last executing test programs: 6m41.534490441s ago: executing program 3 (id=1089): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xe00}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839", 0x2c}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x7}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000040)=""/155, 0x9b}], 0x2}}], 0x1, 0x0, 0x0) 6m40.597668091s ago: executing program 3 (id=1093): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r1) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r2, 0x621b7fa40716df4d, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c14a8cf012b79241197fa55c95cb78c868dc7f4065db6a1f55fdb9b3b620905db1150adbd5a48a5968dce0ca0c3b439a84136af4f91b835cf51a0b762c624ee970f63316960a1c5a1e36e766cf0fbb9676e41671fbe2c846cae88f54cd08de9d971d8205b0f52c3dc829935ceb9b6f73bf7cacade0e52ab90b160f562cc866b026c1261b336312bd662d41d1b80d8141466b9092866d89534e4425d9f046c0f047516825d6671ed32c121c5aa880c9759fb464a544c710dec4bd5b3663332c9310983127de7a7c3e9253a76a0a63a3c692fb2c07fdbae7c2023975b1f7eec5c2970d86f7667d71", 0xe7}, {&(0x7f0000000280)="3a9956c64df7c66b7f95b69c46eaa813c943d5cf148b90b62a361ebcd78b041aa5705bbb03fb487eb5ee8d7464c339590ca1bc4edae6b783479647008d27ca60cf62d4f8af4a72242cc21788f5e80bdc43060e1491c8c6c0501cf6f7962c0e5d8c3b1671b17d9fbc2d5e1ea19b7bc33ecd73205071acedce4aae8de86f40aa49727d75ac8ddd6ae8029efcf50cb3bf19", 0x90}, {0x0}, {&(0x7f0000000180)="1cc013eee619095f71f1d359c6b292b0d4d08ddd3e89b55cb66c5d204454453507af7a6c563bd1140150c223c25c8188", 0x30}], 0x4, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x144, 0x30, 0x1, 0x0, 0x0, {}, [{0x130, 0x1, [@m_mpls={0xe4, 0x22, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80000000, 0x5, 0x7, 0xf81, 0xe}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x6b, 0x6, "f70ea2ed3b4448555a38c1f6bb48447c21e36838f7507a5ca2eea562682126a199b83eea10fe6c12aa48ef7bb3fdbf29a11a39a579a23860b9d4cd3fa28871c77e775971df567140e54ad15433425f681d6ab7709bd524717a9787d261d37da340a62ea487b08c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd67}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_emit_ethernet(0x132, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004f2401240068000006219078e0000002ffffffff072703000000000a01010000000000ac1414aa0a010101ac1414aa000050c508310000ac1414bbe0000001890749ac14141744041310440c86400000002a0000000983178464010102ac141444ac1414bbac1414aae00000014410b490000000057fffffff0000ffff8302004e224e2304719078ccfbbe680bf89cd13549c2995602c9f1ee55070d4f6380e8fc4ae098634c7c28ec94b0614f962a3d9a9c877eee7edba10985c518704ed0e6085543f0874f67a3bbc50e980416912db110f3f6787c3e974cacdc0f0848f50e773c8e360e0813896150bbbb424581c576dd17993e06c31d637c9930d23887367c93905fdc9d4cc7bbada85dde0c1d6b046e3292cc7b29459a80c069f0f8cec7c41d5201a602cd66b2970e7702ce70d65ae2d2dfb08ad96a0110cf6302db3d291c5df9b2e8a0f008530f00fbf3eafddf7c7885da6d44a50eca7e9ca136af51854de55bba8ccaefdd1d848d5065497a70605ec381cbb8bb90dbabf516adbdaeb61f4d54801bdcdddfa6cd9a6b4d32ecc57fd040a07a8d6a1abe841667842e3188a76d8dbdf111999d7accd5149f72d7d03facddde0b1601fc368ae312c600eae8617b7508d686472a3ef175a3080c9e40aa29d33842c688bfa47704f705eb89e36876851f2ead1eaeb7cefea34fe45c47633ac90efda12ac8"], 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 6m38.449398385s ago: executing program 3 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f0000003d00)) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf4, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2000}, 0x60) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f00000000000000000000000000000000001400200000000000000000000000ff"], 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8005}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x24000001) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000"], 0x44}}, 0x0) 6m38.324193901s ago: executing program 3 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dsp(0xffffff9c, &(0x7f0000000400), 0x100, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000440)=0x30de68c6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 6m38.260098059s ago: executing program 3 (id=1108): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_open_procfs(r1, &(0x7f0000000040)='net/rt6_stats\x00') (async) syz_open_procfs(r1, &(0x7f0000000040)='net/rt6_stats\x00') close(0x3) (async) close(0x3) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 6m38.002598916s ago: executing program 3 (id=1109): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xc647, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x15, 0x29, 0x34}}], 0x14}}], 0x1, 0x40010) 6m37.949793207s ago: executing program 32 (id=1109): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xc647, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x15, 0x29, 0x34}}], 0x14}}], 0x1, 0x40010) 2.740571567s ago: executing program 0 (id=4153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 2.553062169s ago: executing program 0 (id=4154): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.719288581s ago: executing program 0 (id=4183): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x2, 0x2}, {0x80000006}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) 1.580356959s ago: executing program 0 (id=4185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) 1.580175091s ago: executing program 0 (id=4186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x48}}, 0x810) close(r1) 1.500505645s ago: executing program 0 (id=4187): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='+pid'], 0x6) 1.059944752s ago: executing program 1 (id=4193): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) close(0x4) 1.059787285s ago: executing program 2 (id=4194): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) 1.000615442s ago: executing program 2 (id=4195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xdcb, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xdd9) 1.000437216s ago: executing program 1 (id=4196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x103, 0x120a1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 940.28701ms ago: executing program 1 (id=4197): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) 939.72434ms ago: executing program 2 (id=4199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) 726.636148ms ago: executing program 1 (id=4204): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x20) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}, {&(0x7f0000002f00)={0x11c0, 0x13, 0x300, 0x70bd26, 0x25dfdbff, "", [@nested={0x195, 0xc2, 0x0, 0x1, [@typed={0xe9, 0x29, 0x0, 0x0, @binary="02b875694b6507f3d636951a0e5720f01ffece5bfe975c0fb2924bbe2703d089dffd841da847605b58e48738e05cf7aa1c8b417999856a81563e998f93a2cc93f9c3a4de0c3520b89657b456deb1aa01c4a96fe4ed2ee547b831887fbf8ff7cca80b03d86acec716c042d1ee3abcb3c43de2e9174eb546013626e22aafe150d407f60c9f00f4ab777a8c2e20bd9fce60b326f0c1838759eed0b45aa9cdb2b944432028e1ddd297f72807c2bf061a937830de8166094b6338ba3647b46ac0b567ec2fecef3455d56a4dbfedcb2b489f67d1adf830a5164e97d2bca4758d4a2a10cf3a5aa781"}, @generic="02af41848930287a4a7a5eab0fcc0a658ee8b01ce3ee745f9ca8f22a20f7b4a9e0b9057e133b1f10f93a65ded104671049e06ec4177caa12c8898033279b8b35d2eb7208715b0f8eb11003a07594685ec6c0c26f04d414", @nested={0x4, 0x142}, @nested={0x4, 0xce}, @generic="df899ff943196aebaf858acaa0ad8e68bdf8810fc5df5ec64f5f7bcc48fa9755548263265819ba98a821e7c0c9e35d8451b459561b828102f9ba9e123123", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x83, 0x0, 0x0, @fd}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x110, 0x0, 0x0, @u32=0x1f9f}, @generic="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"]}, 0x11c0}, {&(0x7f0000004180)={0x1138, 0x30, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="04064f53746c9222548a2210483ce343b63f1df5c3cae2ee94cf781e19d6debb659cdd10148c19a3702eac00baa908fcf234392773350aa46c6c31ef4a3eccc6cf7408c8621b8a80b88a4f3356e72e181957e134c1a06b833509d9f3db31634121628ed974c026127dcaba69b337d85132a382d1d047a8bae2ac5c9bb28f1aa0bd9d554abbd947de11c3037200dc3eb4ecf6c762d7f190a63d17e5ab8a291a31336aba9255246411701633b8dfb0898465253fde4458c696913c8ad0db17", @generic="d91bccfcacad1c7ecdafcc906f731e0e24115a31191aac7e4e5ff05d84030e506496a0ddc25ad0a4966bfd31da55e7fd11afebb743ff06c37b28b82a845e0350ec057f23bc78237f9048e0a867d575bd7e53b99b6d979cb7e4b5233b01ade97167e2468b2f8a73d3dc31c2da68e6144bab0fe5", @nested={0x10, 0x124, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @str='..+\x00'}, @nested={0x4, 0xb6}]}, @nested={0x8, 0xfa, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @typed={0xa, 0x1c, 0x0, 0x0, @binary="fc0f6a85ae5b"}, @nested={0xfb0, 0xc6, 0x0, 0x1, [@typed={0xfaa, 0x44, 0x0, 0x0, @binary="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"}, @generic]}, @nested={0x10, 0x119, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x8, 0x67, 0x0, 0x0, @uid}]}, @typed={0xb, 0x67, 0x0, 0x0, @str='.@\'-\'+\x00'}, @typed={0x4, 0x107}]}, 0x1138}], 0x3}, 0x0) 670.114934ms ago: executing program 1 (id=4206): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8993, 0x0) 669.929671ms ago: executing program 1 (id=4207): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000173c0)=[{{0x0, 0x0, &(0x7f0000010840), 0x0, &(0x7f00000108c0)=""/247, 0xf7}, 0x10}, {{0x0, 0x0, &(0x7f0000010ac0)=[{&(0x7f0000010a40)=""/79, 0x4f}], 0x1, &(0x7f0000010b00)=""/73, 0x49}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000011e80)=[{&(0x7f0000010d80)=""/28, 0x1c}, {0x0}], 0x2}, 0xf3c8}, {{0x0, 0x0, &(0x7f0000012140)}, 0x5}, {{&(0x7f0000017000)=@x25, 0x80, 0x0}, 0x4}], 0x6, 0x200100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=@can={{0x4}, 0x0, 0x2, 0x0, 0x0, "44b07d1e9b1d900c"}, 0x10}}, 0x0) 213.071584ms ago: executing program 4 (id=4210): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x2, 0x0, 0x8, 0x96}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 137.876656ms ago: executing program 4 (id=4211): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="d8f20e49aff98a98d85257bf91bc026308549195d3b348e50406d3e3894454fd0ea59a06a6328682c321a20ae1b9efcbb85b3f79c3693ad863f524d1f94767a74e5ca52a8be59a80619fead9506f925053c33010506bfb2e263a83756a83681d30d24d612d1c", 0x66}, {&(0x7f0000000ec0)="69536f868885", 0x6}], 0x2}}], 0x1, 0x40000) 137.649473ms ago: executing program 4 (id=4212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800", @ANYRES32=r1], 0x48}}, 0x810) close(r1) 70.406219ms ago: executing program 4 (id=4213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000000000fcdbdd250400000008000c000200000008000700e00000020800020007000000080008"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 70.110869ms ago: executing program 2 (id=4214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="31ec1a50ab8b"}, 0x14) 69.947083ms ago: executing program 4 (id=4215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040840) 498.106µs ago: executing program 2 (id=4216): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x20) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}, {&(0x7f0000002f00)={0x11c0, 0x13, 0x300, 0x70bd26, 0x25dfdbff, "", [@nested={0x195, 0xc2, 0x0, 0x1, [@typed={0xe9, 0x29, 0x0, 0x0, @binary="02b875694b6507f3d636951a0e5720f01ffece5bfe975c0fb2924bbe2703d089dffd841da847605b58e48738e05cf7aa1c8b417999856a81563e998f93a2cc93f9c3a4de0c3520b89657b456deb1aa01c4a96fe4ed2ee547b831887fbf8ff7cca80b03d86acec716c042d1ee3abcb3c43de2e9174eb546013626e22aafe150d407f60c9f00f4ab777a8c2e20bd9fce60b326f0c1838759eed0b45aa9cdb2b944432028e1ddd297f72807c2bf061a937830de8166094b6338ba3647b46ac0b567ec2fecef3455d56a4dbfedcb2b489f67d1adf830a5164e97d2bca4758d4a2a10cf3a5aa781"}, @generic="02af41848930287a4a7a5eab0fcc0a658ee8b01ce3ee745f9ca8f22a20f7b4a9e0b9057e133b1f10f93a65ded104671049e06ec4177caa12c8898033279b8b35d2eb7208715b0f8eb11003a07594685ec6c0c26f04d414", @nested={0x4, 0x142}, @nested={0x4, 0xce}, @generic="df899ff943196aebaf858acaa0ad8e68bdf8810fc5df5ec64f5f7bcc48fa9755548263265819ba98a821e7c0c9e35d8451b459561b828102f9ba9e123123", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x83, 0x0, 0x0, @fd}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x110, 0x0, 0x0, @u32=0x1f9f}, @generic="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"]}, 0x11c0}, {&(0x7f0000004180)={0x1138, 0x30, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="04064f53746c9222548a2210483ce343b63f1df5c3cae2ee94cf781e19d6debb659cdd10148c19a3702eac00baa908fcf234392773350aa46c6c31ef4a3eccc6cf7408c8621b8a80b88a4f3356e72e181957e134c1a06b833509d9f3db31634121628ed974c026127dcaba69b337d85132a382d1d047a8bae2ac5c9bb28f1aa0bd9d554abbd947de11c3037200dc3eb4ecf6c762d7f190a63d17e5ab8a291a31336aba9255246411701633b8dfb0898465253fde4458c696913c8ad0db17", @generic="d91bccfcacad1c7ecdafcc906f731e0e24115a31191aac7e4e5ff05d84030e506496a0ddc25ad0a4966bfd31da55e7fd11afebb743ff06c37b28b82a845e0350ec057f23bc78237f9048e0a867d575bd7e53b99b6d979cb7e4b5233b01ade97167e2468b2f8a73d3dc31c2da68e6144bab0fe5", @nested={0x10, 0x124, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @str='..+\x00'}, @nested={0x4, 0xb6}]}, @nested={0x8, 0xfa, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @typed={0xa, 0x1c, 0x0, 0x0, @binary="fc0f6a85ae5b"}, @nested={0xfb0, 0xc6, 0x0, 0x1, [@typed={0xfaa, 0x44, 0x0, 0x0, @binary="4f10df00177a810ca524d1ad9453132a404901f7168adfff7c708530c0baa382a4831976ae36daa31aa3558781bde778a1a38dbdbfbd51b3075814a9210dd81c574af848a8d7388844c958d677227ccad2f1183704975763e0def3e59d19b65a6313d80ee2a487aed4da923ed7e5f60179f11af3e2cd50045c8a0e6fb9ce1de7905e6a65713d82d90f5eab81eeb5e6697a7dd2f345f4c95d9327230e178482a59e3eabc2e3bbde16849f420481ad8722bd30e54c61ae1b5be9a768dd9105ed42e4f23d2f39959ad42732bdb1172eadb7f5edfd8106166e2b158becb2f61da013a631fb0cd7587b9ff4bb62fbfcb6ed3cb34e3b30ade67322fcd2a94c353b70e956f5cea0f1101ba19e26a25168ffa7ff31d2a72d97f22d7636cd4fc58f3a206cef1678c90faa662ca9acd748cd9ce57cb9276a397bca2eb867b325368b6da71f4988a0c5226049ce51c6a4c341ad81a3f06ca3aa1ca96a9498c9f630dad05cd8f969c7dd3932c558175e77121124d24aba1451d2206652c7c31dec2e689f4d9e6100c88902cee910382a5507077d7d8b14217e2b8d1010baf472ac60987d464e674e5dbbf647d27b3d2a24f04ef0a82ad0f97c558cfedb6e40836e72bf6f52e660750c82cb8e9aa8a46c05d5f0001459683f7f9220764cb56ef82ddaf306ddf2fc507d72d2ee8cc0d1df5287ec36c4e7758fe4698fcb19674dd1a8579513ee7aa36c796f43aa33eb24913974a75a75a061325e231e732e766b53fc3e2a6b3ed9b112b3180da5d4efccf667421800b75d4e095e8dd121be54966144bf77bc0d159127219bb000f4c39723b4ad497164a5598ecff989fb9aab72512c9762b588d1b3cf6dba259eb60fb969778a83edfa9d22fa61dd67193142c89c8f37ccb4a676cdd38aff09fb0a6c6b19a56eec5018ee41eebd87475381f1684dd37615df99d4d50c692602c69854844c492382144719407f8561524dabb35a3010c109044a0c3ea8085ffa13adaf48d2c14657b570ccd87a69ee4f1b93f733b2dbbfa40de7a4b8d2a5f0cfa24f5b141a7a1b8fd96f586fce43c2669b4b20e7f5ee690c6fdc62262052c7246ee29d078fd529051c36abab88b9db1e5f051c938c6ecb79949d59939f6297b8b84856a92805146dd82334c7ae94ba2f7cd0ea7bb8a85e5fb8145d8f491536e54dc1b310f95d417564f9c064cc58cf812422f095416fe9e9ba5abb9b282fc10aa49c39d115a3949709b4b9a35afd04ac5214ecdc082e07c4a459eab49ac37188ce45daefa0e55cd4b230609e380d06c937b47120905031dc94706177e2b3e0e79122d3b80c10152497838a4179b786d06d5a311e7a7c23f3dfed4083075cbf9318a6c312d14221e6dc4f05218f7b28c54ddb71cc35012ae6a453d2cca0046cbc392bcb2188bae33d2198fcc636fd3201e05d43cec07a1299d628d7a6cc89390a3917884a0be53c59b49aac5ba376dec5ffdd22217501949957039621b70a8469b908a98999625fcb8eee05991231820e056eb64ed603f81a4aca1f84452166a8bb3ca2cacd3f959423a089ed73b2a502feb50e84b850f25563df9c2ddd3c9c79b4104681cfb517445e5bbceef94b4d34391b088dce53ce00d6e366cb57730aaa8042e1e2444a47077b01a8f4132795924723dc3b345f5d19e2c7c187bfd4be07befb4b95d43d99a24139caf047dc3ddc823c9424e5a472cbac683659ae33dc24867c149a95050010ee7d0f3ae4e4c4d9c45a6e5fa1090fd58c521dd8ac8e8424cfb9478a71a3ee7bfe9395c18a274cc03e2b9318f5fecfc2d7f56e082f5d00f89a35e19017e4fd27e0ef68562c2edc87b6ec72b95bcdef41a4c0d855630271f273af25f5e3bb584a0a23db118aa65a9ffdb03b5c6558066cb332a6d83e0301255d6082d0c8f293d28aa23aedc7088702f3dc2397b8374b047086c7aa403ad714e49cbd9e5ae2560f8c0e8a24e6b85bfc7ed1a3d3f09a2eabe2b8ee5b519104067c8fc43093e3c1a6240aab155f11a3877a6abd998ba2aa001cd990f10a490ce254fa33d59875d4c212a22c8ee08e55e329af918c05be2654fdfcd5f21f08e7e279bc0ea9c77a3c7b80650c9156b3e02e3972591cc99ccaa46ad831a9fe556d921e9f4a0f45fedec106ecf155e6b258bcd841dad7daa28082eb5f0b78756b0fdde211e3a0290b2367456136e7bfb62d6e53cb535c0d3ad7dd1421726fb2ecc1f42d79fe43fc7cb3cb90a9e167d08cc7becee47c5bf60da1fd9ddcf07b16f66393cac9d2c31648962704aff8ddd67105e182a12f434bda8b69fa614907770112c11a7c272f7cf591009e1de16a201f00d7f106be329fef7bad132330412f6a221404285b3c364f66bc99e851018cd49f097533de9a338cfe0b71438ff036c6ba5fc31d358bd92036cea1a5c703a4af4b0b98627eec268bca38a1afd009cb7c080af3703061411c0385afb9ebce3d6d3c21fd8149ddfd967b125fe6316405615d61711b559d6711a445a612cd45d093e8b4b6fbdb7e6ea317c089c874b029a5b917b824d7ae157445c1bcb54f5254b247911a7736c9459bd7cfd07cbbe51a9cdbb3ea6766e8610d4bc65a235c565477c5864f9cd9a04d0c52401ead828df655b09777156eedffe589a091339d7ba362b7a1bf5ee2c8c2e60b6d1d72b8283bd7699f176332462749026c5863b775355488c9ae8c3682fc6b3736c17672456c9212738617fca1eef83986d1ee34bae88a0a20c54084c0953cbc19ef40c08f058ef9fd6af804a68cc65e89aeab3156f8bec9ae3be7b4edc22425a754684f073e7cc430a75500d9ce7c9a56472cd3b6c2267886db974421fc70c7e63d9d153c604173b9b0c1b1dcc0be3c9f1d0afc9176a8e8d8cc2eb4e13f1211c01f3604d78edd753caee9d174f442652a63b556553f7f88e3c649b0dc6d3cc843be91a86f5a3c94c04d2820fe4381175735dc0d1299fbca1526448430852bb2b59f8ccd5aacc10ae4259aab1e9e2ccd592d0f0369404f1189d951ed49907f6775009cab12e6b24099b3a2fe0bd3e64d51ce545977df6845bd6b6ac03f81ff26168dcbd26a61f648b642add032ffb037c8dfa2de43d23450e0570373f3af90f6d762c16a4bb14b1ed5e998049b092b64c0c9e81e96000a707b9e993b4f81173059eaf7b3a9580b7fe32a621631e35325c3c436d370273e53b6376588a0c84a2aad7a776e0321e53b7dae37d37b71622c61ce8e9ea211ff4ae9ec8e5ce568becaade2acfa32573007acf501ba8d0276e0b266e73aa987dae80e9f2dd6f7ffbe7b07d933bf22d147897c54f7abf2f871c277fda960e5dc975d924197061e94be93773e66411273f65c3b307ce1ec41297158c86cd19ded9476c0df011819c2b6ec5721a2c02d0efa66c9adb00003bed640232b4fee00c52d445a10e96b44a7aab51dcd893a7413bb1c3025d153214dcdc5803aea2227e2267d98531b4d1e3e51f055766230d59883ccc8f6c6f172d83830870b003c0ead68ecdd34cc60c681159882328111596d6aaa87dfd1e06399848388bca26de8fde1d42d7060e5129c1a8ae639377c400339b1dacd3307769802d1fb9cae32568d2c0501bd33f769b72d7c1ca18f1ea4300bfdb5e2f035e8acc74778591303f3f021de4294aaee7cb2271e341bb5ef79254b0a8f639f06a4749a15c233ade982494ace65149918a762c057ff1512e6c02750500e53f373c6ddd05db1813af8b7bb5ccf296ae55e21fe52ea918fcd43607a63d125aab0750c5c27e14f0c78f700ad97de2c135e8d6e3f8619ffb5d3bf483d5aee928331e7afc5be02ebfadb9bd36fded04374aa02d84dff83640c0744cee9ec0ba332fe3aec4a0cab1e647acb7124aa0ca51ae40f81f23fad3023b71322c0ed02a07f33d733adcf6667d78cf9f0c1b32815f19f106162bf9a11548f0dcfdf469716db4093e4c2d3e26989187a4e74531a09dd4026b6078fda34bd07fae3a1ab01ef99c1ce01951ced4504c0261faea0869c4e1d40b700dc2032700cbd5bfe6f0409a5aadbd2d0d8eae36aee2616b7790141f5eb40cfef9f488f3aa1b10b6785c77d9de814890a8f21268eb4b4f8c0723a3d9dafd8db85a87e405d7c6c4fe8c209c52a24736098df055078ca76ca3b6372705280a874cbd82ebb83cc9ac94837143323bf5085df02fe16a815b99bdf9aec2f2989507c6d593540523bee0fcacc1a01bf56964302bf584bd1dea432635fadeaa44b18fca33663ccc024a7da6c8a74ba561ae7ce583363d88011b7d85005481389eb777ede63ed34f011010dacdde34de744c15e2e2840d4fb76b6eff65ddeea32285ed236b32958ccb9ed13d2401b11cfceb3feee3816e534f915a84c8e8835bcf98850162d9f20c71619948a5927666d2e81d93b8465ddd5ddf5ba3cd29d74698abd77ec5abe241ae72e29506954cf75fc62d9d2c09ae43e6cf73e376d8684b09551ccb786abc3b6ad58e503bd271c2dd39884a3cd21d854606f5c71c6059d6f19a12688b613200667439c1545f3d50f59251d0fe19a62686d4ee413169d28cc3c66b345360114298fd5e0ec30a940229c502e4dcb0ab77b4af3a96b9af585e71e789596ed51e718143e1f963484579b1957742484867044b72555724ab78818e3882754723219ab405af5323e97cb44719a3c3de04ee8108ce570eb7d2157f7e91d0f5eb18d4ddb40459fdc010011e96c14a8dfe1d18dd3982b11bddfe635f5df50a53e9c68399c481cd5954e2e0868932d351f7d9576adc007da47b26f19057e90e399d695b96de3acd500d4e978b5fd6e804bcfc4473c9536a37d6b7332109bb36968acf458eb395098ea395d20467f96e6e9a5ccb083dccc07868959753a6e8a9861c30091e411bc6dcc75cfaa474aeb72fe739a7e0f2d7efb161787e8c1502914bc5771d5031a78b669db943a10e1c67043675d90c8de879652266d46f0fa78d6d6cb0b6833e79adb6c755f20aa5a7f10749b3dcab28fdf798208a4d7d7438e234c52400a3cdf806d8c867ddb47686867295388db2e64dc3a901f6dc05594ed08957221a023fe9baf3d067ee1ad8e2d20cfb6fd5e2b8072a8ff89eba45c0168b8df43ae91b27b73979c31993c50ddada9d8a274e94b54206cdbde61b7f4e0120c980cb28588aecdb3b82a00565ec6dcbe0bdaab913023d3a232dfbf1ba113d0a5337428910129a808e3997c4301c39aa1a17e91295100e19c27736f191acecfad1488c593c69c705760aeefc6a4bb48c61cc6a1d56fdacbf9406aea393505c2d8cdbd97b4653d57ce656ae6fde52429fbd5573cb041fb58b023ef6045cf62ae7df7ef2a133d21c38a537a429b19887f1ba3f7a360c9a3440ba17112cf394b8007c788bc4432f52bf5bf75ddb431fc609d04e7b4a8778bc3948329af4a18ad1cae9e2b67b26a0445c86a395f905da5c23ad3a02a9ceb17a80749338b66ff2623c30d209e15736aa008dc83e187beb4768c3c66b3f249d7d0e5e254b9b120d904021b0bbb2029a54953aa72a9a6298e1c4fede7f4c2116d1fb930d981f8407bd63a70982887d175c3afa432f0a887b6bcaf860502fb292d3b65e7cace71235269d93e0ab82d716dd677eb557cd8ad4703ee2ba9ff7253cd77b80acfc7f545349ee29cb27f0eb81cafcbcd29e3a037"}, @generic]}, @nested={0x10, 0x119, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x8, 0x67, 0x0, 0x0, @uid}]}, @typed={0xb, 0x67, 0x0, 0x0, @str='.