last executing test programs: 10.210938312s ago: executing program 1 (id=2279): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x20003}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10.198380872s ago: executing program 1 (id=2280): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$unix(0x1, 0x5, 0x0) shutdown(r7, 0x6) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2404c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="4b6d13ca733df6bdc7c49a6bf4fc16a3b9fca883572c28557c8dc07748df0df12d1ed0804c625ff9cb11c3255d5733f5849180155298b8deb1a265f5f482e60d7c1307fb384f0cb1ffd3b0ad900a2f26e618af6b5f182d4cad1115817d29f40b0bec6e7c8655ccd791fa5e7db19bc5c239"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', r6, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 8.935866601s ago: executing program 1 (id=2290): r0 = gettid() r1 = epoll_create(0x400) r2 = socket(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008a80), &(0x7f0000008ac0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000003c0)="4e03107cb63bd54fa6d8372444ffc64adeb99fa92d3b03773c01b0b417e2ffc01d49f60c064dbb896e1e0c9e6f61128a5a44378331a5f7a69b465878b62920619a10e127d2b7ac2e9c471409a23d5b091c6265f1229d3d4b40f39771378b15", 0x5f}, {&(0x7f0000000440)="ae1c35c43e44f9110f1fdd03c8194671ade168dcce23b6286edf524922430659b2ce23578e15c3dece28c3192a197514ab9715e95ef91003cd022279f5cb24aaae3a4f2401f56ac94514c05622479b1138a0016e0d24523a92f7d6b6790732468e3cbeb13b59a3fa76aac04967dee4b25c19d77f5848afac02a5d2e56dd41e05d167cdbd078aff93dbfc448076f6f485a75724acc56c1d3311a004f86729a79660652b236def1b984d6761e18fea1aac952e4a63db0742aeccacbdc6817bfe7a25dd805f8308ddf38d9e383cff5aee039bf3000eb0975c553b00ed35cb01459e6ddf510ae5f5a0718a6156fcfe76f5ce3fabc30e5f20f17819c91c9d6f4d2a48b5849791ef5f2346f71e9e26b41e524d4445436bc31095e7fd4a3773b5e93f17f3aff61656af9d7d0ad176793bdda1b8adcb3c513c9e46a337e167d92fe43f8d51ca82f74dfc39dc569ee8d86bb25e8ccc2dd1878c0e95f2712bb2384ec31c715ae3aa0edb0da12564ddbaa68f3d18cbd9e03a09b71969b73d8818f39b04191903d2b44f78eb5d691b50e43af7ab0074bd668973490120989618f79a34bce5bfb854f2a4a41a1b89ba22ea3db5935ff5d9a89f04d0aeaa6897afc7ff68d782fff432d966f527d62f0bc4ecdd4775dd6def3c86b6c079757e27767595dd7fc26b441bb1d6231014aa4b53e07581409c67518b583f34167fb3834392fc5c4c79064bf5e6985d06f8299d5ec8e2e84e06caf2e2bf9b082c60d3fb0f009ee7d267485a4b92fef4322ea2856dac49fe0f2d769b2454edbdf1f5f6f5c1fa96dad6ed83e08082e87fd9e55aadda1fc2e24b47a47f7468bf438df0d14d8d2afecfaffb0ca802f210cb851fa4114f2e7a519535ca53c2bf793291350f05b726dde99597ca99fd37c91e7af738df01a2420d1119c5b118bb124889ee2b6c3ec9da051b56aeae0c8a8b69b4cb65ac576f19e1cfcd1d60b9c300c8f754ad8091d96344e8daee319759da5e74a8201258f92fde4c8ade19cbb231afa4d4d9d4dea959b1667aafd4bcf98e41c00d507b6cf7ec8bd2056ac369c777434043264b4f4b489f28d7fdcc7cafc52e50afcd1ae42522e776f80e349659c1a0a0b4c4d55b244a5ee6c82ca8734143a3e61fee72334bfff8d6d5033c5b594296508769a272a2784b44ae9a55ed2f39e25d637f574cbdf90dd0a42d2ea38ee2097152ff24c9778f100d94fc281605581e66d4e7efecb4df1c21fc3f52eb6db520616c1dee48c3e36491ac28794ad91628d00f40e17b3062ba8b4e4495d64e7468641e2f1a46dad2274c9e6a903310090f826544ca5417358c64a722dc80941799fea63c905f90bddcfd4128000ac89e0d6a1cb98b3b3868a15cb3b4ce6ca110f4c82be6a92b4b9433f8668db1ce1a2a1d0d0ef029b818a005b2db38155e3043906158a46972062ba87091bdbeb50d6c915ec9fe49358d01dcfe1eb0a56b817f73d9b8477ce2e48ef96976ed410efd4ee977cfc089c1396cbf3c54b8692f2a02bd19644664e7c9287ebb411a1eee327c53abfbd3bd83e824b8e7ab0026ad2c64506210e6c3ea49194686d6f022153cece8019af05eecac5fde17d787dfe8b20e847f3ad0f7ef8b9cb1846a578ae4ea62e84f03f28a9b92c1f39107484dcd3796071dc60401dc120b38a80e2ec418bfce4d4ebfcb093909bc1e6ef11ddef9f25497ff53b3d2f553e7e488705025ce90609cb8a3b88bbfdae25211c895eac083fa30437a2270b11822fe38274db10636bf8beb010be74c6d58a54cbe17a56ce163b30b397a2ef3931ebc5b618944a0e999f85bc705fbd88be7fa768ef17781b6d663e50b49902299d1e9b6ec4f48fe46e0f31bfacba07511c2db834890b9f340acf2bd50a39e331bebd33aeb287463bd6bc2ca69e0b25bd354fa84250483e66575bd96d2472309cb874d8fe5787dd5735bb4002f2bcae90c30903e950a867cd6dd8c9cc6704b82370b46a6437ffa212c56f4a36eac0342ee83728787a7b2e42781b370b8a6652c13dd06a12c5d357d071af36b9d1e51bfd51fdbddd53dd253fac840a04de39581c819cab26a1934e45111bb6be742a087d46f09e1c7c23c9384b1c109d592014ea23e73ff3a41dfc4d7abca3f845b9da114d3ad4c7dbd23007b9e24aa1b1b52c11e95a544b74e4ab676f0e5195003cf46282083637e3e09d8b782989e9758658c9667e53c9e8ffb3f20c440809f9684c88b3a2e9d6bbbbce90f3aa81f01a4f6eb0a44ba4111f95fd41e5dba00ad795cb7d4209eae720187a5a74dcd1b6ed252b9877cc58c41e3ba9052f7d386951b7cb00aa7866b3f8ae4fe55e6346c47ac0daf77069a072cd71983cac0545b5d503285eff6479a5eacae2523e96f58ead394cd6b6d3fb4a2a696e5617a2daf4376294d51cbc5b1a2520b61e1587c045160089ad91ba6b1cdf8520f3fe2cadb90acd042e1a630a23a4902e6f2d691f53bde312b2386f4733852a726f56c00c5fb5f2d931095d07b47870f165adfc991448537afac4c7bbc7a41d5e3cfc9ece37624545c7e3c03966196473d0a0df038cd22f8222d0da8f4b4a30d9a39543b3b5723183f6ee879add189507f3a5108bba20f489dea897255ea1dc2f2a99b26a92be9f06444b0917859b6664037d168f37bdc6defd6907bff38b7a1703e9fa895216aabdda082f2547db9657167b5dddfd0253e1581f45e73bb87892ade49022f38e7211e71528ae298e5cb5930bd7ea4fffc844d70c33132c3d30f6c91e6b3d8389d2f682166f164b9258cfc5a1e11fff6667ff4d59e5aaa2a1f287ebd9558ac2f1c4a15cb6a5a3cbc537429eccb7f904bdc2e074d284d7422356a2e3ce67affa13f2120af950e7c1beb37cfa8a9dcb96c608c40711637fcd97d0416314e4a66af95450dcf882950f94d95d0ab0f693ac60ba61d7649ef6eb0967a994ec678d77b6ea9cd9236ee6fb7f036914bfb5d11ce5872ba7ee1e8b3eeb04d272a05908c1640b15c7097d6ef120e1d3d91cd4541c57dab0ff9e9f448c7a36ddc311cebb8f74a22950f59f4f93d419059f3d73e40ee86f6414585be91e379f88635a8367c7655edca50b091c92e77719965876904d32fd32c632c949bdbf8b9e9b6eabd2c1e5bb3586e0e72a4344a79b6b95e0122ab8b56b6e4e7f3334874b6def32da5a71b7216899c5b0a9a350e1d7d65f202a0583dcbc21c65728613d6d73eea4127dde17e611efe94c3ac21d15a8e18ab3f64d2360d8d8eef49b022b1d0984ad558202f95aede0b36c8d94fe4dfe66fad539cc7b8301e28763af6494c5cd4b375eaf9e6964d88c4a7eb2ab7b27d6d6fdfbbb4b6ad9acc5486aa26c25e172cfe4cc05971fbeb82504e5d303bfdc7a806f496d4124ef05ea9ec545131e8f1ed077db0bb6619da294bfd8056df0fe178e92154b9dbf06c4fa2b74da99d4bdbc9ad2f13956306c5642abe33901a34f833d73e63d88bbef3d854c3067be6f1691a358b3194edc39318dcf5a5ed524238f0bb1fde39088b4a8ae9e90eaa5bd6bbb85661f4228c5769f639d73b71ecaee51d94d00c76cc5a88987efacec522bf39fcc767213a887a5c3d14a6470b6bdf2f07fc68e526d965cbd2e12fc78780303deb74cc847802019e2ef4805302d6aeae2ab75bd54e86ae8a837d66e1f2f877639c7bc85a83b811cefb8983b2f74abd7648a0320636d6159d9bb0121b0d5f22e1ba54eadf5df4d8cd49626202c512f92ebfd6db052db9fe3b5d99884a36ae4014f9f6515a466a575bbfe6d23d4e9ec7b99cfd70b877c70d3750733b6b30ec59a82f3e62f9cf2785bdff8591270499d4dc27c40b40e1edd6c0434612722141675b233868ca79193c1b64702bb21989042ffbe77bccf61298d38d02d03d6c91c01e6a0ca6d8d5832b2159e4dee34cebeb2fae8f94a2e2a88398af7cf7681eeae5341bc6ca4c82ccba25d8480fc3fd3c93599e84306cf46a5ca6bf69a942230324c8e6f2ba9404828dbd3ae053d3fcd1f9e7f64a76ee300458b88215e7b39c778d8da1585d03f1c19c3826df8701160116f5c98e7d68b2c084d3ea60fb09c6cd21fc6089c80fe7b437349b2f73bf3cdebab1fa66944fb29301655c39ac132577e29178952efb35c268dc479361629a1b8d2683a64aed22ff9a76843621c9869afb9c6c12e76a9f0d1595fcf75e6623e369c7180ff917b07cc15211862fb7e963b000db738564b2dcd9581191a443ad1f090f6217cf3dddc8099bc550c47ce4017bf1367998373310ecc21e8a82261d7c7338078c6160b3c5f07ac41132878197c7b5dddea22905e86ee8c26db0888353e2180c5929a3d841bf93799b4f8ba9efa6ae8e29b6c559b8fe7482b40e9794653c158305d1f39d8fcc17a723effe2fd28db13d583e997b876d4ff15a50589f4a5cab227165d4d04c4935b720ae4c24d63a13bc31afb8f12d1dc1e891a70775a5fd29f8c86fefe94c800916cbf7fa3f6d1ca626c6ea0d51b3313059dc8cafe9d3250c49d46a7c81e44deb59ae74545b117f29a14b01cda533cd950007e818144411433d9f181e41b4abb0450e126cc646c5231b03ef570b884a0bb47488f5c9e29170d6b679b21eb11836f299dcdaf1ed330206b37116a73423c981988e131bacbb17eea7310ffe40483d355af6b2127725a3776a8531873983ef00553837215574ef79e81f8317dba9b22ed5e0d2c9ebae06517424a3bc155d2403a44e6814ad1ea29509f6acd7f28b8b7653f27b295483a6212adda676c8b126fc86073be91b013b40d2fa2142fe201ccce9c36f42857f7871ecbee8a08a71227ec6e4ab89b82fd998ed9da4224dd3dc2a92d3cb0a9a6ee31cb25d7371760abaea6a9ff3cc395413f19db51b11a96cb446418f29267761c665a6d75c3e1e1c73cae1b08b56710649b81fb4b38e2907b7f6fc11afe5364071cd05ae00d378e947e0b9ce4f4b80f7bf89b052a1ea0deea6446187ae6dac74090505b1ae75868e60ca54fc76f67e13b7a851a1941541aba7ffa26114ae1648272ad611d01c13d5443494c019967c3e3db3708136ae498b9475300d229ad1564f62ff4dd160f134bb43d3188df1d2fb111d21b1016bc6b02274c821336a8f9f541b2d402abdc4b4aa16f87a0ff79c8d8b32838a916c674375382e0d88d2b1d0df19e3fc000ab0e6e38a7c7146c2259e8bd19a90962a601eebbecd518e9b3066bd034eb2f75d20c256913929683047aff2e8eda5fa033e8eb2ded968cec659ea926c2f3630a37ff95d0f96992f7382228338ca7ba7a88753d394792ed4619185c37a68d8a6e1abebef499e038655e35f39393df5984c5382ff13d7b40dbc67271d8674bda3551c3e4882d110718192b9bedd6f823392c272e80f3ea9578876a8b503aa1f46c7e3d7acaee8bb7659bf5985c643f45385c8c31b534700875f5b9f5a40a2c88dbef8544008fe26d6052c412d06dcb16b827928275520ad0a7b25d402c58f3858368e8f32ba03db3cdf25a78dfb4c3c3f6a0501e9050cab8c871c3f04f5b8b412caef5644ca70652fdd47a049c7386714dcb36215b86a4e3a32712cf0fff63d4dac878421900d35663bb9d2fbc7f9fa8ae9e9ac38aa84b453bcb4edd01cc6931cc2b5658a38e61452e9c7952b646651782fc39bc546d206dcb4f2fb9470f7b21b321aaad19a7924b78c906a1db1180dfbf3b58815821c690e21c4c67beb96b1660e570e6c69b2cb8146117a18ba3b90ce4dc1d0848912fa36e8e3591e65b4ccc052af363dc9c0caffc98fbf61d5b75ead70cf9bcda8c098a1ac9930", 0x1000}, {&(0x7f0000001440)="43c7cb6e10a3d421964b07571b290a9243b29aac9f99a190ac93837a364732b88a27f210daf37b5197a4888edd7d5366234e9ae1368ed51c188952274cd2640d1d5952404a367dc6264109c55af27576ee625b5684cc74d793000034970349140ac805116fa6e8d1f8400c2d824912b1f7a8135daa", 0x75}], 0x3, &(0x7f00000036c0)=[@rights={{0x14, 0x1, 0x1, [r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x80, 0x20000001}}, {{&(0x7f0000003740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000037c0)="38e754f356d16454e93505d7a3e095a48cfc1616f87bd92c9bad925acfdf08aba2ac1c762223a04d0ac0a91b8e2ca9637e215ae4416088b10acebbbd05d75b085e8bbee07da49d6b4a199d8b63d68c286d7251e1ac7c29d81247162ebfc06bfa8b4a00a6ebef", 0x66}], 0x1, &(0x7f0000003c40)=[@rights={{0x34, 0x1, 0x1, [r2, r4, r2, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r4, r4, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r1, r1, r3, r4]}}], 0x144, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e40)="9e578db04d2617a380b73588a676ea4faff7cc60a8179d52116eda8c9032a3990f3e7910dd3bbadf5d4a01785a9b8604570741f64690a76843ff680211abd2288544a02cfaae7a5a84828f3a498b1472d1547a5274b42a804b5dc2ad15eccf23757425bd0a09434b3acbf32c06e4d6eb48e287a4c2e076cba8859728318ed2ca4d3d05f7cc875a0f732a83b72001dc1cf1e0c99f2fe3d0394bc83a5461b9517a8eb4cc765946147a385afeaea4116e84a01b6f04a4c15c523261d2cf2745aa1fb6ebe4258feccc637cf5975e64c14da7af43bbe0b4e22770d80de06a60266b90b8b282892d274c9ef998688ed1d701a4608d8cd74cb5e767d14832f701", 0xfd}, {&(0x7f0000003f40)="fa77cd7cdbfe42f57bae2531d02cdc836dd208922892d57eb80569cd3758e2f8554e2186a47158ce8211fa4d3eee6d0754c6a52f1319915e3d7a0e98081ba83b5cbb1d41367a3f72cb1591c9a8502bca3bb70c6399d093c86081b2fd778092c1e6c68f5804c769ed5f0f596199a4edfbf6722ed8326198a8cfcf2f6b924dbaa0d06e0410112b524e4e4c4c0707fa1f98b21afbdf75a2a52f285fcd9c5cbb8766b84dd05827a287a509f71ec5f8ccbc7ded03e4c0acebe647b9fb", 0xba}, {&(0x7f0000004000)="5b4a0e2ebe532d8e65966872db2bf7a97713bf8b456b5a425e49fefb784983a9ac694a8f3a8e92237d3085c683a1ab60bc555389e7ce018a61ae636ad578e8c5b47178d13be3a60f94ab983c47482e6628af35cbc407366ba5923413ff81410d031020ba91f8503600d548d011b95368f3a6c85e7d3ef4689a8beec3deb48e4777db63e3faaf12b7b14402d84e0e392c3d0b869a4f965328ac24c87337a7c6863b4eca22", 0xa4}, {&(0x7f00000040c0)="89b074137f9509587461cf41b8b3273870a21a7b5c399be9943d3dfd396f820c13ed41f6f3d0488907185211a712654aa1b893954db64f5db3da22a5dc5246f58eeffc29b2b79a1627702e59bb339f440c5123d202cba533b1c7", 0x5a}, {&(0x7f0000004140)="12c0eec9ef362113ad282f727a4792f1b563150e05303fed0a045d857b4160fd903c38e19d6dbc287e30698586c85b2b59d9bd76f3b67b4e01d80264b137e307565e27489edbe7be69841df934381194414087686ce7def90e17707310476520afea962337080e2aaa5de5035aabbf647572ad325e71ae55b17b1979d4835e7be1066b1bb53884872c6d8565491c3bf06fd2fbc79f18154b0a450f0c7ff805fe67cc72526aa2a077996977f263bfbb9d2a5b90ed5f2f2c19e96241b1565a2490da39cba9c8719c8d5687dad7014591c3df9f9625a44b7e71016950a5af54afcdc4539cc5e02b5fabdf80f7aedfa45d5ce8b6", 0xf2}, {&(0x7f0000004240)="b75cab65b41297b932141f4b8ca40c763f83e15b2d3fd79fc3e6a420ebf350629705", 0x22}, {&(0x7f0000004280)="ba7c2d1a1701f5c6744161537e8b39110c57a414f47bf870b1", 0x19}, {0x0}, {&(0x7f00000043c0)="3537f2b5be297466fbebc84683fc4726f19bbd7d45c17d159cfd55272cffe191588ad639cc20d2ce3fc22a6640682dd4f7a135da97c5e67949f0", 0x3a}], 0x9, &(0x7f00000085c0)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x40, 0x40}}, {{&(0x7f0000008600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008980)=[{&(0x7f0000008700)}, {&(0x7f0000008740)="f2b846f08153309ebf664f2155f76f80ce8b8cc501122dc5b8c27ef145571cc3c2a760ddf5bd52a32d10c98b408a71d0277e0c867e0206495834a380b6d245a48bd7a6d9fca0b32158", 0x49}, {&(0x7f00000087c0)="c59396bed7d829e3a73edf279bc9fc75cbd82f501d62c5d4999e7296f845559d4502c17adc71cc45d5117d22a1519e00d9c8e2bd31991a7ab0845a163e", 0x3d}, {&(0x7f0000008880)}], 0x4, &(0x7f0000008b00), 0x0, 0x20000001}}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008b80)="17d5c9886e889d85d81eede5ba637b4ff3c3bcddefbbce4ea14a8f9fc91b3173d3dae4d8f14657b55ae2d9f4b3b1c0d22039e4dd348336c9a4f0eb8bbfea0873a8d18ab38c5c95def7e3c4e338648f9025fbb627c2f353dcd7fae44bacdf2aa7cd53ae20b1f4a460474ba9ea1362c32e08750341ea40a23562fda7200f120d059c62ea76e00e666eeb9ca7f7a83344a2726950f68b1362d689fb61ed7d9dba583806bc235ed7e42a32b7bfdedacd058c7b8ea1f15054c5153f73a182040e913fe84f40c3b61d17c3e8778beb01c0a9632def29f7c49a7cd729bf58", 0xdb}, {&(0x7f0000008c80)="a41233369d16cea5c42c9d41c632871d94377a66c74ce036b552511d82f174121fe59d6e78b555768fe751f7de9030fe4f72fee748925e86c769863d9584a27d36e20afc405a1460f72abe70df43492f34fc7a056028e67f3e78f475573ebbb0bcf8b95166f94af1d77fc507f7dcb5c13b4d1b8a838b2ec737de71be3205b735621eb757156d31e7ce65028b96a9287a3221db7a3f4b2c5df3826ae7111b2fb5fd91b4510a5b35fdf364e1c97947408408add4cb362758d4b8b4f3fa65e4", 0xbe}, {&(0x7f0000008d80)="cf91066c1c", 0x5}], 0x3}}], 0x5, 0x44) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 8.680700375s ago: executing program 2 (id=2292): epoll_create1(0x0) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fcntl$setown(r6, 0x8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000600)={0xe83, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc04c565d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003d80)={'sit0\x00', &(0x7f0000003dc0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x10001, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x64, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0x8, "fae3ffffe1a1"}, @timestamp_prespec={0x44, 0x2c, 0x71, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x40}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 6.89070835s ago: executing program 2 (id=2296): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x0, 0x8000, 0x5002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010006406ac10a85db1e67d000000fd094c000000060a0b04000000000000000002007371000000000c000280080002400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a5de2cb904779ecddef69799624c28ac72ca1ad5021c47e6668732a000e459a720f901a93cecba3b0fa8a5a58a67b9a8c8c76554200ddd9e713545da46305f0171b54eaebabf16f576b2ab5"], 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000400)={0x0, 0x0, 0xd10, 0x200, 0x6, "bc049758d820586a31a0cc6229b78013b1f8df"}) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x1, 0x2404c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) 5.189105045s ago: executing program 3 (id=2302): r0 = gettid() r1 = epoll_create(0x400) r2 = socket(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008a80), &(0x7f0000008ac0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000003c0)="4e03107cb63bd54fa6d8372444ffc64adeb99fa92d3b03773c01b0b417e2ffc01d49f60c064dbb896e1e0c9e6f61128a5a44378331a5f7a69b465878b62920619a10e127d2b7ac2e9c471409a23d5b091c6265f1229d3d4b40f39771378b15", 0x5f}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="43c7cb6e10a3d421964b07571b290a9243b29aac9f99a190ac93837a364732b88a27f210daf37b5197a4888edd7d5366234e9ae1368ed51c188952274cd2640d1d5952404a367dc6264109c55af27576ee625b5684cc74d793000034970349140ac805116fa6e8d1f8400c2d824912b1f7a8135daa", 0x75}], 0x3, &(0x7f00000036c0)=[@rights={{0x14, 0x1, 0x1, [r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x80, 0x20000001}}, {{&(0x7f0000003740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000037c0)="38e754f356d16454e93505d7a3e095a48cfc1616f87bd92c9bad925acfdf08aba2ac1c762223a04d0ac0a91b8e2ca9637e215ae4416088b10acebbbd05d75b085e8bbee07da49d6b4a199d8b63d68c286d7251e1ac7c29d81247162ebfc06bfa8b4a00a6ebef", 0x66}], 0x1, &(0x7f0000003c40)=[@rights={{0x34, 0x1, 0x1, [r2, r4, r2, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r4, r4, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r1, r1, r3, r4]}}], 0x144, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e40)="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", 0xfd}, {&(0x7f0000003f40)="fa77cd7cdbfe42f57bae2531d02cdc836dd208922892d57eb80569cd3758e2f8554e2186a47158ce8211fa4d3eee6d0754c6a52f1319915e3d7a0e98081ba83b5cbb1d41367a3f72cb1591c9a8502bca3bb70c6399d093c86081b2fd778092c1e6c68f5804c769ed5f0f596199a4edfbf6722ed8326198a8cfcf2f6b924dbaa0d06e0410112b524e4e4c4c0707fa1f98b21afbdf75a2a52f285fcd9c5cbb8766b84dd05827a287a509f71ec5f8ccbc7ded03e4c0acebe647b9fb", 0xba}, {&(0x7f0000004000)="5b4a0e2ebe532d8e65966872db2bf7a97713bf8b456b5a425e49fefb784983a9ac694a8f3a8e92237d3085c683a1ab60bc555389e7ce018a61ae636ad578e8c5b47178d13be3a60f94ab983c47482e6628af35cbc407366ba5923413ff81410d031020ba91f8503600d548d011b95368f3a6c85e7d3ef4689a8beec3deb48e4777db63e3faaf12b7b14402d84e0e392c3d0b869a4f965328ac24c87337a7c6863b4eca22", 0xa4}, {&(0x7f00000040c0)="89b074137f9509587461cf41b8b3273870a21a7b5c399be9943d3dfd396f820c13ed41f6f3d0488907185211a712654aa1b893954db64f5db3da22a5dc5246f58eeffc29b2b79a1627702e59bb339f440c5123d202cba533b1c7", 0x5a}, {&(0x7f0000004140)="12c0eec9ef362113ad282f727a4792f1b563150e05303fed0a045d857b4160fd903c38e19d6dbc287e30698586c85b2b59d9bd76f3b67b4e01d80264b137e307565e27489edbe7be69841df934381194414087686ce7def90e17707310476520afea962337080e2aaa5de5035aabbf647572ad325e71ae55b17b1979d4835e7be1066b1bb53884872c6d8565491c3bf06fd2fbc79f18154b0a450f0c7ff805fe67cc72526aa2a077996977f263bfbb9d2a5b90ed5f2f2c19e96241b1565a2490da39cba9c8719c8d5687dad7014591c3df9f9625a44b7e71016950a5af54afcdc4539cc5e02b5fabdf80f7aedfa45d5ce8b6", 0xf2}, {&(0x7f0000004240)="b75cab65b41297b932141f4b8ca40c763f83e15b2d3fd79fc3e6a420ebf350629705", 0x22}, {&(0x7f0000004280)="ba7c2d1a1701f5c6744161537e8b39110c57a414f47bf870b1", 0x19}, {&(0x7f00000042c0)}, {&(0x7f00000043c0)="3537f2b5be297466fbebc84683fc4726f19bbd7d45c17d159cfd55272cffe191588ad639cc20d2ce3fc22a6640682dd4f7a135da97c5e67949f0", 0x3a}], 0x9, &(0x7f00000085c0)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x40, 0x40}}, {{&(0x7f0000008600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008980)=[{&(0x7f0000008700)}, {&(0x7f0000008740)="f2b846f08153309ebf664f2155f76f80ce8b8cc501122dc5b8c27ef145571cc3c2a760ddf5bd52a32d10c98b408a71d0277e0c867e0206495834a380b6d245a48bd7a6d9fca0b32158", 0x49}, {&(0x7f00000087c0)="c59396bed7d829e3a73edf279bc9fc75cbd82f501d62c5d4999e7296f845559d4502c17adc71cc45d5117d22a1519e00d9c8e2bd31991a7ab0845a163e", 0x3d}, {&(0x7f0000008880)}], 0x4, &(0x7f0000008b00), 0x0, 0x20000001}}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008b80)="17d5c9886e889d85d81eede5ba637b4ff3c3bcddefbbce4ea14a8f9fc91b3173d3dae4d8f14657b55ae2d9f4b3b1c0d22039e4dd348336c9a4f0eb8bbfea0873a8d18ab38c5c95def7e3c4e338648f9025fbb627c2f353dcd7fae44bacdf2aa7cd53ae20b1f4a460474ba9ea1362c32e08750341ea40a23562fda7200f120d059c62ea76e00e666eeb9ca7f7a83344a2726950f68b1362d689fb61ed7d9dba583806bc235ed7e42a32b7bfdedacd058c7b8ea1f15054c5153f73a182040e913fe84f40c3b61d17c3e8778beb01c0a9632def29f7c49a7cd729bf58", 0xdb}, {&(0x7f0000008c80)="a41233369d16cea5c42c9d41c632871d94377a66c74ce036b552511d82f174121fe59d6e78b555768fe751f7de9030fe4f72fee748925e86c769863d9584a27d36e20afc405a1460f72abe70df43492f34fc7a056028e67f3e78f475573ebbb0bcf8b95166f94af1d77fc507f7dcb5c13b4d1b8a838b2ec737de71be3205b735621eb757156d31e7ce65028b96a9287a3221db7a3f4b2c5df3826ae7111b2fb5fd91b4510a5b35fdf364e1c97947408408add4cb362758d4b8b4f3fa65e4", 0xbe}, {&(0x7f0000008d80)="cf91066c1c", 0x5}], 0x3}}], 0x5, 0x44) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 5.124861454s