0xa00965, 0x7fffffff, '\x00', @value64=0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001dc0)={r3, 0x58, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003500)={r3, 0xe0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000003300)=[{}], 0x8, 0x10, &(0x7f0000003340), &(0x7f0000003380), 0x8, 0x65, 0x8, 0x8, &(0x7f00000033c0)}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004000)=[{{&(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="f4c2e2a859bace4f267fddc0f9a687146a32d06946e8c85bb3b983c3c10318fcbd0473754879218db7c2cb2637a67432341b8f2142a1910923107e4460fad529e6abf0e24a5316ea5044efc42a04573832ac99e31778abdaa211c09055c058427462a0b2a217b9be6f1076bc6b2683bff143d65967", 0x75}, {&(0x7f00000003c0)="3b2ce8d3246e50996fc53fe268f9faf3625ec1d6a93ba1ad218c927da03834fc4ff22f8d6b44f23cd285a10e2809ac020737d571253b5ced768bafccdb4c9e13a284af9e5bc4f33241a0ea67a8f2676675ba51a47dbe83651fea66e326577ec6b435e61b5b2c3594f0403dc082bd493d82ba0e78425512305bff50474a33b41c4dec2277b5560ae64f8c5abdfd155bb13b1005bf602b2f1e9dfc9167cea3df77bbde6530440ef72f6a3b463ad24247a9fd1ba93891b1c3b278935e387842b411fe14defceb043819bcee6c1ebea1c8b8047dea93880134fa802d41f33e2036839a361923c39b760c87bb995278b9c5e4bcf387fba219", 0xf6}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xe87f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xfa, [@private=0xa010102, @rand_addr=0x64010100]}, @generic={0x94, 0x8, "f86152cb086e"}, @end, @rr={0x7, 0xb, 0xb8, [@multicast2, @remote]}, @rr={0x7, 0xb, 0xf, [@rand_addr=0x64010101, @multicast2]}, @noop]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x98}}, {{&(0x7f00000005c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x48, 0x3, [{0x2, 0x4, "0f93"}, {0x1, 0xf, "2ce4bf67fabab3a18666b5a42d"}, {0x2, 0x6, "dc1739b0"}, {0x0, 0xe, "11d668b9471a09422760260e"}, {0x1, 0x12, "6c3dd63ecb1b9db9289ee2db33b8c8f4"}, {0x0, 0x9, "11993ee0223ad8"}]}, @noop, @rr={0x7, 0x27, 0xac, [@multicast2, @empty, @multicast2, @broadcast, @private=0xa010102, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @empty]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xac, [@broadcast, @rand_addr=0x64010101, @private=0xa010101, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}], 0x9c}}, {{&(0x7f0000001700)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001740)="50fe3470d0601ac87d15d5e091afd4785b0e649fa1b6df0ee0259c9ba6acb44defb9c6ec9bcb6bca17099d63069eb6c1e8fd72e380da6a1c041cc126313aef487d5e1927a635aaafc4d0bff216350327ac685506cbe93278e03233d90b553c12e8e2007e4808a65472243d0f2f8fc285ab01d27afca78a297c5e76e2ffe7acf3af4574e2ee547e7c92be29721ff7e63e3b27789cfa4c617c073a1b1b2c5f2fea3d44e3d259f839c1e1d84ff1c298e9aeb8ee07131e6d38248c326229b7de481654ab24d7a5dd6cf3d058c0ea17083714f13137d728b8f2cbb29f84eb5b14ee63b37ee00e942b15ef062eb8", 0xeb}, {&(0x7f0000001840)="97dabce4b4b1082bdc84fed6a9826704f8f793f594718a430adf0ea88aafeab43da0927a76c2b1a942c85961680851417f03db488b0746f2a225fabbd7c22d29a3528ea248f696f01d5b8165e96b2f16b2bf47e51f74ef1e9709175ea42397f0c29badd8f4b08eb0473b9c", 0x6b}, {&(0x7f00000018c0)="ec3c17571574adf433b6731d415a0ab8874f5d0e522d3bd0ff114870885e17541a236c4633454aad2602170ea5ea1f06ecc2b7759e217f1203a5400c845b085b5c9c643a6e7738629369a9700f2c969bd4515ac21622034acd13acda48488df41fc677a015a9ddfbef36", 0x6a}, {&(0x7f0000001940)="b5fdb2b6841b59edbc646bf2af1f9353f767970329a8488bdb9d75ae67840d686cc823ce3748a72ba79c39099f039af018c7f78f56a66f27fddffc4e896665edd7b467b9b4e0a81fe84899831a27f8e4275e4f86b0ed1aba68effe984fa6cab9b7a437c2b9f5916f4077bda1b202f2bd5f150d145cfb2628da3d8a007f1dca8b849ffaff821f04014ff86bc1636bf4c64ce8c1", 0x93}, {&(0x7f0000001a00)="129ae149c410a879c55172e51c19c1b4736679134faa13c55442ddf6b0643c9d4dc7181ad79b6bdb607a26c21ef2d0e55544a528ca87911e1c2b66105040db0b34d4b7482547ad5405dc444e1e9160c410a3c47e034bc6e289a34306a2f0116442a417a04b5274681efe8558bc83e14c22a1e723daa27a5f23470a98fc996377ca9f619f52c0702cb1527c6a868eea68e370037898c10fe38c488487f582fd2185eb0e7af5314360e5723f0a898f78055f5e2e10fe6a86adf39850016c4601ca355343c0ee77ef0df850a5127557bec4de4bf14018b78a1b586a3e", 0xdb}, {&(0x7f0000001b00)="b01ca90f4f4e0be9b7a20820760f4978ab36b70bdd8c46b6dc041ca1350606fef87ab3fa96c083afcb42799d50fbd2758dbf6e8d10a4fa6e5371d226b97b365d99c590bbf18159424d38bf0f", 0x4c}, {&(0x7f0000001b80)="d9088e2cf0100eb0c7b8c65dc56391f134a58f2d3b631a18e91e9a367ad08aa8400377", 0x23}, {&(0x7f0000001bc0)="67d6d68fe9f10967ae3b5ba9b8da8551b8b1babfe323e4adfc8df24e20b770e0e79f5d9be5f17d16d972e0f0288068ec9449dcba88040e671084bf51d816ec1e73a2f7007db00d5ad8c623f325d65aa9650b026a80f3b9df1f5c47dcc037a7ee584809dd1da82d0033294f07181a083b290034116f41a89502b7f0625bb8f1b8afb29e968361efb73d169f00074fbae966ee7f3c9883c53361713694574851ab8958aaed519220e76e9ea01f1b5eb5ebd9dad01d42f1f3569dbfbbdfa0999b422f439dd7c327a1fb", 0xc8}], 0x8, &(0x7f0000001e00)=[@ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x88, 0x8, "2b8acbf13df0"}, @end, @ssrr={0x89, 0x1b, 0x24, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @loopback, @broadcast]}, @end, @ssrr={0x89, 0x1f, 0x85, [@rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @multicast2]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x268}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x97}}], 0xd0}}, {{&(0x7f0000001f00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003200)=[{&(0x7f0000001f40)="2b16", 0x2}, {&(0x7f0000001f80)="34b64b41929c1b682dfa19900a6f22ca48d5dd593ecc0107e37852328128fd63c9e1084c28e46f581a4356cba1bb9b0ad2c4d12a70fd17a67e7a8dc5e944607d10db42f4c2e3c18614f4dd5b31a632abcf14ccb471f7414641f36b1795c7c8656d88692dca3eee0cfd39841e3e98daae4d5f6d2f6fa15fb78c3a94927451ec34012488e86b5c89ed06a3273cb77fa7beceb0b17e", 0x94}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="5451c84d751f6772276b2442", 0xc}, {&(0x7f0000003080)="a7274d095145e7c547e182d47786effd6c03123d2a01f7ecb1d241be936f20e6bb97617d39ac7f77588e094629ef49cb78cdea700203509f8a1e9d8452aa9fd79d922aa3bc0f98d7baebafce321114a873263922e243d51c3f5b363c28782014ca83905b087fba177ba0b62607cdd3952e0f463381b01efef5b2e3e841a1e8ba38829074791892a68576b0479c8a4a19bff5b4258da55b3dcd73b1e3039ebee0b77efb4f5951ddf8dc8d53c91e40dfdaf6f31efc44b40e46331c22296986abc049013eecc1", 0xc5}, {&(0x7f0000003180)="6f64005be45dbbd12f107ff5d13d069c01b615a7dbed5f81aa3228d5a2e2e0aab9560c2ef4963ae0ff53722c1fcad4bb91f81964bd3fba5a2657ae816201b44f4684f8d2e28694748fb7ddf30b3e9b4ff2bb", 0x52}], 0x6, &(0x7f0000003540)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0x50, 0x1, 0x8, [{@multicast2, 0x40}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x3}, {@broadcast, 0x66dd7ea9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0x8d, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x40}, {@multicast1, 0x3}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @generic={0x89, 0xb, "80dc014b7ec9aa9829"}, @generic={0x86, 0xd, "ae6dabb5435d88f52a34f8"}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x4c, 0x2, [{0x0, 0x11, "91a6ac71f3672b4d92c1f92cbd1437"}, {0x2, 0xd, "cb3a89413212cf5cc8060d"}, {0x2, 0x10, "b8e0a816e467ab78fc8ae6ec43d1"}, {0x7, 0x12, "8c26a3a676a0846d27ab605dda46c57d"}, {0x0, 0x6, "6c13d7e0"}]}, @end, @rr={0x7, 0x7, 0x56, [@dev={0xac, 0x14, 0x14, 0x1a}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @broadcast, @rand_addr=0x64010101}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x0, [{@broadcast, 0xd}, {@empty, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@multicast2, 0x8}]}, @ssrr={0x89, 0xf, 0x5e, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x20}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @noop, @generic={0x88, 0x6, "3e6b04e5"}, @rr={0x7, 0x7, 0x7b, [@loopback]}, @rr={0x7, 0x13, 0x3b, [@multicast1, @multicast2, @broadcast, @local]}, @ssrr={0x89, 0x7, 0x5e, [@private=0xa010102]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "4da15b02efc0976c6def"}]}]}}}], 0x1d0}}, {{&(0x7f0000003740)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000003780)="043172b37ea7a1319be1e3c6347c3b9200af8a3a9f3bad8346601e8c26c89526a0ca475cf0b191e2a0185f6dd7a79590e214bba7dd71a677dd57d380740e7c06dd1d870154eb2e93ffe67e0379f9fb69eace1ecb92b6c06a624bbaff68c0f996db72e331e72ac0ab350e5782db991a2eb02bbd120820f8f051c02b19d2b7364ecac6c39dc238da", 0x87}, {&(0x7f0000003840)="107f5a45f1e2c1816b90ce5327afbe84a3b469d2e6f13d0fd03b39a07575b091bd48e5fc0cd9e8bd4cb9a6147b4af0f097bd08372b22faf0dfd95c4d5d17028c21550e08620722a9980c9a7e76bf8c5fe8b7d63310998c95518884faeab8a1b8c3bf9dca5a4768aa2a512d24b88cffb6a91047e13297570bb820c69dbb7135c304131a991e29347624d9dfcb39622bc89ff7fdf3c937117bc79e06dac5eeb6582f7a552dd558a7acc6e9f71869728bb6fcc61950a31f76ce588d6684b7c3a35e3e60a718b5f2a7618baeacb44909dac464e598300b4b72", 0xd7}, {&(0x7f0000003940)="a2731a41dd351c76669aca89fd380f2296aa00044f11ece5b3ae3c739030b080371cfc9b748bb041c3f60dbf613c62d0d74a", 0x32}, {&(0x7f0000003980)="61955679054cd80abd3f3152da05d0c8f11ad4dc2a1185eb371798f97c5ddebc6b22b277b7ddbd27267bde853293bf87cbc33a865755fcffa934a8ad9c51bfc2090fd7e6b9cb91b202aa658c27f5160459c70e6eef5ed4386a096d413266440fc4110809733fd4cf4136c38d8bda609f90f414152c027c4088ccbe2cca6f7ec8a9f57b588c83391af9a70df430a6707f62c2d1bc18b5b4f070ad5dae216fa00de1478d29e75223fa03aeb6a98e84d6627a01fd50ef3126", 0xb7}, {&(0x7f0000003a40)="9d9d13ec", 0x4}], 0x5, &(0x7f0000003ac0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x4e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote]}, @timestamp_addr={0x44, 0x3c, 0xa4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@local, 0x418}, {@multicast2}, {@private=0xa010102, 0x4}, {@remote, 0x1ff}, {@rand_addr=0x64010100, 0xd8}]}, @rr={0x7, 0x1b, 0x7c, [@dev={0xac, 0x14, 0x14, 0x41}, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101]}]}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x4f, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@multicast2, 0x2}, {@empty, 0x3}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x7}, {@multicast1, 0x9}, {@rand_addr=0x64010101, 0x2}]}, @end, @timestamp={0x44, 0x1c, 0xdd, 0x0, 0x4, [0x400, 0x1, 0x0, 0x3, 0xd, 0xe]}, @lsrr={0x83, 0xb, 0x31, [@empty, @empty]}, @ssrr={0x89, 0x3, 0xc8}, @timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x3, [{@multicast1, 0xffff3185}]}, @timestamp_prespec={0x44, 0x3c, 0xe2, 0x3, 0x1, [{@multicast1, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@loopback, 0x7}, {@remote, 0x1}, {@multicast1, 0x9eb2766a}, {@multicast2, 0x2}, {@private=0xa010101, 0x80000000}]}, @lsrr={0x83, 0x13, 0x61, [@empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @generic={0x83, 0x6, "1470d455"}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}], 0x170}}, {{&(0x7f0000003c40)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003c80)="698182f48c9876888862a1eaac53b03965bedee9d46bd9a9589758fefc04e7e266b5c2b9148220a076e100c711fecc6a95abd74dcb89468ff4a7456dced856e7257b002e736f5b70a142e0fb4434204bdc24d34c8d025ea0ffc2374f6dc5d1d81b9d13fc925917c5884557bdd3f27e7652fd7a685a86bc95dcdec057bd6271ee3751eafa76490a7dd20267bade66bdc87b", 0x91}, {&(0x7f0000003d40)="1e607c3a54dfcbb202bb07c4273664da26249c86e9eca68dc29626574d34d50cdf7b5745e988e958f199dc4f2520d4b910683a7a77dea057cfd22337f89827a123963811bf1ce0d29b3cfa6459e8ff81786ef6cb159571bc588891faff324f49107baa6191fbc10010ed98a997eafee0780484ddbc58dc5f643a06d24540351c9b99c957dd69fe85f25297bdf10dd5b5b6e262debea5c0eb1bf8e2bfeb3c8013f063806ce2c5de6de77428d8f4781de136ca8ccb4a884c2821d41be15316add0968d08603d52842a3e3d6678e4b6342c1d2ee8b6252e7d0573c2a1ac3a3621a0071da2f6490fcf89cb12bdb9cfd71f0e3391eee0a1", 0xf5}, {&(0x7f0000003e40)="a0b057457de76397842bd297a9ddd6ee7d7b2172fbbae71fc69478ec4fa949e2cd31482001c14ebcf49bbdb0b751a3946d9bd53701ee6c0e3d872e954b1c2c36c08983485435d9932a2c6679d637bf513a2afd68394cbac5da1eee56711eda06da8c3ca4291860a45a720fa3531a0b3055bef831f618c9bf7a052435600d031d26a30dda8345c5010ca207f3476cff26b1b31f5992cadfdad21784254ab736d18094f25729867256ae366611c291190ef8167af32ab49917286038d50d1f13840fb084ee353d1d99fcf7af491a97cff4b53a658562d50a39690c1690c2de3d307eee76cb36c2a00997f6d8414e7e2d7a0a", 0xf1}], 0x3, &(0x7f0000003f80)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x68}}], 0x6, 0x8000) ioctl$VIDIOC_ENUMINPUT(r3, 0xc04c561a, &(0x7f00000040c0)={0x7, "e0150b6146f50f0f7786ec1228357c57c794f91d0a730c74ea983277ba9a3e30", 0x3, 0x1, 0x3, 0x4, 0x0, 0x4}) connect$inet(0xffffffffffffffff, &(0x7f0000004140)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000004180)={"32fa58fed669461d7ed1e8c4cef8d5ea18f1b96b02710a2844422a8ad20e7bf9", r3, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000004200)={0x9, 0x8, '\x00', 0x1, &(0x7f00000041c0)=[0x0]}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000004240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r8, 0x4, &(0x7f00000042c0)={0x3000000, 0x9}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004300)={'vxcan1\x00'}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000004340)=""/10, &(0x7f0000004380)=0xa) sched_setaffinity(r8, 0x8, &(0x7f00000043c0)=0x8000) open(&(0x7f0000004400)='./file0\x00', 0x200000, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000004440)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000004480)={'ipvs\x00'}, &(0x7f00000044c0)=0x1e) openat$nvram(0xffffff9c, &(0x7f0000004500), 0x2200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x3, &(0x7f0000004540)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000004580)=@v2={0x2, @adiantum, 0x4, '\x00', @b}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01864c2, &(0x7f00000045c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000004600)={r10}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01864c1, &(0x7f0000004640)={r10}) 329.449967ms ago: executing program 4 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0fc4be87aaaaaaaa10"], 0x9) r3 = socket$inet6(0xa, 0x6, 0xdf27) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x38e, @mcast1, 0x1}, 0x1c) r4 = syz_open_dev$mtd(&(0x7f0000000080), 0x46, 0x1) ioctl$OTPSELECT(r4, 0x80044d0d, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffff7}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000840)='GPL\x00', 0x4, 0x28, &(0x7f0000000880)=""/40, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x6, 0x101, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r1, r1, r1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r5, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0, 0x97, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) socket$rds(0x15, 0x5, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x70, 0x4, 0x80000}, 0x20) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000240)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0x0, 0x3}]}, 0x4, 0x1}, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 259.800528ms ago: executing program 1 (id=1352): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000002c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000300)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0xfdef) openat(r0, &(0x7f0000000400)='./file0\x00', 0x40, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0xf002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000100)={0x0, 0xfffffffffffffe26, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x58, r7, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x701}, @broadcast, @device_a, @random="221a31287987", {0x9, 0xfff}}, @tdls_disc_req={0xc, 0xa, {0x9, {0x65, 0x12, {@random="dab0347e84f5"}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000010}, 0x0) 259.492261ms ago: executing program 1 (id=1353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbcf2501"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) (fail_nth: 4) 179.99944ms ago: executing program 1 (id=1354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x8000000000006}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@increfs], 0xfffffdf2}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000640)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000900)={0x2020}, 0x2020) 179.563596ms ago: executing program 1 (id=1355): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000001b00)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030303030303030300900000034303933008cd2e46039fdfbece899d2b887516ee3f686fdaa7233032137be528c08c6f3a10f721e"], 0x2a, 0x0) (async) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000001a40)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a80)={0x98f909, 0xffffffed, '\x00', @p_u16=&(0x7f0000001ac0)=0xa5b}}) (async) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r1, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000640)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0xa0d8, 0xa, 0x1, 0x200, 0x6}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x17, 0x1d, 0x11, 0x1, 0xb, {0x6, 0x59c, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800c001}, 0x8000) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r9, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x4000000) sendmsg$netlink(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="14010000300001000000000000000700040100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mkdir(&(0x7f0000000a40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002d00)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="2f0000000820000004000000", @ANYRES8=r3, @ANYBLOB="3c4c40e0a9f096f004a2b766eff33241482f41d480ee0d6fc139b6668df6560e8afc35e089bc17dd71c3e432299703679b6dc1ebf909f3060d95914636ef538ec2b9a17a6c79d1011e2fbcc08c38de8b3614d6adbbfbee47a95576b0c20eb172b210dab80dc28baf4a42eeeb951f5c83f160f08d4c9ade1f84aaeadb4b61e17511ca9eeb2cf6466384a4e0a1f01c0104bf799043fffde4fb65bb5c74f63bd922a97023834ddd35bd51f6", @ANYRES64=0x0], 