last executing test programs: 16.340247687s ago: executing program 1 (id=1328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000f000000b"], 0x30}}, 0x0) 16.338423222s ago: executing program 1 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x3f000000) 16.240959563s ago: executing program 1 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x8e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 16.240818434s ago: executing program 1 (id=1333): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 16.187672924s ago: executing program 1 (id=1335): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) unshare(0x400) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x11) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioperm(0x0, 0x4, 0x2) finit_module(r4, 0x0, 0x6) r5 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x4000000) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f00000007c0)="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", 0x219, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00') r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x7, 0x2, 0xeeef, 0x9, 0xf}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x5000000, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 15.949165467s ago: executing program 2 (id=1337): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6, 0xcec}}, './file0\x00'}) sendmmsg$alg(r2, &(0x7f0000003bc0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="032340b40693346021ae2bc0a2e4644a156a950c7a68b613e3acb1a01ca9ad684def14f56ad71800550f61022c10261da26577e1025c13f535fd1f7226d3c663696beb9ee7f5350876176a43e6bbecf74a00bf0cf10a0cc4fe2c95bb1414d04424dfc0d2d0f7c908dd7b3c3e8aa6ceb2cae2c083465a0d817c4e299ec2f1c6d9867080ab7a36e194a74c22e542208531cfd2bc38cfd3ca40e2b1bdefe32d17c262f40e8d339ad1e64032b314d8c79aab4d54", 0xb2}, {&(0x7f0000000140)="802b35731af6f887247a80456f96ec4dec2a3827e8a19177", 0x18}, {&(0x7f0000000240)="7eb93fd6696a57c6e82dfaa0001c", 0xe}, {&(0x7f0000000280)="d7978ec6e55f6627e0adfb6c828d656ab12ac90433211a92e21459016dbe4db38ea43f603afc8cc6d2ec2b310abedfddef6287e19fd88502a0f238d6cfc012227963761a58845054443ce3ff59188e1afc39f01829db5164101cc713bc0f2b33f50ba87207009e5fb43c49de07b3ba1b98221a12977ba0a9dc7e979fa7df24e0adce587b1bc9056e932204f29995d10e217fbecc24e2cb2d76319d", 0x9b}, {&(0x7f0000000b40)="e95dc34ce1b4e703711eae83fbcab04e2a5c77bd93c139e23461ea34ceea26aae4a07613b7524882dd2913df2ae4455a7e4a7c6c6783f5d38743d04f551328edf32005163d4798ca4244e595001a787dc284c519c93a23d63ee176a20dcc394872c3feac0e0f8bf36f69c09e24ac996ab799aa73293818f729d1fc031a9997400919da328505065bef2a3e8384cc25c24a8d158a8a44122b013961758933cecad3959a5f22d9e0fcd5b6d63f5cc0120bc8fadabeded3ebcbf83dbe45292f34d6f2dec60ce53e01774b1323a963b226b5f737ce723f15562063362f0eb92243b9b6de5c4c28ad47f89c4ed59c217b04f2f58e76b949c1322eacb120343eaea002e2c02217ea95e42538da8f785dae4040554fd5a54f3ec8dc386e3d21a9ce9013b8954816a588f742594ccc2d1b8ad71ef5e55f8204c25e0d8009bfcff33fb58a7f5d0a4e3d5e4dfdb003800ed9fce2dbb8d6e1885d98551a46906e8458f2e1520332057094001cb87d8a035ce42d516b17447f367be1d9ccd52126af8251c45ccdaba738a7c409ff385c8411dbe134428e5e80d44b05303bcf0921360aa846a508ba2401d7776f4a53e9daf3ecc1c6dd498cd470c98d31a6e402b1773f7807d8a79f916984c33251f3d8eab9b2acbd9940a4098f10185f1c0a2e277cabd171736985db0ed37a11e2e736235b40c4e02296a641e32ec886cdfb3d400e73f03c17146ef2edd4a1458383f1ee043398c72e1cdff9122f1470358948f7568c1abd6b734a5a7e18563e673bedab87ffb0824b2f50b762293c0397eb35ca64cdc269fbfea3b4b8fe1f8b647c142bc4c28dd48698a1ddc81a6241182b26341e28fcafcc397b23c23d449bc639f513694e08410bae7bef9832cee3501967bfd2460bd8360b8e573788c464b7f6e9015194c8ac42a649180ebb9d97904208acda2404cf28639375be1ce4d0727fb49f21518225082acdd4ee3cfa4dad2cca8ce8c0260939a04738e37f5480a010a4a1d524d9e2be715113bba19dbb5c23efdb045349ecc6b31ad78e9516744e4648b1ab48d093bb017e0f6652e6a6121b49abac8f0f8eb3b8310563bc0ec45b84d27c9dce85fc0411ef2cd1c0bf6d3dc041371733676eb90de3ebde50308bbc48acf25a08b2cfb5a342bd9a936f77a29d6bfc64a9426938298b9de0107135a0e6c0d2ebdfd2b55e8a755cfd7a304e38159c486a726290b746bab8c75eff8779f3ba9f92cc683c041b0e2172010521d4357616bc38df1cf9a0f791942029103d9ce695da5c1d29ce1c6b105cf9e6d2e4c1b5b8f5904a522ca0b098556d099b4893c21685d706df87fe441bd25671fe1703ed38f71332d4283b2f3d68ee58b2ca382f2671151291217d207db4c4592056c236542327e835af69188aba7fab9cf3b9a700b7e5878b7a2433ef2294c5514358687fbc548f759b762580e7ddc230f9fcf63c976e56ecd73f8da2cef0edb5a95d3549bc15d55da3a4a259b195f3116016aafbe9c4f101ae5e1772fbf7af4c96eb70299d2b7926393a7f509114a4515ed8c0c63c288a6500de6b6fcba9963e30de26ce45db1ce9c9cc7c62319ebfb3d22a04a17b033991ad9640cde8dbcf3410c2ea102bac8ad4b04f768d39c8406c5cc1e0fe156cba2b4c49585abbd124c1fc72664a639dc5192871d0230f7b854b4ef9ec7a7a8365d1eacd7d79b3b7ae22c66ec8e13f8186d3180321075917f138370c16578700553e83a42ac76f37d1a8cc32f7016d7ced489db0d55806792810163fc387e9ebd42bdbf982274658163bdffb658225bbb4afef0e99f20b066438d1f7f789d13f7a98a0684a13bce22b6f5dc388dffcbd788f8d1f78702123718ec54eff0b6d96f894cff5b85efa4e504f3450f1af4e32b0b7b4c935a507126bfe93df9c1c716dbe3527b74ae5a277bbb76da7836c554bb73e1d31e4ce2bda6df1c2025ac39dcbd821fab9f94e23f00cfd7414611cd4e371f39f90821f1e19678c7dbdb44519dd7c3f77f30c1020a83fe209c8bd44a758d6f254d7e7386a2c06c5a7bc45522a355224a39dcdcd9d3fcabd61eb4157ecdd131c17a58645d8b23e2816800e5aaea8be8bee272493085e38c66dae23d28f671c4ede7b35bee899470e45b3c7d25d8ba5bb6408c13151ed4b0dd1ccf8b918343d01cb8c91d8954ff35ecfa212ea592c9b3cae342a6c487c057b3bbf30ef9d0414a3d3cfa6b2011494f5a88ceaf9f40e4f990cad9d2c357b44c850fca3223356cba8fee87f73dda5ea4409dc51a995d6be2bdce8b85839cd64af57fc5f587001e359ab4c3732c364a8b4b464e41bdbab388f7eaad3b2bf1990174ff84c17d973287bc69d12aae316026c131f0f4be0c6e52051b6037d16ce66fd77eee651719303b57af6439e25c5fa9ebbc98efa6d31bdd6d1bf47b3e1006b37a3ce8b8a2e461e1cf12000ff6c5df39ce7658cbd5a256ec1b357736f21a7e74fea01913907387c6fda64b45e5c48ca95884dac393f4992689836d5f1900d5a4481acfd2b7023a4ce2d352cd0add6389906be46723c7d0528ce490644904471b9cd9783526cdfffb43fcf3b83843ab43d885216b8eff2429847fd9716ead2bd6127a08e5776e257ed4ae205a3a65d8c5b0814838d0e0781a7a1800fc5cbf4e1c9406e5e76654986ad3a76dac35e9e0635a64e853198eb9983c2f55ff314eed405783c43e1d9533ac5aef61bf5d631a755664e03b9aed107f7717efb0df9346636bd05ce5d7d917d9ae9865c0b9082cdfadd130a58bf2fc82b6dc5dbe615e07d68463f36e4462470db07b58e728d4ff22e3afe922955066719d6ea6f23ef785b68b1498161a1cc180e52357791898833650d9e46aa178478f362e775d5069b2bd45d46925491153ce7407f6f401e97d30101c7fe2760c348486cfb02ca0f779499844816334f50991ccd558fdef6cf6c8839dcf231fa2b6beedc646344e1bd0022ecab25a51f0c4121137dbc80af31e10214ef73ebe21c9ebcf60b135791f16b5e2800cd9cc14c084d343258a515be53b06c5259b8a3008634e264e32340631942f4d73e2335ac8e6c5268a86008a9e37d91633638f029ed47734c2350711bf9f8510971360f7a7a05dff1f1d9b2e4786f130eae63343bbd5a83a2de95d9f43124f63c6c7b59a2897477a4f79f4bbd9531cd2a5b12907eb4ee86db684d8b1d67412686166b9c7e822eb6e9955239f1e56f87c094612787ec69c556b38d5fef86aa53f4f0b73d1b3af3e9a6859b9b013ae79eec40ff864fec0da68732504089ce76d08c512c6e7fe039696cfa6f2803147bfe10057158be114c7440c5b086de1e5789cb16fa69779b465391c3bf8dac52896f98e464efb175d957e96e4d8e0a7563af121be30f87eacbf123dbc12dc98a721d6e720919c674d7963b77e9e987782148efa4c697a2b5c6041de7675ef5a0a2940b8f2e157844d56aea7f9233c50a0b1d20baad1a4716372a78efc9aefd76010dd5977f3e91221b86efb6bdce94aeb8dd728514adbae9f7d05e653d34df29d8727c6d0466f2264c6ad6980c8d20c30e6e110b3466cb4462e4a1d13f7e3373cd902a40c43da376f3acb2f68f86a028a274561e12f3a521d5f0216143102cea63be5d4cb0e70646a7b8c58c9b7b18698026d4d08724f62af4c235fac0a033b7097562b5a733d698b624d890eae8846bc5c58072a73d71cc6481ebd14e38ba432cf6cf752d7ee26bfd2ec866ca5bb980b0cf02ed767a2b98b658c6298de4610c772aae3a7ca758d056c6f4eeea38c2630fba34a1c259b3e3412d251a6eb8560fb2fd3b209ff10390912b6762c9245e178c4db9b0af3a57995753276a2fc415c81ffb900c9dc9b8040d423ecf80ba195c9e01da7158cc47de564edf95cc7c22451a0b372a281533eecb5bb481a5a14e221eb0b19fa3b0f45f79b51237a0b5719d5571a549fb5e5313b7af07f1425a782cc5d701604f3eb7a856e59e8ca974fe0f3cb123b9524eb0ffa577cfb73b384151e0a02bd8a652717bbd4cb064d759114937aa81e76005d8e4b1cf2b8386dd0775de8f8bcd5126b5044f9fba2acadbcdf3f3855ae2992e2adb91ba3579313dbf659620e787b349b8d554a3b36301cb95a01e9d0f0173c666393f3d8b176a16b3d7dc037cdba8fb879139c3c06416ee4d3d6120c0a5fa806b005882f2d6a04cd7ae987d13358a168c49e322ee27f07577e78725321e9f61b030f141c275f8393a78783216741b24b484f5301dfffd4a458b7a0d74e48b1f401f7492c6c87f53f4438d09affdc1cacafaf2e9431bdf9b42f0b6293fdfb51bf5caca6334a56a66c07cbb752b526443758b3d2f9ed19f40d079399b6e819fe060d32e469c5c5b3d22b7edae3638670c37a7d003dd0ceb1b611ac45c0d303e9878bde594e5bcf2f81c1fb848b6b64d2b4a3bc852a16a01ba51d50508cf4f0bf59da9b102964ab16a04706849a46cd53e50ffccb31b78895e272223f36c976fba905f8e1a304fdf1a3515c7f36e962569f15bfb74384bb79dcebc4d3eb9240e7f943eb61253aa4c9b5a1203e29267e36c4dcf824454410e5a9003a468f241b36c818a77ac89b882a9f628b78913a898cbfa6689b86a4f595945b1a2266c931b73f50a4aea1f0837bfad5546aeaf373e3e03824d9aac3480d662a641c82a4feec55b5b25594c0d403eb2cf3d70daee1a0cb54c1df2ce636a802ee0784c81c91c1c4782ce7bff1f8bb99c6f7b140dc74de7bfb7210ddb68d87d823dc224d85e4d9bfa0303848583ad393d80ca75fcb0e133f8f173f8cb8571639572905d91b214a03e01ead043e3c47ae616ac07691f8ec29df38f4f8f3fbeb07940218c03f6ba853ef5779b6a56b0cbaf08c34fcc12e9e0354eac3e7f08a9f1646cc049dace9cfd4ea22b27f7be29bf13ac4bd80c0b4ac483e4dd713d1e861a8e4d985dc42c960d47de89b7be867ecebf26238befa68a6c42d62e2b108b84184a15c5c68a866eff0439a414d0d4650d3122b51f02158fa2052ece0b4e35f784fd0f750653a9b7aa3f5c043f704d815784fb2354feb4657b0e3f7e13803c83b82639f46f8e7a50ca3ca68ee067c69da4f8a7128fc09deed0a03db3ec7afd6ad145167df0f998e78e063449e7d55abcccc0104772219a291795eded47a0651eef29f4a90954b1ccd6fdc355a79d36ec31df51e7bcaff5f5892c7c3189a1e32395f320b21b890800ee96cc392babea7de16766ee58c46a03f22d0ff855a7567112e57365d0800bab629e1be291fb7100c6101cb577ff27fae63916f4cc91f9787a9418b51b281700e86e34e774bbee898b8af7963cc9996be60d1392a52f47e4a6f0e31a90235e601bccd0f15e7aefa5b92e1208335db0f05f5a00aedc5f877234c97e606e43109423e1bc4021b69ad1519701f1086e36150579c1a059817fa7115a29631695b121e70586eb07cc03e679e0ddc3081827454a30c55ff82fc120e3569bcd7f22dc11e3dbeb27d2f5b2bd18268bc52c2737d7ea1053cff51c56311e7302d871c1105f8573bb463a54e0a4d1be676484f86fbe81231bb5230b08b61b12589d6986cb123d0cfaf731a82d9dc0046f34bfe3d7efbfa5b8da15938468001e2a8bc6b71106fdf631937ed8558faf92afe96181613ea4541113ad176dd49638a179472914c839e823e738af55735f9141201e3bb6da9edbfd8476b4799f03ccac839933841faadb84aefcfce01394aeb433e7a30d3f9569780f706624e00926ee5be302faae3e018527a69b884785e115576c7a8ed51708bf2d7d", 0x1000}, {&(0x7f0000000340)="5f9e2f5eb53404435de403785edfff4d67387eb553bc201e63bd33b1fc92501b318fa6a44e8e87274a84d5da2fcd95ce52050bbacf94b17f1611a9f67608ec37bb279c9218d6dfe1174715933f429dadb51a9656d726268b6dc5f1cfc777d799cb0bb3d7f3fe4939fb27b1fb1deaa8acaec224e75e06749cb37bbfe6722e13ffe2d781602d58cb65f6f3eea0b0704f502910669cac60e1299cebe47934e3f745b9a33cb93e134d383c68aab9b1e4039eb4e7205e29", 0xb5}, {&(0x7f0000000400)="f4b619ac891cd3ea677f435daa273ba4706a15283061315b0769bb05480436764cb9d4da56526ef3f8081484b3f24f6fddb04b090ae266eaf125db665b0bfde0e755f651b8a01403db9e96317f847a76444cef33e96cc9c84056356c284ea0ea517076a9a8a6c4a63e4b520ed8b21d3cea34af922cec370a494397da02fe7fe7824a32b13ab73fc998d1657afde029d560d352cbad11d93dcebc19a4004f", 0x9e}, {&(0x7f00000004c0)="d8e76e14bfeaae08de7eadec88470e91f3b0f89bcb5d5179a8cebbf01b44936ac186aa2bdf0b8b024a90a4093a1857779ea392db25ec2b266e9cae876530b67649c2e4bc06a16ec32be9d75dbcc0669c57311ecd1588c9032108c1", 0x5b}], 0x8, &(0x7f00000005c0)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0xac, 0x117, 0x2, 0x9a, "1eb10c8489e4f44f5caaefae4a55b7b994efd7b303408116fb4a28452abcb4c9327931f581bc590a346c7e4d52b3ace21d85a8f175061530f3c4eec4f92077b6fc22939e238f70d437c80b3d2f010e1473951cbfb46c355e185141d166e7630bcc94ecdace9fac6d4ac6d61f72a589b95855f27e3ab2e5f1b2a5624320f850cc4131389e7bddfcadbee90772d94dc3fec4aaae29d2f48bb641dd"}, @iv={0xe0, 0x117, 0x2, 0xd0, "0beac639dcfe1bced9059349c85f51464e140d52e68693d26a0da6abccc5a5ac8aece68fe0204d1c4a77428e173f9bb577c0ad5e910e046038bab92f692095199ac85ca752c200b584674747fd8bdd022759b457895a81c0fe84482e2b8e26f995a5ae53d4b7f8fcbffbe6ccf60d533bb86d6649e1d5f4e290589103d76ad6207968b79b6c7137e15c0ce60cee39c8f59b0c05f242e0cea1e29d83a71f50f78136abf19bc1c2612f88534d6d5b6ea875dd23166be443f1c75faf0ec9ede2b7c64bd4f97cf3d97a69dba8dace83676a01"}, @iv={0xd0, 0x117, 0x2, 0xbe, "12364ff122d2d623ba039ab076c5147cb2616977322c0155cf63f16b4d025f3abe660d9efa87dadc9513df592a7a61c6d96341dfa8566e02fa8dcd52ea3cd5b2068f116a441d79f0e4ba3f08faed12ba4c9e39956b84874991df7b57d198c2f630d278fa4f1bca5fc4d94af1d56cb6894630f688024061901902bbeb422b74052b636b670104704ba320e5faf1c21208bc3507086e494692da22dc86c2c4f3f728fca373e817038e518d7cb87e1ac3f968937179fd1da8b008a27bfcb145"}, @op={0x10}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x3}, @iv={0x8c, 0x117, 0x2, 0x7b, "c91d2cb72b5ea30420fe516ec597be74f5bcca8314dc5921aac5793c6c2f7842c77868cdd6bcaf0cb9b89b2c0c7e0469e953a7dcbbeaf2a324f7c89226b5904b38442bd1ae7cdd0a8f3850ed6323a731025a52de7d475df519be27eb8bc5b95c5d5105302e6a5b12a5a0510e5b398ed55bf622f64bdeb587543b5e"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x9}], 0x348, 0x4010}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="7348517639eff3239b50226504276971f4d74bc98848cc4b233e986b7b", 0x1d}, {&(0x7f0000000980)="c97c8ef7a26d38038cf72cf1ade2297f3a400697b91402712c4906cf65ef43c9da727bf0f15f9fc78911aeab82d7494abfbd605a92a69129322f3fc8218a7698d1b2b8d6d7192937949779a20de69f0abea4268dd4bfe834b4", 0x59}, {&(0x7f0000001b40)="9404249fecb6b0a7d130ae254a046b451248adb5c6430fc32618b819b5f4d995c1249d6c4b5d2e4eb2e4238ebca57535a0d55b8b8839c7d1ff925dbfbd2d33bb828e1812cdb44cff8429e030d2230e1543f3c5bc8267d195ca5188669dc9afdb2440a043cd90dd7924008757175a30320ac834708bd1f4b8830bbba660fa530b5bd897e58cb3e01446c8516a5077c20059cc79b64fa049a6469de05e719db05d246b35076c7bb2285f9c2826769da0", 0xaf}, {&(0x7f0000001c00)="75d3021feb90f1303b8bedc9ccdff83df494c358baf77b73530b6b195cc11b0328d9355ef9c581d1daf79922d4a4db55504399db88bf1f6bf082fe9fe6c80e5181ff9a121448f0dad5157abf0b7fcd7052060bc3147231f4a4e3267657e66cca0c2c0d36fc4381f30d35e70ff8626e0eeb209dde479e14b3947097d0b7d3fe549517696806df57545f2040020b0912a9de7b4acfc6892e56447b44b96bae849fbad03e2b585020837a4ff569e2820affbd48d05ec0f33f8fcbc4d3cc41f2a39ca96e198a3fea32dd9cb364965e991b5e70112b76c497dd7bd34dcd168b9f", 0xde}, {&(0x7f0000000a00)="69130890", 0x4}], 0x5, &(0x7f0000001d00)=[@op={0x10}], 0x10, 0x400}, {0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d40)="cbea36570cba76706536d6d6c5cdffed3781af2c76ba3b006b1fe0d472e42d8f6ec53a116e27eca6d49fb4e37ead364d05baefc1c7d15a209c2186d533b474f57547bb88d8cc44c7441be5a51007ecb713c1970a62fd03ab4a7b2809b7b629dd620ca7b1b962f7f08d47125acd873365d02d2c46bcd6af93e69f8926eda221ba974795ba7b3ab758abdefe39d944a6ddc79fd799d95d74ed67c9223fdef9808cf3b7b9a418f0b2b39c1f705d9a48178af8c02369ffb2a83fa686eed32981cea8c55461aff5", 0xc5}], 0x1, &(0x7f0000001e80)=[@iv={0xf0, 0x117, 0x2, 0xdf, "22e70bf7a981b8ac6102164008f4cb48d8f2ce556b5859d9cbfe6e76eaf84af347c4293b3a917b00d10e2d5cb2d11edf07151485afeb62dc8861e8c770a1bf052dc790486b629499127b4c5bb93ef5144ffbc555570591b2e1373fefac8c3d1399587da0d3ef6919466d46bed132877fc92a46fea09d7c7def1b944b106f3c6a2c1bd195d36613f718ad43014c33bfce0d04ac30122db162f64f4072d7ad6a66b9fbe8f1b4ca2bd887aaf6568bb4e50209d641db3fd1ea89ed62c0fe88c845994ea7bf7c1853b91b3a96d08afbf28766bd58453428db67869fa82bde73877a"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x110, 0x40080}, {0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001fc0)="d5c9bfd54cdc8232541c", 0xa}, {&(0x7f0000002000)="d44cc31e04b7d85263d37e379a9f684151707f5f57ac58725dd22730472d75ab5a65e2dea84cf134c8107c761a6db67f4be6ae55aee72cf0fd763028988ed4a555455f9361a510400080f86d575c0c3e2ed68bb618f6c9d2c935fe81d86109bb9bf04bfc96af01d70202ab77d351eea005f5b8890c4a28653b186a6da95f3d6e119b71f2cfb4a4450739aaec209661bd", 0x90}], 0x2, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002100)="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", 0x1000}], 0x1, &(0x7f0000003140)=[@op={0x10}], 0x10}, {0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003180)="2636403674fdefeb3b228da4808ac12a6984547580175dae95efe476aaaa64d6b9f0fc77c72c4882c332212ce6418c5175fc0b2ae4daf6b17ad8605ce8097eeca54f59c0e06604d1cf9b9c76664d816672cc2a3752bf37e5845177b8a4914bc7ae34087e35b559376b67851648734657bab722eb2ab4", 0x76}, {&(0x7f0000003200)="824ddae739bc83a264f82fb37441dbfb160e0a9ce7f1bb2ded89fe8905b6c08e5fac80465ec1a939f89bc17015f50fa1b5fe901b5d9b78edd6e78dbbf8", 0x3d}, {&(0x7f0000003240)="b6c23d0a5546999ed472ab9830ec12288668d5f8d122d81d81ad9788d8201c741838acca9dea71cad8eb913988341301e87c24c9e21c12cc1f725e917f2d5ecac794b9d47205329237919360e51b48cd1145d5eb959def10a8bbc0324158687a07c44f7758a91103", 0x68}, {&(0x7f00000032c0)="0d7b82997a41ed6d1534298e3e7905a9621921a72cab1e568d90178fce70895b5558828326b3b60c4d6f6a648649e81f4db57a16769bd4aaac7934b2480606851e3b2fb367e552676c1839d5baf93a10929686e2042c924dec49ac0e", 0x5c}, {&(0x7f0000003340)="82c1257b340ef0201a0e78466c3de180d8ccd51ddc92af2aa6bf8e9cf5c768350f2c8f2ea0f178e3db1ef52ccdfc1dc16ac686a0911530902119afeda4fa542de3980b4a6f1b769412cd4e7bbb24e63c6908a70156a67e4c2feda712705f21adf508258a2bc1d6a2ac357bbd8659732f301b363d07e047776c805f624277ca5f6d338037ac8b41e5488678e0ca", 0x8d}, {&(0x7f0000003400)="3a7bdc6d5e06617c9b56604b3b9fa7a0fc26fc1ffe069cd9695e31", 0x1b}], 0x6, &(0x7f0000003480)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x10}, @iv={0x50, 0x117, 0x2, 0x3e, "f7fb82218e3b450713fdfee14ba476ab975a57d49a05becf44ed6769cdc5e6909bc6805c1d3ca1b638033f54356da39e369c7b869d7beac4a34b5cfd11d1"}, @op={0x10}], 0x80, 0x8000}, {0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003500)="9b220a9307725db8d6f60c6f4d09248d64ecbc96a1613ed0a6ec772f2690f440f50fc1f2a088ce6474b2f26830876c6abddb01049bf71f20bd0cf99b47d9945f06a85b1d405798a6ee88f169517b4b89d21d201d16efde4a83fc6cb589e817df63405ee92037fbbfe6198b6e57e80af724f67ff5359f451145", 0x79}, {&(0x7f0000003580)="d893ca1cd74f195f571a6606599f634d7fef9ecc117e9e92c6b36a68ef95e56e37746d783868bc4c3e28d5471994173e48a30749a25ad29052b6dce72b0e38d2470220a54ede5e695a14a1bb9a10cfa8b6d35450d608e329edb7bab64e8ce08ac352fe6bb5f6395786b29e75a41bbdfd53b6acdf7fa6743df988012015640591b971313b602d6ccb5fd21b5f8245f5337de609a6086a9293ef5ccae03bfda9c37c9a788ef2ea35a4b5ee17b8e61d874bdad20928f23e15c777bec3fd18db9845cf9d9fa53f77d43c152e8ea602c2398be83322416d8f84e8a0017c14dbfd79", 0xdf}], 0x2, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000036c0)}, {&(0x7f0000003700)="ac965b4877b3d42ba894f84cc62a60d7926f4a75de", 0x15}, {&(0x7f0000003740)="14415ffc25e6a35b0f4d01f142b7c0d2a44743f025b1757416f75f4d3e198835", 0x20}, {&(0x7f0000003780)="cf5a6bbe9514319e251c7fe9988a6a42474e6073db6ab9ea7e1fc4cffbcd01c16dec1aee0c55af3ec86282e8c5a8bdd68e95d8682552b4f03d4b351bf623fe636994281454ee5d2519b349a6549ed954adafbd74aab79767b1e83cd92467f092aca10f6f6b863fcf42ac437a5729efeded0e60679643f415c88a7f51a0c4ea688a6289af80ea102c4a5f5e1f8eb1b600d32ab86e1f21c7a00f40adc729db914e1539adc2bb27f442e16e8e98062d453d5209a7f017e8920577acbe6378238c5afdb9530ae76cc61aa8ed587fb2a5a00233b36ce89e45d2274f886cc3961d481cc7b13bdc523fc3f7b6e09b13c625b0387f1ce3f29df657269651495f", 0xfc}, {&(0x7f0000003880)="9edb96143a67dd6773abd61037a9527bcbda1ade682a4a9d19b50480bf4882aaa23d063479ff49c2a2f57543bb4ff002a1067f31f9abec2e4308e43ad2022400d73d94ee78cb73d2a48f095db4ba89eab2cdd183befac326d29392ecb263a0dd0229f5c8528be8003a6efa8a96abb5b9a76e93cd1da83dce41f0e8fb22d8c084038ea9a870363ff9c76919608834c9b2a12340b015900aad632bb5145559e538689f49cfd32c1d757e4deebf543b67d4194f354f12c74ce065741dcebc04d18d1758b18cede54a65780e1eb528f60c12e825def550b3abe8619337df43b5575b8e1aec9a", 0xfffffefb}, {&(0x7f0000003980)="1fa531787baad85e9507e0c5c91775980e60975c1f13e7023adec6261ea52b28df8b49d7bed8e4048fe61bf07111b47962c7673ecd20364a475e91d640f315c1a6e59069d9ab68dc7af76867660c0b6e9438802d3a64cf9050ffc6ec228c08f9ed1f86c0a50c764968f0fdef09638ec3d31fe2a99293199685ba0d399019d22b624bef127c843dcee224508a69a3bd44d37e5a32ca8664ad7627938882d973587c96a372d1c0ca969712996612cec3ea2f36139f3457ac332c1b364b550504ee30c716755c69f3323ae6185dbd798bc384266689c7e4bb2bf981bb5ea5ba99071c2312b89726e6f4bf7b", 0xea}], 0x6, &(0x7f0000003ac0)=[@op={0x10}, @iv={0x10}, @assoc={0x10, 0x117, 0x4, 0x7}, @iv={0xa0, 0x117, 0x2, 