ago: executing program 2 (id=2303): epoll_create1(0x0) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fcntl$setown(r6, 0x8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000600)={0xe83, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc04c565d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003d80)={'sit0\x00', &(0x7f0000003dc0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x10001, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x64, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0x8, "fae3ffffe1a1"}, @timestamp_prespec={0x44, 0x2c, 0x71, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x40}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 3.710345233s ago: executing program 2 (id=2305): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 3.709905191s ago: executing program 2 (id=2306): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r5, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}) socket$packet(0x11, 0x3, 0x300) 3.133081428s ago: executing program 3 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180003000000800000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff83, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000040000000e00000008400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000086d56995d578d076d1bfddcdf3016a1a6ea5003cfef8d7f56b69782f41f79585cbb07d28e620380096745634dfe790a18ea3e771de50db1da3e8010a61e98923d9d6d87e49756ad83062682c80a6303fb279121db03d0f02476dfc9b4cb52cc8b18002b362380bdc2f0e87854308bd464b3dda4deb437673b0c39cfd31a8e71ea768008561c924ec8955e3c00b55f493f8846f88c86114c60e02ee70b4e586b4"], 0x50) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000300)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 2.318543208s ago: executing program 3 (id=2310): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4004000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2404c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2.280792502s ago: executing program 1 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'digest_null-generic\x00'}}}, 0xe0}}, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41c0004}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x18}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xab}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80000) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 2.19335127s ago: executing program 1 (id=2311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000180)='./file0\x00', 0xccc05, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffff, 0x4, 0x0, 0x2240, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='smaps\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_io_uring_setup(0xeed, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, 0x0) r10 = syz_usb_connect$cdc_ncm(0x4, 0xee, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x2, 0x1, 0x1c, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "99"}, {0x5, 0x24, 0x0, 0xa4fc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9bb, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x542e, 0x38}, [@mdlm_detail={0x59, 0x24, 0x13, 0x24, "4051255234faf51dacce7f9e57b8ea058f40d5b6a786e1bd45cf9a91c0a45550e161fbb96dfb232de7eae9cd09d15f10b6339803bcd3a0b1f624b274e956bfd23e14d1618aae76a9eeeae56934e9920e6cd3982d89"}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x7f, 0x1, 0x9, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x5a}, @country_functional={0x6, 0x24, 0x7, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfef9, 0x6, 0x5}, @dmm={0x7, 0x24, 0x14, 0xda, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x1, 0xf}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x7, 0x3, 0x8, 0xff, 0x9}, 0x3c, &(0x7f0000000240)={0x5, 0xf, 0x3c, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0xd0, 0xf0f, 0xa, [0x3f00, 0xff01a7]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x4, 0xc}]}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc06}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "1180d5747f8b7be796e63b66e4d7e89b6e243a16b1e1d100f9578a941304b3c0477c3c4681c019120e5594df8fc2aa03a01e3c7eef2f70b69011f50e868936e26b667fff3f7f27e09300ba6f7b73"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0xa2, &(0x7f0000000640)=@string={0xa2, 0x3, "6663b6fa7dfc3deca2f370b3ee3c492326aca52fefeb2ac88e42cdda53c2b2f1ab08ea4eda7fa0ff252d9d3998abc8810bdb233033a0a70a3b44707641f9ac3a971be280af7f1e4ad35ceebf4257fc7b768c0f55d1bc6e53694d0a642c2b8fa6bcecf8f47673dc67ac224f669faf1c3d2a1f008bf1385f6bfd4b82d6cba7808cd0daf5b1e836303f009f21c6d451d7ff72738c1ac01d623bc7425ee7807ac7bf"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x500a}}, {0x8c, &(0x7f0000000840)=@string={0x8c, 0x3, "574801e104763bb05870e3366a9378ca23bc4728ee7d6ed63eff54164960481882196c31827bfebf205c109a6820f54f9592bc7bdab924e1e0ac0709c2b1f5786ca2b0f77d31aac10510b8823e88b2419deca57c07cff9725ea34b410d82ee79afa4669b33370b57187004c8a86b22e6f3afd4354fdfb2b831443c9f98057191b8e54cb9212d21e414f3"}}, {0x15, &(0x7f0000000800)=@string={0x15, 0x3, "164dd8f15db8bc00d3338ffe232fc4aab0c94b"}}, {0xc9, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write(r10, 0x6, 0x57, &(0x7f0000000a80)="d3c0c4be4bdb65de9605f7e437d2e0eeac8a58cfd88102843fcee2a8ccb4829ba67f412db4c4e5f7cd197a5187ab5465f12bb787cbcbf1ebb8aeec8b658555591892fa9a67c6a228257d25ce045ee5197ea27b16a008c7") getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) sendto$inet6(r7, 0x0, 0x5c4, 0x0, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.908198775s ago: executing program 2 (id=2312): epoll_create1(0x0) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) fcntl$setown(r6, 0x8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000600)={0xe83, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc04c565d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003d80)={'sit0\x00', &(0x7f0000003dc0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x10001, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x64, 0x0, 0xfe, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0x8, "fae3ffffe1a1"}, @timestamp_prespec={0x44, 0x2c, 0x71, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x40}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 1.508934122s ago: executing program 1 (id=2315): r0 = gettid() r1 = epoll_create(0x400) r2 = socket(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008a80), &(0x7f0000008ac0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000003c0)="4e03107cb63bd54fa6d8372444ffc64adeb99fa92d3b03773c01b0b417e2ffc01d49f60c064dbb896e1e0c9e6f61128a5a44378331a5f7a69b465878b62920619a10e127d2b7ac2e9c471409a23d5b091c6265f1229d3d4b40f39771378b15", 0x5f}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="43c7cb6e10a3d421964b07571b290a9243b29aac9f99a190ac93837a364732b88a27f210daf37b5197a4888edd7d5366234e9ae1368ed51c188952274cd2640d1d5952404a367dc6264109c55af27576ee625b5684cc74d793000034970349140ac805116fa6e8d1f8400c2d824912b1f7a8135daa", 0x75}], 0x3, &(0x7f00000036c0)=[@rights={{0x14, 0x1, 0x1, [r2, r3]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x80, 0x20000001}}, {{&(0x7f0000003740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000037c0)="38e754f356d16454e93505d7a3e095a48cfc1616f87bd92c9bad925acfdf08aba2ac1c762223a04d0ac0a91b8e2ca9637e215ae4416088b10acebbbd05d75b085e8bbee07da49d6b4a199d8b63d68c286d7251e1ac7c29d81247162ebfc06bfa8b4a00a6ebef", 0x66}], 0x1, &(0x7f0000003c40)=[@rights={{0x34, 0x1, 0x1, [r2, r4, r2, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r4, r4, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r1, r1, r3, r4]}}], 0x144, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e40)="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", 0xfd}, {&(0x7f0000003f40)="fa77cd7cdbfe42f57bae2531d02cdc836dd208922892d57eb80569cd3758e2f8554e2186a47158ce8211fa4d3eee6d0754c6a52f1319915e3d7a0e98081ba83b5cbb1d41367a3f72cb1591c9a8502bca3bb70c6399d093c86081b2fd778092c1e6c68f5804c769ed5f0f596199a4edfbf6722ed8326198a8cfcf2f6b924dbaa0d06e0410112b524e4e4c4c0707fa1f98b21afbdf75a2a52f285fcd9c5cbb8766b84dd05827a287a509f71ec5f8ccbc7ded03e4c0acebe647b9fb", 0xba}, {&(0x7f0000004000)="5b4a0e2ebe532d8e65966872db2bf7a97713bf8b456b5a425e49fefb784983a9ac694a8f3a8e92237d3085c683a1ab60bc555389e7ce018a61ae636ad578e8c5b47178d13be3a60f94ab983c47482e6628af35cbc407366ba5923413ff81410d031020ba91f8503600d548d011b95368f3a6c85e7d3ef4689a8beec3deb48e4777db63e3faaf12b7b14402d84e0e392c3d0b869a4f965328ac24c87337a7c6863b4eca22", 0xa4}, {&(0x7f00000040c0)="89b074137f9509587461cf41b8b3273870a21a7b5c399be9943d3dfd396f820c13ed41f6f3d0488907185211a712654aa1b893954db64f5db3da22a5dc5246f58eeffc29b2b79a1627702e59bb339f440c5123d202cba533b1c7", 0x5a}, {&(0x7f0000004140)="12c0eec9ef362113ad282f727a4792f1b563150e05303fed0a045d857b4160fd903c38e19d6dbc287e30698586c85b2b59d9bd76f3b67b4e01d80264b137e307565e27489edbe7be69841df934381194414087686ce7def90e17707310476520afea962337080e2aaa5de5035aabbf647572ad325e71ae55b17b1979d4835e7be1066b1bb53884872c6d8565491c3bf06fd2fbc79f18154b0a450f0c7ff805fe67cc72526aa2a077996977f263bfbb9d2a5b90ed5f2f2c19e96241b1565a2490da39cba9c8719c8d5687dad7014591c3df9f9625a44b7e71016950a5af54afcdc4539cc5e02b5fabdf80f7aedfa45d5ce8b6", 0xf2}, {&(0x7f0000004240)="b75cab65b41297b932141f4b8ca40c763f83e15b2d3fd79fc3e6a420ebf350629705", 0x22}, {&(0x7f0000004280)="ba7c2d1a1701f5c6744161537e8b39110c57a414f47bf870b1", 0x19}, {&(0x7f00000042c0)}, {&(0x7f00000043c0)="3537f2b5be297466fbebc84683fc4726f19bbd7d45c17d159cfd55272cffe191588ad639cc20d2ce3fc22a6640682dd4f7a135da97c5e67949f0", 0x3a}], 0x9, &(0x7f00000085c0)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x40, 0x40}}, {{&(0x7f0000008600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008980)=[{&(0x7f0000008700)}, {&(0x7f0000008740)="f2b846f08153309ebf664f2155f76f80ce8b8cc501122dc5b8c27ef145571cc3c2a760ddf5bd52a32d10c98b408a71d0277e0c867e0206495834a380b6d245a48bd7a6d9fca0b32158", 0x49}, {&(0x7f00000087c0)="c59396bed7d829e3a73edf279bc9fc75cbd82f501d62c5d4999e7296f845559d4502c17adc71cc45d5117d22a1519e00d9c8e2bd31991a7ab0845a163e", 0x3d}, {&(0x7f0000008880)}], 0x4, &(0x7f0000008b00), 0x0, 0x20000001}}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008b80)="17d5c9886e889d85d81eede5ba637b4ff3c3bcddefbbce4ea14a8f9fc91b3173d3dae4d8f14657b55ae2d9f4b3b1c0d22039e4dd348336c9a4f0eb8bbfea0873a8d18ab38c5c95def7e3c4e338648f9025fbb627c2f353dcd7fae44bacdf2aa7cd53ae20b1f4a460474ba9ea1362c32e08750341ea40a23562fda7200f120d059c62ea76e00e666eeb9ca7f7a83344a2726950f68b1362d689fb61ed7d9dba583806bc235ed7e42a32b7bfdedacd058c7b8ea1f15054c5153f73a182040e913fe84f40c3b61d17c3e8778beb01c0a9632def29f7c49a7cd729bf58", 0xdb}, {&(0x7f0000008c80)="a41233369d16cea5c42c9d41c632871d94377a66c74ce036b552511d82f174121fe59d6e78b555768fe751f7de9030fe4f72fee748925e86c769863d9584a27d36e20afc405a1460f72abe70df43492f34fc7a056028e67f3e78f475573ebbb0bcf8b95166f94af1d77fc507f7dcb5c13b4d1b8a838b2ec737de71be3205b735621eb757156d31e7ce65028b96a9287a3221db7a3f4b2c5df3826ae7111b2fb5fd91b4510a5b35fdf364e1c97947408408add4cb362758d4b8b4f3fa65e4", 0xbe}, {&(0x7f0000008d80)="cf91066c1c", 0x5}], 0x3}}], 0x5, 0x44) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.419938255s ago: executing program 3 (id=2316): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d12, &(0x7f0000000040)) 1.349744157s ago: executing program 3 (id=2318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffff00000030000000000088907800000000ffffffff03009078000300074500040000000000000000007f000001ac141400"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) rt_sigaction(0x11, &(0x7f0000000000)={&(0x7f0000000180)="36d2d8f2438395ff1f965a00c4c1185c840561ee00007b7bc4816a512425160000006f6aa1c463f962d6d9e5d054060aa89ef3aef30f6fee640f2a6cda00c412c12e1129", 0x88000003, 0x0}, 0x0, 0x8, &(0x7f0000000100)) close(r2) write$P9_RMKDIR(r3, &(0x7f0000000200)={0x14}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f00000004c0)='nfsd\x00', 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="a9340000000000000000010000000861f7767a8b"], 0x1c}}, 0x0) 369.494964ms ago: executing program 0 (id=2320): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xca, &(0x7f00000000c0)={{0xa, 0x1000, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000140)={0x0, 0xffffffff, 0x3, 0x83c, 0x0, [0x0, 0x0], [0x900, 0x4, 0x5, 0x200], [0x4, 0x80, 0x15, 0x11a4], [0xc, 0x0, 0x5, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000040)) 369.127035ms ago: executing program 0 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'digest_null-generic\x00'}}}, 0xe0}}, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41c0004}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x18}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80000) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 260.726ms ago: executing program 0 (id=2322): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x20) symlinkat(&(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (fail_nth: 2) 129.894026ms ago: executing program 0 (id=2323): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xbb8, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x5}, 0x3, 0xa, 0xc, 0x9, 0x19, 'syz1\x00', "23638784c81a8154e636db0085c227db4713ddfe17d35a8fe065dc3a885506ef", "0fa0dcc6f1622240cab7320eb9b8ea1ea72e3edd96628268ec4a97eddd96bd39", [{0x7fff, 0x9, {0x3, 0x7}}, {0x0, 0x6, {0x2, 0x6}}, {0x1, 0x9e, {0x1, 0xff}}, {0x9, 0x3c, {0x3, 0x5}}, {0x28e, 0x2, {0x1, 0x800}}, {0xfff9, 0x0, {0x3, 0xfffffe00}}, {0xff, 0x199f, {0x1, 0x7}}, {0x8, 0x7, {0x1, 0xe}}, {0x7, 0x5, {0x3, 0x2}}, {0x707, 0x7f, {0x3, 0xfffffff9}}, {0x4, 0x734, {0x2, 0xffff}}, {0x6, 0x2, {0x3, 0x9}}, {0x3391, 0x401, {0x0, 0x2}}, {0x6, 0x10}, {0x6, 0x1, {0x2, 0x1}}, {0x8, 0x80, {0x1, 0x2}}, {0x200, 0x8, {0x3, 0x3b800000}}, {0x9, 0x9, {0x3, 0x9}}, {0x30, 0x4, {0x2, 0xd}}, {0x7, 0xfe00, {0x3, 0x3}}, {0x3, 0x1ff, {0x2}}, {0x4, 0xfffc, {0x2, 0x623}}, {0x2, 0xf32a, {0x1, 0x4dc3}}, {0x1, 0x6, {0x1, 0x7f}}, {0x4, 0xda21, {0x0, 0x21f}}, {0xffff, 0x6, {0x3, 0x2}}, {0x0, 0x2, {0x0, 0x80000000}}, {0x9, 0x8, {0x2, 0x400}}, {0x4, 0x2, {0x1, 0x17}}, {0xc, 0x9f8, {0x0, 0x1}}, {0x9, 0x3, {0x2, 0x6}}, {0x7, 0x2, {0x0, 0x9b}}, {0x9, 0xf, {0x1, 0xfffff734}}, {0x100, 0x4, {0x2, 0x6}}, {0x2cf5, 0xbe02, {0x3, 0x1e}}, {0x40, 0x6, {0x0, 0x4}}, {0xf47, 0x8001, {0x2, 0x7}}, {0x6, 0xeca3, {0x2, 0x6}}, {0x7, 0xb, {0x3, 0x200}}, {0x9, 0xfeff, {0x3, 0x80000001}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x2, 0x6, 0xf, 0x421, 0x1b, 'syz1\x00', "6078b11422454894c66f2a476f83d4c54c3f7ad6a7f3bb1f6862b735df59941f", "5f2e615e91dae00e10d98a2a35506c210746c15a18442739d21ce189bee4af67", [{0xfff, 0x1, {0x1, 0x3}}, {0x7, 0x1, {0x2, 0xe7}}, {0x2, 0x101, {0x0, 0x2}}, {0xd1, 0xe34, {0x1, 0x8000}}, {0x800, 0x7, {0x2, 0x7}}, {0x4d1, 0xffff, {0x1, 0x4}}, {0x53bc, 0x5, {0x0, 0x4}}, {0xff6c, 0x6, {0x2, 0x5}}, {0x6, 0x9, {0x2, 0x6}}, {0xf000, 0x8, {0x2, 0x8}}, {0x0, 0x4, {0x2, 0x3}}, {0x8, 0x1, {0x1, 0x6}}, {0xfff8, 0xfff8, {0x1}}, {0x4, 0x2, {0x2}}, {0x1, 0xa, {0x2, 0x77}}, {0x8, 0x100, {0x1, 0x36c7}}, {0x361a, 0x1, {0x0, 0x842f}}, {0x3573, 0xfff8, {0x3, 0x753a}}, {0x6, 0xfffb, {0x2, 0x100}}, {0x7, 0xfff3, {0x3}}, {0x9, 0x4, {0x1, 0xffff}}, {0x2, 0x10, {0x4, 0xb}}, {0x38, 0x9, {0x0, 0x9}}, {0x81, 0x8, {0x0, 0x1}}, {0x7, 0xb, {0x1, 0x4839}}, {0xf, 0x8}, {0x9, 0x9, {0x1}}, {0x9, 0x2, {0x0, 0xfffffffc}}, {0x7, 0x2, {0x6db149cb36eb25b2, 0xab}}, {0x400, 0x8000, {0x2, 0x8}}, {0x401, 0x7, {0x1, 0x9}}, {0xfffd, 0x2, {0x1, 0xffffff8a}}, {0x2, 0x1a, {0x0, 0x5}}, {0x4, 0x4, {0x1, 0x2}}, {0x600, 0x0, {0x2, 0x40}}, {0xfff, 0x9, {0x1, 0xfffffff8}}, {0x1, 0xc, {0x3, 0xfffffff8}}, {0x1, 0x3, {0x2, 0x3}}, {0xe, 0xcc3, {0x2, 0x63}}, {0x3, 0x1, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x2d0}, 0x0, 0xc4, 0xfffa, 0x0, 0xa, 'syz1\x00', "2f466b51ebf1ab23748136800b65502deab66f6f2c0b03e33fbc159422df3460", "fa942efcca1bb18270bdbcf23acff0e8fd6735aa3f79aae78a8e74c7e49f03c0", [{0x8001, 0x9526, {0x0, 0x4}}, {0x8, 0xf8ed, {0x3, 0x4}}, {0x6, 0xffff, {0x3, 0x2}}, {0xfffa, 0xa, {0x0, 0x6}}, {0x7, 0x5, {0x0, 0x7}}, {0x6, 0x0, {0x0, 0xf33}}, {0xb, 0xf786, {0x0, 0x7fffffff}}, {0x8, 0x3, {0x3}}, {0x4, 0x67, {0x3, 0x8}}, {0xc8f, 0x0, {0x0, 0x10001}}, {0x200, 0x100, {0x2, 0x10}}, {0x3, 0xfff0, {0x1, 0x1}}, {0x40, 0x4, {0x1, 0x1000}}, {0x4, 0x7, {0x0, 0x8000}}, {0x0, 0x1ff, {0x0, 0x4}}, {0x6, 0x2, {0x2, 0x790}}, {0x6, 0x7, {0x0, 0x1a8}}, {0xf, 0x1000, {0x1}}, {0x0, 0x6, {0x2}}, {0x5ac, 0x396e, {0x1}}, {0xde67, 0x65, {0x3, 0xfffffff8}}, {0x9, 0x200, {0x3, 0xfba}}, {0xc664, 0x0, {0x3, 0x7}}, {0xe, 0x1ff, {0x3, 0xf}}, {0x1, 0x7, {0x3, 0xfffffffd}}, {0xad, 0x6, {0x1, 0x3}}, {0x7, 0xfffa, {0x2, 0x4}}, {0x8466, 0x0, {0x3, 0xdf}}, {0xb, 0x7, {0x3, 0x800}}, {0x7, 0xc1, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x90000000}}, {0xc8, 0x9, {0x3, 0x8}}, {0x8d2, 0x7, {0x3, 0x1}}, {0x3, 0x7fff, {0x2, 0x7}}, {0x9, 0x101, {0x2, 0xe}}, {0x3, 0x100, {0x2, 0x1}}, {0x0, 0x8, {0x1, 0x9}}, {0x114, 0x3, {0x0, 0xffffffff}}, {0x8, 0x2, {0x1, 0x6}}, {0x89, 0x5, {0x3, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x80000001}, 0x2, 0xf7, 0x0, 0x5, 0x5, 'syz1\x00', "52e42b862ab34b3bdf0928042431f2581f6e331677849521aa106c9a463fc69c", "0610629f70e07d5dc8d3902e1425ddda4d453aa3dcf2c954d0e775e261ebf9e5", [{0x5, 0xbcf3, {0x3, 0x5}}, {0x9f30, 0xfff9, {0x0, 0xff}}, {0xc51, 0x28, {0x1, 0x7}}, {0x800, 0x8001, {0x1}}, {0x4, 0x4a, {0x2, 0x4}}, {0x8, 0x1, {0x2, 0x7}}, {0xade0, 0x5b7, {0x1, 0x1ff00}}, {0x2, 0x8001, {0x0, 0x3}}, {0x5, 0x9, {0x0, 0x3ad}}, {0x2, 0xb, {0x1, 0x8}}, {0x3, 0xb7d, {0x0, 0x9}}, {0xc, 0x8, {0x1, 0x1}}, {0x5d, 0x7, {0x3, 0x1}}, {0x4, 0x5, {0x0, 0x9}}, {0x5, 0x0, {0x2, 0x1}}, {0x1, 0x5, {0x3, 0x7}}, {0x7, 0x800, {0x0, 0x2e}}, {0x9, 0x7f, {0x2, 0x6}}, {0x4, 0x7f, {0x3, 0x1}}, {0x6, 0x68, {0x0, 0x3f46}}, {0x5, 0x84, {0x0, 0x2}}, {0x101, 0xfff0, {0x3, 0x5}}, {0x800, 0x9be, {0x2, 0x1}}, {0x9, 0x5, {0x3, 0x5}}, {0x3, 0x1, {0x2, 0x4}}, {0x7, 0x0, {0x2, 0x7f}}, {0x6, 0x8, {0x0, 0x6}}, {0xffad, 0x5, {0x0, 0xf}}, {0x7ff, 0x47, {0x3, 0x1}}, {0x8, 0x7, {0x3, 0x4}}, {0x8, 0x5, {0x3, 0x210100dc}}, {0x8, 0x1, {0x1, 0x800}}, {0x5, 0x7ff, {0x2, 0x65f}}, {0x9, 0x9, {0x0, 0x2}}, {0xe, 0xb1, {0x2, 0x8000}}, {0xfffc, 0x1, {0x1, 0xa99b}}, {0x2, 0x579, {0x2, 0xdb8e}}, {0x1, 0x0, {0x3, 0x2}}, {0x0, 0x8, {0x1, 0x2}}, {0xc, 0x59af, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0xa, 0x4, 0x9, 0x5, 0x19, 'syz0\x00', "87468fa1ff6bf9caed1330d1f0dc52ad7eeb0639931f40f191d5c7aa21e8fa6d", "cbdd2137a5989fb43e96b50057e355ad1751ba0491f5cac51263f7b3d17b5bc2", [{0xf8, 0xe}, {0xffe0, 0x8, {0x2, 0x8}}, {0xf8, 0xde89, {0x0, 0x800}}, {0x3, 0xb9d0, {0x3}}, {0x8, 0x0, {0x0, 0x1}}, {0x9, 0x4, {0x2, 0x60000000}}, {0xfff, 0xd4, {0x2, 0x318e}}, {0xc100, 0x7, {0x3, 0x6}}, {0x916, 0xffff, {0x3, 0xc0a6}}, {0x2, 0x9, {0x0, 0x3}}, {0x1ff, 0x8, {0x1, 0x3}}, {0x40, 0x2cc, {0x0, 0x7f}}, {0x2, 0xfffc, {0x2, 0xf}}, {0x5, 0x8, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0x8}}, {0x1, 0x7, {0x0, 0x8}}, {0x4, 0x101, {0x0, 0x7ff}}, {0x9, 0x2, {0x0, 0x9}}, {0xb6, 0xd, {0x1, 0x7}}, {0x400, 0x7f, {0x0, 0xd}}, {0x1, 0x401, {0x3, 0x1}}, {0x443e, 0xc98, {0x1, 0x9}}, {0x8, 0x8, {0x1, 0xa}}, {0x1, 0x1000, {0x2, 0x40}}, {0x1, 0x8, {0x1, 0x8}}, {0x1, 0x4, {0x0, 0x101}}, {0x5, 0xf801, {0x0, 0x1}}, {0xa31, 0xfffa, {0x3, 0xfff}}, {0x7, 0x7, {0x3, 0x7fff}}, {0xe, 0xfffc, {0x2, 0x6}}, {0x1, 0x433, {0x2, 0xcb}}, {0x0, 0xfbdd, {0x2, 0x9}}, {0x2, 0x3, {0x0, 0x73e}}, {0x6, 0x8, {0x3, 0x2}}, {0x4fbd, 0x9, {0x1, 0x8}}, {0x3, 0xd, {0x2, 0xffff}}, {0x1, 0x1, {0x1, 0x4}}, {0x3, 0x40, {0x3, 0x2}}, {0xf71, 0xb, {0x3, 0x1}}, {0x5, 0x9, {0x0, 0xffffffff}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\a'], 0x24}}, 0x0) syz_io_uring_setup(0x174a, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 69.939361ms ago: executing program 3 (id=2324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000180)='./file0\x00', 0xccc05, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffff, 0x4, 0x0, 0x2240, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='smaps\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_io_uring_setup(0xeed, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, 0x0) r10 = syz_usb_connect$cdc_ncm(0x4, 0xee, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x2, 0x1, 0x1c, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "99"}, {0x5, 0x24, 0x0, 0xa4fc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9bb, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x542e, 0x38}, [@mdlm_detail={0x59, 0x24, 0x13, 0x24, "4051255234faf51dacce7f9e57b8ea058f40d5b6a786e1bd45cf9a91c0a45550e161fbb96dfb232de7eae9cd09d15f10b6339803bcd3a0b1f624b274e956bfd23e14d1618aae76a9eeeae56934e9920e6cd3982d89"}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x7f, 0x1, 0x9, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x5a}, @country_functional={0x6, 0x24, 