last executing test programs: 2m12.944578856s ago: executing program 3 (id=655): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x5, 0x6570, 0x6}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2b, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) close(r1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) fsmount(r8, 0x1, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000002c0)=""/26, 0x1a}, {0x0}, {&(0x7f00000003c0)=""/16, 0x10}], 0x4}, 0x14004) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0xc090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2m12.25021542s ago: executing program 3 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe07ff000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x22}, 0x48) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x5b, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a5", &(0x7f00000006c0)=""/254, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x4c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setpipe(r3, 0x407, 0x13) 2m11.194323682s ago: executing program 3 (id=667): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e20, 0x0, 0x4e20, 0x8000, 0xa, 0x20, 0x90, 0x88}, {0x4000000, 0xbbf9556, 0x7, 0x3a, 0x3, 0x9, 0xffffffffffffffff, 0x5}, {0x400, 0x800, 0x3, 0x100}, 0x7f, 0x6e6bb4, 0x0, 0x0, 0x3, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x2, 0x2, 0x9, 0xffffffff, 0x8, 0x4}}, 0xe4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fstatat64(0xffffff9c, 0x0, 0x0, 0x1000) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x110}}, 0x5) 2m10.283675407s ago: executing program 3 (id=675): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0xc00, 0x0, 0x3}, 0x1c) r1 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000200), 0x410200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x1e, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa2e, 0x0, 0x0, 0x0, 0x764fe38}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x91e, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2ae7d3969f9f77fa}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f0000000040)="8f2a0a6500000000", 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000040)={0x4, "168b3ff4c1f478d3b668f78ac8ad437aa552bb8000", 0x3}) listen(r6, 0x0) shutdown(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x50, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c100}, 0x80) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fba509", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @nop, @generic={0x5, 0xd, "e8d7875936e67b5c712ddb"}, @mss={0x2, 0x4, 0x3}]}}}}}}}}, 0x0) 2m10.225041037s ago: executing program 3 (id=676): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xb0, &(0x7f0000000440)=""/176, 0x41000, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8045}, 0x80) r2 = io_uring_setup(0x4415, &(0x7f0000000380)={0x0, 0x4ecd, 0x4, 0x0, 0x2da}) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000006500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000804}], 0x1, 0x1001) sendfile(r6, r8, 0x0, 0x10ffff) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000), &(0x7f0000000280)) 2m9.844311478s ago: executing program 3 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd8239f5c205c9ed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1, {[@generic={0x7, 0x4, "0405"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m9.804659708s ago: executing program 32 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd8239f5c205c9ed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1, {[@generic={0x7, 0x4, "0405"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1m24.758410768s ago: executing program 0 (id=939): syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="1018000007540500240012800b000105001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4040044) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80083, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = fsopen(&(0x7f0000000300)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) getdents(r2, 0x0, 0x58) 1m24.643924031s ago: executing program 0 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xb9, 0x8}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r5) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200000000000000000a00000006090740200000003c0001000000000004000000000000000214000400fe8000000000000000000000000000bb0c00028005000100"/87], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200bbbbbbbbbbbb00ac"], 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x63d10c7d17cda5d2}, 0x28) 1m23.324009463s ago: executing program 0 (id=947): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010012000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="dbd95d87c78ea58df3eb7029e91218d54e706e298b49c2bb745306538c9af13b69b446061bc9451e83a0ee4188c8c824da7ee21a785aee57a33e47a2e25e283d0934b30f30311c8afa9f87c0bef5da3f4de051d5e1221bb55d5aa33ea0cbda0cd7e667f4026908ac0e51d2b351271927e5907bea0fef508fcd62143716b9"], 0x44}}, 0x4000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r4, 0xffffc000) ptrace(0x10, r5) r6 = io_uring_setup(0x80006f6, &(0x7f00000005c0)={0x0, 0x2, 0x802}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000005500)={0x3, 0x0, 0x0, &(0x7f0000005480)=[{0x0}, {0x0}, {&(0x7f0000005380)=""/255, 0xff}], &(0x7f00000054c0)=[0x0, 0x0, 0x5]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000007cc0)={0x2, 0x0, &(0x7f0000007c40)=[{0x0}], 0x0, 0x1}, 0x20) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ptrace$poke(0x4, r5, &(0x7f0000000380), 0x10000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x10000, &(0x7f0000000080)='norecovery') r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000500)=ANY=[@ANYRESHEX=r8, @ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r8, 0x81, 0x8, &(0x7f0000000080)="5d012c615bc21b06") read$char_usb(r9, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) r10 = openat$dma_heap(0xffffff9c, &(0x7f0000000140), 0x2040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000240)={0xfffffffffffff4ae, r3, 0x80000}) 1m22.622758372s ago: executing program 0 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x20) symlinkat(&(0x7f0000000440)='./file1\x00', r0, &(0x7f0000000500)='./file1\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="e00000001000010800"/20, @ANYRES32=r5, @ANYBLOB="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"], 0xe0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0xb0, 0x28, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x10}, {0xf, 0xfff3}, {0x3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x10001, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x3f, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xfffffffe, 0xfffffff8}}, @TCA_HFSC_USC={0x10, 0x3, {0x410a, 0x1, 0x4}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000540)={0xc1, 0x0, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x2, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xe6e60000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x47, 0x10}, {0xcccff001, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3a}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x100000, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x0, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m22.404030703s ago: executing program 0 (id=955): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1, 0x0, 0xc805}}], 0x1, 0x0) 1m22.122421735s ago: executing program 0 (id=956): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @multicast}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x6e9c43) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8d0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x5, 0x2}) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x82) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000900)={0x200, 0x5, &(0x7f0000000440)=[r4, 0x0, r3, r5, r6], &(0x7f0000000480)=[0x3, 0x7, 0x8, 0x1, 0xec, 0x5], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0xfffffffffffffff7, 0xfffffffffffff5ad, 0x9], 0x0, 0x7}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r8 = dup(r7) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresgid(0x0, 0xee00, 0x0) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000080), &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000380)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x2c) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.974366658s ago: executing program 33 (id=956): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @multicast}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x6e9c43) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8d0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x5, 0x2}) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x82) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000900)={0x200, 0x5, &(0x7f0000000440)=[r4, 0x0, r3, r5, r6], &(0x7f0000000480)=[0x3, 0x7, 0x8, 0x1, 0xec, 0x5], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0xfffffffffffffff7, 0xfffffffffffff5ad, 0x9], 0x0, 0x7}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r8 = dup(r7) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresgid(0x0, 0xee00, 0x0) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000080), &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000380)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x2c) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) 1.963909832s ago: executing program 4 (id=1453): r0 = epoll_create1(0x80000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 1.940352304s ago: executing program 4 (id=1456): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) syz_io_uring_setup(0x48ba, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x422e00, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000002240)={0x2, 0xdd, 0x2, {0x1, @pix={0xffff, 0x3b7, 0x32314d4e, 0x6, 0x1000, 0x0, 0x7, 0x5, 0x1, 0x0, 0x2, 0x7}}, 0xc8a}) ioctl$COMEDI_UNLOCK(r4, 0x6406) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r6, 0x1) recvfrom(r6, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xd3}], 0x2, 0x40f3dd953f0150fb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.253213587s ago: executing program 5 (id=1463): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCFLSH(r0, 0x8925, 0xffffffffffff7ffe) 1.153635013s ago: executing program 5 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000700007910280000000000c3020000000000009500000c0000000002ea3bd6b6dd680837c7ec21354889dd77ea007b18053803331f37503bdad7cabc7b3dd33dab322cc44e6ae9c5ae5b825c17"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.094049376s ago: executing program 5 (id=1466): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ppoll(&(0x7f00000000c0)=[{r0, 0x2}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 1.033229313s ago: executing program 1 (id=1467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) 1.033141576s ago: executing program 5 (id=1468): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x80100, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pread64(r0, &(0x7f00000009c0)=""/179, 0xb3, 0x7fffffffffffffff) 1.032976866s ago: executing program 4 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000001c40)=[{0x0}, {0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000b80)="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", 0xefb}, {&(0x7f0000001b80)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3], 0x10b8}, 0xff4c) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r5, 0x2f2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008850) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 763.946111ms ago: executing program 2 (id=1472): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002a00)=""/4083, 0xff3}], 0x1, 0x80, 0x1005) 763.787561ms ago: executing program 2 (id=1473): r0 = socket(0x1, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000003700)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 683.576334ms ago: executing program 2 (id=1474): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xffffffff, 0x204}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 683.418855ms ago: executing program 2 (id=1475): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0xfffffffffffffffe) 683.275992ms ago: executing program 2 (id=1476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r3}, &(0x7f0000000180)=0x8) 603.58047ms ago: executing program 2 (id=1477): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) 143.857663ms ago: executing program 1 (id=1478): socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x27079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x2, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 143.702144ms ago: executing program 5 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1}}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) 83.987403ms ago: executing program 1 (id=1480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0xc0) r1 = syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff9824}, 0x3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0xfffffffd, {"7d0300000000001c1000ff00"}, 0xfffffffffffffffd, 0x0, 0x7f}}}, 0x118) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x0, 0x1000, 0x3}) setregid(0xffffffffffffffff, 0x0) gettid() 83.775053ms ago: executing program 5 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073189800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="93d90400", 0x4}], 0x1) 83.661286ms ago: executing program 4 (id=1482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[], 0x0) 83.56405ms ago: executing program 1 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 2.631411ms ago: executing program 4 (id=1484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x51) 2.432104ms ago: executing program 1 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x1a, 0x7, 0x1, {{0xd, 'pids.current\x00'}, 0x1ff}}, 0x1a) mremap(&(0x7f0000144000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.376614ms ago: executing program 4 (id=1486): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7f}, 0x8) 0s ago: executing program 1 (id=1487): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401c50900000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 3] ? __pfx_sctp_sendmsg+0x10/0x10 [ 221.179340][ T9323] ? __pfx___might_resched+0x10/0x10 [ 221.179357][ T9323] ? find_held_lock+0x2b/0x80 [ 221.179369][ T9323] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.179383][ T9323] ? __import_iovec+0x1dd/0x650 [ 221.179392][ T9323] ? __pfx_sctp_sendmsg+0x10/0x10 [ 221.179405][ T9323] inet_sendmsg+0x11c/0x140 [ 221.179420][ T9323] ____sys_sendmsg+0x973/0xc70 [ 221.179434][ T9323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.179445][ T9323] ? get_compat_msghdr+0x11a/0x170 [ 221.179464][ T9323] ? __pfx__kstrtoull+0x10/0x10 [ 221.179479][ T9323] ___sys_sendmsg+0x134/0x1d0 [ 221.179496][ T9323] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.179510][ T9323] ? __lock_acquire+0x622/0x1c90 [ 221.179541][ T9323] __sys_sendmmsg+0x2f9/0x420 [ 221.179558][ T9323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.179579][ T9323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.179601][ T9323] ? fput+0x70/0xf0 [ 221.179611][ T9323] ? ksys_write+0x1ac/0x250 [ 221.179626][ T9323] ? __pfx_ksys_write+0x10/0x10 [ 221.179643][ T9323] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 221.179660][ T9323] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 221.179677][ T9323] __do_fast_syscall_32+0x7c/0x3a0 [ 221.179695][ T9323] do_fast_syscall_32+0x32/0x80 [ 221.179711][ T9323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.179724][ T9323] RIP: 0023:0xf7f33579 [ 221.179733][ T9323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.179744][ T9323] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 221.179754][ T9323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 221.179761][ T9323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.179766][ T9323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.179772][ T9323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.179779][ T9323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.179791][ T9323] [ 221.564420][ T5318] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 221.718208][ T9330] binder: binder_mmap: 9329 80001000-8000b000 bad vm_flags failed -1 [ 221.723112][ T9330] batadv_slave_1: entered promiscuous mode [ 221.728399][ T9329] batadv_slave_1: left promiscuous mode [ 222.195939][ C2] net_ratelimit: 5 callbacks suppressed [ 222.195957][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.417282][ T9353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.871'. [ 222.435821][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.531702][ T9367] FAULT_INJECTION: forcing a failure. [ 222.531702][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 222.537450][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.4.874 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 222.537466][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.537473][ T9367] Call Trace: [ 222.537477][ T9367] [ 222.537481][ T9367] dump_stack_lvl+0x16c/0x1f0 [ 222.537501][ T9367] should_fail_ex+0x512/0x640 [ 222.537520][ T9367] should_failslab+0xc2/0x120 [ 222.537532][ T9367] __kmalloc_cache_noprof+0x6a/0x3e0 [ 222.537549][ T9367] ? __sctp_v6_cmp_addr+0x206/0x530 [ 222.537559][ T9367] ? sctp_add_bind_addr+0xae/0x3f0 [ 222.537576][ T9367] sctp_add_bind_addr+0xae/0x3f0 [ 222.537593][ T9367] sctp_copy_local_addr_list+0x39d/0x5a0 [ 222.537613][ T9367] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 222.537633][ T9367] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 222.537647][ T9367] ? sctp_bind_addr_copy+0xe0/0x530 [ 222.537662][ T9367] sctp_bind_addr_copy+0xe0/0x530 [ 222.537680][ T9367] sctp_connect_new_asoc+0x1d7/0x790 [ 222.537695][ T9367] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 222.537711][ T9367] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 222.537725][ T9367] sctp_sendmsg+0x15f9/0x1ee0 [ 222.537743][ T9367] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.537757][ T9367] ? __pfx___might_resched+0x10/0x10 [ 222.537773][ T9367] ? find_held_lock+0x2b/0x80 [ 222.537785][ T9367] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.537800][ T9367] ? __import_iovec+0x1dd/0x650 [ 222.537809][ T9367] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.537822][ T9367] inet_sendmsg+0x11c/0x140 [ 222.537838][ T9367] ____sys_sendmsg+0x973/0xc70 [ 222.537851][ T9367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.537862][ T9367] ? get_compat_msghdr+0x11a/0x170 [ 222.537881][ T9367] ? __pfx__kstrtoull+0x10/0x10 [ 222.537896][ T9367] ___sys_sendmsg+0x134/0x1d0 [ 222.537912][ T9367] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.537926][ T9367] ? __lock_acquire+0x622/0x1c90 [ 222.537958][ T9367] __sys_sendmmsg+0x2f9/0x420 [ 222.537975][ T9367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.537996][ T9367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.538018][ T9367] ? fput+0x70/0xf0 [ 222.538029][ T9367] ? ksys_write+0x1ac/0x250 [ 222.538044][ T9367] ? __pfx_ksys_write+0x10/0x10 [ 222.538061][ T9367] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 222.538104][ T9367] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 222.538123][ T9367] __do_fast_syscall_32+0x7c/0x3a0 [ 222.538140][ T9367] do_fast_syscall_32+0x32/0x80 [ 222.538156][ T9367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.538170][ T9367] RIP: 0023:0xf704e579 [ 222.538178][ T9367] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.538189][ T9367] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 222.538199][ T9367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 222.538205][ T9367] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.538211][ T9367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.538217][ T9367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.538223][ T9367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.538236][ T9367] [ 222.675827][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.722672][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 222.823579][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 222.828126][ T9379] random: crng reseeded on system resumption [ 223.144325][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 223.196324][ T40] audit: type=1326 audit(1751935729.894:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.203480][ T40] audit: type=1326 audit(1751935729.894:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.211175][ T40] audit: type=1326 audit(1751935729.894:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.220179][ T40] audit: type=1326 audit(1751935729.894:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.229921][ T40] audit: type=1326 audit(1751935729.894:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.235865][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.238930][ T40] audit: type=1326 audit(1751935729.894:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.248347][ T40] audit: type=1326 audit(1751935729.894:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.254798][ T40] audit: type=1326 audit(1751935729.894:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.261726][ T40] audit: type=1326 audit(1751935729.894:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.269908][ T40] audit: type=1326 audit(1751935729.894:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 223.485836][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.598287][ T9406] sp0: Synchronizing with TNC [ 223.725827][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.897184][ T9410] FAULT_INJECTION: forcing a failure. [ 223.897184][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 223.902851][ T9410] CPU: 0 UID: 0 PID: 9410 Comm: syz.0.888 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 223.902877][ T9410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.902888][ T9410] Call Trace: [ 223.902894][ T9410] [ 223.902902][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 223.902933][ T9410] should_fail_ex+0x512/0x640 [ 223.902964][ T9410] should_failslab+0xc2/0x120 [ 223.902982][ T9410] __kmalloc_cache_noprof+0x6a/0x3e0 [ 223.903006][ T9410] ? __sctp_v6_cmp_addr+0x206/0x530 [ 223.903023][ T9410] ? sctp_add_bind_addr+0xae/0x3f0 [ 223.903052][ T9410] sctp_add_bind_addr+0xae/0x3f0 [ 223.903081][ T9410] sctp_copy_local_addr_list+0x39d/0x5a0 [ 223.903114][ T9410] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 223.903147][ T9410] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 223.903170][ T9410] ? sctp_bind_addr_copy+0xe0/0x530 [ 223.903194][ T9410] sctp_bind_addr_copy+0xe0/0x530 [ 223.903226][ T9410] sctp_connect_new_asoc+0x1d7/0x790 [ 223.903257][ T9410] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 223.903285][ T9410] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 223.903309][ T9410] sctp_sendmsg+0x15f9/0x1ee0 [ 223.903339][ T9410] ? __pfx_sctp_sendmsg+0x10/0x10 [ 223.903361][ T9410] ? __pfx___might_resched+0x10/0x10 [ 223.903390][ T9410] ? find_held_lock+0x2b/0x80 [ 223.903410][ T9410] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.903434][ T9410] ? __import_iovec+0x1dd/0x650 [ 223.903449][ T9410] ? __pfx_sctp_sendmsg+0x10/0x10 [ 223.903472][ T9410] inet_sendmsg+0x11c/0x140 [ 223.903497][ T9410] ____sys_sendmsg+0x973/0xc70 [ 223.903519][ T9410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.903537][ T9410] ? get_compat_msghdr+0x11a/0x170 [ 223.903569][ T9410] ? __pfx__kstrtoull+0x10/0x10 [ 223.903595][ T9410] ___sys_sendmsg+0x134/0x1d0 [ 223.903622][ T9410] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.903645][ T9410] ? __lock_acquire+0x622/0x1c90 [ 223.903702][ T9410] __sys_sendmmsg+0x2f9/0x420 [ 223.903732][ T9410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.903767][ T9410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.903806][ T9410] ? fput+0x70/0xf0 [ 223.903824][ T9410] ? ksys_write+0x1ac/0x250 [ 223.903848][ T9410] ? __pfx_ksys_write+0x10/0x10 [ 223.903879][ T9410] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 223.903907][ T9410] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 223.903934][ T9410] __do_fast_syscall_32+0x7c/0x3a0 [ 223.903962][ T9410] do_fast_syscall_32+0x32/0x80 [ 223.903988][ T9410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.904010][ T9410] RIP: 0023:0xf7f22579 [ 223.904025][ T9410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.904041][ T9410] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 223.904059][ T9410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 223.904070][ T9410] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.904080][ T9410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.904090][ T9410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.904101][ T9410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.904125][ T9410] [ 224.250462][ T9414] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 224.253146][ T9414] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.265557][ T9414] vhci_hcd vhci_hcd.0: Device attached [ 224.268456][ T9417] usbip_core: unknown command [ 224.270089][ T9417] vhci_hcd: unknown pdu 0 [ 224.271598][ T9417] usbip_core: unknown command [ 224.276013][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.287270][ T1147] vhci_hcd: stop threads [ 224.289168][ T1147] vhci_hcd: release socket [ 224.299647][ T1147] vhci_hcd: disconnect device [ 224.410138][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.887'. [ 224.416056][ T9419] random: crng reseeded on system resumption [ 224.480315][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 224.515854][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.705313][ T9431] tipc: Resetting bearer [ 224.755953][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.823205][ T9435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 224.825724][ T9435] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.830682][ T9435] vhci_hcd vhci_hcd.0: Device attached [ 225.096025][ T6221] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 225.289779][ T9436] vhci_hcd: connection reset by peer [ 225.291929][ T79] vhci_hcd: stop threads [ 225.293273][ T79] vhci_hcd: release socket [ 225.297526][ T79] vhci_hcd: disconnect device [ 225.325823][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.551629][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 225.559517][ T9448] random: crng reseeded on system resumption [ 225.604702][ T9454] FAULT_INJECTION: forcing a failure. [ 225.604702][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 225.609519][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.4.901 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 225.609534][ T9454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.609541][ T9454] Call Trace: [ 225.609545][ T9454] [ 225.609549][ T9454] dump_stack_lvl+0x16c/0x1f0 [ 225.609569][ T9454] should_fail_ex+0x512/0x640 [ 225.609587][ T9454] should_failslab+0xc2/0x120 [ 225.609599][ T9454] __kmalloc_cache_noprof+0x6a/0x3e0 [ 225.609613][ T9454] ? __sctp_v6_cmp_addr+0x206/0x530 [ 225.609624][ T9454] ? sctp_add_bind_addr+0xae/0x3f0 [ 225.609641][ T9454] sctp_add_bind_addr+0xae/0x3f0 [ 225.609657][ T9454] sctp_copy_local_addr_list+0x39d/0x5a0 [ 225.609678][ T9454] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 225.609698][ T9454] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 225.609712][ T9454] ? sctp_bind_addr_copy+0xe0/0x530 [ 225.609727][ T9454] sctp_bind_addr_copy+0xe0/0x530 [ 225.609745][ T9454] sctp_connect_new_asoc+0x1d7/0x790 [ 225.609760][ T9454] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.609776][ T9454] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 225.609790][ T9454] sctp_sendmsg+0x15f9/0x1ee0 [ 225.609807][ T9454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.609820][ T9454] ? __pfx___might_resched+0x10/0x10 [ 225.609837][ T9454] ? find_held_lock+0x2b/0x80 [ 225.609849][ T9454] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.609863][ T9454] ? __import_iovec+0x1dd/0x650 [ 225.609872][ T9454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.609885][ T9454] inet_sendmsg+0x11c/0x140 [ 225.609901][ T9454] ____sys_sendmsg+0x973/0xc70 [ 225.609914][ T9454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.609925][ T9454] ? get_compat_msghdr+0x11a/0x170 [ 225.609944][ T9454] ? __pfx__kstrtoull+0x10/0x10 [ 225.609959][ T9454] ___sys_sendmsg+0x134/0x1d0 [ 225.609976][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.609991][ T9454] ? __lock_acquire+0x622/0x1c90 [ 225.610022][ T9454] __sys_sendmmsg+0x2f9/0x420 [ 225.610040][ T9454] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.610089][ T9454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.610117][ T9454] ? fput+0x70/0xf0 [ 225.610127][ T9454] ? ksys_write+0x1ac/0x250 [ 225.610142][ T9454] ? __pfx_ksys_write+0x10/0x10 [ 225.610160][ T9454] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 225.610177][ T9454] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 225.610194][ T9454] __do_fast_syscall_32+0x7c/0x3a0 [ 225.610212][ T9454] do_fast_syscall_32+0x32/0x80 [ 225.610229][ T9454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.610242][ T9454] RIP: 0023:0xf704e579 [ 225.610251][ T9454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.610262][ T9454] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 225.610276][ T9454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 225.610283][ T9454] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.610288][ T9454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.610294][ T9454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.610300][ T9454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.610313][ T9454] [ 225.614821][ T9455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.640184][ T9457] fuse: Unknown parameter '—roup_id' [ 225.940422][ T9463] macvlan2: entered promiscuous mode [ 225.942246][ T9463] macvlan2: entered allmulticast mode [ 226.168931][ T9467] netlink: 68 bytes leftover after parsing attributes in process `syz.4.903'. [ 226.366029][ T9469] netlink: 'syz.2.905': attribute type 7 has an invalid length. [ 226.368784][ T9469] netlink: 'syz.2.905': attribute type 8 has an invalid length. [ 226.521469][ T9474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 226.523857][ T9474] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.529381][ T9474] vhci_hcd vhci_hcd.0: Device attached [ 226.533852][ T9475] usbip_core: unknown command [ 226.535884][ T9475] vhci_hcd: unknown pdu 0 [ 226.537640][ T9475] usbip_core: unknown command [ 226.542947][ T102] vhci_hcd: stop threads [ 226.544514][ T102] vhci_hcd: release socket [ 226.547995][ T102] vhci_hcd: disconnect device [ 226.943646][ T9] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 226.948408][ T9] hid-generic 0000:FFFFFFFF:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 227.093767][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'. [ 227.099467][ T9494] random: crng reseeded on system resumption [ 227.112171][ T9489] fido_id[9489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.365464][ T9473] syz.2.906 (9473): drop_caches: 2 [ 227.395853][ C2] net_ratelimit: 5 callbacks suppressed [ 227.395866][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 227.636086][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 227.875865][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 227.898183][ T9506] loop8: detected capacity change from 0 to 7 [ 227.904655][ T9506] Dev loop8: unable to read RDB block 7 [ 227.907799][ T9506] loop8: unable to read partition table [ 227.910214][ T9506] loop8: partition table beyond EOD, truncated [ 227.912818][ T9506] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 228.234451][ T9509] 9pnet: Could not find request transport: rdmat=0x0000000000004e24 [ 228.445823][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 228.470658][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 228.470670][ T40] audit: type=1326 audit(1751935735.164:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.1.917" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 228.675827][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 228.925812][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 228.933693][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 228.937134][ T9532] random: crng reseeded on system resumption [ 229.359861][ T9547] loop8: detected capacity change from 0 to 7 [ 229.363185][ T9547] Dev loop8: unable to read RDB block 7 [ 229.383136][ T9547] loop8: unable to read partition table [ 229.387981][ T9547] loop8: partition table beyond EOD, truncated [ 229.391923][ T9547] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 229.475879][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 229.525399][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'. [ 229.553408][ T9551] random: crng reseeded on system resumption [ 229.566614][ T9553] devtmpfs: Too few inodes for current use [ 229.715964][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 229.766052][ T9567] FAULT_INJECTION: forcing a failure. [ 229.766052][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.771381][ T9567] CPU: 3 UID: 0 PID: 9567 Comm: syz.1.934 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 229.771404][ T9567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.771417][ T9567] Call Trace: [ 229.771424][ T9567] [ 229.771432][ T9567] dump_stack_lvl+0x16c/0x1f0 [ 229.771485][ T9567] should_fail_ex+0x512/0x640 [ 229.771519][ T9567] _copy_from_iter+0x29f/0x16f0 [ 229.771549][ T9567] ? _copy_from_iter+0x15d/0x16f0 [ 229.771575][ T9567] ? __pfx__copy_from_iter+0x10/0x10 [ 229.771604][ T9567] ? __pfx__copy_from_iter+0x10/0x10 [ 229.771631][ T9567] ? _copy_from_iter+0x15d/0x16f0 [ 229.771660][ T9567] copy_page_from_iter+0xde/0x180 [ 229.771690][ T9567] skb_copy_datagram_from_iter+0x2a0/0x740 [ 229.771724][ T9567] tun_get_user+0x17ac/0x3b80 [ 229.771752][ T9567] ? __pfx_tun_get_user+0x10/0x10 [ 229.771769][ T9567] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.771803][ T9567] ? find_held_lock+0x2b/0x80 [ 229.771828][ T9567] ? tun_get+0x191/0x370 [ 229.771859][ T9567] tun_chr_write_iter+0xdc/0x210 [ 229.771878][ T9567] vfs_write+0x6c4/0x1150 [ 229.771905][ T9567] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.771925][ T9567] ? __pfx_vfs_write+0x10/0x10 [ 229.771946][ T9567] ? find_held_lock+0x2b/0x80 [ 229.771980][ T9567] ksys_write+0x12a/0x250 [ 229.772004][ T9567] ? __pfx_ksys_write+0x10/0x10 [ 