0x8d, "763bc4d833c1f2576ef46b582eb9d25bbaab378a2fe5de3fa58669acaa418e87843e6adaf0cf26f526402c408de76e17368ebe2e5637073b37fb705f8d9f6efb597d7a940ab4bfbd7fc5d74d7b12fdbedf38e8e9f66efd2c6fc8b1f842a8a444b94bce664b181c40008a7fc9d01ba9dfbf83601f8370cf1fc1fc5ae7448612297141f6367ff5f3e03be5956160"}], 0xd0}], 0x8, 0x8000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000003cc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 15.902616508s ago: executing program 2 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000001f000a38000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0x60}}, 0x0) 15.834964898s ago: executing program 2 (id=1339): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x11000000, 0x1, 0xa, 0x5}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xf}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000240), 0x301543, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x3ee5}, {0x6, 0x0, 0x0, 0x4}]}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x81) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0xc15ff79759f9c6cf, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000001000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c00000018"], 0x4b0}}, 0x0) dup(r3) 15.187655698s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000240)=ANY=[], 0xe) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b5b32cbc7000ffdbdf250a1880c8", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x44}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r18, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtfilter={0x167c, 0x2c, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0xa}, {0x4, 0xd}, {0x8, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x401}, @filter_kind_options=@f_route={{0xa}, {0x162c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_ACT={0x1620, 0x6, [@m_mirred={0x10f0, 0xa, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9a4, 0x5, 0x8, 0xfffff032}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x9, 0x8, 0xf29}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x4, 0x0, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1a, 0x3, 0x6, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x7, 0x10001, 0x100}, 0x2, r15}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x20000000, 0x8, 0x3}, 0x3, r16}}]}, {0x1004, 0x6, "82fb77ffaf069bb81db3fabddd020bbcfa5521a6154528aaaae7a76c03b5594ef6d4ce4390740e203bf6549d3d0b199e8c39bdee7ed3497a055e12f983c947c2dc529d8c5bd9d2d9c6ca302258ad6b4a8f9ff82ac51eff9954a3a5fce14e62bb428268ca34af515a68a78ac3521dd7ce7de3868c1b53c17e1d926070654aa9f2f75787946a66c6df13a441dc72062bd5feeeace8d88eeadd8192de1bd37603a98255a4a6e2b3ddf17be44dcf4f6394e249d33bb3cba532f88100540df54f5f243d18ee9ad16d0bb20a48efd557b8c30bcc172d41a380296de060535b643018c43921fdb3c16fdc840bd35dc28f41b1600b59e718fb690a4725d7bb0c2cd07d55fa875cd5f54168b19cecc1f1f1147ee7eb11041f3184f88a5b3b9211e46747ee47c4e452d0156208d02797ea854d7ec78a6c6bb10cf69279ced55685654a6d75b4a047d3b50695a61c3e13fa36f960471b90cf2a70658187ca0e1b81049f67ba106074a41e633fac1246076c4befa6cc29af9560daac8e8e77314ad6be52d599f524bf140c0e40323a333eebeea9b941fd843d222ec837f4d777739d8904ffe2cdda78b5950ab96a7fba054decf86bd2375665a7f2d7934c50eea980d35ae15fb2a8e84f1bcca414d34bf8079cf625aecc6390b50c253730fea1b9d1d6dfd29743ac82ffe64fa1b64088dc6361de5cf5d85c7105f05d2a24e7277f517e5927b87a3ea7ae5fbfc4c614081ba03abf354a8b5ec22039d4ebb64f2099bdfa77971f4b9d1f3bf8d6eaec56cb9c73e68cf1d9d7e7e8d89f705acc9e5586b8ad615c7c82c6a13233d92857f01924914450f74b5f466a85eab78f810c8fa8018fb8fce24393907e300b1e9e3bc5cbf883105b610f320689ea470eea94bab20b22a53e9ca0f8f326d4e9ccc984cccf88e1d7f161d3b2133ee7568846914c2dc1b5356c96949a1198fb01a1fdbe079acb4af54e8e82c5053ed394a30d0e24b7e69b4eb4ad55a0209a574432fcf4dbb1fc9daa285e42393503a2dd4ac1a734bb5e5245e91d0654f8fb1cd2044bd53f7d2bd802b5d085ef945a8dd02d22481ea4b0da6488df4b7d0353b9ce4fa60935f6ceb4133c718cb5f1725492b746c7681510f09ae473627af8948e4486f6ff3ef6f075be83633679dfc3bb2244ca4caa2701a3ff512afad59ba9487bf566a0fb1815f95ec268d66ade9d9b3e214e2eac265162c2a5f2d2bb1b60c652682c6dcd809a150da0e8f448b2c103299679dacdd6af60cbfea326f384d69f4c4fde112ca53858a06dc8090ca9ff1d66639b9fda5134d24e4ca5021a86c8457dfda584a44763bb157d872763c482fe7c896b0bda889e6bb1af5feff76a23a11341b653169102d6421add5deb00fb47e5d2aa2d3fb26f4e72441d83024d4212e30f85f5e61fa9070b87e6a2437626c353c7dbc249dd0730d7e483abfea52a65473bacdd4e6b90a94537bf35b024f52b4c1ba094b3b5c9289672ef1974040d3ff9a68b92c06fb1061649b0d6f33005b9c6758497b910ccd04855c60fb878c6125cd88453290e88e000f42a866cdb8c0773a0dc8d1f4d976f21173ca77e183e5c60043556494d6011980c315095dc5535b209b84d068b7b12ad2dec861483ab98ee15ed457740bd3c51a4d68a0ecb2347fa18ed3498e45299b51df08fab3edcd945be54b5c46c9685c99aaceb6d9f717fd5fe09352da6d71cb7f8c11ab7e2f58d1d1bc431d7d20caec613be91f581546ab0fdd6700621b3a814dfbbd55011d4e514af5676fcc7934640d417d0964135999b29a0d222a8d5df73a21b81b3dc7128655085e35c1528fc7f666748b03c78bf09544ad1943407de5df38d60564b7c3a5d490f7b46af537351f5b5284f78a7ea89ba4ebf4d1ec2f7f0334f05ceef4cd8be114ac415e5e8ce8618dbb6a41305973f7f20a3f7d9e8ed68df3fa889c0945a5619aa1283ed02aaab92a3f299f06dd014a6cb9d6c5a3dfbf50b6fac492a6a99bba809f743f700399510636566d73fcddcb862976c78e4bc8e7b9fac26b8149f3d60b8e94daedeb15c1ef45a6e49d91bfa94ed01db15ce582bbc6d6807ce66c3e8016cd7b6c8bbe5bca0ed09cd79e61e2497f692078632d7ad693ab115cc20a1ba8f0f02163e7a5416dde9c77e502f3b48af4f31c73199e293e5d731575f86b29640ae451a8663eb5cfbc97f4635dbeeb1d15c5f6cfb80d9abde555eb2d3de8c00bfa86062970b4af93b5178605193620c07764e2eb5fec5b76f79b775918b8bf90fb034dff726ce7ed6d5937bf5b39f9f9ad394a11d15c0b309c3da5bce784cd2ec5c6f0f87832e252815f0cd7fece075f7ae5dc74d16991d9aac18f7a63066769f388b0d1d615344a5e263dc4ee3310f4040c2080fc8498f5c201bdd2cea9ca6610c8ca6f558e4b1b8020b87b2bf873f1aeed836e41dffc899c57273aca6391f2fea374e3c2666655c0c03445c0318cda14e736231da6812a926018d7812d43411dc6dd2c5c3847b83f4497d39131ab9a8c3a8e668d83071066c95065b2975fa9c64139d5eb6637d40d144d1c8df5bb1a076dbebf1a21be41d1580623bc3f80a7602333278aa46ed696f4bdf073e8f8ad630ae8116401f2ab510a18a3536a711637d7315c2fc3f9acf3f10f8ab2a26b49ae1d3dcb5d69a709a57896fed1d18f0257e30a9c91994261a517417d48d81a11cbdf1a41666e021b2886c3c49b9492a8473f40d1ac1678fd2c2fb919e91ba21c55f86aacf15518793abb0532827a2425a0456a7f1de4e616b12c52ee3c32a1bc70403668fe2c1c4f1618bcc1b0d16a1e92c72c6388fc8926c8b5f63e07cbae0eacd56918c371b71d508562daff6bec1d698916a626b6f79760e8cd8cc46ee8d97a948e5b78151ff1b301b0192d8517b72911056c41a344e6561dadedf762309e79e40296bb7e11feaa8d812378cc75d1d772ca3a7d75fbbd127e3fa485ae88f00080aba655057b0281b851700a8f81e9ad946edfc6a56fd137d8ff1b9707f56609445a5afa490247100976f7f5dc16663dffb593fa0329539199dbf4bdccfe94c85ea2c29a3c4737c790447f6608e414a7d2088af61601b722be8bdcfabc551a0d3a1aa0ce078d6088a388c1c298bc9d1f93e7dd09e93285d2626a606c7c63c16eea573bcb1915725456e93a72f96167736138ae9bd08ead9e22e0bb8fc820d5047f3bfdcd2ac633e8582059346f35a1976da74f3df7cc15338e4a410e005fe0298a1a132abfacc9a91ebb9c368ec4f99234f3d3e9b330a0226b7cdc11a186b6a4ac7f574c4e2ce14d7d58685199652f41eec7d50d21c3e2ceded34154f5a69ab90d95e7d0fea08e1d2b45c0c1d8ff96b6ddbcf7ee9ccdba57198bf2b1a62a0e142bfaec52cdb5d69a883eb1b2f6b1cbb7432a45c1322d0f6b6d1604fdb0e61dd3ecbecfc5a8450abba7bd98343e645eb80b763d670912ee2c7590b8685eb6571f8ff36c8cf8b152c14b51ef476bd29cf14e963a74b7a47161883e3b742de25aaa4d5f3536a0e2e80e69614c41eb8ebba46976f8d51d8aca89a5d422128d1b3d368da2af0c9dfba72451e77c40226078044540e8043617f26391721974d67b8b9a020aa894467106d048b0dccb3236002593f9280800d65de60c0ce7ced84b3549c89de20005f246b8ef3d3dbd7bb0297dc1000843d564f59733ab50340fa811f4ab079b46c43f147821b9c2ad41130023dfa3cc9ed8960176eab81a2fbab26a2b4539251cfe9e70bc0722a987c96d431f29884c9fa7b41be448763623e3952bafc9e9e5b3e320d79cfc908ec17382cd809e272c45c1555778eb4c4336bd3e64df63b1db42e20b94968df59b47fa3853eb7e5fba11fcc9e92bb066f8f74cd1ebd15ba9808376fec48ad88034178a94105a5fe159486ff47471da6e2f093070471a572c01352c45426ace253a3af691b30f3f1898c50e552e55b03ee228a54c7db21ee60eef91a690a5fc6344b221639b1f81df0481d6dc43793ab91d492ef394ea8cdfc4311d733ab4df368fe1204fce96727739c28ea39079999accf5ee50b498a9cedd231a094d5dc79cefcf69a14f7fabfa459312e972a2c272b7d30d314c9a3df2de8c4b924f202276eea8e4b454af1f2912d84daeb0ec38e3444b0e7001ff9e70c49abc88f1893cb0d7df8912d71a779ee70777c5ffb6603df584680e4bcb2676082ae65f7282ceac1e2c2643f5428c5b9078009c52ae2280a74161f85c7fe66ab277d7c364716a7219efa908992f0b916ab2a0866a3190dd8de50da8680d192fb7018d7ab02c3f72925d7d9f38529084931a480a71c7fb868d98e15db142f2aba58176611679b79f865e0b323dcc48595ab694130828d437e762a47c1de87ec715b574bedabcda86fb08c7eaa80e5185a4d1cbe80cd088f1591cfc5d765c492183c7be35c7f26115eaef66566509e981c3134b1c6ceecfe101b63af54b417a548e8c0419b9bb639f4dfa190d66d09355faef62a9884b3d1a35c6e429fe2d4d013928da946790196690c00b27edc30fa6c4a9ffb22035349ce4d7779b17722202e5bb369c4e216032eb36a778222b7ee314e0c0f7c65d3ad8dbc8de907f4a7ba1688f06715869d0cc0870beb517760822fa5a3be3b7bcf790960d74d4b85318e1554de3781356c22faef177cb29062435657866e4e3ab6872a95f9bd27e9c046bc77515eca10fbd96ce77c135393fa2acbd925b6f9cd6e0a086c32fe7139965d8dcd1b5689de0b9184f6206b4d66dc9c80f85b9f930a51af9803b891ef50f3a62cac1271e52daf5c33c5faebf6cb564d1e6922cec9b8821434e902bd41883ffe87164b9dbb2695204933329c604dd108ee665584782f47480e86cedade7e3a0579718629d6e5781bd0b6606b2c0709476c3c7cc7b0e013ad66c7f10cfc09791dcd9dea34d1fe7d2145c5e88b71ac36c6795f894b94f00a41815f867e402501e4d6f60830027f8c42981b07d233f9e739e89b63dc76d914d151706e0b0a4b5f6dccdb6e33d7ce46dcf601f104bff2fe20ff8cd03e32e8394c7a416ffc3864f8c2c505bc7d967b24786aedfa38114faf794e3d811788ac38064e830701da51faa55248555cfe0f748fa902fdbc9161f2ac09b7d682f9a3ece36fd4d0a7ec1ef9d70d99cf06a157027bd570dcac1618593cd7d12db98d65e61835c1dad6ff25f510a636cf343565317b79149c269a060dd5aaf0577b2049691397747af37ae83a436345b2423046d7b6f89b05795ac4979553953006f7de758daca07c38d0f0992284e820d946d6f2715c5c2d585c9aa2964e014eb103bdfc8e3da9743d3f88517faf39a025e74a2afe2122ef5ceb4a5b6193cd20a0b5b550309f065ea6b407c9facb7645aa56786f7dde5123ede83b46cbb76bd790372a1815296e7aa37ce1132d7bb3f6952048eb68ffe4b8f21fef532a11d11538e36a28b134f7d6012db80ac6023ea5979d26b8f88d596e59793bd4294bf50690d7cd887df081504841c2f00700e7ef58b766c5e7d2875083384e62502f93071e4058de2c11cf2d0396d75f16b4292ff7c9893e52ffb1d52d69f950c1eaccecc802a36f3ae8ac120e5f30639aa3c646e15a2bdaed0ab8e0c85a5785ba3bbee4464d82f670bab12cf5c94e6bc34165061534a73ba852a78b7204273eb88ba6b7e991c9eb265a5f1a6ee09c992aac9a9f0ad798de46c16f46d58a11913fe605be19542e933884effccedb254fd4d219f7f7862ed021e7ff718aaebe4f3636483df68a6926d545d05e20f761591369a1a0a88eb44b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x1, 0x17, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x380, 0x900, 0x7, 0x8, 0x7ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x0, 0xffffffd6}, 0x2, r17}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xc2, 0x2, 0x8, 0x80000000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0x1, 0x2, 0x3}, 0x4, r19}}]}, {0xe, 0x6, "4cd702eb59b9b8dc88a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x174, 0xa, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7e8}]}, {0xd6, 0x6, "ec038eed3f40342d78fbe06cf0587907461530ba17fce683301b5bfcfac995d68a7341e02e2b2e8ece4beb5fc67891c4d6e65b153eb6abc5872793de203e3971103ce4956772df3e8a3b57f51b588613c24a70a93c1be79bd3a3b3db09e32dc51a311559b31682f2aea33cca75d98f82d34c37bc69f72598511f8109b26800554e5fa7cf941dd653cebb67f265a7699cbfbef0819da4594000c2de660c0a86a46b45cfc69bfacd6b9a232893fa667b279e70ea1217f839b8b5a81a56072492e9b560b1d89023bb9c1c4c85580da51c34ce0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x12c, 0x10, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x0, 0x4, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x8, 0x1ff, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x9, 0x3, 0xf9dc, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5686, 0x401, 0xffffffffffffffff, 0x0, 0x9e0c}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, ')\xbd*&/\x00'}]}, {0x8b, 0x6, "5b760500b6452cd62b48ec7663009d52c36017c97fd454c2ddee35d2a8453aabb5a2cbf1f7f3c444cd4dbf25117f503e79cde27164d75406498a9ca8e2df4e583400ae29b3462cf332d7e331f290274fe2965c0b4a09fdd674dbe1b5164cdeaeac7ece63955e485747e5ed3bc268b393069f68299057a82848a31b233786dcb076927773a077c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1b0, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0xc58, 0x1, 0xfffff001, 0x7fffffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x3, 0x5, 0x5, 0xfffffff4}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x20000000, 0x9, 0x3}, @multicast1, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x3, 0x2, 0xffffffff}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x8, 0x1, 0x8}, @multicast1, @loopback, 0x8bea23168cfad0a3}}]}, {0xc0, 0x6, "0976b4bddc3bffbbffb99ad0fca8546b98ca8f70664878ffdd13abf8a51ca14df805d6bc179ccd85ccbb449615c61b4779a336baf954f6d559368a70df652fd6ccb8061c1a4da366f4e848d8aad72bd384a899bda87185b31f1fb1a10c73c36fd91ec446318a1d83e7e203e0e64abd9c9bce6e89c1801e3eb56472d44e055a6277e6de1b39bf9fce61a7b9cbb54a2bd8ba8849e10e91cb594d0a4ae77c8d637ec93a946a12532da407ac7adefdded99c6b061a7f828baed34abda23b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2ba4dfd6f4eed76b, 0xeae7c7ef39cb1141}}}}]}]}}]}, 0x167c}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) 15.147268921s ago: executing program 0 (id=1346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netfs_rreq\x00', r3, 0x0, 0x3}, 0x18) memfd_secret(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffb, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000010000000900000006000000ae00000000100000b9fa00000010000000000020000033e100000000"]) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.121190809s ago: executing program 3 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0xf0}}}}]}]}, 0x68}}, 0x0) 15.036841333s ago: executing program 3 (id=1348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x2}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="53fc5396ae42"}]}}}]}, 0x44}}, 0x0) unshare(0x62040200) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000600)={r3, 0xffffffffffffffff, 0x32, 0x7, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x7, 0x0, 0xf1a78add0439488a}}, 0x3c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0xfffffffffffffecd, 0x48c4, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="38ccc17f11771c4a605428b5e531638235162b53410b96a62c6432e2591414811fe8ac2a2e5be1c57b930cc2aada7c1d1c0acf5b5f5d63e02090ba9c56d4b154193b671c5ab2c42bf021209bed5106cea829b70967c44ea0b238725f971b4faa755a6bc8d2c64032", 0x68, r10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="18630000", @ANYRES16=r11, @ANYBLOB="010000000000000000000300000004000180"], 0x18}}, 0x0) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r12, 0x4004f506, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) 15.036382034s ago: executing program 2 (id=1349): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000007400000000020100800c0007"], 0x114}], 0x1}, 0x0) 14.9688512s ago: executing program 2 (id=1350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000e47f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 14.968603961s ago: executing program 2 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) 14.835117571s ago: executing program 3 (id=1352): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600200070000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x98}, 0x1, 0x0, 0x7000000}, 0x0) 14.834963706s ago: executing program 3 (id=1353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000070000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000ac00850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.769016168s ago: executing program 3 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) 14.768677376s ago: executing program 0 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (fail_nth: 42) 14.682384242s ago: executing program 1 (id=1356): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x5, 0x12) ioctl$TCXONC(r1, 0x4b63, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6ea4, @remote}, 0x52) close_range(0xffffffffffffffff, r7, 0x0) 14.682059815s ago: executing program 0 (id=1357): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = epoll_create1(0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)=""/57, &(0x7f0000000100)=0x39) r3 = socket(0x1a, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0xa0000015}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x36) fcntl$notify(r4, 0x402, 0x3f) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) epoll_pwait(r4, 0x0, 0x0, 0x80000000, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x4c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd, 0xfffffffc]}, 0x0, 0x8) lremovexattr(&(0x7f0000000600)='./file1\x00', 0x0) write(r6, &(0x7f00000001c0)="c280da9cfae9247118cab4e738fb", 0xe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(r5, 0x4b32, 0x2) 14.597180071s ago: executing program 3 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {0xa}, {}, {0xd, 0xf2ff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 14.596570428s ago: executing program 0 (id=1359): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x192}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) (async, rerun: 32) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000240)={0xab43, 0x571, {0x0}, {0xee01}, 0x0, 0x3}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x34, 0x1, @tid=r3}, &(0x7f00000002c0)) (async) socketpair(0xb, 0x2, 0x4, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) write$UHID_CREATE2(r0, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xdd, 0xfff7, 0x9, 0x8, 0x7fffffff, 0x6, "7c92c11f2d2fa4d7dac919f9970def2ae9def02adf94605ef17a525f0e9b236b974406a8b1dcf3b7eb4a493ab5e98321bad7129583dcab349a4dea7656e288c09e3a824ec4736cf2cc2f496df23faba6eca437d058b72b7d4d9bd9860b0943ccb5d943796d438b19e21873a076b937b2e6597782fbb4a0f3cd8de0121e55fa703172d30cac782ff4d14ac6c088e9b2a39aa5e5f897468a1efe1dfb1fb2a4b05c9cb3f39107b7614424f72e7ecaefb2d7cd123f1c9c9b4746665690fbe30eab85160015f114bc4293e886f7859cff9f0f155a71a06e06c40a26e5a729f1"}}, 0x1f5) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000540)=@x86={0x3, 0x3, 0xb, 0x0, 0x7f, 0x1, 0x9, 0x2, 0x8, 0x7f, 0x9, 0x7, 0x0, 0x10, 0xfffffc01, 0x4, 0xff, 0x4, 0x4, '\x00', 0x8, 0xd}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000006c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000780)={&(0x7f0000000700)=[r6, r7, r8, 0x0], &(0x7f0000000740)=[0x800, 0x9], 0x4, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000007c0)={0x0, 0x1, r0}) unshare(0x60020800) (async) fstat(0xffffffffffffffff, &(0x7f0000000800)) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000880)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x2}) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x138, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6052af29, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xbd, 0x2a, [@perr={0x84, 0x2, {0x1}}, @measure_req={0x26, 0xb3, {0x7, 0x9, 0x2, "2ee2a2b3f13796b50fa84b561744132b7a5a494a022e661f72a63b8fce9a2d0801c56cc4997cc68ad9224ddc7249deabd3d6ff3c151370086983c8f5787bd711bf8594da2aedafd9df2dba6446c513f4c427b3ca4fa4ec0cd3d32ff84c279372f668589af42996e2af00ccf65a72c2ef994e2cc2800ba63cc96eb65a500be4e43379973dc072a4be6efb680773fcb5c24bd524b70e0df0a2560003e57e20531d52f178710912201c3f4b3d3ade6f8448"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x10, {0x6dc, "dd7dfa436d66", @short="bdd503bd5467ff43"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}]}, 0x138}, 0x1, 0x0, 0x0, 0x8080}, 0x20004041) (async) capset(&(0x7f0000000ac0)={0x20080522, r3}, &(0x7f0000000b00)={0x1, 0x8, 0xfffffff9, 0x6, 0x0, 0x10000}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r0, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'nr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d40)={'erspan0\x00', 0x0, 0x7800, 0xe0, 0x3, 0xe, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0xfa, 0x2f, 0x0, @multicast1, @local, {[@generic={0x86, 0xb, "176f6a419a7e9395d3"}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xec, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048801}, 0x81) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40086410, &(0x7f0000001000)={0x14, &(0x7f0000000fc0)="87d12a33749edbbcdcb923844a1cb7c3296ef7fd"}) 14.520939145s ago: executing program 0 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000ffe0000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 