0x7, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfef9, 0x6, 0x5}, @dmm={0x7, 0x24, 0x14, 0xda, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x1, 0xf}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x7, 0x3, 0x8, 0xff, 0x9}, 0x3c, &(0x7f0000000240)={0x5, 0xf, 0x3c, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0xd0, 0xf0f, 0xa, [0x3f00, 0xff01a7]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x4, 0xc}]}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc06}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "1180d5747f8b7be796e63b66e4d7e89b6e243a16b1e1d100f9578a941304b3c0477c3c4681c019120e5594df8fc2aa03a01e3c7eef2f70b69011f50e868936e26b667fff3f7f27e09300ba6f7b73"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0xa2, &(0x7f0000000640)=@string={0xa2, 0x3, "6663b6fa7dfc3deca2f370b3ee3c492326aca52fefeb2ac88e42cdda53c2b2f1ab08ea4eda7fa0ff252d9d3998abc8810bdb233033a0a70a3b44707641f9ac3a971be280af7f1e4ad35ceebf4257fc7b768c0f55d1bc6e53694d0a642c2b8fa6bcecf8f47673dc67ac224f669faf1c3d2a1f008bf1385f6bfd4b82d6cba7808cd0daf5b1e836303f009f21c6d451d7ff72738c1ac01d623bc7425ee7807ac7bf"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x500a}}, {0x8c, &(0x7f0000000840)=@string={0x8c, 0x3, "574801e104763bb05870e3366a9378ca23bc4728ee7d6ed63eff54164960481882196c31827bfebf205c109a6820f54f9592bc7bdab924e1e0ac0709c2b1f5786ca2b0f77d31aac10510b8823e88b2419deca57c07cff9725ea34b410d82ee79afa4669b33370b57187004c8a86b22e6f3afd4354fdfb2b831443c9f98057191b8e54cb9212d21e414f3"}}, {0x16, &(0x7f0000000800)=@string={0x16, 0x3, "164dd8f15db8bc00d3338ffe232fc4aab0c94b1d"}}, {0xc9, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write(r10, 0x6, 0x57, &(0x7f0000000a80)="d3c0c4be4bdb65de9605f7e437d2e0eeac8a58cfd88102843fcee2a8ccb4829ba67f412db4c4e5f7cd197a5187ab5465f12bb787cbcbf1ebb8aeec8b658555591892fa9a67c6a228257d25ce045ee5197ea27b16a008c7") getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) sendto$inet6(r7, 0x0, 0x5c4, 0x0, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 69.465182ms ago: executing program 0 (id=2325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f00000003c0)=0x821) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(0x0, r4) prctl$PR_GET_TIMERSLACK(0x1e) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000000fffff7ff1f"], 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000140)=[@enter_looper, @acquire_done], 0x800, 0x0, &(0x7f0000001600)="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"}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e6844a50c1901a74755126b71e8565b9e3ef93c32dbc227d405505d6daadca7cf8667f7a2bd4c7dadb0f47dea9d9b7f664e9138004ef770485ff19de418a8701e50cadf0db6cb2e2f2ce7769660451308df001e4e0f17228807b5a240cf07cab9b663f75b34e739045f8068038165fca622b95731565e64525b107849f80aeb8edff2", 0xf7}, {&(0x7f0000000100)}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa06f48f9f5db4b57ab6ddc4780a7dd7d2a1b9e0c6a147ca39732aba5ae5a73e678410320baeb434c0685ba7cbb6d1fe8c6a7e42c6b15c5133c37fdda8377847749eb5c0241d46b05eabaabd79564a7abf979190cd266e6ebdfcf8cd660a7e59609b120271d81bbf9a5da4e12122998a57e09b978aa7c111c3999225611f51832ed8d8d4d77a58513da8873fad507fa2ee009852f29cf3e5051e946cf3b0debb21ed324997a2c2a0afc8db3aa105b720a3ce80cccf902f28037395fa9eb74d97101dd2e05707747eb5b", 0xdb}, {&(0x7f0000000fc0)="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", 0x635}], 0x4}}], 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$nl_netfilter(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 0s ago: executing program 0 (id=2326): r0 = socket(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17c) sendmsg$nl_route_sched(r1, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x400000, 0x0, 0xffffffffffffffff}}}, 0x28) socket(0x200000100000011, 0x3, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, 0xee01, r5) setreuid(0x0, r4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[], 0x10) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) select(0x40, &(0x7f0000000180)={0x4, 0x1000, 0xa95f, 0xffffffffffffffff, 0xff, 0x5, 0x4, 0x1}, &(0x7f0000000200)={0x10, 0x4, 0x5, 0x3, 0x1ff, 0x1, 0x3, 0x2}, &(0x7f0000000240)={0xa, 0x9, 0x7, 0xffffffffffffffff, 0x2, 0xfffffffffffff800, 0x0, 0x702b}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @rand_addr=0x64010100, 0x0, 0x0, 'lc\x00', 0x1, 0x7, 0xfffffffe}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 0 inactive_file:41656 isolated_file:0 [ 436.565408][T10820] unevictable:768 dirty:768 writeback:0 [ 436.565408][T10820] slab_reclaimable:4742 slab_unreclaimable:51110 [ 436.565408][T10820] mapped:17541 shmem:912 pagetables:826 [ 436.565408][T10820] sec_pagetables:323 bounce:0 [ 436.565408][T10820] kernel_misc_reclaimable:0 [ 436.565408][T10820] free:85922 free_pcp:1638 free_cma:0 [ 436.632350][T10820] Node 0 active_anon:96kB inactive_anon:212kB active_file:76kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5816kB dirty:88kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9400kB pagetables:1552kB sec_pagetables:1224kB all_unreclaimable? no [ 436.643070][T10820] Node 1 active_anon:10184kB inactive_anon:556kB active_file:36040kB inactive_file:166512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64380kB dirty:2988kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1632kB pagetables:1772kB sec_pagetables:68kB all_unreclaimable? no [ 436.657497][T10820] Node 0 DMA free:816kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:12kB free_cma:0kB [ 436.667525][T10820] lowmem_reserve[]: 0 273 0 0 0 [ 436.669271][T10820] Node 0 DMA32 free:21088kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:592kB active_file:108kB inactive_file:4kB unevictable:1536kB writepending:88kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:4452kB local_pcp:32kB free_cma:0kB [ 436.679179][T10820] lowmem_reserve[]: 0 0 0 0 0 [ 436.680896][T10820] Node 1 DMA32 free:321348kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:10184kB inactive_anon:556kB active_file:36040kB inactive_file:166512kB unevictable:1536kB writepending:2988kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:2616kB local_pcp:96kB free_cma:0kB [ 436.691140][T10820] lowmem_reserve[]: 0 0 0 0 0 [ 436.692914][T10820] Node 0 DMA: 0*4kB 9*8kB (U) 12*16kB (U) 16*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 776kB [ 436.697574][T10820] Node 0 DMA32: 123*4kB (UMEH) 42*8kB (UMEH) 53*16kB (UMEH) 108*32kB (UMEH) 34*64kB (UMEH) 19*128kB (UMEH) 7*256kB (UMEH) 11*512kB (MEH) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 21260kB [ 436.704221][T10820] Node 1 DMA32: 518*4kB (UME) 744*8kB (UME) 568*16kB (UME) 536*32kB (UME) 267*64kB (UME) 110*128kB (UME) 64*256kB (UME) 18*512kB (UM) 13*1024kB (UM) 14*2048kB (UM) 46*4096kB (UM) = 321432kB [ 436.711216][T10820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.714660][T10820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.718303][T10820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.721611][T10820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.724924][T10820] 52370 total pagecache pages [ 436.726655][T10820] 787 pages in swap cache [ 436.728493][T10820] Free swap = 112836kB [ 436.729983][T10820] Total swap = 124996kB [ 436.731507][T10820] 524155 pages RAM [ 436.732880][T10820] 0 pages HighMem/MovableOnly [ 436.734597][T10820] 206681 pages reserved [ 436.736109][T10820] 0 pages cma reserved [ 437.631409][T10848] pimreg: entered allmulticast mode [ 437.634516][T10848] pimreg: left allmulticast mode [ 437.993124][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 438.023612][T10856] FAULT_INJECTION: forcing a failure. [ 438.023612][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 438.027518][T10856] CPU: 3 UID: 0 PID: 10856 Comm: syz.0.1703 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 438.030318][T10856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.033137][T10856] Call Trace: [ 438.034024][T10856] [ 438.034824][T10856] dump_stack_lvl+0x16c/0x1f0 [ 438.036086][T10856] should_fail_ex+0x497/0x5b0 [ 438.037340][T10856] ? fs_reclaim_acquire+0xae/0x160 [ 438.038796][T10856] should_failslab+0xc2/0x120 [ 438.040079][T10856] __kmalloc_noprof+0xcb/0x410 [ 438.041343][T10856] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 438.042825][T10856] tomoyo_realpath_from_path+0xbf/0x710 [ 438.044276][T10856] ? tomoyo_path_number_perm+0x232/0x5b0 [ 438.045769][T10856] tomoyo_path_number_perm+0x245/0x5b0 [ 438.047218][T10856] ? tomoyo_path_number_perm+0x232/0x5b0 [ 438.048689][T10856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 438.050273][T10856] ? trace_lock_acquire+0x14a/0x1d0 [ 438.051651][T10856] ? lock_acquire+0x2f/0xb0 [ 438.052848][T10856] ? __fget_files+0x40/0x3f0 [ 438.054061][T10856] ? __fget_files+0x244/0x3f0 [ 438.055308][T10856] security_file_ioctl_compat+0x9b/0x240 [ 438.056785][T10856] __do_compat_sys_ioctl+0x52/0x2b0 [ 438.058096][T10856] __do_fast_syscall_32+0x73/0x120 [ 438.059364][T10856] do_fast_syscall_32+0x32/0x80 [ 438.060648][T10856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.062309][T10856] RIP: 0023:0xf7f58579 [ 438.063396][T10856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.068393][T10856] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 438.070895][T10856] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c020662a [ 438.072984][T10856] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.075064][T10856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.077121][T10856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.079195][T10856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.081268][T10856] [ 438.088061][T10856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.218403][T10864] FAULT_INJECTION: forcing a failure. [ 438.218403][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 438.221777][T10864] CPU: 3 UID: 0 PID: 10864 Comm: syz.2.1706 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 438.224595][T10864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.227426][T10864] Call Trace: [ 438.228329][T10864] [ 438.229106][T10864] dump_stack_lvl+0x16c/0x1f0 [ 438.230350][T10864] should_fail_ex+0x497/0x5b0 [ 438.231582][T10864] ? fs_reclaim_acquire+0xae/0x160 [ 438.232917][T10864] should_failslab+0xc2/0x120 [ 438.234146][T10864] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 438.235547][T10864] ? getname_flags.part.0+0x4c/0x550 [ 438.236924][T10864] ? fput+0x30/0x390 [ 438.237961][T10864] getname_flags.part.0+0x4c/0x550 [ 438.239330][T10864] ? __pfx_ksys_write+0x10/0x10 [ 438.240605][T10864] getname_flags+0x93/0xf0 [ 438.241839][T10864] __ia32_sys_unlinkat+0xb4/0x130 [ 438.243178][T10864] __do_fast_syscall_32+0x73/0x120 [ 438.244545][T10864] do_fast_syscall_32+0x32/0x80 [ 438.245913][T10864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.247691][T10864] RIP: 0023:0xf73ce579 [ 438.248797][T10864] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.253779][T10864] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 000000000000012d [ 438.255959][T10864] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 438.257985][T10864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.260028][T10864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.262062][T10864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.264098][T10864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.266146][T10864] [ 438.362043][T10873] pimreg: left allmulticast mode [ 438.587615][T10883] FAULT_INJECTION: forcing a failure. [ 438.587615][T10883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.591033][T10883] CPU: 3 UID: 0 PID: 10883 Comm: syz.2.1713 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 438.594657][T10883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.598502][T10883] Call Trace: [ 438.599713][T10883] [ 438.600764][T10883] dump_stack_lvl+0x16c/0x1f0 [ 438.602501][T10883] should_fail_ex+0x497/0x5b0 [ 438.604226][T10883] _copy_from_user+0x30/0xf0 [ 438.605918][T10883] get_compat_msghdr+0xa8/0x170 [ 438.607709][T10883] ? __pfx_get_compat_msghdr+0x10/0x10 [ 438.609613][T10883] ? __pfx___lock_acquire+0x10/0x10 [ 438.611516][T10883] ___sys_sendmsg+0x1b0/0x1e0 [ 438.613208][T10883] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.614915][T10883] ? lock_acquire+0x2f/0xb0 [ 438.616024][T10883] ? __fget_files+0x40/0x3f0 [ 438.617187][T10883] ? fdget+0x176/0x210 [ 438.618236][T10883] __sys_sendmsg+0x117/0x1f0 [ 438.619432][T10883] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.620724][T10883] ? __fget_files+0x244/0x3f0 [ 438.621953][T10883] __do_fast_syscall_32+0x73/0x120 [ 438.623291][T10883] do_fast_syscall_32+0x32/0x80 [ 438.624636][T10883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.626644][T10883] RIP: 0023:0xf73ce579 [ 438.627965][T10883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.634051][T10883] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 438.636570][T10883] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 438.638310][T10883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.640233][T10883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.641984][T10883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.643747][T10883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.645501][T10883] [ 438.757669][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 439.347610][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.349901][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.842631][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 440.070342][T10905] pimreg: entered allmulticast mode [ 440.073193][T10905] pimreg: left allmulticast mode [ 440.308420][T10911] syz.2.1722 (10911): drop_caches: 2 [ 440.311256][T10912] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 440.313652][T10912] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 440.316215][T10912] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 440.365210][T10904] FAULT_INJECTION: forcing a failure. [ 440.365210][T10904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.376871][T10904] CPU: 1 UID: 0 PID: 10904 Comm: syz.1.1719 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 440.380648][T10904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.384011][T10904] Call Trace: [ 440.384894][T10904] [ 440.385674][T10904] dump_stack_lvl+0x16c/0x1f0 [ 440.387291][T10904] should_fail_ex+0x497/0x5b0 [ 440.388853][T10904] _copy_to_user+0x30/0xc0 [ 440.390368][T10904] simple_read_from_buffer+0xd0/0x160 [ 440.392085][T10904] proc_fail_nth_read+0x198/0x270 [ 440.393757][T10904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.395642][T10904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.397642][T10904] vfs_read+0x1ce/0xbd0 [ 440.399165][T10904] ? __fget_files+0x23a/0x3f0 [ 440.400890][T10904] ? fdget_pos+0x24c/0x360 [ 440.402276][T10904] ? __pfx_lock_release+0x10/0x10 [ 440.403662][T10904] ? trace_lock_acquire+0x14a/0x1d0 [ 440.405300][T10904] ? __pfx_vfs_read+0x10/0x10 [ 440.406612][T10904] ? __pfx___mutex_lock+0x10/0x10 [ 440.408474][T10904] ? __fget_files+0x244/0x3f0 [ 440.410170][T10904] ksys_read+0x12f/0x260 [ 440.411771][T10904] ? __pfx_ksys_read+0x10/0x10 [ 440.413548][T10904] __do_fast_syscall_32+0x73/0x120 [ 440.415409][T10904] do_fast_syscall_32+0x32/0x80 [ 440.417188][T10904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.419238][T10904] RIP: 0023:0xf73ee579 [ 440.420333][T10904] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 440.426237][T10904] RSP: 002b:00000000f56b55a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 440.428993][T10904] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f56b5620 [ 440.431398][T10904] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 440.433880][T10904] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 440.436545][T10904] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 440.438916][T10904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.440978][T10904] [ 440.606669][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'. [ 441.005932][T10927] Process accounting resumed [ 441.176488][T10931] FAULT_INJECTION: forcing a failure. [ 441.176488][T10931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.181644][T10931] CPU: 2 UID: 0 PID: 10931 Comm: syz.0.1728 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 441.185619][T10931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.190174][T10931] Call Trace: [ 441.191414][T10931] [ 441.192508][T10931] dump_stack_lvl+0x16c/0x1f0 [ 441.194247][T10931] should_fail_ex+0x497/0x5b0 [ 441.195950][T10931] _copy_from_user+0x30/0xf0 [ 441.197651][T10931] get_compat_msghdr+0xa8/0x170 [ 441.199451][T10931] ? __pfx_get_compat_msghdr+0x10/0x10 [ 441.201442][T10931] ? __pfx___lock_acquire+0x10/0x10 [ 441.203348][T10931] ___sys_sendmsg+0x1b0/0x1e0 [ 441.205085][T10931] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.207062][T10931] ? lock_acquire+0x2f/0xb0 [ 441.208769][T10931] ? __fget_files+0x40/0x3f0 [ 441.210655][T10931] ? fdget+0x176/0x210 [ 441.212162][T10931] __sys_sendmsg+0x117/0x1f0 [ 441.213906][T10931] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.215890][T10931] ? __fget_files+0x244/0x3f0 [ 441.217750][T10931] __do_fast_syscall_32+0x73/0x120 [ 441.219722][T10931] do_fast_syscall_32+0x32/0x80 [ 441.221514][T10931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.223824][T10931] RIP: 0023:0xf7f58579 [ 441.225325][T10931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.232375][T10931] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 441.235508][T10931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 441.238344][T10931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.241153][T10931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.243856][T10931] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.246270][T10931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.248693][T10931] [ 441.291595][T10933] pimreg: entered allmulticast mode [ 441.305596][T10933] pimreg: left allmulticast mode [ 441.810919][T10945] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 441.938650][T10947] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 441.941503][T10947] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 441.946201][T10947] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 442.768779][T10955] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1736'. [ 443.028190][T10959] bridge0: entered allmulticast mode [ 443.038524][T10959] bridge0: left allmulticast mode [ 443.110132][T10964] FAULT_INJECTION: forcing a failure. [ 443.110132][T10964] name failslab, interval 1, probability 0, space 0, times 0 [ 443.113558][T10964] CPU: 1 UID: 0 PID: 10964 Comm: syz.1.1740 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 443.116767][T10964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 443.120571][T10964] Call Trace: [ 443.121735][T10964] [ 443.122777][T10964] dump_stack_lvl+0x16c/0x1f0 [ 443.124406][T10964] should_fail_ex+0x497/0x5b0 [ 443.126029][T10964] ? fs_reclaim_acquire+0xae/0x160 [ 443.127814][T10964] should_failslab+0xc2/0x120 [ 443.129424][T10964] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 443.131268][T10964] ? getname_flags.part.0+0x4c/0x550 [ 443.132977][T10964] ? vfs_write+0x14d/0x1140 [ 443.134467][T10964] getname_flags.part.0+0x4c/0x550 [ 443.136151][T10964] getname+0x8d/0xe0 [ 443.137523][T10964] do_sys_openat2+0x104/0x1e0 [ 443.139154][T10964] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.140946][T10964] ? __fget_files+0x244/0x3f0 [ 443.142571][T10964] __ia32_compat_sys_openat+0x16e/0x210 [ 443.144515][T10964] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 443.146749][T10964] ? ksys_write+0x1ad/0x260 [ 443.148381][T10964] __do_fast_syscall_32+0x73/0x120 [ 443.150195][T10964] do_fast_syscall_32+0x32/0x80 [ 443.151901][T10964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.154046][T10964] RIP: 0023:0xf73ee579 [ 443.155460][T10964] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 443.161885][T10964] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 443.164720][T10964] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 443.167512][T10964] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 443.170228][T10964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.173047][T10964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 443.175765][T10964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.178451][T10964] [ 443.201536][T10968] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 443.204542][T10968] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 443.208285][T10968] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 443.274591][T10964] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1740'. [ 445.499072][T10989] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 