229.772030][ T9567] ? rcu_is_watching+0x12/0xc0 [ 229.772052][ T9567] __do_fast_syscall_32+0x7c/0x3a0 [ 229.772081][ T9567] do_fast_syscall_32+0x32/0x80 [ 229.772107][ T9567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.772128][ T9567] RIP: 0023:0xf704e579 [ 229.772142][ T9567] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.772159][ T9567] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 229.772176][ T9567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 229.772187][ T9567] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 229.772197][ T9567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.772207][ T9567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.772218][ T9567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.772247][ T9567] [ 229.955909][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 230.206384][ T6221] vhci_hcd: vhci_device speed not set [ 230.261675][ T9577] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 230.516034][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 230.539705][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.939'. [ 230.543480][ T9588] random: crng reseeded on system resumption [ 230.865299][ T9584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 231.142095][ T9602] netlink: 68 bytes leftover after parsing attributes in process `syz.0.940'. [ 231.627336][ T840] IPVS: starting estimator thread 0... [ 231.630815][ T9618] tipc: Started in network mode [ 231.632390][ T9618] tipc: Node identity ac1414aa, cluster identity 4711 [ 231.634947][ T9618] tipc: Enabled bearer , priority 10 [ 231.725901][ T9619] IPVS: using max 42 ests per chain, 100800 per kthread [ 231.756510][ T9622] FAULT_INJECTION: forcing a failure. [ 231.756510][ T9622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.762857][ T9622] CPU: 2 UID: 0 PID: 9622 Comm: syz.2.946 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 231.762894][ T9622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.762904][ T9622] Call Trace: [ 231.762911][ T9622] [ 231.762918][ T9622] dump_stack_lvl+0x16c/0x1f0 [ 231.762949][ T9622] should_fail_ex+0x512/0x640 [ 231.762977][ T9622] _copy_to_user+0x32/0xd0 [ 231.763006][ T9622] simple_read_from_buffer+0xcb/0x170 [ 231.763031][ T9622] proc_fail_nth_read+0x197/0x270 [ 231.763054][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.763077][ T9622] ? rw_verify_area+0xcf/0x680 [ 231.763099][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.763120][ T9622] vfs_read+0x1e1/0xc60 [ 231.763145][ T9622] ? fdget_pos+0x2a2/0x370 [ 231.763173][ T9622] ? __pfx_vfs_read+0x10/0x10 [ 231.763195][ T9622] ? find_held_lock+0x2b/0x80 [ 231.763221][ T9622] ? __fget_files+0x20e/0x3c0 [ 231.763252][ T9622] ksys_read+0x12a/0x250 [ 231.763275][ T9622] ? __pfx_ksys_read+0x10/0x10 [ 231.763301][ T9622] ? rcu_is_watching+0x12/0xc0 [ 231.763324][ T9622] __do_fast_syscall_32+0x7c/0x3a0 [ 231.763353][ T9622] do_fast_syscall_32+0x32/0x80 [ 231.763379][ T9622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.763401][ T9622] RIP: 0023:0xf7f33579 [ 231.763415][ T9622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 231.763432][ T9622] RSP: 002b:00000000f5056590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 231.763450][ T9622] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5056620 [ 231.763461][ T9622] RDX: 000000000000000f RSI: 00000000f73c3ff4 RDI: 0000000000000000 [ 231.763472][ T9622] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 231.763482][ T9622] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 231.763492][ T9622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.763516][ T9622] [ 231.847495][ C2] hpet: Lost 4 RTC interrupts [ 231.937727][ T9625] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 232.380645][ T9636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'. [ 232.485866][ C3] net_ratelimit: 11 callbacks suppressed [ 232.485882][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.605863][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.625875][ T60] tipc: Node number set to 2886997162 [ 232.775907][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.786040][ T9645] netlink: 68 bytes leftover after parsing attributes in process `syz.4.950'. [ 232.835907][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.055901][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.075942][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.527619][ T5965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.539541][ T5965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.543635][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.547656][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.550460][ T5965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.595812][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.645860][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.769867][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 233.802658][ T9662] tipc: Enabling of bearer rejected, already enabled [ 233.875891][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.895304][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.898504][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.901283][ T9660] bridge_slave_0: entered allmulticast mode [ 233.904861][ T9660] bridge_slave_0: entered promiscuous mode [ 233.910460][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.912888][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.915250][ T9660] bridge_slave_1: entered allmulticast mode [ 233.919282][ T9660] bridge_slave_1: entered promiscuous mode [ 233.959163][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.964634][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.010991][ T9660] team0: Port device team_slave_0 added [ 234.015286][ T9660] team0: Port device team_slave_1 added [ 234.104438][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.108983][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.120132][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 234.125598][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.132290][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.136107][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.147035][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.208715][ T9678] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 234.210873][ T9678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.213443][ T9678] vhci_hcd vhci_hcd.0: Device attached [ 234.248738][ T9660] hsr_slave_0: entered promiscuous mode [ 234.251422][ T9660] hsr_slave_1: entered promiscuous mode [ 234.253689][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.257686][ T9660] Cannot create hsr debugfs directory [ 234.452633][ T9679] vhci_hcd: connection closed [ 234.455900][ T46] vhci_hcd: stop threads [ 234.465646][ T46] vhci_hcd: release socket [ 234.467933][ T46] vhci_hcd: disconnect device [ 234.468940][ T9660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.474247][ T9684] Bluetooth: MGMT ver 1.23 [ 234.475813][ T5999] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 234.478484][ T5999] usb 45-1: enqueue for inactive port 0 [ 234.487599][ T9660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.491895][ T9660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.499437][ T9660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.546420][ T5999] vhci_hcd: vhci_device speed not set [ 234.557739][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.579345][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.594289][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.597297][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.619052][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.622063][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.707326][ T9660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.848470][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.077645][ T9660] veth0_vlan: entered promiscuous mode [ 235.091707][ T9660] veth1_vlan: entered promiscuous mode [ 235.128299][ T9660] veth0_macvtap: entered promiscuous mode [ 235.134754][ T9660] veth1_macvtap: entered promiscuous mode [ 235.302679][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.328995][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.370240][ T9660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.373939][ T9660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.378292][ T9660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.382034][ T9660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.562335][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.565504][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.599844][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.602312][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.645887][ T5318] Bluetooth: hci0: command tx timeout [ 236.013912][ T9728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.968'. [ 236.823969][ T9747] netlink: 'syz.2.975': attribute type 33 has an invalid length. [ 236.833993][ T9747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.975'. [ 236.847135][ T9747] tipc: Resetting bearer [ 237.256162][ T40] audit: type=1804 audit(1751935743.944:208): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.976" name="/newroot/231/bus/bus" dev="overlay" ino=1231 res=1 errno=0 [ 237.276614][ T40] audit: type=1804 audit(1751935743.974:209): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.976" name="/newroot/231/bus/bus" dev="overlay" ino=1231 res=1 errno=0 [ 237.458112][ T9768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.978'. [ 237.715861][ T5318] Bluetooth: hci0: command tx timeout [ 237.805816][ C3] net_ratelimit: 13 callbacks suppressed [ 237.805829][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 237.805842][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.017310][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.974'. [ 238.035968][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.239742][ T9792] loop2: detected capacity change from 0 to 7 [ 238.245685][ T5962] Dev loop2: unable to read RDB block 7 [ 238.247672][ T5962] loop2: AHDI p1 p2 p3 [ 238.249273][ T5962] loop2: partition table partially beyond EOD, truncated [ 238.276084][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.282230][ T5962] loop2: p1 start 1601398130 is beyond EOD, truncated [ 238.284845][ T5962] loop2: p2 start 1702059890 is beyond EOD, truncated [ 238.304137][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 238.382803][ T9792] Dev loop2: unable to read RDB block 7 [ 238.384575][ T9792] loop2: AHDI p1 p2 p3 [ 238.396325][ T9792] loop2: partition table partially beyond EOD, truncated [ 238.399195][ T9792] loop2: p1 start 1601398130 is beyond EOD, truncated [ 238.402196][ T9792] loop2: p2 start 1702059890 is beyond EOD, truncated [ 238.453244][ T9812] netlink: 'syz.2.979': attribute type 4 has an invalid length. [ 238.835876][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.845869][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.966612][ T5367] Dev loop2: unable to read RDB block 7 [ 238.972502][ T5367] loop2: AHDI p1 p2 p3 [ 238.974368][ T5367] loop2: partition table partially beyond EOD, truncated [ 238.985994][ T5367] loop2: p1 start 1601398130 is beyond EOD, truncated [ 238.989824][ T5367] loop2: p2 start 1702059890 is beyond EOD, truncated [ 239.075852][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 239.149537][ T9830] netlink: 68 bytes leftover after parsing attributes in process `syz.1.982'. [ 239.203545][ T9837] syz.5.986: attempt to access beyond end of device [ 239.203545][ T9837] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 239.216116][ T9837] SQUASHFS error: Failed to read block 0x0: -5 [ 239.221785][ T9837] unable to read squashfs_super_block [ 239.423766][ T9842] netlink: 68 bytes leftover after parsing attributes in process `syz.2.984'. [ 239.562131][ T9844] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 239.564561][ T9844] netlink: 224 bytes leftover after parsing attributes in process `syz.2.984'. [ 239.805795][ T5318] Bluetooth: hci0: command tx timeout [ 239.875864][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 239.885803][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 239.956036][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.987'. [ 240.125849][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 240.256599][ T5367] Dev loop2: unable to read RDB block 7 [ 240.258884][ T5367] loop2: AHDI p1 p2 p3 [ 240.260591][ T5367] loop2: partition table partially beyond EOD, truncated [ 240.263537][ T5367] loop2: p1 start 1601398130 is beyond EOD, truncated [ 240.286173][ T5367] loop2: p2 start 1702059890 is beyond EOD, truncated [ 240.387523][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.988'. [ 241.294636][ T60] IPVS: starting estimator thread 0... [ 241.296690][ T9876] tipc: Started in network mode [ 241.298296][ T9876] tipc: Node identity ac1414aa, cluster identity 4711 [ 241.300702][ T9876] tipc: Enabled bearer , priority 10 [ 241.535796][ T9879] IPVS: using max 42 ests per chain, 100800 per kthread [ 241.644404][ T9886] __nla_validate_parse: 1 callbacks suppressed [ 241.644417][ T9886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 241.875790][ T5318] Bluetooth: hci0: command tx timeout [ 242.295913][ T60] tipc: Node number set to 2886997162 [ 242.369603][ T5318] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 242.372269][ T5318] Bluetooth: hci3: Injecting HCI hardware error event [ 242.375826][ T5318] Bluetooth: hci3: hardware error 0x00 [ 242.995854][ C3] net_ratelimit: 15 callbacks suppressed [ 242.995871][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 242.996128][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 243.161829][ T9913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1004'. [ 243.235929][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 243.245825][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.004480][ T9934] tipc: Resetting bearer [ 244.035957][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.045817][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.177251][ T9931] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1008'. [ 244.275886][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.278536][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.435826][ T5318] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 245.075874][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 245.076685][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 245.135044][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.303848][ T9934] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 245.306485][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.310587][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 245.468838][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.584949][ T5999] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 245.737095][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1012'. [ 245.776010][ T9947] vhci_hcd: connection reset by peer [ 245.778501][ T46] vhci_hcd: stop threads [ 245.779749][ T46] vhci_hcd: release socket [ 245.781113][ T46] vhci_hcd: disconnect device [ 245.811899][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.908423][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.375217][ T1139] bond0 (unregistering): Released all slaves [ 246.452603][ T1139] tipc: Disabling bearer [ 246.457964][ T1139] tipc: Left network mode [ 246.721701][ T1139] hsr_slave_0: left promiscuous mode [ 246.724128][ T1139] hsr_slave_1: left promiscuous mode [ 246.776917][ T1139] veth1_macvtap: left promiscuous mode [ 246.779067][ T1139] veth0_macvtap: left promiscuous mode [ 246.781519][ T1139] veth1_vlan: left promiscuous mode [ 246.783442][ T1139] veth0_vlan: left promiscuous mode [ 247.157226][T10008] fuse: Unknown parameter '—roup_id' [ 247.240165][T10012] FAULT_INJECTION: forcing a failure. [ 247.240165][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 247.244485][T10012] CPU: 2 UID: 0 PID: 10012 Comm: syz.5.1024 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 247.244500][T10012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.244508][T10012] Call Trace: [ 247.244512][T10012] [ 247.244516][T10012] dump_stack_lvl+0x16c/0x1f0 [ 247.244537][T10012] should_fail_ex+0x512/0x640 [ 247.244555][T10012] should_failslab+0xc2/0x120 [ 247.244566][T10012] __kmalloc_cache_noprof+0x6a/0x3e0 [ 247.244581][T10012] ? __sctp_v6_cmp_addr+0x206/0x530 [ 247.244592][T10012] ? sctp_add_bind_addr+0xae/0x3f0 [ 247.244608][T10012] sctp_add_bind_addr+0xae/0x3f0 [ 247.244625][T10012] sctp_copy_local_addr_list+0x39d/0x5a0 [ 247.244646][T10012] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 247.244666][T10012] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 247.244679][T10012] ? sctp_bind_addr_copy+0xe0/0x530 [ 247.244695][T10012] sctp_bind_addr_copy+0xe0/0x530 [ 247.244713][T10012] sctp_connect_new_asoc+0x1d7/0x790 [ 247.244728][T10012] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.244744][T10012] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 247.244758][T10012] sctp_sendmsg+0x15f9/0x1ee0 [ 247.244775][T10012] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.244789][T10012] ? __pfx___might_resched+0x10/0x10 [ 247.244806][T10012] ? find_held_lock+0x2b/0x80 [ 247.244818][T10012] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.244832][T10012] ? __import_iovec+0x1dd/0x650 [ 247.244841][T10012] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.244854][T10012] inet_sendmsg+0x11c/0x140 [ 247.244870][T10012] ____sys_sendmsg+0x973/0xc70 [ 247.244883][T10012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.244894][T10012] ? get_compat_msghdr+0x11a/0x170 [ 247.244913][T10012] ? __pfx__kstrtoull+0x10/0x10 [ 247.244928][T10012] ___sys_sendmsg+0x134/0x1d0 [ 247.244944][T10012] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.244959][T10012] ? __lock_acquire+0x622/0x1c90 [ 247.244990][T10012] __sys_sendmmsg+0x2f9/0x420 [ 247.245008][T10012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 247.245028][T10012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.245050][T10012] ? fput+0x70/0xf0 [ 247.245060][T10012] ? ksys_write+0x1ac/0x250 [ 247.245075][T10012] ? __pfx_ksys_write+0x10/0x10 [ 247.245096][T10012] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 247.245114][T10012] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 247.245132][T10012] __do_fast_syscall_32+0x7c/0x3a0 [ 247.245149][T10012] do_fast_syscall_32+0x32/0x80 [ 247.245165][T10012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.245180][T10012] RIP: 0023:0xf7f56579 [ 247.245188][T10012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.245199][T10012] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 247.245209][T10012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 247.245216][T10012] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.245222][T10012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.245228][T10012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.245234][T10012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.245247][T10012] [ 247.279248][T10013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 247.280675][ C2] vkms_vblank_simulate: vblank timer overrun [ 247.282128][T10013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.284460][ C2] hpet: Lost 1 RTC interrupts [ 247.286566][T10013] vhci_hcd vhci_hcd.0: Device attached [ 247.710895][T10014] vhci_hcd: connection closed [ 247.711457][ T102] vhci_hcd: stop threads [ 247.715676][ T102] vhci_hcd: release socket [ 247.717982][ T102] vhci_hcd: disconnect device [ 247.863454][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1028'. [ 248.195824][ C2] net_ratelimit: 9 callbacks suppressed [ 248.195838][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.195852][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.435814][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.513103][T10034] loop8: detected capacity change from 0 to 7 [ 248.518126][ T5962] Dev loop8: unable to read RDB block 7 [ 248.520179][ T5962] loop8: unable to read partition table [ 248.522082][ T5962] loop8: partition table beyond EOD, truncated [ 248.526762][T10034] Dev loop8: unable to read RDB block 7 [ 248.528996][T10034] loop8: unable to read partition table [ 248.531589][T10034] loop8: partition table beyond EOD, truncated [ 248.533562][T10034] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 248.910762][T10007] tipc: Resetting bearer [ 249.212212][T10060] FAULT_INJECTION: forcing a failure. [ 249.212212][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 249.231876][T10060] CPU: 2 UID: 0 PID: 10060 Comm: syz.2.1035 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 249.231895][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.231902][T10060] Call Trace: [ 249.231907][T10060] [ 249.231911][T10060] dump_stack_lvl+0x16c/0x1f0 [ 249.231931][T10060] should_fail_ex+0x512/0x640 [ 249.231949][T10060] should_failslab+0xc2/0x120 [ 249.231960][T10060] __kmalloc_cache_noprof+0x6a/0x3e0 [ 249.231975][T10060] ? __sctp_v6_cmp_addr+0x206/0x530 [ 249.231985][T10060] ? sctp_add_bind_addr+0xae/0x3f0 [ 249.232009][T10060] sctp_add_bind_addr+0xae/0x3f0 [ 249.232026][T10060] sctp_copy_local_addr_list+0x39d/0x5a0 [ 249.232047][T10060] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 249.232067][T10060] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 249.232081][T10060] ? sctp_bind_addr_copy+0xe0/0x530 [ 249.232097][T10060] sctp_bind_addr_copy+0xe0/0x530 [ 249.232116][T10060] sctp_connect_new_asoc+0x1d7/0x790 [ 249.232130][T10060] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 249.232147][T10060] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 249.232161][T10060] sctp_sendmsg+0x15f9/0x1ee0 [ 249.232178][T10060] ? __pfx_sctp_sendmsg+0x10/0x10 [ 249.232192][T10060] ? __pfx___might_resched+0x10/0x10 [ 249.232209][T10060] ? find_held_lock+0x2b/0x80 [ 249.232221][T10060] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.232235][T10060] ? __import_iovec+0x1dd/0x650 [ 249.232244][T10060] ? __pfx_sctp_sendmsg+0x10/0x10 [ 249.232257][T10060] inet_sendmsg+0x11c/0x140 [ 249.232273][T10060] ____sys_sendmsg+0x973/0xc70 [ 249.232288][T10060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.232298][T10060] ? get_compat_msghdr+0x11a/0x170 [ 249.232317][T10060] ? __pfx__kstrtoull+0x10/0x10 [ 249.232332][T10060] ___sys_sendmsg+0x134/0x1d0 [ 249.232349][T10060] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.232364][T10060] ? __lock_acquire+0x622/0x1c90 [ 249.232396][T10060] __sys_sendmmsg+0x2f9/0x420 [ 249.232414][T10060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.232435][T10060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.232457][T10060] ? fput+0x70/0xf0 [ 249.232468][T10060] ? ksys_write+0x1ac/0x250 [ 249.232483][T10060] ? __pfx_ksys_write+0x10/0x10 [ 249.232501][T10060] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 249.232519][T10060] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 249.232536][T10060] __do_fast_syscall_32+0x7c/0x3a0 [ 249.232553][T10060] do_fast_syscall_32+0x32/0x80 [ 249.232569][T10060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.232583][T10060] RIP: 0023:0xf7f33579 [ 249.232591][T10060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.232603][T10060] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 249.232614][T10060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 249.232620][T10060] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.232626][T10060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.232632][T10060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.232638][T10060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.232652][T10060] [ 249.235827][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 249.239127][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 249.421529][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'. [ 249.485808][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 249.667391][ T1139] IPVS: stop unused estimator thread 0... [ 250.275948][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 250.285812][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 250.515820][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 250.721534][T10103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1040'. [ 250.832024][ T5999] vhci_hcd: vhci_device speed not set [ 251.054701][T10120] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 251.056821][T10120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.062375][T10120] vhci_hcd vhci_hcd.0: Device attached [ 251.298061][ T6254] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 251.316272][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 251.509645][T10134] FAULT_INJECTION: forcing a failure. [ 251.509645][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 251.513636][T10134] CPU: 3 UID: 0 PID: 10134 Comm: syz.2.1045 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 251.513651][T10134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.513658][T10134] Call Trace: [ 251.513663][T10134] [ 251.513667][T10134] dump_stack_lvl+0x16c/0x1f0 [ 251.513688][T10134] should_fail_ex+0x512/0x640 [ 251.513707][T10134] should_failslab+0xc2/0x120 [ 251.513718][T10134] __kmalloc_cache_noprof+0x6a/0x3e0 [ 251.513733][T10134] ? __sctp_v6_cmp_addr+0x206/0x530 [ 251.513744][T10134] ? sctp_add_bind_addr+0xae/0x3f0 [ 251.513761][T10134] sctp_add_bind_addr+0xae/0x3f0 [ 251.513778][T10134] sctp_copy_local_addr_list+0x39d/0x5a0 [ 251.513798][T10134] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 251.513837][T10134] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 251.513853][T10134] ? sctp_bind_addr_copy+0xe0/0x530 [ 251.513868][T10134] sctp_bind_addr_copy+0xe0/0x530 [ 251.513887][T10134] sctp_connect_new_asoc+0x1d7/0x790 [ 251.513901][T10134] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 251.513918][T10134] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 251.513932][T10134] sctp_sendmsg+0x15f9/0x1ee0 [ 251.513948][T10134] ? __pfx_sctp_sendmsg+0x10/0x10 [ 251.513962][T10134] ? __pfx___might_resched+0x10/0x10 [ 251.513979][T10134] ? find_held_lock+0x2b/0x80 [ 251.513991][T10134] ? __pfx_aa_sk_perm+0x10/0x10 [ 251.514005][T10134] ? __import_iovec+0x1dd/0x650 [ 251.514015][T10134] ? __pfx_sctp_sendmsg+0x10/0x10 [ 251.514028][T10134] inet_sendmsg+0x11c/0x140 [ 251.514047][T10134] ____sys_sendmsg+0x973/0xc70 [ 251.514061][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.514072][T10134] ? get_compat_msghdr+0x11a/0x170 [ 251.514091][T10134] ? __pfx__kstrtoull+0x10/0x10 [ 251.514106][T10134] ___sys_sendmsg+0x134/0x1d0 [ 251.514123][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.514137][T10134] ? __lock_acquire+0x622/0x1c90 [ 251.514169][T10134] __sys_sendmmsg+0x2f9/0x420 [ 251.514186][T10134] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.514207][T10134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.514229][T10134] ? fput+0x70/0xf0 [ 251.514239][T10134] ? ksys_write+0x1ac/0x250 [ 251.514254][T10134] ? __pfx_ksys_write+0x10/0x10 [ 251.514272][T10134] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 251.514290][T10134] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 251.514306][T10134] __do_fast_syscall_32+0x7c/0x3a0 [ 251.514324][T10134] do_fast_syscall_32+0x32/0x80 [ 251.514340][T10134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.514355][T10134] RIP: 0023:0xf7f33579 [ 251.514364][T10134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.514375][T10134] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 251.514385][T10134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 251.514392][T10134] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.514398][T10134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.514404][T10134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.514410][T10134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.514423][T10134] [ 251.598894][T10121] vhci_hcd: connection reset by peer [ 251.622265][ T12] vhci_hcd: stop threads [ 251.623697][ T12] vhci_hcd: release socket [ 251.625126][ T12] vhci_hcd: disconnect device [ 252.174923][T10145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1048'. [ 253.113471][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1054'. [ 253.395811][ C2] net_ratelimit: 5 callbacks suppressed [ 253.395824][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 253.405896][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 253.604087][T10184] FAULT_INJECTION: forcing a failure. [ 253.604087][T10184] name failslab, interval 1, probability 0, space 0, times 0 [ 253.609564][T10184] CPU: 2 UID: 0 PID: 10184 Comm: syz.1.1057 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 253.609587][T10184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.609598][T10184] Call Trace: [ 253.609604][T10184] [ 253.609611][T10184] dump_stack_lvl+0x16c/0x1f0 [ 253.609641][T10184] should_fail_ex+0x512/0x640 [ 253.609670][T10184] should_failslab+0xc2/0x120 [ 253.609687][T10184] __kmalloc_cache_noprof+0x6a/0x3e0 [ 253.609711][T10184] ? sctp_add_bind_addr+0xae/0x3f0 [ 253.609741][T10184] sctp_add_bind_addr+0xae/0x3f0 [ 253.609768][T10184] sctp_copy_local_addr_list+0x39d/0x5a0 [ 253.609823][T10184] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 253.609857][T10184] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 253.609880][T10184] ? sctp_bind_addr_copy+0xe0/0x530 [ 253.609905][T10184] sctp_bind_addr_copy+0xe0/0x530 [ 253.609935][T10184] sctp_connect_new_asoc+0x1d7/0x790 [ 253.609959][T10184] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 253.609987][T10184] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 253.610009][T10184] sctp_sendmsg+0x15f9/0x1ee0 [ 253.610041][T10184] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.610062][T10184] ? __pfx___might_resched+0x10/0x10 [ 253.610091][T10184] ? find_held_lock+0x2b/0x80 [ 253.610110][T10184] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.610135][T10184] ? __import_iovec+0x1dd/0x650 [ 253.610150][T10184] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.610172][T10184] inet_sendmsg+0x11c/0x140 [ 253.610197][T10184] ____sys_sendmsg+0x973/0xc70 [ 253.610219][T10184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.610237][T10184] ? get_compat_msghdr+0x11a/0x170 [ 253.610268][T10184] ? __pfx__kstrtoull+0x10/0x10 [ 253.610294][T10184] ___sys_sendmsg+0x134/0x1d0 [ 253.610321][T10184] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.610342][T10184] ? __lock_acquire+0x622/0x1c90 [ 253.610400][T10184] __sys_sendmmsg+0x2f9/0x420 [ 253.610429][T10184] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.610478][T10184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.610516][T10184] ? fput+0x70/0xf0 [ 253.610533][T10184] ? ksys_write+0x1ac/0x250 [ 253.610557][T10184] ? __pfx_ksys_write+0x10/0x10 [ 253.610585][T10184] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 253.610612][T10184] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 253.610639][T10184] __do_fast_syscall_32+0x7c/0x3a0 [ 253.610667][T10184] do_fast_syscall_32+0x32/0x80 [ 253.610694][T10184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.610716][T10184] RIP: 0023:0xf704e579 [ 253.610730][T10184] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 253.610747][T10184] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 253.610765][T10184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 253.610776][T10184] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.610786][T10184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.610796][T10184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 253.610806][T10184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.610831][T10184] [ 253.715888][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 253.717179][ C2] vkms_vblank_simulate: vblank timer overrun [ 253.717777][ C2] hpet: Lost 6 RTC interrupts [ 254.308708][T10198] netlink: 'syz.1.1059': attribute type 11 has an invalid length. [ 254.311157][T10198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1059'. [ 254.435846][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 254.445845][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 254.765914][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 254.804265][T10206] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1061'. [ 254.810200][T10190] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 255.159143][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.161192][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.414986][T10234] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 255.475827][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.475856][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.795827][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.920893][T10253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1068'. [ 255.951406][T10252] tipc: Enabling of bearer rejected, already enabled [ 255.965984][ T5318] Bluetooth: hci0: command 0x080f tx timeout [ 256.425837][ T6254] vhci_hcd: vhci_device speed not set [ 256.515890][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.131627][T10280] veth1_macvtap: left promiscuous mode [ 257.199290][T10282] veth1_macvtap: entered promiscuous mode [ 257.802413][T10288] mkiss: ax0: crc mode is auto. [ 258.041783][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 258.176615][T10306] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.180387][T10306] overlayfs: missing 'lowerdir' [ 258.595871][ C3] net_ratelimit: 5 callbacks suppressed [ 258.595884][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.605824][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.923647][T10321] FAULT_INJECTION: forcing a failure. [ 258.923647][T10321] name failslab, interval 1, probability 0, space 0, times 0 [ 258.924065][T10318] loop8: detected capacity change from 0 to 7 [ 258.925796][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.930755][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.1.1089 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 258.930779][T10321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.930790][T10321] Call Trace: [ 258.930796][T10321] [ 258.930803][T10321] dump_stack_lvl+0x16c/0x1f0 [ 258.930834][T10321] should_fail_ex+0x512/0x640 [ 258.930862][T10321] should_failslab+0xc2/0x120 [ 258.930880][T10321] __kmalloc_cache_noprof+0x6a/0x3e0 [ 