last executing test programs: 51.706848989s ago: executing program 1 (id=605): setgroups(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044100}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe8) close(r9) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x80}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_NESTED_STATE(r12, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r13, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r14, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) getsockname(r13, 0x0, &(0x7f0000000500)) 51.432181245s ago: executing program 1 (id=606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r2, 0x1, 0x0, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0xff80, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4040000) 51.431862836s ago: executing program 1 (id=607): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8000800}, 0x90) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 51.293669741s ago: executing program 1 (id=608): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x214, 0x30, 0x1, 0x0, 0x0, {}, [{0x200, 0x1, [@m_mirred={0x1b4, 0x4, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x10, 0x8, 0xc80, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x0, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0xffffffffffffffff, 0xfffffffc, 0x10}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x3, 0x0, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0xfab1856c3e9d99ea, 0x2, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x2, 0x525539922b4b8f15, 0x2f43db79, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x80, 0x5, 0x3, 0x8}, 0x1}}]}, {0xa6, 0x6, "c3a14f12b2fb8c1c55d83bfa05453dd7485f9576079d95f9ab1991ec45fb57f4e9ec162469b344d3aa6ab98601573d804cca304390b766f18e26d3c9c7e598a8a64608cea61f74b7cf17fa86486a28701588f112e26f3892f5984a7e67be61ef05c82b58e5b6270c98a2eaf8a5d60ced74af945fd0042ae204bb0a0b7e8fe780dd381c8bf1335bccb14aeb3407015f9502411db39c5cb9aefc4235fb458394c71ea8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)={0x100, 0x92, 0x4}, 0x18) fspick(r3, &(0x7f0000000240)='./file0/file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 50.358965414s ago: executing program 1 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b33ab20d0a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}}, 0x0) 50.212076013s ago: executing program 1 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}}, 0x0) 50.166471785s ago: executing program 32 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}}, 0x0) 4.576098781s ago: executing program 2 (id=1010): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x3231564e, 0x0, 0x4, [{0x0, 0xf}, {0x20010}, {0xfffffffd, 0x3}, {}, {}, {}, {0x0, 0x800}], 0xf, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f0000000300), 0x8) 4.520170407s ago: executing program 0 (id=1011): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20180, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc0800) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x109, 0x2}, 0x1c}}, 0x0) connect$ax25(r4, &(0x7f0000000300)={{0x3, @null}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) r10 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r10, 