445.501797][T10989] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 445.504609][T10989] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 445.922149][T10993] FAULT_INJECTION: forcing a failure. [ 445.922149][T10993] name failslab, interval 1, probability 0, space 0, times 0 [ 445.925441][T10993] CPU: 2 UID: 0 PID: 10993 Comm: syz.0.1749 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 445.928480][T10993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.932139][T10993] Call Trace: [ 445.933312][T10993] [ 445.934351][T10993] dump_stack_lvl+0x16c/0x1f0 [ 445.935985][T10993] should_fail_ex+0x497/0x5b0 [ 445.937581][T10993] ? fs_reclaim_acquire+0xae/0x160 [ 445.938940][T10993] should_failslab+0xc2/0x120 [ 445.940176][T10993] __kmalloc_noprof+0xcb/0x410 [ 445.941467][T10993] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 445.942963][T10993] tomoyo_realpath_from_path+0xbf/0x710 [ 445.944406][T10993] ? tomoyo_path_number_perm+0x232/0x5b0 [ 445.945874][T10993] tomoyo_path_number_perm+0x245/0x5b0 [ 445.947324][T10993] ? tomoyo_path_number_perm+0x232/0x5b0 [ 445.948786][T10993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 445.950363][T10993] ? trace_lock_acquire+0x14a/0x1d0 [ 445.951776][T10993] ? lock_acquire+0x2f/0xb0 [ 445.952976][T10993] ? __fget_files+0x40/0x3f0 [ 445.954099][T10993] ? __fget_files+0x244/0x3f0 [ 445.955346][T10993] security_file_ioctl_compat+0x9b/0x240 [ 445.956809][T10993] __do_compat_sys_ioctl+0x52/0x2b0 [ 445.958180][T10993] __do_fast_syscall_32+0x73/0x120 [ 445.959534][T10993] do_fast_syscall_32+0x32/0x80 [ 445.960807][T10993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.962452][T10993] RIP: 0023:0xf7f58579 [ 445.963523][T10993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.968476][T10993] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 445.970637][T10993] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040045701 [ 445.972677][T10993] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.974731][T10993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.976774][T10993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 445.978825][T10993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.980875][T10993] [ 445.984156][T10993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.138970][T11007] netlink: 'syz.1.1753': attribute type 11 has an invalid length. [ 447.048157][T11016] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 447.051385][T11016] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 447.054660][T11016] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 449.232589][T11023] FAULT_INJECTION: forcing a failure. [ 449.232589][T11023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.235856][T11023] CPU: 3 UID: 0 PID: 11023 Comm: syz.2.1758 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 449.238513][T11023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.241209][T11023] Call Trace: [ 449.242103][T11023] [ 449.242876][T11023] dump_stack_lvl+0x16c/0x1f0 [ 449.244131][T11023] should_fail_ex+0x497/0x5b0 [ 449.245400][T11023] _copy_from_user+0x30/0xf0 [ 449.246681][T11023] sk_getsockopt+0x1c9/0x3330 [ 449.247931][T11023] ? __pfx_sk_getsockopt+0x10/0x10 [ 449.249285][T11023] ? hlock_class+0x4e/0x130 [ 449.250478][T11023] ? __lock_acquire+0xbdd/0x3ce0 [ 449.251733][T11023] ? __pfx___might_resched+0x10/0x10 [ 449.253074][T11023] ? __pfx___lock_acquire+0x10/0x10 [ 449.254418][T11023] ? aa_sk_perm+0x2f5/0xb20 [ 449.255600][T11023] ? __pfx_aa_sk_perm+0x10/0x10 [ 449.256912][T11023] ? find_held_lock+0x2d/0x110 [ 449.258193][T11023] do_sock_getsockopt+0x699/0x870 [ 449.259493][T11023] ? lock_acquire+0x11/0xb0 [ 449.260663][T11023] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 449.262033][T11023] ? __fget_files+0x244/0x3f0 [ 449.263220][T11023] __sys_getsockopt+0x1a1/0x270 [ 449.264477][T11023] ? __pfx___sys_getsockopt+0x10/0x10 [ 449.265843][T11023] ? fput+0x30/0x390 [ 449.266844][T11023] ? ksys_write+0x1ad/0x260 [ 449.268009][T11023] ? __pfx_ksys_write+0x10/0x10 [ 449.269243][T11023] __ia32_sys_getsockopt+0xbc/0x160 [ 449.270570][T11023] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.271880][T11023] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 449.273593][T11023] __do_fast_syscall_32+0x73/0x120 [ 449.274921][T11023] do_fast_syscall_32+0x32/0x80 [ 449.276184][T11023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.277815][T11023] RIP: 0023:0xf73ce579 [ 449.278882][T11023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.283749][T11023] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 449.285844][T11023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 449.287936][T11023] RDX: 0000000000000011 RSI: 0000000020caaffb RDI: 0000000020cab000 [ 449.290023][T11023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.292080][T11023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.294162][T11023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.296263][T11023] [ 450.728666][T11047] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 450.731009][T11047] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 450.733754][T11047] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 451.924041][T11061] syz.0.1768 (11061): drop_caches: 2 [ 452.987398][T11071] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 453.029604][T11078] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1773'. [ 453.257348][T11083] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 454.652848][T11109] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1782'. [ 455.758010][T11133] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1791'. [ 455.973953][T11138] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 456.351032][T11148] FAULT_INJECTION: forcing a failure. [ 456.351032][T11148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.355819][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.0.1796 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 456.359395][T11148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.363292][T11148] Call Trace: [ 456.364540][T11148] [ 456.365645][T11148] dump_stack_lvl+0x16c/0x1f0 [ 456.367602][T11148] should_fail_ex+0x497/0x5b0 [ 456.369580][T11148] _copy_to_user+0x30/0xc0 [ 456.371458][T11148] simple_read_from_buffer+0xd0/0x160 [ 456.373661][T11148] proc_fail_nth_read+0x198/0x270 [ 456.375557][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.377087][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.379082][T11148] vfs_read+0x1ce/0xbd0 [ 456.380543][T11148] ? __fget_files+0x23a/0x3f0 [ 456.382226][T11148] ? fdget_pos+0x24c/0x360 [ 456.383828][T11148] ? __pfx_lock_release+0x10/0x10 [ 456.385670][T11148] ? trace_lock_acquire+0x14a/0x1d0 [ 456.387567][T11148] ? __pfx_vfs_read+0x10/0x10 [ 456.389679][T11148] ? __pfx___mutex_lock+0x10/0x10 [ 456.391952][T11148] ? __fget_files+0x244/0x3f0 [ 456.393914][T11148] ksys_read+0x12f/0x260 [ 456.395494][T11148] ? __pfx_ksys_read+0x10/0x10 [ 456.397119][T11148] __do_fast_syscall_32+0x73/0x120 [ 456.398810][T11148] do_fast_syscall_32+0x32/0x80 [ 456.400821][T11148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.403010][T11148] RIP: 0023:0xf7f58579 [ 456.404437][T11148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.411806][T11148] RSP: 002b:00000000f56d65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 456.414734][T11148] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f56d6620 [ 456.416820][T11148] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 456.419747][T11148] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 456.422541][T11148] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 456.424756][T11148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.427266][T11148] [ 456.950176][T11158] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 456.954313][T11158] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 456.956383][T11158] CUSE: DEVNAME unspecified [ 457.304362][T11161] sctp: [Deprecated]: syz.0.1800 (pid 11161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.304362][T11161] Use struct sctp_sack_info instead [ 459.959313][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 459.971697][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.983681][T11204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.011650][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.020664][T11204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.482362][T11213] netlink: 'syz.3.1814': attribute type 27 has an invalid length. [ 460.573424][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.575451][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.712940][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 460.778002][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.864652][T11213] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.867126][T11213] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.869520][T11213] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.871913][T11213] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.893075][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.895317][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.899491][T11218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.903757][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.906649][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.911275][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.914076][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.917118][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.927293][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 460.930151][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 462.936347][T11245] tipc: Started in network mode [ 462.938306][T11245] tipc: Node identity 1, cluster identity 4711 [ 462.940557][T11245] tipc: Node number set to 1 [ 462.950450][T11245] FAULT_INJECTION: forcing a failure. [ 462.950450][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 462.954528][T11245] CPU: 1 UID: 0 PID: 11245 Comm: syz.3.1824 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 462.957387][T11245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.960125][T11245] Call Trace: [ 462.961010][T11245] [ 462.961891][T11245] dump_stack_lvl+0x16c/0x1f0 [ 462.963217][T11245] should_fail_ex+0x497/0x5b0 [ 462.964585][T11245] should_failslab+0xc2/0x120 [ 462.965858][T11245] __kmalloc_cache_noprof+0x6b/0x310 [ 462.967325][T11245] ? lock_acquire.part.0+0x11b/0x380 [ 462.968745][T11245] ? tipc_nametbl_insert_publ+0x5d/0x1660 [ 462.970534][T11245] tipc_nametbl_insert_publ+0x5d/0x1660 [ 462.972259][T11245] ? rcu_is_watching+0x12/0xc0 [ 462.973653][T11245] ? do_raw_spin_lock+0x12d/0x2c0 [ 462.975095][T11245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 462.976598][T11245] ? lock_acquire+0x2f/0xb0 [ 462.977815][T11245] ? tipc_nametbl_publish+0xdb/0x280 [ 462.979299][T11245] tipc_nametbl_publish+0x137/0x280 [ 462.981094][T11245] tipc_net_finalize+0x127/0x180 [ 462.982898][T11245] ? __pfx_tipc_net_finalize+0x10/0x10 [ 462.984900][T11245] ? tipc_net_init+0xa2/0x130 [ 462.986583][T11245] tipc_net_init+0xfa/0x130 [ 462.987863][T11245] __tipc_nl_net_set+0x411/0x650 [ 462.989162][T11245] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 462.990605][T11245] ? __pfx___mutex_lock+0x10/0x10 [ 462.991957][T11245] ? __nla_parse+0x40/0x60 [ 462.993132][T11245] tipc_nl_net_set+0x21/0x40 [ 462.994379][T11245] genl_family_rcv_msg_doit+0x202/0x2f0 [ 462.996297][T11245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.998438][T11245] ? __radix_tree_lookup+0x21f/0x2c0 [ 463.000290][T11245] genl_rcv_msg+0x565/0x800 [ 463.001758][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.003331][T11245] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 463.004979][T11245] netlink_rcv_skb+0x165/0x410 [ 463.006550][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.008119][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.009773][T11245] ? down_read+0xc9/0x330 [ 463.011266][T11245] ? __pfx_down_read+0x10/0x10 [ 463.012684][T11245] ? netlink_deliver_tap+0x1ae/0xcf0 [ 463.014482][T11245] genl_rcv+0x28/0x40 [ 463.015894][T11245] netlink_unicast+0x53c/0x7f0 [ 463.017625][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 463.019092][T11245] ? __phys_addr_symbol+0x30/0x80 [ 463.020552][T11245] ? __check_object_size+0x488/0x710 [ 463.022371][T11245] netlink_sendmsg+0x8b8/0xd70 [ 463.023832][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.025314][T11245] ? lock_acquire+0x2f/0xb0 [ 463.026896][T11245] ____sys_sendmsg+0x9ae/0xb40 [ 463.028437][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.030163][T11245] ? get_compat_msghdr+0x11b/0x170 [ 463.031816][T11245] ? __pfx___lock_acquire+0x10/0x10 [ 463.033513][T11245] ___sys_sendmsg+0x135/0x1e0 [ 463.034910][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.036348][T11245] ? lock_acquire+0x2f/0xb0 [ 463.037919][T11245] ? __fget_files+0x40/0x3f0 [ 463.039365][T11245] ? fdget+0x176/0x210 [ 463.040615][T11245] __sys_sendmsg+0x117/0x1f0 [ 463.042012][T11245] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.043621][T11245] ? bpf_trace_run2+0x2a6/0x590 [ 463.045213][T11245] ? rcu_is_watching+0x12/0xc0 [ 463.046779][T11245] __do_fast_syscall_32+0x73/0x120 [ 463.048403][T11245] do_fast_syscall_32+0x32/0x80 [ 463.049971][T11245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.051628][T11245] RIP: 0023:0xf7fd5579 [ 463.052716][T11245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 463.057670][T11245] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 463.060212][T11245] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000480 [ 463.062809][T11245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.065163][T11245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.067256][T11245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 463.069289][T11245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.071741][T11245] [ 463.372211][T11248] netlink: zone id is out of range [ 463.374649][T11248] netlink: zone id is out of range [ 463.376116][T11248] netlink: zone id is out of range [ 463.377764][T11248] netlink: zone id is out of range [ 463.382071][T11248] netlink: zone id is out of range [ 463.424155][T11248] netlink: set zone limit has 4 unknown bytes [ 465.218533][T11270] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 465.221755][T11270] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 465.225027][T11270] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 465.645677][T11275] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 466.239076][T11281] syz.1.1833 (11281): drop_caches: 2 [ 467.063596][T11291] __nla_validate_parse: 58 callbacks suppressed [ 467.063615][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1836'. [ 467.168921][T11294] veth0_to_team: entered promiscuous mode [ 467.170615][T11294] veth0_to_team: entered allmulticast mode [ 467.233648][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1837'. [ 467.308226][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 467.314721][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 468.028101][T11309] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 468.031001][T11309] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 468.033641][T11309] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 468.237744][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 468.744402][T11334] netlink: 'syz.1.1847': attribute type 7 has an invalid length. [ 468.746692][T11334] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1847'. [ 468.789325][T11337] syz.1.1848 (11337): drop_caches: 2 [ 468.827846][T11330] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1846'. [ 468.878455][T11340] syz.1.1849 (11340): drop_caches: 2 [ 469.290465][T11351] (unnamed net_device) (uninitialized): option arp_validate: invalid value (524288) [ 470.228063][T11376] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 470.230280][T11376] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 470.232596][T11376] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 470.372895][T11378] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 470.779925][T11383] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 471.125501][T11385] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1860'. [ 471.198869][T11389] bridge0: entered allmulticast mode [ 471.202346][T11389] pimreg: entered allmulticast mode [ 471.214247][T11389] pimreg: left allmulticast mode [ 471.215842][T11389] bridge0: left allmulticast mode [ 471.324618][T11393] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1863'. [ 471.588940][T11398] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 472.263471][T11408] FAULT_INJECTION: forcing a failure. [ 472.263471][T11408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.267441][T11408] CPU: 2 UID: 0 PID: 11408 Comm: syz.0.1866 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 472.270262][T11408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.273061][T11408] Call Trace: [ 472.273948][T11408] [ 472.274756][T11408] dump_stack_lvl+0x16c/0x1f0 [ 472.276059][T11408] should_fail_ex+0x497/0x5b0 [ 472.277371][T11408] _copy_to_user+0x30/0xc0 [ 472.278651][T11408] simple_read_from_buffer+0xd0/0x160 [ 472.280175][T11408] proc_fail_nth_read+0x198/0x270 [ 472.281593][T11408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.283089][T11408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.284567][T11408] vfs_read+0x1ce/0xbd0 [ 472.285671][T11408] ? __fget_files+0x23a/0x3f0 [ 472.286886][T11408] ? fdget_pos+0x24c/0x360 [ 472.288060][T11408] ? __pfx_lock_release+0x10/0x10 [ 472.289397][T11408] ? trace_lock_acquire+0x14a/0x1d0 [ 472.290780][T11408] ? __pfx_vfs_read+0x10/0x10 [ 472.292023][T11408] ? __pfx___mutex_lock+0x10/0x10 [ 472.293365][T11408] ? __fget_files+0x244/0x3f0 [ 472.294626][T11408] ksys_read+0x12f/0x260 [ 472.295752][T11408] ? __pfx_ksys_read+0x10/0x10 [ 472.297027][T11408] __do_fast_syscall_32+0x73/0x120 [ 472.298384][T11408] do_fast_syscall_32+0x32/0x80 [ 472.299637][T11408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.301290][T11408] RIP: 0023:0xf7f58579 [ 472.302384][T11408] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 472.307407][T11408] RSP: 002b:00000000f56d65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 472.309797][T11408] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56d6620 [ 472.312140][T11408] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 472.314510][T11408] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 472.316896][T11408] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 472.319513][T11408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.321694][T11408] [ 472.398853][T11411] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 472.401138][T11411] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 472.403572][T11411] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 473.401240][T11424] syz.0.1872 (11424): drop_caches: 2 [ 473.706051][T11427] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 473.709132][T11427] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 473.711623][T11427] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 474.498863][T11432] netlink: 'syz.1.1875': attribute type 7 has an invalid length. [ 474.501738][T11432] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1875'. [ 474.507077][T11432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1875'. [ 474.509991][T11432] netlink: 872 bytes leftover after parsing attributes in process `syz.1.1875'. [ 474.515103][T11432] netlink: 'syz.1.1875': attribute type 7 has an invalid length. [ 474.519120][T11432] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1875'. [ 474.801319][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 475.475567][T11446] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 475.478941][T11446] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 475.482082][T11446] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 476.108491][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1882'. [ 476.650663][T11471] FAULT_INJECTION: forcing a failure. [ 476.650663][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 476.654706][T11471] CPU: 3 UID: 0 PID: 11471 Comm: syz.3.1887 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 476.658539][T11471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 476.661502][T11471] Call Trace: [ 476.662563][T11471] [ 476.663540][T11471] dump_stack_lvl+0x16c/0x1f0 [ 476.665151][T11471] should_fail_ex+0x497/0x5b0 [ 476.666784][T11471] ? fs_reclaim_acquire+0xae/0x160 [ 476.668501][T11471] should_failslab+0xc2/0x120 [ 476.670148][T11471] kmem_cache_alloc_node_noprof+0x71/0x310 [ 