258.930904][T10321] ? sctp_add_bind_addr+0xae/0x3f0 [ 258.930932][T10321] sctp_add_bind_addr+0xae/0x3f0 [ 258.930960][T10321] sctp_copy_local_addr_list+0x39d/0x5a0 [ 258.930992][T10321] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 258.931024][T10321] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 258.931047][T10321] ? sctp_bind_addr_copy+0xe0/0x530 [ 258.931071][T10321] sctp_bind_addr_copy+0xe0/0x530 [ 258.931101][T10321] sctp_connect_new_asoc+0x1d7/0x790 [ 258.931125][T10321] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 258.931151][T10321] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 258.931174][T10321] sctp_sendmsg+0x15f9/0x1ee0 [ 258.931203][T10321] ? __pfx_sctp_sendmsg+0x10/0x10 [ 258.931227][T10321] ? __pfx___might_resched+0x10/0x10 [ 258.931255][T10321] ? find_held_lock+0x2b/0x80 [ 258.931275][T10321] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.931304][T10321] ? __import_iovec+0x1dd/0x650 [ 258.931319][T10321] ? __pfx_sctp_sendmsg+0x10/0x10 [ 258.931341][T10321] inet_sendmsg+0x11c/0x140 [ 258.931366][T10321] ____sys_sendmsg+0x973/0xc70 [ 258.931389][T10321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.931407][T10321] ? get_compat_msghdr+0x11a/0x170 [ 258.931437][T10321] ? __pfx__kstrtoull+0x10/0x10 [ 258.931464][T10321] ___sys_sendmsg+0x134/0x1d0 [ 258.931488][T10321] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.931509][T10321] ? __lock_acquire+0x622/0x1c90 [ 258.931563][T10321] __sys_sendmmsg+0x2f9/0x420 [ 258.931593][T10321] ? __pfx___sys_sendmmsg+0x10/0x10 [ 258.931624][T10321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.931665][T10321] ? fput+0x70/0xf0 [ 258.931683][T10321] ? ksys_write+0x1ac/0x250 [ 258.931706][T10321] ? __pfx_ksys_write+0x10/0x10 [ 258.931736][T10321] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 258.931764][T10321] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 258.931789][T10321] __do_fast_syscall_32+0x7c/0x3a0 [ 258.931817][T10321] do_fast_syscall_32+0x32/0x80 [ 258.931842][T10321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.931864][T10321] RIP: 0023:0xf704e579 [ 258.931879][T10321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 258.931896][T10321] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 258.931913][T10321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 258.931925][T10321] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.931934][T10321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.931943][T10321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 258.931954][T10321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.931977][T10321] [ 259.032197][ T5962] Dev loop8: unable to read RDB block 7 [ 259.034031][ T5962] loop8: unable to read partition table [ 259.035992][ T5962] loop8: partition table beyond EOD, truncated [ 259.039938][T10318] Dev loop8: unable to read RDB block 7 [ 259.042186][T10318] loop8: unable to read partition table [ 259.055869][T10318] loop8: partition table beyond EOD, truncated [ 259.057983][T10318] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 259.187302][T10314] netlink: 'syz.4.1086': attribute type 12 has an invalid length. [ 259.296618][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 259.635896][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 259.635996][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 259.807725][T10339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1093'. [ 259.813636][T10347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 259.816421][T10347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 259.837000][T10347] vhci_hcd vhci_hcd.0: Device attached [ 259.965794][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.105921][ T6254] usb 46-1: SetAddress Request (2) to port 0 [ 260.109250][ T6254] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 260.597113][T10373] loop8: detected capacity change from 0 to 7 [ 260.602921][T10373] Dev loop8: unable to read RDB block 7 [ 260.605357][T10373] loop8: unable to read partition table [ 260.614833][T10348] vhci_hcd: connection reset by peer [ 260.616043][T10373] loop8: partition table beyond EOD, truncated [ 260.619457][ T46] vhci_hcd: stop threads [ 260.621272][ T46] vhci_hcd: release socket [ 260.629860][T10373] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 260.633486][ T46] vhci_hcd: disconnect device [ 260.685858][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.685886][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.896058][ T5999] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 260.955823][ T840] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 260.995850][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 261.025950][ T5999] usb 6-1: device descriptor read/64, error -71 [ 261.125808][ T840] usb 10-1: Using ep0 maxpacket: 16 [ 261.131273][ T840] usb 10-1: config 0 has no interfaces? [ 261.134045][ T840] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.137399][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.140270][ T840] usb 10-1: SerialNumber: syz [ 261.147906][ T840] usb 10-1: config 0 descriptor?? [ 261.305830][ T5999] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 261.485199][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1101'. [ 261.715834][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 261.815800][ T5999] usb 6-1: device descriptor read/64, error -71 [ 261.925980][ T5999] usb usb6-port1: attempt power cycle [ 262.004360][ T7192] usb 10-1: USB disconnect, device number 2 [ 262.211753][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 262.265515][T10448] loop8: detected capacity change from 0 to 7 [ 262.272661][T10378] Dev loop8: unable to read RDB block 7 [ 262.275039][T10378] loop8: unable to read partition table [ 262.281937][T10378] loop8: partition table beyond EOD, truncated [ 262.307763][T10448] Dev loop8: unable to read RDB block 7 [ 262.310149][T10448] loop8: unable to read partition table [ 262.312663][T10448] loop8: partition table beyond EOD, truncated [ 262.315425][T10448] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 262.525836][ T5999] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 262.546301][ T5999] usb 6-1: device descriptor read/8, error -71 [ 262.563362][T10464] loop8: detected capacity change from 0 to 7 [ 262.567378][T10464] Dev loop8: unable to read RDB block 7 [ 262.569633][T10464] loop8: unable to read partition table [ 262.571889][T10464] loop8: partition table beyond EOD, truncated [ 262.573899][T10464] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 262.692839][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1120'. [ 262.768188][T10479] loop8: detected capacity change from 0 to 7 [ 262.774907][T10479] Dev loop8: unable to read RDB block 7 [ 262.777686][T10479] loop8: unable to read partition table [ 262.780110][T10479] loop8: partition table beyond EOD, truncated [ 262.788339][T10479] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 262.815794][ T5999] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 262.847966][ T5999] usb 6-1: device descriptor read/8, error -71 [ 262.955981][ T5999] usb usb6-port1: unable to enumerate USB device [ 263.100350][T10501] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 263.294964][T10510] netlink: 'syz.1.1127': attribute type 14 has an invalid length. [ 263.734562][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1128'. [ 263.783327][T10518] misc userio: Invalid payload size [ 263.795662][T10518] misc userio: No port type given on /dev/userio [ 263.795833][ C2] net_ratelimit: 5 callbacks suppressed [ 263.795843][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.795843][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.115831][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.245927][T10535] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1131'. [ 264.320501][T10540] FAULT_INJECTION: forcing a failure. [ 264.320501][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 264.324849][T10540] CPU: 2 UID: 0 PID: 10540 Comm: syz.5.1133 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 264.324864][T10540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.324871][T10540] Call Trace: [ 264.324876][T10540] [ 264.324881][T10540] dump_stack_lvl+0x16c/0x1f0 [ 264.324901][T10540] should_fail_ex+0x512/0x640 [ 264.324919][T10540] should_failslab+0xc2/0x120 [ 264.324930][T10540] __kmalloc_cache_noprof+0x6a/0x3e0 [ 264.324945][T10540] ? __sctp_v6_cmp_addr+0x206/0x530 [ 264.324962][T10540] ? sctp_add_bind_addr+0xae/0x3f0 [ 264.324978][T10540] sctp_add_bind_addr+0xae/0x3f0 [ 264.324995][T10540] sctp_copy_local_addr_list+0x39d/0x5a0 [ 264.325016][T10540] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 264.325036][T10540] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 264.325050][T10540] ? sctp_bind_addr_copy+0xe0/0x530 [ 264.325065][T10540] sctp_bind_addr_copy+0xe0/0x530 [ 264.325084][T10540] sctp_connect_new_asoc+0x1d7/0x790 [ 264.325099][T10540] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 264.325115][T10540] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 264.325130][T10540] sctp_sendmsg+0x15f9/0x1ee0 [ 264.325147][T10540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.325160][T10540] ? __pfx___might_resched+0x10/0x10 [ 264.325177][T10540] ? find_held_lock+0x2b/0x80 [ 264.325189][T10540] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.325203][T10540] ? __import_iovec+0x1dd/0x650 [ 264.325213][T10540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.325226][T10540] inet_sendmsg+0x11c/0x140 [ 264.325242][T10540] ____sys_sendmsg+0x973/0xc70 [ 264.325256][T10540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.325267][T10540] ? get_compat_msghdr+0x11a/0x170 [ 264.325286][T10540] ? __pfx__kstrtoull+0x10/0x10 [ 264.325301][T10540] ___sys_sendmsg+0x134/0x1d0 [ 264.325318][T10540] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.325333][T10540] ? __lock_acquire+0x622/0x1c90 [ 264.325364][T10540] __sys_sendmmsg+0x2f9/0x420 [ 264.325381][T10540] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.325402][T10540] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.325424][T10540] ? fput+0x70/0xf0 [ 264.325435][T10540] ? ksys_write+0x1ac/0x250 [ 264.325450][T10540] ? __pfx_ksys_write+0x10/0x10 [ 264.325467][T10540] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 264.325485][T10540] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 264.325502][T10540] __do_fast_syscall_32+0x7c/0x3a0 [ 264.325520][T10540] do_fast_syscall_32+0x32/0x80 [ 264.325536][T10540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.325549][T10540] RIP: 0023:0xf7f56579 [ 264.325558][T10540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 264.325569][T10540] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 264.325579][T10540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 264.325586][T10540] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.325592][T10540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.325597][T10540] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 264.325603][T10540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.325616][T10540] [ 264.429975][ C2] hpet: Lost 5 RTC interrupts [ 264.747421][T10548] netlink: 'syz.1.1136': attribute type 10 has an invalid length. [ 264.759106][T10548] team0: Port device dummy0 added [ 264.835840][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.835841][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.943724][T10563] random: crng reseeded on system resumption [ 265.000074][T10564] fuse: Unknown parameter '—roup_id' [ 265.155870][ T6254] usb 46-1: device descriptor read/8, error -110 [ 265.165858][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.405479][T10543] delete_channel: no stack [ 265.540050][T10576] program syz.1.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.627565][ T6254] usb usb46-port1: attempt power cycle [ 265.885896][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.885943][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.892296][T10586] loop8: detected capacity change from 0 to 7 [ 265.895066][T10586] Dev loop8: unable to read RDB block 7 [ 265.897126][T10586] loop8: unable to read partition table [ 265.899117][T10586] loop8: partition table beyond EOD, truncated [ 265.901794][T10586] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 265.933485][T10588] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1150'. [ 265.938387][T10588] capability: warning: `syz.2.1150' uses 32-bit capabilities (legacy support in use) [ 266.195823][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 266.292239][ T6254] usb usb46-port1: unable to enumerate USB device [ 266.321400][T10593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1148'. [ 266.925856][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 266.926667][T10611] netlink: 'syz.5.1155': attribute type 4 has an invalid length. [ 266.931307][T10611] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1155'. [ 266.953836][T10611] : renamed from bond0 (while UP) [ 267.073648][T10619] loop8: detected capacity change from 0 to 7 [ 267.076228][T10619] Dev loop8: unable to read RDB block 7 [ 267.078018][T10619] loop8: unable to read partition table [ 267.082720][T10619] loop8: partition table beyond EOD, truncated [ 267.085025][T10619] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 267.097057][T10621] FAULT_INJECTION: forcing a failure. [ 267.097057][T10621] name failslab, interval 1, probability 0, space 0, times 0 [ 267.125781][T10621] CPU: 3 UID: 0 PID: 10621 Comm: syz.4.1157 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 267.125798][T10621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.125805][T10621] Call Trace: [ 267.125809][T10621] [ 267.125813][T10621] dump_stack_lvl+0x16c/0x1f0 [ 267.125834][T10621] should_fail_ex+0x512/0x640 [ 267.125859][T10621] should_failslab+0xc2/0x120 [ 267.125871][T10621] __kmalloc_cache_noprof+0x6a/0x3e0 [ 267.125886][T10621] ? __sctp_v6_cmp_addr+0x206/0x530 [ 267.125896][T10621] ? sctp_add_bind_addr+0xae/0x3f0 [ 267.125913][T10621] sctp_add_bind_addr+0xae/0x3f0 [ 267.125930][T10621] sctp_copy_local_addr_list+0x39d/0x5a0 [ 267.125951][T10621] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 267.125970][T10621] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 267.125984][T10621] ? sctp_bind_addr_copy+0xe0/0x530 [ 267.125999][T10621] sctp_bind_addr_copy+0xe0/0x530 [ 267.126018][T10621] sctp_connect_new_asoc+0x1d7/0x790 [ 267.126032][T10621] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 267.126048][T10621] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 267.126063][T10621] sctp_sendmsg+0x15f9/0x1ee0 [ 267.126080][T10621] ? __pfx_sctp_sendmsg+0x10/0x10 [ 267.126094][T10621] ? __pfx___might_resched+0x10/0x10 [ 267.126110][T10621] ? find_held_lock+0x2b/0x80 [ 267.126122][T10621] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.126136][T10621] ? __import_iovec+0x1dd/0x650 [ 267.126145][T10621] ? __pfx_sctp_sendmsg+0x10/0x10 [ 267.126158][T10621] inet_sendmsg+0x11c/0x140 [ 267.126174][T10621] ____sys_sendmsg+0x973/0xc70 [ 267.126201][T10621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.126212][T10621] ? get_compat_msghdr+0x11a/0x170 [ 267.126231][T10621] ? __pfx__kstrtoull+0x10/0x10 [ 267.126246][T10621] ___sys_sendmsg+0x134/0x1d0 [ 267.126263][T10621] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.126278][T10621] ? __lock_acquire+0x622/0x1c90 [ 267.126309][T10621] __sys_sendmmsg+0x2f9/0x420 [ 267.126327][T10621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.126347][T10621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.126370][T10621] ? fput+0x70/0xf0 [ 267.126381][T10621] ? ksys_write+0x1ac/0x250 [ 267.126395][T10621] ? __pfx_ksys_write+0x10/0x10 [ 267.126413][T10621] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 267.126431][T10621] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 267.126447][T10621] __do_fast_syscall_32+0x7c/0x3a0 [ 267.126465][T10621] do_fast_syscall_32+0x32/0x80 [ 267.126481][T10621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.126494][T10621] RIP: 0023:0xf704e579 [ 267.126503][T10621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 267.126514][T10621] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 267.126524][T10621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 267.126531][T10621] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.126537][T10621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.126543][T10621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 267.126549][T10621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.126562][T10621] [ 267.244982][ C3] vkms_vblank_simulate: vblank timer overrun [ 267.372728][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 267.402907][T10625] fuse: Unknown parameter '—roup_id' [ 267.690160][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 267.712666][T10647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 267.731190][T10649] random: crng reseeded on system resumption [ 267.758944][T10648] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1161'. [ 267.804283][T10649] Restarting kernel threads ... [ 267.807546][T10649] Done restarting kernel threads. [ 268.756894][T10657] FAULT_INJECTION: forcing a failure. [ 