0x20) 119.660334ms ago: executing program 1 (id=1356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000800), 0x56) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) r8 = dup(r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6}]}, 0x8) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="198306bdda3797aee170cfe3b9766be72841f4f62bc246b2ddf8eadfa8383175dc93", 0x22}], 0x1}, 0x0) 0s ago: executing program 1 (id=1357): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r3, &(0x7f0000000780), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000ee00"/26, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESOCT=r4, @ANYRESOCT=r3], 0x50) capset(&(0x7f0000000940)={0x19980330, r2}, &(0x7f0000000980)={0xac, 0x80000000, 0x9, 0x5, 0x5, 0xffff}) r6 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r6, 0x3, 0x10, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000700)='net/netlink\x00') ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = open(0x0, 0x741002, 0x2) fcntl$getownex(r8, 0x10, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0xc, 0x2010, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000005400010326bd70007ddbdf2507000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="b9aed101c0f5f60000000000000086dd00000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040040) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xfff2, 0xe}, {0xfff1, 0xb}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x20004080) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0x1008, 0x0, 0x40, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '7'}}]}) kernel console output (not intermixed with test programs): 9389] RSP: 002b:00000000f54454bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 184.478736][ T9389] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54455d0 [ 184.478743][ T9389] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 184.478749][ T9389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.478755][ T9389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.478761][ T9389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.478789][ T9389] [ 184.912737][ T9393] FAULT_INJECTION: forcing a failure. [ 184.912737][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 184.912767][ T9393] CPU: 3 UID: 0 PID: 9393 Comm: syz.1.1058 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 184.912794][ T9393] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 184.912801][ T9393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.912828][ T9393] Call Trace: [ 184.912835][ T9393] [ 184.912842][ T9393] dump_stack_lvl+0x100/0x190 [ 184.912869][ T9393] should_fail_ex.cold+0x5/0xa [ 184.912893][ T9393] should_failslab+0xc2/0x120 [ 184.912922][ T9393] __kmalloc_cache_noprof+0x91/0x6d0 [ 184.912943][ T9393] ? copy_mount_options+0x55/0x190 [ 184.912983][ T9393] copy_mount_options+0x55/0x190 [ 184.913008][ T9393] __ia32_sys_mount+0x1ab/0x310 [ 184.913028][ T9393] ? __pfx___ia32_sys_mount+0x10/0x10 [ 184.913054][ T9393] __do_fast_syscall_32+0x14b/0x8c0 [ 184.913075][ T9393] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.913096][ T9393] do_fast_syscall_32+0x32/0x70 [ 184.913113][ T9393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.913134][ T9393] RIP: 0023:0xf7fc2fbc [ 184.913149][ T9393] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 184.913166][ T9393] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 184.913184][ T9393] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 184.913195][ T9393] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 00000000800006c0 [ 184.913207][ T9393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.913217][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.913227][ T9393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.913250][ T9393] [ 184.973817][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 184.973831][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 185.071641][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.078579][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.190981][ T12] netdevsim netdevsim12 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191008][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191026][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191043][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191061][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.380997][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 185.381045][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 185.381125][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.505283][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.505301][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.506108][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.506119][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.877945][ T9420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'. [ 186.411033][ T41] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 186.580970][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 186.581462][ T41] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 186.582542][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.582559][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.589681][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.589694][ T41] usb 6-1: Product: syz [ 186.589702][ T41] usb 6-1: Manufacturer: syz [ 186.589709][ T41] usb 6-1: SerialNumber: syz [ 186.607207][ T41] usb 6-1: config 0 descriptor?? [ 186.725759][ T9435] bond2: entered allmulticast mode [ 186.725965][ T9435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.764365][ T9435] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1073'. [ 186.766089][ T9434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1073'. [ 186.778335][ T9435] bond0 (unregistering): Released all slaves [ 186.814696][ T41] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 186.814736][ T41] imon 6-1:0.0: unable to initialize intf0, err -19 [ 186.814744][ T41] imon:imon_probe: failed to initialize context! [ 186.814750][ T41] imon 6-1:0.0: unable to register, err -19 [ 186.819005][ T41] usb 6-1: USB disconnect, device number 12 [ 187.065489][ T9456] 9p: Bad value for 'wfdno' [ 187.065885][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 187.270958][ T41] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 187.308962][ T9468] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.432586][ T41] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 187.437964][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.437992][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.442896][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.442914][ T41] usb 6-1: Product: syz [ 187.442925][ T41] usb 6-1: Manufacturer: syz [ 187.442937][ T41] usb 6-1: SerialNumber: syz [ 187.447358][ T41] usb 6-1: config 0 descriptor?? [ 187.451143][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 187.460914][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 187.652486][ T41] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 187.652527][ T41] imon 6-1:0.0: unable to initialize intf0, err -19 [ 187.652535][ T41] imon:imon_probe: failed to initialize context! [ 187.652541][ T41] imon 6-1:0.0: unable to register, err -19 [ 187.833801][ T9485] fuse: Unknown parameter 'user_id00000000000000000000' [ 187.983577][ T9477] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1087'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 188.919341][ T5852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.929810][ T9515] FAULT_INJECTION: forcing a failure. [ 188.929810][ T9515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.929831][ T9515] CPU: 0 UID: 0 PID: 9515 Comm: syz.0.1099 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 188.929847][ T9515] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 188.929852][ T9515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.929859][ T9515] Call Trace: [ 188.929863][ T9515] [ 188.929868][ T9515] dump_stack_lvl+0x100/0x190 [ 188.929887][ T9515] should_fail_ex.cold+0x5/0xa [ 188.929903][ T9515] _copy_to_user+0x32/0xd0 [ 188.929919][ T9515] simple_read_from_buffer+0xcb/0x170 [ 188.929937][ T9515] proc_fail_nth_read+0x1af/0x230 [ 188.929954][ T9515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.929971][ T9515] ? rw_verify_area+0xce/0x6d0 [ 188.929984][ T9515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.930000][ T9515] vfs_read+0x1e4/0xb40 [ 188.930036][ T9515] ? lock_acquire+0x1d1/0x380 [ 188.930052][ T9515] ? __fget_files+0x34/0x3d0 [ 188.930067][ T9515] ? __pfx_vfs_read+0x10/0x10 [ 188.930080][ T9515] ? find_held_lock+0x2b/0x80 [ 188.930093][ T9515] ? __fget_files+0x215/0x3d0 [ 188.930111][ T9515] ? __fget_files+0x21f/0x3d0 [ 188.930131][ T9515] ksys_read+0x12a/0x250 [ 188.930147][ T9515] ? __pfx_ksys_read+0x10/0x10 [ 188.930165][ T9515] do_int80_emulation+0x166/0x650 [ 188.930180][ T9515] asm_int80_emulation+0x1a/0x20 [ 188.930191][ T9515] RIP: 0023:0xf71a77ab [ 188.930200][ T9515] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 188.930211][ T9515] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 188.930223][ T9515] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54665d0 [ 188.930230][ T9515] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 188.930236][ T9515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.930243][ T9515] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.930249][ T9515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.930264][ T9515] [ 189.003324][ T5852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.057574][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.060170][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.067685][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.071630][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.072540][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.113640][ T9525] FAULT_INJECTION: forcing a failure. [ 189.113640][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.113664][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.0.1102 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 189.113693][ T9525] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 189.113698][ T9525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.113704][ T9525] Call Trace: [ 189.113708][ T9525] [ 189.113713][ T9525] dump_stack_lvl+0x100/0x190 [ 189.113731][ T9525] should_fail_ex.cold+0x5/0xa [ 189.113747][ T9525] _copy_to_user+0x32/0xd0 [ 189.113767][ T9525] __copy_siginfo_to_user32+0x9a/0x100 [ 189.113785][ T9525] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 189.113807][ T9525] ? siginfo_layout+0x156/0x290 [ 189.113824][ T9525] ia32_setup_rt_frame+0x6ac/0xaf0 [ 189.113838][ T9525] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 189.113850][ T9525] ? __fget_files+0x34/0x3d0 [ 189.113866][ T9525] ? __pfx_vfs_read+0x10/0x10 [ 189.113879][ T9525] ? find_held_lock+0x2b/0x80 [ 189.113892][ T9525] arch_do_signal_or_restart+0x459/0x7a0 [ 189.113909][ T9525] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.113928][ T9525] ? fput+0x7c/0x100 [ 189.113941][ T9525] exit_to_user_mode_loop+0x139/0x700 [ 189.113952][ T9525] ? rcu_is_watching+0x13/0xc0 [ 189.113965][ T9525] __do_fast_syscall_32+0x5b0/0x8c0 [ 189.113978][ T9525] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.113991][ T9525] do_fast_syscall_32+0x32/0x70 [ 189.114022][ T9525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.114037][ T9525] RIP: 0023:0xf7fb6fba [ 189.114047][ T9525] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.114057][ T9525] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 189.114069][ T9525] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000000000 [ 189.114075][ T9525] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.114082][ T9525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.114088][ T9525] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.114094][ T9525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.114109][ T9525] [ 189.119042][ T5852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.205308][ T5852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.422798][ T5852] bond1 (unregistering): (slave gretap1): Releasing active interface [ 189.442820][ T5852] bond1 (unregistering): Released all slaves [ 189.448584][ T5852] bond2 (unregistering): Released all slaves [ 189.470626][ T9520] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.576936][ T41] usb 6-1: USB disconnect, device number 13 [ 189.608939][ T9551] binder: 9550:9551 ioctl c0306201 80000500 returned -14 [ 189.617161][ T9552] fuse: fd is not a fuse device [ 189.674017][ T5493] 8021q: adding VLAN 0 to HW filter on device eth2 [ 189.769773][ T43] kauditd_printk_skb: 1095 callbacks suppressed [ 189.769786][ T43] audit: type=1326 audit(1792739758.655:31699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.1.1110" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fbc code=0x0 [ 189.816142][ T5852] hsr_slave_0: left promiscuous mode [ 189.816670][ T5852] hsr_slave_1: left promiscuous mode [ 189.832319][ T5852] veth1_macvtap: left promiscuous mode [ 189.832378][ T5852] veth0_macvtap: left promiscuous mode [ 189.832494][ T5852] veth1_vlan: left promiscuous mode [ 189.833086][ T5852] veth0_vlan: left promiscuous mode [ 190.050060][ T5493] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.081481][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.081551][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.081611][ T9520] bridge_slave_0: entered allmulticast mode [ 190.082292][ T9520] bridge_slave_0: entered promiscuous mode [ 190.092222][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.092295][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.092350][ T9520] bridge_slave_1: entered allmulticast mode [ 190.092988][ T9520] bridge_slave_1: entered promiscuous mode [ 190.095869][ T9575] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 190.095883][ T9575] netlink: 'syz.0.1111': attribute type 8 has an invalid length. [ 190.095891][ T9575] netlink: 'syz.0.1111': attribute type 5 has an invalid length. [ 190.127995][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.129442][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.152982][ T9520] team0: Port device team_slave_0 added [ 190.156564][ T9520] team0: Port device team_slave_1 added [ 190.215815][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.215826][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.215840][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.225621][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.225631][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.225645][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.256018][ T9520] hsr_slave_0: entered promiscuous mode [ 190.256712][ T9520] hsr_slave_1: entered promiscuous mode [ 190.257247][ T9520] debugfs: 'hsr0' already exists in 'hsr' [ 190.257265][ T9520] Cannot create hsr debugfs directory [ 190.258246][ T5493] 8021q: adding VLAN 0 to HW filter on device eth4 [ 190.424733][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 190.424751][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 190.514964][ T9598] overlayfs: failed to clone upperpath [ 190.753759][ T9520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.759364][ T9520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.759891][ T9520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.767922][ T9520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.768911][ T9520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.776025][ T9520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.776492][ T9520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.788483][ T9520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.807566][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.807612][ T9520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.807751][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.807795][ T9520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.809412][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'. [ 190.816774][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.820665][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.942169][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.957699][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.966482][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.966562][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.974257][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.974334][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.131342][ T5779] Bluetooth: hci2: command tx timeout [ 191.266370][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.289729][ T9665] Invalid ELF header magic: != ELF [ 191.301208][ T9668] overlay: Unknown parameter '/' [ 191.301453][ T9647] fuse: Bad value for 'fd' [ 191.307749][ T9668] overlay: Unknown parameter '/' [ 191.308204][ T9668] overlay: Unknown parameter '/' [ 191.308863][ T9668] overlay: Unknown parameter '/' [ 191.309233][ T9668] overlay: Unknown parameter '/' [ 191.309759][ T9668] overlay: Unknown parameter '/' [ 191.310262][ T9668] overlay: Unknown parameter '/' [ 191.315174][ T9668] overlay: Unknown parameter '/' [ 191.319549][ T9668] overlay: Unknown parameter '/' [ 191.320741][ T9668] overlay: Unknown parameter '/' [ 191.322258][ T9520] veth0_vlan: entered promiscuous mode [ 191.323309][ T9668] overlay: Unknown parameter '/' [ 191.325010][ T9668] overlay: Unknown parameter '/' [ 191.327333][ T9668] overlay: Unknown parameter '/' [ 191.328236][ T9520] veth1_vlan: entered promiscuous mode [ 191.332867][ T9668] overlay: Unknown parameter '/' [ 191.334387][ T9668] overlay: Unknown parameter '/' [ 191.335885][ T9668] overlay: Unknown parameter '/' [ 191.339570][ T9668] overlay: Unknown parameter '/' [ 191.340000][ T9668] overlay: Unknown parameter '/' [ 191.340218][ T9668] overlay: Unknown parameter '/' [ 191.340459][ T9668] overlay: Unknown parameter '/' [ 191.340675][ T9668] overlay: Unknown parameter '/' [ 191.341432][ T9668] overlay: Unknown parameter '/' [ 191.345197][ T9668] overlay: Unknown parameter '/' [ 191.345671][ T9668] overlay: Unknown parameter '/' [ 191.347372][ T9668] overlay: Unknown parameter '/' [ 191.348701][ T9668] overlay: Unknown parameter '/' [ 191.350226][ T9668] overlay: Unknown parameter '/' [ 191.351939][ T9668] overlay: Unknown parameter '/' [ 191.353518][ T9668] overlay: Unknown parameter '/' [ 191.363029][ T9668] overlay: Unknown parameter '/' [ 191.364475][ T9668] overlay: Unknown parameter '/' [ 191.365341][ T9668] overlay: Unknown parameter '/' [ 191.367042][ T9520] veth0_macvtap: entered promiscuous mode [ 191.368590][ T9668] overlay: Unknown parameter '/' [ 191.371927][ T9520] veth1_macvtap: entered promiscuous mode [ 191.379104][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.395264][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.469236][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.469257][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.480816][ T6968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.480834][ T6968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.481155][ T7891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.481192][ T7891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.481221][ T7891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.481251][ T7891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.577506][ T9682] overlayfs: missing 'lowerdir' [ 191.582355][ T9682] tipc: Started in network mode [ 191.582364][ T9682] tipc: Node identity , cluster identity 4711 [ 191.582371][ T9682] tipc: Failed to set node id, please configure manually [ 191.584221][ T9682] tipc: Enabling of bearer rejected, failed to enable media [ 191.646055][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 191.674818][ T9688] veth3: entered promiscuous mode [ 191.674839][ T9688] veth3: entered allmulticast mode [ 192.525608][ T43] audit: type=1326 audit(1792739761.415:31700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.525730][ T43] audit: type=1326 audit(1792739761.415:31701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526309][ T43] audit: type=1326 audit(1792739761.415:31702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526395][ T43] audit: type=1326 audit(1792739761.415:31703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526433][ T43] audit: type=1326 audit(1792739761.415:31704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526520][ T43] audit: type=1326 audit(1792739761.415:31705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526592][ T43] audit: type=1326 audit(1792739761.415:31706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526813][ T43] audit: type=1326 audit(1792739761.415:31707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 192.526886][ T43] audit: type=1326 audit(1792739761.415:31708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 193.211061][ T5779] Bluetooth: hci2: command tx timeout [ 193.924087][ T9727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.932735][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.958634][ T9727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.052769][ T9727] batadv_slave_0: entered promiscuous mode [ 194.052911][ T9727] batadv_slave_0: entered allmulticast mode [ 194.827857][ T43] kauditd_printk_skb: 1287 callbacks suppressed [ 194.827870][ T43] audit: type=1326 audit(1792739763.715:32996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71177ab code=0x7ffc0000 [ 194.871390][ T43] audit: type=1326 audit(1792739763.765:32997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.0.1151" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fbc code=0x0 [ 194.928086][ T43] audit: type=1326 audit(1792739763.815:32998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71177ab code=0x7ffc0000 [ 195.031272][ T43] audit: type=1326 audit(1792739763.915:32999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf73befbc code=0x7ffc0000 [ 195.162992][ T9765] FAULT_INJECTION: forcing a failure. [ 195.162992][ T9765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.163014][ T9765] CPU: 2 UID: 0 PID: 9765 Comm: syz.3.1153 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 195.163031][ T9765] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 195.163036][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.163042][ T9765] Call Trace: [ 195.163046][ T9765] [ 195.163053][ T9765] dump_stack_lvl+0x100/0x190 [ 195.163071][ T9765] should_fail_ex.cold+0x5/0xa [ 195.163086][ T9765] _copy_to_user+0x32/0xd0 [ 195.163102][ T9765] simple_read_from_buffer+0xcb/0x170 [ 195.163119][ T9765] proc_fail_nth_read+0x1af/0x230 [ 195.163136][ T9765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.163153][ T9765] ? rw_verify_area+0xce/0x6d0 [ 195.163166][ T9765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.163185][ T9765] vfs_read+0x1e4/0xb40 [ 195.163210][ T9765] ? lock_acquire+0x1d1/0x380 [ 195.163227][ T9765] ? __fget_files+0x34/0x3d0 [ 195.163243][ T9765] ? __pfx_vfs_read+0x10/0x10 [ 195.163256][ T9765] ? find_held_lock+0x2b/0x80 [ 195.163268][ T9765] ? __fget_files+0x215/0x3d0 [ 195.163286][ T9765] ? __fget_files+0x21f/0x3d0 [ 195.163306][ T9765] ksys_read+0x12a/0x250 [ 195.163320][ T9765] ? __pfx_ksys_read+0x10/0x10 [ 195.163339][ T9765] do_int80_emulation+0x166/0x650 [ 195.163353][ T9765] asm_int80_emulation+0x1a/0x20 [ 195.163364][ T9765] RIP: 0023:0xf71177ab [ 195.163374][ T9765] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 195.163384][ T9765] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 195.163396][ T9765] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 195.163402][ T9765] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 195.163409][ T9765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.163415][ T9765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.163421][ T9765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.163436][ T9765] [ 195.238021][ T9769] binder: 9768:9769 ioctl c0306201 80000d00 returned -22 [ 195.291110][ T5779] Bluetooth: hci2: command tx timeout [ 195.433120][ T9775] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 195.435604][ T43] audit: type=1400 audit(1792739764.325:33000): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9774 comm="syz.1.1157" name="unknown" offset=28 [ 195.466454][ T9777] FAULT_INJECTION: forcing a failure. [ 195.466454][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 195.466501][ T9777] CPU: 3 UID: 0 PID: 9777 Comm: syz.1.1158 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 195.466520][ T9777] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 195.466524][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.466531][ T9777] Call Trace: [ 195.466535][ T9777] [ 195.466539][ T9777] dump_stack_lvl+0x100/0x190 [ 195.466558][ T9777] should_fail_ex.cold+0x5/0xa [ 195.466573][ T9777] should_failslab+0xc2/0x120 [ 195.466591][ T9777] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 195.466607][ T9777] ? __d_alloc+0x34/0xad0 [ 195.466626][ T9777] __d_alloc+0x34/0xad0 [ 195.466645][ T9777] d_alloc_pseudo+0x1c/0xc0 [ 195.466659][ T9777] alloc_file_pseudo+0x118/0x290 [ 195.466671][ T9777] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 195.466683][ T9777] ? _raw_spin_unlock+0x28/0x50 [ 195.466703][ T9777] ? alloc_fd+0x471/0x7a0 [ 195.466720][ T9777] __anon_inode_getfile+0xe8/0x280 [ 195.466736][ T9777] anon_inode_getfd+0x68/0xc0 [ 195.466751][ T9777] bpf_map_new_fd+0x52/0x70 [ 195.466764][ T9777] bpf_obj_get_user+0x401/0x490 [ 195.466777][ T9777] ? __pfx_bpf_obj_get_user+0x10/0x10 [ 195.466791][ T9777] ? bpf_lsm_bpf+0x9/0x10 [ 195.466804][ T9777] __sys_bpf+0x28ec/0x4a30 [ 195.466820][ T9777] ? __pfx___sys_bpf+0x10/0x10 [ 195.466832][ T9777] ? lock_acquire+0x1d1/0x380 [ 195.466848][ T9777] ? get_pid_task+0x2a/0x250 [ 195.466859][ T9777] ? find_held_lock+0x2b/0x80 [ 195.466870][ T9777] ? get_pid_task+0xfc/0x250 [ 195.466880][ T9777] ? get_pid_task+0xfc/0x250 [ 195.466894][ T9777] ? proc_fail_nth_write+0x9f/0x220 [ 195.466910][ T9777] ? find_held_lock+0x2b/0x80 [ 195.466925][ T9777] ? rcu_read_lock_any_held+0x6a/0x90 [ 195.466939][ T9777] ? find_held_lock+0x2b/0x80 [ 195.466950][ T9777] ? ksys_write+0x190/0x250 [ 195.466964][ T9777] ? ksys_write+0x190/0x250 [ 195.466989][ T9777] ? lock_acquire+0x1d1/0x380 [ 195.467003][ T9777] ? __might_fault+0xc5/0x140 [ 195.467016][ T9777] ? find_held_lock+0x2b/0x80 [ 195.467030][ T9777] ? __ia32_sys_bpf+0xcc/0x170 [ 195.467043][ T9777] __ia32_sys_bpf+0xcc/0x170 [ 195.467057][ T9777] ? __might_fault+0x111/0x140 [ 195.467069][ T9777] __do_fast_syscall_32+0x14b/0x8c0 [ 195.467081][ T9777] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.467094][ T9777] do_fast_syscall_32+0x32/0x70 [ 195.467106][ T9777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.467121][ T9777] RIP: 0023:0xf7fc2fbc [ 195.467130][ T9777] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 195.467141][ T9777] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 195.467152][ T9777] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800003c0 [ 195.467159][ T9777] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.467166][ T9777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.467172][ T9777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.467179][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.467193][ T9777] [ 195.808372][ T43] audit: type=1326 audit(1792739764.695:33001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.0.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fbc code=0x7ffc0000 [ 195.808419][ T43] audit: type=1326 audit(1792739764.695:33002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.0.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fbc code=0x7ffc0000 [ 195.809478][ T43] audit: type=1326 audit(1792739764.695:33003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.0.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fbc code=0x7ffc0000 [ 195.809928][ T43] audit: type=1326 audit(1792739764.695:33004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.0.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7fb6fbc code=0x7ffc0000 [ 195.809966][ T43] audit: type=1326 audit(1792739764.695:33005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.0.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fbc code=0x7ffc0000 [ 195.999733][ T9805] 9p: Bad value for 'rfdno' [ 196.019118][ T9805] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.701009][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 196.878532][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.895430][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.895446][ T9] usb 8-1: Product: syz [ 196.895453][ T9] usb 8-1: Manufacturer: syz [ 196.895460][ T9] usb 8-1: SerialNumber: syz [ 196.939263][ T897] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.157166][ T9] usb 8-1: USB disconnect, device number 13 [ 197.371080][ T5779] Bluetooth: hci2: command tx timeout [ 197.772028][ T9835] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 197.772052][ T9835] ipvlan0: entered allmulticast mode [ 197.772062][ T9835] veth0_vlan: entered allmulticast mode [ 197.776937][ T9835] team0: Device ipvlan0 failed to register rx_handler [ 197.825994][ T9835] bond3: (slave bond_slave_1): Device is not our slave [ 197.826009][ T9835] bond3: option active_slave: invalid value (bond_slave_1) [ 197.827019][ T9835] bond3 (unregistering): Released all slaves [ 197.862676][ T9839] fuse: Unknown parameter 'user_id00000000000000000000' [ 197.878761][ T9841] bond3: option arp_all_targets: invalid value (1073741825) [ 197.880018][ T9841] bond3 (unregistering): Released all slaves [ 198.001364][ T9835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1173'. [ 198.010962][ T897] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 198.011076][ T897] ath9k_htc: Failed to initialize the device [ 198.015584][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 198.957056][ T9865] FAULT_INJECTION: forcing a failure. [ 198.957056][ T9865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.957084][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.0.1180 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 198.957105][ T9865] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 198.957111][ T9865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.957120][ T9865] Call Trace: [ 198.957125][ T9865] [ 198.957131][ T9865] dump_stack_lvl+0x100/0x190 [ 198.957154][ T9865] should_fail_ex.cold+0x5/0xa [ 198.957170][ T9865] ? prepare_alloc_pages+0x16d/0x5b0 [ 198.957194][ T9865] should_fail_alloc_page+0xeb/0x140 [ 198.957218][ T9865] prepare_alloc_pages+0x1f0/0x5b0 [ 198.957239][ T9865] ? is_bpf_text_address+0x94/0x1a0 [ 198.957263][ T9865] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 198.957291][ T9865] ? stack_trace_save+0x8e/0xc0 [ 198.957310][ T9865] ? __pfx_stack_trace_save+0x10/0x10 [ 198.957330][ T9865] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.957352][ T9865] ? kasan_save_stack+0x3f/0x50 [ 198.957370][ T9865] ? kasan_save_stack+0x30/0x50 [ 198.957389][ T9865] ? kasan_save_track+0x14/0x30 [ 198.957407][ T9865] ? __kasan_slab_alloc+0x89/0x90 [ 198.957427][ T9865] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 198.957447][ T9865] ? alloc_vmap_area+0x643/0x2bc0 [ 198.957465][ T9865] ? __get_vm_area_node+0x1ed/0x350 [ 198.957485][ T9865] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 198.957499][ T9865] ? __vmalloc_node_noprof+0xad/0xf0 [ 198.957512][ T9865] ? __vmalloc_noprof+0xa3/0x120 [ 198.957524][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.957544][ T9865] ? bpf_prog_alloc+0x3b/0x200 [ 198.957568][ T9865] ? bpf_prog_load+0x49e/0x2ab0 [ 198.957589][ T9865] ? __sys_bpf+0x1f46/0x4a30 [ 198.957604][ T9865] ? __ia32_sys_bpf+0xcc/0x170 [ 198.957620][ T9865] ? __do_fast_syscall_32+0x14b/0x8c0 [ 198.957635][ T9865] ? do_fast_syscall_32+0x32/0x70 [ 198.957657][ T9865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.957681][ T9865] ? policy_nodemask+0xed/0x4f0 [ 198.957697][ T9865] alloc_pages_mpol+0x201/0x550 [ 198.957712][ T9865] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 198.957732][ T9865] alloc_pages_noprof+0x1a/0x160 [ 198.957749][ T9865] get_free_pages_noprof+0x10/0xb0 [ 198.957787][ T9865] __kasan_populate_vmalloc+0xa0/0x210 [ 198.957811][ T9865] alloc_vmap_area+0x963/0x2bc0 [ 198.957838][ T9865] ? kasan_save_track+0x14/0x30 [ 198.957858][ T9865] ? __kasan_kmalloc+0xaa/0xb0 [ 198.957877][ T9865] ? __pfx_alloc_vmap_area+0x10/0x10 [ 198.957898][ T9865] ? __get_vm_area_node+0x124/0x350 [ 198.957922][ T9865] __get_vm_area_node+0x1ed/0x350 [ 198.957947][ T9865] __vmalloc_node_range_noprof+0x268/0x1420 [ 198.957982][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.958003][ T9865] ? down_write+0x141/0x1f0 [ 198.958025][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.958050][ T9865] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.958064][ T9865] ? __lock_acquire+0x5c0/0x1f40 [ 198.958090][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.958110][ T9865] __vmalloc_node_noprof+0xad/0xf0 [ 198.958124][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.958147][ T9865] __vmalloc_noprof+0xa3/0x120 [ 198.958161][ T9865] ? __pfx___vmalloc_noprof+0x10/0x10 [ 198.958175][ T9865] ? is_bpf_text_address+0x25/0x1a0 [ 198.958196][ T9865] ? rcu_is_watching+0x13/0xc0 [ 198.958212][ T9865] ? apparmor_capable+0x1d7/0x4d0 [ 198.958231][ T9865] bpf_prog_alloc_no_stats+0x58/0x690 [ 198.958250][ T9865] ? security_capable+0x80/0x260 [ 198.958267][ T9865] bpf_prog_alloc+0x3b/0x200 [ 198.958286][ T9865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.958309][ T9865] bpf_prog_load+0x49e/0x2ab0 [ 198.958330][ T9865] ? __lock_acquire+0x5c0/0x1f40 [ 198.958352][ T9865] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.958391][ T9865] __sys_bpf+0x1f46/0x4a30 [ 198.958413][ T9865] ? __pfx___sys_bpf+0x10/0x10 [ 198.958428][ T9865] ? lock_acquire+0x1d1/0x380 [ 198.958446][ T9865] ? get_pid_task+0x2a/0x250 [ 198.958461][ T9865] ? find_held_lock+0x2b/0x80 [ 198.958476][ T9865] ? get_pid_task+0xfc/0x250 [ 198.958488][ T9865] ? get_pid_task+0xfc/0x250 [ 198.958506][ T9865] ? proc_fail_nth_write+0x9f/0x220 [ 198.958527][ T9865] ? find_held_lock+0x2b/0x80 [ 198.958552][ T9865] ? rcu_read_lock_any_held+0x6a/0x90 [ 198.958569][ T9865] ? find_held_lock+0x2b/0x80 [ 198.958583][ T9865] ? ksys_write+0x190/0x250 [ 198.958601][ T9865] ? ksys_write+0x190/0x250 [ 198.958631][ T9865] ? lock_acquire+0x1d1/0x380 [ 198.958649][ T9865] ? __might_fault+0xc5/0x140 [ 198.958665][ T9865] ? find_held_lock+0x2b/0x80 [ 198.958683][ T9865] ? __ia32_sys_bpf+0xcc/0x170 [ 198.958699][ T9865] __ia32_sys_bpf+0xcc/0x170 [ 198.958716][ T9865] ? __might_fault+0x111/0x140 [ 198.958733][ T9865] __do_fast_syscall_32+0x14b/0x8c0 [ 198.958747][ T9865] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.958764][ T9865] do_fast_syscall_32+0x32/0x70 [ 198.958779][ T9865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.958798][ T9865] RIP: 0023:0xf7fb6fbc [ 198.958810][ T9865] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 198.958824][ T9865] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 198.958839][ T9865] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680 [ 198.958848][ T9865] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.958856][ T9865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.958864][ T9865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.958872][ T9865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.958891][ T9865] [ 198.958962][ T9865] syz.0.1180: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.959008][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.0.1180 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 198.959029][ T9865] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 198.959034][ T9865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.959042][ T9865] Call Trace: [ 198.959047][ T9865] [ 198.959053][ T9865] dump_stack_lvl+0x100/0x190 [ 198.959073][ T9865] warn_alloc.cold+0x9e/0xb2 [ 198.959090][ T9865] ? __pfx_warn_alloc+0x10/0x10 [ 198.959107][ T9865] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.959123][ T9865] ? __get_vm_area_node+0x2f0/0x350 [ 198.959149][ T9865] ? __get_vm_area_node+0x22b/0x350 [ 198.959174][ T9865] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 198.959189][ T9865] ? down_write+0x141/0x1f0 [ 198.959215][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.959240][ T9865] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.959259][ T9865] ? __lock_acquire+0x5c0/0x1f40 [ 198.959284][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.959303][ T9865] __vmalloc_node_noprof+0xad/0xf0 [ 198.959317][ T9865] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.959340][ T9865] __vmalloc_noprof+0xa3/0x120 [ 198.959353][ T9865] ? __pfx___vmalloc_noprof+0x10/0x10 [ 198.959367][ T9865] ? is_bpf_text_address+0x25/0x1a0 [ 198.959389][ T9865] ? rcu_is_watching+0x13/0xc0 [ 198.959404][ T9865] ? apparmor_capable+0x1d7/0x4d0 [ 198.959422][ T9865] bpf_prog_alloc_no_stats+0x58/0x690 [ 198.959442][ T9865] ? security_capable+0x80/0x260 [ 198.959459][ T9865] bpf_prog_alloc+0x3b/0x200 [ 198.959477][ T9865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.959500][ T9865] bpf_prog_load+0x49e/0x2ab0 [ 198.959521][ T9865] ? __lock_acquire+0x5c0/0x1f40 [ 198.959552][ T9865] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.959592][ T9865] __sys_bpf+0x1f46/0x4a30 [ 198.959614][ T9865] ? __pfx___sys_bpf+0x10/0x10 [ 198.959630][ T9865] ? lock_acquire+0x1d1/0x380 [ 198.959648][ T9865] ? get_pid_task+0x2a/0x250 [ 198.959661][ T9865] ? find_held_lock+0x2b/0x80 [ 198.959676][ T9865] ? get_pid_task+0xfc/0x250 [ 198.959689][ T9865] ? get_pid_task+0xfc/0x250 [ 198.959707][ T9865] ? proc_fail_nth_write+0x9f/0x220 [ 198.959727][ T9865] ? find_held_lock+0x2b/0x80 [ 198.959747][ T9865] ? rcu_read_lock_any_held+0x6a/0x90 [ 198.959763][ T9865] ? find_held_lock+0x2b/0x80 [ 198.959777][ T9865] ? ksys_write+0x190/0x250 [ 198.959795][ T9865] ? ksys_write+0x190/0x250 [ 198.959824][ T9865] ? lock_acquire+0x1d1/0x380 [ 198.959842][ T9865] ? __might_fault+0xc5/0x140 [ 198.959857][ T9865] ? find_held_lock+0x2b/0x80 [ 198.959876][ T9865] ? __ia32_sys_bpf+0xcc/0x170 [ 198.959891][ T9865] __ia32_sys_bpf+0xcc/0x170 [ 198.959909][ T9865] ? __might_fault+0x111/0x140 [ 198.959926][ T9865] __do_fast_syscall_32+0x14b/0x8c0 [ 198.959941][ T9865] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.959957][ T9865] do_fast_syscall_32+0x32/0x70 [ 198.959972][ T9865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.959990][ T9865] RIP: 0023:0xf7fb6fbc [ 198.960001][ T9865] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 198.960014][ T9865] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 198.960028][ T9865] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680 [ 198.960037][ T9865] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.960045][ T9865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.960054][ T9865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.960062][ T9865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.960081][ T9865] [ 198.960086][ T9865] Mem-Info: [ 198.960092][ T9865] active_anon:18831 inactive_anon:41976 isolated_anon:0 [ 198.960092][ T9865] active_file:1863 inactive_file:5291 isolated_file:0 [ 198.960092][ T9865] unevictable:0 dirty:227 writeback:0 [ 198.960092][ T9865] slab_reclaimable:6724 slab_unreclaimable:62366 [ 198.960092][ T9865] mapped:58721 shmem:59069 pagetables:1270 [ 198.960092][ T9865] sec_pagetables:309 bounce:0 [ 198.960092][ T9865] kernel_misc_reclaimable:0 [ 198.960092][ T9865] free:17901 free_pcp:1583 free_cma:0 [ 198.960126][ T9865] Node 0 active_anon:528kB inactive_anon:2348kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1620kB dirty:0kB writeback:0kB shmem:2792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8416kB pagetables:1152kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 198.960162][ T9865] Node 1 active_anon:74796kB inactive_anon:165556kB active_file:7300kB inactive_file:21164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233264kB dirty:908kB writeback:0kB shmem:233484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7824kB pagetables:3928kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 198.960197][ T9865] Node 0 DMA free:3416kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.960235][ T9865] lowmem_reserve[]: 0 257 257 257 257 [ 198.960259][ T9865] Node 0 DMA32 free:13652kB boost:4096kB min:15656kB low:18544kB high:21432kB reserved_highatomic:0kB free_highatomic:0kB active_anon:528kB inactive_anon:2348kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:284kB present:1032196kB managed:263564kB mlocked:0kB bounce:0kB free_pcp:2976kB local_pcp:1456kB free_cma:0kB [ 198.960298][ T9865] lowmem_reserve[]: 0 0 0 0 0 [ 198.960321][ T9865] Node 1 DMA32 free:54536kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:74796kB inactive_anon:165556kB active_file:7300kB inactive_file:21164kB unevictable:0kB writepending:908kB zspages:5220kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3316kB local_pcp:640kB free_cma:0kB [ 198.960359][ T9865] lowmem_reserve[]: 0 0 0 0 0 [ 198.960382][ T9865] Node 0 DMA: 128*4kB (UE) 39*8kB (UE) 20*16kB (UE) 43*32kB (UE) 12*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3416kB [ 198.960470][ T9865] Node 0 DMA32: 151*4kB (U) 73*8kB (UME) 1*16kB (E) 75*32kB (UE) 34*64kB (UME) 7*128kB (UE) 3*256kB (U) 6*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 13588kB [ 198.960574][ T9865] Node 1 DMA32: 1424*4kB (UME) 546*8kB (UME) 238*16kB (UME) 359*32kB (UME) 117*64kB (UME) 62*128kB (UME) 22*256kB (UME) 6*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 0*4096kB = 54608kB [ 198.960677][ T9865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.960688][ T9865] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 198.960698][ T9865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.960709][ T9865] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 198.960719][ T9865] 66619 total pagecache pages [ 198.960724][ T9865] 398 pages in swap cache [ 198.960729][ T9865] Free swap = 70652kB [ 198.960734][ T9865] Total swap = 124996kB [ 198.960739][ T9865] 524155 pages RAM [ 198.960744][ T9865] 0 pages HighMem/MovableOnly [ 198.960749][ T9865] 217372 pages reserved [ 198.960753][ T9865] 0 pages cma reserved [ 198.991354][ T9867] FAULT_INJECTION: forcing a failure. [ 198.991354][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 198.991374][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.0.1181 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 198.991391][ T9867] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 198.991396][ T9867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.991402][ T9867] Call Trace: [ 198.991406][ T9867] [ 198.991410][ T9867] dump_stack_lvl+0x100/0x190 [ 198.991430][ T9867] should_fail_ex.cold+0x5/0xa [ 198.991446][ T9867] should_failslab+0xc2/0x120 [ 198.991463][ T9867] __kmalloc_noprof+0xfc/0x840 [ 198.991478][ T9867] ? rcu_is_watching+0x13/0xc0 [ 198.991490][ T9867] ? tomoyo_realpath_from_path+0xb6/0x690 [ 198.991516][ T9867] tomoyo_realpath_from_path+0xb6/0x690 [ 198.991537][ T9867] tomoyo_path_number_perm+0x23c/0x580 [ 198.991551][ T9867] ? tomoyo_path_number_perm+0x22e/0x580 [ 198.991567][ T9867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.991586][ T9867] ? do_raw_spin_lock+0x128/0x260 [ 198.991597][ T9867] ? find_held_lock+0x2b/0x80 [ 198.991616][ T9867] ? find_held_lock+0x2b/0x80 [ 198.991627][ T9867] ? current_check_access_path+0x25c/0x420 [ 198.991646][ T9867] ? __pfx_current_check_access_path+0x10/0x10 [ 198.991662][ T9867] ? do_raw_spin_unlock+0x145/0x1e0 [ 198.991675][ T9867] ? simple_lookup+0xfc/0x1d0 [ 198.991693][ T9867] tomoyo_path_mknod+0x164/0x190 [ 198.991705][ T9867] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 198.991717][ T9867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.991737][ T9867] security_path_mknod+0x161/0x300 [ 198.991755][ T9867] filename_mknodat+0x241/0x7f0 [ 198.991775][ T9867] ? __pfx_filename_mknodat+0x10/0x10 [ 198.991792][ T9867] ? strncpy_from_user+0x19d/0x2d0 [ 198.991811][ T9867] ? do_getname+0x191/0x390 [ 198.991824][ T9867] __ia32_sys_mknod+0x8e/0xc0 [ 198.991841][ T9867] __do_fast_syscall_32+0x14b/0x8c0 [ 198.991855][ T9867] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.991867][ T9867] do_fast_syscall_32+0x32/0x70 [ 198.991879][ T9867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.991893][ T9867] RIP: 0023:0xf7fb6fbc [ 198.991903][ T9867] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 198.991913][ T9867] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000000e [ 198.991924][ T9867] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000fff [ 198.991931][ T9867] RDX: 0000000000000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.991938][ T9867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.991944][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.991950][ T9867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.991965][ T9867] [ 198.991969][ T9867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.013351][ T9866] Process accounting resumed [ 199.488640][ T9875] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 199.488673][ T9875] ipvlan0: entered allmulticast mode [ 199.488689][ T9875] veth0_vlan: entered allmulticast mode [ 199.492625][ T9875] team0: Device ipvlan0 failed to register rx_handler [ 199.553272][ T9875] bond1: (slave bond_slave_1): Device is not our slave [ 199.553292][ T9875] bond1: option active_slave: invalid value (bond_slave_1) [ 199.556171][ T9875] bond1 (unregistering): Released all slaves [ 199.586639][ T9882] fuse: fd is not a fuse device [ 199.637888][ T9885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1183'. [ 199.646824][ T9881] bond1: option arp_all_targets: invalid value (1073741825) [ 199.648446][ T9881] bond1 (unregistering): Released all slaves [ 199.761090][ T5881] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.874314][ T9887] 9p: Bad value for 'rfdno' [ 199.898860][ T9887] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.922659][ T5881] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.922702][ T5881] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 199.930967][ T9891] FAULT_INJECTION: forcing a failure. [ 199.930967][ T9891] name failslab, interval 1, probability 0, space 0, times 0 [ 199.930999][ T9891] CPU: 1 UID: 0 PID: 9891 Comm: syz.3.1186 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 199.931028][ T9891] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 199.931035][ T9891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.931046][ T9891] Call Trace: [ 199.931054][ T9891] [ 199.931062][ T9891] dump_stack_lvl+0x100/0x190 [ 199.931106][ T9891] should_fail_ex.cold+0x5/0xa [ 199.931135][ T9891] should_failslab+0xc2/0x120 [ 199.931166][ T9891] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 199.931196][ T9891] ? alloc_inode+0x183/0x250 [ 199.931222][ T9891] alloc_inode+0x183/0x250 [ 199.931244][ T9891] new_inode+0x22/0x1c0 [ 199.931268][ T9891] binderfs_create_file+0xa1/0x3a0 [ 199.931303][ T9891] binder_open+0xa9e/0xde0 [ 199.931324][ T9891] ? __pfx_apparmor_file_open+0x10/0x10 [ 199.931345][ T9891] ? __pfx_binder_open+0x10/0x10 [ 199.931367][ T9891] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 199.931393][ T9891] do_dentry_open+0x674/0x1470 [ 199.931418][ T9891] ? __pfx_binder_open+0x10/0x10 [ 199.931444][ T9891] vfs_open_consume+0xcc/0x460 [ 199.931466][ T9891] path_openat+0x1547/0x23f0 [ 199.931497][ T9891] ? __pfx_path_openat+0x10/0x10 [ 199.931531][ T9891] do_file_open+0x20e/0x430 [ 199.931560][ T9891] ? __pfx_do_file_open+0x10/0x10 [ 199.931606][ T9891] ? _raw_spin_unlock+0x28/0x50 [ 199.931633][ T9891] ? alloc_fd+0x471/0x7a0 [ 199.931674][ T9891] do_sys_openat2+0x163/0x1d0 [ 199.931695][ T9891] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.931714][ T9891] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 199.931740][ T9891] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 199.931773][ T9891] __ia32_compat_sys_openat+0x12d/0x210 [ 199.931794][ T9891] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 199.931828][ T9891] __do_fast_syscall_32+0x14b/0x8c0 [ 199.931851][ T9891] do_fast_syscall_32+0x32/0x70 [ 199.931872][ T9891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.931897][ T9891] RIP: 0023:0xf73befbc [ 199.931913][ T9891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 199.931931][ T9891] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 199.931949][ T9891] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000740 [ 199.931962][ T9891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.931973][ T9891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.931985][ T9891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 199.931996][ T9891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.932023][ T9891] [ 199.932678][ T9891] binder: Unable to create file 9886 in binderfs (error -12) [ 199.933504][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.933524][ T5881] usb 5-1: Product: syz [ 199.933537][ T5881] usb 5-1: Manufacturer: syz [ 199.933548][ T5881] usb 5-1: SerialNumber: syz [ 199.948213][ T9891] binder: 9886:9891 ioctl c0189371 80000b80 returned -22 [ 199.971878][ T6284] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.383932][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.384130][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.387252][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.387438][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.406026][ T897] usb 5-1: USB disconnect, device number 18 [ 200.411118][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 200.432720][ T43] kauditd_printk_skb: 1655 callbacks suppressed [ 200.432739][ T43] audit: type=1326 audit(1792739769.325:34661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.432787][ T43] audit: type=1326 audit(1792739769.325:34662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.433673][ T43] audit: type=1326 audit(1792739769.325:34663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.433718][ T43] audit: type=1326 audit(1792739769.325:34664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.433804][ T43] audit: type=1326 audit(1792739769.325:34665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.433881][ T43] audit: type=1326 audit(1792739769.325:34666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.433999][ T43] audit: type=1326 audit(1792739769.325:34667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.434272][ T43] audit: type=1326 audit(1792739769.325:34668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.434313][ T43] audit: type=1326 audit(1792739769.325:34669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 200.434398][ T43] audit: type=1326 audit(1792739769.325:34670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 201.211039][ T6284] usb 5-1: Service connection timeout for: 256 [ 201.211055][ T6284] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 201.211538][ T6284] ath9k_htc: Failed to initialize the device [ 201.211871][ T897] usb 5-1: ath9k_htc: USB layer deinitialized [ 201.429182][ T9910] FAULT_INJECTION: forcing a failure. [ 201.429182][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 201.429213][ T9910] CPU: 2 UID: 0 PID: 9910 Comm: syz.1.1192 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 201.429240][ T9910] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 201.429247][ T9910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.429258][ T9910] Call Trace: [ 201.429265][ T9910] [ 201.429273][ T9910] dump_stack_lvl+0x100/0x190 [ 201.429319][ T9910] should_fail_ex.cold+0x5/0xa [ 201.429346][ T9910] should_failslab+0xc2/0x120 [ 201.429374][ T9910] __kmalloc_cache_noprof+0x91/0x6d0 [ 201.429395][ T9910] ? ceph_auth_init+0x4d/0x280 [ 201.429426][ T9910] ceph_auth_init+0x4d/0x280 [ 201.429451][ T9910] ceph_monc_init+0x50b/0xcd0 [ 201.429481][ T9910] ceph_create_client+0x25e/0x370 [ 201.429508][ T9910] ceph_get_tree+0x1a4/0x1fd0 [ 201.429528][ T9910] ? bpf_lsm_capable+0x9/0x10 [ 201.429548][ T9910] ? security_capable+0x80/0x260 [ 201.429570][ T9910] vfs_get_tree+0x92/0x320 [ 201.429591][ T9910] vfs_cmd_create+0xd7/0x2a0 [ 201.429619][ T9910] __do_sys_fsconfig+0x55a/0xcb0 [ 201.429640][ T9910] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 201.429677][ T9910] __do_fast_syscall_32+0x14b/0x8c0 [ 201.429697][ T9910] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.429719][ T9910] do_fast_syscall_32+0x32/0x70 [ 201.429739][ T9910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.429762][ T9910] RIP: 0023:0xf7fc2fbc [ 201.429776][ T9910] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 201.429792][ T9910] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 201.429810][ T9910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 201.429821][ T9910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.429831][ T9910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.429842][ T9910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.429852][ T9910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.429878][ T9910] [ 201.847653][ T9912] netlink: 'syz.0.1193': attribute type 11 has an invalid length. [ 201.872036][ T9912] 8021q: adding VLAN 0 to HW filter on device .