0xc0884123, &(0x7f0000000080)) (async) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) 4.519728558s ago: executing program 0 (id=1012): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x30}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000400)}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x2b, 0x0, [0xfffffffb, 0x9, 0x5, 0xffffffff, 0x9, 0x580, 0x9, 0x2, 0x5, 0x3, 0x0, 0x6a, 0x10001, 0x7fffffff, 0xe730, 0x1000]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (fail_nth: 1) 3.920818314s ago: executing program 3 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, &(0x7f0000001080)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0xb) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.816343885s ago: executing program 3 (id=1018): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="ed7918d2c44d", @multicast2}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f0000000100)='\x00', 0x1c) splice(r4, &(0x7f0000000180)=0xffffffffffffffff, r3, 0x0, 0x4, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000280)=0x3) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) 3.731316196s ago: executing program 3 (id=1019): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2c0100003d000900000000000000000001000000040000000c"], 0x12c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.730901737s ago: executing program 4 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\xfa\x1b\x93a\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88a8, 0x8}}}}}}, 0x2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\xfa\x1b\x93a\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88a8, 0x8}}}}}}, 0x2e) (async) 3.578822864s ago: executing program 4 (id=1021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') getpriority(0x0, 0x0) mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x12000000) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r5}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) 2.993404081s ago: executing program 2 (id=1022): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000600)=ANY=[@ANYBLOB="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"/463], 0x1c4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20044814) (fail_nth: 11) 2.918694428s ago: executing program 0 (id=1023): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) lseek(r0, 0x6, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) tee(r1, r0, 0x0, 0xe) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/234, 0xea}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/13, 0xd}, {&(0x7f0000001180)=""/49, 0x31}, {&(0x7f00000011c0)=""/128, 0x80}, {&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f0000001340)=""/251, 0xfb}], 0x7) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001480)=0x8, &(0x7f00000014c0)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000001500)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001540)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001580)=0x1, 0x4) sendmmsg$unix(r5, &(0x7f00000042c0)=[{{&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="9b9006fd579d49cd828054583b418c5c2614ad6953088c63a0886e47b9bf883ed34cf6563c8b3353aca5dabd183dbbe2535e65e8eb8e07f0dab4b45f9e8f6dbe3676fe9f037f8fc8d54e5089e21bbb1bd92409f8f197dc42c42544c0492672b7", 