158.163544ms ago: executing program 32 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000ffe0000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 134.172213ms ago: executing program 33 (id=1356): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x5, 0x12) ioctl$TCXONC(r1, 0x4b63, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6ea4, @remote}, 0x52) close_range(0xffffffffffffffff, r7, 0x0) 124.662908ms ago: executing program 34 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) 0s ago: executing program 35 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {0xa}, {}, {0xd, 0xf2ff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) kernel console output (not intermixed with test programs): msghdr+0x11b/0x170 [ 137.396120][ T8607] ___sys_sendmsg+0x135/0x1e0 [ 137.397390][ T8607] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.398757][ T8607] ? __pfx_lock_release+0x10/0x10 [ 137.400060][ T8607] ? trace_lock_acquire+0x146/0x1e0 [ 137.401438][ T8607] ? __fget_files+0x206/0x3a0 [ 137.402673][ T8607] __sys_sendmsg+0x16e/0x220 [ 137.403905][ T8607] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.405242][ T8607] __do_fast_syscall_32+0x73/0x120 [ 137.406563][ T8607] do_fast_syscall_32+0x32/0x80 [ 137.407807][ T8607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.409445][ T8607] RIP: 0023:0xf7f11579 [ 137.410515][ T8607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.415669][ T8607] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.417833][ T8607] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000a80 [ 137.419891][ T8607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.421947][ T8607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.424030][ T8607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.426111][ T8607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.428173][ T8607] [ 137.520113][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 137.552699][ T8618] FAULT_INJECTION: forcing a failure. [ 137.552699][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.556120][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.0.796 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 137.558942][ T8618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.561682][ T8618] Call Trace: [ 137.562544][ T8618] [ 137.563479][ T8618] dump_stack_lvl+0x16c/0x1f0 [ 137.564705][ T8618] should_fail_ex+0x497/0x5b0 [ 137.565915][ T8618] _copy_to_user+0x32/0xd0 [ 137.567062][ T8618] generic_map_lookup_batch+0x69a/0xb90 [ 137.568460][ T8618] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 137.569943][ T8618] ? __fget_files+0x206/0x3a0 [ 137.571140][ T8618] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 137.572652][ T8618] bpf_map_do_batch+0x483/0x640 [ 137.573908][ T8618] __sys_bpf+0x55a2/0x57a0 [ 137.575049][ T8618] ? __pfx_lock_release+0x10/0x10 [ 137.576298][ T8618] ? __pfx___sys_bpf+0x10/0x10 [ 137.577529][ T8618] ? vfs_write+0x306/0x1150 [ 137.578680][ T8618] ? __mutex_unlock_slowpath+0x164/0x690 [ 137.580263][ T8618] ? fput+0x67/0x440 [ 137.581238][ T8618] ? ksys_write+0x1ba/0x250 [ 137.582389][ T8618] ? __pfx_ksys_write+0x10/0x10 [ 137.583630][ T8618] __ia32_sys_bpf+0x76/0xe0 [ 137.584781][ T8618] __do_fast_syscall_32+0x73/0x120 [ 137.586166][ T8618] do_fast_syscall_32+0x32/0x80 [ 137.587546][ T8618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.589083][ T8618] RIP: 0023:0xf7f11579 [ 137.590114][ T8618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.594797][ T8618] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 137.596884][ T8618] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 137.598840][ T8618] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.600827][ T8618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.602731][ T8618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.604676][ T8618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.606764][ T8618] [ 138.002219][ T8624] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 138.017267][ T8624] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 138.019625][ T8624] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 138.027958][ T8624] team0: Port device netdevsim0 added [ 138.054057][ T8624] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 138.059529][ T8624] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 138.062104][ T8624] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 138.072216][ T8624] team0: Port device netdevsim0 removed [ 138.077308][ T8624] bond0: (slave netdevsim0): no link monitoring support [ 138.089759][ T8624] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 138.104171][ T8624] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 138.106568][ T8624] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 138.112947][ T8624] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 138.116317][ T8424] bridge0: port 1(team0) entered blocking state [ 138.117978][ T8424] bridge0: port 1(team0) entered forwarding state [ 138.338950][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.340840][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.455299][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 138.531647][ T8632] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.555311][ T8632] netlink: 'syz.3.800': attribute type 7 has an invalid length. [ 138.558439][ T8632] netlink: 244 bytes leftover after parsing attributes in process `syz.3.800'. [ 139.379041][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.381671][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.953247][ T8702] bridge_slave_0: left allmulticast mode [ 139.955267][ T8702] bridge_slave_0: left promiscuous mode [ 139.957248][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.971233][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.971589][ T8702] bridge_slave_1: left allmulticast mode [ 139.975504][ T8702] bridge_slave_1: left promiscuous mode [ 139.977606][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.983917][ T8702] bond0: (slave bond_slave_0): Releasing backup interface [ 139.988471][ T8702] bond0: (slave bond_slave_1): Releasing backup interface [ 140.029997][ T8702] team0: Port device team_slave_0 removed [ 140.033669][ T8702] team0: Port device team_slave_1 removed [ 140.035357][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.037293][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.040322][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.042150][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.080710][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.084050][ T8706] team0: Port device bond0 added [ 140.123399][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 140.184119][ T8712] 9pnet_fd: Insufficient options for proto=fd [ 140.371763][ T8718] FAULT_INJECTION: forcing a failure. [ 140.371763][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 140.375220][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.3.814 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 140.377976][ T8718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.380963][ T8718] Call Trace: [ 140.382138][ T8718] [ 140.383177][ T8718] dump_stack_lvl+0x16c/0x1f0 [ 140.384953][ T8718] should_fail_ex+0x497/0x5b0 [ 140.386738][ T8718] ? fs_reclaim_acquire+0xae/0x150 [ 140.388378][ T8718] should_failslab+0xc2/0x120 [ 140.390181][ T8718] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 140.392132][ T8718] ? __kernfs_new_node+0xd3/0x890 [ 140.394397][ T8718] __kernfs_new_node+0xd3/0x890 [ 140.397285][ T8718] ? __pfx___kernfs_new_node+0x10/0x10 [ 140.400290][ T8718] ? __pfx_lock_release+0x10/0x10 [ 140.402752][ T8718] ? kernfs_add_one+0x39d/0x520 [ 140.405269][ T8718] ? up_write+0x1b2/0x520 [ 140.406549][ T8718] kernfs_new_node+0x186/0x240 [ 140.408061][ T8718] __kernfs_create_file+0x53/0x350 [ 140.409763][ T8718] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 140.411311][ T8718] internal_create_group+0x565/0xe50 [ 140.413021][ T8718] ? __pfx_internal_create_group+0x10/0x10 [ 140.414564][ T8718] ? kernfs_create_link+0x1bd/0x240 [ 140.415942][ T8718] internal_create_groups+0x9d/0x150 [ 140.417345][ T8718] device_add+0xf33/0x1a70 [ 140.418538][ T8718] ? __pfx_device_add+0x10/0x10 [ 140.418893][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.419828][ T8718] ? __init_waitqueue_head+0xca/0x150 [ 140.419849][ T8718] netdev_register_kobject+0x187/0x3f0 [ 140.421806][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.423109][ T8718] register_netdevice+0x1473/0x1e20 [ 140.423135][ T8718] ? __pfx_register_netdevice+0x10/0x10 [ 140.423152][ T8718] ? dev_addr_mod+0x2c9/0x390 [ 140.423165][ T8718] ipip6_tunnel_create+0x1ce/0x3e0 [ 140.423180][ T8718] ipip6_newlink+0x2fa/0x590 [ 140.423195][ T8718] ? __pfx_ipip6_newlink+0x10/0x10 [ 140.423213][ T8718] ? rtnl_create_link+0xa2e/0xf10 [ 140.423229][ T8718] rtnl_newlink+0x11ad/0x1c10 [ 140.423244][ T8718] ? __pfx_ipip6_newlink+0x10/0x10 [ 140.423258][ T8718] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.423275][ T8718] ? __pfx___lock_acquire+0x10/0x10 [ 140.442038][ T8718] ? kmem_cache_free+0x152/0x4c0 [ 140.443359][ T8718] ? aa_get_newest_label+0x376/0x680 [ 140.444852][ T8718] ? find_held_lock+0x2d/0x110 [ 140.446099][ T8718] ? find_held_lock+0x2d/0x110 [ 140.447350][ T8718] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 140.448737][ T8718] ? __pfx_lock_release+0x10/0x10 [ 140.450064][ T8718] ? trace_lock_acquire+0x146/0x1e0 [ 140.451426][ T8718] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.452758][ T8718] rtnetlink_rcv_msg+0x95b/0xea0 [ 140.454061][ T8718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.455473][ T8718] ? __pfx___dev_queue_xmit+0x10/0x10 [ 140.456883][ T8718] netlink_rcv_skb+0x165/0x410 [ 140.458270][ T8718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.459734][ T8718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.461165][ T8718] ? netlink_deliver_tap+0x1ae/0xca0 [ 140.462558][ T8718] netlink_unicast+0x53c/0x7f0 [ 140.463834][ T8718] ? __pfx_netlink_unicast+0x10/0x10 [ 140.465237][ T8718] ? __phys_addr_symbol+0x30/0x80 [ 140.466667][ T8718] ? __check_object_size+0x488/0x710 [ 140.468076][ T8718] netlink_sendmsg+0x8b8/0xd70 [ 140.469370][ T8718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.470757][ T8718] ____sys_sendmsg+0x9ae/0xb40 [ 140.472023][ T8718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.473419][ T8718] ? get_compat_msghdr+0x11b/0x170 [ 140.474753][ T8718] ___sys_sendmsg+0x135/0x1e0 [ 140.475985][ T8718] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.477363][ T8718] ? __pfx_lock_release+0x10/0x10 [ 140.478661][ T8718] ? trace_lock_acquire+0x146/0x1e0 [ 140.480486][ T8718] ? __fget_files+0x206/0x3a0 [ 140.481747][ T8718] __sys_sendmsg+0x16e/0x220 [ 140.483004][ T8718] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.484384][ T8718] __do_fast_syscall_32+0x73/0x120 [ 140.485744][ T8718] do_fast_syscall_32+0x32/0x80 [ 140.487204][ T8718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.488923][ T8718] RIP: 0023:0xf7f25579 [ 140.490000][ T8718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.496290][ T8718] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 140.498802][ T8718] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000080 [ 140.500901][ T8718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.502902][ T8718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.504824][ T8718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.506829][ T8718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.508795][ T8718] [ 140.545786][ T64] usb 7-1: config 0 has no interfaces? [ 140.548651][ T64] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.551074][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.553181][ T64] usb 7-1: Product: syz [ 140.554265][ T64] usb 7-1: Manufacturer: syz [ 140.555467][ T64] usb 7-1: SerialNumber: syz [ 140.557918][ T64] usb 7-1: config 0 descriptor?? [ 140.841419][ T8693] Process accounting resumed [ 140.865871][ T832] usb 7-1: USB disconnect, device number 4 [ 141.213079][ T8738] usb 2-1: USB disconnect, device number 5 [ 141.309636][ T8742] hub 2-0:1.0: USB hub found [ 141.311204][ T8742] hub 2-0:1.0: 6 ports detected [ 141.446273][ T8747] team0: Port device bond0 removed [ 141.450210][ T8747] bridge_slave_0: left allmulticast mode [ 141.451752][ T8747] bridge_slave_0: left promiscuous mode [ 141.453303][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.456853][ T8747] bridge_slave_1: left allmulticast mode [ 141.458350][ T8747] bridge_slave_1: left promiscuous mode [ 141.461034][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.464511][ T8747] bond0: (slave bond_slave_0): Releasing backup interface [ 141.468996][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.469411][ T8747] bond0: (slave bond_slave_1): Releasing backup interface [ 141.479482][ T6332] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 141.482061][ T8741] usb usb4: usbfs: process 8741 (syz.3.827) did not claim interface 0 before use [ 141.486794][ T8747] team0: Port device team_slave_0 removed [ 141.519820][ T8747] team0: Port device team_slave_1 removed [ 141.529975][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.531954][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.551875][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.553852][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.659585][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.662328][ T8749] team0: Port device bond0 added [ 141.673207][ T6332] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 141.675542][ T6332] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 141.678158][ T6332] usb 2-1: Product: QEMU USB Tablet [ 141.681847][ T6332] usb 2-1: Manufacturer: QEMU [ 141.684896][ T6332] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 141.706581][ T6332] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input12 [ 141.725477][ T6332] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 142.090707][ T8762] lo speed is unknown, defaulting to 1000 [ 142.501204][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.503366][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.739652][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 142.791153][ T8766] netlink: 'syz.1.824': attribute type 2 has an invalid length. [ 143.415896][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 143.541794][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.544275][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.586890][ T8790] team0 (unregistering): Port device bond0 removed [ 144.372147][ T5974] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 144.425123][ T8825] tipc: Enabled bearer , priority 10 [ 144.578962][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.735236][ T8828] syz.3.841: attempt to access beyond end of device [ 144.735236][ T8828] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 144.739419][ T8828] syz.3.841: attempt to access beyond end of device [ 144.739419][ T8828] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 144.742877][ T8828] Mount JFS Failure: -5 [ 144.779207][ T8828] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 145.309488][ T8844] lo speed is unknown, defaulting to 1000 [ 145.345496][ T39] audit: type=1326 audit(1732646178.921:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.365673][ T39] audit: type=1326 audit(1732646178.921:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.402002][ T39] audit: type=1326 audit(1732646178.921:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.409920][ T39] audit: type=1326 audit(1732646178.921:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.417302][ T39] audit: type=1326 audit(1732646178.921:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.425208][ T39] audit: type=1326 audit(1732646178.921:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.432806][ T39] audit: type=1326 audit(1732646178.921:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.440353][ T39] audit: type=1326 audit(1732646178.921:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.447698][ T39] audit: type=1326 audit(1732646178.921:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.455147][ T39] audit: type=1326 audit(1732646178.921:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.0.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 145.618858][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.621600][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.666975][ T8850] lo speed is unknown, defaulting to 1000 [ 145.922201][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 146.600242][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 146.668899][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.670768][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.845292][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 146.846854][ T8881] sockfs: Unknown parameter 'Œ^rquota' [ 147.139568][ T8900] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.332814][ T8907] syzkaller0: entered promiscuous mode [ 147.334396][ T8907] syzkaller0: entered allmulticast mode [ 147.337946][ T8907] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 147.457744][ T8910] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 147.471726][ T8910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.698941][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.701591][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.950631][ T8918] netlink: 260 bytes leftover after parsing attributes in process `syz.2.870'. [ 148.051170][ T8923] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.213686][ T8929] lo speed is unknown, defaulting to 1000 [ 148.402228][ T5974] Bluetooth: hci3: unexpected event 0x03 length: 16 > 11 [ 148.748840][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.752551][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.970135][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 149.021432][ T8938] 9pnet_fd: Insufficient options for proto=fd [ 149.136558][ T8942] Invalid source name [ 149.158304][ T8942] lo speed is unknown, defaulting to 1000 [ 149.273290][ T8946] netlink: 'syz.2.880': attribute type 14 has an invalid length. [ 149.430511][ T8952] lo speed is unknown, defaulting to 1000 [ 150.056026][ T8963] FAULT_INJECTION: forcing a failure. [ 150.056026][ T8963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.066212][ T8963] CPU: 2 UID: 0 PID: 8963 Comm: syz.2.892 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 150.068956][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.072794][ T8963] Call Trace: [ 150.073968][ T8963] [ 150.075010][ T8963] dump_stack_lvl+0x16c/0x1f0 [ 150.076658][ T8963] should_fail_ex+0x497/0x5b0 [ 150.078373][ T8963] _copy_to_user+0x32/0xd0 [ 150.079829][ T8963] generic_map_lookup_batch+0x70e/0xb90 [ 150.081384][ T8963] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 150.083412][ T8963] ? __fget_files+0x206/0x3a0 [ 150.084678][ T8963] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 150.086390][ T8963] bpf_map_do_batch+0x483/0x640 [ 150.087754][ T8963] __sys_bpf+0x55a2/0x57a0 [ 150.089334][ T8963] ? __pfx_lock_release+0x10/0x10 [ 150.090660][ T8963] ? __pfx___sys_bpf+0x10/0x10 [ 150.091954][ T8963] ? vfs_write+0x306/0x1150 [ 150.093198][ T8963] ? __mutex_unlock_slowpath+0x164/0x690 [ 150.094685][ T8963] ? fput+0x67/0x440 [ 150.095711][ T8963] ? ksys_write+0x1ba/0x250 [ 150.096925][ T8963] ? __pfx_ksys_write+0x10/0x10 [ 150.098212][ T8963] __ia32_sys_bpf+0x76/0xe0 [ 150.099461][ T8963] __do_fast_syscall_32+0x73/0x120 [ 150.100808][ T8963] do_fast_syscall_32+0x32/0x80 [ 150.102113][ T8963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.103795][ T8963] RIP: 0023:0xf746e579 [ 150.104868][ T8963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.109927][ T8963] RSP: 002b:00000000f515655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 150.112105][ T8963] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 150.114189][ T8963] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.116217][ T8963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.118238][ T8963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.120307][ T8963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.122320][ T8963] [ 150.164783][ T8966] netlink: 'syz.1.885': attribute type 21 has an