476.672176][T11471] ? __alloc_skb+0x2b3/0x380 [ 476.673725][T11471] __alloc_skb+0x2b3/0x380 [ 476.674939][T11471] ? __pfx___alloc_skb+0x10/0x10 [ 476.676221][T11471] netlink_ack+0x164/0xb20 [ 476.677396][T11471] netlink_rcv_skb+0x327/0x410 [ 476.678675][T11471] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 476.680101][T11471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.681491][T11471] ? __pfx_aa_get_newest_label+0x10/0x10 [ 476.682988][T11471] ? bpf_lsm_capable+0x9/0x10 [ 476.684240][T11471] ? security_capable+0x7e/0x260 [ 476.685561][T11471] ? ns_capable+0xd7/0x110 [ 476.686773][T11471] nfnetlink_rcv+0x1b4/0x430 [ 476.688015][T11471] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 476.689426][T11471] ? netlink_deliver_tap+0x1ae/0xcf0 [ 476.690872][T11471] netlink_unicast+0x53c/0x7f0 [ 476.692141][T11471] ? __pfx_netlink_unicast+0x10/0x10 [ 476.693532][T11471] ? __phys_addr_symbol+0x30/0x80 [ 476.694870][T11471] ? __check_object_size+0x488/0x710 [ 476.696310][T11471] netlink_sendmsg+0x8b8/0xd70 [ 476.697562][T11471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.698945][T11471] ? lock_acquire+0x2f/0xb0 [ 476.700156][T11471] ____sys_sendmsg+0x9ae/0xb40 [ 476.701430][T11471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.702896][T11471] ? get_compat_msghdr+0x11b/0x170 [ 476.704337][T11471] ? __pfx___lock_acquire+0x10/0x10 [ 476.705841][T11471] ___sys_sendmsg+0x135/0x1e0 [ 476.707174][T11471] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.708550][T11471] ? lock_acquire+0x2f/0xb0 [ 476.709761][T11471] ? __fget_files+0x40/0x3f0 [ 476.711002][T11471] ? fdget+0x176/0x210 [ 476.712086][T11471] __sys_sendmsg+0x117/0x1f0 [ 476.713319][T11471] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.714682][T11471] ? __fget_files+0x244/0x3f0 [ 476.715929][T11471] __do_fast_syscall_32+0x73/0x120 [ 476.717264][T11471] do_fast_syscall_32+0x32/0x80 [ 476.718559][T11471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.720270][T11471] RIP: 0023:0xf7fd5579 [ 476.721450][T11471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 476.726851][T11471] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 476.729009][T11471] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200002c0 [ 476.731064][T11471] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.733136][T11471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.735338][T11471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 476.737612][T11471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.739808][T11471] [ 477.567545][T11486] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1891'. [ 477.736856][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1892'. [ 478.293948][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 478.351458][T11490] ax25_connect(): syz.1.1893 uses autobind, please contact jreuter@yaina.de [ 478.724332][T11506] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1900'. [ 478.956837][ T5796] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 479.106948][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 479.354252][T11516] FAULT_INJECTION: forcing a failure. [ 479.354252][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 479.359453][T11516] CPU: 3 UID: 0 PID: 11516 Comm: syz.1.1899 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 479.363238][T11516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 479.366970][T11516] Call Trace: [ 479.368050][T11516] [ 479.368973][T11516] dump_stack_lvl+0x16c/0x1f0 [ 479.370765][T11516] should_fail_ex+0x497/0x5b0 [ 479.372542][T11516] ? fs_reclaim_acquire+0xae/0x160 [ 479.374410][T11516] should_failslab+0xc2/0x120 [ 479.376075][T11516] __kmalloc_noprof+0xcb/0x410 [ 479.377755][T11516] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 479.379727][T11516] tomoyo_realpath_from_path+0xbf/0x710 [ 479.381660][T11516] ? tomoyo_path_perm+0x25f/0x480 [ 479.383447][T11516] tomoyo_path_perm+0x273/0x480 [ 479.385153][T11516] ? tomoyo_path_perm+0x25f/0x480 [ 479.386751][T11516] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 479.388612][T11516] ? __pfx_ima_file_check+0x10/0x10 [ 479.390622][T11516] ? vfs_open+0x2dc/0x3f0 [ 479.392127][T11516] security_file_truncate+0x84/0x1e0 [ 479.394075][T11516] path_openat+0x1ba9/0x2d60 [ 479.395738][T11516] ? __pfx_path_openat+0x10/0x10 [ 479.397475][T11516] ? __pfx___lock_acquire+0x10/0x10 [ 479.399215][T11516] do_filp_open+0x1dc/0x430 [ 479.400559][T11516] ? __pfx_do_filp_open+0x10/0x10 [ 479.401881][T11516] ? find_held_lock+0x2d/0x110 [ 479.403185][T11516] ? _raw_spin_unlock+0x28/0x50 [ 479.404465][T11516] ? alloc_fd+0x2d7/0x6c0 [ 479.405609][T11516] do_sys_openat2+0x17a/0x1e0 [ 479.406798][T11516] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.408108][T11516] ? __fget_files+0x244/0x3f0 [ 479.409359][T11516] __ia32_compat_sys_openat+0x16e/0x210 [ 479.411225][T11516] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 479.413302][T11516] ? ksys_write+0x1ad/0x260 [ 479.414886][T11516] __do_fast_syscall_32+0x73/0x120 [ 479.416639][T11516] do_fast_syscall_32+0x32/0x80 [ 479.418361][T11516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.420568][T11516] RIP: 0023:0xf73ee579 [ 479.422024][T11516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 479.428400][T11516] RSP: 002b:00000000f5694110 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 479.430637][T11516] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5694160 [ 479.432898][T11516] RDX: 0000000000028203 RSI: 0000000000000000 RDI: 00000000f73dbff4 [ 479.435023][T11516] RBP: 0000000000028203 R08: 0000000000000000 R09: 0000000000000000 [ 479.437797][T11516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 479.440593][T11516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.443516][T11516] [ 479.445471][T11516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 479.529094][ T5796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 479.532469][ T5796] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 479.535129][ T5796] usb 6-1: can't read configurations, error -71 [ 479.649216][T11523] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 479.748701][T11524] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 480.178954][T11530] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 480.181266][T11530] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 480.184162][T11530] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 481.186877][T11544] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1909'. [ 481.242018][T11548] syz.2.1911 (11548): drop_caches: 2 [ 481.247032][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 481.397058][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 481.403055][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 481.408599][ T25] usb 8-1: config 2 has an invalid interface number: 40 but max is 0 [ 481.411432][ T25] usb 8-1: config 2 has no interface number 0 [ 481.413713][ T25] usb 8-1: config 2 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 481.418375][ T25] usb 8-1: config 2 interface 40 has no altsetting 0 [ 481.423676][ T25] usb 8-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=5d.cc [ 481.436977][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.440381][ T25] usb 8-1: Product: syz [ 481.442210][ T25] usb 8-1: Manufacturer: syz [ 481.444099][ T25] usb 8-1: SerialNumber: syz [ 481.741245][T11539] team0: invalid flags given to default FDB implementation [ 481.872661][ T25] radio-si470x 8-1:2.40: could not find interrupt in endpoint [ 481.875009][ T25] radio-si470x 8-1:2.40: probe with driver radio-si470x failed with error -5 [ 481.877749][ T25] usbhid 8-1:2.40: couldn't find an input interrupt endpoint [ 481.881975][ T25] usb 8-1: USB disconnect, device number 9 [ 482.974634][T11583] syz.2.1920 (11583): drop_caches: 2 [ 483.844762][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 483.992196][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 485.247691][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1929'. [ 485.441267][T11633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1932'. [ 485.461070][T11636] netlink: 'syz.1.1934': attribute type 12 has an invalid length. [ 485.463257][T11636] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1934'. [ 485.473339][T11638] FAULT_INJECTION: forcing a failure. [ 485.473339][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 485.477786][T11638] CPU: 1 UID: 0 PID: 11638 Comm: syz.3.1935 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 485.480589][T11638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.483522][T11638] Call Trace: [ 485.484446][T11638] [ 485.485308][T11638] dump_stack_lvl+0x16c/0x1f0 [ 485.486779][T11638] should_fail_ex+0x497/0x5b0 [ 485.488193][T11638] ? fs_reclaim_acquire+0xae/0x160 [ 485.490282][T11638] should_failslab+0xc2/0x120 [ 485.490320][T11638] __kmalloc_noprof+0xcb/0x410 [ 485.490336][T11638] ? lockdep_hardirqs_on+0x7c/0x110 [ 485.490352][T11638] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 485.490372][T11638] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 485.497953][T11638] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.499572][T11638] ? bpf_lsm_capable+0x9/0x10 [ 485.500782][T11638] ? security_capable+0x7e/0x260 [ 485.502118][T11638] ? ns_capable+0xd7/0x110 [ 485.503360][T11638] genl_rcv_msg+0x565/0x800 [ 485.504744][T11638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.506243][T11638] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 485.507831][T11638] netlink_rcv_skb+0x165/0x410 [ 485.509141][T11638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.510429][T11638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.511790][T11638] ? down_read+0xc9/0x330 [ 485.512902][T11638] ? __pfx_down_read+0x10/0x10 [ 485.514123][T11638] ? netlink_deliver_tap+0x1ae/0xcf0 [ 485.515460][T11638] genl_rcv+0x28/0x40 [ 485.516473][T11638] netlink_unicast+0x53c/0x7f0 [ 485.517695][T11638] ? __pfx_netlink_unicast+0x10/0x10 [ 485.519065][T11638] ? const_folio_flags.constprop.0+0x56/0x150 [ 485.520667][T11638] ? __phys_addr_symbol+0x30/0x80 [ 485.521989][T11638] ? __check_object_size+0x488/0x710 [ 485.523609][T11638] netlink_sendmsg+0x8b8/0xd70 [ 485.525109][T11638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.526643][T11638] ? lock_acquire+0x2f/0xb0 [ 485.527873][T11638] ____sys_sendmsg+0x9ae/0xb40 [ 485.529126][T11638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.530491][T11638] ? get_compat_msghdr+0x11b/0x170 [ 485.531797][T11638] ? __pfx___lock_acquire+0x10/0x10 [ 485.533119][T11638] ___sys_sendmsg+0x135/0x1e0 [ 485.534320][T11638] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.535632][T11638] ? lock_acquire+0x2f/0xb0 [ 485.536797][T11638] ? __fget_files+0x40/0x3f0 [ 485.538018][T11638] ? fdget+0x176/0x210 [ 485.539057][T11638] __sys_sendmsg+0x117/0x1f0 [ 485.540246][T11638] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.541547][T11638] ? __fget_files+0x244/0x3f0 [ 485.542766][T11638] __do_fast_syscall_32+0x73/0x120 [ 485.544088][T11638] do_fast_syscall_32+0x32/0x80 [ 485.545348][T11638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.546953][T11638] RIP: 0023:0xf7fd5579 [ 485.548058][T11638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 485.553287][T11638] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 485.555433][T11638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 485.557395][T11638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.559391][T11638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.561371][T11638] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 485.563318][T11638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.565396][T11638] [ 487.183575][T11677] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 58368 (only 8 groups) [ 487.207404][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 487.231499][T11677] veth3: entered allmulticast mode [ 487.465394][T11684] syz.3.1947 (11684): drop_caches: 2 [ 487.487792][T11679] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 488.530268][T11695] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 489.507771][T11708] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1955'. [ 490.946835][ T39] audit: type=1326 audit(1727882956.457:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.2.1959" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 491.860181][T11736] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 492.481176][T11744] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 493.266411][T11764] syz.1.1968[11764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.266465][T11764] syz.1.1968[11764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.271601][T11764] syz.1.1968[11764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.462945][T11768] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 493.468885][T11768] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 493.471173][T11768] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 494.651702][T11781] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 494.682204][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 495.857758][T11794] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 495.860792][T11794] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 495.863773][T11794] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 497.020371][T11810] netlink: 'syz.3.1981': attribute type 3 has an invalid length. [ 497.022438][T11810] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1981'. [ 497.114204][T11814] FAULT_INJECTION: forcing a failure. [ 497.114204][T11814] name failslab, interval 1, probability 0, space 0, times 0 [ 497.120571][T11814] CPU: 2 UID: 0 PID: 11814 Comm: syz.3.1982 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 497.124463][T11814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 497.128215][T11814] Call Trace: [ 497.129438][T11814] [ 497.130628][T11814] dump_stack_lvl+0x16c/0x1f0 [ 497.132332][T11814] should_fail_ex+0x497/0x5b0 [ 497.134076][T11814] ? fs_reclaim_acquire+0xae/0x160 [ 497.135946][T11814] should_failslab+0xc2/0x120 [ 497.137667][T11814] kmem_cache_alloc_node_noprof+0x71/0x310 [ 497.139815][T11814] ? __alloc_skb+0x2b3/0x380 [ 497.141497][T11814] __alloc_skb+0x2b3/0x380 [ 497.143210][T11814] ? __pfx___alloc_skb+0x10/0x10 [ 497.145116][T11814] ? __phys_addr_symbol+0x30/0x80 [ 497.147119][T11814] pfkey_sendmsg+0x47f/0x840 [ 497.149097][T11814] ____sys_sendmsg+0x9ae/0xb40 [ 497.150872][T11814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.152820][T11814] ? get_compat_msghdr+0x11b/0x170 [ 497.154692][T11814] ? __pfx___lock_acquire+0x10/0x10 [ 497.156586][T11814] ___sys_sendmsg+0x135/0x1e0 [ 497.158323][T11814] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.160178][T11814] ? lock_acquire+0x2f/0xb0 [ 497.161832][T11814] ? __fget_files+0x40/0x3f0 [ 497.163554][T11814] ? fdget+0x176/0x210 [ 497.165138][T11814] __sys_sendmsg+0x117/0x1f0 [ 497.166855][T11814] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.168723][T11814] ? __fget_files+0x244/0x3f0 [ 497.170493][T11814] __do_fast_syscall_32+0x73/0x120 [ 497.172458][T11814] do_fast_syscall_32+0x32/0x80 [ 497.174329][T11814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.176640][T11814] RIP: 0023:0xf7fd5579 [ 497.178233][T11814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 497.183240][T11814] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 497.185421][T11814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 497.187520][T11814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.189580][T11814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.191682][T11814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.193827][T11814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.195893][T11814] [ 497.447902][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 497.552509][T11820] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 497.558556][T11820] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 497.563845][T11820] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 498.010744][T11827] netlink: 'syz.2.1986': attribute type 7 has an invalid length. [ 498.014336][T11827] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1986'. [ 498.371260][T11832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1988'. [ 498.543863][T11832] vivid-000: ================= START STATUS ================= [ 498.547129][T11832] vivid-000: Radio HW Seek Mode: Bounded [ 498.551142][T11832] vivid-000: Radio Programmable HW Seek: false [ 498.556947][T11832] vivid-000: RDS Rx I/O Mode: Block I/O [ 498.558810][T11832] vivid-000: Generate RBDS Instead of RDS: false [ 498.561493][T11832] vivid-000: RDS Reception: true [ 498.564982][T11832] vivid-000: RDS Program Type: 0 inactive [ 498.568166][T11832] vivid-000: RDS PS Name: inactive [ 498.569804][T11832] vivid-000: RDS Radio Text: inactive [ 498.571358][T11832] vivid-000: RDS Traffic Announcement: false inactive [ 498.573219][T11832] vivid-000: RDS Traffic Program: false inactive [ 498.575226][T11832] vivid-000: RDS Music: false inactive [ 498.577334][T11832] vivid-000: ================== END STATUS ================== [ 498.894889][T11842] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1990'. [ 499.216866][ T5796] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 499.366880][ T5796] usb 8-1: Using ep0 maxpacket: 8 [ 499.370837][ T5796] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 499.370869][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 499.370890][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.370912][ T5796] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.370948][ T5796] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.370970][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.621166][ T5796] usb 8-1: usb_control_msg returned -32 [ 499.621211][ T5796] usbtmc 8-1:16.0: can't read capabilities [ 500.100859][T11844] netlink: 'syz.3.1991': attribute type 8 has an invalid length. [ 500.102982][T11844] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1991'. [ 500.120274][ T5393] usb 8-1: USB disconnect, device number 10 [ 500.783504][T11859] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 500.783792][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.789645][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.883432][T11864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1996'. [ 500.968318][T11867] netlink: 'syz.3.1997': attribute type 7 has an invalid length. [ 500.971382][T11867] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1997'. [ 501.036436][T11870] syz.3.1998 (11870): drop_caches: 2 [ 501.169345][T11873] FAULT_INJECTION: forcing a failure. [ 501.169345][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.174299][T11873] CPU: 2 UID: 0 PID: 11873 Comm: syz.2.2000 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 501.178520][T11873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.182157][T11873] Call Trace: [ 501.183353][T11873] [ 501.184361][T11873] dump_stack_lvl+0x16c/0x1f0 [ 501.185982][T11873] should_fail_ex+0x497/0x5b0 [ 501.187616][T11873] _copy_to_user+0x30/0xc0 [ 501.189174][T11873] simple_read_from_buffer+0xd0/0x160 [ 501.191001][T11873] proc_fail_nth_read+0x198/0x270 [ 501.192722][T11873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.194618][T11873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.196518][T11873] vfs_read+0x1ce/0xbd0 [ 501.197926][T11873] ? __fget_files+0x23a/0x3f0 [ 501.199622][T11873] ? fdget_pos+0x24c/0x360 [ 501.201330][T11873] ? __pfx_lock_release+0x10/0x10 [ 501.203230][T11873] ? trace_lock_acquire+0x14a/0x1d0 [ 501.205050][T11873] ? __pfx_vfs_read+0x10/0x10 [ 501.206662][T11873] ? __pfx___mutex_lock+0x10/0x10 [ 501.208406][T11873] ? __fget_files+0x244/0x3f0 [ 501.210050][T11873] ksys_read+0x12f/0x260 [ 501.211507][T11873] ? __pfx_ksys_read+0x10/0x10 [ 501.213134][T11873] __do_fast_syscall_32+0x73/0x120 [ 501.214871][T11873] do_fast_syscall_32+0x32/0x80 [ 501.216531][T11873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.218879][T11873] RIP: 0023:0xf73ce579 [ 501.220499][T11873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 501.227301][T11873] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 501.230132][T11873] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56b6620 [ 501.232763][T11873] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 501.235402][T11873] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 501.238013][T11873] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 501.240626][T11873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.243326][T11873] [ 501.327473][T11877] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 501.330278][T11877] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 