@\'-\'+\x00'}, @typed={0x4, 0x107}]}, 0x1138}], 0x3}, 0x0) 105.854µs ago: executing program 4 (id=4217): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r3) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008002000000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 0s ago: executing program 2 (id=4218): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES16=r0], 0x1000f) kernel console output (not intermixed with test programs): 184][T17198] lo_compat_ioctl+0x10f/0x170 [ 531.526200][T17198] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 531.526215][T17198] compat_blkdev_ioctl+0x2eb/0x7a0 [ 531.526228][T17198] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 531.526238][T17198] ? __fget_files+0x206/0x3a0 [ 531.526255][T17198] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 531.526266][T17198] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 531.526279][T17198] __do_fast_syscall_32+0x73/0x120 [ 531.526296][T17198] do_fast_syscall_32+0x32/0x80 [ 531.526311][T17198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.526328][T17198] RIP: 0023:0xf7f34579 [ 531.526336][T17198] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 531.526346][T17198] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 531.526356][T17198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c02 [ 531.526362][T17198] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.526368][T17198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.526373][T17198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 531.526383][T17198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.526394][T17198] [ 531.624895][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 531.643022][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 531.645573][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 531.739012][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'. [ 531.978235][T17215] validate_nla: 9 callbacks suppressed [ 531.978273][T17215] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 531.995868][T17215] bond0: (slave netdevsim0): Releasing backup interface [ 532.034093][T17216] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 532.105994][T17219] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 532.124433][T17215] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 532.132409][T17215] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 532.160988][T17220] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 532.175520][T17215] team0: Port device netdevsim0 added [ 532.184359][T17216] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 532.186301][T17216] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 532.188990][T17216] team0: Port device netdevsim0 removed [ 532.191541][T17216] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 532.196806][T17219] bond0: (slave netdevsim0): Releasing backup interface [ 532.199944][T17219] team0: Port device netdevsim0 added [ 532.203259][T17220] team0: Port device netdevsim0 removed [ 532.205945][T17220] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 532.798897][T17236] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2988'. [ 532.802639][T17236] 9pnet_virtio: no channels available for device syz [ 532.806541][T17236] 9pnet_fd: Insufficient options for proto=fd [ 533.242219][T17243] 9pnet_virtio: no channels available for device syz [ 533.377815][T17245] FAULT_INJECTION: forcing a failure. [ 533.377815][T17245] name failslab, interval 1, probability 0, space 0, times 0 [ 533.382608][T17245] CPU: 2 UID: 0 PID: 17245 Comm: syz.0.2990 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 533.382633][T17245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.382643][T17245] Call Trace: [ 533.382649][T17245] [ 533.382655][T17245] dump_stack_lvl+0x16c/0x1f0 [ 533.382683][T17245] should_fail_ex+0x50a/0x650 [ 533.382703][T17245] should_failslab+0xc2/0x120 [ 533.382720][T17245] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 533.382743][T17245] ? skb_clone+0x190/0x3f0 [ 533.382763][T17245] skb_clone+0x190/0x3f0 [ 533.382779][T17245] netlink_deliver_tap+0xabd/0xd30 [ 533.382806][T17245] netlink_unicast+0x5e1/0x7f0 [ 533.382832][T17245] ? __pfx_netlink_unicast+0x10/0x10 [ 533.382855][T17245] ? __phys_addr_symbol+0x30/0x80 [ 533.382872][T17245] ? __check_object_size+0x488/0x710 [ 533.382891][T17245] netlink_sendmsg+0x8b8/0xd70 [ 533.382918][T17245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.382949][T17245] ____sys_sendmsg+0xaaf/0xc90 [ 533.382970][T17245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.382988][T17245] ? get_compat_msghdr+0x11b/0x170 [ 533.383018][T17245] ___sys_sendmsg+0x135/0x1e0 [ 533.383043][T17245] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.383077][T17245] ? __pfx_lock_release+0x10/0x10 [ 533.383096][T17245] ? trace_lock_acquire+0x14e/0x1f0 [ 533.383122][T17245] ? __fget_files+0x206/0x3a0 [ 533.383151][T17245] __sys_sendmsg+0x16e/0x220 [ 533.383166][T17245] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.383197][T17245] __do_fast_syscall_32+0x73/0x120 [ 533.383220][T17245] do_fast_syscall_32+0x32/0x80 [ 533.383241][T17245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.383264][T17245] RIP: 0023:0xf7f47579 [ 533.383276][T17245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.383290][T17245] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 533.383305][T17245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 533.383315][T17245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.383324][T17245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.383333][T17245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.383341][T17245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.383363][T17245] [ 533.748280][T17255] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 533.809371][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2996'. [ 534.051385][T17270] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 534.161825][T17270] /dev/sr0: Can't open blockdev [ 534.194049][T17275] netlink: 'syz.4.2999': attribute type 10 has an invalid length. [ 534.200204][T17275] bond0: (slave netdevsim0): Releasing backup interface [ 534.205241][T17275] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 534.207516][T17275] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 534.210104][T17275] team0: Port device netdevsim0 added [ 534.218448][T17275] netlink: 'syz.4.2999': attribute type 10 has an invalid length. [ 534.223493][T17275] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 534.225769][T17275] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 534.229934][T17275] team0: Port device netdevsim0 removed [ 534.235324][T17275] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 534.261502][T17272] /dev/sr0: Can't open blockdev [ 536.070840][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 536.219225][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 536.221814][T17306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 536.856214][T17316] netlink: 'syz.1.3013': attribute type 10 has an invalid length. [ 536.858750][T17316] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 536.903373][T17316] bond0: (slave netdevsim0): Releasing backup interface [ 536.908026][T17320] netlink: 'syz.1.3013': attribute type 10 has an invalid length. [ 536.917327][T17316] team0: Port device netdevsim0 added [ 536.941235][T17320] team0: Port device netdevsim0 removed [ 536.949508][T17320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 536.998610][T17315] netlink: 'syz.2.3011': attribute type 10 has an invalid length. [ 537.001588][T17315] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 537.006343][T17315] bond0: (slave netdevsim0): Releasing backup interface [ 537.010904][T17315] team0: Port device netdevsim0 added [ 537.153224][T17315] netlink: 'syz.2.3011': attribute type 10 has an invalid length. [ 537.161530][T17315] team0: Port device netdevsim0 removed [ 537.164135][T17315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 537.422223][T17329] netlink: 'syz.1.3016': attribute type 33 has an invalid length. [ 537.424253][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 537.426678][T17329] ip6tnl0: entered promiscuous mode [ 537.428448][T17329] ip6tnl0: entered allmulticast mode [ 537.437844][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 537.576546][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 537.594338][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 537.596802][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'. [ 537.844399][T17344] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 537.959822][T17345] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 537.989086][T17344] bond0: (slave netdevsim0): Releasing backup interface [ 537.997912][T17344] team0: Port device netdevsim0 added [ 538.204708][T17345] team0: Port device netdevsim0 removed [ 538.308099][T17345] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 538.632894][T17360] netlink: 'syz.1.3023': attribute type 10 has an invalid length. [ 538.639288][T17360] bond0: (slave netdevsim0): Releasing backup interface [ 538.645459][T17360] team0: Port device netdevsim0 added [ 538.658987][T17360] netlink: 'syz.1.3023': attribute type 10 has an invalid length. [ 538.665906][T17360] team0: Port device netdevsim0 removed [ 538.672024][T17360] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 539.068047][T17367] netlink: 'syz.0.3028': attribute type 33 has an invalid length. [ 539.070582][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 539.073218][T17367] ip6tnl0: entered promiscuous mode [ 539.074813][T17367] ip6tnl0: entered allmulticast mode [ 539.113357][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 539.190919][T17376] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 539.462243][T17376] /dev/sr0: Can't open blockdev [ 539.561632][T17378] /dev/sr0: Can't open blockdev [ 539.578676][T17361] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 539.723925][T17361] /dev/sr0: Can't open blockdev [ 539.832178][T17379] /dev/sr0: Can't open blockdev [ 540.342948][T17398] netlink: 'syz.4.3038': attribute type 33 has an invalid length. [ 540.345394][T17398] ip6tnl0: entered promiscuous mode [ 540.346878][T17398] ip6tnl0: entered allmulticast mode [ 540.384561][T17400] netlink: 'syz.0.3037': attribute type 10 has an invalid length. [ 540.408254][T17400] bond0: (slave netdevsim0): Releasing backup interface [ 540.421229][T17400] team0: Port device netdevsim0 added [ 540.439395][T17400] team0: Port device netdevsim0 removed [ 540.453259][T17400] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 541.092946][T17408] bond0: (slave netdevsim0): Releasing backup interface [ 541.158221][T17408] team0: Port device netdevsim0 added [ 541.167018][T17409] team0: Port device netdevsim0 removed [ 541.171089][T17409] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 542.215479][T17440] veth3: entered promiscuous mode [ 542.676072][T17451] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 542.812152][T17451] /dev/sr0: Can't open blockdev [ 543.042144][T17459] /dev/sr0: Can't open blockdev [ 543.578260][T17482] validate_nla: 3 callbacks suppressed [ 543.578272][T17482] netlink: 'syz.1.3052': attribute type 10 has an invalid length. [ 543.591051][T17480] netlink: 'syz.0.3050': attribute type 10 has an invalid length. [ 543.595262][T17482] bond0: (slave netdevsim0): Releasing backup interface [ 543.598819][T17482] team0: Port device netdevsim0 added [ 543.634313][T17485] netlink: 'syz.0.3050': attribute type 10 has an invalid length. [ 543.698687][T17481] netlink: 'syz.1.3052': attribute type 10 has an invalid length. [ 543.744996][T17480] bond0: (slave netdevsim0): Releasing backup interface [ 543.756008][T17480] team0: Port device netdevsim0 added [ 543.761405][T17485] team0: Port device netdevsim0 removed [ 543.764193][T17485] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 543.768178][T17481] team0: Port device netdevsim0 removed [ 543.770824][T17481] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 543.781884][T17461] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 543.870478][T17487] netlink: 'syz.2.3053': attribute type 10 has an invalid length. [ 543.877154][T17487] bond0: (slave netdevsim0): Releasing backup interface [ 543.884387][T17487] team0: Port device netdevsim0 added [ 543.891661][T17461] /dev/sr0: Can't open blockdev [ 543.893857][T17487] netlink: 'syz.2.3053': attribute type 10 has an invalid length. [ 543.902392][T17487] team0: Port device netdevsim0 removed [ 543.908476][T17487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 544.011798][T17479] /dev/sr0: Can't open blockdev [ 544.732333][T17520] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 544.812937][T17520] /dev/sr0: Can't open blockdev [ 544.815276][T17526] netlink: 'syz.4.3060': attribute type 10 has an invalid length. [ 544.821826][T17526] bond0: (slave netdevsim0): Releasing backup interface [ 544.827022][T17526] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 544.829349][T17526] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 544.832118][T17526] team0: Port device netdevsim0 added [ 544.842679][T17526] netlink: 'syz.4.3060': attribute type 10 has an invalid length. [ 544.863303][T17526] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 544.865591][T17526] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 544.869527][T17526] team0: Port device netdevsim0 removed [ 544.875336][T17526] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 544.952046][T17525] /dev/sr0: Can't open blockdev [ 545.004727][T17524] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 545.111399][T17524] /dev/sr0: Can't open blockdev [ 545.221489][T17528] /dev/sr0: Can't open blockdev [ 545.799678][T17538] __nla_validate_parse: 5 callbacks suppressed [ 545.799689][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 545.911684][T17542] evm: overlay not supported [ 546.030956][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 546.033766][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 546.076955][T17545] netlink: 'syz.2.3065': attribute type 33 has an invalid length. [ 546.079506][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 546.082182][T17545] syz_tun: entered promiscuous mode [ 546.085901][T17545] syz_tun: entered allmulticast mode [ 546.318805][T17553] netlink: 'syz.0.3066': attribute type 10 has an invalid length. [ 546.327416][T17553] bond0: (slave netdevsim0): Releasing backup interface [ 546.339047][T17553] team0: Port device netdevsim0 added [ 546.357064][T17553] team0: Port device netdevsim0 removed [ 546.370978][T17553] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 546.833183][T17560] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 546.942411][T17560] /dev/sr0: Can't open blockdev [ 547.075643][T17561] /dev/sr0: Can't open blockdev [ 547.170893][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 547.464574][T17595] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 547.504485][T17596] bond0: (slave netdevsim0): Releasing backup interface [ 547.512977][T17596] team0: Port device netdevsim0 added [ 547.532132][T17596] team0: Port device netdevsim0 removed [ 547.538534][T17596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 547.811498][T17595] /dev/sr0: Can't open blockdev [ 547.901613][T17597] /dev/sr0: Can't open blockdev [ 547.979876][T17605] syz_tun: entered promiscuous mode [ 547.985376][T17605] syz_tun: entered allmulticast mode [ 548.439262][T17616] bond0: (slave netdevsim0): Releasing backup interface [ 548.446057][T17616] team0: Port device netdevsim0 added [ 548.469108][T17616] team0: Port device netdevsim0 removed [ 548.476417][T17616] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 549.086321][T17636] validate_nla: 5 callbacks suppressed [ 549.086335][T17636] netlink: 'syz.0.3087': attribute type 33 has an invalid length. [ 549.090482][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 549.096854][T17636] ip6gre0: entered promiscuous mode [ 549.098435][T17636] ip6gre0: entered allmulticast mode [ 549.852031][T17653] netlink: 'syz.2.3091': attribute type 10 has an invalid length. [ 