0x60}, {&(0x7f00000026c0)="450f41d2ceab3fba87baf09e88f73bd88e9174a01c5483f32ed67e0fb8c5f0f4ebf6f07609bc74a2f0e7b81c71cb5de5e83708f6cd2f3ed313320ef6af1ac2f2fda3bb7ffc178ac3e1afbadddbc27ecfc26d50bea49e6f5436ae05a6a87d72d76f328e595247fdc87074bf93bcc2e8162531125afedf99113e766ab718d3bf6f1d1be8891bd7abea4d04f8e3944221f35ec4bd76807eaab4ba235a85a62c724afe3c839e15e7daafb5ef2b69b93814369e49ab8cbc6ea56cbf674d8ec115e3fcb7ba79e7882fa8f3196ab2ffb5f46668d1bf2741a5b68906bff5d0ad1754bd43", 0xe0}], 0x3, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002880)="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", 0xfb}, {&(0x7f0000002980)="d40041fb70782e699011621f3ac2f4dc8d5a22e354544f6c39e57509fec5590b5302358cf09991e4366ec78922c3d50f2726573210d68101", 0x38}, {&(0x7f00000029c0)="6931f314044eabbe7dc57efcbb55090252894a02dd0c061b7139d82663aa7bf96707eb4850238c334ab9dfc220e7319f2f3f76c7884276387e2ca8eca079da4de04a417034554cd5edcf291570f9c27d4404d361121a9b1ee843ec368fd17268d04f45eeb2e0f4f99bfcf5798dec2c4ef422a0e058cb", 0x76}, {&(0x7f0000002a40)="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", 0xfa}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="55964e95f223874e22cad1146bbd3df7d0c7fe26906e229c39ae4fd8366ec77033ad1ac86482bd64c442667f37efabc3f01da68a7d29ed59faf3461ac5777a65e2c6e13d539af840a1638193057f902a6e3f850b4c513de7f7dc29b7a9b3943c0f2c2353bc1185cf86aec3baa9acddbe1fb0a12634c3defe04a03643cb1fbc1497bc356b7b3de8b1c07ae4", 0x8b}], 0x1, &(0x7f0000002d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r1, r4]}}], 0x20, 0x200000c0}}, {{&(0x7f0000002d40)=@abs={0x906b960ae3f4df24, 0x0, 0x4e23}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000002dc0)="760f30f7194c03549b69c1200a31e34a32fc95a0a9fbb39789d56ac3700979dad932e2c64561a050858767a430526fd804d7437365eabd793d8019c919504ae3887212fbf20e210bf0b4c7428745d38cac9d424d0430e32fe03393bba46ea0bee494d3aef19345432a63cf35b6d5cd381b23a55741a615ea18aa717044b83c027b2d6939af1c6c9aad1d09462526cf409a770e175720a66a0f5a29b215da9020507996985832ec7ad3eb6199ac721098f73f4208c55c5ee96c3890e85dfbeedc95006dc4fb4b6e9976a06db7c76d788371fe6840dd563ef0ae8d4e9b066e7a7e2327d2a5fa01448fc9af59830f78", 0xee}, {&(0x7f0000002ec0)="94735df1a1d206a12658426a29cc019c0c6a855f80a4ca33206c6c6a140683e43768e81df57155e47d2268dc49abf7bfacfd869ddff58b6fbeeb1f6e291eb22e6bf622613a510d5caad3687d0aff7645a25decab91f534809237267b7bd6c1829b54f037bd88c7f70097d2cd9e67f9a04c423e8a3388c5859f56f177008254a4ef842a4cef8f83a8f1871b891ea0cb552bdd151b53dca9ba91a03587dd87cf51563746ba8bcdaa9b6761d7e033a6c497470264aea6b6998d96a94b7de6effbde8d71666057597ce8f6889b47fc4b4707beaf76b5df24c26c299d542ac37a26cc40c35ee2a1d6eb", 0xe7}, {&(0x7f0000002fc0)="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", 0xfa}, {&(0x7f00000030c0)="6cde9ae20d66c6f6533579737b4e3c8308ccab208f794e21b50904bb6bad29a2ecb359e3c98fa752f9934caa73d1f9e07c419f43c370d128d8398396de", 0x3d}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="dfb1098d438758a2d68f30655c635d8c9680cd407327823eb0cfa81a0cdf0838ecaf0cc4655063cce8b4b58bccda7956889575203993508785dbd35f9ad2fe198c4e7f213257a0661ae1aa6ecd9c2585797f79bac3bdf3f54a401d514cf22051874f15f294cb", 