invalid length. [ 150.219595][ T8970] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 150.222932][ T8970] macvtap1: entered promiscuous mode [ 150.224558][ T8970] macvtap1: entered allmulticast mode [ 150.226016][ T8970] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 150.230220][ T8970] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 150.232532][ T8970] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 150.307448][ T8972] bond0: left promiscuous mode [ 150.313549][ T8972] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 150.316264][ T8972] bond0: left allmulticast mode [ 150.317967][ T8972] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 150.327292][ T8972] team0: Port device bond0 removed [ 150.332696][ T8972] team0: left allmulticast mode [ 150.334589][ T8972] bridge0: port 1(team0) entered disabled state [ 150.374934][ T8972] bond0: (slave netdevsim0): Releasing backup interface [ 150.401992][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.406524][ T8975] bond0: entered promiscuous mode [ 150.408161][ T8975] team0: Port device bond0 added [ 150.410000][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 150.430154][ T832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.828907][ C2] net_ratelimit: 3 callbacks suppressed [ 150.828926][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.833184][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.009080][ T8997] lo speed is unknown, defaulting to 1000 [ 151.219001][ T832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.698914][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.899'. [ 151.708376][ T9004] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 151.796584][ T9009] FAULT_INJECTION: forcing a failure. [ 151.796584][ T9009] name failslab, interval 1, probability 0, space 0, times 0 [ 151.800541][ T9009] CPU: 2 UID: 0 PID: 9009 Comm: syz.3.901 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 151.803059][ T9009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.805657][ T9009] Call Trace: [ 151.806549][ T9009] [ 151.807282][ T9009] dump_stack_lvl+0x16c/0x1f0 [ 151.808427][ T9009] should_fail_ex+0x497/0x5b0 [ 151.809551][ T9009] ? fs_reclaim_acquire+0xae/0x150 [ 151.810762][ T9009] should_failslab+0xc2/0x120 [ 151.811885][ T9009] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 151.813171][ T9009] ? rcu_is_watching+0x12/0xc0 [ 151.814313][ T9009] ? security_file_alloc+0x34/0x2b0 [ 151.815959][ T9009] security_file_alloc+0x34/0x2b0 [ 151.817333][ T9009] init_file+0x93/0x480 [ 151.818315][ T9009] alloc_empty_file+0x91/0x1e0 [ 151.819436][ T9009] alloc_file_pseudo+0x13d/0x200 [ 151.820619][ T9009] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 151.821898][ T9009] ? alloc_fd+0x41f/0x760 [ 151.822936][ T9009] ? __pfx_lock_release+0x10/0x10 [ 151.824112][ T9009] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 151.825454][ T9009] __anon_inode_getfile+0x136/0x3c0 [ 151.826656][ T9009] ? _raw_spin_unlock+0x28/0x50 [ 151.827817][ T9009] ? __pfx___anon_inode_getfile+0x10/0x10 [ 151.829168][ T9009] do_signalfd4+0x205/0x450 [ 151.830246][ T9009] __ia32_compat_sys_signalfd4+0x144/0x1e0 [ 151.831620][ T9009] ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10 [ 151.833114][ T9009] ? rcu_is_watching+0x12/0xc0 [ 151.834257][ T9009] __do_fast_syscall_32+0x73/0x120 [ 151.835858][ T9009] do_fast_syscall_32+0x32/0x80 [ 151.837264][ T9009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.838742][ T9009] RIP: 0023:0xf7f25579 [ 151.839702][ T9009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.844186][ T9009] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000147 [ 151.846128][ T9009] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000020000040 [ 151.847979][ T9009] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.849819][ T9009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.851643][ T9009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.853469][ T9009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.855646][ T9009] [ 151.858827][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.872656][ T9011] netlink: 'syz.0.902': attribute type 7 has an invalid length. [ 151.874787][ T9011] netlink: 244 bytes leftover after parsing attributes in process `syz.0.902'. [ 151.922321][ T9022] 9pnet_virtio: no channels available for device syz [ 151.945345][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.903'. [ 151.997503][ T9030] could not allocate digest TFM handle crct10dif-arm64-ce [ 152.001948][ T9030] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.004074][ T9030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.005956][ T9030] IPv6: NLM_F_CREATE should be set when creating new route [ 152.007828][ T9030] IPv6: NLM_F_CREATE should be set when creating new route [ 152.009770][ T9030] IPv6: NLM_F_CREATE should be set when creating new route [ 152.307652][ T9056] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.310621][ T9056] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.312996][ T9056] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.315212][ T9056] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.317578][ T9056] geneve2: entered promiscuous mode [ 152.321015][ T9056] geneve2: entered allmulticast mode [ 152.898858][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.900718][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.082233][ T9063] uprobe: syz.0.915:9063 failed to unregister, leaking uprobe [ 153.239963][ T9068] FAULT_INJECTION: forcing a failure. [ 153.239963][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 153.244564][ T9068] CPU: 2 UID: 0 PID: 9068 Comm: syz.3.916 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 153.248123][ T9068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.250966][ T9068] Call Trace: [ 153.251838][ T9068] [ 153.252633][ T9068] dump_stack_lvl+0x16c/0x1f0 [ 153.253992][ T9068] should_fail_ex+0x497/0x5b0 [ 153.255492][ T9068] ? fs_reclaim_acquire+0xae/0x150 [ 153.257347][ T9068] should_failslab+0xc2/0x120 [ 153.259129][ T9068] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 153.261096][ T9068] ? __kernfs_new_node+0xd3/0x890 [ 153.262937][ T9068] __kernfs_new_node+0xd3/0x890 [ 153.264664][ T9068] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.266542][ T9068] ? __pfx_lock_release+0x10/0x10 [ 153.268248][ T9068] ? kernfs_add_one+0x39d/0x520 [ 153.269574][ T9068] ? up_write+0x1b2/0x520 [ 153.270845][ T9068] kernfs_new_node+0x186/0x240 [ 153.272090][ T9068] __kernfs_create_file+0x53/0x350 [ 153.273420][ T9068] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 153.274830][ T9068] internal_create_group+0x565/0xe50 [ 153.276244][ T9068] ? __pfx_internal_create_group+0x10/0x10 [ 153.278255][ T9068] ? kernfs_create_link+0x1bd/0x240 [ 153.280155][ T9068] internal_create_groups+0x9d/0x150 [ 153.282208][ T9068] device_add+0xf33/0x1a70 [ 153.283793][ T9068] ? __pfx_device_add+0x10/0x10 [ 153.285452][ T9068] ? __init_waitqueue_head+0xca/0x150 [ 153.287333][ T9068] netdev_register_kobject+0x187/0x3f0 [ 153.289369][ T9068] register_netdevice+0x1473/0x1e20 [ 153.291483][ T9068] ? __pfx_register_netdevice+0x10/0x10 [ 153.293558][ T9068] ? dev_addr_mod+0x2c9/0x390 [ 153.294804][ T9068] ipip6_tunnel_create+0x1ce/0x3e0 [ 153.296015][ T9068] ipip6_newlink+0x2fa/0x590 [ 153.297229][ T9068] ? __pfx_ipip6_newlink+0x10/0x10 [ 153.298471][ T9068] ? rtnl_create_link+0xa2e/0xf10 [ 153.300374][ T9068] rtnl_newlink+0x11ad/0x1c10 [ 153.302058][ T9068] ? __pfx_ipip6_newlink+0x10/0x10 [ 153.303798][ T9068] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.305519][ T9068] ? __pfx___lock_acquire+0x10/0x10 [ 153.307404][ T9068] ? kmem_cache_free+0x152/0x4c0 [ 153.309200][ T9068] ? aa_get_newest_label+0x376/0x680 [ 153.311011][ T9068] ? find_held_lock+0x2d/0x110 [ 153.312659][ T9068] ? find_held_lock+0x2d/0x110 [ 153.314309][ T9068] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 153.315884][ T9068] ? __pfx_lock_release+0x10/0x10 [ 153.317304][ T9068] ? trace_lock_acquire+0x146/0x1e0 [ 153.318612][ T9068] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.319937][ T9068] rtnetlink_rcv_msg+0x95b/0xea0 [ 153.321269][ T9068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.322717][ T9068] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.324145][ T9068] netlink_rcv_skb+0x165/0x410 [ 153.325435][ T9068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.326853][ T9068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.328384][ T9068] ? netlink_deliver_tap+0x1ae/0xca0 [ 153.329794][ T9068] netlink_unicast+0x53c/0x7f0 [ 153.331237][ T9068] ? __pfx_netlink_unicast+0x10/0x10 [ 153.332659][ T9068] ? __phys_addr_symbol+0x30/0x80 [ 153.333995][ T9068] ? __check_object_size+0x488/0x710 [ 153.335610][ T9068] netlink_sendmsg+0x8b8/0xd70 [ 153.336916][ T9068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.338304][ T9068] ____sys_sendmsg+0x9ae/0xb40 [ 153.339721][ T9068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.341142][ T9068] ? get_compat_msghdr+0x11b/0x170 [ 153.342715][ T9068] ___sys_sendmsg+0x135/0x1e0 [ 153.343976][ T9068] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.345364][ T9068] ? __pfx_lock_release+0x10/0x10 [ 153.346617][ T9068] ? trace_lock_acquire+0x146/0x1e0 [ 153.347982][ T9068] ? __fget_files+0x206/0x3a0 [ 153.349193][ T9068] __sys_sendmsg+0x16e/0x220 [ 153.350402][ T9068] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.351901][ T9068] __do_fast_syscall_32+0x73/0x120 [ 153.353283][ T9068] do_fast_syscall_32+0x32/0x80 [ 153.354550][ T9068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.356063][ T9068] RIP: 0023:0xf7f25579 [ 153.357079][ T9068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.362281][ T9068] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 153.364491][ T9068] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000080 [ 153.364756][ T9076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.366537][ T9068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.371535][ T9068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.373690][ T9068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.375739][ T9068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.377812][ T9068] [ 153.491580][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 153.584942][ T9094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.924'. [ 153.633403][ T9096] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.670723][ T9100] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.673438][ T9100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.676005][ T9100] IPv6: NLM_F_CREATE should be set when creating new route [ 153.678917][ T9100] IPv6: NLM_F_CREATE should be set when creating new route [ 153.681395][ T9100] IPv6: NLM_F_CREATE should be set when creating new route [ 153.687665][ T9100] FAULT_INJECTION: forcing a failure. [ 153.687665][ T9100] name failslab, interval 1, probability 0, space 0, times 0 [ 153.692324][ T9100] CPU: 3 UID: 0 PID: 9100 Comm: syz.1.927 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 153.695714][ T9100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.698739][ T9100] Call Trace: [ 153.699581][ T9100] [ 153.700440][ T9100] dump_stack_lvl+0x16c/0x1f0 [ 153.701668][ T9100] should_fail_ex+0x497/0x5b0 [ 153.702864][ T9100] should_failslab+0xc2/0x120 [ 153.704019][ T9100] __kmalloc_noprof+0xce/0x4f0 [ 153.705358][ T9100] ? nsim_fib_event_nb+0x448/0xec0 [ 153.706638][ T9100] ? kasan_save_track+0x14/0x30 [ 153.707847][ T9100] nsim_fib_event_nb+0x448/0xec0 [ 153.709148][ T9100] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 153.710969][ T9100] ? rcu_is_watching+0x12/0xc0 [ 153.712330][ T9100] notifier_call_chain+0xb7/0x410 [ 153.713651][ T9100] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 153.715315][ T9100] atomic_notifier_call_chain+0x71/0x1c0 [ 153.717006][ T9100] call_fib_notifiers+0x33/0x70 [ 153.718274][ T9100] call_fib6_multipath_entry_notifiers+0x10d/0x170 [ 153.719954][ T9100] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 153.721837][ T9100] ? __pfx_lock_release+0x10/0x10 [ 153.723161][ T9100] ip6_route_multipath_add+0xae0/0x1ff0 [ 153.724739][ T9100] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 153.726290][ T9100] ? __mutex_trylock_common+0xea/0x250 [ 153.727695][ T9100] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.729224][ T9100] ? rtnetlink_rcv_msg+0x372/0xea0 [ 153.730531][ T9100] ? inet6_rtm_newroute+0xe5/0x170 [ 153.731858][ T9100] inet6_rtm_newroute+0xe5/0x170 [ 153.733143][ T9100] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 153.734662][ T9100] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 153.736515][ T9100] rtnetlink_rcv_msg+0x3c7/0xea0 [ 153.737837][ T9100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.739298][ T9100] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.740772][ T9100] netlink_rcv_skb+0x165/0x410 [ 153.742028][ T9100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.743478][ T9100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.744979][ T9100] ? netlink_deliver_tap+0x1ae/0xca0 [ 153.746347][ T9100] netlink_unicast+0x53c/0x7f0 [ 153.747600][ T9100] ? __pfx_netlink_unicast+0x10/0x10 [ 153.749001][ T9100] ? __phys_addr_symbol+0x30/0x80 [ 153.750316][ T9100] ? __check_object_size+0x488/0x710 [ 153.751971][ T9100] netlink_sendmsg+0x8b8/0xd70 [ 153.753276][ T9100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.754764][ T9100] ____sys_sendmsg+0x9ae/0xb40 [ 153.756047][ T9100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.757503][ T9100] ? get_compat_msghdr+0x11b/0x170 [ 153.758874][ T9100] ___sys_sendmsg+0x135/0x1e0 [ 153.760130][ T9100] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.761511][ T9100] ? __pfx_lock_release+0x10/0x10 [ 153.762868][ T9100] ? trace_lock_acquire+0x146/0x1e0 [ 153.764256][ T9100] ? __fget_files+0x206/0x3a0 [ 153.765529][ T9100] __sys_sendmsg+0x16e/0x220 [ 153.766748][ T9100] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.768095][ T9100] __do_fast_syscall_32+0x73/0x120 [ 153.769453][ T9100] do_fast_syscall_32+0x32/0x80 [ 153.770733][ T9100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.772366][ T9100] RIP: 0023:0xf7f93579 [ 153.773550][ T9100] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.778936][ T9100] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 153.781069][ T9100] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 153.783116][ T9100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.785200][ T9100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.787239][ T9100] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.789371][ T9100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.791571][ T9100] [ 153.809213][ T9101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 153.810987][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.813533][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 153.885757][ T9108] team0: Port device bond0 removed [ 153.948901][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.951378][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.985682][ T9110] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.009007][ T9] vhci_hcd: vhci_device speed not set [ 154.078838][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 154.200363][ T9120] FAULT_INJECTION: forcing a failure. [ 154.200363][ T9120] name failslab, interval 1, probability 0, space 0, times 0 [ 154.203812][ T9120] CPU: 2 UID: 0 PID: 9120 Comm: syz.2.934 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 154.206547][ T9120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.209413][ T9120] Call Trace: [ 154.210312][ T9120] [ 154.211117][ T9120] dump_stack_lvl+0x16c/0x1f0 [ 154.212383][ T9120] should_fail_ex+0x497/0x5b0 [ 154.213642][ T9120] ? fs_reclaim_acquire+0xae/0x150 [ 154.215021][ T9120] should_failslab+0xc2/0x120 [ 154.216290][ T9120] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 154.218059][ T9120] ? __alloc_skb+0x2b3/0x380 [ 154.219310][ T9120] __alloc_skb+0x2b3/0x380 [ 154.220531][ T9120] ? __pfx___alloc_skb+0x10/0x10 [ 154.221886][ T9120] ? aa_sk_perm+0x2f5/0xb20 [ 154.223150][ T9120] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.224451][ T9120] pfkey_sendmsg+0x16e/0x840 [ 154.225699][ T9120] ____sys_sendmsg+0x9ae/0xb40 [ 154.226991][ T9120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.228408][ T9120] ? get_compat_msghdr+0x11b/0x170 [ 154.229925][ T9120] ___sys_sendmsg+0x135/0x1e0 [ 154.231189][ T9120] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.232597][ T9120] ? __pfx_lock_release+0x10/0x10 [ 154.233935][ T9120] ? trace_lock_acquire+0x146/0x1e0 [ 154.235321][ T9120] ? __fget_files+0x206/0x3a0 [ 154.236596][ T9120] __sys_sendmsg+0x16e/0x220 [ 154.237830][ T9120] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.239204][ T9120] __do_fast_syscall_32+0x73/0x120 [ 154.240583][ T9120] do_fast_syscall_32+0x32/0x80 [ 154.241879][ T9120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.243567][ T9120] RIP: 0023:0xf746e579 [ 154.244730][ T9120] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.249808][ T9120] RSP: 002b:00000000f515655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 154.252006][ T9120] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000100 [ 154.254140][ T9120] RDX: 0000000000058010 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.256269][ T9120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.258356][ T9120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.260481][ T9120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.262592][ T9120] [ 154.377376][ T9130] binder: 9123:9130 ioctl 4018620d 0 returned -22 [ 154.590214][ T9102] vhci_hcd: connection reset by peer [ 154.592246][ T45] vhci_hcd: stop threads [ 154.594321][ T45] vhci_hcd: release socket [ 154.595795][ T45] vhci_hcd: disconnect device [ 154.618127][ T9133] xt_CT: No such helper "pptp" [ 154.978863][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.131218][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 155.131230][ T39] audit: type=1326 audit(1732646188.711:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.138454][ T39] audit: type=1326 audit(1732646188.711:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.153028][ T39] audit: type=1326 audit(1732646188.721:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.163610][ T39] audit: type=1326 audit(1732646188.721:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.171158][ T39] audit: type=1326 audit(1732646188.721:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.178403][ T39] audit: type=1326 audit(1732646188.721:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.188496][ T39] audit: type=1326 audit(1732646188.721:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.204193][ T39] audit: type=1326 audit(1732646188.721:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.214344][ T39] audit: type=1326 audit(1732646188.721:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.232577][ T39] audit: type=1326 audit(1732646188.721:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 155.244682][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.545296][ T9154] block nbd0: shutting down sockets [ 155.914085][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 155.918301][ T6023] IPVS: starting estimator thread 0... [ 156.008939][ T9161] IPVS: using max 37 ests per chain, 88800 per kthread [ 156.018914][ C2] net_ratelimit: 1 callbacks suppressed [ 156.018930][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 156.023118][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.074424][ T9166] batadv_slave_0: entered promiscuous mode [ 156.077480][ T9166] batadv0: entered promiscuous mode [ 156.272933][ T9182] FAULT_INJECTION: forcing a failure. [ 156.272933][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 156.276459][ T9182] CPU: 3 UID: 0 PID: 9182 Comm: syz.0.952 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 156.279065][ T9182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.281961][ T9182] Call Trace: [ 156.282919][ T9182] [ 156.283721][ T9182] dump_stack_lvl+0x16c/0x1f0 [ 156.285222][ T9182] should_fail_ex+0x497/0x5b0 [ 156.286727][ T9182] ? fs_reclaim_acquire+0xae/0x150 [ 156.288110][ T9182] should_failslab+0xc2/0x120 [ 156.289382][ T9182] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 