549.905977][T17654] netlink: 'syz.2.3091': attribute type 10 has an invalid length. [ 549.920191][T17653] bond0: (slave netdevsim0): Releasing backup interface [ 549.932623][T17653] team0: Port device netdevsim0 added [ 549.936761][T17654] team0: Port device netdevsim0 removed [ 549.940668][T17654] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 550.003091][T17655] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 550.121462][T17655] /dev/sr0: Can't open blockdev [ 550.201426][T17658] /dev/sr0: Can't open blockdev [ 550.489915][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'. [ 550.531873][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'. [ 550.543278][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'. [ 550.545809][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'. [ 550.875462][T17675] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 551.043164][T17675] /dev/sr0: Can't open blockdev [ 551.100067][T17679] netlink: 'syz.4.3097': attribute type 10 has an invalid length. [ 551.113449][T17679] bond0: (slave netdevsim0): Releasing backup interface [ 551.123712][T17679] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 551.127469][T17679] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 551.131519][T17679] team0: Port device netdevsim0 added [ 551.142460][T17679] netlink: 'syz.4.3097': attribute type 10 has an invalid length. [ 551.148499][T17679] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 551.152448][T17679] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 551.161835][T17679] team0: Port device netdevsim0 removed [ 551.168418][T17679] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 551.413172][T17676] /dev/sr0: Can't open blockdev [ 551.567703][T17686] cgroup2: Unknown parameter 'memoounting' [ 551.819076][T17695] ntfs3(sr0): Primary boot signature is not NTFS. [ 551.822402][T17695] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 551.873483][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 551.902577][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 551.907110][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 551.910322][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 552.014295][T17706] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 552.017105][T17707] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 552.201617][T17706] /dev/sr0: Can't open blockdev [ 552.322069][T17707] /dev/sr0: Can't open blockdev [ 552.341483][T17721] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 552.462274][T17708] /dev/sr0: Can't open blockdev [ 552.621843][T17709] /dev/sr0: Can't open blockdev [ 552.699737][T17734] FAULT_INJECTION: forcing a failure. [ 552.699737][T17734] name failslab, interval 1, probability 0, space 0, times 0 [ 552.701705][T17721] /dev/sr0: Can't open blockdev [ 552.706421][T17734] CPU: 2 UID: 0 PID: 17734 Comm: syz.2.3110 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 552.706443][T17734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.706453][T17734] Call Trace: [ 552.706458][T17734] [ 552.706464][T17734] dump_stack_lvl+0x16c/0x1f0 [ 552.706491][T17734] should_fail_ex+0x50a/0x650 [ 552.706507][T17734] ? fs_reclaim_acquire+0xae/0x150 [ 552.706528][T17734] should_failslab+0xc2/0x120 [ 552.706542][T17734] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 552.706564][T17734] ? __alloc_skb+0x2b1/0x380 [ 552.706589][T17734] __alloc_skb+0x2b1/0x380 [ 552.706611][T17734] ? __pfx___alloc_skb+0x10/0x10 [ 552.706636][T17734] ? genl_rcv_msg+0x4bd/0x800 [ 552.706661][T17734] netlink_ack+0x15f/0xb80 [ 552.706686][T17734] ? __pfx___lock_acquire+0x10/0x10 [ 552.706711][T17734] netlink_rcv_skb+0x348/0x440 [ 552.706732][T17734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.706748][T17734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.706777][T17734] ? down_read+0xc9/0x330 [ 552.706803][T17734] ? __pfx_down_read+0x10/0x10 [ 552.706825][T17734] ? netlink_deliver_tap+0x1ae/0xd30 [ 552.706849][T17734] genl_rcv+0x28/0x40 [ 552.706862][T17734] netlink_unicast+0x53c/0x7f0 [ 552.706890][T17734] ? __pfx_netlink_unicast+0x10/0x10 [ 552.706912][T17734] ? __phys_addr_symbol+0x30/0x80 [ 552.706928][T17734] ? __check_object_size+0x488/0x710 [ 552.706949][T17734] netlink_sendmsg+0x8b8/0xd70 [ 552.706975][T17734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.707005][T17734] ____sys_sendmsg+0xaaf/0xc90 [ 552.707024][T17734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.707041][T17734] ? get_compat_msghdr+0x11b/0x170 [ 552.707069][T17734] ___sys_sendmsg+0x135/0x1e0 [ 552.707093][T17734] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.707125][T17734] ? __pfx_lock_release+0x10/0x10 [ 552.707146][T17734] ? trace_lock_acquire+0x14e/0x1f0 [ 552.707178][T17734] ? __fget_files+0x206/0x3a0 [ 552.707208][T17734] __sys_sendmsg+0x16e/0x220 [ 552.707225][T17734] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.707257][T17734] __do_fast_syscall_32+0x73/0x120 [ 552.707281][T17734] do_fast_syscall_32+0x32/0x80 [ 552.707305][T17734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.707331][T17734] RIP: 0023:0xf7f66579 [ 552.707345][T17734] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 552.707361][T17734] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 552.707377][T17734] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 552.707387][T17734] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.707397][T17734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.707407][T17734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.707416][T17734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.707457][T17734] [ 552.905587][T17726] /dev/sr0: Can't open blockdev [ 552.963197][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3113'. [ 552.998175][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 553.014886][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 553.019035][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 553.021687][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 553.247652][T17757] netlink: 'syz.2.3116': attribute type 10 has an invalid length. [ 553.254590][T17757] bond0: (slave netdevsim0): Releasing backup interface [ 553.260124][T17757] team0: Port device netdevsim0 added [ 553.265403][T17757] netlink: 'syz.2.3116': attribute type 10 has an invalid length. [ 553.273292][T17757] team0: Port device netdevsim0 removed [ 553.281275][T17757] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 553.622643][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'. [ 553.717651][T17778] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 553.729117][T17780] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 553.760012][T17778] bond0: (slave netdevsim0): Releasing backup interface [ 553.767377][T17778] team0: Port device netdevsim0 added [ 553.784454][T17778] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 553.791477][T17778] team0: Port device netdevsim0 removed [ 553.799219][T17778] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 553.891830][T17780] /dev/sr0: Can't open blockdev [ 553.983960][T17788] FAULT_INJECTION: forcing a failure. [ 553.983960][T17788] name failslab, interval 1, probability 0, space 0, times 0 [ 553.987522][T17788] CPU: 2 UID: 0 PID: 17788 Comm: syz.2.3122 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 553.987536][T17788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 553.987543][T17788] Call Trace: [ 553.987546][T17788] [ 553.987551][T17788] dump_stack_lvl+0x16c/0x1f0 [ 553.987569][T17788] should_fail_ex+0x50a/0x650 [ 553.987580][T17788] ? fs_reclaim_acquire+0xae/0x150 [ 553.987594][T17788] ? tomoyo_realpath_from_path+0xb9/0x720 [ 553.987609][T17788] should_failslab+0xc2/0x120 [ 553.987619][T17788] __kmalloc_noprof+0xcb/0x510 [ 553.987634][T17788] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 553.987651][T17788] tomoyo_realpath_from_path+0xb9/0x720 [ 553.987665][T17788] ? tomoyo_path_number_perm+0x235/0x590 [ 553.987678][T17788] ? tomoyo_path_number_perm+0x235/0x590 [ 553.987691][T17788] tomoyo_path_number_perm+0x248/0x590 [ 553.987715][T17788] ? tomoyo_path_number_perm+0x235/0x590 [ 553.987728][T17788] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.987752][T17788] ? __pfx_lock_release+0x10/0x10 [ 553.987766][T17788] ? trace_lock_acquire+0x14e/0x1f0 [ 553.987779][T17788] ? lock_acquire+0x2f/0xb0 [ 553.987792][T17788] ? __fget_files+0x40/0x3a0 [ 553.987809][T17788] ? __fget_files+0x206/0x3a0 [ 553.987824][T17788] security_file_ioctl_compat+0x9b/0x240 [ 553.987840][T17788] __do_compat_sys_ioctl+0x4e/0x2c0 [ 553.987854][T17788] __do_fast_syscall_32+0x73/0x120 [ 553.987870][T17788] do_fast_syscall_32+0x32/0x80 [ 553.987885][T17788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.987901][T17788] RIP: 0023:0xf7f66579 [ 553.987910][T17788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 553.987920][T17788] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 553.987930][T17788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae41 [ 553.987936][T17788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.987942][T17788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.987947][T17788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 553.987953][T17788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.987965][T17788] [ 553.988040][T17788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.031987][T17794] netlink: 'syz.4.3124': attribute type 33 has an invalid length. [ 554.071424][T17785] /dev/sr0: Can't open blockdev [ 554.478636][T17814] netlink: 'syz.4.3128': attribute type 10 has an invalid length. [ 554.488120][T17814] bond0: (slave netdevsim0): Releasing backup interface [ 554.493301][T17814] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 554.495450][T17814] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 554.498028][T17814] team0: Port device netdevsim0 added [ 554.505908][T17814] netlink: 'syz.4.3128': attribute type 10 has an invalid length. [ 554.512157][T17814] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 554.514421][T17814] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 554.519257][T17814] team0: Port device netdevsim0 removed [ 554.525110][T17814] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 554.819322][T17831] netlink: 'syz.1.3131': attribute type 10 has an invalid length. [ 554.840648][T17831] bond0: (slave netdevsim0): Releasing backup interface [ 554.850697][T17831] team0: Port device netdevsim0 added [ 554.857249][T17831] netlink: 'syz.1.3131': attribute type 10 has an invalid length. [ 554.864053][T17831] team0: Port device netdevsim0 removed [ 554.870371][T17831] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 555.218462][T17849] netlink: 'syz.4.3134': attribute type 33 has an invalid length. [ 555.258825][T17856] FAULT_INJECTION: forcing a failure. [ 555.258825][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 555.263355][T17856] CPU: 1 UID: 0 PID: 17856 Comm: syz.4.3135 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 555.263370][T17856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 555.263377][T17856] Call Trace: [ 555.263381][T17856] [ 555.263385][T17856] dump_stack_lvl+0x16c/0x1f0 [ 555.263429][T17856] should_fail_ex+0x50a/0x650 [ 555.263447][T17856] ? fs_reclaim_acquire+0xae/0x150 [ 555.263461][T17856] ? __scm_send+0xebf/0x15d0 [ 555.263476][T17856] should_failslab+0xc2/0x120 [ 555.263486][T17856] __kmalloc_cache_noprof+0x68/0x410 [ 555.263500][T17856] ? __pfx___lock_acquire+0x10/0x10 [ 555.263515][T17856] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 555.263528][T17856] __scm_send+0xebf/0x15d0 [ 555.263546][T17856] ? trace_lock_acquire+0x14e/0x1f0 [ 555.263558][T17856] ? __pfx___scm_send+0x10/0x10 [ 555.263576][T17856] unix_stream_sendmsg+0x6fb/0x1030 [ 555.263589][T17856] ? aa_sk_perm+0x2f5/0xb20 [ 555.263601][T17856] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 555.263612][T17856] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.263628][T17856] ____sys_sendmsg+0xaaf/0xc90 [ 555.263642][T17856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.263654][T17856] ? get_compat_msghdr+0x11b/0x170 [ 555.263673][T17856] ___sys_sendmsg+0x135/0x1e0 [ 555.263690][T17856] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.263710][T17856] ? __pfx_lock_release+0x10/0x10 [ 555.263724][T17856] ? trace_lock_acquire+0x14e/0x1f0 [ 555.263739][T17856] ? __fget_files+0x206/0x3a0 [ 555.263757][T17856] __sys_sendmsg+0x16e/0x220 [ 555.263767][T17856] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.263784][T17856] __do_fast_syscall_32+0x73/0x120 [ 555.263801][T17856] do_fast_syscall_32+0x32/0x80 [ 555.263815][T17856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.263832][T17856] RIP: 0023:0xf7f34579 [ 555.263841][T17856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 555.263850][T17856] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 555.263860][T17856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001740 [ 555.263866][T17856] RDX: 0000000000000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.263872][T17856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.263878][T17856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 555.263883][T17856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.263895][T17856] [ 555.609529][T17869] netlink: 'syz.4.3138': attribute type 10 has an invalid length. [ 555.631026][T17869] bond0: (slave netdevsim0): Releasing backup interface [ 555.640618][T17869] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 555.644139][T17869] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 555.647973][T17869] team0: Port device netdevsim0 added [ 555.654038][T17869] netlink: 'syz.4.3138': attribute type 10 has an invalid length. [ 555.661749][T17869] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 555.664826][T17869] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 555.679522][T17869] team0: Port device netdevsim0 removed [ 555.690621][T17869] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 556.299097][T17889] netlink: 'syz.2.3142': attribute type 10 has an invalid length. [ 556.331185][T17889] bond0: (slave netdevsim0): Releasing backup interface [ 556.337165][T17889] team0: Port device netdevsim0 added [ 556.353951][T17894] netlink: 'syz.2.3142': attribute type 10 has an invalid length. [ 556.365904][T17894] team0: Port device netdevsim0 removed [ 556.368550][T17894] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 556.477235][T17895] netlink: 'syz.1.3143': attribute type 10 has an invalid length. [ 556.486647][T17895] bond0: (slave netdevsim0): Releasing backup interface [ 556.494223][T17895] team0: Port device netdevsim0 added [ 556.508614][T17895] team0: Port device netdevsim0 removed [ 556.514706][T17895] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 556.546123][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 556.546133][ T40] audit: type=1326 audit(1742718542.931:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17899 comm="syz.0.3146" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 556.797456][T17903] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 556.922061][T17903] /dev/sr0: Can't open blockdev [ 557.061319][T17904] /dev/sr0: Can't open blockdev [ 557.387630][T17920] bond0: (slave netdevsim0): Releasing backup interface [ 557.403501][T17920] team0: Port device netdevsim0 added [ 557.417099][T17920] team0: Port device netdevsim0 removed [ 557.426103][T17920] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 557.891988][T17934] FAULT_INJECTION: forcing a failure. [ 557.891988][T17934] name failslab, interval 1, probability 0, space 0, times 0 [ 557.895618][T17934] CPU: 0 UID: 0 PID: 17934 Comm: syz.0.3151 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 557.895632][T17934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.895639][T17934] Call Trace: [ 557.895642][T17934] [ 557.895646][T17934] dump_stack_lvl+0x16c/0x1f0 [ 557.895665][T17934] should_fail_ex+0x50a/0x650 [ 557.895677][T17934] ? fs_reclaim_acquire+0xae/0x150 [ 557.895691][T17934] should_failslab+0xc2/0x120 [ 557.895701][T17934] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 557.895717][T17934] ? __kernfs_new_node+0xd3/0x890 [ 557.895733][T17934] __kernfs_new_node+0xd3/0x890 [ 557.895747][T17934] ? hlock_class+0x4e/0x130 [ 557.895758][T17934] ? __pfx___kernfs_new_node+0x10/0x10 [ 557.895777][T17934] ? __pfx___lock_acquire+0x10/0x10 [ 557.895794][T17934] kernfs_new_node+0x186/0x240 [ 557.895809][T17934] ? lock_acquire.part.0+0x11b/0x380 [ 557.895825][T17934] kernfs_create_dir_ns+0x4c/0x150 [ 557.895842][T17934] sysfs_create_dir_ns+0x13b/0x2b0 [ 557.895855][T17934] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 557.895880][T17934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 557.895890][T17934] ? kobject_add_internal+0x12d/0x990 [ 557.895901][T17934] ? class_dir_child_ns_type+0xd/0x60 [ 557.895916][T17934] kobject_add_internal+0x2c8/0x990 [ 557.895928][T17934] kobject_add+0x16f/0x240 [ 557.895937][T17934] ? __pfx_kobject_add+0x10/0x10 [ 557.895948][T17934] ? lock_acquire+0x2f/0xb0 [ 557.895960][T17934] ? get_device_parent+0x11f/0x4e0 [ 557.895973][T17934] ? kobject_put+0xab/0x5a0 [ 557.895989][T17934] ? device_add+0xc02/0x1a70 [ 557.896005][T17934] device_add+0x289/0x1a70 [ 557.896020][T17934] ? __pfx_device_add+0x10/0x10 [ 557.896039][T17934] input_register_device+0x7e8/0x1130 [ 557.896053][T17934] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 557.896071][T17934] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 557.896088][T17934] ? __pfx_lock_release+0x10/0x10 [ 557.896101][T17934] ? trace_lock_acquire+0x14e/0x1f0 [ 557.896117][T17934] ? __fget_files+0x206/0x3a0 [ 557.896131][T17934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.896148][T17934] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 557.896164][T17934] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 557.896177][T17934] __do_fast_syscall_32+0x73/0x120 [ 557.896198][T17934] do_fast_syscall_32+0x32/0x80 [ 557.896213][T17934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.896229][T17934] RIP: 0023:0xf7f47579 [ 557.896238][T17934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.896248][T17934] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 557.896257][T17934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 557.896264][T17934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.896269][T17934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.896275][T17934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 557.896280][T17934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.896292][T17934] [ 557.896529][T17934] kobject: kobject_add_internal failed for input22 (error: -12 parent: input) [ 558.029685][T17939] __nla_validate_parse: 