268.756894][T10657] name failslab, interval 1, probability 0, space 0, times 0 [ 268.770890][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.2.1169 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 268.770909][T10657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.770916][T10657] Call Trace: [ 268.770921][T10657] [ 268.770925][T10657] dump_stack_lvl+0x16c/0x1f0 [ 268.770945][T10657] should_fail_ex+0x512/0x640 [ 268.770964][T10657] should_failslab+0xc2/0x120 [ 268.770974][T10657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 268.770989][T10657] ? __sctp_v6_cmp_addr+0x206/0x530 [ 268.771000][T10657] ? sctp_add_bind_addr+0xae/0x3f0 [ 268.771017][T10657] sctp_add_bind_addr+0xae/0x3f0 [ 268.771034][T10657] sctp_copy_local_addr_list+0x39d/0x5a0 [ 268.771055][T10657] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 268.771074][T10657] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 268.771088][T10657] ? sctp_bind_addr_copy+0xe0/0x530 [ 268.771103][T10657] sctp_bind_addr_copy+0xe0/0x530 [ 268.771121][T10657] sctp_connect_new_asoc+0x1d7/0x790 [ 268.771136][T10657] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 268.771155][T10657] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 268.771169][T10657] sctp_sendmsg+0x15f9/0x1ee0 [ 268.771186][T10657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 268.771200][T10657] ? __pfx___might_resched+0x10/0x10 [ 268.771216][T10657] ? find_held_lock+0x2b/0x80 [ 268.771229][T10657] ? __pfx_aa_sk_perm+0x10/0x10 [ 268.771242][T10657] ? __import_iovec+0x1dd/0x650 [ 268.771252][T10657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 268.771265][T10657] inet_sendmsg+0x11c/0x140 [ 268.771280][T10657] ____sys_sendmsg+0x973/0xc70 [ 268.771294][T10657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.771305][T10657] ? get_compat_msghdr+0x11a/0x170 [ 268.771324][T10657] ? __pfx__kstrtoull+0x10/0x10 [ 268.771338][T10657] ___sys_sendmsg+0x134/0x1d0 [ 268.771355][T10657] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.771369][T10657] ? __lock_acquire+0x622/0x1c90 [ 268.771400][T10657] __sys_sendmmsg+0x2f9/0x420 [ 268.771418][T10657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.771438][T10657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.771461][T10657] ? fput+0x70/0xf0 [ 268.771471][T10657] ? ksys_write+0x1ac/0x250 [ 268.771486][T10657] ? __pfx_ksys_write+0x10/0x10 [ 268.771504][T10657] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 268.771522][T10657] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 268.771538][T10657] __do_fast_syscall_32+0x7c/0x3a0 [ 268.771556][T10657] do_fast_syscall_32+0x32/0x80 [ 268.771572][T10657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.771586][T10657] RIP: 0023:0xf7f33579 [ 268.771594][T10657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.771605][T10657] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 268.771619][T10657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 268.771625][T10657] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.771631][T10657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.771638][T10657] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 268.771643][T10657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.771656][T10657] [ 268.995911][ C3] net_ratelimit: 5 callbacks suppressed [ 268.995923][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.005800][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.281674][T10672] block device autoloading is deprecated and will be removed. [ 269.325838][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.437289][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1173'. [ 269.442022][T10670] misc userio: Invalid payload size [ 269.444462][T10670] misc userio: No port type given on /dev/userio [ 269.634574][T10681] fuse: Unknown parameter '' [ 269.998244][ T8521] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.045811][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.045895][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.145928][ T8521] usb 9-1: device descriptor read/64, error -71 [ 270.286417][T10692] fuse: Unknown parameter '—roup_id' [ 270.365883][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.405833][ T8521] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 270.535814][ T8521] usb 9-1: device descriptor read/64, error -71 [ 270.640180][T10697] tipc: Enabling of bearer rejected, already enabled [ 270.656021][ T8521] usb usb9-port1: attempt power cycle [ 271.016112][ T8521] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 271.075899][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 271.075912][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 271.395865][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 271.917342][ T8521] usb 9-1: device descriptor read/8, error -71 [ 272.116483][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 272.155903][ T8521] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 272.186756][ T8521] usb 9-1: device descriptor read/8, error -71 [ 272.296034][ T8521] usb usb9-port1: unable to enumerate USB device [ 272.990302][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 273.915452][T10745] bridge_slave_0: left allmulticast mode [ 273.917322][T10745] bridge_slave_0: left promiscuous mode [ 273.919415][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.927739][T10745] bridge_slave_1: left allmulticast mode [ 273.930788][T10745] bridge_slave_1: left promiscuous mode [ 273.932959][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.963197][T10745] : (slave bond_slave_0): Releasing backup interface [ 273.976825][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'. [ 273.981273][T10745] : (slave bond_slave_1): Releasing backup interface [ 274.003802][T10745] team0: Port device team_slave_0 removed [ 274.016401][T10745] team0: Port device team_slave_1 removed [ 274.021896][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.024476][T10745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.049391][T10745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.051861][T10745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.077349][T10744] misc userio: Invalid payload size [ 274.097468][T10740] misc userio: No port type given on /dev/userio [ 274.154997][T10747] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 274.157132][T10747] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.175538][T10747] vhci_hcd vhci_hcd.0: Device attached [ 274.205900][ C3] net_ratelimit: 5 callbacks suppressed [ 274.205919][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.206016][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.416864][ T5999] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 274.515856][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.675544][T10748] vhci_hcd: connection reset by peer [ 274.678504][ T102] vhci_hcd: stop threads [ 274.679931][ T102] vhci_hcd: release socket [ 274.681492][ T102] vhci_hcd: disconnect device [ 274.693483][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 275.245896][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.245959][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.555934][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.847526][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 275.851208][T10789] netlink: 'syz.5.1203': attribute type 5 has an invalid length. [ 275.854413][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1203'. [ 275.862164][T10789] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 275.864993][T10789] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 275.870812][T10789] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 275.873376][T10789] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 275.876133][T10789] geneve2: entered promiscuous mode [ 275.877752][T10789] geneve2: entered allmulticast mode [ 275.944961][T10779] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1201'. [ 276.275848][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.285831][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.595901][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 277.107244][T10823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1213'. [ 277.315867][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 278.048395][T10847] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 278.050618][T10847] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.053074][T10847] vhci_hcd vhci_hcd.0: Device attached [ 278.164398][T10849] vhci_hcd: connection closed [ 278.164699][ T46] vhci_hcd: stop threads [ 278.169073][ T46] vhci_hcd: release socket [ 278.171316][ T46] vhci_hcd: disconnect device [ 278.173373][T10851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1218'. [ 278.239651][ T6019] vhci_hcd: vhci_device speed not set [ 279.395818][ C2] net_ratelimit: 5 callbacks suppressed [ 279.395830][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.395880][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.545871][ T5999] vhci_hcd: vhci_device speed not set [ 279.715972][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.435828][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.435867][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.756329][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.866777][ T8521] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 281.023337][ T8521] usb 10-1: device descriptor read/64, error -71 [ 281.209999][T10930] tipc: Enabling of bearer rejected, already enabled [ 281.285850][ T8521] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 281.355095][T10940] fuse: Unknown parameter '—roup_id' [ 281.416189][ T8521] usb 10-1: device descriptor read/64, error -71 [ 281.475811][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.475861][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.526319][ T8521] usb usb10-port1: attempt power cycle [ 281.805824][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.875821][ T8521] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 281.896252][ T8521] usb 10-1: device descriptor read/8, error -71 [ 281.984818][T10945] sp0: Synchronizing with TNC [ 281.994558][T10945] sp0: Found TNC [ 282.135802][ T8521] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 282.156458][ T8521] usb 10-1: device descriptor read/8, error -71 [ 282.270121][ T8521] usb usb10-port1: unable to enumerate USB device [ 282.525859][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 282.575812][ T8521] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 282.735801][ T8521] usb 7-1: Using ep0 maxpacket: 32 [ 282.740121][ T8521] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 282.743663][ T8521] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 282.748896][ T8521] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 282.753097][ T8521] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 282.758591][ T8521] usb 7-1: config 0 interface 0 has no altsetting 0 [ 282.764646][ T8521] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 282.768544][ T8521] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 282.772475][ T8521] usb 7-1: Product: syz [ 282.774407][ T8521] usb 7-1: Manufacturer: syz [ 282.777109][ T8521] usb 7-1: SerialNumber: syz [ 282.782193][ T8521] usb 7-1: config 0 descriptor?? [ 282.788651][ T8521] ldusb 7-1:0.0: Interrupt in endpoint not found [ 283.057792][T10967] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1253'. [ 284.428905][T10997] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 284.431805][T10997] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.438406][T10997] vhci_hcd vhci_hcd.0: Device attached [ 284.460758][T11005] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 284.515003][T11009] program syz.1.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.587305][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1260'. [ 284.605814][ C3] net_ratelimit: 5 callbacks suppressed [ 284.605826][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 284.605838][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 284.612276][T10993] misc userio: Invalid payload size [ 284.686012][ T6019] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 284.880094][T11006] vhci_hcd: connection reset by peer [ 284.884256][ T46] vhci_hcd: stop threads [ 284.885646][ T46] vhci_hcd: release socket [ 284.887418][ T46] vhci_hcd: disconnect device [ 284.915870][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 285.365630][ T6221] usb 7-1: USB disconnect, device number 6 [ 285.510095][T11021] bond0: Error: Cannot enslave bond to itself. [ 285.635810][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 285.645835][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 285.672481][T11026] all (unregistering): Released all slaves [ 285.955901][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 286.299242][T11057] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 286.301259][T11057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 286.303969][T11057] vhci_hcd vhci_hcd.0: Device attached [ 286.555103][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 286.583500][T11065] sp0: Synchronizing with TNC [ 286.675811][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 286.675968][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 286.807464][T11058] vhci_hcd: connection closed [ 286.807653][ T79] vhci_hcd: stop threads [ 286.810874][ T79] vhci_hcd: release socket [ 286.823380][ T79] vhci_hcd: disconnect device [ 286.995897][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 287.145910][T11086] FAULT_INJECTION: forcing a failure. [ 287.145910][T11086] name failslab, interval 1, probability 0, space 0, times 0 [ 287.145963][T11086] CPU: 3 UID: 0 PID: 11086 Comm: syz.1.1282 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 287.145977][T11086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.145983][T11086] Call Trace: [ 287.145987][T11086] [ 287.145991][T11086] dump_stack_lvl+0x16c/0x1f0 [ 287.146014][T11086] should_fail_ex+0x512/0x640 [ 287.146035][T11086] should_failslab+0xc2/0x120 [ 287.146047][T11086] __kmalloc_cache_noprof+0x6a/0x3e0 [ 287.146062][T11086] ? sctp_add_bind_addr+0xae/0x3f0 [ 287.146080][T11086] sctp_add_bind_addr+0xae/0x3f0 [ 287.146097][T11086] sctp_copy_local_addr_list+0x39d/0x5a0 [ 287.146117][T11086] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 287.146137][T11086] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 287.146151][T11086] ? sctp_bind_addr_copy+0xe0/0x530 [ 287.146166][T11086] sctp_bind_addr_copy+0xe0/0x530 [ 287.146185][T11086] sctp_connect_new_asoc+0x1d7/0x790 [ 287.146199][T11086] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 287.146216][T11086] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 287.146230][T11086] sctp_sendmsg+0x15f9/0x1ee0 [ 287.146247][T11086] ? __pfx_sctp_sendmsg+0x10/0x10 [ 287.146260][T11086] ? __pfx___might_resched+0x10/0x10 [ 287.146277][T11086] ? find_held_lock+0x2b/0x80 [ 287.146289][T11086] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.146303][T11086] ? __import_iovec+0x1dd/0x650 [ 287.146312][T11086] ? __pfx_sctp_sendmsg+0x10/0x10 [ 287.146326][T11086] inet_sendmsg+0x11c/0x140 [ 287.146341][T11086] ____sys_sendmsg+0x973/0xc70 [ 287.146355][T11086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.146366][T11086] ? get_compat_msghdr+0x11a/0x170 [ 287.146385][T11086] ? __pfx__kstrtoull+0x10/0x10 [ 287.146401][T11086] ___sys_sendmsg+0x134/0x1d0 [ 287.146417][T11086] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.146432][T11086] ? __lock_acquire+0x622/0x1c90 [ 287.146463][T11086] __sys_sendmmsg+0x2f9/0x420 [ 287.146481][T11086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 287.146501][T11086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.146524][T11086] ? fput+0x70/0xf0 [ 287.146534][T11086] ? ksys_write+0x1ac/0x250 [ 287.146549][T11086] ? __pfx_ksys_write+0x10/0x10 [ 287.146566][T11086] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 287.146584][T11086] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 287.146600][T11086] __do_fast_syscall_32+0x7c/0x3a0 [ 287.146618][T11086] do_fast_syscall_32+0x32/0x80 [ 287.146634][T11086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.146648][T11086] RIP: 0023:0xf704e579 [ 287.146657][T11086] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 287.146667][T11086] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 287.146678][T11086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 287.146684][T11086] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.146690][T11086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.146696][T11086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 287.146702][T11086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.146715][T11086] [ 287.558220][T11093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 287.715814][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 288.409377][T11124] fuse: Unknown parameter '—roup_id' [ 288.926387][T11128] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 288.928472][T11128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.930854][T11128] vhci_hcd vhci_hcd.0: Device attached [ 289.201962][T11134] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1295'. [ 