0x66}, {&(0x7f0000004180)="440c95797982986d54cb4593e47c80e9b43b9bf5a9a0a14e6ae249c4d8e2", 0x1e}, {&(0x7f00000041c0)="d2b7f0317d51d69ad30df41c9ff416231b42cca6727c7d9c0d735aa29449df0c78bfdcb923996e7fa718df7ec2ed99f97cf71bfd582992ca05edc29fb3b9b08c673a071e77191fcaf1921e14a0551051e01b68428e917243a3a7d5372fd1d1fbfb20ce6c775d54b23418398b030052d25475cca21dbef7568c2780a82982f58987c29fd073957f7879c2a202752f32b98e691bd55202", 0x96}], 0x8, 0x0, 0x0, 0x4000}}], 0x4, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000004380)={0x7, &(0x7f0000004340)=[{0x4, 0x5, 0xfa, 0x1}, {0x2, 0x1, 0x4, 0x2}, {0x401, 0x69, 0x40, 0x200}, {0x7, 0xf4, 0xa, 0xd8}, {0x1, 0x5, 0x4, 0xc458}, {0x101, 0x5, 0xf8, 0x5}, {0x1, 0x81, 0x9, 0x7}]}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000043c0), 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000004400)={0x222, 0x2, 0xc49, 0x32, 0x4, 0x8, 0x6}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000004440)=0x2, 0x0, 0x4) mkdir(&(0x7f0000004480)='./file0\x00', 0x114) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f00000044c0)={0x3, 0xb, 0x6, 0xef7}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000004500)) syz_genetlink_get_family_id$ethtool(&(0x7f0000004540), r4) readv(r0, &(0x7f0000005780)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/140, 0x8c}, {&(0x7f0000005640)=""/163, 0xa3}, {&(0x7f0000005700)=""/73, 0x49}], 0x4) syz_clone3(&(0x7f00000059c0)={0x80000, &(0x7f00000057c0), &(0x7f0000005800), &(0x7f0000005840)=0x0, {0x16}, &(0x7f0000005880)=""/59, 0x3b, &(0x7f00000058c0)=""/178, &(0x7f0000005980)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r5}}, 0x58) capset(&(0x7f0000005a40)={0x20080522, r7}, &(0x7f0000005a80)={0x3, 0x0, 0xd, 0xaf0, 0x7, 0xfffffff9}) socket$inet6_dccp(0xa, 0x6, 0x0) capset(&(0x7f0000005ac0)={0x20071026, r7}, &(0x7f0000005b00)={0x9, 0xc, 0x100, 0x7, 0x2, 0x8}) pipe2(&(0x7f0000005b40), 0xf132df82af9a19ae) syz_genetlink_get_family_id$team(&(0x7f0000005b80), 0xffffffffffffffff) 2.747842588s ago: executing program 3 (id=1024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') getpriority(0x0, 0x0) mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x1000000) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r5}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) 2.576667837s ago: executing program 4 (id=1025): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x100) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8, 0x10, 0x2, 0xc01, {{0x24, 0x4, 0x2, 0x33, 0x90, 0x65, 0x0, 0xb, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x30, 0x3, [{0x2, 0x4, "cc88"}, {0x1, 0x10, "f17ec07b59d4b6316513c8debf9d"}, {0x1, 0x12, "54df50ff59bfe42411b37ba7a6d3e559"}, {0x1, 0x4, "1d92"}]}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0x0, [{@rand_addr=0x64010101, 0x1}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x3009}, {@rand_addr=0x64010101, 0x101}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc527}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xec, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "90cfd5c470822736f63e4089cd8db6702a01df5c19b3a40cfd6ef94a1a8064ad68e0fed731ea6d6dd1fbf0"}, @ETHTOOL_A_BITSET_MASK={0x7b, 