14 callbacks suppressed [ 558.029696][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 558.092599][T17941] loop2: detected capacity change from 0 to 7 [ 558.094690][T17941] Dev loop2: unable to read RDB block 7 [ 558.096302][T17941] loop2: AHDI p1 p2 p3 [ 558.097522][T17941] loop2: partition table partially beyond EOD, truncated [ 558.099709][T17941] loop2: p1 start 1601398130 is beyond EOD, truncated [ 558.102328][T17941] loop2: p2 start 1702059890 is beyond EOD, truncated [ 558.179964][T17947] bond0: (slave netdevsim0): Releasing backup interface [ 558.183497][T17947] team0: Port device netdevsim0 added [ 558.192321][T17947] team0: Port device netdevsim0 removed [ 558.194903][T17947] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 558.449335][T17954] FAULT_INJECTION: forcing a failure. [ 558.449335][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 558.454398][T17954] CPU: 0 UID: 0 PID: 17954 Comm: syz.4.3157 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 558.454414][T17954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.454421][T17954] Call Trace: [ 558.454425][T17954] [ 558.454429][T17954] dump_stack_lvl+0x16c/0x1f0 [ 558.454458][T17954] should_fail_ex+0x50a/0x650 [ 558.454469][T17954] ? fs_reclaim_acquire+0xae/0x150 [ 558.454484][T17954] should_failslab+0xc2/0x120 [ 558.454494][T17954] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 558.454509][T17954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.454525][T17954] ? __alloc_skb+0x2b1/0x380 [ 558.454543][T17954] __alloc_skb+0x2b1/0x380 [ 558.454557][T17954] ? __pfx___alloc_skb+0x10/0x10 [ 558.454573][T17954] ? __pfx___nla_validate_parse+0x10/0x10 [ 558.454586][T17954] ? net_generic+0xea/0x2a0 [ 558.454596][T17954] ? __pfx_lock_release+0x10/0x10 [ 558.454612][T17954] netlink_dump+0x699/0xd00 [ 558.454627][T17954] ? __nla_parse+0x40/0x60 [ 558.454639][T17954] ? __pfx_netlink_dump+0x10/0x10 [ 558.454664][T17954] __netlink_dump_start+0x6ca/0x970 [ 558.454681][T17954] ip_set_dump+0x180/0x210 [ 558.454690][T17954] ? __pfx_ip_set_dump+0x10/0x10 [ 558.454699][T17954] ? __pfx_ip_set_dump_start+0x10/0x10 [ 558.454709][T17954] ? __pfx_ip_set_dump_do+0x10/0x10 [ 558.454720][T17954] ? __pfx_ip_set_dump_done+0x10/0x10 [ 558.454735][T17954] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 558.454750][T17954] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 558.454762][T17954] ? mark_lock+0xb5/0xc60 [ 558.454774][T17954] ? __pfx_mark_lock+0x10/0x10 [ 558.454797][T17954] ? hlock_class+0x4e/0x130 [ 558.454808][T17954] ? __lock_acquire+0xcc5/0x3c40 [ 558.454825][T17954] netlink_rcv_skb+0x16b/0x440 [ 558.454840][T17954] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 558.454851][T17954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.454865][T17954] ? __pfx_aa_get_newest_label+0x10/0x10 [ 558.454882][T17954] ? bpf_lsm_capable+0x9/0x10 [ 558.454893][T17954] ? security_capable+0x7e/0x260 [ 558.454904][T17954] ? ns_capable+0xd7/0x110 [ 558.454919][T17954] nfnetlink_rcv+0x1b4/0x430 [ 558.454929][T17954] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 558.454939][T17954] ? netlink_deliver_tap+0x1ae/0xd30 [ 558.454956][T17954] netlink_unicast+0x53c/0x7f0 [ 558.454972][T17954] ? __pfx_netlink_unicast+0x10/0x10 [ 558.454988][T17954] ? __phys_addr_symbol+0x30/0x80 [ 558.454998][T17954] ? __check_object_size+0x488/0x710 [ 558.455010][T17954] netlink_sendmsg+0x8b8/0xd70 [ 558.455027][T17954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.455047][T17954] ____sys_sendmsg+0xaaf/0xc90 [ 558.455060][T17954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.455072][T17954] ? get_compat_msghdr+0x11b/0x170 [ 558.455092][T17954] ___sys_sendmsg+0x135/0x1e0 [ 558.455108][T17954] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.455129][T17954] ? __pfx_lock_release+0x10/0x10 [ 558.455142][T17954] ? trace_lock_acquire+0x14e/0x1f0 [ 558.455158][T17954] ? __fget_files+0x206/0x3a0 [ 558.455175][T17954] __sys_sendmsg+0x16e/0x220 [ 558.455185][T17954] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.455203][T17954] __do_fast_syscall_32+0x73/0x120 [ 558.455220][T17954] do_fast_syscall_32+0x32/0x80 [ 558.455235][T17954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.455252][T17954] RIP: 0023:0xf7f34579 [ 558.455260][T17954] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 558.455270][T17954] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 558.455280][T17954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 558.455286][T17954] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.455291][T17954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.455297][T17954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 558.455302][T17954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.455314][T17954] [ 558.456532][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 558.602106][ T36] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 558.635715][T17952] tipc: Enabled bearer , priority 0 [ 558.657391][T17951] tipc: Resetting bearer [ 558.788231][T17961] FAULT_INJECTION: forcing a failure. [ 558.788231][T17961] name failslab, interval 1, probability 0, space 0, times 0 [ 558.794805][T17961] CPU: 2 UID: 0 PID: 17961 Comm: syz.4.3159 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 558.794823][T17961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.794830][T17961] Call Trace: [ 558.794834][T17961] [ 558.794838][T17961] dump_stack_lvl+0x16c/0x1f0 [ 558.794858][T17961] should_fail_ex+0x50a/0x650 [ 558.794868][T17961] ? fs_reclaim_acquire+0xae/0x150 [ 558.794883][T17961] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 558.794896][T17961] should_failslab+0xc2/0x120 [ 558.794906][T17961] __kmalloc_noprof+0xcb/0x510 [ 558.794920][T17961] ? __kernel_text_address+0xd/0x40 [ 558.794935][T17961] ? unwind_get_return_address+0x59/0xa0 [ 558.794953][T17961] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 558.794987][T17961] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 558.794998][T17961] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.795009][T17961] ? trace_cap_capable+0x1a2/0x210 [ 558.795024][T17961] ? bpf_lsm_capable+0x9/0x10 [ 558.795034][T17961] ? security_capable+0x7e/0x260 [ 558.795048][T17961] genl_rcv_msg+0x565/0x800 [ 558.795060][T17961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.795070][T17961] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 558.795089][T17961] ? __pfx___lock_acquire+0x10/0x10 [ 558.795106][T17961] netlink_rcv_skb+0x16b/0x440 [ 558.795120][T17961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.795131][T17961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.795156][T17961] ? down_read+0xc9/0x330 [ 558.795172][T17961] ? __pfx_down_read+0x10/0x10 [ 558.795187][T17961] ? netlink_deliver_tap+0x1ae/0xd30 [ 558.795204][T17961] genl_rcv+0x28/0x40 [ 558.795212][T17961] netlink_unicast+0x53c/0x7f0 [ 558.795229][T17961] ? __pfx_netlink_unicast+0x10/0x10 [ 558.795244][T17961] ? __phys_addr_symbol+0x30/0x80 [ 558.795254][T17961] ? __check_object_size+0x488/0x710 [ 558.795267][T17961] netlink_sendmsg+0x8b8/0xd70 [ 558.795284][T17961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.795304][T17961] ____sys_sendmsg+0xaaf/0xc90 [ 558.795318][T17961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.795330][T17961] ? get_compat_msghdr+0x11b/0x170 [ 558.795349][T17961] ___sys_sendmsg+0x135/0x1e0 [ 558.795383][T17961] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.795406][T17961] ? __pfx_lock_release+0x10/0x10 [ 558.795419][T17961] ? trace_lock_acquire+0x14e/0x1f0 [ 558.795435][T17961] ? __fget_files+0x206/0x3a0 [ 558.795454][T17961] __sys_sendmsg+0x16e/0x220 [ 558.795463][T17961] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.795481][T17961] __do_fast_syscall_32+0x73/0x120 [ 558.795497][T17961] do_fast_syscall_32+0x32/0x80 [ 558.795512][T17961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.795529][T17961] RIP: 0023:0xf7f34579 [ 558.795538][T17961] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 558.795548][T17961] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 558.795558][T17961] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 558.795564][T17961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.795570][T17961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.795576][T17961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 558.795581][T17961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.795593][T17961] [ 559.570808][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.664669][T17971] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 559.894039][T17971] /dev/sr0: Can't open blockdev [ 559.982674][T17974] /dev/sr0: Can't open blockdev [ 560.005199][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 560.099802][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 560.110695][ T36] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 560.821589][T17951] tipc: Disabling bearer [ 560.855579][T17987] tipc: Enabled bearer , priority 0 [ 560.865665][T17981] tipc: Resetting bearer [ 561.843193][T17999] validate_nla: 5 callbacks suppressed [ 561.843229][T17999] netlink: 'syz.4.3169': attribute type 10 has an invalid length. [ 561.901181][T18000] netlink: 'syz.4.3169': attribute type 10 has an invalid length. [ 562.297403][T18005] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 562.301865][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.303600][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.391402][T18005] /dev/sr0: Can't open blockdev [ 562.503252][T18006] /dev/sr0: Can't open blockdev [ 562.703020][T17981] tipc: Disabling bearer [ 562.713544][T17999] bond0: (slave netdevsim0): Releasing backup interface [ 562.717188][T17999] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 562.720077][T17999] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 562.722252][T17999] team0: Port device netdevsim0 added [ 562.725140][T18000] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 562.727917][T18000] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 562.731595][T18000] team0: Port device netdevsim0 removed [ 562.735287][T18000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 562.896870][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 563.061590][T18021] netlink: 'syz.2.3177': attribute type 33 has an invalid length. [ 563.063837][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 563.066248][T18021] ip6tnl0: entered promiscuous mode [ 563.067718][T18021] ip6tnl0: entered allmulticast mode [ 563.547490][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 563.710914][ T36] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 563.883683][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 563.886695][ T36] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 563.889806][ T36] usb 7-1: config 179 has no interface number 0 [ 563.891650][ T36] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 563.894784][ T36] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 563.898196][ T36] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.902472][ T36] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 563.905250][ T36] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 563.908810][ T36] usb 7-1: config 179 interface 65 has no altsetting 0 [ 563.910653][ T36] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 563.913477][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.928143][ T36] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input23 [ 564.132372][T18037] FAULT_INJECTION: forcing a failure. [ 564.132372][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.135871][T18037] CPU: 3 UID: 0 PID: 18037 Comm: syz.2.3181 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 564.135885][T18037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 564.135892][T18037] Call Trace: [ 564.135895][T18037] [ 564.135900][T18037] dump_stack_lvl+0x16c/0x1f0 [ 564.135918][T18037] should_fail_ex+0x50a/0x650 [ 564.135930][T18037] save_fsave_header+0x17c/0x2e0 [ 564.135944][T18037] ? __pfx_save_fsave_header+0x10/0x10 [ 564.135961][T18037] ? __local_bh_enable_ip+0xa4/0x120 [ 564.135978][T18037] copy_fpstate_to_sigframe+0x7b6/0xb20 [ 564.135993][T18037] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 564.136010][T18037] ? find_held_lock+0x2d/0x110 [ 564.136022][T18037] get_sigframe+0x4aa/0x9c0 [ 564.136035][T18037] ? __pfx_get_sigframe+0x10/0x10 [ 564.136048][T18037] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.136061][T18037] ? siginfo_layout+0x177/0x290 [ 564.136081][T18037] ia32_setup_rt_frame+0xe4/0xb30 [ 564.136097][T18037] ? force_sig_fault+0xc5/0x110 [ 564.136113][T18037] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 564.136130][T18037] arch_do_signal_or_restart+0x47b/0x7e0 [ 564.136142][T18037] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 564.136153][T18037] ? __bad_area_nosemaphore+0x334/0x6a0 [ 564.136170][T18037] ? do_user_addr_fault+0x920/0x13f0 [ 564.136187][T18037] irqentry_exit_to_user_mode+0x13f/0x280 [ 564.136203][T18037] asm_exc_page_fault+0x26/0x30 [ 564.136217][T18037] RIP: 0023:0xf71d8736 [ 564.136225][T18037] Code: 03 76 37 f7 c6 03 00 00 00 74 16 a4 49 f7 c6 03 00 00 00 74 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 [ 564.136235][T18037] RSP: 002b:00000000f5085518 EFLAGS: 00010246 [ 564.136244][T18037] RAX: 0000000000000000 RBX: 00000000f73ecff4 RCX: 0000000000000400 [ 564.136250][T18037] RDX: 00000000f5085550 RSI: 00000000f5085550 RDI: 0000000000000000 [ 564.136256][T18037] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 564.136262][T18037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 564.136268][T18037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.136279][T18037] [ 564.251849][T18063] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 564.258318][T18063] bond0: (slave netdevsim0): Releasing backup interface [ 564.263425][T18063] team0: Port device netdevsim0 added [ 564.268537][T18063] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 564.275873][T18063] team0: Port device netdevsim0 removed [ 564.282774][T18063] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 564.308289][T18064] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 564.501902][T18064] /dev/sr0: Can't open blockdev [ 564.662657][T18065] /dev/sr0: Can't open blockdev [ 564.873642][ T36] usb 7-1: USB disconnect, device number 11 [ 564.875833][ T36] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 565.048108][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 565.073571][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 565.077266][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 565.079740][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 565.120685][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3193'. [ 565.499129][T18085] FAULT_INJECTION: forcing a failure. [ 565.499129][T18085] name failslab, interval 1, probability 0, space 0, times 0 [ 565.503573][T18085] CPU: 3 UID: 0 PID: 18085 Comm: syz.4.3196 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 565.503587][T18085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 565.503594][T18085] Call Trace: [ 565.503598][T18085] [ 565.503602][T18085] dump_stack_lvl+0x16c/0x1f0 [ 565.503621][T18085] should_fail_ex+0x50a/0x650 [ 565.503631][T18085] ? fs_reclaim_acquire+0xae/0x150 [ 565.503646][T18085] should_failslab+0xc2/0x120 [ 565.503657][T18085] __kmalloc_node_noprof+0xd1/0x510 [ 565.503672][T18085] ? file_tty_write.constprop.0+0x281/0x9a0 [ 565.503686][T18085] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 565.503702][T18085] __kvmalloc_node_noprof+0xad/0x1a0 [ 565.503716][T18085] file_tty_write.constprop.0+0x6dd/0x9a0 [ 565.503734][T18085] do_iter_readv_writev+0x655/0x950 [ 565.503749][T18085] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 565.503764][T18085] ? bpf_lsm_file_permission+0x9/0x10 [ 565.503779][T18085] ? security_file_permission+0x71/0x210 [ 565.503794][T18085] ? rw_verify_area+0xcf/0x680 [ 565.503808][T18085] vfs_writev+0x363/0xdd0 [ 565.503820][T18085] ? find_held_lock+0x2d/0x110 [ 565.503835][T18085] ? __pfx_vfs_writev+0x10/0x10 [ 565.503847][T18085] ? find_held_lock+0x2d/0x110 [ 565.503860][T18085] ? __pfx_lock_release+0x10/0x10 [ 565.503874][T18085] ? trace_lock_acquire+0x14e/0x1f0 [ 565.503890][T18085] ? __fget_files+0x206/0x3a0 [ 565.503908][T18085] ? do_writev+0x133/0x340 [ 565.503933][T18085] do_writev+0x133/0x340 [ 565.503945][T18085] ? __pfx_do_writev+0x10/0x10 [ 565.503962][T18085] __do_fast_syscall_32+0x73/0x120 [ 565.503978][T18085] do_fast_syscall_32+0x32/0x80 [ 565.503993][T18085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.504009][T18085] RIP: 0023:0xf7f34579 [ 565.504017][T18085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 565.504027][T18085] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 565.504037][T18085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 565.504044][T18085] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.504049][T18085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.504055][T18085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 565.504061][T18085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.504075][T18085] [ 565.670490][T18090] netlink: 'syz.4.3198': attribute type 3 has an invalid length. [ 565.674100][T18090] netlink: 'syz.4.3198': attribute type 3 has an invalid length. [ 565.910967][ T26] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 566.007574][T18095] netlink: 'syz.1.3199': attribute type 10 has an invalid length. [ 566.014513][T18095] bond0: (slave netdevsim0): Releasing backup interface [ 566.020401][T18095] team0: Port device netdevsim0 added [ 566.034076][T18095] netlink: 'syz.1.3199': attribute type 10 has an invalid length. [ 566.040438][T18095] team0: Port device netdevsim0 removed [ 566.045542][T18095] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 566.307545][ T26] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 566.313489][ T26] usb 9-1: config 0 interface 0 has no altsetting 0 [ 566.319781][ T26] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.325540][ T26] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.329742][ T26] usb 9-1: Product: syz [ 566.332295][ T26] usb 9-1: Manufacturer: syz [ 566.339203][ T26] usb 9-1: SerialNumber: syz [ 566.341761][ T26] usb 9-1: config 0 descriptor?? [ 566.349240][ T26] usb 9-1: selecting invalid altsetting 0 [ 566.351341][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 566.380568][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 566.385283][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 566.524538][T18107] netlink: 'syz.2.3200': attribute type 10 has an invalid length. [ 566.534646][T18107] bond0: (slave netdevsim0): Releasing backup interface [ 566.542461][T18107] team0: Port device netdevsim0 added [ 566.554911][ T26] usb 9-1: USB disconnect, device number 4 [ 566.570125][T18107] team0: Port device netdevsim0 removed [ 566.579500][T18107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 566.781526][T18109] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 566.901962][T18109] /dev/sr0: Can't open blockdev [ 567.012620][T18112] /dev/sr0: Can't open blockdev [ 567.870869][ T36] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 568.022015][ T36] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 568.024438][ T36] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 568.029351][ T36] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 568.032200][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.034370][ T36] usb 7-1: Product: syz [ 568.035531][ T36] usb 7-1: Manufacturer: syz [ 568.036808][ T36] usb 7-1: SerialNumber: syz [ 568.039400][ T36] usb 7-1: config 0 descriptor?? [ 568.150410][T18135] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 568.271853][T18135] /dev/sr0: Can't open blockdev [ 568.322080][ T36] mos7840 7-1:0.0: required endpoints missing [ 568.325119][ T36] usb 7-1: USB disconnect, device number 12 [ 568.401896][T18136] /dev/sr0: Can't open blockdev [ 568.786732][T18145] validate_nla: 1 callbacks suppressed [ 568.786769][T18145] netlink: 'syz.4.3213': attribute type 10 has an invalid length. [ 568.796503][T18145] bond0: (slave netdevsim0): Releasing backup interface [ 568.803929][T18145] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 568.806476][T18145] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 568.809219][T18145] team0: Port device netdevsim0 added [ 568.818861][T18145] netlink: 'syz.4.3213': attribute type 10 has an invalid length. [ 568.823740][T18145] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 568.825981][T18145] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 568.832243][T18145] team0: Port device netdevsim0 removed [ 568.842823][T18145] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 568.959393][T18146] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 568.964827][T18149] __nla_validate_parse: 2 callbacks suppressed [ 568.964837][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 569.006447][T18150] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 569.048827][T18146] bond0: (slave netdevsim0): Releasing backup interface [ 569.055393][T18146] team0: Port device netdevsim0 added [ 569.069535][T18150] team0: Port device netdevsim0 removed [ 569.073284][T18150] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 569.076008][T18153] FAULT_INJECTION: forcing a failure. [ 569.076008][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 569.082510][T18153] CPU: 3 UID: 0 PID: 18153 Comm: syz.2.3216 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 569.082525][T18153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 569.082531][T18153] Call Trace: [ 569.082535][T18153] [ 569.082539][T18153] dump_stack_lvl+0x16c/0x1f0 [ 569.082557][T18153] should_fail_ex+0x50a/0x650 [ 569.082570][T18153] should_failslab+0xc2/0x120 [ 569.082581][T18153] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 569.082598][T18153] ? __alloc_skb+0x2b1/0x380 [ 569.082615][T18153] __alloc_skb+0x2b1/0x380 [ 569.082629][T18153] ? __pfx___alloc_skb+0x10/0x10 [ 569.082645][T18153] ? devlink_nl_port_handle_size+0xfa/0x180 [ 569.082661][T18153] ? if_nlmsg_size+0x45d/0xa80 [ 569.082678][T18153] rtmsg_ifinfo_build_skb+0x81/0x280 [ 569.082691][T18153] rtmsg_ifinfo+0x9f/0x1a0 [ 569.082703][T18153] __dev_notify_flags+0x24e/0x2e0 [ 569.082719][T18153] ? __pfx___dev_notify_flags+0x10/0x10 [ 569.082735][T18153] ? __pfx___dev_change_flags+0x10/0x10 [ 569.082750][T18153] ? __lock_acquire+0x15a9/0x3c40 [ 569.082763][T18153] ? validate_linkmsg+0x57d/0xb60 [ 569.082779][T18153] ? __pfx_validate_linkmsg+0x10/0x10 [ 569.082795][T18153] dev_change_flags+0x10c/0x160 [ 569.082811][T18153] do_setlink.constprop.0+0x699/0x3f80 [ 569.082827][T18153] ? __pfx_mark_lock+0x10/0x10 [ 569.082843][T18153] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 569.082858][T18153] ? find_held_lock+0x2d/0x110 [ 569.082870][T18153] ? __mutex_lock+0x2d0/0xb10 [ 569.082885][T18153] ? __pfx_lock_release+0x10/0x10 [ 569.082900][T18153] ? mark_held_locks+0x9f/0xe0 [ 569.082915][T18153] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.082928][T18153] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.082942][T18153] ? __mutex_lock+0x1cc/0xb10 [ 569.082956][T18153] ? __pfx_aa_get_newest_label+0x10/0x10 [ 569.082968][T18153] ? rtnl_newlink+0x5d9/0x1d60 [ 569.082984][T18153] ? __pfx___mutex_lock+0x10/0x10 [ 569.083002][T18153] ? full_name_hash+0xbc/0x110 [ 569.083029][T18153] ? netdev_name_node_lookup+0x127/0x180 [ 569.083046][T18153] rtnl_newlink+0x1306/0x1d60 [ 569.083064][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 569.083082][T18153] ? __pfx___lock_acquire+0x10/0x10 [ 569.083095][T18153] ? kfree_skbmem+0x1a4/0x1f0 [ 569.083108][T18153] ? aa_get_newest_label+0x376/0x680 [ 569.083125][T18153] ? find_held_lock+0x2d/0x110 [ 569.083142][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 569.083158][T18153] rtnetlink_rcv_msg+0x95b/0xea0 [ 569.083174][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.083196][T18153] netlink_rcv_skb+0x16b/0x440 [ 569.083211][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.083228][T18153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.083250][T18153] ? netlink_deliver_tap+0x1ae/0xd30 [ 569.083267][T18153] netlink_unicast+0x53c/0x7f0 [ 569.083308][T18153] ? __pfx_netlink_unicast+0x10/0x10 [ 569.083323][T18153] ? __phys_addr_symbol+0x30/0x80 [ 569.083334][T18153] ? __check_object_size+0x488/0x710 [ 569.083346][T18153] netlink_sendmsg+0x8b8/0xd70 [ 569.083363][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.083384][T18153] ____sys_sendmsg+0xaaf/0xc90 [ 569.083398][T18153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.083410][T18153] ? get_compat_msghdr+0x11b/0x170 [ 569.083429][T18153] ___sys_sendmsg+0x135/0x1e0 [ 569.083446][T18153] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.083467][T18153] ? __pfx_lock_release+0x10/0x10 [ 569.083480][T18153] ? trace_lock_acquire+0x14e/0x1f0 [ 569.083496][T18153] ? __fget_files+0x206/0x3a0 [ 569.083514][T18153] __sys_sendmsg+0x16e/0x220 [ 569.083523][T18153] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.083541][T18153] __do_fast_syscall_32+0x73/0x120 [ 569.083557][T18153] do_fast_syscall_32+0x32/0x80 [ 569.083572][T18153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.083589][T18153] RIP: 0023:0xf7f66579 [ 569.083597][T18153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 569.083607][T18153] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 569.083617][T18153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 569.083624][T18153] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.083629][T18153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.083635][T18153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 569.083641][T18153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.083653][T18153] [ 570.743307][T18194] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 570.921869][T18194] /dev/sr0: Can't open blockdev [ 570.966223][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 571.030716][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 571.041079][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 571.041483][T18199] /dev/sr0: Can't open blockdev [ 571.044573][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 571.088446][T18207] netlink: 'syz.4.3231': attribute type 10 has an invalid length. [ 571.092642][T18207] bridge0: port 3(dummy0) entered blocking state [ 571.095026][T18207] bridge0: port 3(dummy0) entered forwarding state [ 571.098785][T18207] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 571.105002][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'. [ 571.108187][T18207] team0: left allmulticast mode [ 571.110084][T18207] team_slave_0: left allmulticast mode [ 571.112495][T18207] team_slave_1: left allmulticast mode [ 571.114618][T18207] team0: left promiscuous mode [ 571.116480][T18207] team_slave_0: left promiscuous mode [ 571.118458][T18207] team_slave_1: left promiscuous mode [ 571.120130][T18207] bridge0: port 4(team0) entered disabled state [ 571.123120][T18207] dummy0: left allmulticast mode [ 571.124699][T18207] bridge0: port 3(dummy0) entered disabled state [ 571.127346][T18207] bridge_slave_1: left allmulticast mode [ 571.129342][T18207] bridge_slave_1: left promiscuous mode [ 571.131153][ T36] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 571.131824][T18207] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.137761][T18207] bridge_slave_0: left allmulticast mode [ 571.140012][T18207] bridge_slave_0: left promiscuous mode [ 571.142580][T18207] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.160695][T18207] bond0: (slave bridge0): Releasing backup interface [ 571.322052][T18211] netlink: 'syz.4.3233': attribute type 33 has an invalid length. [ 571.322362][ T36] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 571.324808][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 571.327230][ T36] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 571.335026][ T36] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 571.337912][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.340117][ T36] usb 7-1: Product: syz [ 571.342371][ T36] usb 7-1: Manufacturer: syz [ 571.343923][ T36] usb 7-1: SerialNumber: syz [ 571.351419][ T36] usb 7-1: config 0 descriptor?? [ 571.728878][T18229] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 571.734349][T18229] bond0: (slave netdevsim0): Releasing backup interface [ 571.738938][T18229] team0: Port device netdevsim0 added [ 571.744817][T18229] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 571.750021][T18229] team0: Port device netdevsim0 removed [ 571.754724][T18229] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 572.074911][T18231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.078542][T18231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.081360][T18231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.084304][T18231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.087053][T18231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.089941][T18231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.123728][T18231] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3229' sets config #1 [ 572.456955][T18246] netlink: 'syz.0.3245': attribute type 33 has an invalid length. [ 572.459272][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 572.635887][T18253] FAULT_INJECTION: forcing a failure. [ 572.635887][T18253] name failslab, interval 1, probability 0, space 0, times 0 [ 572.640393][T18253] CPU: 2 UID: 0 PID: 18253 Comm: syz.0.3248 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 572.640412][T18253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.640421][T18253] Call Trace: [ 572.640427][T18253] [ 572.640433][T18253] dump_stack_lvl+0x16c/0x1f0 [ 572.640459][T18253] should_fail_ex+0x50a/0x650 [ 572.640474][T18253] ? fs_reclaim_acquire+0xae/0x150 [ 572.640494][T18253] should_failslab+0xc2/0x120 [ 572.640508][T18253] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 572.640529][T18253] ? __pfx_lock_release+0x10/0x10 [ 572.640549][T18253] ? __alloc_skb+0x2b1/0x380 [ 572.640573][T18253] __alloc_skb+0x2b1/0x380 [ 572.640593][T18253] ? __pfx___alloc_skb+0x10/0x10 [ 572.640614][T18253] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 572.640641][T18253] netlink_ack+0x15f/0xb80 [ 572.640668][T18253] netlink_rcv_skb+0x348/0x440 [ 572.640689][T18253] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 572.640711][T18253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.640743][T18253] ? netlink_deliver_tap+0x1ae/0xd30 [ 572.640779][T18253] netlink_unicast+0x53c/0x7f0 [ 572.640804][T18253] ? __pfx_netlink_unicast+0x10/0x10 [ 572.640825][T18253] ? __phys_addr_symbol+0x30/0x80 [ 572.640840][T18253] ? __check_object_size+0x488/0x710 [ 572.640857][T18253] netlink_sendmsg+0x8b8/0xd70 [ 572.640881][T18253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.640909][T18253] ____sys_sendmsg+0xaaf/0xc90 [ 572.640929][T18253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.640945][T18253] ? get_compat_msghdr+0x11b/0x170 [ 572.640972][T18253] ___sys_sendmsg+0x135/0x1e0 [ 572.641000][T18253] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.641030][T18253] ? __pfx_lock_release+0x10/0x10 [ 572.641048][T18253] ? trace_lock_acquire+0x14e/0x1f0 [ 572.641071][T18253] ? __fget_files+0x206/0x3a0 [ 572.641097][T18253] __sys_sendmsg+0x16e/0x220 [ 572.641111][T18253] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.641138][T18253] __do_fast_syscall_32+0x73/0x120 [ 572.641161][T18253] do_fast_syscall_32+0x32/0x80 [ 572.641181][T18253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.641203][T18253] RIP: 0023:0xf7f47579 [ 572.641215][T18253] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 572.641229][T18253] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 572.641244][T18253] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 572.641253][T18253] RDX: 0000000024000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.641261][T18253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.641270][T18253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 572.641278][T18253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.641296][T18253] [ 572.700028][T18255] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 572.857127][T18255] /dev/sr0: Can't open blockdev [ 573.001394][T18256] /dev/sr0: Can't open blockdev [ 573.334475][T18271] netlink: 'syz.1.3254': attribute type 33 has an invalid length. [ 573.336626][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 573.339071][T18271] ip6gre0: entered promiscuous mode [ 573.340550][T18271] ip6gre0: entered allmulticast mode [ 574.584884][ T36] mos7840 7-1:0.0: required endpoints missing [ 574.590306][ T36] usb 7-1: USB disconnect, device number 13 [ 575.588293][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 575.611132][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 575.614783][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 575.617255][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 575.860135][T18310] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 575.875871][T18310] bond0: (slave netdevsim0): Releasing backup interface [ 575.886495][T18310] team0: Port device netdevsim0 added [ 575.892283][T18310] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 575.903138][T18310] team0: Port device netdevsim0 removed [ 575.915741][T18310] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 576.252690][T18319] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 576.331610][T18319] /dev/sr0: Can't open blockdev [ 576.501500][T18322] /dev/sr0: Can't open blockdev [ 577.135534][T18337] netlink: 'syz.1.3275': attribute type 12 has an invalid length. [ 577.167944][ T58] kernel write not supported for file /sg0 (pid: 58 comm: kworker/3:1) [ 577.558941][T18351] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 577.612653][T18352] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 577.625480][T18351] bond0: (slave netdevsim0): Releasing backup interface [ 577.632286][T18351] team0: Port device netdevsim0 added [ 577.636439][T18352] team0: Port device netdevsim0 removed [ 577.639096][T18352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 577.744092][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 577.762267][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 577.765778][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 577.768611][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3280'. [ 577.884120][T18359] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 577.893612][T18359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.899778][T18359] gretap1: entered promiscuous mode [ 577.903059][T18359] bond1: (slave gretap1): making interface the new active one [ 577.905502][T18359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 577.910551][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 577.915633][T18359] vlan2: entered promiscuous mode [ 577.972455][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 579.057619][T18387] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 579.065512][T18387] bond0: (slave netdevsim0): Releasing backup interface [ 579.071476][T18387] team0: Port device netdevsim0 added [ 579.076690][T18387] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 579.085095][T18387] team0: Port device netdevsim0 removed [ 579.090740][T18387] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.548635][T18397] netlink: 'syz.0.3295': attribute type 10 has an invalid length. [ 579.551705][T18397] dummy0: entered promiscuous mode [ 579.555260][T18397] bridge0: port 3(dummy0) entered blocking state [ 579.557927][T18397] bridge0: port 3(dummy0) entered disabled state [ 579.560604][T18397] dummy0: entered allmulticast mode [ 579.564099][T18397] bridge0: port 3(dummy0) entered blocking state [ 579.566651][T18397] bridge0: port 3(dummy0) entered forwarding state [ 579.810448][T18407] FAULT_INJECTION: forcing a failure. [ 579.810448][T18407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.815560][T18407] CPU: 2 UID: 0 PID: 18407 Comm: syz.4.3299 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 579.815582][T18407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 579.815592][T18407] Call Trace: [ 579.815598][T18407] [ 579.815605][T18407] dump_stack_lvl+0x16c/0x1f0 [ 579.815633][T18407] should_fail_ex+0x50a/0x650 [ 579.815654][T18407] _copy_from_iter+0x2a1/0x1560 [ 579.815673][T18407] ? trace_lock_acquire+0x14e/0x1f0 [ 579.815693][T18407] ? __alloc_skb+0x1fe/0x380 [ 579.815719][T18407] ? __pfx__copy_from_iter+0x10/0x10 [ 579.815736][T18407] ? __virt_addr_valid+0x1a4/0x590 [ 579.815756][T18407] ? __virt_addr_valid+0x5e/0x590 [ 579.815772][T18407] ? __phys_addr_symbol+0x30/0x80 [ 579.815786][T18407] ? __check_object_size+0x488/0x710 [ 579.815806][T18407] netlink_sendmsg+0x813/0xd70 [ 579.815833][T18407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.815864][T18407] ____sys_sendmsg+0xaaf/0xc90 [ 579.815885][T18407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.815901][T18407] ? get_compat_msghdr+0x11b/0x170 [ 579.815929][T18407] ___sys_sendmsg+0x135/0x1e0 [ 579.815955][T18407] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.815987][T18407] ? __pfx_lock_release+0x10/0x10 [ 579.816009][T18407] ? trace_lock_acquire+0x14e/0x1f0 [ 579.816043][T18407] ? __fget_files+0x206/0x3a0 [ 579.816072][T18407] __sys_sendmsg+0x16e/0x220 [ 579.816087][T18407] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.816118][T18407] __do_fast_syscall_32+0x73/0x120 [ 579.816144][T18407] do_fast_syscall_32+0x32/0x80 [ 579.816168][T18407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.816194][T18407] RIP: 0023:0xf7f34579 [ 579.816207][T18407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.816221][T18407] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 579.816237][T18407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 579.816248][T18407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.816257][T18407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.816267][T18407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.816276][T18407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.816298][T18407] [ 579.894051][ C2] vkms_vblank_simulate: vblank timer overrun [ 580.871107][T18431] __nla_validate_parse: 7 callbacks suppressed [ 580.871117][T18431] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3306'. [ 581.075536][T18440] FAULT_INJECTION: forcing a failure. [ 581.075536][T18440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.079105][T18440] CPU: 3 UID: 0 PID: 18440 Comm: syz.1.3311 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 581.079118][T18440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 581.079124][T18440] Call Trace: [ 581.079128][T18440] [ 581.079131][T18440] dump_stack_lvl+0x16c/0x1f0 [ 581.079150][T18440] should_fail_ex+0x50a/0x650 [ 581.079181][T18440] _copy_from_iter+0x2a1/0x1560 [ 581.079202][T18440] ? __pfx__copy_from_iter+0x10/0x10 [ 581.079213][T18440] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 581.079225][T18440] ? tun_build_skb.constprop.0+0x1b8/0xf00 [ 581.079239][T18440] ? __pfx_lock_release+0x10/0x10 [ 581.079262][T18440] copy_page_from_iter+0xa5/0x120 [ 581.079280][T18440] tun_build_skb.constprop.0+0x294/0xf00 [ 581.079300][T18440] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 581.079312][T18440] ? __pfx___lock_acquire+0x10/0x10 [ 581.079332][T18440] ? __lock_acquire+0xcc5/0x3c40 [ 581.079348][T18440] tun_get_user+0x870/0x3e50 [ 581.079361][T18440] ? find_held_lock+0x2d/0x110 [ 581.079374][T18440] ? __pfx_tun_get_user+0x10/0x10 [ 581.079383][T18440] ? find_held_lock+0x2d/0x110 [ 581.079396][T18440] ? __pfx_lock_release+0x10/0x10 [ 581.079416][T18440] tun_chr_write_iter+0xdc/0x210 [ 581.079427][T18440] vfs_write+0x5ae/0x1150 [ 581.079442][T18440] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 581.079454][T18440] ? __pfx_vfs_write+0x10/0x10 [ 581.079468][T18440] ? __fget_files+0x40/0x3a0 [ 581.079489][T18440] ksys_write+0x12b/0x250 [ 581.079502][T18440] ? __pfx_ksys_write+0x10/0x10 [ 581.079519][T18440] __do_fast_syscall_32+0x73/0x120 [ 581.079536][T18440] do_fast_syscall_32+0x32/0x80 [ 581.079550][T18440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.079567][T18440] RIP: 0023:0xf7f2f579 [ 581.079575][T18440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.079585][T18440] RSP: 002b:00000000f5056520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 581.079595][T18440] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 581.079601][T18440] RDX: 000000000000009a RSI: 00000000f73bcff4 RDI: 0000000000000000 [ 581.079607][T18440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.079612][T18440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.079618][T18440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.079630][T18440] [ 581.199894][T18441] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 581.207590][T18441] bond0: (slave netdevsim0): Releasing backup interface [ 581.213856][T18441] team0: Port device netdevsim0 added [ 581.223619][T18441] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 581.232742][T18441] team0: Port device netdevsim0 removed [ 581.238223][T18441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 581.963015][T18459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3317'. [ 582.252766][T18466] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 582.351540][T18466] /dev/sr0: Can't open blockdev [ 582.446565][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 582.470294][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 582.576025][T18480] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 582.587531][T18467] /dev/sr0: Can't open blockdev [ 582.590217][T18480] bond0: (slave netdevsim0): Releasing backup interface [ 582.596725][T18480] team0: Port device netdevsim0 added [ 582.601307][T18480] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 582.607898][T18480] team0: Port device netdevsim0 removed [ 582.614198][T18480] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 582.891686][T18482] FAULT_INJECTION: forcing a failure. [ 582.891686][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 582.895307][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.2.3325 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 582.895320][T18482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 582.895327][T18482] Call Trace: [ 582.895330][T18482] [ 582.895335][T18482] dump_stack_lvl+0x16c/0x1f0 [ 582.895353][T18482] should_fail_ex+0x50a/0x650 [ 582.895364][T18482] ? fs_reclaim_acquire+0xae/0x150 [ 582.895378][T18482] ? tomoyo_encode2+0x100/0x3e0 [ 582.895392][T18482] should_failslab+0xc2/0x120 [ 582.895402][T18482] __kmalloc_noprof+0xcb/0x510 [ 582.895417][T18482] ? d_absolute_path+0x137/0x1b0 [ 582.895428][T18482] ? rcu_is_watching+0x12/0xc0 [ 582.895441][T18482] tomoyo_encode2+0x100/0x3e0 [ 582.895456][T18482] tomoyo_encode+0x29/0x50 [ 582.895469][T18482] tomoyo_realpath_from_path+0x19d/0x720 [ 582.895495][T18482] tomoyo_path_number_perm+0x248/0x590 [ 582.895508][T18482] ? tomoyo_path_number_perm+0x235/0x590 [ 582.895527][T18482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.895566][T18482] ? __pfx_lock_release+0x10/0x10 [ 582.895586][T18482] ? trace_lock_acquire+0x14e/0x1f0 [ 582.895606][T18482] ? lock_acquire+0x2f/0xb0 [ 582.895620][T18482] ? __fget_files+0x40/0x3a0 [ 582.895643][T18482] ? __fget_files+0x206/0x3a0 [ 582.895667][T18482] security_file_ioctl_compat+0x9b/0x240 [ 582.895687][T18482] __do_compat_sys_ioctl+0x4e/0x2c0 [ 582.895705][T18482] __do_fast_syscall_32+0x73/0x120 [ 582.895727][T18482] do_fast_syscall_32+0x32/0x80 [ 582.895746][T18482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.895767][T18482] RIP: 0023:0xf7f66579 [ 582.895778][T18482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 582.895791][T18482] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 582.895805][T18482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 582.895813][T18482] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.895822][T18482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.895830][T18482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 582.895838][T18482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.895858][T18482] [ 582.896235][T18482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 582.938059][T18484] overlayfs: failed to resolve './file0': -2 [ 583.262364][T18493] netlink: 'syz.4.3324': attribute type 10 has an invalid length. [ 583.266899][T18493] bond0: (slave netdevsim0): Releasing backup interface [ 583.270681][T18493] team0: Port device netdevsim0 added [ 583.279627][T18493] netlink: 'syz.4.3324': attribute type 10 has an invalid length. [ 583.284426][T18493] team0: Port device netdevsim0 removed [ 583.287850][T18493] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 583.776566][T18497] netlink: 'syz.0.3328': attribute type 10 has an invalid length. [ 583.789613][T18497] bond0: (slave netdevsim0): Releasing backup interface [ 583.809882][T18497] team0: Port device netdevsim0 added [ 583.818093][T18497] netlink: 'syz.0.3328': attribute type 10 has an invalid length. [ 583.951341][T18497] team0: Port device netdevsim0 removed [ 583.955545][T18497] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 584.096770][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3332'. [ 584.239552][T18512] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 584.254709][T18512] bond0: (slave netdevsim0): Releasing backup interface [ 584.268487][T18512] team0: Port device netdevsim0 added [ 584.278955][T18512] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 584.289922][T18512] team0: Port device netdevsim0 removed [ 584.297585][T18512] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.400513][T18529] bond0: (slave netdevsim0): Releasing backup interface [ 585.406962][T18529] team0: Port device netdevsim0 added [ 585.411096][T18530] team0: Port device netdevsim0 removed [ 585.413857][T18530] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.840995][T15068] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 585.879093][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3341'. [ 586.374683][T15068] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.379570][T15068] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 586.384526][T15068] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 586.387727][T15068] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 586.390891][T15068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.424349][T18541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 586.451138][T15068] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.507958][T18554] validate_nla: 2 callbacks suppressed [ 586.508034][T18554] netlink: 'syz.1.3343': attribute type 10 has an invalid length. [ 586.519589][T18554] bond0: (slave netdevsim0): Releasing backup interface [ 586.538032][T18554] team0: Port device netdevsim0 added [ 586.549137][T18554] netlink: 'syz.1.3343': attribute type 10 has an invalid length. [ 586.564106][T18554] team0: Port device netdevsim0 removed [ 586.577571][T18554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 586.641353][T18541] FAULT_INJECTION: forcing a failure. [ 586.641353][T18541] name failslab, interval 1, probability 0, space 0, times 0 [ 586.645110][T18541] CPU: 3 UID: 0 PID: 18541 Comm: syz.2.3339 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 586.645124][T18541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 586.645136][T18541] Call Trace: [ 586.645140][T18541] [ 586.645144][T18541] dump_stack_lvl+0x16c/0x1f0 [ 586.645163][T18541] should_fail_ex+0x50a/0x650 [ 586.645173][T18541] ? fs_reclaim_acquire+0xae/0x150 [ 586.645187][T18541] ? tomoyo_encode2+0x100/0x3e0 [ 586.645201][T18541] should_failslab+0xc2/0x120 [ 586.645210][T18541] __kmalloc_noprof+0xcb/0x510 [ 586.645225][T18541] ? d_absolute_path+0x137/0x1b0 [ 586.645238][T18541] tomoyo_encode2+0x100/0x3e0 [ 586.645253][T18541] tomoyo_encode+0x29/0x50 [ 586.645267][T18541] tomoyo_realpath_from_path+0x19d/0x720 [ 586.645284][T18541] tomoyo_check_open_permission+0x2ad/0x3c0 [ 586.645297][T18541] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 586.645315][T18541] ? __pfx___lock_acquire+0x10/0x10 [ 586.645336][T18541] ? __pfx_hook_file_open+0x10/0x10 [ 586.645349][T18541] ? lock_acquire+0x2f/0xb0 [ 586.645364][T18541] tomoyo_file_open+0x6b/0x90 [ 586.645374][T18541] security_file_open+0x84/0x1e0 [ 586.645388][T18541] do_dentry_open+0x57c/0x1c40 [ 586.645413][T18541] vfs_open+0x82/0x3f0 [ 586.645426][T18541] ? may_open+0x1f2/0x400 [ 586.645445][T18541] path_openat+0x1e88/0x2d80 [ 586.645475][T18541] ? __pfx_path_openat+0x10/0x10 [ 586.645496][T18541] ? __pfx___lock_acquire+0x10/0x10 [ 586.645510][T18541] ? lock_acquire.part.0+0x11b/0x380 [ 586.645523][T18541] ? find_held_lock+0x2d/0x110 [ 586.645536][T18541] do_filp_open+0x20c/0x470 [ 586.645550][T18541] ? __pfx_do_filp_open+0x10/0x10 [ 586.645564][T18541] ? find_held_lock+0x2d/0x110 [ 586.645583][T18541] ? alloc_fd+0x41f/0x760 [ 586.645600][T18541] do_sys_openat2+0x17a/0x1e0 [ 586.645611][T18541] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.645623][T18541] ? __fget_files+0x206/0x3a0 [ 586.645639][T18541] __ia32_compat_sys_openat+0x16e/0x210 [ 586.645651][T18541] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 586.645663][T18541] ? ksys_write+0x1ba/0x250 [ 586.645680][T18541] __do_fast_syscall_32+0x73/0x120 [ 586.645697][T18541] do_fast_syscall_32+0x32/0x80 [ 586.645711][T18541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 586.645728][T18541] RIP: 0023:0xf7f66579 [ 586.645737][T18541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.645746][T18541] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 586.645756][T18541] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 586.645762][T18541] RDX: 00000000001e4011 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.645768][T18541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.645774][T18541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.645780][T18541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.645792][T18541] [ 586.645802][T18541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.784683][T15068] usb 7-1: USB disconnect, device number 14 [ 586.899078][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 586.914920][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 587.236356][T18575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 587.668768][T18584] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 587.761719][T18584] /dev/sr0: Can't open blockdev [ 587.861562][T18585] /dev/sr0: Can't open blockdev [ 588.397082][T18596] netlink: 'syz.0.3355': attribute type 10 has an invalid length. [ 588.421415][T18596] bond0: (slave netdevsim0): Releasing backup interface [ 588.428311][T18596] team0: Port device netdevsim0 added [ 588.439253][T18596] netlink: 'syz.0.3355': attribute type 10 has an invalid length. [ 588.654543][T18596] team0: Port device netdevsim0 removed [ 588.661194][T18596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 589.100552][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 589.848163][T18628] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 589.855897][T18628] bond0: (slave netdevsim0): Releasing backup interface [ 589.862976][T18628] team0: Port device netdevsim0 added [ 589.866272][T18620] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 589.872384][T18628] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 589.885970][T18620] bond0: (slave netdevsim0): Releasing backup interface [ 589.904339][T18620] team0: Port device netdevsim0 added [ 589.967073][T18628] team0: Port device netdevsim0 removed [ 589.979117][T18628] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 590.105227][T18627] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 590.182126][T18620] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 590.196163][T18620] team0: Port device netdevsim0 removed [ 590.199698][T18620] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 590.271676][T18627] /dev/sr0: Can't open blockdev [ 590.381671][T18632] /dev/sr0: Can't open blockdev [ 590.465325][T18641] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3365'. [ 590.468768][T18636] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3365'. [ 590.704297][T18646] netlink: 'syz.1.3366': attribute type 10 has an invalid length. [ 590.751547][T18644] netlink: 'syz.2.3367': attribute type 10 has an invalid length. [ 590.786188][T18646] bond0: (slave netdevsim0): Releasing backup interface [ 590.806615][T18646] team0: Port device netdevsim0 added [ 590.826043][T18647] team0: Port device netdevsim0 removed [ 590.830571][T18647] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 590.847017][T18644] bond0: (slave netdevsim0): Releasing backup interface [ 590.850273][T18644] team0: Port device netdevsim0 added [ 590.856848][T18648] team0: Port device netdevsim0 removed [ 590.859617][T18648] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 592.374649][T18684] validate_nla: 2 callbacks suppressed [ 592.374660][T18684] netlink: 'syz.4.3379': attribute type 33 has an invalid length. [ 592.378364][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 592.386014][T18686] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 592.447487][T18689] netlink: 'syz.1.3377': attribute type 10 has an invalid length. [ 592.453258][T18689] bond0: (slave netdevsim0): Releasing backup interface [ 592.460953][T18689] team0: Port device netdevsim0 added [ 592.473487][T18689] netlink: 'syz.1.3377': attribute type 10 has an invalid length. [ 592.480854][T18689] team0: Port device netdevsim0 removed [ 592.487049][T18689] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 592.712239][T18686] /dev/sr0: Can't open blockdev [ 592.831634][T18691] /dev/sr0: Can't open blockdev [ 593.296299][T18714] netlink: 'syz.2.3388': attribute type 33 has an invalid length. [ 593.298996][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 593.566847][T18720] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3390'. [ 593.570331][T18720] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3390'. [ 593.807144][T18724] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 593.902547][T18724] /dev/sr0: Can't open blockdev [ 594.001758][T18725] /dev/sr0: Can't open blockdev [ 594.121614][T18734] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 594.251775][T18734] /dev/sr0: Can't open blockdev [ 594.318300][T18742] netlink: 'syz.1.3397': attribute type 33 has an invalid length. [ 594.324896][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 594.361461][T18735] /dev/sr0: Can't open blockdev [ 594.844132][T18757] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 594.890247][T18759] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 594.965838][T18757] bond0: (slave netdevsim0): Releasing backup interface [ 595.106375][T18757] team0: Port device netdevsim0 added [ 595.145398][T18759] team0: Port device netdevsim0 removed [ 595.149387][T18759] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 596.196697][T18774] netlink: 'syz.1.3404': attribute type 10 has an invalid length. [ 596.203276][T18774] bond0: (slave netdevsim0): Releasing backup interface [ 596.208791][T18774] team0: Port device netdevsim0 added [ 596.219445][T18774] netlink: 'syz.1.3404': attribute type 10 has an invalid length. [ 596.227521][T18774] team0: Port device netdevsim0 removed [ 596.236729][T18774] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 596.721200][T18783] veth3: entered promiscuous mode [ 596.849946][T18785] netlink: 'syz.1.3408': attribute type 33 has an invalid length. [ 596.855750][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 597.381654][T18800] bond0: (slave netdevsim0): Releasing backup interface [ 597.389405][T18800] team0: Port device netdevsim0 added [ 597.393100][T18806] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 597.393433][T18802] team0: Port device netdevsim0 removed [ 597.399608][T18802] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 597.408067][T18801] bond0: (slave netdevsim0): Releasing backup