289.232995][T11129] vhci_hcd: connection closed [ 289.233964][ T61] vhci_hcd: stop threads [ 289.237714][ T61] vhci_hcd: release socket [ 289.239720][ T61] vhci_hcd: disconnect device [ 289.289737][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 289.293424][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 289.295857][ T6254] vhci_hcd: vhci_device speed not set [ 289.298076][T11143] netlink: 'syz.1.1297': attribute type 12 has an invalid length. [ 289.307881][T11145] loop8: detected capacity change from 0 to 7 [ 289.310806][T10378] Dev loop8: unable to read RDB block 7 [ 289.312564][T10378] loop8: unable to read partition table [ 289.314415][T10378] loop8: partition table beyond EOD, truncated [ 289.320945][T11145] Dev loop8: unable to read RDB block 7 [ 289.323077][T11145] loop8: unable to read partition table [ 289.325341][T11145] loop8: partition table beyond EOD, truncated [ 289.335956][T11145] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 289.795839][ C2] net_ratelimit: 5 callbacks suppressed [ 289.795852][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 289.795907][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.115838][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.476015][ T6019] vhci_hcd: vhci_device speed not set [ 290.835820][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.835974][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.943847][T11183] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 291.155860][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 291.343622][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 291.349685][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 291.374882][T11188] xfrm0: entered promiscuous mode [ 291.377954][T11188] xfrm0: entered allmulticast mode [ 291.875845][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 291.875845][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 292.195835][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 292.428973][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1313'. [ 292.537753][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 292.817278][T11217] fuse: Unknown parameter '—roup_id' [ 292.916294][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 293.452341][T11234] FAULT_INJECTION: forcing a failure. [ 293.452341][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 293.458939][T11231] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 293.461045][T11229] ubi: mtd0 is already attached to ubi31 [ 293.461330][T11231] PKCS7: Only support pkcs7_signedData type [ 293.462472][T11234] CPU: 3 UID: 0 PID: 11234 Comm: syz.2.1323 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 293.462495][T11234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.462506][T11234] Call Trace: [ 293.462513][T11234] [ 293.462519][T11234] dump_stack_lvl+0x16c/0x1f0 [ 293.462550][T11234] should_fail_ex+0x512/0x640 [ 293.462579][T11234] should_failslab+0xc2/0x120 [ 293.462597][T11234] __kmalloc_cache_noprof+0x6a/0x3e0 [ 293.462628][T11234] ? __sctp_v6_cmp_addr+0x206/0x530 [ 293.462645][T11234] ? sctp_add_bind_addr+0xae/0x3f0 [ 293.462672][T11234] sctp_add_bind_addr+0xae/0x3f0 [ 293.462697][T11234] sctp_copy_local_addr_list+0x39d/0x5a0 [ 293.462728][T11234] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 293.462758][T11234] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 293.462779][T11234] ? sctp_bind_addr_copy+0xe0/0x530 [ 293.462800][T11234] sctp_bind_addr_copy+0xe0/0x530 [ 293.462829][T11234] sctp_connect_new_asoc+0x1d7/0x790 [ 293.462850][T11234] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 293.462876][T11234] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 293.462899][T11234] sctp_sendmsg+0x15f9/0x1ee0 [ 293.462924][T11234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 293.462941][T11234] ? __pfx___might_resched+0x10/0x10 [ 293.462958][T11234] ? find_held_lock+0x2b/0x80 [ 293.462970][T11234] ? __pfx_aa_sk_perm+0x10/0x10 [ 293.462984][T11234] ? __import_iovec+0x1dd/0x650 [ 293.462994][T11234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 293.463007][T11234] inet_sendmsg+0x11c/0x140 [ 293.463023][T11234] ____sys_sendmsg+0x973/0xc70 [ 293.463038][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.463048][T11234] ? get_compat_msghdr+0x11a/0x170 [ 293.463067][T11234] ? __pfx__kstrtoull+0x10/0x10 [ 293.463086][T11234] ___sys_sendmsg+0x134/0x1d0 [ 293.463110][T11234] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.463132][T11234] ? __lock_acquire+0x622/0x1c90 [ 293.463185][T11234] __sys_sendmmsg+0x2f9/0x420 [ 293.463214][T11234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 293.463247][T11234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.463282][T11234] ? fput+0x70/0xf0 [ 293.463297][T11234] ? ksys_write+0x1ac/0x250 [ 293.463321][T11234] ? __pfx_ksys_write+0x10/0x10 [ 293.463351][T11234] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 293.463380][T11234] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 293.463408][T11234] __do_fast_syscall_32+0x7c/0x3a0 [ 293.463437][T11234] do_fast_syscall_32+0x32/0x80 [ 293.463462][T11234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.463483][T11234] RIP: 0023:0xf7f33579 [ 293.463498][T11234] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 293.463514][T11234] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 293.463530][T11234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 293.463541][T11234] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.463552][T11234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.463562][T11234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 293.463572][T11234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.463596][T11234] [ 294.757396][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 294.800638][T11244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1325'. [ 294.887701][ T40] audit: type=1804 audit(1751935802.584:210): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1327" name="/newroot/97/file1" dev="fuse" ino=1 res=1 errno=0 [ 294.895234][ T40] audit: type=1800 audit(1751935802.584:211): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1327" name="/" dev="fuse" ino=1 res=0 errno=0 [ 294.902102][ T40] audit: type=1800 audit(1751935802.584:212): pid=11248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1327" name="/" dev="fuse" ino=1 res=0 errno=0 [ 294.995845][ C2] net_ratelimit: 6 callbacks suppressed [ 294.995858][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 294.995925][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 295.315873][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 295.436713][T11268] fuse: Unknown parameter '—roup_id' [ 295.595062][T11270] netlink: 'syz.4.1330': attribute type 23 has an invalid length. [ 295.780298][T11273] FAULT_INJECTION: forcing a failure. [ 295.780298][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 295.803653][T11273] CPU: 3 UID: 0 PID: 11273 Comm: syz.5.1332 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 295.803671][T11273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.803692][T11273] Call Trace: [ 295.803697][T11273] [ 295.803701][T11273] dump_stack_lvl+0x16c/0x1f0 [ 295.803721][T11273] should_fail_ex+0x512/0x640 [ 295.803740][T11273] should_failslab+0xc2/0x120 [ 295.803751][T11273] __kmalloc_cache_noprof+0x6a/0x3e0 [ 295.803766][T11273] ? __sctp_v6_cmp_addr+0x206/0x530 [ 295.803777][T11273] ? sctp_add_bind_addr+0xae/0x3f0 [ 295.803794][T11273] sctp_add_bind_addr+0xae/0x3f0 [ 295.803811][T11273] sctp_copy_local_addr_list+0x39d/0x5a0 [ 295.803831][T11273] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 295.803851][T11273] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 295.803865][T11273] ? sctp_bind_addr_copy+0xe0/0x530 [ 295.803880][T11273] sctp_bind_addr_copy+0xe0/0x530 [ 295.803899][T11273] sctp_connect_new_asoc+0x1d7/0x790 [ 295.803914][T11273] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 295.803931][T11273] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 295.803944][T11273] sctp_sendmsg+0x15f9/0x1ee0 [ 295.803962][T11273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 295.803976][T11273] ? __pfx___might_resched+0x10/0x10 [ 295.803993][T11273] ? find_held_lock+0x2b/0x80 [ 295.804005][T11273] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.804020][T11273] ? __import_iovec+0x1dd/0x650 [ 295.804029][T11273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 295.804043][T11273] inet_sendmsg+0x11c/0x140 [ 295.804058][T11273] ____sys_sendmsg+0x973/0xc70 [ 295.804073][T11273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.804083][T11273] ? get_compat_msghdr+0x11a/0x170 [ 295.804102][T11273] ? __pfx__kstrtoull+0x10/0x10 [ 295.804117][T11273] ___sys_sendmsg+0x134/0x1d0 [ 295.804134][T11273] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.804149][T11273] ? __lock_acquire+0x622/0x1c90 [ 295.804181][T11273] __sys_sendmmsg+0x2f9/0x420 [ 295.804199][T11273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 295.804219][T11273] ? bpf_trace_run2+0x265/0x590 [ 295.804240][T11273] ? __might_fault+0x13b/0x190 [ 295.804256][T11273] ? find_held_lock+0x2b/0x80 [ 295.804267][T11273] ? syscall_trace_enter+0x1cb/0x260 [ 295.804286][T11273] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 295.804305][T11273] __do_fast_syscall_32+0x7c/0x3a0 [ 295.804323][T11273] do_fast_syscall_32+0x32/0x80 [ 295.804339][T11273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.804352][T11273] RIP: 0023:0xf7f56579 [ 295.804361][T11273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.804372][T11273] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 295.804383][T11273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 295.804389][T11273] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.804395][T11273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.804401][T11273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.804407][T11273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.804420][T11273] [ 296.030959][T11279] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 296.036749][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 296.045856][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 296.152278][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 296.355819][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.075883][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.075889][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.353738][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 297.396004][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.441548][T11321] smb3: Unknown parameter 'ò­þ -”VK'9Œ(‘ 8h' [ 297.461661][T11321] trusted_key: encrypted_key: insufficient parameters specified [ 297.721372][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1350'. [ 297.975320][T11340] tipc: Resetting bearer [ 298.075034][T11341] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 298.077630][T11341] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.082491][T11341] vhci_hcd vhci_hcd.0: Device attached [ 298.315863][ T6254] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 298.521877][T11347] team0: Port device dummy0 removed [ 298.608887][T11342] vhci_hcd: connection reset by peer [ 298.612467][ T1257] vhci_hcd: stop threads [ 298.614201][ T1257] vhci_hcd: release socket [ 298.617984][ T1257] vhci_hcd: disconnect device [ 298.648060][T11348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 298.650689][T11348] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.654332][T11348] vhci_hcd vhci_hcd.0: Device attached [ 298.774662][ T5318] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 298.885817][ T6221] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 299.874697][T11349] vhci_hcd: connection reset by peer [ 299.882814][ T1257] vhci_hcd: stop threads [ 299.884746][ T1257] vhci_hcd: release socket [ 299.887598][ T1257] vhci_hcd: disconnect device [ 299.939265][T11370] netlink: 'syz.5.1361': attribute type 33 has an invalid length. [ 299.941732][T11370] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1361'. [ 300.130118][T11384] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1366'. [ 300.195836][ C3] net_ratelimit: 6 callbacks suppressed [ 300.195847][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 300.205808][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 300.284523][T11388] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1368'. [ 300.442013][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 300.515942][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.236362][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.246577][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.555824][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.826696][T11382] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 301.828827][T11382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.831443][T11382] vhci_hcd vhci_hcd.0: Device attached [ 301.833303][T11395] vhci_hcd: connection closed [ 301.841128][ T12] vhci_hcd: stop threads [ 301.859779][ T12] vhci_hcd: release socket [ 301.871719][ T12] vhci_hcd: disconnect device [ 301.994725][T11404] loop8: detected capacity change from 0 to 7 [ 301.997256][T11404] Dev loop8: unable to read RDB block 7 [ 301.999047][T11404] loop8: unable to read partition table [ 302.000884][T11404] loop8: partition table beyond EOD, truncated [ 302.002837][T11404] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 302.205905][T11411] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 302.207997][T11411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.211557][T11411] vhci_hcd vhci_hcd.0: Device attached [ 302.275833][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 302.275833][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 302.344024][T11412] vhci_hcd: connection closed [ 302.354016][ T12] vhci_hcd: stop threads [ 302.357142][ T12] vhci_hcd: release socket [ 302.358652][ T12] vhci_hcd: disconnect device [ 302.385865][ T5999] vhci_hcd: vhci_device speed not set [ 302.507537][T11419] loop8: detected capacity change from 0 to 7 [ 302.525452][T10378] Dev loop8: unable to read RDB block 7 [ 302.531073][T10378] loop8: unable to read partition table [ 302.532936][T10378] loop8: partition table beyond EOD, truncated [ 302.595889][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 302.616848][T11419] Dev loop8: unable to read RDB block 7 [ 302.618868][T11419] loop8: unable to read partition table [ 302.625877][T11419] loop8: partition table beyond EOD, truncated [ 302.627772][T11419] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 302.943315][T11426] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1375'. [ 303.305079][T11421] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1377'. [ 303.308686][T11421] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 303.312313][T11421] 0ªX¹¦D: entered allmulticast mode [ 303.314048][T11421] veth0_macvtap: entered allmulticast mode [ 303.316003][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 303.465872][ T6254] vhci_hcd: vhci_device speed not set [ 304.026226][ T6221] vhci_hcd: vhci_device speed not set [ 304.520462][T11444] tipc: Enabling of bearer rejected, already enabled [ 304.631857][T11452] FAULT_INJECTION: forcing a failure. [ 304.631857][T11452] name failslab, interval 1, probability 0, space 0, times 0 [ 304.641540][T11452] CPU: 2 UID: 0 PID: 11452 Comm: syz.1.1385 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 304.641567][T11452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 304.641575][T11452] Call Trace: [ 304.641579][T11452] [ 304.641583][T11452] dump_stack_lvl+0x16c/0x1f0 [ 304.641603][T11452] should_fail_ex+0x512/0x640 [ 304.641621][T11452] should_failslab+0xc2/0x120 [ 304.641632][T11452] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 304.641650][T11452] ? skb_clone+0x190/0x3f0 [ 304.641668][T11452] skb_clone+0x190/0x3f0 [ 304.641685][T11452] netlink_deliver_tap+0xabd/0xd30 [ 304.641706][T11452] netlink_unicast+0x5df/0x7f0 [ 304.641718][T11452] ? __pfx_netlink_unicast+0x10/0x10 [ 304.641733][T11452] netlink_sendmsg+0x8d1/0xdd0 [ 304.641746][T11452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.641758][T11452] ? __import_iovec+0x1dd/0x650 [ 304.641770][T11452] ____sys_sendmsg+0xa98/0xc70 [ 304.641784][T11452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.641795][T11452] ? get_compat_msghdr+0x11a/0x170 [ 304.641817][T11452] ___sys_sendmsg+0x134/0x1d0 [ 304.641839][T11452] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.641861][T11452] ? find_held_lock+0x2b/0x80 [ 304.641881][T11452] __sys_sendmsg+0x16d/0x220 [ 304.641897][T11452] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.641919][T11452] ? rcu_is_watching+0x12/0xc0 [ 304.641933][T11452] __do_fast_syscall_32+0x7c/0x3a0 [ 304.641951][T11452] do_fast_syscall_32+0x32/0x80 [ 304.641968][T11452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.641981][T11452] RIP: 0023:0xf704e579 [ 304.641990][T11452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 304.642001][T11452] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 304.642011][T11452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 