0x5, "9a8ea5971d9a410baa6671ced2189950056f0bc3bea2bab5467a9ccedd9198186e109900e793f496a9852b9fcc0ca2f4c453aa79a26db352bb93961ab7e2478a5f851d36f66268957454fe898a44776d6831a98db5f61e90c0037685f7c3a3109ebe83b8c7908984f588cee0843511819af2a534deefa2"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRESOCT=0x0], 0x1c4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20044814) 2.095736112s ago: executing program 2 (id=1026): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0047c00", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r2, &(0x7f0000000100)=0x8dff, 0x10012) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47be, 0x2, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000080)={0x2, @capture={0x1000, 0x0, {0x40000000, 0x6c}, 0x0, 0x1}}) ioctl$FBIOBLANK(r6, 0x4611, 0x2) 2.095424162s ago: executing program 2 (id=1027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x97) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) msgsnd(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="02000000bc4b8e9205e5a1fc718b4242d0cee1aba4c45b4d09ec9e5174720367727d241d3c9e9481aabaf0ffda76010987d825835d18172fcb0a57f7cfedc8da12060d51c13d5621d1773978e007a882cfd0e193aa70ac56d0e514a16465c0f15987b653d4b3df0448fd75ca0896220d4afa4494e597e51ce08b127651adb7aa73d1b1bb002a89385e961de587ed88e5d7ed5ddee8d97aa0105455870c7ac68ecf9f7ab9f9c13dd9e7c68bc39f36e31f57e797379b4489bf18e081673785747fe5d33d03cb68f65d0ed253b5aba5e36f5622cf8741d61ad94cbe3070cc2cb2f074d6a9e8b75b5a7419688c392e38c4af4dbdc2d891c229b68fce51673d8a33b3fd11d5e052eacaebeedfe18832c12949337ddcac62aac8f23946cb5495872dd5d6a4afd2419d633c8f84c8fe36bb840bee450a3560cb5239f4891b3637f53934d1c7a110830bf9252866764cfc419ba83ded90b290606c35c5a978f5cc6c567cf3175f4ec5b030dc378086c9599546298b3b0a86b0dfd11a3fc09637e0f7c37915cffa3ec30efeb0334c5bf584f22e3b017398c15cea3126eb456ef0c846b7898b872b5d15f15babb40ad2d4d87fc38a60505a2b25d5bc3ff69459d999d0a01fc133f51b9d304bc4d4761d4147b52ae510dc02078144ddc51a73407b74a519f1ff6de8ef2fee304bbc1573a393b4f4a1786da19f8dc6edd742538864af783880d08022cd92bcd14252fe69baad91f067179f00270161c0ffc9224d5f63be70c621deb369d5224003126244e6906e7f9b9faebc0dd0d445cf0985656cbb9e1c41f2ae144324fd4009ea35c98d7b8ffb4acb41ddc01038930cc57283614688b54cfd1ef2711b67a5ea800eaf264bd4c2041320fd3ac8d5d2fa3c5cfdb8a7af59462544617cd530bf71aee2004b523b525856da3dc9bb8b432be24dcd40420ec45afeb30b039e24be4ef771c986596d1ad6cec1482b91c8ab363a99701d1117a42edf04d9053c6b5e6170bbddea1a06c7dab2834d2b50e6ed6feffe609db7c19802310a7d3c5b7551aedba3581768d18402ca790df84384753dc683a443430d6ded62b646886619898c0e2572e04b47afd3c45a3f3aae142409c7c67d4e8dea95bcd00efd0ef954176ba4ce91a3823246b29d3cb8002805920d30c453b9bd395636f6fa23d5766e0d7407cd34b22a7d76ad031c64a31276647d931ee8c69e506f4d35952ccca0f2c1c5cdefbcb7de223518f7c6112cb8e7bc3b71aee485cbfaa704a2765d8dbf90d409b6c068ebfeb1e5ba11787e5505f066f667e716d113f34bd66350ff663031d7406c7ef50b2ed2c054bb6ae8d1ad17198abb4eeebc9db9bcdf86ff9d80ac179205cc80c2fc581c9e540db11f19c5d3a33f583434f3b915448be9b1338177abdc71611d3961105082f5ec63316882c9651af4932ce49e942f99f42625c20216594ebc890d04939d3992c31ff53d1dbff2225cae45341341624d040f1e14b0cb566bbff1ac8d2b8ff21600add3557a1f4232dee42806499c23451f852be7ee59514f23a367e66db1dbcfa39899b