` [ 201.872750][ T9912] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.875934][ T9912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.930922][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.934340][ T9912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.938926][ T9912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.953206][ T9912] veth1_vlan: left promiscuous mode [ 201.956294][ T9912] veth0_vlan: left promiscuous mode [ 201.965396][ T9912] veth0_vlan: entered promiscuous mode [ 201.974297][ T9912] veth1_vlan: entered promiscuous mode [ 201.988341][ T9912] veth1_macvtap: left promiscuous mode [ 201.989612][ T9912] veth0_macvtap: left promiscuous mode [ 201.990811][ T9912] veth0_macvtap: entered promiscuous mode [ 201.996052][ T9912] veth1_macvtap: entered promiscuous mode [ 202.017498][ T9912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.018589][ T9912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.020742][ T9912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.027783][ T9912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.064416][ T9912] 8021q: adding VLAN 0 to HW filter on device eth0 [ 202.166963][ T9912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.168527][ T9912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.215774][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.215820][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.217334][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.217421][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.314910][ T9913] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.314928][ T9913] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 202.362212][ T7891] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.362606][ T7891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.362980][ T7891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.383881][ T7891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.383919][ T7891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.574993][ T9929] fuse: Unknown parameter 'user_id00000000000000000000' [ 203.468186][ T9932] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 204.163731][ T9955] fuse: Unknown parameter 'user_id00000000000000000000' [ 205.442612][ T43] kauditd_printk_skb: 2566 callbacks suppressed [ 205.442625][ T43] audit: type=1326 audit(1792739774.335:37237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.444016][ T43] audit: type=1326 audit(1792739774.335:37238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.445201][ T43] audit: type=1326 audit(1792739774.335:37239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.446384][ T43] audit: type=1326 audit(1792739774.335:37240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.447564][ T43] audit: type=1326 audit(1792739774.335:37241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.448947][ T43] audit: type=1326 audit(1792739774.335:37242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.450080][ T43] audit: type=1326 audit(1792739774.335:37243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.461302][ T43] audit: type=1326 audit(1792739774.345:37244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.461329][ T43] audit: type=1326 audit(1792739774.355:37245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 205.492829][ T43] audit: type=1326 audit(1792739774.375:37246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 206.136686][ T9986] binder: 9985:9986 ioctl c0306201 80000500 returned -14 [ 206.160852][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1210'. [ 206.240259][ T9989] FAULT_INJECTION: forcing a failure. [ 206.240259][ T9989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.240288][ T9989] CPU: 2 UID: 0 PID: 9989 Comm: syz.1.1212 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 206.240312][ T9989] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 206.240319][ T9989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.240329][ T9989] Call Trace: [ 206.240336][ T9989] [ 206.240342][ T9989] dump_stack_lvl+0x100/0x190 [ 206.240369][ T9989] should_fail_ex.cold+0x5/0xa [ 206.240391][ T9989] _copy_to_user+0x32/0xd0 [ 206.240416][ T9989] tomoyo_flush+0x161/0x520 [ 206.240445][ T9989] tomoyo_read_domain+0x87f/0xe10 [ 206.240470][ T9989] tomoyo_read_control+0x29c/0x540 [ 206.240490][ T9989] ? __pfx_tomoyo_read+0x10/0x10 [ 206.240514][ T9989] vfs_read+0x1e4/0xb40 [ 206.240536][ T9989] ? lock_acquire+0x1d1/0x380 [ 206.240559][ T9989] ? __fget_files+0x34/0x3d0 [ 206.240581][ T9989] ? __pfx_vfs_read+0x10/0x10 [ 206.240599][ T9989] ? find_held_lock+0x2b/0x80 [ 206.240617][ T9989] ? __fget_files+0x215/0x3d0 [ 206.240644][ T9989] ? __fget_files+0x21f/0x3d0 [ 206.240672][ T9989] ksys_read+0x12a/0x250 [ 206.240692][ T9989] ? __pfx_ksys_read+0x10/0x10 [ 206.240720][ T9989] __do_fast_syscall_32+0x14b/0x8c0 [ 206.240738][ T9989] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.240756][ T9989] do_fast_syscall_32+0x32/0x70 [ 206.240774][ T9989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.240794][ T9989] RIP: 0023:0xf7fc2fbc [ 206.240808][ T9989] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 206.240823][ T9989] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 206.240838][ T9989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 206.240849][ T9989] RDX: 00000000fffffd87 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.240875][ T9989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.240886][ T9989] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.240895][ T9989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.240918][ T9989] [ 207.479963][T10004] fuse: Unknown parameter 'user_id00000000000000000000' [ 208.297098][T10021] binder: 10020:10021 ioctl c0306201 80000500 returned -14 [ 208.337335][T10025] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.396908][T10026] FAULT_INJECTION: forcing a failure. [ 208.396908][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 208.396929][T10026] CPU: 3 UID: 0 PID: 10026 Comm: syz.0.1221 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 208.396945][T10026] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 208.396950][T10026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.396956][T10026] Call Trace: [ 208.396960][T10026] [ 208.396965][T10026] dump_stack_lvl+0x100/0x190 [ 208.396984][T10026] should_fail_ex.cold+0x5/0xa [ 208.396999][T10026] should_failslab+0xc2/0x120 [ 208.397017][T10026] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.397031][T10026] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 208.397052][T10026] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 208.397070][T10026] ? trace_contention_end+0x126/0x160 [ 208.397101][T10026] ? __mutex_lock+0x267/0x1c10 [ 208.397115][T10026] ? __mutex_lock+0x267/0x1c10 [ 208.397127][T10026] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 208.397144][T10026] ? __pfx___mutex_lock+0x10/0x10 [ 208.397155][T10026] ? snd_pcm_oss_ioctl+0x1c54/0x3790 [ 208.397171][T10026] ? snd_pcm_oss_ioctl+0x1c54/0x3790 [ 208.397193][T10026] ? __might_fault+0xc5/0x140 [ 208.397206][T10026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.397221][T10026] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 208.397241][T10026] snd_pcm_oss_ioctl+0x1ca1/0x3790 [ 208.397259][T10026] ? __fget_files+0x215/0x3d0 [ 208.397274][T10026] ? hook_file_ioctl_common+0x140/0x440 [ 208.397291][T10026] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 208.397310][T10026] ? __fget_files+0x21f/0x3d0 [ 208.397328][T10026] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 208.397346][T10026] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 208.397363][T10026] __do_fast_syscall_32+0x14b/0x8c0 [ 208.397375][T10026] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.397388][T10026] do_fast_syscall_32+0x32/0x70 [ 208.397401][T10026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.397415][T10026] RIP: 0023:0xf7fb6fbc [ 208.397424][T10026] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 208.397435][T10026] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 208.397446][T10026] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0045002 [ 208.397453][T10026] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.397460][T10026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.397466][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.397473][T10026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.397488][T10026] [ 209.889106][T10039] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 209.889153][T10039] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 210.453364][ T43] kauditd_printk_skb: 1663 callbacks suppressed [ 210.453381][ T43] audit: type=1326 audit(1792739779.345:38910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.453598][ T43] audit: type=1326 audit(1792739779.345:38911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.454820][ T43] audit: type=1326 audit(1792739779.345:38912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.456216][ T43] audit: type=1326 audit(1792739779.345:38913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.459768][ T43] audit: type=1326 audit(1792739779.345:38914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.461180][ T43] audit: type=1326 audit(1792739779.355:38915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.462381][ T43] audit: type=1326 audit(1792739779.355:38916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.463693][ T43] audit: type=1326 audit(1792739779.355:38917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.466198][ T43] audit: type=1326 audit(1792739779.355:38918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 210.468477][ T43] audit: type=1326 audit(1792739779.355:38919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.2.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977ab code=0x7ffc0000 [ 211.482842][T10050] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1226'. [ 211.755539][T10061] fuse: Unknown parameter 'user_id00000000000000000000' [ 211.885078][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 211.937726][T10075] FAULT_INJECTION: forcing a failure. [ 211.937726][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 211.937749][T10075] CPU: 2 UID: 0 PID: 10075 Comm: syz.0.1233 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 211.937766][T10075] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 211.937771][T10075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.937777][T10075] Call Trace: [ 211.937781][T10075] [ 211.937786][T10075] dump_stack_lvl+0x100/0x190 [ 211.937804][T10075] should_fail_ex.cold+0x5/0xa [ 211.937819][T10075] should_failslab+0xc2/0x120 [ 211.937837][T10075] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 211.937853][T10075] ? __d_alloc+0x34/0xad0 [ 211.937873][T10075] __d_alloc+0x34/0xad0 [ 211.937891][T10075] d_alloc_pseudo+0x1c/0xc0 [ 211.937926][T10075] alloc_file_pseudo+0x118/0x290 [ 211.937938][T10075] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 211.937951][T10075] ? mas_preallocate+0x528/0xee0 [ 211.937967][T10075] __shmem_file_setup+0x205/0x460 [ 211.937984][T10075] ? __pfx___shmem_file_setup+0x10/0x10 [ 211.938003][T10075] ? vm_area_alloc+0x1f/0x160 [ 211.938016][T10075] shmem_zero_setup+0x96/0x1b0 [ 211.938030][T10075] __mmap_region+0x26b6/0x32e0 [ 211.938049][T10075] ? __pfx___mmap_region+0x10/0x10 [ 211.938071][T10075] ? __pfx___might_resched+0x10/0x10 [ 211.938085][T10075] ? find_held_lock+0x2b/0x80 [ 211.938098][T10075] ? process_measurement+0x4c8/0x2350 [ 211.938112][T10075] ? down_write+0x141/0x1f0 [ 211.938144][T10075] ? lock_acquire+0x1d1/0x380 [ 211.938158][T10075] ? unwind_next_frame+0xbd/0x2090 [ 211.938197][T10075] mmap_region+0x3db/0x6d0 [ 211.938212][T10075] ? __pfx_mmap_region+0x10/0x10 [ 211.938226][T10075] ? shmem_get_unmapped_area+0x141/0x960 [ 211.938245][T10075] ? cap_mmap_addr+0x4b/0x120 [ 211.938269][T10075] ? bpf_lsm_mmap_addr+0x9/0x30 [ 211.938279][T10075] ? security_mmap_addr+0x71/0x1e0 [ 211.938295][T10075] ? __get_unmapped_area+0x255/0x3e0 [ 211.938314][T10075] do_mmap+0x12c7/0x1c30 [ 211.938333][T10075] ? lock_acquire+0x1d1/0x380 [ 211.938348][T10075] ? __pfx_do_mmap+0x10/0x10 [ 211.938370][T10075] ? __pfx_down_write_killable+0x10/0x10 [ 211.938386][T10075] vm_mmap_pgoff+0x28d/0x470 [ 211.938404][T10075] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 211.938422][T10075] ? lock_acquire+0x1d1/0x380 [ 211.938437][T10075] ? __might_fault+0xc5/0x140 [ 211.938451][T10075] ksys_mmap_pgoff+0xe4/0x610 [ 211.938469][T10075] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 211.938484][T10075] ? __might_fault+0x111/0x140 [ 211.938497][T10075] ? syscall_user_dispatch+0x89/0x140 [ 211.938512][T10075] __do_fast_syscall_32+0x14b/0x8c0 [ 211.938523][T10075] ? lockdep_hardirqs_on+0x7d/0x110 [ 211.938535][T10075] do_fast_syscall_32+0x32/0x70 [ 211.938548][T10075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.938562][T10075] RIP: 0023:0xf7fb6fbc [ 211.938572][T10075] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.938582][T10075] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 211.938593][T10075] RAX: ffffffffffffffda RBX: 000000000c230000 RCX: 0000000008000002 [ 211.938600][T10075] RDX: 0000000002000007 RSI: 000000000401d031 RDI: 00000000ffffffff [ 211.938607][T10075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.938613][T10075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.938620][T10075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.938635][T10075] [ 212.545054][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1235'. [ 214.267768][T10098] binder: 10097:10098 ioctl c0306201 80000500 returned -14 [ 214.354650][T10102] FAULT_INJECTION: forcing a failure. [ 214.354650][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 214.354672][T10102] CPU: 1 UID: 0 PID: 10102 Comm: syz.0.1242 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 214.354689][T10102] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 214.354694][T10102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.354700][T10102] Call Trace: [ 214.354705][T10102] [ 214.354709][T10102] dump_stack_lvl+0x100/0x190 [ 214.354728][T10102] should_fail_ex.cold+0x5/0xa [ 214.354757][T10102] should_failslab+0xc2/0x120 [ 214.354776][T10102] kmem_cache_alloc_noprof+0x92/0x6a0 [ 214.354791][T10102] ? __lock_acquire+0x5c0/0x1f40 [ 214.354806][T10102] ? vm_area_dup+0x27/0x9d0 [ 214.354820][T10102] vm_area_dup+0x27/0x9d0 [ 214.354832][T10102] __split_vma+0x19c/0x1de0 [ 214.354848][T10102] ? __pfx___split_vma+0x10/0x10 [ 214.354860][T10102] ? lock_acquire+0x1d1/0x380 [ 214.354874][T10102] ? unwind_next_frame+0xbd/0x2090 [ 214.354891][T10102] ? lock_acquire+0x1d1/0x380 [ 214.354906][T10102] ? is_bpf_text_address+0x25/0x1a0 [ 214.354923][T10102] ? find_held_lock+0x2b/0x80 [ 214.354937][T10102] vms_gather_munmap_vmas+0x1d2/0x1720 [ 214.354955][T10102] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 214.354967][T10102] ? mtree_range_walk+0x72b/0xb70 [ 214.354986][T10102] ? mas_walk+0x260/0x310 [ 214.355000][T10102] __mmap_region+0x4cc/0x32e0 [ 214.355016][T10102] ? __pfx___mmap_region+0x10/0x10 [ 214.355038][T10102] ? __pfx___might_resched+0x10/0x10 [ 214.355053][T10102] ? find_held_lock+0x2b/0x80 [ 214.355064][T10102] ? process_measurement+0x4c8/0x2350 [ 214.355078][T10102] ? process_measurement+0x4c8/0x2350 [ 214.355092][T10102] ? down_write+0x141/0x1f0 [ 214.355113][T10102] ? __lock_acquire+0x5c0/0x1f40 [ 214.355131][T10102] ? __lock_acquire+0x5c0/0x1f40 [ 214.355148][T10102] ? lock_acquire+0x1d1/0x380 [ 214.355163][T10102] ? unwind_next_frame+0xbd/0x2090 [ 214.355196][T10102] ? _parse_integer_limit+0x1ac/0x220 [ 214.355218][T10102] mmap_region+0x3db/0x6d0 [ 214.355233][T10102] ? __pfx_mmap_region+0x10/0x10 [ 214.355247][T10102] ? shmem_mapping+0xd/0x50 [ 214.355261][T10102] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 214.355274][T10102] ? bpf_lsm_mmap_addr+0x9/0x30 [ 214.355284][T10102] ? security_mmap_addr+0x71/0x1e0 [ 214.355300][T10102] ? __get_unmapped_area+0x255/0x3e0 [ 214.355319][T10102] do_mmap+0x12c7/0x1c30 [ 214.355338][T10102] ? lock_acquire+0x1d1/0x380 [ 214.355354][T10102] ? __pfx_do_mmap+0x10/0x10 [ 214.355371][T10102] ? __pfx___might_resched+0x10/0x10 [ 214.355385][T10102] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 214.355398][T10102] ? security_current_getlsmprop_subj+0x6e/0x130 [ 