156.290946][ T9182] ? __alloc_skb+0x2b3/0x380 [ 156.292195][ T9182] __alloc_skb+0x2b3/0x380 [ 156.293397][ T9182] ? __pfx___alloc_skb+0x10/0x10 [ 156.294788][ T9182] ? genl_rcv_msg+0x4bd/0x800 [ 156.296049][ T9182] netlink_ack+0x164/0xb20 [ 156.297265][ T9182] netlink_rcv_skb+0x327/0x410 [ 156.298549][ T9182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.299908][ T9182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.301336][ T9182] ? down_read+0xc9/0x330 [ 156.302512][ T9182] ? __pfx_down_read+0x10/0x10 [ 156.303812][ T9182] ? netlink_deliver_tap+0x1ae/0xca0 [ 156.305283][ T9182] genl_rcv+0x28/0x40 [ 156.306349][ T9182] netlink_unicast+0x53c/0x7f0 [ 156.307629][ T9182] ? __pfx_netlink_unicast+0x10/0x10 [ 156.309343][ T9182] ? __phys_addr_symbol+0x30/0x80 [ 156.310791][ T9182] ? __check_object_size+0x488/0x710 [ 156.312367][ T9182] netlink_sendmsg+0x8b8/0xd70 [ 156.313645][ T9182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.315275][ T9182] __sys_sendto+0x488/0x4f0 [ 156.316601][ T9182] ? __pfx___sys_sendto+0x10/0x10 [ 156.317957][ T9182] ? __might_fault+0x13b/0x190 [ 156.319252][ T9182] __do_compat_sys_socketcall+0x5e2/0x700 [ 156.320765][ T9182] ? __fget_files+0x206/0x3a0 [ 156.322015][ T9182] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 156.323681][ T9182] ? fput+0x67/0x440 [ 156.324866][ T9182] __do_fast_syscall_32+0x73/0x120 [ 156.326572][ T9182] do_fast_syscall_32+0x32/0x80 [ 156.327867][ T9182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.329575][ T9182] RIP: 0023:0xf7f11579 [ 156.330512][ T9184] fuse: Unknown parameter 'fd?W' [ 156.330654][ T9182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 156.337063][ T9182] RSP: 002b:00000000f5095430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 156.339263][ T9182] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5095444 [ 156.341361][ T9182] RDX: 0000000000000000 RSI: 00000000f5095560 RDI: 00000000f739dff4 [ 156.343465][ T9182] RBP: 00000000f5095560 R08: 0000000000000000 R09: 0000000000000000 [ 156.345826][ T9182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 156.348122][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.350216][ T9182] [ 156.382428][ T9188] usb 2-1: USB disconnect, device number 6 [ 156.395700][ T9188] hub 2-0:1.0: USB hub found [ 156.397708][ T9188] hub 2-0:1.0: 6 ports detected [ 156.558953][ T35] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 156.598934][ T6154] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 156.738916][ T6154] usb 7-1: device descriptor read/64, error -71 [ 156.741189][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 156.743666][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 156.746395][ T35] usb 2-1: Product: QEMU USB Tablet [ 156.747836][ T35] usb 2-1: Manufacturer: QEMU [ 156.749226][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 156.771276][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input13 [ 156.812709][ T9200] netlink: 168 bytes leftover after parsing attributes in process `syz.0.959'. [ 156.833846][ T35] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 156.988867][ T6154] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 157.068874][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.071582][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 157.120491][ T6154] usb 7-1: device descriptor read/64, error -71 [ 157.217056][ T9224] lo speed is unknown, defaulting to 1000 [ 157.229058][ T6154] usb usb7-port1: attempt power cycle [ 157.337542][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 157.378999][ T6024] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.639062][ T6154] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 157.681683][ T6154] usb 7-1: device descriptor read/8, error -71 [ 157.718933][ T6024] usb 5-1: device descriptor read/64, error -71 [ 157.918918][ T6154] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 157.942784][ T6154] usb 7-1: device descriptor read/8, error -71 [ 157.968967][ T6024] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.050254][ T6154] usb usb7-port1: unable to enumerate USB device [ 158.098864][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.100857][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.102797][ T6024] usb 5-1: device descriptor read/64, error -71 [ 158.209108][ T6024] usb usb5-port1: attempt power cycle [ 158.548882][ T6024] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.569362][ T6024] usb 5-1: device descriptor read/8, error -71 [ 158.808879][ T6024] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 158.829370][ T6024] usb 5-1: device descriptor read/8, error -71 [ 158.953762][ T6024] usb usb5-port1: unable to enumerate USB device [ 159.088940][ T6024] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.138946][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.141427][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 159.218947][ T9] vhci_hcd: vhci_device speed not set [ 159.218967][ T6024] usb 5-1: device descriptor read/64, error -71 [ 159.333939][ T9254] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.393966][ T9258] @: renamed from vlan0 (while UP) [ 159.458976][ T6024] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.588920][ T6024] usb 5-1: device descriptor read/64, error -71 [ 159.709092][ T6024] usb usb5-port1: attempt power cycle [ 160.059115][ T6024] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.188857][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 160.269000][ T6024] usb 5-1: device not accepting address 14, error -71 [ 160.434854][ T9277] lo speed is unknown, defaulting to 1000 [ 160.750083][ T9290] netlink: 'syz.2.983': attribute type 14 has an invalid length. [ 160.844941][ T9292] netlink: 'syz.2.984': attribute type 7 has an invalid length. [ 160.847054][ T9292] netlink: 244 bytes leftover after parsing attributes in process `syz.2.984'. [ 161.154417][ T9297] binder: 9296:9297 ioctl c0306201 0 returned -14 [ 161.218868][ C2] net_ratelimit: 1 callbacks suppressed [ 161.218880][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.222109][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.277336][ T9309] kAFS: unable to lookup cell ' [ 161.277336][ T9309] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 161.277336][ T9309] ' [ 161.326639][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 161.351247][ T9320] syzkaller0: entered promiscuous mode [ 161.352735][ T9320] syzkaller0: entered allmulticast mode [ 161.389739][ T9324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.997'. [ 161.392650][ T9324] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 162.152317][ T9329] FAULT_INJECTION: forcing a failure. [ 162.152317][ T9329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.155647][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.1.998 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 162.158180][ T9329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.160856][ T9329] Call Trace: [ 162.161707][ T9329] [ 162.162461][ T9329] dump_stack_lvl+0x16c/0x1f0 [ 162.163644][ T9329] should_fail_ex+0x497/0x5b0 [ 162.164836][ T9329] _copy_to_user+0x32/0xd0 [ 162.165918][ T9329] simple_read_from_buffer+0xd0/0x160 [ 162.167259][ T9329] proc_fail_nth_read+0x198/0x270 [ 162.168519][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.170048][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.171401][ T9329] vfs_read+0x1df/0xbe0 [ 162.172399][ T9329] ? __fget_files+0x1fc/0x3a0 [ 162.173539][ T9329] ? __pfx___mutex_lock+0x10/0x10 [ 162.174745][ T9329] ? __pfx_vfs_read+0x10/0x10 [ 162.175889][ T9329] ? __fget_files+0x206/0x3a0 [ 162.177034][ T9329] ksys_read+0x12b/0x250 [ 162.178062][ T9329] ? __pfx_ksys_read+0x10/0x10 [ 162.179232][ T9329] ? rcu_is_watching+0x12/0xc0 [ 162.180425][ T9329] __do_fast_syscall_32+0x73/0x120 [ 162.181646][ T9329] do_fast_syscall_32+0x32/0x80 [ 162.182849][ T9329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.184376][ T9329] RIP: 0023:0xf7f93579 [ 162.185366][ T9329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.190097][ T9329] RSP: 002b:00000000f5116590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 162.192227][ T9329] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5116620 [ 162.194252][ T9329] RDX: 000000000000000f RSI: 00000000f741dff4 RDI: 0000000000000000 [ 162.196277][ T9329] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 162.198289][ T9329] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 162.200313][ T9329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.202335][ T9329] [ 162.203218][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.258851][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.399863][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 163.163666][ T9367] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.180851][ T9370] FAULT_INJECTION: forcing a failure. [ 163.180851][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.185189][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.2.1008 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 163.188475][ T9370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.191480][ T9370] Call Trace: [ 163.192370][ T9370] [ 163.193156][ T9370] dump_stack_lvl+0x16c/0x1f0 [ 163.194389][ T9370] should_fail_ex+0x497/0x5b0 [ 163.195624][ T9370] _copy_to_user+0x32/0xd0 [ 163.196840][ T9370] simple_read_from_buffer+0xd0/0x160 [ 163.198224][ T9370] proc_fail_nth_read+0x198/0x270 [ 163.199530][ T9370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.200964][ T9370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.202397][ T9370] vfs_read+0x1df/0xbe0 [ 163.203362][ T9368] usb 2-1: USB disconnect, device number 7 [ 163.203504][ T9370] ? __fget_files+0x1fc/0x3a0 [ 163.206334][ T9370] ? __pfx___mutex_lock+0x10/0x10 [ 163.208164][ T9370] ? __pfx_vfs_read+0x10/0x10 [ 163.209733][ T9370] ? __fget_files+0x206/0x3a0 [ 163.210960][ T9370] ksys_read+0x12b/0x250 [ 163.212077][ T9370] ? __pfx_ksys_read+0x10/0x10 [ 163.213347][ T9370] __do_fast_syscall_32+0x73/0x120 [ 163.214682][ T9370] do_fast_syscall_32+0x32/0x80 [ 163.215952][ T9370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.217648][ T9370] RIP: 0023:0xf746e579 [ 163.218701][ T9370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.223627][ T9370] RSP: 002b:00000000f5114590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 163.225774][ T9370] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5114620 [ 163.228532][ T9370] RDX: 000000000000000f RSI: 00000000f745dff4 RDI: 0000000000000000 [ 163.230818][ T9370] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 163.232872][ T9370] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 163.234941][ T9370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.237048][ T9370] [ 163.264465][ T9371] hub 2-0:1.0: USB hub found [ 163.265860][ T9371] hub 2-0:1.0: 6 ports detected [ 163.298940][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.300780][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 163.438970][ T64] usb 2-1: new high-speed USB device number 8 using ehci-pci [ 163.617118][ T64] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 163.619906][ T64] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 163.622029][ T64] usb 2-1: Product: QEMU USB Tablet [ 163.623486][ T64] usb 2-1: Manufacturer: QEMU [ 163.624802][ T64] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 163.644238][ T64] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input14 [ 163.701136][ T64] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 164.348872][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 164.350676][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.343626][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.427096][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 166.078780][ T9400] orangefs_mount: mount request failed with -4 [ 166.334243][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 166.336113][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.492905][ T9422] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.513489][ T9422] lo speed is unknown, defaulting to 1000 [ 166.639379][ T9437] lo speed is unknown, defaulting to 1000 [ 166.650737][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.653139][ T9439] team0: Port device bond0 added [ 166.681421][ T39] kauditd_printk_skb: 96 callbacks suppressed [ 166.681431][ T39] audit: type=1326 audit(1732646200.361:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.689512][ T39] audit: type=1326 audit(1732646200.361:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.696752][ T39] audit: type=1326 audit(1732646200.372:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.702871][ T39] audit: type=1326 audit(1732646200.372:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.708743][ T39] audit: type=1326 audit(1732646200.372:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.714562][ T39] audit: type=1326 audit(1732646200.372:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.721721][ T39] audit: type=1326 audit(1732646200.372:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.727024][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 166.727765][ T39] audit: type=1326 audit(1732646200.372:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.730369][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 166.737729][ T39] audit: type=1326 audit(1732646200.372:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 166.745400][ T39] audit: type=1326 audit(1732646200.372:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 167.106159][ T9461] tipc: Enabling of bearer rejected, already enabled [ 167.227794][ T9463] IPv6: sit2: Disabled Multicast RS [ 167.230021][ T9463] sit2: entered allmulticast mode [ 167.324579][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.326573][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.579278][ T9474] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 167.587171][ T9474] bridge0: entered promiscuous mode [ 167.589354][ T9474] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 167.649651][ T9476] overlay: Unknown parameter 'fowner>00000000000000000000' [ 167.722310][ T9480] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 167.724325][ T9480] macvlan2: entered allmulticast mode [ 167.725904][ T9480] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 167.728667][ T9480] batman_adv: batadv0: Adding interface: macvlan2 [ 167.730348][ T9480] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.737151][ T9480] batman_adv: batadv0: Interface activated: macvlan2 [ 168.315135][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.317308][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.867646][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 168.932393][ T9508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 168.933999][ T9508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.941995][ T9508] vhci_hcd vhci_hcd.0: Device attached [ 168.947321][ T9509] vhci_hcd: connection closed [ 168.947505][ T8424] vhci_hcd: stop threads [ 168.950297][ T8424] vhci_hcd: release socket [ 168.952225][ T8424] vhci_hcd: disconnect device [ 169.225534][ T9516] binder: 9515:9516 ioctl 4018620d 0 returned -22 [ 169.315350][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.317242][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.807465][ T9536] bridge4: entered promiscuous mode [ 169.808944][ T9536] bridge4: entered allmulticast mode [ 169.915506][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 169.917726][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 169.960185][ T9544] binder: 9543:9544 ioctl 4018620d 0 returned -22 [ 170.122149][ T9547] team0: Port device bond0 removed [ 170.138166][ T9547] batman_adv: batadv0: Interface deactivated: macvlan2 [ 170.140163][ T9547] batman_adv: batadv0: Removing interface: macvlan2 [ 170.156339][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.159250][ T9547] team0: Port device bond0 added [ 170.296590][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.298504][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.428385][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 170.431737][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 170.434748][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 170.437851][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 170.818948][ T9569] random: crng reseeded on system resumption [ 170.989433][ T9572] lo speed is unknown, defaulting to 1000 [ 171.121778][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 171.153715][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 171.157755][ T9582] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 171.273752][ T9590] FAULT_INJECTION: forcing a failure. [ 171.273752][ T9590] name failslab, interval 1, probability 0, space 0, times 0 [ 171.279306][ T9590] CPU: 2 UID: 0 PID: 9590 Comm: syz.3.1080 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 171.281781][ T9590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.284355][ T9590] Call Trace: [ 171.285154][ T9590] [ 171.285880][ T9590] dump_stack_lvl+0x16c/0x1f0 [ 171.287063][ T9590] should_fail_ex+0x497/0x5b0 [ 171.288173][ T9590] ? cec_poll+0x105/0x2c0 [ 171.289202][ T9590] should_failslab+0xc2/0x120 [ 171.290622][ T9590] __kmalloc_cache_noprof+0x68/0x420 [ 171.292310][ T9590] ? __pfx_io_file_supports_nowait+0x10/0x10 [ 171.294276][ T9590] ? __pfx_lock_release+0x10/0x10 [ 171.296071][ T9590] io_arm_poll_handler+0x3e7/0xc60 [ 171.297082][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 171.297745][ T9590] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 171.302781][ T9590] ? io_read+0x32/0x70 [ 171.303843][ T9590] io_queue_async+0xaa/0x420 [ 171.304961][ T9590] io_submit_sqes+0x1751/0x25f0 [ 171.306133][ T9590] __do_sys_io_uring_enter+0xd2d/0x1530 [ 171.307662][ T9590] ? __fget_files+0x206/0x3a0 [ 171.308751][ T9590] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 171.310128][ T9590] ? fput+0x67/0x440 [ 171.311037][ T9590] ? ksys_write+0x1ba/0x250 [ 171.312330][ T9590] ? __pfx_ksys_write+0x10/0x10 [ 171.313918][ T9590] __do_fast_syscall_32+0x73/0x120 [ 171.315579][ T9590] do_fast_syscall_32+0x32/0x80 [ 171.317167][ T9590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.319170][ T9590] RIP: 0023:0xf7f25579 [ 171.320493][ T9590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.326590][ T9590] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 171.328619][ T9590] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000047ba [ 171.330449][ T9590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.332291][ T9590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.334149][ T9590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.336020][ T9590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.338186][ T9590] [ 171.339156][ C2] net_ratelimit: 1 callbacks suppressed [ 171.339165][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 171.540262][ T9600] slcan: can't register candev [ 171.547439][ T9600] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 171.863118][ T9606] team0: Port device bond0 removed [ 171.913599][ T9606] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 171.928529][ T9606] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 172.354445][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.356221][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.378045][ T9623] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 172.537526][ T9637] binder: 9636:9637 ioctl c0306201 0 returned -14 [ 172.683482][ T9623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.893226][ T9627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.896098][ T9627] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 172.904256][ T9627] bond3: (slave vcan1): Error -95 calling set_mac_address [ 172.934568][ T9647] FAULT_INJECTION: forcing a failure. [ 172.934568][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.939232][ T9647] CPU: 2 UID: 0 PID: 9647 Comm: syz.2.1093 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 172.942803][ T9647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.946641][ T9647] Call Trace: [ 172.947819][ T9647] [ 172.948857][ T9647] dump_stack_lvl+0x16c/0x1f0 [ 172.950526][ T9647] should_fail_ex+0x497/0x5b0 [ 172.952177][ T9647] _copy_from_iter+0x29b/0x1400 [ 172.953881][ T9647] ? trace_lock_acquire+0x146/0x1e0 [ 172.955698][ T9647] ? __pfx__copy_from_iter+0x10/0x10 [ 172.957597][ T9647] ? __virt_addr_valid+0x1a4/0x590 [ 172.959397][ T9647] ? __virt_addr_valid+0x5e/0x590 [ 172.961029][ T9647] ? __phys_addr_symbol+0x30/0x80 [ 172.962572][ T9647] ? __check_object_size+0x488/0x710 [ 172.964379][ T9647] pfkey_sendmsg+0x1e0/0x840 [ 172.965999][ T9647] ____sys_sendmsg+0x9ae/0xb40 [ 172.967604][ T9647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.969336][ T9647] ? get_compat_msghdr+0x11b/0x170 [ 172.971099][ T9647] ___sys_sendmsg+0x135/0x1e0 [ 172.972748][ T9647] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.974397][ T9647] ? __pfx_lock_release+0x10/0x10 [ 172.975729][ T9647] ? trace_lock_acquire+0x146/0x1e0 [ 172.977366][ T9647] ? __fget_files+0x206/0x3a0 [ 172.979031][ T9647] __sys_sendmsg+0x16e/0x220 [ 172.980598][ T9647] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.982334][ T9647] __do_fast_syscall_32+0x73/0x120 [ 172.983838][ T9647] do_fast_syscall_32+0x32/0x80 [ 172.985139][ T9647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.986800][ T9647] RIP: 0023:0xf746e579 [ 172.987833][ T9647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.992892][ T9647] RSP: 002b:00000000f515655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 172.995746][ T9647] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000100 [ 172.998508][ T9647] RDX: 0000000000058010 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.001223][ T9647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.003964][ T9647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.006684][ T9647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.009461][ T9647] [ 173.041348][ T9649] __nla_validate_parse: 1 callbacks suppressed [ 173.041359][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 173.129009][ T9660] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1098'. [ 173.186588][ T9670] FAULT_INJECTION: forcing a failure. [ 173.186588][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 173.189602][ T9670] CPU: 2 UID: 0 PID: 9670 Comm: syz.3.1100 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 173.192009][ T9670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.194511][ T9670] Call Trace: [ 173.195298][ T9670] [ 173.196008][ T9670] dump_stack_lvl+0x16c/0x1f0 [ 173.197139][ T9670] should_fail_ex+0x497/0x5b0 [ 173.198211][ T9670] ? fs_reclaim_acquire+0xae/0x150 [ 173.199366][ T9670] should_failslab+0xc2/0x120 [ 173.200492][ T9670] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 173.201854][ T9670] ? __alloc_skb+0x2b3/0x380 [ 173.202966][ T9670] __alloc_skb+0x2b3/0x380 [ 173.203987][ T9670] ? __pfx___alloc_skb+0x10/0x10 [ 173.205138][ T9670] ? genl_rcv_msg+0x4bd/0x800 [ 173.206259][ T9670] netlink_ack+0x164/0xb20 [ 173.207365][ T9670] netlink_rcv_skb+0x327/0x410 [ 173.208591][ T9670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.209786][ T9670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.211035][ T9670] ? down_read+0xc9/0x330 [ 173.212101][ T9670] ? __pfx_down_read+0x10/0x10 [ 173.213269][ T9670] ? netlink_deliver_tap+0x1ae/0xca0 [ 173.214563][ T9670] genl_rcv+0x28/0x40 [ 173.215506][ T9670] netlink_unicast+0x53c/0x7f0 [ 173.216693][ T9670] ? __pfx_netlink_unicast+0x10/0x10 [ 173.217963][ T9670] ? __phys_addr_symbol+0x30/0x80 [ 173.219152][ T9670] ? __check_object_size+0x488/0x710 [ 173.220424][ T9670] netlink_sendmsg+0x8b8/0xd70 [ 173.221566][ T9670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.222835][ T9670] __sys_sendto+0x488/0x4f0 [ 173.223912][ T9670] ? __pfx___sys_sendto+0x10/0x10 [ 173.225124][ T9670] ? __might_fault+0x13b/0x190 [ 173.226272][ T9670] __do_compat_sys_socketcall+0x5e2/0x700 [ 173.227644][ T9670] ? __fget_files+0x206/0x3a0 [ 173.228754][ T9670] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 173.230209][ T9670] ? fput+0x67/0x440 [ 173.231144][ T9670] __do_fast_syscall_32+0x73/0x120 [ 173.232352][ T9670] do_fast_syscall_32+0x32/0x80 [ 173.233498][ T9670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.234973][ T9670] RIP: 0023:0xf7f25579 [ 173.235943][ T9670] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.240426][ T9670] RSP: 002b:00000000f50a5430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 173.242334][ T9670] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50a5444 [ 173.244195][ T9670] RDX: 0000000000000000 RSI: 00000000f50a5560 RDI: 00000000f73adff4 [ 173.246033][ T9670] RBP: 00000000f50a5560 R08: 0000000000000000 R09: 0000000000000000 [ 173.247898][ T9670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.249736][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.251569][ T9670] [ 173.331991][ T9680] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.354283][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.356067][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.558910][ T9693] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1107'. [ 173.953430][ T9711] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.335822][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.338291][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.435227][ T9725] tmpfs: Bad value for 'mpol' [ 174.447687][ T9726] batadv_slave_0: entered promiscuous mode [ 174.455620][ T9726] batadv0: entered promiscuous mode [ 174.458742][ T9726] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 174.461349][ T9726] Cannot create hsr debugfs directory [ 174.484770][ T9728] lo speed is unknown, defaulting to 1000 [ 174.521073][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 174.521088][ T39] audit: type=1326 audit(1732646208.592:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.530247][ T39] audit: type=1326 audit(1732646208.592:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.537731][ T39] audit: type=1326 audit(1732646208.592:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.544977][ T39] audit: type=1326 audit(1732646208.592:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.552276][ T39] audit: type=1326 audit(1732646208.592:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.559614][ T39] audit: type=1326 audit(1732646208.592:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.566988][ T39] audit: type=1326 audit(1732646208.592:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.574472][ T39] audit: type=1326 audit(1732646208.592:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.581820][ T39] audit: type=1326 audit(1732646208.592:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.589203][ T39] audit: type=1326 audit(1732646208.592:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.1.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 174.702275][ T9737] FAULT_INJECTION: forcing a failure. [ 174.702275][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 174.706888][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.2.1122 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 174.710639][ T9737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.714323][ T9737] Call Trace: [ 174.715518][ T9737] [ 174.716573][ T9737] dump_stack_lvl+0x16c/0x1f0 [ 174.718355][ T9737] should_fail_ex+0x497/0x5b0 [ 174.720113][ T9737] ? fs_reclaim_acquire+0xae/0x150 [ 174.722011][ T9737] should_failslab+0xc2/0x120 [ 174.723770][ T9737] __kmalloc_noprof+0xce/0x4f0 [ 174.725535][ T9737] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 174.727565][ T9737] ? tomoyo_realpath_from_path+0xbf/0x710 [ 174.729660][ T9737] tomoyo_realpath_from_path+0xbf/0x710 [ 174.731679][ T9737] ? tomoyo_path_number_perm+0x235/0x5b0 [ 174.733737][ T9737] tomoyo_path_number_perm+0x248/0x5b0 [ 174.735633][ T9737] ? tomoyo_path_number_perm+0x235/0x5b0 [ 174.737621][ T9737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.739745][ T9737] ? __pfx_lock_release+0x10/0x10 [ 174.741570][ T9737] ? trace_lock_acquire+0x146/0x1e0 [ 174.743463][ T9737] ? lock_acquire+0x2f/0xb0 [ 174.745097][ T9737] ? __fget_files+0x40/0x3a0 [ 174.746772][ T9737] ? __fget_files+0x206/0x3a0 [ 174.748479][ T9737] security_file_ioctl_compat+0x9b/0x240 [ 174.750491][ T9737] __do_compat_sys_ioctl+0x4e/0x2c0 [ 174.752375][ T9737] __do_fast_syscall_32+0x73/0x120 [ 174.754226][ T9737] do_fast_syscall_32+0x32/0x80 [ 174.756007][ T9737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.757679][ T9737] RIP: 0023:0xf746e579 [ 174.758742][ T9737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.763658][ T9737] RSP: 002b:00000000f513555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 174.765897][ T9737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000540a [ 174.767941][ T9737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.769997][ T9737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.772050][ T9737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.774075][ T9737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.776120][ T9737] [ 174.777753][ T9737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.326067][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.466562][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 175.537566][ T9771] netlink: 'syz.2.1132': attribute type 39 has an invalid length. [ 175.557042][ T9772] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 175.559465][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1128'. [ 175.561771][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 175.564476][ T9772] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 175.566918][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1128'. [ 175.569202][ T9772] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 175.571189][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1128'. [ 175.985218][ T9785] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1137'. [ 176.317029][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.318966][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.429307][ T9808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.431257][ T9808] IPv6: NLM_F_CREATE should be set when creating new route [ 176.433630][ T9808] IPv6: NLM_F_CREATE should be set when creating new route [ 176.440960][ T9808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.483608][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 176.500900][ T9813] 9pnet_fd: Insufficient options for proto=fd [ 176.772004][ T9822] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 176.773993][ T9822] macvtap1: entered promiscuous mode [ 176.775832][ T9822] macvtap1: entered allmulticast mode [ 176.777441][ T9822] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 176.781165][ T9822] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 176.783049][ T9822] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 176.784022][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.900408][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 176.907735][ T30] usb 6-1: device descriptor read/64, error -71 [ 177.044660][ T9839] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 177.136230][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.316878][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.318992][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.669942][ T30] usb 6-1: device descriptor read/64, error -71 [ 177.783793][ T30] usb usb6-port1: attempt power cycle [ 177.968822][ T9855] tty tty1: ldisc open failed (-12), clearing slot 0 [ 178.031988][ T9864] bond0: (slave bridge0): Releasing backup interface [ 178.041683][ T9864] bridge0: left promiscuous mode [ 178.073190][ T9864] bond0: left promiscuous mode [ 178.078097][ T9864] team0: Port device bond0 removed [ 178.146586][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.152148][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.165515][ T9864] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 178.169520][ T9864] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 178.212864][ T9860] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.214012][ T9865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.216914][ T30] usb 6-1: device descriptor read/8, error -71 [ 178.218413][ T9865] bond0: entered promiscuous mode [ 178.219949][ T9865] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 178.225182][ T9865] team0: Port device bond0 added [ 178.298310][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.300334][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.317790][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.532538][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.547041][ T30] usb 6-1: device descriptor read/8, error -71 [ 179.006336][ T30] usb usb6-port1: unable to enumerate USB device [ 179.154698][ T9884] Cannot find del_set index 0 as target [ 179.298312][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.300649][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.389165][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.392219][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.397220][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.400369][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.401484][ T9895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1171'. [ 179.410222][ T9895] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 179.465506][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 179.928052][ T9914] FAULT_INJECTION: forcing a failure. [ 179.928052][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 179.931795][ T9914] CPU: 2 UID: 0 PID: 9914 Comm: syz.1.1178 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 179.934597][ T9914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.937376][ T9914] Call Trace: [ 179.938253][ T9914] [ 179.939039][ T9914] dump_stack_lvl+0x16c/0x1f0 [ 179.940281][ T9914] should_fail_ex+0x497/0x5b0 [ 179.941514][ T9914] ? fs_reclaim_acquire+0xae/0x150 [ 179.942863][ T9914] should_failslab+0xc2/0x120 [ 179.944228][ T9914] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 179.945633][ T9914] ? __kernfs_new_node+0xd3/0x890 [ 179.946953][ T9914] __kernfs_new_node+0xd3/0x890 [ 179.948235][ T9914] ? __pfx___kernfs_new_node+0x10/0x10 [ 179.949664][ T9914] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.951148][ T9914] ? rwsem_read_trylock+0x12d/0x250 [ 179.952565][ T9914] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 179.954194][ T9914] kernfs_new_node+0x186/0x240 [ 179.955453][ T9914] __kernfs_create_file+0x53/0x350 [ 179.956893][ T9914] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 179.958422][ T9914] sysfs_merge_group+0x1b1/0x340 [ 179.959833][ T9914] ? __pfx_sysfs_merge_group+0x10/0x10 [ 179.961310][ T9914] ? __pfx_dev_add_physical_location+0x10/0x10 [ 179.963019][ T9914] ? bus_to_subsys+0x12d/0x160 [ 179.964512][ T9914] dpm_sysfs_add+0x237/0x280 [ 179.965666][ T9914] device_add+0x9a8/0x1a70 [ 179.966943][ T9914] ? __pfx_device_add+0x10/0x10 [ 179.968265][ T9914] ? __init_waitqueue_head+0xca/0x150 [ 179.969668][ T9914] netdev_register_kobject+0x187/0x3f0 [ 179.971038][ T9914] register_netdevice+0x1473/0x1e20 [ 179.972439][ T9914] ? __pfx_register_netdevice+0x10/0x10 [ 179.974152][ T9914] ? dev_addr_mod+0x2c9/0x390 [ 179.975399][ T9914] ipip6_tunnel_create+0x1ce/0x3e0 [ 179.976740][ T9914] ipip6_newlink+0x2fa/0x590 [ 179.977966][ T9914] ? __pfx_ipip6_newlink+0x10/0x10 [ 179.979329][ T9914] ? rtnl_create_link+0xa2e/0xf10 [ 179.980650][ T9914] rtnl_newlink+0x11ad/0x1c10 [ 179.981845][ T9914] ? __pfx_ipip6_newlink+0x10/0x10 [ 179.983318][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.984908][ T9914] ? __pfx___lock_acquire+0x10/0x10 [ 179.986259][ T9914] ? kmem_cache_free+0x152/0x4c0 [ 179.987556][ T9914] ? aa_get_newest_label+0x376/0x680 [ 179.988962][ T9914] ? find_held_lock+0x2d/0x110 [ 179.990224][ T9914] ? find_held_lock+0x2d/0x110 [ 179.991487][ T9914] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 179.992875][ T9914] ? __pfx_lock_release+0x10/0x10 [ 179.994556][ T9914] ? trace_lock_acquire+0x146/0x1e0 [ 179.995918][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.997187][ T9914] rtnetlink_rcv_msg+0x95b/0xea0 [ 179.998480][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.999948][ T9914] ? __pfx___dev_queue_xmit+0x10/0x10 [ 180.001355][ T9914] netlink_rcv_skb+0x165/0x410 [ 180.002627][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.004519][ T9914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.005906][ T9914] ? netlink_deliver_tap+0x1ae/0xca0 [ 180.007310][ T9914] netlink_unicast+0x53c/0x7f0 [ 180.008589][ T9914] ? __pfx_netlink_unicast+0x10/0x10 [ 180.009974][ T9914] ? __phys_addr_symbol+0x30/0x80 [ 180.011549][ T9914] ? __check_object_size+0x488/0x710 [ 180.013495][ T9914] netlink_sendmsg+0x8b8/0xd70 [ 180.015229][ T9914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.017183][ T9914] ____sys_sendmsg+0x9ae/0xb40 [ 180.018941][ T9914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.020873][ T9914] ? get_compat_msghdr+0x11b/0x170 [ 180.022765][ T9914] ___sys_sendmsg+0x135/0x1e0 [ 180.024545][ T9914] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.026416][ T9914] ? __pfx_lock_release+0x10/0x10 [ 180.028234][ T9914] ? trace_lock_acquire+0x146/0x1e0 [ 180.030137][ T9914] ? __fget_files+0x206/0x3a0 [ 180.031858][ T9914] __sys_sendmsg+0x16e/0x220 [ 180.033536][ T9914] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.035426][ T9914] __do_fast_syscall_32+0x73/0x120 [ 180.037222][ T9919] binder: 9917:9919 ioctl c0306201 0 returned -14 [ 180.037286][ T9914] do_fast_syscall_32+0x32/0x80 [ 180.040934][ T9914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.042591][ T9914] RIP: 0023:0xf7f93579 [ 180.043659][ T9914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.048658][ T9914] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 180.050814][ T9914] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000080 [ 180.052900][ T9914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.054955][ T9914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.057019][ T9914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.059075][ T9914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.061135][ T9914] [ 180.107317][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 180.191277][ T9929] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 180.240310][ T9932] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1186'. [ 180.244890][ T9932] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 180.297597][ T9936] FAULT_INJECTION: forcing a failure. [ 180.297597][ T9936] name failslab, interval 1, probability 0, space 0, times 0 [ 180.301508][ T9936] CPU: 2 UID: 0 PID: 9936 Comm: syz.0.1187 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 180.304246][ T9936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.307076][ T9936] Call Trace: [ 180.307964][ T9936] [ 180.308743][ T9936] dump_stack_lvl+0x16c/0x1f0 [ 180.309962][ T9936] should_fail_ex+0x497/0x5b0 [ 180.311206][ T9936] ? fs_reclaim_acquire+0xae/0x150 [ 180.312560][ T9936] should_failslab+0xc2/0x120 [ 180.313809][ T9936] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 180.315351][ T9936] ? skb_clone+0x190/0x3f0 [ 180.316942][ T9936] skb_clone+0x190/0x3f0 [ 180.318305][ T9936] pfkey_process+0xc7/0x840 [ 180.319832][ T9936] ? rcu_is_watching+0x12/0xc0 [ 180.321505][ T9936] ? __pfx_pfkey_process+0x10/0x10 [ 180.323320][ T9936] ? __virt_addr_valid+0x5e/0x590 [ 180.324885][ T9936] ? __phys_addr_symbol+0x30/0x80 [ 180.326223][ T9936] pfkey_sendmsg+0x43b/0x840 [ 180.327458][ T9936] ____sys_sendmsg+0x9ae/0xb40 [ 180.328737][ T9936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.330133][ T9936] ? get_compat_msghdr+0x11b/0x170 [ 180.331484][ T9936] ___sys_sendmsg+0x135/0x1e0 [ 180.332745][ T9936] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.334126][ T9936] ? __pfx_lock_release+0x10/0x10 [ 180.335450][ T9936] ? trace_lock_acquire+0x146/0x1e0 [ 180.337140][ T9936] ? __fget_files+0x206/0x3a0 [ 180.338795][ T9936] __sys_sendmsg+0x16e/0x220 [ 180.340273][ T9936] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.342070][ T9936] __do_fast_syscall_32+0x73/0x120 [ 180.343735][ T9936] do_fast_syscall_32+0x32/0x80 [ 180.345459][ T9936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.347443][ T9936] RIP: 0023:0xf7f11579 [ 180.348886][ T9936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.355323][ T9936] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 