09c633550c79032e42a62fe472d26eaf660e4b8b77cfcd896578fb887ed35bc2d2e60f18ae81a4e1f754fe956f6ab2fe74ff8ebce9eb69474f34a9646b25e842d610460de8f1b2d23891af3d86826bba35245f9512c307491610e3e17174111109fc33d9db3f0e03b93e31fbe73aedb043953019a996a74399060bdcf00843a66567f12ce62c9396aacb263c3996e2df44985445121597f862e0c6d9b66267aef0cbbd7bfbf2f5d7b70d5ab81a8f867d08d40185d8bbd198652b96afe5b3d52b78bae4d94e72da61f1c38cc18979c2532a87c2063dd3a985f3ada1c15d0513a6ffb9e3b45691f8f644fc49224217eea2ecacbce1ed537fc91d7cd9feebf2d7d6e6c649618d2c7e6abf4db9f3e85ea21ffc926ef437539707d2bda36c2a16d60980a84ee807df94b6680ec4b8895ea44b68146cb963879bed151bb018693afab58ede1061b93f16f51ae4a818d41d534fa8b6e7868abc4cd58a100c7f7f4cdc9ce19b7c38c6f15f613e2d05c73ad440eb10260880b8d6fa7bf5dc8fc168585da93ecf68f73487df03f3438655f455d11f9f72a89c88fcab4371c926c743b18c332e4b07cab38372a927a7ae2d1eb668dab20e4fb433db43a8b4e302a66eb91ca14e7a7cbd4ab797ab73f0e99f1fef9bdfecf1db31914a929ff3bba8dd9c9b6b6ea054bbb7997122d52757e6605c604d2b21ad70f9d62a381a0b4d2b97f8753e66df830e5c2b1021b9b2607679314e4ef7f85c6b253a1e0cc7a492d6e625d7b273ebebc484bf1bb6d83bf8e283ad1c081116461f0ad722a8776f673034c36693fbed6c478a97b617f076d7500210bbe969ab13e312abefad8dd028a192525da85d05dc0bf3ff8dda9f8ba9f48f41ddec32ab3d26e3f8948ab4ea29a5849a96a713d11f4eb7126db8e1c0e471ff3c1b46c298cd7c42d29dcf2e48aca7f17bdca8b73fd580818e3bcee3e510f6ad49af7bb1678de01a9dbacc98ba0b891fa13fc772c6e5d82ae341defce6f6def9e14c7950467e941643e20b30a18fcdd99763860137ee1ec15e24d14d6b19e7e2748f6aa0070499dddd216985c5fe219cc2c41f3de6df196ceccc01ff1765f536278ef2374ad118e7180cb886e549106c2d0669c7b2ed25a998148ffe8b2154505fe82add0bbdf1f26868a1ba85edba3f88b0b2f7caf9fa65acc018ed73a899724ca21980a8aa4e34ee077f257d50c63bf4f892d03ff475704f1a4a6cdb8a1c89f0f47da4ff64c033479695bd5d3f061e9617e77ceafa152ec39d4ae2c3bed23ee33ed20f383dc8a23ebe4ace0d710cdb2a26d0d590b93f2571f992ea12e0b57c0edf1c417e276c0b4dcb115903f18065ea164c6d5ce3b6a71bed1bfab5cfc2c3e3e21ad798cf7680f1ddbdc4d966b837423ef5a82faf65c89e22e60e7437d5c23f78831583d07aa7be0978530681e13ba3f0c298fb0ecf4d515fda912d641b40532b9ec14c26935d483064c6d22a0c63ff342030a1b79e53aeafb83c87ced8204bc8e656b99e2eb6f43aa483ba340ef0fbbb56db31c7658b738b4dc9026c4e16afd5ebe4a53bf3c08fd4ea243a9f4081f78b18e913b6f669550fc12195f3da077a43f09b2c9b19bf9e4be1feffa2604261b3786990c3f98f5f0e7ed1b63fb2b33a9e38fdb2f9f4ec417c04ba59f3e3a595773acf6b84418fb62e894fde4b925fc8605846bec1a55d832d9713807be983dbdb152f876312c48317d9b73c221d7a1b6b99286a9cf2f870d243d658f79a83d7bf4b9691f6246b546d6a8b05ebe6e77688eeaacf8eb94b65e44299019e759be248666d513eab1c2951aed83fb2fb0461f8d38cfd6d63fd2f3aeb2fb23a26db296d082df894acb683cc701a9e55a7144186af172d4bbda113fda0689466bf45cdd245a9d059bc55a87f83c1ca1e34d85f7cebd5781fada2167380666b5defcb9542bcdd1103b7240900dacf13c2b3cea8e08c81c3f18a3fd56800e9b253ba2c9e1e760d96a67aa650071dd40ba3785234b1c41e4a6d204402b03a9c80841782c661e7f0b8f4bf606f4b63fd8603e7ad5f91bc6a598862e3763047aef7e369a9c4a677d77c2c226b89781639e3c0706ef41af55f9c52ed3f4e841c475c2b86edbd63022ee5b7cc091716fa2b4343e1afb29b4c967955a5069a37ac4c9a3e29bf99a5373978cd0fc626900b236ea257a4b16441f947741f60982820cb29bdea670fbfc3f4d5f16ee4631941378d0f1ded82354a1428ae547f7a77ae9af237252da533546cec06