214.355413][T10102] ? __pfx_down_write_killable+0x10/0x10 [ 214.355429][T10102] vm_mmap_pgoff+0x28d/0x470 [ 214.355447][T10102] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 214.355462][T10102] ? __fget_files+0x215/0x3d0 [ 214.355480][T10102] ? __fget_files+0x21f/0x3d0 [ 214.355499][T10102] ksys_mmap_pgoff+0x3cb/0x610 [ 214.355520][T10102] ? find_held_lock+0x2b/0x80 [ 214.355532][T10102] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 214.355553][T10102] __do_fast_syscall_32+0x14b/0x8c0 [ 214.355565][T10102] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.355578][T10102] do_fast_syscall_32+0x32/0x70 [ 214.355591][T10102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.355606][T10102] RIP: 0023:0xf7fb6fbc [ 214.355616][T10102] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 214.355627][T10102] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 214.355639][T10102] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000001000 [ 214.355647][T10102] RDX: 0000000000000003 RSI: 0000000000000012 RDI: 0000000000000003 [ 214.355654][T10102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.355660][T10102] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.355670][T10102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.355691][T10102] [ 214.681588][T10110] fuse: fd is not a fuse device [ 215.466611][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.470474][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.471996][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.473273][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.473747][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.494832][T10120] overlayfs: failed to clone upperpath [ 215.551217][T10128] cgroup: Need name or subsystem set [ 215.687053][ T5852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.708740][T10117] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.750607][ T5852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.828795][ T5852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.951825][ T5852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.119686][ T5852] bridge_slave_1: left allmulticast mode [ 216.119708][ T5852] bridge_slave_1: left promiscuous mode [ 216.123367][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.133442][ T5852] bridge_slave_0: left allmulticast mode [ 216.133464][ T5852] bridge_slave_0: left promiscuous mode [ 216.133637][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.276559][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.279089][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.280251][ T5852] bond0 (unregistering): Released all slaves [ 216.352607][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.352887][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.352947][T10117] bridge_slave_0: entered allmulticast mode [ 216.353948][T10117] bridge_slave_0: entered promiscuous mode [ 216.357066][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.358115][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.358206][T10117] bridge_slave_1: entered allmulticast mode [ 216.361805][T10117] bridge_slave_1: entered promiscuous mode [ 216.478694][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.484803][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.503562][ T5493] 8021q: adding VLAN 0 to HW filter on device eth2 [ 216.603429][T10174] vivid-003: disconnect [ 216.608738][T10173] vivid-003: reconnect [ 216.662717][T10117] team0: Port device team_slave_0 added [ 216.664149][T10117] team0: Port device team_slave_1 added [ 216.683817][ T5493] 8021q: adding VLAN 0 to HW filter on device eth3 [ 216.684312][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.684320][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.684335][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.685147][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.685155][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.685168][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.813168][T10117] hsr_slave_0: entered promiscuous mode [ 216.824012][T10117] hsr_slave_1: entered promiscuous mode [ 216.824295][T10117] debugfs: 'hsr0' already exists in 'hsr' [ 216.824307][T10117] Cannot create hsr debugfs directory [ 216.917183][ T5852] hsr_slave_0: left promiscuous mode [ 216.917777][ T5852] hsr_slave_1: left promiscuous mode [ 216.918449][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.918505][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.919518][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.919533][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.932649][T10183] fuse: Unknown parameter 'user_id00000000000000000000' [ 217.043549][ T5852] veth1_macvtap: left promiscuous mode [ 217.043586][ T5852] veth0_macvtap: left promiscuous mode [ 217.043660][ T5852] veth1_vlan: left promiscuous mode [ 217.043712][ T5852] veth0_vlan: left promiscuous mode [ 217.351979][ T5852] team0 (unregistering): Port device team_slave_1 removed [ 217.368401][ T5852] team0 (unregistering): Port device team_slave_0 removed [ 217.459670][ T5493] 8021q: adding VLAN 0 to HW filter on device eth4 [ 217.536999][ T5779] Bluetooth: hci2: command tx timeout [ 217.744946][T10117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.752362][T10117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.755004][T10117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.767123][T10117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.767869][T10117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.781866][T10117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.782327][T10117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.798544][T10117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.799229][ T5493] 8021q: adding VLAN 0 to HW filter on device eth5 [ 217.875171][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.885144][ T5779] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 217.886248][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.890425][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.890473][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.972634][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.972684][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.520655][T10117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.692831][T10117] veth0_vlan: entered promiscuous mode [ 218.713181][T10117] veth1_vlan: entered promiscuous mode [ 218.734776][T10117] veth0_macvtap: entered promiscuous mode [ 218.738970][T10117] veth1_macvtap: entered promiscuous mode [ 218.756886][T10117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.760819][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.019564][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1262'. [ 219.041299][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.041499][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.041737][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.041991][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.135705][ T6966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.135718][ T6966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.138878][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'. [ 219.155882][ T6969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.155896][ T6969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.261164][T10267] fuse: Unknown parameter 'user_id00000000000000000000' [ 219.612073][ T5779] Bluetooth: hci2: command tx timeout [ 220.067286][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 220.404894][T10321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.819062][T10325] sctp: [Deprecated]: syz.4.1281 (pid 10325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.819062][T10325] Use struct sctp_sack_info instead [ 221.080034][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 221.265057][T10336] tc_dump_action: action bad kind [ 221.265175][T10337] tc_dump_action: action bad kind [ 221.334192][T10341] FAULT_INJECTION: forcing a failure. [ 221.334192][T10341] name failslab, interval 1, probability 0, space 0, times 0 [ 221.334277][T10341] CPU: 1 UID: 0 PID: 10341 Comm: syz.1.1284 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 221.334305][T10341] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 221.334313][T10341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.334323][T10341] Call Trace: [ 221.334330][T10341] [ 221.334338][T10341] dump_stack_lvl+0x100/0x190 [ 221.334366][T10341] should_fail_ex.cold+0x5/0xa [ 221.334389][T10341] should_failslab+0xc2/0x120 [ 221.334417][T10341] kmem_cache_alloc_noprof+0x92/0x6a0 [ 221.334443][T10341] ? security_file_alloc+0x34/0x2c0 [ 221.334473][T10341] security_file_alloc+0x34/0x2c0 [ 221.334498][T10341] init_file+0x95/0x480 [ 221.334526][T10341] alloc_empty_file+0x79/0x1c0 [ 221.334545][T10341] path_openat+0xd6/0x23f0 [ 221.334576][T10341] ? __pfx_path_openat+0x10/0x10 [ 221.334608][T10341] do_file_open+0x20e/0x430 [ 221.334637][T10341] ? __pfx_do_file_open+0x10/0x10 [ 221.334680][T10341] ? _raw_spin_unlock+0x28/0x50 [ 221.334707][T10341] ? alloc_fd+0x471/0x7a0 [ 221.334741][T10341] do_sys_openat2+0x163/0x1d0 [ 221.334761][T10341] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.334789][T10341] __ia32_compat_sys_openat+0x12d/0x210 [ 221.334810][T10341] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 221.334842][T10341] __do_fast_syscall_32+0x14b/0x8c0 [ 221.334862][T10341] ? lockdep_hardirqs_on+0x7d/0x110 [ 221.334882][T10341] do_fast_syscall_32+0x32/0x70 [ 221.334901][T10341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.334924][T10341] RIP: 0023:0xf7fc2fbc [ 221.334938][T10341] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 221.334955][T10341] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 221.334972][T10341] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 221.334984][T10341] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.334999][T10341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.335009][T10341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.335019][T10341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.335043][T10341] [ 221.691026][ T5139] Bluetooth: hci2: command tx timeout [ 221.743849][ T43] kauditd_printk_skb: 1918 callbacks suppressed [ 221.743863][ T43] audit: type=1326 audit(1792739790.635:40838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.743890][ T43] audit: type=1326 audit(1792739790.635:40839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.743910][ T43] audit: type=1326 audit(1792739790.635:40840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.743943][ T43] audit: type=1326 audit(1792739790.635:40841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.744091][ T43] audit: type=1326 audit(1792739790.635:40842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.744236][ T43] audit: type=1326 audit(1792739790.635:40843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.744376][ T43] audit: type=1326 audit(1792739790.635:40844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.744718][ T43] audit: type=1326 audit(1792739790.635:40845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.744934][ T43] audit: type=1326 audit(1792739790.635:40846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 221.745026][ T43] audit: type=1326 audit(1792739790.635:40847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 222.177739][T10357] binder: 10356:10357 ioctl c0306201 80000500 returned -14 [ 222.215522][T10359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 223.138646][T10366] FAULT_INJECTION: forcing a failure. [ 223.138646][T10366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.138667][T10366] CPU: 2 UID: 0 PID: 10366 Comm: syz.0.1294 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 223.138684][T10366] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 223.138690][T10366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.138697][T10366] Call Trace: [ 223.138701][T10366] [ 223.138706][T10366] dump_stack_lvl+0x100/0x190 [ 223.138725][T10366] should_fail_ex.cold+0x5/0xa [ 223.138741][T10366] _copy_to_user+0x32/0xd0 [ 223.138762][T10366] simple_read_from_buffer+0xcb/0x170 [ 223.138786][T10366] proc_fail_nth_read+0x1af/0x230 [ 223.138808][T10366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.138834][T10366] ? rw_verify_area+0xce/0x6d0 [ 223.138854][T10366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.138885][T10366] vfs_read+0x1e4/0xb40 [ 223.138907][T10366] ? lock_acquire+0x1d1/0x380 [ 223.138930][T10366] ? __fget_files+0x34/0x3d0 [ 223.138953][T10366] ? __pfx_vfs_read+0x10/0x10 [ 223.138966][T10366] ? find_held_lock+0x2b/0x80 [ 223.138979][T10366] ? __fget_files+0x215/0x3d0 [ 223.139021][T10366] ? __fget_files+0x21f/0x3d0 [ 223.139043][T10366] ksys_read+0x12a/0x250 [ 223.139058][T10366] ? __pfx_ksys_read+0x10/0x10 [ 223.139077][T10366] do_int80_emulation+0x166/0x650 [ 223.139093][T10366] asm_int80_emulation+0x1a/0x20 [ 223.139110][T10366] RIP: 0023:0xf71a77ab [ 223.139125][T10366] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 223.139141][T10366] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 223.139162][T10366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 223.139172][T10366] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 223.139178][T10366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.139185][T10366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.139192][T10366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.139207][T10366] [ 223.204415][T10370] FAULT_INJECTION: forcing a failure. [ 223.204415][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.204447][T10370] CPU: 3 UID: 0 PID: 10370 Comm: syz.0.1296 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 223.204474][T10370] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 223.204482][T10370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.204492][T10370] Call Trace: [ 223.204501][T10370] [ 223.204508][T10370] dump_stack_lvl+0x100/0x190 [ 223.204536][T10370] should_fail_ex.cold+0x5/0xa [ 223.204561][T10370] _copy_from_iter+0x1f4/0x1690 [ 223.204589][T10370] ? __asan_memset+0x23/0x50 [ 223.204612][T10370] ? __pfx__copy_from_iter+0x10/0x10 [ 223.204635][T10370] ? __pfx___alloc_skb+0x10/0x10 [ 223.204669][T10370] netlink_sendmsg+0x8f5/0x10c0 [ 223.204695][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.204723][T10370] ? apparmor_socket_sendmsg+0x165/0x280 [ 223.204748][T10370] ? ____sys_sendmsg+0xa4d/0xbe0 [ 223.204764][T10370] ____sys_sendmsg+0xa4d/0xbe0 [ 223.204781][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.204805][T10370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.204833][T10370] ___sys_sendmsg+0x190/0x1e0 [ 223.204853][T10370] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.204883][T10370] ? find_held_lock+0x2b/0x80 [ 223.204918][T10370] __sys_sendmsg+0x160/0x210 [ 223.204943][T10370] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.204985][T10370] __do_fast_syscall_32+0x14b/0x8c0 [ 223.205006][T10370] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.205028][T10370] do_fast_syscall_32+0x32/0x70 [ 223.205047][T10370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.205069][T10370] RIP: 0023:0xf7fb6fbc [ 223.205086][T10370] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.205104][T10370] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 223.205135][T10370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 223.205148][T10370] RDX: 0000000028008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.205158][T10370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.205170][T10370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.205180][T10370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.205204][T10370] [ 223.362467][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 223.408451][T10380] binder: 10379:10380 ioctl c0306201 80000500 returned -14 [ 223.523724][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 223.687310][T10388] FAULT_INJECTION: forcing a failure. [ 223.687310][T10388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.688728][T10388] CPU: 2 UID: 0 PID: 10388 Comm: syz.0.1302 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 223.688758][T10388] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 223.688766][T10388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.688777][T10388] Call Trace: [ 223.688785][T10388] [ 223.688793][T10388] dump_stack_lvl+0x100/0x190 [ 223.688823][T10388] should_fail_ex.cold+0x5/0xa [ 223.688848][T10388] _copy_from_iter+0x1f4/0x1690 [ 223.688876][T10388] ? kmalloc_reserve+0xf9/0x350 [ 223.688902][T10388] ? __pfx__copy_from_iter+0x10/0x10 [ 223.688926][T10388] ? __alloc_skb+0x4e9/0x710 [ 223.688947][T10388] ? __alloc_skb+0x5b7/0x710 [ 223.688969][T10388] ? __pfx___alloc_skb+0x10/0x10 [ 223.688994][T10388] ? aa_sock_msg_perm+0x11e/0x200 [ 223.689017][T10388] pfkey_sendmsg+0x1ce/0x840 [ 223.689042][T10388] ____sys_sendmsg+0xa4d/0xbe0 [ 223.689059][T10388] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 223.689079][T10388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.689109][T10388] ___sys_sendmsg+0x190/0x1e0 [ 223.689130][T10388] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.689162][T10388] ? find_held_lock+0x2b/0x80 [ 223.689200][T10388] __sys_sendmsg+0x160/0x210 [ 223.689227][T10388] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.689279][T10388] __do_fast_syscall_32+0x14b/0x8c0 [ 