180.358130][ T9936] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000100 [ 180.360820][ T9936] RDX: 0000000000058010 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.363447][ T9936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.366207][ T9936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.368418][ T9936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.371107][ T9936] [ 180.465957][ T9938] autofs: Unknown parameter './file1' [ 180.585311][ T9950] FAULT_INJECTION: forcing a failure. [ 180.585311][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.588954][ T9950] CPU: 2 UID: 0 PID: 9950 Comm: syz.1.1190 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 180.591698][ T9950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.594569][ T9950] Call Trace: [ 180.595472][ T9950] [ 180.596283][ T9950] dump_stack_lvl+0x16c/0x1f0 [ 180.597563][ T9950] should_fail_ex+0x497/0x5b0 [ 180.598847][ T9950] _copy_from_user+0x2e/0xd0 [ 180.600098][ T9950] __do_compat_sys_socketcall+0x14f/0x700 [ 180.601884][ T9950] ? __fget_files+0x206/0x3a0 [ 180.603418][ T9950] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 180.605111][ T9950] ? fput+0x67/0x440 [ 180.606182][ T9950] __do_fast_syscall_32+0x73/0x120 [ 180.607564][ T9950] do_fast_syscall_32+0x32/0x80 [ 180.608894][ T9950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.610582][ T9950] RIP: 0023:0xf7f93579 [ 180.611677][ T9950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.616817][ T9950] RSP: 002b:00000000f5115440 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 180.619026][ T9950] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f511545c [ 180.621138][ T9950] RDX: 0000000000000000 RSI: 00000000f5115560 RDI: 00000000f741dff4 [ 180.623247][ T9950] RBP: 00000000f5115560 R08: 0000000000000000 R09: 0000000000000000 [ 180.625382][ T9950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.627473][ T9950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.629653][ T9950] [ 180.707076][ T9954] binder: 9953:9954 ioctl c0306201 0 returned -14 [ 181.270060][ C2] net_ratelimit: 1 callbacks suppressed [ 181.270077][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.274836][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.499940][ T9986] block nbd1: shutting down sockets [ 181.512984][ T9992] block device autoloading is deprecated and will be removed. [ 181.568387][ T9987] md: superblock version 796288356 not known [ 181.570404][ T9987] md: couldn't set array info. -22 [ 182.158662][T10007] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 182.160714][T10007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1211'. [ 182.261162][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.263609][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.343949][T10018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.348380][T10018] team0: Port device bond0 added [ 182.441904][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 182.441935][ T39] audit: type=1326 audit(1732646216.906:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.453806][ T39] audit: type=1326 audit(1732646216.906:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.461702][ T39] audit: type=1326 audit(1732646216.906:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.467368][ T39] audit: type=1326 audit(1732646216.906:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.473366][ T39] audit: type=1326 audit(1732646216.906:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.479364][ T39] audit: type=1326 audit(1732646216.906:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.485163][ T39] audit: type=1326 audit(1732646216.906:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.490982][ T39] audit: type=1326 audit(1732646216.906:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.498025][ T39] audit: type=1326 audit(1732646216.906:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 182.505501][ T39] audit: type=1326 audit(1732646216.906:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.1217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 183.121754][T10037] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.249291][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 183.252534][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.252584][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.551561][T10055] netlink: 'syz.0.1225': attribute type 39 has an invalid length. [ 183.575093][T10057] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1227'. [ 184.009333][T10101] Unknown options in mask 7 [ 184.049927][T10103] 9pnet_fd: Insufficient options for proto=fd [ 184.242485][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.244407][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.951544][T10113] tipc: Started in network mode [ 184.952935][T10113] tipc: Node identity ac1414aa, cluster identity 4711 [ 184.956128][T10113] tipc: Enabled bearer , priority 10 [ 184.959090][T10117] __nla_validate_parse: 1 callbacks suppressed [ 184.959099][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 184.961746][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 185.122867][T10130] bridge3: entered promiscuous mode [ 185.124254][T10130] bridge3: entered allmulticast mode [ 185.161648][T10132] syzkaller1: entered promiscuous mode [ 185.163648][T10132] syzkaller1: entered allmulticast mode [ 185.232899][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.846933][T10142] binder: BINDER_SET_CONTEXT_MGR already set [ 185.848635][T10142] binder: 10141:10142 ioctl 4018620d 20000100 returned -16 [ 186.023686][ T832] tipc: Node number set to 2886997162 [ 186.223756][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.225734][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.875416][T10169] Cannot find del_set index 0 as target [ 187.113001][T10177] 9pnet_fd: Insufficient options for proto=fd [ 187.214405][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.216789][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.341488][T10196] bond0: left promiscuous mode [ 187.343110][T10196] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 187.355007][T10196] team0: Port device bond0 removed [ 187.372888][T10196] bond0: (slave wlan1): Releasing backup interface [ 187.414341][ T6332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.414746][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.418542][T10196] bond0: entered promiscuous mode [ 187.420032][T10196] team0: Port device bond0 added [ 187.428384][T10196] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 187.431443][T10196] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 187.433578][T10196] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 187.541586][ T830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.680066][T10210] FAULT_INJECTION: forcing a failure. [ 187.680066][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 187.687211][T10210] CPU: 2 UID: 0 PID: 10210 Comm: syz.3.1280 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 187.690747][T10210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.694247][T10210] Call Trace: [ 187.695391][T10210] [ 187.696393][T10210] dump_stack_lvl+0x16c/0x1f0 [ 187.697966][T10210] should_fail_ex+0x497/0x5b0 [ 187.699528][T10210] ? fs_reclaim_acquire+0xae/0x150 [ 187.701214][T10210] should_failslab+0xc2/0x120 [ 187.702791][T10210] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 187.704572][T10210] ? __kernfs_new_node+0xd3/0x890 [ 187.706217][T10210] __kernfs_new_node+0xd3/0x890 [ 187.707838][T10210] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.709596][T10210] ? __pfx_lock_release+0x10/0x10 [ 187.711241][T10210] ? kernfs_add_one+0x39d/0x520 [ 187.712867][T10210] ? up_write+0x1b2/0x520 [ 187.714309][T10210] kernfs_new_node+0x186/0x240 [ 187.715992][T10210] __kernfs_create_file+0x53/0x350 [ 187.717798][T10210] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 187.719568][T10210] internal_create_group+0x565/0xe50 [ 187.721422][T10210] ? __pfx_internal_create_group+0x10/0x10 [ 187.723488][T10210] ? kernfs_create_link+0x1bd/0x240 [ 187.725419][T10210] internal_create_groups+0x9d/0x150 [ 187.727245][T10210] device_add+0xf33/0x1a70 [ 187.728770][T10210] ? __pfx_device_add+0x10/0x10 [ 187.730425][T10210] ? __init_waitqueue_head+0xca/0x150 [ 187.732326][T10210] netdev_register_kobject+0x187/0x3f0 [ 187.734174][T10210] register_netdevice+0x1473/0x1e20 [ 187.735927][T10210] ? __pfx_register_netdevice+0x10/0x10 [ 187.737849][T10210] ? dev_addr_mod+0x2c9/0x390 [ 187.739433][T10210] ipip6_tunnel_create+0x1ce/0x3e0 [ 187.741452][T10210] ipip6_newlink+0x2fa/0x590 [ 187.743123][T10210] ? __pfx_ipip6_newlink+0x10/0x10 [ 187.744854][T10210] ? rtnl_create_link+0xa2e/0xf10 [ 187.746558][T10210] rtnl_newlink+0x11ad/0x1c10 [ 187.748272][T10210] ? __pfx_ipip6_newlink+0x10/0x10 [ 187.750120][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.751960][T10210] ? __pfx___lock_acquire+0x10/0x10 [ 187.753727][T10210] ? kmem_cache_free+0x152/0x4c0 [ 187.755430][T10210] ? aa_get_newest_label+0x376/0x680 [ 187.757377][T10210] ? find_held_lock+0x2d/0x110 [ 187.759097][T10210] ? find_held_lock+0x2d/0x110 [ 187.760797][T10210] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 187.762520][T10210] ? __pfx_lock_release+0x10/0x10 [ 187.764194][T10210] ? trace_lock_acquire+0x146/0x1e0 [ 187.765927][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.767597][T10210] rtnetlink_rcv_msg+0x95b/0xea0 [ 187.769359][T10210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.771260][T10210] ? __pfx___dev_queue_xmit+0x10/0x10 [ 187.773182][T10210] netlink_rcv_skb+0x165/0x410 [ 187.774917][T10210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.776753][T10210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.778489][T10210] ? netlink_deliver_tap+0x1ae/0xca0 [ 187.780233][T10210] netlink_unicast+0x53c/0x7f0 [ 187.781830][T10210] ? __pfx_netlink_unicast+0x10/0x10 [ 187.783616][T10210] ? __phys_addr_symbol+0x30/0x80 [ 187.785302][T10210] ? __check_object_size+0x488/0x710 [ 187.787064][T10210] netlink_sendmsg+0x8b8/0xd70 [ 187.788670][T10210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.790371][T10210] ____sys_sendmsg+0x9ae/0xb40 [ 187.791987][T10210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.793751][T10210] ? get_compat_msghdr+0x11b/0x170 [ 187.795516][T10210] ___sys_sendmsg+0x135/0x1e0 [ 187.797204][T10210] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.799034][T10210] ? __pfx_lock_release+0x10/0x10 [ 187.800755][T10210] ? trace_lock_acquire+0x146/0x1e0 [ 187.802582][T10210] ? __fget_files+0x206/0x3a0 [ 187.804221][T10210] __sys_sendmsg+0x16e/0x220 [ 187.805799][T10210] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.807557][T10210] __do_fast_syscall_32+0x73/0x120 [ 187.809283][T10210] do_fast_syscall_32+0x32/0x80 [ 187.810915][T10210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.813036][T10210] RIP: 0023:0xf7f25579 [ 187.814377][T10210] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.821087][T10210] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 187.823989][T10210] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000080 [ 187.826747][T10210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.829522][T10210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.832267][T10210] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.835006][T10210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.837749][T10210] [ 188.204781][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.207315][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.265212][T10232] team0: Port device bond0 removed [ 188.308423][T10233] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 188.448655][T10237] random: crng reseeded on system resumption [ 188.458198][T10237] Hibernate inconsistent memory map detected! [ 188.460425][T10237] PM: hibernation: Image mismatch: architecture specific data [ 188.513250][T10244] binder: 10243:10244 ioctl c0306201 20000580 returned -22 [ 188.584992][ T63] libceph: connect (1)[c::]:6789 error -22 [ 188.587449][T10263] netlink: 'syz.2.1298': attribute type 7 has an invalid length. [ 188.587462][T10263] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1298'. [ 188.597662][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 188.603209][ T63] libceph: connect (1)[c::]:6789 error -22 [ 188.606429][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 188.620725][T10268] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1300'. [ 188.707885][T10249] ceph: No mds server is up or the cluster is laggy [ 189.195633][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.197692][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.874970][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 189.874981][ T39] audit: type=1326 audit(1732646224.706:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.886736][ T39] audit: type=1326 audit(1732646224.706:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.892670][ T39] audit: type=1326 audit(1732646224.706:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.898254][ T39] audit: type=1326 audit(1732646224.706:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.904539][ T39] audit: type=1326 audit(1732646224.706:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.910481][ T39] audit: type=1326 audit(1732646224.706:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.916452][ T39] audit: type=1326 audit(1732646224.706:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.922639][ T39] audit: type=1326 audit(1732646224.706:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.928151][ T39] audit: type=1326 audit(1732646224.706:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 189.936244][ T39] audit: type=1326 audit(1732646224.706:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 190.098088][T10309] overlayfs: failed to resolve './file1': -2 [ 190.142949][T10309] overlayfs: missing 'lowerdir' [ 190.186435][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.212701][T10319] FAULT_INJECTION: forcing a failure. [ 190.212701][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 190.218518][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.3.1316 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 190.221238][T10319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.224023][T10319] Call Trace: [ 190.224910][T10319] [ 190.225694][T10319] dump_stack_lvl+0x16c/0x1f0 [ 190.226926][T10319] should_fail_ex+0x497/0x5b0 [ 190.228174][T10319] ? fs_reclaim_acquire+0xae/0x150 [ 190.229509][T10319] should_failslab+0xc2/0x120 [ 190.230740][T10319] __kmalloc_cache_noprof+0x68/0x420 [ 190.232125][T10319] btrfs_init_fs_context+0x47/0x680 [ 190.233476][T10319] ? __pfx_btrfs_init_fs_context+0x10/0x10 [ 190.234982][T10319] alloc_fs_context+0x54a/0x9c0 [ 190.236412][T10319] path_mount+0xbfb/0x1f10 [ 190.237731][T10319] ? kmem_cache_free+0x152/0x4c0 [ 190.239060][T10319] ? __pfx_path_mount+0x10/0x10 [ 190.240369][T10319] ? putname+0x13c/0x180 [ 190.241594][T10319] __ia32_sys_mount+0x292/0x310 [ 190.242889][T10319] ? __pfx___ia32_sys_mount+0x10/0x10 [ 190.244329][T10319] __do_fast_syscall_32+0x73/0x120 [ 190.245664][T10319] do_fast_syscall_32+0x32/0x80 [ 190.246940][T10319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.248582][T10319] RIP: 0023:0xf7f25579 [ 190.249653][T10319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 190.254756][T10319] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 190.256922][T10319] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000100 [ 190.258951][T10319] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.260980][T10319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.263031][T10319] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 190.265078][T10319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.267145][T10319] [ 190.352973][T10329] FAULT_INJECTION: forcing a failure. [ 190.352973][T10329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.352993][T10329] CPU: 0 UID: 0 PID: 10329 Comm: syz.1.1319 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 190.353006][T10329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.353013][T10329] Call Trace: [ 190.353017][T10329] [ 190.353021][T10329] dump_stack_lvl+0x16c/0x1f0 [ 190.353038][T10329] should_fail_ex+0x497/0x5b0 [ 190.353054][T10329] _copy_from_user+0x2e/0xd0 [ 190.353071][T10329] csum_and_copy_from_iter_full+0x218/0x1eb0 [ 190.353087][T10329] ? rcu_is_watching+0x12/0xc0 [ 190.353101][T10329] ? trace_kmalloc+0x2d/0xd0 [ 190.353117][T10329] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 190.353129][T10329] ? rcu_watching_snap_stopped_since+0x41/0x110 [ 190.353142][T10329] ? __alloc_skb+0x164/0x380 [ 190.353158][T10329] ? __build_skb_around+0x278/0x3b0 [ 190.353172][T10329] ip_generic_getfrag+0x175/0x260 [ 190.353188][T10329] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 190.353204][T10329] ? __pfx___lock_acquire+0x10/0x10 [ 190.353217][T10329] __ip6_append_data.isra.0+0x2dca/0x45e0 [ 190.353240][T10329] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 190.353268][T10329] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 190.353291][T10329] ? ip6_mtu+0x231/0x4a0 [ 190.353311][T10329] ? ip6_setup_cork+0xc60/0x1460 [ 190.353335][T10329] ip6_make_skb+0x30b/0x4e0 [ 190.353360][T10329] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 190.353387][T10329] ? __pfx_ip6_make_skb+0x10/0x10 [ 190.353418][T10329] ? sk_dst_check+0x1da/0x540 [ 190.353451][T10329] ? udpv6_sendmsg+0x2510/0x3040 [ 190.353475][T10329] udpv6_sendmsg+0x2510/0x3040 [ 190.353492][T10329] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 190.353511][T10329] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 190.353526][T10329] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 190.353538][T10329] ? __pfx___lock_acquire+0x10/0x10 [ 190.353556][T10329] ? __pfx_lock_release+0x10/0x10 [ 190.353570][T10329] ? aa_file_perm+0x4d5/0xfe0 [ 190.353583][T10329] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.353593][T10329] ? find_held_lock+0x2d/0x110 [ 190.353607][T10329] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 190.353624][T10329] ? inet6_sendmsg+0x105/0x140 [ 190.353634][T10329] inet6_sendmsg+0x105/0x140 [ 190.353646][T10329] sock_write_iter+0x3e8/0x5b0 [ 190.353659][T10329] ? __pfx_sock_write_iter+0x10/0x10 [ 190.353675][T10329] ? bpf_lsm_file_permission+0x9/0x10 [ 190.353687][T10329] ? security_file_permission+0x71/0x210 [ 190.353701][T10329] vfs_write+0x5ae/0x1150 [ 190.353714][T10329] ? __pfx_sock_write_iter+0x10/0x10 [ 190.353727][T10329] ? __pfx_vfs_write+0x10/0x10 [ 190.353740][T10329] ? __fget_files+0x40/0x3a0 [ 190.353758][T10329] ksys_write+0x207/0x250 [ 190.353770][T10329] ? __pfx_ksys_write+0x10/0x10 [ 190.353785][T10329] __do_fast_syscall_32+0x73/0x120 [ 190.353800][T10329] do_fast_syscall_32+0x32/0x80 [ 190.353813][T10329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.353829][T10329] RIP: 0023:0xf7f93579 [ 190.353839][T10329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 190.353849][T10329] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 190.353860][T10329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 190.353867][T10329] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 190.353874][T10329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.353880][T10329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 190.353886][T10329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.353898][T10329] [ 190.405839][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 190.485761][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'. [ 190.521364][T10341] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1324'. [ 190.633354][T10362] FAULT_INJECTION: forcing a failure. [ 190.633354][T10362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.636935][T10362] CPU: 2 UID: 0 PID: 10362 Comm: syz.0.1330 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 190.639784][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.642574][T10362] Call Trace: [ 190.643459][T10362] [ 190.644249][T10362] dump_stack_lvl+0x16c/0x1f0 [ 190.645486][T10362] should_fail_ex+0x497/0x5b0 [ 190.646745][T10362] _copy_to_user+0x32/0xd0 [ 190.647947][T10362] simple_read_from_buffer+0xd0/0x160 [ 190.649383][T10362] proc_fail_nth_read+0x198/0x270 [ 