501.333278][T11877] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 501.713539][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 501.716584][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 501.802312][T11886] syz.0.2004 (11886): drop_caches: 2 [ 502.168166][T11892] FAULT_INJECTION: forcing a failure. [ 502.168166][T11892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.172597][T11892] CPU: 3 UID: 0 PID: 11892 Comm: syz.2.2006 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 502.176212][T11892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.179809][T11892] Call Trace: [ 502.180939][T11892] [ 502.181944][T11892] dump_stack_lvl+0x16c/0x1f0 [ 502.183536][T11892] should_fail_ex+0x497/0x5b0 [ 502.185143][T11892] _copy_to_user+0x30/0xc0 [ 502.186686][T11892] simple_read_from_buffer+0xd0/0x160 [ 502.188532][T11892] proc_fail_nth_read+0x198/0x270 [ 502.190270][T11892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.192168][T11892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.194051][T11892] vfs_read+0x1ce/0xbd0 [ 502.195463][T11892] ? __fget_files+0x23a/0x3f0 [ 502.197059][T11892] ? fdget_pos+0x24c/0x360 [ 502.198598][T11892] ? __pfx_lock_release+0x10/0x10 [ 502.200318][T11892] ? trace_lock_acquire+0x14a/0x1d0 [ 502.202100][T11892] ? __pfx_vfs_read+0x10/0x10 [ 502.203706][T11892] ? __pfx___mutex_lock+0x10/0x10 [ 502.205443][T11892] ? __fget_files+0x244/0x3f0 [ 502.207070][T11892] ksys_read+0x12f/0x260 [ 502.208523][T11892] ? __pfx_ksys_read+0x10/0x10 [ 502.210164][T11892] __do_fast_syscall_32+0x73/0x120 [ 502.211885][T11892] do_fast_syscall_32+0x32/0x80 [ 502.213545][T11892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.215678][T11892] RIP: 0023:0xf73ce579 [ 502.217045][T11892] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.223514][T11892] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 502.226323][T11892] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56b6620 [ 502.228955][T11892] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 502.231617][T11892] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 502.234309][T11892] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 502.236946][T11892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.239603][T11892] [ 502.298770][T11894] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 502.301759][T11894] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 502.304658][T11894] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 502.341574][T11896] fuse: Bad value for 'fd' [ 503.889227][T11925] fuse: Bad value for 'fd' [ 503.961804][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2018'. [ 504.025317][T11930] syz.1.2019 (11930): drop_caches: 2 [ 504.078327][T11932] No control pipe specified [ 504.424811][T11946] FAULT_INJECTION: forcing a failure. [ 504.424811][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.428335][T11946] CPU: 2 UID: 0 PID: 11946 Comm: syz.2.2024 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 504.431119][T11946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 504.433935][T11946] Call Trace: [ 504.434815][T11946] [ 504.435596][T11946] dump_stack_lvl+0x16c/0x1f0 [ 504.436816][T11946] should_fail_ex+0x497/0x5b0 [ 504.438112][T11946] _copy_from_iter+0x29b/0x13e0 [ 504.439387][T11946] ? __pfx__copy_from_iter+0x10/0x10 [ 504.440769][T11946] ? __virt_addr_valid+0x1a4/0x590 [ 504.442121][T11946] ? __virt_addr_valid+0x5e/0x590 [ 504.443443][T11946] ? __phys_addr_symbol+0x30/0x80 [ 504.444757][T11946] ? __check_object_size+0x488/0x710 [ 504.446160][T11946] netlink_sendmsg+0x813/0xd70 [ 504.447419][T11946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.448828][T11946] ? lock_acquire+0x2f/0xb0 [ 504.450032][T11946] ____sys_sendmsg+0x9ae/0xb40 [ 504.451290][T11946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.452667][T11946] ? get_compat_msghdr+0x11b/0x170 [ 504.454032][T11946] ? __pfx___lock_acquire+0x10/0x10 [ 504.455396][T11946] ___sys_sendmsg+0x135/0x1e0 [ 504.456632][T11946] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.458181][T11946] ? lock_acquire+0x2f/0xb0 [ 504.459505][T11946] ? __fget_files+0x40/0x3f0 [ 504.460731][T11946] ? fdget+0x176/0x210 [ 504.461805][T11946] __sys_sendmsg+0x117/0x1f0 [ 504.463036][T11946] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.464376][T11946] ? __fget_files+0x244/0x3f0 [ 504.465631][T11946] __do_fast_syscall_32+0x73/0x120 [ 504.466986][T11946] do_fast_syscall_32+0x32/0x80 [ 504.468272][T11946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.470022][T11946] RIP: 0023:0xf73ce579 [ 504.471134][T11946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 504.476174][T11946] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 504.478335][T11946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200004c0 [ 504.480402][T11946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.482470][T11946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.484527][T11946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 504.486601][T11946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.488656][T11946] [ 505.038126][T11952] fuse: Bad value for 'fd' [ 505.231031][T11963] xt_HMARK: spi-set and port-set can't be combined [ 506.508556][T11984] syz.3.2037 (11984): drop_caches: 2 [ 506.511720][T11984] syz.3.2037 (11984): drop_caches: 2 [ 506.574730][T11967] 9pnet_fd: Insufficient options for proto=fd [ 506.946971][ T5391] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 507.108077][ T5391] usb 7-1: Using ep0 maxpacket: 8 [ 507.113303][ T5391] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 507.116509][ T5391] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 507.119870][ T5391] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.124121][ T5391] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.132432][ T5391] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.135672][ T5391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.357206][ T5391] usb 7-1: usb_control_msg returned -32 [ 507.359699][ T5391] usbtmc 7-1:16.0: can't read capabilities [ 509.764672][ T5393] usb 7-1: USB disconnect, device number 10 [ 509.941534][T12055] gfs2: gfs2 mount does not exist [ 512.002959][T12071] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 512.034310][T12071] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 512.038462][T12071] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 512.429070][T12085] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2066'. [ 512.431750][T12085] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 513.137896][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 513.628086][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 515.102190][T12136] netfs: Couldn't get user pages (rc=-14) [ 515.133454][T12136] tipc: Enabled bearer , priority 10 [ 515.470494][T12142] netlink: 692 bytes leftover after parsing attributes in process `syz.3.2082'. [ 516.126913][ T9465] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 516.289252][ T9465] usb 5-1: config 0 has no interfaces? [ 516.291232][ T9465] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.294379][ T9465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.299515][ T9465] usb 5-1: config 0 descriptor?? [ 516.715476][ T5796] usb 5-1: USB disconnect, device number 6 [ 517.550834][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 517.969472][T12172] overlayfs: conflicting lowerdir path [ 519.031358][T12198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.040087][T12198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.008709][T12208] binder: 12207:12208 ioctl 4018620d 0 returned -22 [ 520.019516][T12208] syz.3.2102 (12208): drop_caches: 2 [ 520.155331][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 521.119805][T12233] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 521.472031][T12239] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 521.476041][T12239] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 521.480641][T12239] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 521.966476][T12241] FAULT_INJECTION: forcing a failure. [ 521.966476][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 521.971236][T12241] CPU: 2 UID: 0 PID: 12241 Comm: syz.2.2109 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 521.974841][T12241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 521.978519][T12241] Call Trace: [ 521.979686][T12241] [ 521.980710][T12241] dump_stack_lvl+0x16c/0x1f0 [ 521.982300][T12241] should_fail_ex+0x497/0x5b0 [ 521.984006][T12241] ? fs_reclaim_acquire+0xae/0x160 [ 521.985796][T12241] should_failslab+0xc2/0x120 [ 521.987371][T12241] __kmalloc_noprof+0xcb/0x410 [ 521.989060][T12241] security_inode_init_security+0x140/0x390 [ 521.991081][T12241] ? __pfx_shmem_initxattrs+0x10/0x10 [ 521.992937][T12241] ? __pfx_security_inode_init_security+0x10/0x10 [ 521.995134][T12241] ? shmem_get_inode+0x703/0xea0 [ 521.996836][T12241] shmem_tmpfile+0x93/0x180 [ 521.998402][T12241] vfs_tmpfile+0x2bd/0x8a0 [ 521.999948][T12241] path_openat+0xc5a/0x2d60 [ 522.001513][T12241] ? hlock_class+0x4e/0x130 [ 522.003093][T12241] ? __pfx_path_openat+0x10/0x10 [ 522.004741][T12241] ? __pfx___lock_acquire+0x10/0x10 [ 522.006556][T12241] do_filp_open+0x1dc/0x430 [ 522.008120][T12241] ? __pfx_do_filp_open+0x10/0x10 [ 522.009863][T12241] ? _raw_spin_unlock+0x28/0x50 [ 522.011524][T12241] ? alloc_fd+0x2d7/0x6c0 [ 522.013014][T12241] do_sys_openat2+0x17a/0x1e0 [ 522.014654][T12241] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.016438][T12241] ? __fget_files+0x244/0x3f0 [ 522.018073][T12241] __ia32_compat_sys_open+0x147/0x1e0 [ 522.019669][T12241] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 522.021731][T12241] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 522.023893][T12241] __do_fast_syscall_32+0x73/0x120 [ 522.025685][T12241] do_fast_syscall_32+0x32/0x80 [ 522.027464][T12241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.029653][T12241] RIP: 0023:0xf73ce579 [ 522.031002][T12241] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 522.037135][T12241] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 522.039966][T12241] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000551a01 [ 522.042621][T12241] RDX: 0000000000000408 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.045268][T12241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.047920][T12241] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 522.050532][T12241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.053146][T12241] [ 523.132510][T12259] FAULT_INJECTION: forcing a failure. [ 523.132510][T12259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.137293][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.0.2114 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 523.141089][T12259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 523.144676][T12259] Call Trace: [ 523.145924][T12259] [ 523.146910][T12259] dump_stack_lvl+0x16c/0x1f0 [ 523.148472][T12259] should_fail_ex+0x497/0x5b0 [ 523.150151][T12259] _copy_from_user+0x30/0xf0 [ 523.151732][T12259] get_compat_msghdr+0xa8/0x170 [ 523.153402][T12259] ? __pfx_get_compat_msghdr+0x10/0x10 [ 523.155260][T12259] ? find_held_lock+0x2d/0x110 [ 523.156894][T12259] ___sys_recvmsg+0x193/0x1a0 [ 523.158538][T12259] ? __pfx____sys_recvmsg+0x10/0x10 [ 523.160292][T12259] ? lock_acquire+0x2f/0xb0 [ 523.161521][T12259] ? __fget_files+0x40/0x3f0 [ 523.162922][T12259] ? __pfx___might_resched+0x10/0x10 [ 523.164287][T12259] ? fdget+0x176/0x210 [ 523.165338][T12259] do_recvmmsg+0x51a/0x750 [ 523.166531][T12259] ? __pfx_do_recvmmsg+0x10/0x10 [ 523.167820][T12259] ? __pfx_lock_release+0x10/0x10 [ 523.169193][T12259] ? vfs_write+0x14d/0x1140 [ 523.170504][T12259] ? __fget_files+0x244/0x3f0 [ 523.171694][T12259] __sys_recvmmsg+0x21e/0x280 [ 523.172923][T12259] ? __pfx___sys_recvmmsg+0x10/0x10 [ 523.174414][T12259] ? __pfx_ksys_write+0x10/0x10 [ 523.175595][T12259] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 523.177084][T12259] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.178444][T12259] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 523.180451][T12259] __do_fast_syscall_32+0x73/0x120 [ 523.181858][T12259] do_fast_syscall_32+0x32/0x80 [ 523.183201][T12259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.184829][T12259] RIP: 0023:0xf7f58579 [ 523.185916][T12259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 523.192270][T12259] RSP: 002b:00000000f56b556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 523.195015][T12259] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002440 [ 523.197602][T12259] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.200225][T12259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.202459][T12259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.204636][T12259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.207020][T12259] [ 523.560621][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 523.750358][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 523.775760][T12271] syzkaller0: entered promiscuous mode [ 523.778490][T12271] syzkaller0: entered allmulticast mode [ 523.967676][T12278] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2120'. [ 524.046848][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 524.218638][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.222291][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.226106][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.228682][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.233904][ T35] usb 7-1: config 0 descriptor?? [ 524.336871][ T5796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 524.487669][ T5796] usb 6-1: Using ep0 maxpacket: 32 [ 524.491993][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 524.499139][ T5796] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 524.502218][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 524.504957][ T5796] usb 6-1: Product: syz [ 524.506485][ T5796] usb 6-1: Manufacturer: syz [ 524.508520][ T5796] usb 6-1: SerialNumber: syz [ 524.512560][ T5796] usb 6-1: config 0 descriptor?? [ 524.514826][T12284] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 524.648059][ T35] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 524.651442][ T35] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 524.654577][ T35] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 524.669108][ T35] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 524.844607][T12271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.854362][T12271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.859636][ T35] usb 7-1: USB disconnect, device number 11 [ 526.544557][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 526.659213][ T39] audit: type=1326 audit(1727882992.177:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.667937][ T39] audit: type=1326 audit(1727882992.177:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.678001][ T39] audit: type=1326 audit(1727882992.187:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.686635][ T39] audit: type=1326 audit(1727882992.187:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.697753][ T39] audit: type=1326 audit(1727882992.187:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.705910][ T39] audit: type=1326 audit(1727882992.197:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.713377][ T39] audit: type=1326 audit(1727882992.197:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.721132][ T39] audit: type=1326 audit(1727882992.197:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.728886][ T39] audit: type=1326 audit(1727882992.207:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 526.820213][ T39] audit: type=1326 audit(1727882992.337:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.2128" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 527.150222][T12315] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 527.168531][T11789] usb 6-1: USB disconnect, device number 7 [ 527.170650][T12315] 9pnet_fd: Insufficient options for proto=fd [ 527.504626][T12337] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2134'. [ 527.557879][T12339] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2135'. [ 527.671693][T12342] tmpfs: Bad value for 'mpol' [ 528.531908][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 528.555756][T12356] random: crng reseeded on system resumption [ 528.620553][T12359] FAULT_INJECTION: forcing a failure. [ 528.620553][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.624559][T12359] CPU: 2 UID: 0 PID: 12359 Comm: syz.3.2141 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 528.628333][T12359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 528.632053][T12359] Call Trace: [ 528.633236][T12359] [ 528.634319][T12359] dump_stack_lvl+0x16c/0x1f0 [ 528.636011][T12359] should_fail_ex+0x497/0x5b0 [ 528.637693][T12359] _copy_from_user+0x30/0xf0 [ 528.639331][T12359] get_compat_msghdr+0xa8/0x170 [ 528.641050][T12359] ? __pfx_get_compat_msghdr+0x10/0x10 [ 528.642973][T12359] ? __pfx___lock_acquire+0x10/0x10 [ 528.644798][T12359] ___sys_sendmsg+0x1b0/0x1e0 [ 528.646476][T12359] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.648312][T12359] ? lock_acquire+0x2f/0xb0 [ 528.649957][T12359] ? __fget_files+0x40/0x3f0 [ 528.651597][T12359] ? fdget+0x176/0x210 [ 528.653083][T12359] __sys_sendmsg+0x117/0x1f0 [ 528.654731][T12359] ? __pfx___sys_sendmsg+0x10/0x10 [ 528.656572][T12359] ? __fget_files+0x244/0x3f0 [ 528.658272][T12359] __do_fast_syscall_32+0x73/0x120 [ 528.660058][T12359] do_fast_syscall_32+0x32/0x80 [ 528.661778][T12359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 528.664022][T12359] RIP: 0023:0xf7fd5579 [ 528.665490][T12359] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 528.672269][T12359] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 528.675153][T12359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 528.678128][T12359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.680941][T12359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.683782][T12359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 528.686676][T12359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 528.689391][T12359] [ 528.752339][T12364] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 528.989097][T12369] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 529.182024][T12371] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2144'. [ 529.551131][T12374] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 530.429712][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 531.188035][T12429] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2153'. [ 531.277119][T12432] netfs: Couldn't get user pages (rc=-14) [ 531.369195][T12435] binder: 12434:12435 ioctl c0306201 0 returned -14 [ 531.391408][T12435] syz.3.2155 (12435): drop_caches: 2 [ 531.507669][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 531.640238][T12438] ptrace attach of "/syz-executor exec"[12442] was attempted by "/syz-executor exec"[12438] [ 531.670240][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 531.670253][ T39] audit: type=1326 audit(1727882997.187:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.681872][ T39] audit: type=1326 audit(1727882997.187:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f585a7 code=0x7ffc0000 [ 531.689501][ T39] audit: type=1326 audit(1727882997.187:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.698833][ T39] audit: type=1326 audit(1727882997.197:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.705661][ T39] audit: type=1326 audit(1727882997.197:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f585a7 code=0x7ffc0000 [ 531.713302][ T39] audit: type=1326 audit(1727882997.197:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.719825][ T39] audit: type=1326 audit(1727882997.217:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.726418][ T39] audit: type=1326 audit(1727882997.217:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f585a7 code=0x7ffc0000 [ 531.733663][ T39] audit: type=1326 audit(1727882997.217:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 531.741045][ T39] audit: type=1326 audit(1727882997.217:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.0.2157" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 532.584287][T12453] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 532.589196][T12453] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 532.877135][T12458] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2162'. [ 533.158122][T12462] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 533.180792][T12462] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 