223.689303][T10388] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.689324][T10388] do_fast_syscall_32+0x32/0x70 [ 223.689346][T10388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.689367][T10388] RIP: 0023:0xf7fb6fbc [ 223.689380][T10388] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.689394][T10388] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 223.689410][T10388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 223.689419][T10388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.689428][T10388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.689437][T10388] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.689445][T10388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.689465][T10388] [ 223.771826][ T5139] Bluetooth: hci2: command tx timeout [ 224.870678][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 224.971633][T10442] FAULT_INJECTION: forcing a failure. [ 224.971633][T10442] name failslab, interval 1, probability 0, space 0, times 0 [ 224.971656][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.0.1314 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 224.971680][T10442] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 224.971687][T10442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.971697][T10442] Call Trace: [ 224.971703][T10442] [ 224.971708][T10442] dump_stack_lvl+0x100/0x190 [ 224.971734][T10442] should_fail_ex.cold+0x5/0xa [ 224.971748][T10442] ? __netlink_lookup+0x692/0x950 [ 224.971763][T10442] should_failslab+0xc2/0x120 [ 224.971780][T10442] kmem_cache_alloc_noprof+0x92/0x6a0 [ 224.971797][T10442] ? skb_clone+0x190/0x400 [ 224.971818][T10442] skb_clone+0x190/0x400 [ 224.971834][T10442] netlink_deliver_tap+0xaed/0xcc0 [ 224.971850][T10442] netlink_unicast+0x6ff/0x950 [ 224.971865][T10442] ? __pfx_netlink_unicast+0x10/0x10 [ 224.971884][T10442] netlink_sendmsg+0x9ac/0x10c0 [ 224.971901][T10442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.971925][T10442] ? apparmor_socket_sendmsg+0x165/0x280 [ 224.971948][T10442] ? ____sys_sendmsg+0xa4d/0xbe0 [ 224.971958][T10442] ____sys_sendmsg+0xa4d/0xbe0 [ 224.971968][T10442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.971982][T10442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.972000][T10442] ___sys_sendmsg+0x190/0x1e0 [ 224.972013][T10442] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.972031][T10442] ? find_held_lock+0x2b/0x80 [ 224.972054][T10442] __sys_sendmsg+0x160/0x210 [ 224.972090][T10442] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.972123][T10442] __do_fast_syscall_32+0x14b/0x8c0 [ 224.972136][T10442] ? lockdep_hardirqs_on+0x7d/0x110 [ 224.972149][T10442] do_fast_syscall_32+0x32/0x70 [ 224.972162][T10442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.972176][T10442] RIP: 0023:0xf7fb6fbc [ 224.972186][T10442] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 224.972197][T10442] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 224.972208][T10442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 224.972215][T10442] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.972222][T10442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.972228][T10442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.972235][T10442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.972250][T10442] [ 224.972886][T10442] team0: entered promiscuous mode [ 224.972897][T10442] team_slave_0: entered promiscuous mode [ 224.973008][T10442] team_slave_1: entered promiscuous mode [ 224.973141][T10442] team0: entered allmulticast mode [ 224.973150][T10442] team_slave_0: entered allmulticast mode [ 224.973157][T10442] team_slave_1: entered allmulticast mode [ 224.997730][T10444] FAULT_INJECTION: forcing a failure. [ 224.997730][T10444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.997757][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.1.1312 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 224.997781][T10444] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 224.997789][T10444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.997798][T10444] Call Trace: [ 224.997805][T10444] [ 224.997812][T10444] dump_stack_lvl+0x100/0x190 [ 224.997860][T10444] should_fail_ex.cold+0x5/0xa [ 224.997891][T10444] _copy_to_user+0x32/0xd0 [ 224.997915][T10444] ctl_ioctl+0x17b/0xcc0 [ 224.997941][T10444] ? __pfx_ctl_ioctl+0x10/0x10 [ 224.997986][T10444] ? __fget_files+0x21f/0x3d0 [ 224.998013][T10444] dm_compat_ctl_ioctl+0x23/0x30 [ 224.998036][T10444] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 224.998059][T10444] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 224.998083][T10444] __do_fast_syscall_32+0x14b/0x8c0 [ 224.998102][T10444] ? lockdep_hardirqs_on+0x7d/0x110 [ 224.998122][T10444] do_fast_syscall_32+0x32/0x70 [ 224.998141][T10444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.998162][T10444] RIP: 0023:0xf7fc2fbc [ 224.998176][T10444] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 224.998192][T10444] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 224.998209][T10444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 224.998220][T10444] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.998230][T10444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.998240][T10444] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.998250][T10444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.998272][T10444] [ 225.001410][T10443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1313'. [ 225.332094][T10454] FAULT_INJECTION: forcing a failure. [ 225.332094][T10454] name failslab, interval 1, probability 0, space 0, times 0 [ 225.332117][T10454] CPU: 1 UID: 0 PID: 10454 Comm: syz.4.1317 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 225.332134][T10454] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 225.332139][T10454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.332146][T10454] Call Trace: [ 225.332150][T10454] [ 225.332155][T10454] dump_stack_lvl+0x100/0x190 [ 225.332173][T10454] should_fail_ex.cold+0x5/0xa [ 225.332189][T10454] should_failslab+0xc2/0x120 [ 225.332207][T10454] __kmalloc_noprof+0xfc/0x840 [ 225.332223][T10454] ? kvm_io_bus_unregister_dev+0x1f2/0x5c0 [ 225.332239][T10454] kvm_io_bus_unregister_dev+0x1f2/0x5c0 [ 225.332256][T10454] kvm_deassign_ioeventfd_idx+0x337/0x580 [ 225.332274][T10454] kvm_ioeventfd+0x259/0x330 [ 225.332290][T10454] kvm_vm_ioctl+0x7e6/0x4160 [ 225.332304][T10454] ? tomoyo_path_number_perm+0x46d/0x580 [ 225.332320][T10454] ? stack_trace_save+0x8e/0xc0 [ 225.332335][T10454] ? __pfx_stack_trace_save+0x10/0x10 [ 225.332351][T10454] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 225.332361][T10454] ? __lock_acquire+0x5c0/0x1f40 [ 225.332384][T10454] ? tomoyo_path_number_perm+0x46d/0x580 [ 225.332399][T10454] ? kasan_save_stack+0x3f/0x50 [ 225.332414][T10454] ? kasan_save_stack+0x30/0x50 [ 225.332429][T10454] ? kasan_save_track+0x14/0x30 [ 225.332444][T10454] ? kasan_save_free_info+0x3b/0x70 [ 225.332457][T10454] ? __kasan_slab_free+0x5f/0x80 [ 225.332473][T10454] ? kfree+0x22b/0x6d0 [ 225.332484][T10454] ? tomoyo_path_number_perm+0x46d/0x580 [ 225.332498][T10454] ? security_file_ioctl_compat+0xd3/0x230 [ 225.332513][T10454] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 225.332527][T10454] ? __do_fast_syscall_32+0x14b/0x8c0 [ 225.332540][T10454] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 225.332558][T10454] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 225.332600][T10454] ? kasan_quarantine_put+0x104/0x240 [ 225.332618][T10454] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.332630][T10454] ? find_held_lock+0x2b/0x80 [ 225.332642][T10454] ? tomoyo_path_number_perm+0x28f/0x580 [ 225.332657][T10454] ? tomoyo_path_number_perm+0x28f/0x580 [ 225.332674][T10454] ? tomoyo_path_number_perm+0x188/0x580 [ 225.332690][T10454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 225.332706][T10454] ? get_pid_task+0x106/0x250 [ 225.332721][T10454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.332740][T10454] ? do_vfs_ioctl+0x226/0x13e0 [ 225.332754][T10454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 225.332769][T10454] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 225.332781][T10454] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 225.332792][T10454] ? __fget_files+0x34/0x3d0 [ 225.332807][T10454] ? find_held_lock+0x2b/0x80 [ 225.332819][T10454] ? __fget_files+0x215/0x3d0 [ 225.332834][T10454] ? hook_file_ioctl_common+0x140/0x440 [ 225.332853][T10454] ? __fget_files+0x21f/0x3d0 [ 225.332871][T10454] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 225.332883][T10454] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 225.332899][T10454] __do_fast_syscall_32+0x14b/0x8c0 [ 225.332911][T10454] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.332924][T10454] do_fast_syscall_32+0x32/0x70 [ 225.332937][T10454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.332951][T10454] RIP: 0023:0xf7f03fbc [ 225.332961][T10454] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.332971][T10454] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 225.332983][T10454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae79 [ 225.332990][T10454] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.332997][T10454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.333003][T10454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.333010][T10454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.333025][T10454] [ 225.355525][T10454] kvm: failed to shrink bus, removing it completely [ 225.530202][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 225.628538][T10464] syzkaller0: entered promiscuous mode [ 225.628551][T10464] syzkaller0: entered allmulticast mode [ 225.778367][T10471] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 226.545030][T10482] binder: 10481:10482 ioctl c0306201 80000500 returned -14 [ 226.583872][T10486] team0: entered promiscuous mode [ 226.583886][T10486] team_slave_0: entered promiscuous mode [ 226.583985][T10486] team_slave_1: entered promiscuous mode [ 226.584061][T10486] team0: entered allmulticast mode [ 226.584070][T10486] team_slave_0: entered allmulticast mode [ 226.584078][T10486] team_slave_1: entered allmulticast mode [ 226.616984][T10488] binder: 10487:10488 ioctl c0306201 80000500 returned -14 [ 226.618668][T10488] binder_alloc: 10487: pid 10487 spamming oneway? 1 buffers allocated for a total size of 4096 [ 226.618811][T10488] binder: 10487:10488 ioctl c0306201 0 returned -14 [ 226.704945][T10491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 226.754851][ T43] kauditd_printk_skb: 3757 callbacks suppressed [ 226.754916][ T43] audit: type=1326 audit(1792739795.645:44605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.755017][ T43] audit: type=1326 audit(1792739795.645:44606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.755270][ T43] audit: type=1326 audit(1792739795.645:44607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.756871][ T43] audit: type=1326 audit(1792739795.645:44608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.759273][ T43] audit: type=1326 audit(1792739795.645:44609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.761983][ T43] audit: type=1326 audit(1792739795.645:44610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.762131][ T43] audit: type=1326 audit(1792739795.655:44611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.767962][ T43] audit: type=1326 audit(1792739795.655:44612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.768077][ T43] audit: type=1326 audit(1792739795.655:44613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.768178][ T43] audit: type=1326 audit(1792739795.655:44614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 226.913041][T10502] syzkaller0: entered promiscuous mode [ 226.913054][T10502] syzkaller0: entered allmulticast mode [ 227.083358][T10511] FAULT_INJECTION: forcing a failure. [ 227.083358][T10511] name failslab, interval 1, probability 0, space 0, times 0 [ 227.083381][T10511] CPU: 0 UID: 0 PID: 10511 Comm: syz.4.1335 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 227.083398][T10511] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 227.083402][T10511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.083409][T10511] Call Trace: [ 227.083414][T10511] [ 227.083418][T10511] dump_stack_lvl+0x100/0x190 [ 227.083437][T10511] should_fail_ex.cold+0x5/0xa [ 227.083452][T10511] should_failslab+0xc2/0x120 [ 227.083470][T10511] kmem_cache_alloc_noprof+0x92/0x6a0 [ 227.083492][T10511] ? __pfx_map_id_range_down+0x10/0x10 [ 227.083509][T10511] ? security_inode_alloc+0x3b/0x2c0 [ 227.083526][T10511] security_inode_alloc+0x3b/0x2c0 [ 227.083539][T10511] inode_init_always_gfp+0xc6f/0xfb0 [ 227.083558][T10511] alloc_inode+0x8e/0x250 [ 227.083571][T10511] new_inode+0x22/0x1c0 [ 227.083584][T10511] binderfs_create_file+0xa1/0x3a0 [ 227.083605][T10511] binder_open+0xa9e/0xde0 [ 227.083617][T10511] ? __pfx_apparmor_file_open+0x10/0x10 [ 227.083631][T10511] ? __pfx_binder_open+0x10/0x10 [ 227.083643][T10511] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 227.083659][T10511] do_dentry_open+0x674/0x1470 [ 227.083674][T10511] ? __pfx_binder_open+0x10/0x10 [ 227.083688][T10511] vfs_open_consume+0xcc/0x460 [ 227.083702][T10511] path_openat+0x1547/0x23f0 [ 227.083723][T10511] ? __pfx_path_openat+0x10/0x10 [ 227.083744][T10511] do_file_open+0x20e/0x430 [ 227.083761][T10511] ? __pfx_do_file_open+0x10/0x10 [ 227.083788][T10511] ? _raw_spin_unlock+0x28/0x50 [ 227.083804][T10511] ? alloc_fd+0x471/0x7a0 [ 227.083824][T10511] do_sys_openat2+0x163/0x1d0 [ 227.083836][T10511] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.083853][T10511] __ia32_compat_sys_openat+0x12d/0x210 [ 227.083866][T10511] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 227.083885][T10511] __do_fast_syscall_32+0x14b/0x8c0 [ 227.083900][T10511] do_fast_syscall_32+0x32/0x70 [ 227.083912][T10511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.083928][T10511] RIP: 0023:0xf7f03fbc [ 227.083939][T10511] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.083950][T10511] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 227.083962][T10511] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 227.083969][T10511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.083976][T10511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.083982][T10511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.083989][T10511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.084003][T10511] [ 227.084070][T10511] binder: Unable to create file 10510 in binderfs (error -12) [ 227.118737][T10513] binder: 10512:10513 ioctl c0306201 80000500 returned -14 [ 227.120295][T10513] binder_alloc: 10512: pid 10512 spamming oneway? 1 buffers allocated for a total size of 4096 [ 227.120433][T10513] binder: 10512:10513 ioctl c0306201 0 returned -14 [ 227.263377][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1337'. [ 227.523921][T10522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1340'. [ 227.784930][T10542] FAULT_INJECTION: forcing a failure. [ 227.784930][T10542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.784952][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.4.1345 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 227.784969][T10542] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 227.784973][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.784981][T10542] Call Trace: [ 227.784985][T10542] [ 227.784991][T10542] dump_stack_lvl+0x100/0x190 [ 227.785011][T10542] should_fail_ex.cold+0x5/0xa [ 227.785026][T10542] _copy_to_user+0x32/0xd0 [ 227.785043][T10542] ctl_ioctl+0x17b/0xcc0 [ 227.785061][T10542] ? __pfx_ctl_ioctl+0x10/0x10 [ 227.785094][T10542] ? __fget_files+0x21f/0x3d0 [ 227.785122][T10542] dm_compat_ctl_ioctl+0x23/0x30 [ 227.785145][T10542] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 227.785164][T10542] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 227.785187][T10542] __do_fast_syscall_32+0x14b/0x8c0 [ 227.785223][T10542] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.785239][T10542] do_fast_syscall_32+0x32/0x70 [ 227.785252][T10542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.785266][T10542] RIP: 0023:0xf7f03fbc [ 227.785276][T10542] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.785287][T10542] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 227.785299][T10542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 227.785306][T10542] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.785313][T10542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.785319][T10542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.785326][T10542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.785340][T10542] [ 227.847812][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1348'. [ 228.059498][T10560] FAULT_INJECTION: forcing a failure. [ 228.059498][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.059521][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.1.1353 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 228.059538][T10560] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 228.059542][T10560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.059550][T10560] Call Trace: [ 228.059554][T10560] [ 228.059559][T10560] dump_stack_lvl+0x100/0x190 [ 228.059577][T10560] should_fail_ex.cold+0x5/0xa [ 228.059593][T10560] _copy_from_iter+0x1f4/0x1690 [ 228.059612][T10560] ? __asan_memset+0x23/0x50 [ 228.059627][T10560] ? __pfx__copy_from_iter+0x10/0x10 [ 228.059642][T10560] ? __pfx___alloc_skb+0x10/0x10 [ 228.059657][T10560] ? is_bpf_text_address+0x94/0x1a0 [ 228.059680][T10560] netlink_sendmsg+0x8f5/0x10c0 [ 228.059697][T10560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.059714][T10560] ? apparmor_socket_sendmsg+0x165/0x280 [ 228.059730][T10560] ? ____sys_sendmsg+0xa4d/0xbe0 [ 228.059740][T10560] ____sys_sendmsg+0xa4d/0xbe0 [ 228.059750][T10560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.059765][T10560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.059782][T10560] ___sys_sendmsg+0x190/0x1e0 [ 228.059794][T10560] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.059812][T10560] ? find_held_lock+0x2b/0x80 [ 228.059833][T10560] __sys_sendmsg+0x160/0x210 [ 228.059849][T10560] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.059871][T10560] __do_fast_syscall_32+0x14b/0x8c0 [ 228.059884][T10560] ? lockdep_hardirqs_on+0x7d/0x110 [ 228.059896][T10560] do_fast_syscall_32+0x32/0x70 [ 228.059909][T10560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.059924][T10560] RIP: 0023:0xf7fc2fbc [ 228.059933][T10560] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.059943][T10560] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 228.059954][T10560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800011c0 [ 228.059962][T10560] RDX: 0000000008040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.059968][T10560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.059975][T10560] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.059981][T10560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.059995][T10560] [ 228.099045][T10562] binder: 10561:10562 ioctl c0306201 80000500 returned -14 [ 228.101237][T10562] binder_alloc: 10561: pid 10561 spamming oneway? 