190.650772][T10362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.652314][T10362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.653766][T10362] vfs_read+0x1df/0xbe0 [ 190.654859][T10362] ? __fget_files+0x1fc/0x3a0 [ 190.656115][T10362] ? __pfx___mutex_lock+0x10/0x10 [ 190.657442][T10362] ? __pfx_vfs_read+0x10/0x10 [ 190.658681][T10362] ? __fget_files+0x206/0x3a0 [ 190.659928][T10362] ksys_read+0x12b/0x250 [ 190.661033][T10362] ? __pfx_ksys_read+0x10/0x10 [ 190.662301][T10362] __do_fast_syscall_32+0x73/0x120 [ 190.663627][T10362] do_fast_syscall_32+0x32/0x80 [ 190.664905][T10362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.666538][T10362] RIP: 0023:0xf7f11579 [ 190.667595][T10362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 190.672625][T10362] RSP: 002b:00000000f5075590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 190.674821][T10362] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5075620 [ 190.676866][T10362] RDX: 000000000000000f RSI: 00000000f739dff4 RDI: 0000000000000000 [ 190.678925][T10362] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 190.680955][T10362] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 190.682995][T10362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.685058][T10362] [ 190.715487][T10371] 9pnet_fd: Insufficient options for proto=fd [ 190.783518][T10376] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 190.795423][T10376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.807891][T10376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.809959][T10376] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 190.813257][T10376] bond4: (slave vcan1): Error -95 calling set_mac_address [ 191.006970][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 191.176666][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.178637][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.650053][T10399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.652200][T10399] IPv6: NLM_F_CREATE should be set when creating new route [ 191.654267][T10399] IPv6: NLM_F_CREATE should be set when creating new route [ 191.657536][T10399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.713452][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 191.723450][T10404] geneve0: entered allmulticast mode [ 191.767923][T10402] random: crng reseeded on system resumption [ 191.774484][T10402] Hibernate inconsistent memory map detected! [ 191.776164][T10402] PM: hibernation: Image mismatch: architecture specific data [ 191.902573][T10414] netlink: 'syz.2.1349': attribute type 7 has an invalid length. [ 191.904553][T10414] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1349'. [ 191.907058][T10412] lo speed is unknown, defaulting to 1000 [ 191.961145][T10410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 192.165611][T10431] FAULT_INJECTION: forcing a failure. [ 192.165611][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.169404][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.169503][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.173243][T10431] CPU: 2 UID: 0 PID: 10431 Comm: syz.0.1355 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 192.175958][T10431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.179793][T10431] Call Trace: [ 192.180851][T10431] [ 192.181731][T10431] dump_stack_lvl+0x16c/0x1f0 [ 192.182985][T10431] should_fail_ex+0x497/0x5b0 [ 192.184267][T10431] _copy_to_user+0x32/0xd0 [ 192.185454][T10431] generic_map_lookup_batch+0x69a/0xb90 [ 192.186966][T10431] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 192.188561][T10431] ? __fget_files+0x206/0x3a0 [ 192.189777][T10431] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 192.191364][T10431] bpf_map_do_batch+0x483/0x640 [ 192.193000][T10431] __sys_bpf+0x55a2/0x57a0 [ 192.194566][T10431] ? __pfx_lock_release+0x10/0x10 [ 192.195873][T10431] ? __pfx___sys_bpf+0x10/0x10 [ 192.197176][T10431] ? vfs_write+0x306/0x1150 [ 192.198388][T10431] ? __mutex_unlock_slowpath+0x164/0x690 [ 192.199982][T10431] ? fput+0x67/0x440 [ 192.201032][T10431] ? ksys_write+0x1ba/0x250 [ 192.202245][T10431] ? __pfx_ksys_write+0x10/0x10 [ 192.203531][T10431] __ia32_sys_bpf+0x76/0xe0 [ 192.204738][T10431] __do_fast_syscall_32+0x73/0x120 [ 192.206090][T10431] do_fast_syscall_32+0x32/0x80 [ 192.207604][T10431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.209738][T10431] RIP: 0023:0xf7f11579 [ 192.211025][T10431] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.215988][T10431] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 192.218234][T10431] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 192.220661][T10431] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.222731][T10431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.224808][T10431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 192.227165][T10431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.230580][T10431] [ 192.262534][T10435] overlayfs: failed to resolve './file1': -2 [ 192.323478][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.325708][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.333681][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 192.337767][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 193.167653][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.169623][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.158611][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.160410][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.148842][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.130433][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.132915][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.121164][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.123811][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.111778][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.113709][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.102421][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.104277][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.102674][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.083831][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.086271][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.075330][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.077267][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.065216][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.067500][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.055743][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.057776][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.046395][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.037116][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.039098][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.901575][ T5318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.911894][ T5318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.914927][ T5318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.923392][ T5318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.926493][ T5318] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.929398][ T5318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.018023][ T1413] ================================================================== [ 207.020139][ T1413] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 207.022008][ T1413] Read of size 8 at addr ffff8880660f2020 by task aoe_tx0/1413 [ 207.024608][ T1413] [ 207.025913][ T1413] CPU: 0 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 207.028840][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.031593][ T1413] Call Trace: [ 207.032475][ T1413] [ 207.033253][ T1413] dump_stack_lvl+0x116/0x1f0 [ 207.034489][ T1413] print_report+0xc3/0x620 [ 207.035669][ T1413] ? __virt_addr_valid+0x5e/0x590 [ 207.036981][ T1413] ? __phys_addr+0xc6/0x150 [ 207.038198][ T1413] kasan_report+0xd9/0x110 [ 207.039371][ T1413] ? handle_tx+0x5a5/0x630 [ 207.040560][ T1413] ? handle_tx+0x5a5/0x630 [ 207.041734][ T1413] handle_tx+0x5a5/0x630 [ 207.042862][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 207.044179][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 207.045475][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 207.046859][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 207.048210][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 207.049560][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 207.050918][ T1413] ? find_held_lock+0x2d/0x110 [ 207.052165][ T1413] ? find_held_lock+0x2d/0x110 [ 207.053427][ T1413] ? tx+0xa8/0x190 [ 207.054419][ T1413] ? __pfx_lock_release+0x10/0x10 [ 207.055732][ T1413] ? lock_acquire+0x2f/0xb0 [ 207.056911][ T1413] tx+0xcc/0x190 [ 207.057851][ T1413] ? __pfx_tx+0x10/0x10 SYZFAIL: failed to recv rpc [ 207.058935][ T1413] kthread+0x1e7/0x3c0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 207.060180][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.061424][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 207.062950][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.064318][ T1413] ? __kthread_parkme+0x148/0x220 [ 207.065631][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.065831][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.066828][ T1413] kthread+0x2c1/0x3a0 [ 207.067911][ T5974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.068702][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.069732][ T1413] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.073726][ T5974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.073882][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.073897][ T1413] ret_from_fork+0x45/0x80 [ 207.073907][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.073919][ T1413] ret_from_fork_asm+0x1a/0x30 [ 207.073936][ T1413] [ 207.073940][ T1413] [ 207.073942][ T1413] Allocated by task 7364: [ 207.073947][ T1413] kasan_save_stack+0x33/0x60 [ 207.073948][ T66] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.076080][ T66] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.077827][ T1413] kasan_save_track+0x14/0x30 [ 207.077841][ T1413] __kasan_kmalloc+0xaa/0xb0 [ 207.077852][ T1413] alloc_tty_struct+0x98/0x8d0 [ 207.079703][ T5974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.080457][ T66] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.080758][ T1413] tty_init_dev.part.0+0x1e/0x660 [ 207.081542][ T66] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.081921][ T66] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.082169][ T5974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.083233][ T1413] tty_open+0xac1/0xf80 [ 207.083842][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.084643][ T5974] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.084733][ T1413] chrdev_open+0x237/0x6a0 [ 207.084747][ T1413] do_dentry_open+0xf59/0x1ea0 [ 207.084758][ T1413] vfs_open+0x82/0x3f0 [ 207.084771][ T1413] path_openat+0x1e6a/0x2d60 [ 207.084782][ T1413] do_filp_open+0x20c/0x470 [ 207.086638][ T5974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.087253][ T1413] do_sys_openat2+0x17a/0x1e0 [ 207.118700][ T1413] __ia32_compat_sys_openat+0x16e/0x210 [ 207.120147][ T1413] __do_fast_syscall_32+0x73/0x120 [ 207.121483][ T1413] do_fast_syscall_32+0x32/0x80 [ 207.122757][ T1413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.124403][ T1413] [ 207.125030][ T1413] Freed by task 35: [ 207.126026][ T1413] kasan_save_stack+0x33/0x60 [ 207.127256][ T1413] kasan_save_track+0x14/0x30 [ 207.128485][ T1413] kasan_save_free_info+0x3b/0x60 [ 207.129878][ T1413] __kasan_slab_free+0x51/0x70 [ 207.131122][ T1413] kfree+0x14f/0x4b0 [ 207.132159][ T1413] process_one_work+0x958/0x1b30 [ 207.133478][ T1413] worker_thread+0x6c8/0xf00 [ 207.134678][ T1413] kthread+0x2c1/0x3a0 [ 207.135759][ T1413] ret_from_fork+0x45/0x80 [ 207.136924][ T1413] ret_from_fork_asm+0x1a/0x30 [ 207.138183][ T1413] [ 207.138817][ T1413] Last potentially related work creation: [ 207.140302][ T1413] kasan_save_stack+0x33/0x60 [ 207.141526][ T1413] __kasan_record_aux_stack+0xba/0xd0 [ 207.142917][ T1413] insert_work+0x36/0x230 [ 207.144040][ T1413] __queue_work+0x97e/0x1080 [ 207.145215][ T1413] queue_work_on+0x11a/0x140 [ 207.146440][ T1413] release_tty+0x4de/0x5d0 [ 207.147605][ T1413] tty_release_struct+0xb7/0xe0 [ 207.148884][ T1413] tty_release+0xe25/0x1410 [ 207.150067][ T1413] __fput+0x3f8/0xb60 [ 207.151121][ T1413] task_work_run+0x14e/0x250 [ 207.152357][ T1413] do_exit+0xadd/0x2d70 [ 207.153445][ T1413] do_group_exit+0xd3/0x2a0 [ 207.154629][ T1413] get_signal+0x2576/0x2610 [ 207.155816][ T1413] arch_do_signal_or_restart+0x90/0x7e0 [ 207.157246][ T1413] syscall_exit_to_user_mode+0x150/0x2a0 [ 207.158693][ T1413] __do_fast_syscall_32+0x80/0x120 [ 207.160028][ T1413] do_fast_syscall_32+0x32/0x80 [ 207.161378][ T1413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.163021][ T1413] [ 207.163652][ T1413] The buggy address belongs to the object at ffff8880660f2000 [ 207.163652][ T1413] which belongs to the cache kmalloc-cg-2k of size 2048 [ 207.167280][ T1413] The buggy address is located 32 bytes inside of [ 207.167280][ T1413] freed 2048-byte region [ffff8880660f2000, ffff8880660f2800) [ 207.170766][ T1413] [ 207.171393][ T1413] The buggy address belongs to the physical page: [ 207.173029][ T1413] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880660f3000 pfn:0x660f0 [ 207.175601][ T1413] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 207.177766][ T1413] memcg:ffff88804df58901 [ 207.178874][ T1413] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 207.181079][ T1413] page_type: f5(slab) [ 207.182135][ T1413] raw: 04fff00000000240 ffff88801ac50140 ffffea0001a07c10 ffffea0001a21210 [ 207.184352][ T1413] raw: ffff8880660f3000 0000000000080007 00000001f5000000 ffff88804df58901 [ 207.186564][ T1413] head: 04fff00000000240 ffff88801ac50140 ffffea0001a07c10 ffffea0001a21210 [ 207.188785][ T1413] head: ffff8880660f3000 0000000000080007 00000001f5000000 ffff88804df58901 [ 207.191005][ T1413] head: 04fff00000000003 ffffea0001983c01 ffffffffffffffff 0000000000000000 [ 207.193239][ T1413] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 207.195558][ T1413] page dumped because: kasan: bad access detected [ 207.197245][ T1413] page_owner tracks the page as allocated [ 207.198729][ T1413] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5962, tgid 5962 (syz-executor), ts 45772103950, free_ts 0 [ 207.203974][ T1413] post_alloc_hook+0x2d1/0x350 [ 207.205242][ T1413] get_page_from_freelist+0xfce/0x2f80 [ 207.206658][ T1413] __alloc_pages_noprof+0x223/0x25a0 [ 207.208042][ T1413] alloc_pages_mpol_noprof+0x2c9/0x610 [ 207.209462][ T1413] new_slab+0x2c9/0x410 [ 207.210550][ T1413] ___slab_alloc+0xd1d/0x16e0 [ 207.211804][ T1413] __slab_alloc.constprop.0+0x56/0xb0 [ 207.213204][ T1413] __kmalloc_noprof+0x2de/0x4f0 [ 207.214473][ T1413] __register_sysctl_table+0xb4/0x18c0 [ 207.215907][ T1413] __devinet_sysctl_register+0x1b5/0x360 [ 207.217404][ T1413] devinet_sysctl_register+0x17b/0x200 [ 207.218833][ T1413] inetdev_init+0x2be/0x5a0 [ 207.220042][ T1413] inetdev_event+0xb17/0x16b0 [ 207.221284][ T1413] notifier_call_chain+0xb7/0x410 [ 207.222580][ T1413] call_netdevice_notifiers_info+0xbe/0x140 [ 207.223994][ T1413] register_netdevice+0x1728/0x1e20 [ 207.225349][ T1413] page_owner free stack trace missing [ 207.226759][ T1413] [ 207.227390][ T1413] Memory state around the buggy address: [ 207.228822][ T1413] ffff8880660f1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.230832][ T1413] ffff8880660f1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.232911][ T1413] >ffff8880660f2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.234983][ T1413] ^ [ 207.236325][ T1413] ffff8880660f2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.238392][ T1413] ffff8880660f2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.240459][ T1413] ================================================================== [ 207.242621][ T1413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.244487][ T1413] CPU: 0 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 207.247064][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.250052][ T1413] Call Trace: [ 207.250923][ T1413] [ 207.251710][ T1413] dump_stack_lvl+0x3d/0x1f0 [ 207.252935][ T1413] panic+0x71d/0x800 [ 207.253963][ T1413] ? __pfx_panic+0x10/0x10 [ 207.255101][ T1413] ? check_panic_on_warn+0x1f/0xb0 [ 207.256454][ T1413] check_panic_on_warn+0xab/0xb0 [ 207.257749][ T1413] end_report+0x117/0x180 [ 207.258885][ T1413] kasan_report+0xe9/0x110 [ 207.260061][ T1413] ? handle_tx+0x5a5/0x630 [ 207.261225][ T1413] ? handle_tx+0x5a5/0x630 [ 207.262405][ T1413] handle_tx+0x5a5/0x630 [ 207.263547][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 207.264868][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 207.266197][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 207.267786][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 207.269110][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 207.270602][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 207.272040][ T1413] ? find_held_lock+0x2d/0x110 [ 207.273287][ T1413] ? find_held_lock+0x2d/0x110 [ 207.274531][ T1413] ? tx+0xa8/0x190 [ 207.275514][ T1413] ? __pfx_lock_release+0x10/0x10 [ 207.276836][ T1413] ? lock_acquire+0x2f/0xb0 [ 207.278013][ T1413] tx+0xcc/0x190 [ 207.278956][ T1413] ? __pfx_tx+0x10/0x10 [ 207.280051][ T1413] kthread+0x1e7/0x3c0 [ 207.281117][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.282337][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 207.283870][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.285225][ T1413] ? __kthread_parkme+0x148/0x220 [ 207.286540][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.287751][ T1413] kthread+0x2c1/0x3a0 [ 207.288832][ T1413] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.290175][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.291332][ T1413] ret_from_fork+0x45/0x80 [ 207.292481][ T1413] ? __pfx_kthread+0x10/0x10 [ 207.293627][ T1413] ret_from_fork_asm+0x1a/0x30 [ 207.294935][ T1413] [ 207.296382][ T1413] Kernel Offset: disabled [ 207.297457][ T1413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:37:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85090125 RDI=ffffffff9a89b100 RBP=ffffffff9a89b0c0 RSP=ffffc9000727f498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000078 R14=ffffffff850900c0 R15=0000000000000000 RIP=ffffffff8509014f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c35e8fd CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b40ffb RBX=0000000000000001 RCX=ffffffff8b1fbdc9 RDX=0000000000000000 RSI=ffffffff8b6cd780 RDI=ffffffff8bd158e0 RBP=ffffed1003a56910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2b4880 R14=ffffffff903e29d0 R15=0000000000000000 RIP=ffffffff8b1fd1af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f1b00210 CR3=00000000499bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73fdff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000028 RCX=ffffffff816a0fae RDX=fffffbfff2d7d799 RSI=0000000000000008 RDI=ffffffff96bebcc0 RBP=ffffc90003827638 RSP=ffffc900038274f0 R8 =0000000000000000 R9 =fffffbfff2d7d798 R10=ffffffff96bebcc7 R11=0000000000000000 R12=ffff88801f5d4880 R13=0000000000000004 R14=0000000000000002 R15=1ffff92000704ea6 RIP=ffffffff816a0fb6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7455004 CR3=000000006a2ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000301ec9 RBX=0000000000000003 RCX=ffffffff8b1fbdc9 RDX=0000000000000000 RSI=ffffffff8b6cd780 RDI=ffffffff8bd158e0 RBP=ffffed1003a59488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2ca440 R14=ffffffff903e29d0 R15=0000000000000000 RIP=ffffffff8b1fd1af RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005601464e9080 CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef8ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe65b6f4d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5828122c5c964845 73732577552a0406 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003030323a 346963682f346963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b5b615f2fe53b36 0000560426598077 00000000000002d1 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 00005601466cd650 0000000000000000 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000