533.193663][T12462] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 533.224719][T12464] binder: 12463:12464 ioctl c0306201 0 returned -14 [ 533.241764][T12464] syz.0.2165 (12464): drop_caches: 2 [ 533.567253][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 534.118490][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 534.158198][T12488] binder: 12487:12488 ioctl c0306201 0 returned -14 [ 534.169573][T12488] syz.1.2171 (12488): drop_caches: 2 [ 535.428683][T12499] netfs: Couldn't get user pages (rc=-14) [ 535.544463][T12501] syz.3.2175 (12501): drop_caches: 2 [ 535.935401][T12512] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 537.449964][T12534] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 537.483876][ T39] kauditd_printk_skb: 227 callbacks suppressed [ 537.483896][ T39] audit: type=1326 audit(1727883002.997:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.1.2183" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ee579 code=0x0 [ 538.028474][T12543] syz.0.2184 (12543): drop_caches: 2 [ 540.068614][T12572] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 540.071008][T12572] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 540.078612][T12572] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 540.278090][T12575] input: syz0 as /devices/virtual/input/input14 [ 540.585477][T12578] syz.3.2193 (12578): drop_caches: 2 [ 540.723156][T12581] FAULT_INJECTION: forcing a failure. [ 540.723156][T12581] name failslab, interval 1, probability 0, space 0, times 0 [ 540.727974][T12581] CPU: 2 UID: 0 PID: 12581 Comm: syz.3.2194 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 540.731651][T12581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.735308][T12581] Call Trace: [ 540.736490][T12581] [ 540.737582][T12581] dump_stack_lvl+0x16c/0x1f0 [ 540.739216][T12581] should_fail_ex+0x497/0x5b0 [ 540.740851][T12581] ? fs_reclaim_acquire+0xae/0x160 [ 540.742622][T12581] should_failslab+0xc2/0x120 [ 540.744259][T12581] __kmalloc_noprof+0xcb/0x410 [ 540.745955][T12581] nla_strdup+0xc6/0x150 [ 540.747367][T12581] nf_tables_newtable+0xe08/0x1b40 [ 540.749129][T12581] ? net_generic+0xea/0x2a0 [ 540.750709][T12581] ? __pfx_nf_tables_newtable+0x10/0x10 [ 540.752599][T12581] ? trace_lock_acquire+0x14a/0x1d0 [ 540.754402][T12581] ? __nla_parse+0x40/0x60 [ 540.755984][T12581] nfnetlink_rcv_batch+0x1a28/0x24e0 [ 540.757923][T12581] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 540.759884][T12581] ? __pfx_lock_release+0x10/0x10 [ 540.761648][T12581] ? __local_bh_enable_ip+0xa4/0x120 [ 540.763464][T12581] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.765316][T12581] ? __pfx___dev_queue_xmit+0x10/0x10 [ 540.767252][T12581] ? __nla_parse+0x40/0x60 [ 540.768812][T12581] nfnetlink_rcv+0x3c3/0x430 [ 540.770436][T12581] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 540.772222][T12581] netlink_unicast+0x53c/0x7f0 [ 540.773818][T12581] ? __pfx_netlink_unicast+0x10/0x10 [ 540.775157][T12581] ? __phys_addr_symbol+0x30/0x80 [ 540.776467][T12581] ? __check_object_size+0x488/0x710 [ 540.777889][T12581] netlink_sendmsg+0x8b8/0xd70 [ 540.779155][T12581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.780557][T12581] ? lock_acquire+0x2f/0xb0 [ 540.781790][T12581] ____sys_sendmsg+0x9ae/0xb40 [ 540.783055][T12581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.784441][T12581] ? get_compat_msghdr+0x11b/0x170 [ 540.785810][T12581] ? __pfx___lock_acquire+0x10/0x10 [ 540.787180][T12581] ___sys_sendmsg+0x135/0x1e0 [ 540.788424][T12581] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.789811][T12581] ? lock_acquire+0x2f/0xb0 [ 540.791020][T12581] ? __fget_files+0x40/0x3f0 [ 540.792245][T12581] ? fdget+0x176/0x210 [ 540.793326][T12581] __sys_sendmsg+0x117/0x1f0 [ 540.794571][T12581] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.795915][T12581] ? __fget_files+0x244/0x3f0 [ 540.797163][T12581] __do_fast_syscall_32+0x73/0x120 [ 540.798515][T12581] do_fast_syscall_32+0x32/0x80 [ 540.799806][T12581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.801439][T12581] RIP: 0023:0xf7fd5579 [ 540.802523][T12581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.807515][T12581] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 540.809723][T12581] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000c2c0 [ 540.811790][T12581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.813859][T12581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.815917][T12581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 540.817980][T12581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.820053][T12581] [ 541.131330][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 541.181438][T12586] FAULT_INJECTION: forcing a failure. [ 541.181438][T12586] name failslab, interval 1, probability 0, space 0, times 0 [ 541.185065][T12586] CPU: 0 UID: 0 PID: 12586 Comm: syz.2.2195 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 541.187933][T12586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 541.190800][T12586] Call Trace: [ 541.191722][T12586] [ 541.192524][T12586] dump_stack_lvl+0x16c/0x1f0 [ 541.193785][T12586] should_fail_ex+0x497/0x5b0 [ 541.195034][T12586] ? fs_reclaim_acquire+0xae/0x160 [ 541.196385][T12586] should_failslab+0xc2/0x120 [ 541.197640][T12586] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 541.199054][T12586] ? vm_area_dup+0x21/0x300 [ 541.200262][T12586] vm_area_dup+0x21/0x300 [ 541.201408][T12586] __split_vma+0x181/0x1210 [ 541.202630][T12586] ? __pfx___split_vma+0x10/0x10 [ 541.203944][T12586] vms_gather_munmap_vmas+0x38f/0x1750 [ 541.205402][T12586] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 541.206978][T12586] ? mas_walk+0x6a6/0x910 [ 541.208337][T12586] mmap_region+0x36c/0x2a50 [ 541.209599][T12586] ? __pfx___lock_acquire+0x10/0x10 [ 541.211051][T12586] ? __pfx_mmap_region+0x10/0x10 [ 541.212378][T12586] ? __pfx_mark_lock+0x10/0x10 [ 541.213707][T12586] ? bpf_lsm_capable+0x9/0x10 [ 541.214971][T12586] ? security_capable+0x7e/0x260 [ 541.216306][T12586] do_mmap+0xc00/0xfc0 [ 541.217405][T12586] vm_mmap_pgoff+0x1ba/0x360 [ 541.218659][T12586] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 541.220024][T12586] ? ksys_write+0x1ad/0x260 [ 541.221263][T12586] ksys_mmap_pgoff+0x7d/0x5c0 [ 541.222552][T12586] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 541.223990][T12586] __do_fast_syscall_32+0x73/0x120 [ 541.225372][T12586] do_fast_syscall_32+0x32/0x80 [ 541.226703][T12586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.228403][T12586] RIP: 0023:0xf73ce579 [ 541.229502][T12586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 541.234636][T12586] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 541.236808][T12586] RAX: ffffffffffffffda RBX: 0000000020001000 RCX: 0000000000c00000 [ 541.238888][T12586] RDX: 0000000000000000 RSI: 0000000000003032 RDI: 00000000ffffffff [ 541.241539][T12586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.243593][T12586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 541.245697][T12586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.247787][T12586] [ 541.248790][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.336223][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2196'. [ 542.089229][T12604] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 542.161760][T12603] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 542.391958][T12609] netfs: Couldn't get user pages (rc=-14) [ 542.768164][T12615] syz.0.2202 (12615): drop_caches: 2 [ 543.034759][T12617] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 543.250872][T12626] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2205'. [ 543.311059][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2206'. [ 543.481364][T12633] gfs2: gfs2 mount does not exist [ 544.098048][T12635] netfs: Couldn't get user pages (rc=-14) [ 544.428887][T12649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2212'. [ 545.256321][T12658] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2214'. [ 546.212240][T12672] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 549.697932][T12687] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2223'. [ 549.798778][T12689] syz.3.2224 (12689): drop_caches: 2 [ 549.858728][T12691] netfs: Couldn't get user pages (rc=-14) [ 549.870291][T12691] tipc: Enabling of bearer rejected, already enabled [ 550.734901][T12714] infiniband syz1: set active [ 550.738548][T12714] infiniband syz1: added bond_slave_1 [ 550.779689][T12711] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 550.991470][T12730] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2232'. [ 550.998495][T12714] RDS/IB: syz1: added [ 551.000781][T12714] smc: adding ib device syz1 with port count 1 [ 551.005590][T12714] smc: ib device syz1 port 1 has pnetid [ 551.330604][T12736] syz.0.2234 (12736): drop_caches: 2 [ 553.649750][T12770] syz.3.2243 (12770): drop_caches: 2 [ 553.839491][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 555.812234][T12797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 557.437560][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 557.514439][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2262'. [ 557.602212][T12842] block nbd0: shutting down sockets [ 558.480849][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'. [ 558.943601][T12872] FAULT_INJECTION: forcing a failure. [ 558.943601][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 558.953767][T12872] CPU: 2 UID: 0 PID: 12872 Comm: syz.2.2272 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 558.957791][T12872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.962147][T12872] Call Trace: [ 558.963627][T12872] [ 558.964787][T12872] dump_stack_lvl+0x16c/0x1f0 [ 558.966792][T12872] should_fail_ex+0x497/0x5b0 [ 558.968648][T12872] ? fs_reclaim_acquire+0xae/0x160 [ 558.970687][T12872] should_failslab+0xc2/0x120 [ 558.972489][T12872] __kmalloc_noprof+0xcb/0x410 [ 558.974443][T12872] bpf_test_init.isra.0+0xa5/0x150 [ 558.976365][T12872] bpf_prog_test_run_xdp+0x4f0/0x1580 [ 558.978547][T12872] ? lock_acquire+0x2f/0xb0 [ 558.980558][T12872] ? __fget_files+0x40/0x3f0 [ 558.982531][T12872] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 558.984692][T12872] ? fput+0x30/0x390 [ 558.986169][T12872] ? __bpf_prog_get+0xa0/0x290 [ 558.987965][T12872] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 558.990111][T12872] __sys_bpf+0x1921/0x5780 [ 558.991798][T12872] ? ksys_write+0x21e/0x260 [ 558.993484][T12872] ? __pfx___sys_bpf+0x10/0x10 [ 558.995234][T12872] ? vfs_write+0x14d/0x1140 [ 558.996911][T12872] ? __mutex_unlock_slowpath+0x164/0x650 [ 558.998995][T12872] ? fput+0x30/0x390 [ 559.000446][T12872] ? ksys_write+0x1ad/0x260 [ 559.002102][T12872] ? __pfx_ksys_write+0x10/0x10 [ 559.003888][T12872] __ia32_sys_bpf+0x76/0xe0 [ 559.005582][T12872] __do_fast_syscall_32+0x73/0x120 [ 559.007465][T12872] do_fast_syscall_32+0x32/0x80 [ 559.009187][T12872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.011457][T12872] RIP: 0023:0xf73ce579 [ 559.012949][T12872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 559.019703][T12872] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 559.022701][T12872] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 559.025634][T12872] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.028540][T12872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.031419][T12872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 559.034301][T12872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.037181][T12872] [ 559.394903][T12883] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2276'. [ 559.432895][T12886] FAULT_INJECTION: forcing a failure. [ 559.432895][T12886] name failslab, interval 1, probability 0, space 0, times 0 [ 559.436028][T12886] CPU: 3 UID: 0 PID: 12886 Comm: syz.1.2277 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 559.438984][T12886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 559.441800][T12886] Call Trace: [ 559.442692][T12886] [ 559.443488][T12886] dump_stack_lvl+0x16c/0x1f0 [ 559.444760][T12886] should_fail_ex+0x497/0x5b0 [ 559.446313][T12886] ? fs_reclaim_acquire+0xae/0x160 [ 559.447868][T12886] should_failslab+0xc2/0x120 [ 559.449344][T12886] __kmalloc_noprof+0xcb/0x410 [ 559.451057][T12886] ? __pfx_d_absolute_path+0x10/0x10 [ 559.452631][T12886] tomoyo_encode2+0x100/0x3e0 [ 559.454004][T12886] tomoyo_realpath_from_path+0x1a7/0x710 [ 559.455797][T12886] tomoyo_path_number_perm+0x245/0x5b0 [ 559.457538][T12886] ? tomoyo_path_number_perm+0x232/0x5b0 [ 559.459230][T12886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 559.461354][T12886] ? trace_lock_acquire+0x14a/0x1d0 [ 559.463181][T12886] ? lock_acquire+0x2f/0xb0 [ 559.464796][T12886] ? __fget_files+0x40/0x3f0 [ 559.466453][T12886] ? __fget_files+0x244/0x3f0 [ 559.468498][T12886] security_file_ioctl_compat+0x9b/0x240 [ 559.470470][T12886] __do_compat_sys_ioctl+0x52/0x2b0 [ 559.472381][T12886] __do_fast_syscall_32+0x73/0x120 [ 559.474027][T12886] do_fast_syscall_32+0x32/0x80 [ 559.475407][T12886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.477114][T12886] RIP: 0023:0xf73ee579 [ 559.478248][T12886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 559.483672][T12886] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 559.485946][T12886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b32 [ 559.488108][T12886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.490260][T12886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.492370][T12886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 559.494565][T12886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.496780][T12886] [ 559.502262][T12886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 560.232610][T12896] syz.3.2282 (12896): drop_caches: 2 [ 560.282546][T12901] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2283'. [ 560.657641][T12913] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2285'. [ 560.712103][T12915] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2286'. [ 561.324827][T12921] FAULT_INJECTION: forcing a failure. [ 561.324827][T12921] name failslab, interval 1, probability 0, space 0, times 0 [ 561.329283][T12921] CPU: 3 UID: 0 PID: 12921 Comm: syz.3.2288 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 561.333338][T12921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 561.337128][T12921] Call Trace: [ 561.338301][T12921] [ 561.339302][T12921] dump_stack_lvl+0x16c/0x1f0 [ 561.340950][T12921] should_fail_ex+0x497/0x5b0 [ 561.342597][T12921] ? __pfx_lock_release+0x10/0x10 [ 561.344416][T12921] should_failslab+0xc2/0x120 [ 561.346265][T12921] __kmalloc_cache_noprof+0x6b/0x310 [ 561.348282][T12921] ? __hw_addr_add_ex+0x310/0x700 [ 561.350126][T12921] __hw_addr_add_ex+0x310/0x700 [ 561.351825][T12921] dev_addr_init+0x13b/0x230 [ 561.353443][T12921] ? __pfx_dev_addr_init+0x10/0x10 [ 561.355233][T12921] alloc_netdev_mqs+0x32f/0x12a0 [ 561.356952][T12921] ? __pfx_br_dev_setup+0x10/0x10 [ 561.358739][T12921] rtnl_create_link+0xbed/0xf10 [ 561.360572][T12921] __rtnl_newlink+0x10b3/0x1920 [ 561.362474][T12921] ? __pfx___rtnl_newlink+0x10/0x10 [ 561.364390][T12921] rtnl_newlink+0x67/0xa0 [ 561.365860][T12921] ? __pfx_rtnl_newlink+0x10/0x10 [ 561.367636][T12921] rtnetlink_rcv_msg+0x3c7/0xea0 [ 561.369363][T12921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.371237][T12921] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.373163][T12921] netlink_rcv_skb+0x165/0x410 [ 561.374964][T12921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.377021][T12921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.378970][T12921] ? netlink_deliver_tap+0x1ae/0xcf0 [ 561.380821][T12921] netlink_unicast+0x53c/0x7f0 [ 561.382501][T12921] ? __pfx_netlink_unicast+0x10/0x10 [ 561.384325][T12921] ? __phys_addr_symbol+0x30/0x80 [ 561.386138][T12921] ? __check_object_size+0x4a1/0x710 [ 561.388061][T12921] netlink_sendmsg+0x8b8/0xd70 [ 561.390132][T12921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.392134][T12921] ? lock_acquire+0x2f/0xb0 [ 561.393747][T12921] ____sys_sendmsg+0x9ae/0xb40 [ 561.395474][T12921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.397442][T12921] ? get_compat_msghdr+0x11b/0x170 [ 561.399338][T12921] ? __pfx___lock_acquire+0x10/0x10 [ 561.401176][T12921] ___sys_sendmsg+0x135/0x1e0 [ 561.402846][T12921] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.404680][T12921] ? lock_acquire+0x2f/0xb0 [ 561.406317][T12921] ? __fget_files+0x40/0x3f0 [ 561.407962][T12921] ? fdget+0x176/0x210 [ 561.409421][T12921] __sys_sendmsg+0x117/0x1f0 [ 561.411083][T12921] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.413429][T12921] ? __fget_files+0x244/0x3f0 [ 561.415937][T12921] __do_fast_syscall_32+0x73/0x120 [ 561.417817][T12921] do_fast_syscall_32+0x32/0x80 [ 561.419532][T12921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.421870][T12921] RIP: 0023:0xf7fd5579 [ 561.423330][T12921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 561.430786][T12921] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 561.434386][T12921] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200000c0 [ 561.437176][T12921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.439928][T12921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.442733][T12921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 561.445625][T12921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.448385][T12921] [ 562.219953][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.222547][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.173697][T12944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.181233][T12944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.186860][T12944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.190651][T12944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.196212][T12944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.200709][T12944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.218565][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.231479][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.234602][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.238144][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.242121][ T5352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.268389][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.512372][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.599284][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.611644][T12943] chnl_net:caif_netlink_parms(): no params data found [ 563.704341][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.816092][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.828552][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.831489][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.834210][T12943] bridge_slave_0: entered allmulticast mode [ 563.838713][T12943] bridge_slave_0: entered promiscuous mode [ 563.848160][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.852249][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.858889][T12943] bridge_slave_1: entered allmulticast mode [ 563.866313][T12943] bridge_slave_1: entered promiscuous mode [ 563.924404][T12943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.932369][T12943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.979719][T12943] team0: Port device team_slave_0 added [ 563.990605][T12943] team0: Port device team_slave_1 added [ 564.062485][T12943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.064386][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.072078][T12943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.079947][T12943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.081927][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.089584][T12943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.123328][ T12] bridge_slave_1: left allmulticast mode [ 564.128846][ T12] bridge_slave_1: left promiscuous mode [ 564.134270][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.144426][ T12] bridge_slave_0: left allmulticast mode [ 564.147348][ T12] bridge_slave_0: left promiscuous mode [ 564.149692][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.176149][T12969] syz.3.2297 (12969): drop_caches: 2 [ 564.612527][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.617447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.622613][ T12] infiniband syz1: set down [ 564.624176][ T12] bond0 (unregistering): Released all slaves [ 564.675275][T12943] hsr_slave_0: entered promiscuous mode [ 564.689710][T12943] hsr_slave_1: entered promiscuous mode [ 564.693828][T12943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.696049][T12943] Cannot create hsr debugfs directory [ 564.705251][ T12] tipc: Left network mode [ 565.201900][ T12] hsr_slave_0: left promiscuous mode [ 565.203907][ T12] hsr_slave_1: left promiscuous mode [ 565.230461][ T12] veth1_macvtap: left promiscuous mode [ 565.232672][ T12] veth0_macvtap: left promiscuous mode [ 565.234189][ T12] veth1_vlan: left promiscuous mode [ 565.235612][ T12] veth0_vlan: left promiscuous mode [ 565.340462][ T5352] Bluetooth: hci0: command tx timeout [ 566.241804][ T12] team0 (unregistering): Port device team_slave_1 removed [ 566.344981][ T12] team0 (unregistering): Port device team_slave_0 removed [ 566.505176][ T9087] smc: removing ib device syz1 [ 567.132346][T13003] tipc: Started in network mode [ 567.133860][T13003] tipc: Node identity ac1414aa, cluster identity 4711 [ 567.138589][T13003] tipc: Enabled bearer , priority 10 [ 567.417568][ T5352] Bluetooth: hci0: command tx timeout [ 567.463515][T13027] netfs: Couldn't get user pages (rc=-14) [ 567.546901][T13027] tipc: Enabling of bearer rejected, already enabled [ 567.578722][T12943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.600270][T12943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.619449][T12943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.635710][T12943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.688896][ T12] IPVS: stop unused estimator thread 0... [ 567.720252][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.740594][T12943] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.748472][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.750683][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.761069][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.763109][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.787347][T12943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.868966][T12943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.891405][T12943] veth0_vlan: entered promiscuous mode [ 567.907765][T12943] veth1_vlan: entered promiscuous mode [ 567.931381][T12943] veth0_macvtap: entered promiscuous mode [ 567.936566][T12943] veth1_macvtap: entered promiscuous mode [ 567.952113][T12943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.966004][T12943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.973447][T12943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.978334][T12943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.981603][T12943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.984940][T12943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.033096][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.036316][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.061395][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.064129][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.138512][T11789] tipc: Node number set to 2886997162 [ 568.146182][T13045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2294'. [ 568.672025][T13057] FAULT_INJECTION: forcing a failure. [ 568.672025][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.676321][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.0.2313 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 568.680300][T13057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 568.683761][T13057] Call Trace: [ 568.684637][T13057] [ 568.685444][T13057] dump_stack_lvl+0x16c/0x1f0 [ 568.686677][T13057] should_fail_ex+0x497/0x5b0 [ 568.687909][T13057] _copy_from_user+0x30/0xf0 [ 568.689119][T13057] ip6_mroute_setsockopt+0xa49/0x2790 [ 568.690640][T13057] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 568.692132][T13057] ? down_read_nested+0x80/0x330 [ 568.693695][T13057] ? hlock_class+0x4e/0x130 [ 568.695272][T13057] ? mark_lock+0xb5/0xc60 [ 568.696882][T13057] ? find_held_lock+0x2d/0x110 [ 568.698593][T13057] ? __might_fault+0x13b/0x190 [ 568.700264][T13057] ? lock_acquire+0x2f/0xb0 [ 568.701802][T13057] ? __might_fault+0xe3/0x190 [ 568.703227][T13057] ? __might_fault+0xe3/0x190 [ 568.704599][T13057] ? do_ipv6_setsockopt+0x8f7/0x4800 [ 568.706071][T13057] do_ipv6_setsockopt+0x8f7/0x4800 [ 568.707397][T13057] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 568.708837][T13057] ? hlock_class+0x4e/0x130 [ 568.710033][T13057] ? mark_lock+0xb5/0xc60 [ 568.711390][T13057] ? aa_label_sk_perm+0x19d/0x5a0 [ 568.713155][T13057] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 568.714911][T13057] ? __pfx___lock_acquire+0x10/0x10 [ 568.716701][T13057] ? hlock_class+0x4e/0x130 [ 568.718234][T13057] ? ipv6_setsockopt+0xcb/0x170 [ 568.719932][T13057] ipv6_setsockopt+0xcb/0x170 [ 568.721607][T13057] rawv6_setsockopt+0xdc/0x700 [ 568.723212][T13057] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 568.724821][T13057] ? sock_common_setsockopt+0x2e/0xf0 [ 568.726780][T13057] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 568.728963][T13057] do_sock_setsockopt+0x222/0x480 [ 568.730844][T13057] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 568.732802][T13057] ? fdget+0x176/0x210 [ 568.734141][T13057] __sys_setsockopt+0x1a4/0x270 [ 568.735834][T13057] ? __pfx___sys_setsockopt+0x10/0x10 [ 568.737686][T13057] ? fput+0x30/0x390 [ 568.739070][T13057] ? ksys_write+0x1ad/0x260 [ 568.740724][T13057] ? __pfx_ksys_write+0x10/0x10 [ 568.742565][T13057] __ia32_sys_setsockopt+0xbc/0x160 [ 568.744446][T13057] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.746294][T13057] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 568.748582][T13057] __do_fast_syscall_32+0x73/0x120 [ 568.750416][T13057] do_fast_syscall_32+0x32/0x80 [ 568.752123][T13057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.754450][T13057] RIP: 0023:0xf7f58579 [ 568.756043][T13057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 568.762759][T13057] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 568.765669][T13057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 568.768348][T13057] RDX: 00000000000000ca RSI: 00000000200000c0 RDI: 000000000000005c [ 568.770947][T13057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.773527][T13057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.776238][T13057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.779012][T13057] [ 568.938144][T13059] netfs: Couldn't get user pages (rc=-14) [ 568.952383][T13059] tipc: Enabling of bearer rejected, already enabled [ 569.507008][ T5352] Bluetooth: hci0: command tx timeout [ 570.047062][T13079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2321'. [ 570.098295][T13082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 570.130278][T13082] FAULT_INJECTION: forcing a failure. [ 570.130278][T13082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.134603][T13082] CPU: 3 UID: 0 PID: 13082 Comm: syz.0.2322 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 570.137530][T13082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 570.140302][T13082] Call Trace: [ 570.141224][T13082] [ 570.142093][T13082] dump_stack_lvl+0x16c/0x1f0 [ 570.143312][T13082] should_fail_ex+0x497/0x5b0 [ 570.144526][T13082] strncpy_from_user+0x3b/0x2a0 [ 570.145822][T13082] getname_flags.part.0+0x8f/0x550 [ 570.147239][T13082] getname_flags+0x93/0xf0 [ 570.148465][T13082] __ia32_sys_renameat2+0xc7/0x130 [ 570.149933][T13082] __do_fast_syscall_32+0x73/0x120 [ 570.151362][T13082] do_fast_syscall_32+0x32/0x80 [ 570.153096][T13082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.154861][T13082] RIP: 0023:0xf7f58579 [ 570.155960][T13082] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 570.160857][T13082] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 570.162993][T13082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000a00 [ 570.165038][T13082] RDX: 00000000ffffff9c RSI: 0000000020000600 RDI: 0000000000000002 [ 570.167088][T13082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.169138][T13082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 570.171216][T13082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.174382][T13082] [ 570.309873][T13089] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2325'. [ 570.380740][T13091] netfs: Couldn't get user pages (rc=-14) [ 570.387189][T13090] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20f82 pfn:0x1a848 [ 570.390897][T13090] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 570.393094][T13090] page_type: f0(buddy) [ 570.394491][T13090] raw: 00fff00000000000 ffffea00006a0208 ffffea0000489e08 0000000000000000 [ 570.398775][T13090] raw: 0000000000020f82 0000000000000003 00000000f0000000 0000000000000000 [ 570.401573][T13090] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 570.404634][T13090] page_owner tracks the page as freed [ 570.406602][T13090] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 12665, tgid 12662 (syz.0.2216), ts 549681927644, free_ts 549811298682 [ 570.412627][T13090] post_alloc_hook+0x2d1/0x350 [ 570.414266][T13090] get_page_from_freelist+0x101e/0x3070 [ 570.416213][T13090] __alloc_pages_noprof+0x223/0x25c0 [ 570.418417][T13090] alloc_pages_mpol_noprof+0x2c9/0x610 [ 570.419997][T13090] folio_alloc_mpol_noprof+0x36/0xd0 [ 570.421731][T13090] vma_alloc_folio_noprof+0xee/0x1b0 [ 570.423540][T13090] do_wp_page+0x10d1/0x4930 [ 570.425013][T13090] __handle_mm_fault+0x1a93/0x2a10 [ 570.426671][T13090] handle_mm_fault+0x3fa/0xaa0 [ 570.428237][T13090] do_user_addr_fault+0x7a3/0x13f0 [ 570.429608][T13090] exc_page_fault+0x5c/0xc0 [ 570.430824][T13090] asm_exc_page_fault+0x26/0x30 [ 570.432211][T13090] page last free pid 12665 tgid 12662 stack trace: [ 570.434103][T13090] free_unref_folios+0x956/0x1310 [ 570.435504][T13090] folios_put_refs+0x551/0x750 [ 570.437715][T13090] free_pages_and_swap_cache+0x36d/0x510 [ 570.439654][T13090] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 570.441563][T13090] tlb_flush_mmu+0xe9/0x590 [ 570.442974][T13090] unmap_page_range+0x1bf4/0x3ce0 [ 570.449921][T13090] unmap_single_vma+0x194/0x2b0 [ 570.451263][T13090] unmap_vmas+0x22f/0x490 [ 570.452424][T13090] exit_mmap+0x1c6/0xb30 [ 570.453623][T13090] __mmput+0x12a/0x480 [ 570.456464][T13090] mmput+0x62/0x70 [ 570.457797][T13090] do_exit+0x9bf/0x2d70 [ 570.458925][T13090] do_group_exit+0xd3/0x2a0 [ 570.460247][T13090] get_signal+0x2658/0x26d0 [ 570.461458][T13090] arch_do_signal_or_restart+0x90/0x7e0 [ 570.462908][T13090] syscall_exit_to_user_mode+0x150/0x2a0 [ 570.465782][T13090] ------------[ cut here ]------------ [ 570.467371][T13090] kernel BUG at include/linux/mm.h:1444! [ 570.469546][T13090] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 570.473616][T13090] CPU: 2 UID: 0 PID: 13090 Comm: syz.0.2326 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 570.476822][T13090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 570.480685][T13090] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.482657][T13090] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 570.489101][T13090] RSP: 0018:ffffc900064defa8 EFLAGS: 00010293 [ 570.491491][T13090] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 570.493827][T13090] RDX: ffff8880214a2440 RSI: ffffffff84873a3f RDI: ffff8880214a2884 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 570.496157][T13090] RBP: ffffea00006a1234 R08: 0000000000000001 R09: fffffbfff2d315af [ 570.498615][T13090] R10: ffffffff9698ad7f R11: ffff88802b628a40 R12: ffffea00006a1200 [ 570.501121][T13090] R13: ffff88805ff5f400 R14: 0000000000001000 R15: 0000000000001000 [ 570.503996][T13090] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:0000000058415440 [ 570.506705][T13090] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 570.508567][T13090] CR2: 00000000f5756470 CR3: 000000002aa04000 CR4: 0000000000352ef0 [ 570.510623][T13090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.512831][T13090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.515543][T13090] Call Trace: [ 570.516672][T13090] [ 570.517693][T13090] ? die+0x31/0x80 [ 570.518977][T13090] ? do_trap+0x232/0x430 [ 570.520441][T13090] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.522507][T13090] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.524544][T13090] ? do_error_trap+0xf4/0x230 [ 570.526161][T13090] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.528176][T13090] ? handle_invalid_op+0x34/0x40 [ 570.529809][T13090] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.531790][T13090] ? exc_invalid_op+0x2e/0x50 [ 570.533377][T13090] ? asm_exc_invalid_op+0x1a/0x20 [ 570.535082][T13090] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 570.537118][T13090] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.539187][T13090] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 570.541271][T13090] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 570.543424][T13090] ? delete_node+0x207/0x8e0 [ 570.545003][T13090] iov_iter_get_pages_alloc2+0x53/0xf0 [ 570.546861][T13090] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 570.549133][T13090] ? p9pdu_vwritef+0x368/0x21d0 [ 570.550828][T13090] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 570.553449][T13090] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 570.555319][T13090] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 570.557133][T13090] ? p9_tag_alloc+0x4cc/0x870 [ 570.558757][T13090] ? reacquire_held_locks+0x464/0x4c0 [ 570.560576][T13090] p9_virtio_zc_request+0x991/0x1460 [ 570.562367][T13090] ? p9pdu_writef+0xc4/0x100 [ 570.563943][T13090] ? __pfx_p9pdu_writef+0x10/0x10 [ 570.565667][T13090] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 570.567385][T13090] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 570.569305][T13090] ? rcu_is_watching+0x12/0xc0 [ 570.570945][T13090] ? trace_9p_protocol_dump+0x192/0x220 [ 570.572816][T13090] ? rcu_is_watching+0x12/0xc0 [ 570.574487][T13090] ? p9_client_prepare_req+0x111/0x4d0 [ 570.576570][T13090] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 570.578615][T13090] ? mark_lock+0xb5/0xc60 [ 570.580286][T13090] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 570.582443][T13090] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 570.584628][T13090] ? hlock_class+0x4e/0x130 [ 570.586194][T13090] ? __lock_acquire+0x163e/0x3ce0 [ 570.587913][T13090] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 570.589704][T13090] p9_client_read_once+0x443/0x820 [ 570.591418][T13090] ? __pfx_p9_client_read_once+0x10/0x10 [ 570.593330][T13090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 570.595309][T13090] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.597079][T13090] p9_client_read+0x13f/0x1b0 [ 570.598723][T13090] v9fs_issue_read+0x115/0x310 [ 570.600456][T13090] ? __pfx_v9fs_issue_read+0x10/0x10 [ 570.602573][T13090] ? __local_bh_enable_ip+0xa4/0x120 [ 570.604507][T13090] netfs_read_to_pagecache+0x5c9/0x9a0 [ 570.606478][T13090] netfs_readahead+0x7fa/0xaa0 [ 570.608103][T13090] ? __pfx_netfs_readahead+0x10/0x10 [ 570.609930][T13090] read_pages+0x1a8/0xd80 [ 570.611400][T13090] ? xas_load+0x49/0x5b0 [ 570.612858][T13090] ? xa_load+0xc8/0x2c0 [ 570.614286][T13090] ? __pfx_read_pages+0x10/0x10 [ 570.615932][T13090] ? __pfx_xa_load+0x10/0x10 [ 570.617525][T13090] ? maybe_unlock_mmap_for_io.part.0+0x111/0x390 [ 570.619638][T13090] ? reacquire_held_locks+0x20b/0x4c0 [ 570.621329][T13090] page_cache_ra_unbounded+0x543/0x6c0 [ 570.623144][T13090] page_cache_ra_order+0x7d9/0xc90 [ 570.624936][T13090] filemap_fault+0x148d/0x2820 [ 570.626553][T13090] ? __pfx_filemap_fault+0x10/0x10 [ 570.628297][T13090] ? lock_acquire+0x2f/0xb0 [ 570.629883][T13090] ? __pte_offset_map+0x42/0x540 [ 570.631555][T13090] ? __pfx_filemap_map_pages+0x10/0x10 [ 570.633412][T13090] __do_fault+0x10a/0x490 [ 570.634878][T13090] ? __pfx_filemap_map_pages+0x10/0x10 [ 570.636716][T13090] do_pte_missing+0x1a8/0x3e50 [ 570.638347][T13090] ? lock_vma_under_rcu+0x13e/0x980 [ 570.640102][T13090] __handle_mm_fault+0x100a/0x2a10 [ 570.641899][T13090] ? __pfx_lock_release+0x10/0x10 [ 570.643664][T13090] ? lock_vma_under_rcu+0x13e/0x980 [ 570.645442][T13090] ? __pfx___handle_mm_fault+0x10/0x10 [ 570.647260][T13090] handle_mm_fault+0x3fa/0xaa0 [ 570.648878][T13090] do_user_addr_fault+0x60d/0x13f0 [ 570.650616][T13090] exc_page_fault+0x5c/0xc0 [ 570.652195][T13090] asm_exc_page_fault+0x26/0x30 [ 570.653860][T13090] RIP: 0023:0xf722243a [ 570.655243][T13090] Code: 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 d1 e9 73 02 66 a5 f3 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 [ 570.661703][T13090] RSP: 002b:00000000ff93b61c EFLAGS: 00010203 [ 570.663772][T13090] RAX: 0000000000000000 RBX: 00000000f73dbff4 RCX: 0000000000000007 [ 570.666446][T13090] RDX: 000000000000000f RSI: 00000000f6ce01d7 RDI: 0000000020000140 [ 570.668947][T13090] RBP: 00000000ff93b898 R08: 0000000000000000 R09: 0000000000000000 [ 570.671456][T13090] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 570.674063][T13090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.676600][T13090] [ 570.677628][T13090] Modules linked in: [ 570.679346][T13090] ---[ end trace 0000000000000000 ]--- [ 570.695019][T13090] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 570.697359][T13090] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 570.703786][T13090] RSP: 0018:ffffc900064defa8 EFLAGS: 00010293 [ 570.706323][T13090] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 570.709332][T13090] RDX: ffff8880214a2440 RSI: ffffffff84873a3f RDI: ffff8880214a2884 [ 570.711916][T13090] RBP: ffffea00006a1234 R08: 0000000000000001 R09: fffffbfff2d315af [ 570.714604][T13090] R10: ffffffff9698ad7f R11: ffff88802b628a40 R12: ffffea00006a1200 [ 570.717321][T13090] R13: ffff88805ff5f400 R14: 0000000000001000 R15: 0000000000001000 [ 570.719926][T13090] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:0000000058415440 [ 570.722866][T13090] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 570.725036][T13090] CR2: 00000000f56d6bac CR3: 000000002aa04000 CR4: 0000000000352ef0 [ 570.728030][T13090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.730768][T13090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.733405][T13090] Kernel panic - not syncing: Fatal exception [ 570.735485][T13090] Kernel Offset: disabled [ 570.736603][T13090] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:30:36 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b43ee80 RCX=ffff88802b421a10 RDX=ffff88802b43fc88 RSI=1ffff110056a7f32 RDI=ffff88802b43fc90 RBP=ffffc90003197de8 RSP=ffffc90003197c50 R8 =1ffffffff1b03371 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000001c60734 R13=dffffc0000000000 R14=ffff88802b43ee80 R15=ffff88802b43ee80 RIP=ffffffff8b13e04b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f298b1d1d00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eb1105a8c8 CR3=00000000498c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 05cbe74905cbe749 ZMM22=9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 9b8b71089b8b7108 ZMM23=1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 1497cd991497cd99 ZMM24=299c6099299c6099 299c6099299c6099 299c6099299c6099 299c6099299c6099 299c6099299c6099 299c6099299c6099 299c6099299c6099 299c6099299c6099 ZMM25=43b4209443b42094 43b4209443b42094 43b4209443b42094 43b4209443b42094 43b4209443b42094 43b4209443b42094 43b4209443b42094 43b4209443b42094 ZMM26=5a3582495a358249 5a3582495a358249 5a3582495a358249 5a3582495a358249 5a3582495a358249 5a3582495a358249 5a3582495a358249 5a3582495a358249 ZMM27=a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c a024e52ca024e52c ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7413000074130000 7413000074130000 7413000074130000 7413000074130000 7413000074130000 7413000074130000 7413000074130000 7413000074130000 info registers vcpu 1 CPU#1 RAX=0000000001dd1f6c RBX=0000000000000001 RCX=ffffffff8b12f739 RDX=ffffed10056a7026 RSI=ffffffff8bb11fe0 RDI=ffffffff8164098c RBP=ffffed10036eb910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=ffffffff8b4f7c60 R12=0000000000000001 R13=ffff88801b75c880 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002b000 CR3=0000000000b22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc900064de908 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000000d R14=ffffffff850359b0 R15=0000000000000000 RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5756470 CR3=000000002aa04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231000000000 0000000a00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81cafa64 RDX=ffff888020858000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888029f5fc20 RSP=ffffc90000e3f7b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802b728a40 R12=ffff888029f5fc00 R13=dffffc0000000000 R14=0000000000000002 R15=ffff8880404de000 RIP=ffffffff818caf70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71a3440 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000