1 buffers allocated for a total size of 4096 [ 228.128447][T10565] trusted_key: encrypted_key: insufficient parameters specified [ 228.134718][T10564] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 228.134730][T10564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1355'. [ 228.168370][T10569] syzkaller0: entered promiscuous mode [ 228.168383][T10569] syzkaller0: entered allmulticast mode [ 228.410536][T10573] netlink: 'syz.1.1357': attribute type 16 has an invalid length. [ 228.410550][T10573] netlink: 'syz.1.1357': attribute type 17 has an invalid length. [ 228.411443][T10573] lo: entered promiscuous mode [ 228.411462][T10573] lo: entered allmulticast mode [ 228.416073][T10573] tunl0: entered promiscuous mode [ 228.416088][T10573] tunl0: entered allmulticast mode [ 228.419590][T10573] gre0: entered promiscuous mode [ 228.419605][T10573] gre0: entered allmulticast mode [ 228.426712][T10573] gretap0: entered promiscuous mode [ 228.426731][T10573] gretap0: entered allmulticast mode [ 228.434491][T10573] erspan0: entered promiscuous mode [ 228.434510][T10573] erspan0: entered allmulticast mode [ 228.436064][T10573] ip_vti0: entered promiscuous mode [ 228.436074][T10573] ip_vti0: entered allmulticast mode [ 228.437065][T10573] ip6_vti0: entered promiscuous mode [ 228.437075][T10573] ip6_vti0: entered allmulticast mode [ 228.438333][T10573] sit0: entered promiscuous mode [ 228.438343][T10573] sit0: entered allmulticast mode [ 228.440156][T10573] ip6tnl0: entered promiscuous mode [ 228.440166][T10573] ip6tnl0: entered allmulticast mode [ 228.449590][T10573] ip6gre0: entered allmulticast mode [ 228.450439][T10573] syz_tun: entered promiscuous mode [ 228.450457][T10573] syz_tun: entered allmulticast mode [ 22 ** replaying previous printk message ** [ 228.460511][T10573] ip6gretap0: entered promiscuous mode [ 228.460585][T10573] ip6gretap0: entered allmulticast mode [ 228.464900][T10573] bridge0: entered promiscuous mode [ 228.465014][T10573] vcan0: entered promiscuous mode [ 228.465023][T10573] vcan0: entered allmulticast mode [ 228.468393][T10573] bond0: entered promiscuous mode [ 228.468405][T10573] bond_slave_0: entered promiscuous mode [ 228.468676][T10575] ================================================================== [ 228.468683][T10575] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0 [ 228.468703][T10575] Read of size 8 at addr ffff888022bc5818 by task syz.1.1357/10575 [ 228.468713][T10575] [ 228.468720][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.1.1357 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 228.468738][T10575] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 228.468744][T10575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.468751][T10575] Call Trace: [ 228.468755][T10575] [ 228.468760][T10575] dump_stack_lvl+0x100/0x190 [ 228.468776][T10575] print_report+0x13d/0x4b0 [ 228.468793][T10575] ? __virt_addr_valid+0x239/0x430 [ 228.468812][T10575] ? snapshot_ctr+0x1c20/0x1fd0 [ 228.468827][T10575] kasan_report+0xdf/0x1c0 [ 228.468838][T10575] ? snapshot_ctr+0x1c20/0x1fd0 [ 228.468855][T10575] snapshot_ctr+0x1c20/0x1fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.468872][T10575] ? kasan_save_track+0x14/0x30 [ 228.468887][T10575] ? __pfx_snapshot_ctr+0x10/0x10 [ 228.468901][T10575] ? dm_split_args+0xc1/0x570 [ 228.468912][T10575] ? rcu_is_watching+0x13/0xc0 [ 228.468925][T10575] ? dm_split_args+0xc1/0x570 [ 228.468935][T10575] ? kfree+0x1e5/0x6d0 [ 228.468947][T10575] ? skip_spaces+0xee/0x130 [ 228.468964][T10575] dm_table_add_target+0x58b/0xee0 [ 228.468977][T10575] ? __pfx_dm_table_add_target+0x10/0x10 [ 228.468991][T10575] table_load+0x3b9/0x7b0 [ 228.469009][T10575] ? __pfx_table_load+0x10/0x10 [ 228.469024][T10575] ? __might_fault+0xc5/0x140 [ 228.469036][T10575] ? __might_fault+0xc5/0x140 [ 228.469050][T10575] ctl_ioctl+0x4d2/0xcc0 [ 228.469066][T10575] ? __pfx_table_load+0x10/0x10 [ 228.469083][T10575] ? __pfx_ctl_ioctl+0x10/0x10 [ 228.469104][T10575] ? __fget_files+0x21f/0x3d0 [ 228.469120][T10575] dm_compat_ctl_ioctl+0x23/0x30 [ 228.469135][T10575] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 228.469150][T10575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.469164][T10575] __do_fast_syscall_32+0x14b/0x8c0 [ 228.469177][T10575] do_fast_syscall_32+0x32/0x70 [ 228.469189][T10575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.469202][T10575] RIP: 0023:0xf7fc2fbc [ 228.469211][T10575] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.469222][T10575] RSP: 002b:00000000f501150c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 228.469250][T10575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 228.469258][T10575] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.469265][T10575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.469272][T10575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.469280][T10575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.469291][T10575] [ 228.469296][T10575] [ 228.469299][T10575] Allocated by task 10575: [ 228.469305][T10575] kasan_save_stack+0x30/0x50 [ 228.469320][T10575] kasan_save_track+0x14/0x30 [ 228.469335][T10575] __kasan_kmalloc+0xaa/0xb0 [ 228.469350][T10575] __kmalloc_cache_node_noprof+0x30c/0x710 [ 228.469365][T10575] dm_get_table_device+0x2fc/0x820 [ 228.469378][T10575] dm_get_device+0x525/0x7e0 [ 228.469387][T10575] snapshot_ctr+0x201/0x1fd0 [ 228.469400][T10575] dm_table_add_target+0x58b/0xee0 [ 228.469410][T10575] table_load+0x3b9/0x7b0 [ 228.469424][T10575] ctl_ioctl+0x4d2/0xcc0 [ 228.469437][T10575] dm_compat_ctl_ioctl+0x23/0x30 [ 228.469451][T10575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.469463][T10575] __do_fast_syscall_32+0x14b/0x8c0 [ 228.469474][T10575] do_fast_syscall_32+0x32/0x70 [ 228.469484][T10575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.469497][T10575] [ 228.469499][T10575] Freed by task 10575: [ 228.469504][T10575] kasan_save_stack+0x30/0x50 [ 228.469518][T10575] kasan_save_track+0x14/0x30 [ 228.469532][T10575] kasan_save_free_info+0x3b/0x70 [ 228.469543][T10575] __kasan_slab_free+0x5f/0x80 [ 228.469558][T10575] kfree+0x22b/0x6d0 [ 228.469573][T10575] dm_put_table_device+0x2bf/0x380 [ 228.469585][T10575] dm_get_device+0x3f1/0x7e0 [ 228.469594][T10575] snapshot_ctr+0x326/0x1fd0 [ 228.469608][T10575] dm_table_add_target+0x58b/0xee0 [ 228.469618][T10575] table_load+0x3b9/0x7b0 [ 228.469634][T10575] ctl_ioctl+0x4d2/0xcc0 [ 228.469647][T10575] dm_compat_ctl_ioctl+0x23/0x30 [ 228.469662][T10575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.469674][T10575] __do_fast_syscall_32+0x14b/0x8c0 [ 228.469686][T10575] do_fast_syscall_32+0x32/0x70 [ 228.469697][T10575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.469709][T10575] [ 228.469712][T10575] The buggy address belongs to the object at ffff888022bc5800 [ 228.469712][T10575] which belongs to the cache kmalloc-96 of size 96 [ 228.469721][T10575] The buggy address is located 24 bytes inside of [ 228.469721][T10575] freed 96-byte region [ffff888022bc5800, ffff888022bc5860) [ 228.469731][T10575] [ 228.469734][T10575] The buggy address belongs to the physical page: [ 228.469739][T10575] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22bc5 [ 228.469748][T10575] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 228.469757][T10575] page_type: f5(slab) [ 228.469767][T10575] raw: 00fff00000000000 ffff88801d442280 dead000000000100 dead000000000122 [ 228.469776][T10575] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 228.469782][T10575] page dumped because: kasan: bad access detected [ 228.469787][T10575] page_owner tracks the page as allocated [ 228.469791][T10575] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3123717300 [ 228.469807][T10575] post_alloc_hook+0xfd/0x120 [ 228.469818][T10575] get_page_from_freelist+0x110d/0x35d0 [ 228.469853][T10575] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 228.469879][T10575] new_slab+0xa9/0x6e0 [ 228.469892][T10575] refill_objects+0xe3/0x410 [ 228.469904][T10575] __pcs_replace_empty_main+0x35e/0x650 [ 228.469916][T10575] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 228.469928][T10575] acpi_ut_evaluate_object+0x9d/0x610 [ 228.469943][T10575] acpi_ut_execute_power_methods+0x1f9/0x3c0 [ 228.469958][T10575] acpi_get_object_info+0xa0a/0xbe0 [ 228.469969][T10575] acpi_init_device_object+0xc12/0x1a90 [ 228.469982][T10575] acpi_add_single_object+0xe8/0x1a10 [ 228.469995][T10575] acpi_bus_check_add+0x316/0x970 [ 228.470008][T10575] acpi_ns_walk_namespace+0x4cc/0x760 [ 228.470018][T10575] acpi_walk_namespace+0xff/0x1d0 [ 228.470028][T10575] acpi_bus_scan+0x41f/0x4e0 [ 228.470041][T10575] page_owner free stack trace missing [ 228.470045][T10575] [ 228.470047][T10575] Memory state around the buggy address: [ 228.470053][T10575] ffff888022bc5700: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 228.470061][T10575] ffff888022bc5780: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 228.470072][T10575] >ffff888022bc5800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 228.470077][T10575] ^ [ 228.470082][T10575] ffff888022bc5880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 228.470089][T10575] ffff888022bc5900: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 228.470095][T10575] ================================================================== [ 228.470285][T10573] bond_slave_1: entered promiscuous mode [ 228.470362][T10573] geneve1: entered promiscuous mode [ 228.470422][T10573] bond0: entered allmulticast mode [ 228.470430][T10573] bond_slave_0: entered allmulticast mode [ 228.470437][T10573] bond_slave_1: entered allmulticast mode [ 228.470445][T10573] geneve1: entered allmulticast mode [ 228.471763][T10575] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.755695][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.1.1357 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 228.759038][T10575] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 228.760834][T10575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.763927][T10575] Call Trace: [ 228.764977][T10575] [ 228.765926][T10575] dump_stack_lvl+0x100/0x190 [ 228.767402][T10575] vpanic+0x553/0x970 [ 228.768647][T10575] ? __pfx_vpanic+0x10/0x10 [ 228.770073][T10575] ? mark_held_locks+0x40/0x70 [ 228.771571][T10575] ? snapshot_ctr+0x1c20/0x1fd0 [ 228.773088][T10575] panic+0xd1/0xe0 [ 228.774280][T10575] ? __pfx_panic+0x10/0x10 [ 228.775678][T10575] ? snapshot_ctr+0x1c20/0x1fd0 [ 228.777196][T10575] ? preempt_schedule+0x57/0xd0 [ 228.778730][T10575] check_panic_on_warn.cold+0x19/0x34 [ 228.780397][T10575] end_report.part.0+0x3a/0x90 [ 228.781896][T10575] kasan_report.cold+0xe/0x18 [ 228.783375][T10575] ? snapshot_ctr+0x1c20/0x1fd0 [ 228.784895][T10575] snapshot_ctr+0x1c20/0x1fd0 [ 228.786379][T10575] ? kasan_save_track+0x14/0x30 [ 228.787903][T10575] ? __pfx_snapshot_ctr+0x10/0x10 [ 228.789479][T10575] ? dm_split_args+0xc1/0x570 [ 228.790955][T10575] ? rcu_is_watching+0x13/0xc0 [ 228.792455][T10575] ? dm_split_args+0xc1/0x570 [ 228.793931][T10575] ? kfree+0x1e5/0x6d0 [ 228.795211][T10575] ? skip_spaces+0xee/0x130 [ 228.796642][T10575] dm_table_add_target+0x58b/0xee0 [ 228.798285][T10575] ? __pfx_dm_table_add_target+0x10/0x10 [ 228.800024][T10575] table_load+0x3b9/0x7b0 [ 228.801415][T10575] ? __pfx_table_load+0x10/0x10 [ 228.802943][T10575] ? __might_fault+0xc5/0x140 [ 228.804441][T10575] ? __might_fault+0xc5/0x140 [ 228.805932][T10575] ctl_ioctl+0x4d2/0xcc0 [ 228.807258][T10575] ? __pfx_table_load+0x10/0x10 [ 228.808788][T10575] ? __pfx_ctl_ioctl+0x10/0x10 [ 228.810293][T10575] ? __fget_files+0x21f/0x3d0 [ 228.811766][T10575] dm_compat_ctl_ioctl+0x23/0x30 [ 228.813311][T10575] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 228.815062][T10575] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.816758][T10575] __do_fast_syscall_32+0x14b/0x8c0 [ 228.818392][T10575] do_fast_syscall_32+0x32/0x70 [ 228.819998][T10575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.821978][T10575] RIP: 0023:0xf7fc2fbc [ 228.823239][T10575] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.829159][T10575] RSP: 002b:00000000f501150c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 228.831755][T10575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 228.834207][T10575] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.836648][T10575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.839106][T10575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.841536][T10575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.843994][T10575] [ 228.845590][T10575] Kernel Offset: disabled [ 228.846953][T10575] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:16:37 Registers: info registers vcpu 0 CPU#0 RAX=fffff520000d9fb5 RBX=ffffffff90de91c0 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8c829a00 RDI=ffffffff8c829a40 RBP=ffffc900006cfda8 RSP=ffffc900006cf958 R8 =0000000000000000 R9 =fffffbfff21bd238 R10=ffffffff90de91c3 R11=0000000067367069 R12=0000000000000000 R13=ffffc900006cfda8 R14=0000000000000000 R15=ffffc900006cfdb4 RIP=ffffffff81eb2ac6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080068000 CR3=0000000043c08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b508a5 RDI=ffffffff9cef45a0 RBP=ffffffff9cef4560 RSP=ffffc90003287078 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000074 R14=0000000000000002 R15=ffffc90003287390 RIP=ffffffff85b508cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880953c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5010ff4 CR3=0000000057cba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000080000 RBX=0000000000000001 RCX=ffffc9000ce11000 RDX=0000000000080000 RSI=ffffffff82005b2e RDI=ffff888059f0a580 RBP=ffff88802af43ee0 RSP=ffffc900033b7110 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100b3e1763 R13=0000000000000003 R14=ffffed10055e87dd R15=0000000000000001 RIP=ffffffff82005b30 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880954c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800c2018 CR3=0000000057cba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880274756b0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ffec3e0 RBP=0000000000000007 RSP=ffffc90003257658 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888027474b00 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8ffec3e0 RIP=ffffffff81e81703 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9d0cbdbc80 ffffffff 00c00000 GS =0000 ffff8880955c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561530382000 CR3=0000000015041000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000003c000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffbfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4f2cee9b 00007ffc4f2cee9b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4f2cf3a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4f2cf3a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b61000000003065 3678302f39617830 2b62616c735f7765 6e20205d35373500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2161000000003065 3672302533617230 2162616673557765 6420205735373500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69636e797320746f 6e202d2063696e61 70206c656e72654b 205d353735303154 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030333731373332 3133207374202c29 302f726570706177 7328203120646967 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74202c3120646970 202c29434f4c4c41 4d454d4f4e5f5046 475f5f7c504d4f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c59 525445524f4e5f50 46475f5f7c4e5241 574f4e5f5046475f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c4c454e52454b 5f50464728306363 32647830206b7361 6d5f706667202c65 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000