interface [ 597.414356][T18801] team0: Port device netdevsim0 added [ 597.419861][T18804] team0: Port device netdevsim0 removed [ 597.423456][T18804] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 597.542285][T18806] /dev/sr0: Can't open blockdev [ 597.631958][T18798] /dev/sr0: Can't open blockdev [ 598.103281][T18817] validate_nla: 4 callbacks suppressed [ 598.103342][T18817] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 598.130299][T18817] bond0: (slave netdevsim0): Releasing backup interface [ 598.139108][T18817] team0: Port device netdevsim0 added [ 598.147168][T18817] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 598.182209][T18817] team0: Port device netdevsim0 removed [ 598.191000][T18817] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 598.871073][T18823] netlink: 'syz.4.3419': attribute type 33 has an invalid length. [ 598.873919][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 599.074781][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'. [ 599.099047][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'. [ 599.112904][T18833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3422'. [ 599.600192][T18850] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 599.607113][T18850] bond0: (slave netdevsim0): Releasing backup interface [ 599.614428][T18850] team0: Port device netdevsim0 added [ 599.621814][T18850] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 599.805300][T18852] netlink: 'syz.2.3428': attribute type 10 has an invalid length. [ 599.830279][T18854] netlink: 'syz.2.3428': attribute type 10 has an invalid length. [ 599.848869][T18850] team0: Port device netdevsim0 removed [ 599.855653][T18850] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 599.866784][T18852] bond0: (slave netdevsim0): Releasing backup interface [ 599.945091][T18852] team0: Port device netdevsim0 added [ 599.974414][T18854] team0: Port device netdevsim0 removed [ 599.977137][T18854] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 600.071253][T18862] netlink: 'syz.4.3430': attribute type 33 has an invalid length. [ 600.073554][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3430'. [ 600.145413][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 600.170822][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 600.174211][T18868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3431'. [ 600.537330][T18890] netlink: 'syz.4.3432': attribute type 10 has an invalid length. [ 600.600895][T18889] netlink: 'syz.0.3433': attribute type 10 has an invalid length. [ 600.605083][T18890] bond0: (slave netdevsim0): Releasing backup interface [ 600.608046][T18890] team0: Port device netdevsim0 added [ 600.617021][T18889] bond0: (slave netdevsim0): Releasing backup interface [ 600.623613][T18889] team0: Port device netdevsim0 added [ 600.638403][T18886] team0: Port device netdevsim0 removed [ 600.645971][T18886] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 600.666903][T18889] team0: Port device netdevsim0 removed [ 600.673493][T18889] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 600.854894][T18904] bond0: (slave netdevsim0): Releasing backup interface [ 600.865460][T18904] team0: Port device netdevsim0 added [ 600.886818][T18904] team0: Port device netdevsim0 removed [ 600.895023][T18904] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 601.319754][T18921] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 601.411408][T18921] /dev/sr0: Can't open blockdev [ 601.515693][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3439'. [ 601.541959][T18922] /dev/sr0: Can't open blockdev [ 601.760346][T18929] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 601.884199][T18929] /dev/sr0: Can't open blockdev [ 602.101893][T18933] /dev/sr0: Can't open blockdev [ 602.869472][T18947] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 603.431615][T18947] /dev/sr0: Can't open blockdev [ 603.529059][T18957] validate_nla: 4 callbacks suppressed [ 603.529240][T18957] netlink: 'syz.2.3444': attribute type 10 has an invalid length. [ 603.565543][T18957] bond0: (slave netdevsim0): Releasing backup interface [ 603.578815][T18957] team0: Port device netdevsim0 added [ 603.640601][T18957] netlink: 'syz.2.3444': attribute type 10 has an invalid length. [ 603.702134][T18957] team0: Port device netdevsim0 removed [ 603.710714][T18957] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 603.801858][T18949] /dev/sr0: Can't open blockdev [ 604.439096][T18976] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 604.597539][T18979] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 604.599945][T18976] /dev/sr0: Can't open blockdev [ 604.719729][T18977] /dev/sr0: Can't open blockdev [ 604.833114][T18979] /dev/sr0: Can't open blockdev [ 604.931487][T18980] /dev/sr0: Can't open blockdev [ 605.229711][T18998] syz.4.3459 (18998) used obsolete PPPIOCDETACH ioctl [ 605.388610][T19015] sit0: entered promiscuous mode [ 605.390059][T19015] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 605.392863][T19015] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3465'. [ 605.397371][T19015] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3465'. [ 605.400239][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 605.400962][T19015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3465'. [ 605.407743][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 605.791195][T19027] netlink: 'syz.2.3467': attribute type 10 has an invalid length. [ 605.794973][T19027] bond0: (slave netdevsim0): Releasing backup interface [ 605.797904][T19027] team0: Port device netdevsim0 added [ 605.805729][T19027] netlink: 'syz.2.3467': attribute type 10 has an invalid length. [ 605.809898][T19027] team0: Port device netdevsim0 removed [ 605.812561][T19027] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 606.004955][T19055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3482'. [ 606.218596][T19073] bond0: (slave bond_slave_0): Releasing backup interface [ 606.222096][T19073] bond0: (slave bond_slave_1): Releasing backup interface [ 606.226182][T19073] team0: Port device team_slave_0 removed [ 606.229037][T19073] team0: Port device team_slave_1 removed [ 606.230809][T19073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.233261][T19073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.236058][T19073] bond0: (slave netdevsim0): Releasing backup interface [ 606.240414][T19073] bond1: (slave gretap1): Releasing active interface [ 606.553249][T19094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3495'. [ 606.556981][T19089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3495'. [ 606.578343][T19095] netlink: 'syz.2.3491': attribute type 10 has an invalid length. [ 606.591568][T19095] bond0: (slave netdevsim0): Releasing backup interface [ 606.598103][T19095] team0: Port device netdevsim0 added [ 606.607743][T19095] netlink: 'syz.2.3491': attribute type 10 has an invalid length. [ 606.616574][T19095] team0: Port device netdevsim0 removed [ 606.622620][T19095] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 606.704146][ T40] audit: type=1326 audit(1742718593.091:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.1.3502" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2f579 code=0x0 [ 606.848660][T19120] netlink: 'syz.0.3509': attribute type 2 has an invalid length. [ 606.851935][T19120] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 606.860256][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 606.892649][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3510'. [ 607.272867][T19128] batadv0: entered promiscuous mode [ 607.275901][T19128] vlan3: entered promiscuous mode [ 607.279619][T19128] batadv0: left promiscuous mode [ 607.697271][T19145] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 607.717048][T19145] bond0: (slave netdevsim0): Releasing backup interface [ 607.723264][T19145] team0: Port device netdevsim0 added [ 607.739724][T19145] team0: Port device netdevsim0 removed [ 607.746742][T19145] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 609.668229][T19223] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.081612][T19310] syzkaller1: entered promiscuous mode [ 611.083164][T19310] syzkaller1: entered allmulticast mode [ 611.257123][T19321] __nla_validate_parse: 6 callbacks suppressed [ 611.257134][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 611.368053][T19322] pimreg: entered allmulticast mode [ 611.370419][T19322] 8021q: VLANs not supported on pimreg [ 611.628773][T19347] team0: Device gtp0 is of different type [ 611.718435][T19356] validate_nla: 3 callbacks suppressed [ 611.718446][T19356] netlink: 'syz.1.3616': attribute type 39 has an invalid length. [ 611.754091][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 611.793232][T19364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3619'. [ 611.797954][T19364] erspan0: entered promiscuous mode [ 611.802636][T19364] erspan0: left promiscuous mode [ 612.168886][T19422] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3648'. [ 612.195565][T19422] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 612.203582][T14551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 612.207271][T14551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 612.210016][T14551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 612.212532][T14551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 612.214634][T14551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 612.216575][T14551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 612.228105][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 612.230942][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 612.237143][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 612.239811][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 612.242397][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 612.244358][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 612.315858][T19438] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3655'. [ 612.379521][T19423] chnl_net:caif_netlink_parms(): no params data found [ 612.391221][T19445] netlink: 'syz.0.3656': attribute type 2 has an invalid length. [ 612.393286][T19445] netlink: 'syz.0.3656': attribute type 9 has an invalid length. [ 612.395270][T19445] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3656'. [ 612.465941][T19423] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.468343][T19423] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.470334][T19423] bridge_slave_0: entered allmulticast mode [ 612.473004][T19423] bridge_slave_0: entered promiscuous mode [ 612.475853][T19423] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.477838][T19423] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.479739][T19423] bridge_slave_1: entered allmulticast mode [ 612.481866][T19423] bridge_slave_1: entered promiscuous mode [ 612.527704][T19423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.533668][T19423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.564495][T19423] team0: Port device team_slave_0 added [ 612.569513][T19423] team0: Port device team_slave_1 added [ 612.597011][T19423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.598957][T19423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.605580][T19423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.611266][T19423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.613076][T19423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.619614][T19423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.655533][T19423] hsr_slave_0: entered promiscuous mode [ 612.658669][T19423] hsr_slave_1: entered promiscuous mode [ 612.825428][T19495] sctp: [Deprecated]: syz.1.3674 (pid 19495) Use of int in max_burst socket option. [ 612.825428][T19495] Use struct sctp_assoc_value instead [ 613.024518][T12200] bond0 (unregistering): Released all slaves [ 613.134822][T12200] bond1 (unregistering): Released all slaves [ 613.247489][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 613.251266][T12200] tipc: Left network mode [ 613.333510][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3684'. [ 613.356784][T19507] dccp_invalid_packet: P.Data Offset(0) too small [ 613.515466][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'. [ 613.764685][T12200] hsr_slave_0: left promiscuous mode [ 613.767197][T12200] hsr_slave_1: left promiscuous mode [ 614.304582][ T67] Bluetooth: hci0: command tx timeout [ 615.316028][T19423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.319699][T19423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.323975][T19423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.328133][T19423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 615.385492][T19423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.399378][T19423] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.404516][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.406418][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.418442][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.420429][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.496486][T19423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.613347][T19423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.773092][T19423] veth0_vlan: entered promiscuous mode [ 615.780137][T19423] veth1_vlan: entered promiscuous mode [ 615.804373][T19423] veth0_macvtap: entered promiscuous mode [ 615.808209][T19423] veth1_macvtap: entered promiscuous mode [ 615.814223][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.816884][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.819436][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.822482][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.825030][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.827723][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.838499][T19423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.842009][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.844794][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.847436][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.850205][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.853384][T19423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.856113][T19423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.860696][T19423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.867076][T19423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.870024][T19423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.873281][T19423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.875567][T19423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.947557][T12204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.954230][T12204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.977285][T12206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.979484][T12206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.044228][T19641] veth0: entered promiscuous mode [ 616.046355][T19641] vlan2: entered promiscuous mode [ 616.048884][T19641] veth0: left promiscuous mode [ 616.105037][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 616.360086][T19685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3745'. [ 616.373332][T19689] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 616.376667][ T67] Bluetooth: hci0: command tx timeout [ 616.445182][T19697] netlink: 'syz.0.3750': attribute type 1 has an invalid length. [ 616.447255][T19697] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3750'. [ 616.490409][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 616.622558][T19723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'. [ 616.672605][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3768'. [ 616.762452][T19748] IPv6: Can't replace route, no match found [ 616.820592][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 616.995011][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 616.997552][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 617.035912][ T65] hid-generic 0005:07C0:06E6.0007: item fetching failed at offset 0/1 [ 617.038691][ T65] hid-generic 0005:07C0:06E6.0007: probe with driver hid-generic failed with error -22 [ 617.039452][T19793] netlink: 'syz.4.3794': attribute type 10 has an invalid length. [ 617.055140][T19793] veth0_vlan: left promiscuous mode [ 617.064417][T19793] veth0_vlan: entered promiscuous mode [ 617.070881][T19793] team0: Device veth0_vlan failed to register rx_handler [ 617.283938][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 617.536612][T19837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 617.560025][T19839] openvswitch: netlink: Message has 1 unknown bytes. [ 617.561951][T19839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.669086][T19855] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3824'. [ 617.674936][T19855] dccp_invalid_packet: P.Data Offset(10) too large [ 618.452191][ T67] Bluetooth: hci0: command tx timeout [ 619.521716][T20013] dummy0: left allmulticast mode [ 619.523398][T20013] bridge0: port 3(dummy0) entered disabled state [ 619.532085][T20013] bridge_slave_0: left allmulticast mode [ 619.534893][T20013] bridge_slave_0: left promiscuous mode [ 619.537425][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.542120][T20013] bridge_slave_1: left allmulticast mode [ 619.544484][T20013] bridge_slave_1: left promiscuous mode [ 619.546861][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.559203][T20013] bond0: (slave bond_slave_0): Releasing backup interface [ 619.565152][T20013] bond0: (slave bond_slave_1): Releasing backup interface [ 619.585696][T20013] team0: Port device team_slave_0 removed [ 619.602070][T20013] team0: Failed to send options change via netlink (err -105) [ 619.604530][T20013] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 619.607198][T20013] team0: Port device team_slave_1 removed [ 619.609169][T20013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.611302][T20013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.614458][T20013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.616531][T20013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.622346][T20013] bond0: (slave netdevsim0): Releasing backup interface [ 619.626705][T20013] batman_adv: batadv0: Removing interface: macvlan2 [ 619.992391][T20055] bond0: entered promiscuous mode [ 619.994242][T20055] bond0: left promiscuous mode [ 620.327472][T20086] ieee802154 phy1 wpan1: encryption failed: -90 [ 620.531667][ T67] Bluetooth: hci0: command tx timeout [ 620.885727][T20117] Bluetooth: MGMT ver 1.23 [ 620.915295][T20120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.927363][T20120] dccp_close: ABORT with 36 bytes unread [ 621.561433][T20194] __nla_validate_parse: 13 callbacks suppressed [ 621.561445][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 621.565837][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 621.657921][T20196] netlink: 'syz.4.3980': attribute type 303 has an invalid length. [ 621.777513][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3990'. [ 621.784076][T20215] vlan2: entered allmulticast mode [ 621.785526][T20215] batadv0: entered allmulticast mode [ 621.790759][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'. [ 621.832875][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'. [ 621.870348][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3992'. [ 622.551966][T20306] netlink: 'syz.2.4034': attribute type 10 has an invalid length. [ 622.558437][T20306] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.563085][T20306] bond0: (slave team0): Enslaving as an active interface with an up link [ 622.569892][T20306] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:989f:73ff:fe66:4467 error=-28 [ 622.613059][T20306] infiniband syz1: set active [ 622.615672][T20306] infiniband syz1: added team_slave_0 [ 622.652891][T20306] RDS/IB: syz1: added [ 622.660911][T20306] smc: adding ib device syz1 with port count 1 [ 622.663078][T20306] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 622.735062][T20325] syzkaller1: entered promiscuous mode [ 622.736681][T20325] syzkaller1: entered allmulticast mode [ 622.980435][T20347] syzkaller1: entered promiscuous mode [ 622.982173][T20347] syzkaller1: entered allmulticast mode [ 623.130043][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 623.249952][T20385] sit0: entered promiscuous mode [ 623.254837][T20385] netlink: 'syz.2.4068': attribute type 1 has an invalid length. [ 623.257459][T20385] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4068'. [ 623.273780][T20385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4068'. [ 623.279016][T20385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4068'. [ 623.732172][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.851165][T20417] sit0: entered promiscuous mode [ 623.854177][T20417] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 624.036582][T20445] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.187031][T20467] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.380633][T20493] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.416659][T20496] dccp_close: ABORT with 36 bytes unread [ 624.483727][T20509] syzkaller1: entered promiscuous mode [ 624.485943][T20509] syzkaller1: entered allmulticast mode [ 624.536652][T20514] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 624.696115][T20515] dccp_invalid_packet: P.Data Offset(0) too small [ 624.796591][T20535] dccp_close: ABORT with 36 bytes unread [ 625.991996][T20599] dccp_invalid_packet: P.Data Offset(0) too small [ 626.043916][T20612] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.358271][T20638] netlink: 'syz.0.4183': attribute type 10 has an invalid length. [ 626.380139][T20638] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.384790][T20638] bond0: (slave team0): Enslaving as an active interface with an up link [ 626.393446][T20638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 626.641862][T20640] dccp_invalid_packet: P.Data Offset(0) too small [ 626.843896][T20651] netlink: 'syz.2.4188': attribute type 10 has an invalid length. [ 626.900736][T20656] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.979124][T20663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.985386][T20665] syz1: rxe_newlink: already configured on team_slave_0 [ 627.018473][T20670] syzkaller1: entered promiscuous mode [ 627.020519][T20670] syzkaller1: entered allmulticast mode [ 627.120277][T20678] __nla_validate_parse: 15 callbacks suppressed [ 627.120288][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 627.235316][T20681] netlink: 'syz.4.4201': attribute type 10 has an invalid length. [ 627.246455][T20681] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.249116][T20681] bond0: (slave team0): Enslaving as an active interface with an up link [ 627.350220][T20690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.386977][T20697] syzkaller1: entered promiscuous mode [ 627.388543][T20697] syzkaller1: entered allmulticast mode [ 627.870232][T20707] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.901293][T20709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 627.904084][T20709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4212'. [ 628.019102][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4217'. [ 628.021800][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 628.024971][T20719] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 628.027230][T20719] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4217'. [ 628.065022][ T67] block nbd3: Receive control failed (result -107) [ 628.069879][ T67] [ 628.070525][ T67] ====================================================== [ 628.072335][ T67] WARNING: possible circular locking dependency detected [ 628.074384][ T67] 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 628.077591][ T67] ------------------------------------------------------ [ 628.080496][ T67] kworker/u33:0/67 is trying to acquire lock: [ 628.082302][ T67] ffff88801fad52d8 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_shutdown+0x65/0x7f0 [ 628.084580][ T67] [ 628.084580][ T67] but task is already holding lock: [ 628.086588][ T67] ffff88801af8fc70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x67d/0xaa0 [ 628.089445][ T67] [ 628.089445][ T67] which lock already depends on the new lock. [ 628.089445][ T67] [ 628.092101][ T67] [ 628.092101][ T67] the existing dependency chain (in reverse order) is: [ 628.094367][ T67] [ 628.094367][ T67] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 628.096507][ T67] __mutex_lock+0x19b/0xb10 [ 628.098148][ T67] sock_shutdown+0x16f/0x280 [ 628.099881][ T67] nbd_config_put+0x1e6/0x750 [ 628.101304][ T67] nbd_release+0xb7/0x190 [ 628.102574][ T67] blkdev_put_whole+0xad/0xf0 [ 628.103952][ T67] bdev_release+0x47e/0x6d0 [ 628.105239][ T67] blkdev_release+0x15/0x20 [ 628.106543][ T67] __fput+0x3ff/0xb70 [ 628.107773][ T67] task_work_run+0x14e/0x250 [ 628.109114][ T67] syscall_exit_to_user_mode+0x27b/0x2a0 [ 628.110872][ T67] __do_fast_syscall_32+0x80/0x120 [ 628.112784][ T67] do_fast_syscall_32+0x32/0x80 [ 628.114530][ T67] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.116636][ T67] [ 628.116636][ T67] -> #5 (&nbd->config_lock){+.+.}-{4:4}: [ 628.118819][ T67] __mutex_lock+0x19b/0xb10 [ 628.120267][ T67] refcount_dec_and_mutex_lock+0x51/0xc0 [ 628.121988][ T67] nbd_config_put+0x31/0x750 [ 628.123434][ T67] nbd_release+0xb7/0x190 [ 628.124839][ T67] blkdev_put_whole+0xad/0xf0 [ 628.126303][ T67] bdev_release+0x47e/0x6d0 [ 628.127727][ T67] blkdev_release+0x15/0x20 [ 628.129147][ T67] __fput+0x3ff/0xb70 [ 628.130418][ T67] __fput_sync+0xa1/0xc0 [ 628.131861][ T67] __x64_sys_close+0x86/0x100 [ 628.133308][ T67] do_syscall_64+0xcd/0x250 [ 628.134721][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.136532][ T67] [ 628.136532][ T67] -> #4 (&disk->open_mutex){+.+.}-{4:4}: [ 628.138746][ T67] __mutex_lock+0x19b/0xb10 [ 628.140157][ T67] bdev_open+0x41a/0xe20 [ 628.141496][ T67] bdev_file_open_by_dev+0x17d/0x210 [ 628.143126][ T67] disk_scan_partitions+0x1ed/0x320 [ 628.144756][ T67] add_disk_fwnode+0x1006/0x1320 [ 628.146284][ T67] pmem_attach_disk+0x9a1/0x13e0 [ 628.147837][ T67] nd_pmem_probe+0x1a9/0x1f0 [ 628.149273][ T67] nvdimm_bus_probe+0x169/0x5d0 [ 628.150773][ T67] really_probe+0x23e/0xa90 [ 628.152177][ T67] __driver_probe_device+0x1de/0x440 [ 628.153819][ T67] driver_probe_device+0x4c/0x1b0 [ 628.155361][ T67] __driver_attach+0x283/0x580 [ 628.156847][ T67] bus_for_each_dev+0x13c/0x1d0 [ 628.158347][ T67] bus_add_driver+0x2e9/0x690 [ 628.159859][ T67] driver_register+0x15c/0x4b0 [ 628.161336][ T67] __nd_driver_register+0x103/0x1a0 [ 628.162931][ T67] do_one_initcall+0x128/0x700 [ 628.164424][ T67] kernel_init_freeable+0x5c7/0x900 [ 628.166009][ T67] kernel_init+0x1c/0x2b0 [ 628.167409][ T67] ret_from_fork+0x45/0x80 [ 628.168814][ T67] ret_from_fork_asm+0x1a/0x30 [ 628.170333][ T67] [ 628.170333][ T67] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 628.172590][ T67] __mutex_lock+0x19b/0xb10 [ 628.174000][ T67] uevent_show+0x188/0x3b0 [ 628.175406][ T67] dev_attr_show+0x53/0xe0 [ 628.176807][ T67] sysfs_kf_seq_show+0x23e/0x410 [ 628.178413][ T67] seq_read_iter+0x4f4/0x12b0 [ 628.179885][ T67] kernfs_fop_read_iter+0x414/0x580 [ 628.181514][ T67] vfs_read+0x886/0xbf0 [ 628.182841][ T67] ksys_read+0x12b/0x250 [ 628.184193][ T67] do_syscall_64+0xcd/0x250 [ 628.185596][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.187373][ T67] [ 628.187373][ T67] -> #2 (kn->active#5){++++}-{0:0}: [ 628.189389][ T67] kernfs_drain+0x48f/0x590 [ 628.190808][ T67] __kernfs_remove+0x281/0x670 [ 628.192276][ T67] kernfs_remove_by_name_ns+0xb2/0x130 [ 628.193936][ T67] device_del+0x381/0x9f0 [ 628.195333][ T67] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 628.197269][ T67] unregister_netdevice_queue+0x307/0x3f0 [ 628.199026][ T67] unregister_netdev+0x1f/0x60 [ 628.200544][ T67] slcan_close+0x76/0x1a0 [ 628.201893][ T67] tty_ldisc_close+0x111/0x1a0 [ 628.203381][ T67] tty_ldisc_kill+0x8e/0x150 [ 628.204823][ T67] tty_ldisc_hangup+0x311/0x6a0 [ 628.206327][ T67] __tty_hangup.part.0+0x3f8/0x890 [ 628.208333][ T67] tty_ioctl+0xf42/0x15d0 [ 628.210004][ T67] tty_compat_ioctl+0xb9/0x4d0 [ 628.212021][ T67] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 628.214026][ T67] __do_fast_syscall_32+0x73/0x120 [ 628.215605][ T67] do_fast_syscall_32+0x32/0x80 [ 628.217142][ T67] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.219066][ T67] [ 628.219066][ T67] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 628.221036][ T67] __mutex_lock+0x19b/0xb10 [ 628.222432][ T67] smc_vlan_by_tcpsk+0x251/0x620 [ 628.224037][ T67] __smc_connect+0x44d/0x4890 [ 628.225471][ T67] smc_connect+0x2fc/0x760 [ 628.226870][ T67] __sys_connect_file+0x13e/0x1a0 [ 628.228342][ T67] __sys_connect+0x14f/0x170 [ 628.229798][ T67] __ia32_sys_connect+0x71/0xb0 [ 628.231275][ T67] __do_fast_syscall_32+0x73/0x120 [ 628.232825][ T67] do_fast_syscall_32+0x32/0x80 [ 628.234319][ T67] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.236163][ T67] [ 628.236163][ T67] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 628.238233][ T67] __lock_acquire+0x249e/0x3c40 [ 628.239751][ T67] lock_acquire.part.0+0x11b/0x380 [ 628.241303][ T67] lock_sock_nested+0x3a/0xf0 [ 628.242759][ T67] smc_shutdown+0x65/0x7f0 [ 628.244150][ T67] nbd_mark_nsock_dead+0xae/0x5d0 [ 628.245672][ T67] recv_work+0x691/0xaa0 [ 628.247002][ T67] process_one_work+0x9c5/0x1ba0 [ 628.248499][ T67] worker_thread+0x6c8/0xf00 [ 628.249926][ T67] kthread+0x3af/0x750 [ 628.251230][ T67] ret_from_fork+0x45/0x80 [ 628.252597][ T67] ret_from_fork_asm+0x1a/0x30 [ 628.254063][ T67] [ 628.254063][ T67] other info that might help us debug this: [ 628.254063][ T67] [ 628.256812][ T67] Chain exists of: [ 628.256812][ T67] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 628.256812][ T67] [ 628.260369][ T67] Possible unsafe locking scenario: [ 628.260369][ T67] [ 628.262402][ T67] CPU0 CPU1 [ 628.263906][ T67] ---- ---- [ 628.265392][ T67] lock(&nsock->tx_lock); [ 628.266636][ T67] lock(&nbd->config_lock); [ 628.268575][ T67] lock(&nsock->tx_lock); [ 628.270475][ T67] lock(sk_lock-AF_SMC); [ 628.271692][ T67] [ 628.271692][ T67] *** DEADLOCK *** [ 628.271692][ T67] [ 628.273925][ T67] 3 locks held by kworker/u33:0/67: [ 628.275365][ T67] #0: ffff88802432d948 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 628.278264][ T67] #1: ffffc90000a37d18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 628.281294][ T67] #2: ffff88801af8fc70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x67d/0xaa0 [ 628.283846][ T67] [ 628.283846][ T67] stack backtrace: [ 628.285467][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 628.285480][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 628.285488][ T67] Workqueue: nbd3-recv recv_work [ 628.285500][ T67] Call Trace: [ 628.285508][ T67] [ 628.285514][ T67] dump_stack_lvl+0x116/0x1f0 [ 628.285529][ T67] print_circular_bug+0x490/0x760 [ 628.285544][ T67] check_noncircular+0x31a/0x400 [ 628.285557][ T67] ? __pfx_check_noncircular+0x10/0x10 [ 628.285570][ T67] ? mark_held_locks+0x9f/0xe0 [ 628.285583][ T67] ? lockdep_lock+0xc6/0x200 [ 628.285594][ T67] ? __pfx_lockdep_lock+0x10/0x10 [ 628.285604][ T67] ? __switch_to+0x749/0x1190 [ 628.285615][ T67] __lock_acquire+0x249e/0x3c40 [ 628.285630][ T67] ? __pfx___lock_acquire+0x10/0x10 [ 628.285643][ T67] ? __pfx___schedule+0x10/0x10 [ 628.285655][ T67] ? mark_lock+0xb5/0xc60 [ 628.285667][ T67] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 628.285679][ T67] ? find_held_lock+0x2d/0x110 [ 628.285690][ T67] lock_acquire.part.0+0x11b/0x380 [ 628.285704][ T67] ? smc_shutdown+0x65/0x7f0 [ 628.285714][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 628.285728][ T67] ? rcu_is_watching+0x12/0xc0 [ 628.285738][ T67] ? trace_lock_acquire+0x14e/0x1f0 [ 628.285749][ T67] ? smc_shutdown+0x65/0x7f0 [ 628.285758][ T67] ? lock_acquire+0x2f/0xb0 [ 628.285770][ T67] ? smc_shutdown+0x65/0x7f0 [ 628.285780][ T67] lock_sock_nested+0x3a/0xf0 [ 628.285796][ T67] ? smc_shutdown+0x65/0x7f0 [ 628.285805][ T67] smc_shutdown+0x65/0x7f0 [ 628.285814][ T67] nbd_mark_nsock_dead+0xae/0x5d0 [ 628.285825][ T67] recv_work+0x691/0xaa0 [ 628.285837][ T67] ? __pfx_recv_work+0x10/0x10 [ 628.285849][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 628.285863][ T67] ? trace_lock_acquire+0x14e/0x1f0 [ 628.285874][ T67] ? lock_acquire+0x2f/0xb0 [ 628.285887][ T67] ? process_one_work+0x921/0x1ba0 [ 628.285900][ T67] process_one_work+0x9c5/0x1ba0 [ 628.285914][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 628.285927][ T67] ? __pfx_process_one_work+0x10/0x10 [ 628.285942][ T67] ? assign_work+0x1a0/0x250 [ 628.285954][ T67] worker_thread+0x6c8/0xf00 [ 628.285968][ T67] ? __pfx_worker_thread+0x10/0x10 [ 628.285981][ T67] kthread+0x3af/0x750 [ 628.285992][ T67] ? __pfx_kthread+0x10/0x10 [ 628.286004][ T67] ? lock_acquire+0x2f/0xb0 [ 628.286017][ T67] ? __pfx_kthread+0x10/0x10 [ 628.286029][ T67] ret_from_fork+0x45/0x80 [ 628.286041][ T67] ? __pfx_kthread+0x10/0x10 [ 628.286052][ T67] ret_from_fork_asm+0x1a/0x30 [ 628.286066][ T67] [ 628.491377][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.604408][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.663480][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.721656][ T1148] bond0: (slave netdevsim0): Releasing backup interface [ 628.724402][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.826661][ T1148] bridge_slave_1: left promiscuous mode [ 628.828804][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.831637][ T1148] bridge_slave_0: left allmulticast mode [ 628.833213][ T1148] bridge_slave_0: left promiscuous mode [ 628.834836][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.161204][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.164351][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.167142][ T1148] bond0 (unregistering): Released all slaves [ 629.242685][ T1148] tipc: Left network mode [ 629.291171][ T1148] IPVS: stopping master sync thread 20514 ... [ 629.498915][ T1148] hsr_slave_0: left promiscuous mode [ 629.501802][ T1148] hsr_slave_1: left promiscuous mode [ 629.503707][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.505878][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.508251][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.510422][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.514247][ T1148] veth1_macvtap: left promiscuous mode [ 629.515901][ T1148] veth0_macvtap: left promiscuous mode [ 629.517523][ T1148] veth1_vlan: left promiscuous mode [ 629.519084][ T1148] veth0_vlan: left promiscuous mode [ 629.708475][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 629.759058][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 630.324119][ T1148] IPVS: stop unused estimator thread 0... [ 630.397491][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.444006][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.515255][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.581365][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.844972][ T1148] bond0 (unregistering): (slave team0): Releasing backup interface [ 630.848086][ T1148] bond0 (unregistering): Released all slaves [ 630.940508][ T1148] tipc: Left network mode [ 631.202150][ T1148] hsr_slave_0: left promiscuous mode [ 631.204410][ T1148] hsr_slave_1: left promiscuous mode [ 631.207362][ T1148] veth1_macvtap: left promiscuous mode [ 631.209349][ T1148] veth0_macvtap: left promiscuous mode [ 631.211494][ T1148] veth1_vlan: left promiscuous mode [ 631.213381][ T1148] veth0_vlan: left promiscuous mode [ 631.230598][ T1148] pimreg (unregistering): left allmulticast mode VM DIAGNOSIS: 08:30:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b544bc0 RCX=ffffffff81ade0da RDX=ffff8880253b8000 RSI=ffffffff81ade0b4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006e97928 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056a8979 R13=0000000000000001 R14=ffff88802b43ffc0 R15=ffff88802b544bc8 RIP=ffffffff81ade0b6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056c604c0 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000c0c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853eaad5 RDI=ffffffff9ab72ea0 RBP=ffffffff9ab72e60 RSP=ffffc90000a371c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9ab72e60 R15=0000000000000000 RIP=ffffffff853eaaff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002cf1eff8 CR3=000000006f914000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000012 RCX=000000000000000f RDX=0000000000000002 RSI=0000000000000000 RDI=ffffffff8b7d79e0 RBP=ffff88807ffd6540 RSP=ffffc90002e97758 R8 =0000000000000000 R9 =fffffbfff20c51c2 R10=ffffffff90628e17 R11=0000000000000000 R12=ffff888069ffa048 R13=0000000000000012 R14=ffff888069e9c000 R15=000000000000000f RIP=ffffffff8b557d10 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ff6e40 CR3=00000000497bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f748cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005e1c24 RBX=0000000000000003 RCX=ffffffff8b557469 RDX=ffffed10056e6f86 RSI=ffffffff8bd35960 RDI=ffffffff819082c9 RBP=ffffed1003ad0910 RSP=ffffc900004afe08 R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d684880 R14=ffffffff90628e10 R15=0000000000000000 RIP=ffffffff8b55884f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000040 CR3=000000006ae02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000