304.642018][T11452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.642023][T11452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.642029][T11452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 304.642035][T11452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.642048][T11452] [ 304.642101][T11452] netlink: 'syz.1.1385': attribute type 33 has an invalid length. [ 304.728430][T11452] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1385'. [ 304.772087][T11462] netlink: 'syz.4.1388': attribute type 33 has an invalid length. [ 304.774667][T11462] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1388'. [ 305.395879][ C3] net_ratelimit: 6 callbacks suppressed [ 305.395890][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 305.395902][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 305.581383][T11485] FAULT_INJECTION: forcing a failure. [ 305.581383][T11485] name failslab, interval 1, probability 0, space 0, times 0 [ 305.585359][T11485] CPU: 0 UID: 0 PID: 11485 Comm: syz.1.1394 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 305.585375][T11485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.585382][T11485] Call Trace: [ 305.585387][T11485] [ 305.585391][T11485] dump_stack_lvl+0x16c/0x1f0 [ 305.585411][T11485] should_fail_ex+0x512/0x640 [ 305.585428][T11485] ? fs_reclaim_acquire+0xae/0x150 [ 305.585443][T11485] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.585459][T11485] should_failslab+0xc2/0x120 [ 305.585471][T11485] __kmalloc_noprof+0xd2/0x510 [ 305.585508][T11485] tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.585535][T11485] ? tomoyo_profile+0x47/0x60 [ 305.585572][T11485] tomoyo_path_number_perm+0x245/0x580 [ 305.585590][T11485] ? tomoyo_path_number_perm+0x237/0x580 [ 305.585612][T11485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.585644][T11485] ? find_held_lock+0x2b/0x80 [ 305.585656][T11485] ? hook_file_ioctl_common+0x145/0x410 [ 305.585672][T11485] ? __fget_files+0x20e/0x3c0 [ 305.585686][T11485] ? fput+0x20/0xf0 [ 305.585712][T11485] security_file_ioctl_compat+0x9b/0x240 [ 305.585730][T11485] __ia32_compat_sys_ioctl+0xc3/0x370 [ 305.585746][T11485] __do_fast_syscall_32+0x7c/0x3a0 [ 305.585766][T11485] do_fast_syscall_32+0x32/0x80 [ 305.585782][T11485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.585796][T11485] RIP: 0023:0xf704e579 [ 305.585805][T11485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.585816][T11485] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 305.585826][T11485] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c05 [ 305.585832][T11485] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.585838][T11485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.585844][T11485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 305.585850][T11485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.585863][T11485] [ 305.660232][T11485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.715844][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 306.435828][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 306.436707][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 306.765818][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.475863][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.485816][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.645868][ T7192] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 307.801407][ T7192] usb 9-1: Using ep0 maxpacket: 8 [ 307.805887][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.886435][ T7192] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.891004][ T7192] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.905901][ T6006] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 307.905930][ T7192] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.916171][ T7192] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.925882][ T7192] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.936015][ T7192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.056558][ T6006] usb 7-1: device descriptor read/64, error -71 [ 308.146973][ T7192] usb 9-1: GET_CAPABILITIES returned 0 [ 308.148856][ T7192] usbtmc 9-1:16.0: can't read capabilities [ 308.305842][ T6006] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 308.353811][ T7192] usb 9-1: USB disconnect, device number 7 [ 308.436082][ T6006] usb 7-1: device descriptor read/64, error -71 [ 308.515813][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 308.546187][ T6006] usb usb7-port1: attempt power cycle [ 308.642255][T11548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1412'. [ 308.667868][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1409'. [ 308.925834][ T6006] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 309.000551][ T6006] usb 7-1: device descriptor read/8, error -71 [ 309.170167][ T7192] libceph: connect (1)[c::]:6789 error -101 [ 309.172277][ T7192] libceph: mon0 (1)[c::]:6789 connect error [ 309.224811][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1414'. [ 309.255863][ T6006] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 309.276707][ T6006] usb 7-1: device descriptor read/8, error -71 [ 309.396010][ T6006] usb usb7-port1: unable to enumerate USB device [ 309.437218][ T7192] libceph: connect (1)[c::]:6789 error -101 [ 309.439259][ T7192] libceph: mon0 (1)[c::]:6789 connect error [ 309.950181][T11558] ceph: No mds server is up or the cluster is laggy [ 309.956862][ T7192] libceph: connect (1)[c::]:6789 error -101 [ 309.959484][ T7192] libceph: mon0 (1)[c::]:6789 connect error [ 310.072739][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1418'. [ 310.117200][T11577] netlink: 'syz.1.1417': attribute type 21 has an invalid length. [ 310.222838][T11581] loop8: detected capacity change from 0 to 7 [ 310.226216][T10378] Dev loop8: unable to read RDB block 7 [ 310.228032][T10378] loop8: unable to read partition table [ 310.229894][T10378] loop8: partition table beyond EOD, truncated [ 310.237924][T11581] Dev loop8: unable to read RDB block 7 [ 310.239750][T11581] loop8: unable to read partition table [ 310.241616][T11581] loop8: partition table beyond EOD, truncated [ 310.244072][T11581] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 310.301896][T11585] binder: BINDER_SET_CONTEXT_MGR already set [ 310.303821][T11585] binder: 11584:11585 ioctl 4018620d 80000240 returned -16 [ 310.306798][T11585] binder: BINDER_SET_CONTEXT_MGR already set [ 310.308814][T11585] binder: 11584:11585 ioctl 4018620d 80000240 returned -16 [ 310.311161][T11585] binder: BINDER_SET_CONTEXT_MGR already set [ 310.315400][T11585] binder: 11584:11585 ioctl 4018620d 80000240 returned -16 [ 310.352918][T11595] netlink: 'syz.4.1425': attribute type 33 has an invalid length. [ 310.361951][T11595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1425'. [ 310.595937][ C3] net_ratelimit: 5 callbacks suppressed [ 310.595949][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.595967][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.925854][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 311.217389][T11611] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1424'. [ 311.574956][T11606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1428'. [ 311.578353][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 311.635852][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 311.635896][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 311.666035][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 311.955874][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.675888][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.685886][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.895918][T11630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1429'. [ 312.995826][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 313.179068][T11655] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 313.181828][T11655] netlink: 'syz.5.1441': attribute type 2 has an invalid length. [ 313.725843][ C3] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.214813][T11749] Illegal XDP return value 4294967274 on prog (id 196) dev syz_tun, expect packet loss! [ 315.295330][ T5973] ------------[ cut here ]------------ [ 315.297193][ T5973] WARNING: CPU: 2 PID: 5973 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 [ 315.300053][ T5973] Modules linked in: [ 315.301454][ T5973] CPU: 2 UID: 0 PID: 5973 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 315.306188][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.309420][ T5973] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 315.311206][ T5973] Code: 00 e8 c1 cd 0b 00 e8 8c 7d 46 00 fb 65 8b 05 f4 2a 53 12 85 c0 74 52 5b 5d e9 59 7d 0a 0a 65 8b 05 3e 69 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 23 7f 46 00 eb 99 48 89 ef e8 09 74 1b 00 eb a2 [ 315.316993][ T5973] RSP: 0018:ffffc9000130f758 EFLAGS: 00010046 [ 315.318971][ T5973] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff2153804 [ 315.321444][ T5973] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89e80703 [ 315.323858][ T5973] RBP: ffffffff89e80703 R08: 0000000000000000 R09: ffffed1005687870 [ 315.326310][ T5973] R10: ffff88802b43c383 R11: 0000000000002c00 R12: 000000000100007f [ 315.328702][ T5973] R13: ffffc9000130f8a0 R14: ffff88805d417264 R15: ffff88804e1d4000 [ 315.331118][ T5973] FS: 0000000000000000(0000) GS:ffff888097723000(0000) knlGS:0000000000000000 [ 315.333787][ T5973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.335938][ T5973] CR2: 00000000f7394828 CR3: 000000000e382000 CR4: 0000000000352ef0 [ 315.338491][ T5973] Call Trace: [ 315.339559][ T5973] [ 315.340514][ T5973] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 315.342411][ T5973] ? dst_alloc+0xc0/0x1a0 [ 315.343832][ T5973] ? ret_from_fork_asm+0x1a/0x30 [ 315.345409][ T5973] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 315.347327][ T5973] ip_route_output_key_hash+0x137/0x2e0 [ 315.349100][ T5973] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 315.351041][ T5973] ? stack_trace_save+0x8e/0xc0 [ 315.352600][ T5973] ? __pfx_map_id_range_down+0x10/0x10 [ 315.354373][ T5973] ? check_path.constprop.0+0x24/0x50 [ 315.356095][ T5973] ip_route_output_flow+0x27/0x150 [ 315.357749][ T5973] rxrpc_init_peer+0x40f/0xc70 [ 315.359285][ T5973] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 315.360969][ T5973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.362859][ T5973] rxrpc_new_incoming_peer+0x64/0x2e0 [ 315.364563][ T5973] rxrpc_new_incoming_call+0x127b/0x1890 [ 315.366350][ T5973] ? trace_rxrpc_tlp_probe+0x140/0x210 [ 315.368093][ T5973] rxrpc_io_thread+0x2f01/0x4020 [ 315.369689][ T5973] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 315.371362][ T5973] ? rcu_is_watching+0x12/0xc0 [ 315.372943][ T5973] ? trace_sched_exit_tp+0xde/0x130 [ 315.374677][ T5973] ? do_raw_spin_lock+0x12c/0x2b0 [ 315.376277][ T5973] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.378149][ T5973] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.379812][ T5973] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 315.381495][ T5973] ? kthread+0x3c5/0x780 [ 315.382876][ T5973] kthread+0x3c5/0x780 [ 315.384181][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.385683][ T5973] ? rcu_is_watching+0x12/0xc0 [ 315.387199][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.388690][ T5973] ret_from_fork+0x5d4/0x6f0 [ 315.390175][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.391665][ T5973] ret_from_fork_asm+0x1a/0x30 [ 315.393218][ T5973] [ 315.394243][ T5973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.396539][ T5973] CPU: 2 UID: 0 PID: 5973 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 315.399845][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.403260][ T5973] Call Trace: [ 315.404337][ T5973] [ 315.405305][ T5973] dump_stack_lvl+0x3d/0x1f0 [ 315.406791][ T5973] panic+0x71c/0x800 [ 315.408047][ T5973] ? __pfx_panic+0x10/0x10 [ 315.409515][ T5973] ? show_trace_log_lvl+0x29b/0x3e0 [ 315.411176][ T5973] ? check_panic_on_warn+0x1f/0xb0 [ 315.412818][ T5973] ? __local_bh_enable_ip+0xc3/0x120 [ 315.414523][ T5973] check_panic_on_warn+0xab/0xb0 [ 315.416112][ T5973] __warn+0xf6/0x3c0 [ 315.417392][ T5973] ? __local_bh_enable_ip+0xc3/0x120 [ 315.419099][ T5973] report_bug+0x3c3/0x580 [ 315.420483][ T5973] ? __local_bh_enable_ip+0xc3/0x120 [ 315.422200][ T5973] handle_bug+0x184/0x210 [ 315.423579][ T5973] exc_invalid_op+0x17/0x50 [ 315.425045][ T5973] asm_exc_invalid_op+0x1a/0x20 [ 315.426610][ T5973] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 315.428487][ T5973] Code: 00 e8 c1 cd 0b 00 e8 8c 7d 46 00 fb 65 8b 05 f4 2a 53 12 85 c0 74 52 5b 5d e9 59 7d 0a 0a 65 8b 05 3e 69 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 23 7f 46 00 eb 99 48 89 ef e8 09 74 1b 00 eb a2 [ 315.434519][ T5973] RSP: 0018:ffffc9000130f758 EFLAGS: 00010046 [ 315.436435][ T5973] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff2153804 [ 315.438943][ T5973] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89e80703 [ 315.441424][ T5973] RBP: ffffffff89e80703 R08: 0000000000000000 R09: ffffed1005687870 [ 315.443909][ T5973] R10: ffff88802b43c383 R11: 0000000000002c00 R12: 000000000100007f [ 315.446396][ T5973] R13: ffffc9000130f8a0 R14: ffff88805d417264 R15: ffff88804e1d4000 [ 315.448997][ T5973] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 315.450912][ T5973] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 315.452807][ T5973] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 315.454657][ T5973] ? dst_alloc+0xc0/0x1a0 [ 315.456038][ T5973] ? ret_from_fork_asm+0x1a/0x30 [ 315.457676][ T5973] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 315.459597][ T5973] ip_route_output_key_hash+0x137/0x2e0 [ 315.461368][ T5973] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 315.463316][ T5973] ? stack_trace_save+0x8e/0xc0 [ 315.464869][ T5973] ? __pfx_map_id_range_down+0x10/0x10 [ 315.466616][ T5973] ? check_path.constprop.0+0x24/0x50 [ 315.468330][ T5973] ip_route_output_flow+0x27/0x150 [ 315.469972][ T5973] rxrpc_init_peer+0x40f/0xc70 [ 315.471519][ T5973] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 315.473211][ T5973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.475110][ T5973] rxrpc_new_incoming_peer+0x64/0x2e0 [ 315.476821][ T5973] rxrpc_new_incoming_call+0x127b/0x1890 [ 315.478643][ T5973] ? trace_rxrpc_tlp_probe+0x140/0x210 [ 315.480367][ T5973] rxrpc_io_thread+0x2f01/0x4020 [ 315.481922][ T5973] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 315.483592][ T5973] ? rcu_is_watching+0x12/0xc0 [ 315.485112][ T5973] ? trace_sched_exit_tp+0xde/0x130 [ 315.486785][ T5973] ? do_raw_spin_lock+0x12c/0x2b0 [ 315.488357][ T5973] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.490221][ T5973] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.491867][ T5973] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 315.493529][ T5973] ? kthread+0x3c5/0x780 [ 315.494864][ T5973] kthread+0x3c5/0x780 [ 315.496153][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.497634][ T5973] ? rcu_is_watching+0x12/0xc0 [ 315.499174][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.500694][ T5973] ret_from_fork+0x5d4/0x6f0 [ 315.502167][ T5973] ? __pfx_kthread+0x10/0x10 [ 315.503642][ T5973] ret_from_fork_asm+0x1a/0x30 [ 315.505158][ T5973] [ 315.506954][ T5973] Kernel Offset: disabled [ 315.508335][ T5973] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:50:22 Registers: info registers vcpu 0 CPU#0 RAX=000000000063fa55 RBX=0000000000000000 RCX=ffffffff8b843c39 RDX=0000000000000000 RSI=ffffffff8de2ad71 RDI=ffffffff8c157060 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98e50 R15=0000000000000000 RIP=ffffffff8b84279f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097523000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fe1fffc CR3=000000006546e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=1ffff92004b32eae RCX=ffffffff822ce25e RDX=ffff888023b30000 RSI=ffffffff822ce29c RDI=0000000000000007 RBP=800000005480d007 RSP=ffffc90025997568 R8 =0000000000000007 R9 =0000000000000005 R10=0000000000000005 R11=0000000000000001 R12=0000000000000005 R13=ffff8880684f2948 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8b8722a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097623000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000584e44c0 CR3=000000006cd08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582c95 RDI=ffffffff9b0a9980 RBP=ffffffff9b0a9940 RSP=ffffc9000130f0c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b0a9940 R15=ffffffff85582c30 RIP=ffffffff85582cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097723000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7394828 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea00017484c0 RCX=0000000053476d3b RDX=0000000000000000 RSI=ffffffff8de05908 RDI=ffffffff8c157060 RBP=0000000000000000 RSP=ffffc9002471f418 R8 =c198ad5ea827a3e4 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88804e500888 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88802b533310 RIP=ffffffff8b843170 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097823000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c328eb2 CR3=000000004c08d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000