b275d8663ca610b406250e6c053bb854918217e7f816e74dfeaf701d8664287e918eddba64430f666cbf18f692877e3e77d2645c3c69905ff9571be110f148962b9693c4ac312a640b58703cbe2e3a2e7552d6abcff42ab531971928fc78a204912f34fe7b8177b24b8d1e39ed25b9bb610d871f114fd22b3fdb7def76969e9427b3656dbb50880b9a601319b64909022ffc7303bc06c5105b9a1e8266d75e8c055d71b03784a0fcff806d0c6171009be78ebc41a52319063dd69bf4075140c35998ac3faed70bf5cde22fe1fbe60b1e2a82f3cda39baf5836238fd693c96c6a38928861df5ced3727f5c2a8d82e81d8f9efc6a6ffaa2f2792e59cddcbdc1a4d19a8dcd502a486e92eaba693ee23eb9542285a2aff3e34864ff87d74c9566a5370bad3c6b037c9d25250a8539a73c18c7bc0b9c8ea168d2641861c11148b1c1af50b9ee476dacf37644addbb084e3d06474f84442d3097e9a9d92ac5e69e87f6741dd26a7d9a026f9d8113f50e74884fa6b792b564e6ef578de0cfcb170e3970df6a1e51de351285e9e8bc0a713a9818c3fd1b76576db44238287e99175cef73a88ff380e7c7ba4d62905be2a0b1347ed0181dac4cc808b87fb5e254fd1a75c00c56ca203f3b2700a39d78586e60d9b3b6cfc8f3dea6ba759f829897c968122d89a40b09f7976c1fb73a4e7536202c4999871694b93b887414e568c4d7cde65de210f6b0d232ee00d74580d9644531cf43b3d079119ce2a098b850ddcd66e0fb6b78b8655e5de08c3b016cbf7e10da79c408d2f481e9e5b43952006c4870752070deda0af07725ab03c3cb56353d39708a6f734d8f6901f465198e3217e444ff7c2fa5b0ea3df4ae1eb8353ff19ee319789bf5ca7154e8010f0daeaa5926e329de8471f708645d4c0696d76242854cb15343c64acb6e851bed05d9dcfbc9d0b3bf67c1c7a781d1bf9ab8653cc7517b64c67f3bc385128cebd47bc9485b42c5d59e1516992dc48a54359dffdf8ab6c5d6cd8365eb70116666dc218ceeeefd04f1671c3d844466b254d5a29c5ed0c26a4229fcb7c710cca7b7a9d5bca54c84bc21a71b375e295a2877f481e1ca45d859cdecae62abe3eb392be77339982ab5189b67ffe38f502d82a092b8aa4cc3d8750b8e5f366c00fda616bfbae7f088da8b031c4c7ab2517f111dba0c0ae89ada596f003785d9b52f9eb890a09197325f8a5319574475e2064220900bad7c5603899717d65a94ff2ec444968c3d0e865bf253d45c52b6023b273a51a751492e2aa36eea984d5c1d958a9ed212b7ebfd6ea031bcf2383d159aa5f956bac0d21b38c0180333abfef84f7b7b88c57e4bdb4f47ef82a8d9a95d97721a7cf860c7bce3926c8d20da7b701d1c0835056906ddb427a530ebe5441092a7405f982bfe198715c8ee829294f1f8b8ea7d543bb3bbc03612c21d7d9f8ecb0a0a47f5b86d6670f38c39b4b784163212a83dd6d6eee4bb986624a6de91d70aebecc95fcba8090468cf6b30e3c2361a9312233b5063a4d605febf89693df36d0d6d40fe201e20a524148a32e123fdd9e335f312d0d2a671284b7006e8580ca33075fe117a05dc741ede06f9d06602c4b6dae8e0e97ad3370ef50fc03ba8f2dfbaff56034bab2f50c5b66ca750d49fe7ff609c6211ae170466c79b0bcf03a9c9934b243dc4a34dc333309e529d78ed2936df2aa1203fb796278f0b02e4ece8b650283c37a8f4963cfced8a33cdf56fdace68c08b78635afe459881181b92c9eea00d60f0ff27d2dfcd5912af0c67bb9c1a758af8f726a0a2a5ae8456296527b7fa4ac530b04a3a26c3b85392d290f31537250c91fde102b20bb6ee76014e13b02c568191404de548908648462da65195aa8265f98a924eb33d71c81e464ebaa50df5dfeb98b53828e86f78c4cf9a21261f182feb774089faab24b7430da36c92dcd6cb2fc18"], 0x1004, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a18213", @ANYRES32=0x0, @ANYRES64=r5], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x40000) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000400)=0x1, 0x4) 2.009277716s ago: executing program 0 (id=1028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') getpriority(0x0, 0x0) mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8003, 0x500947db, 0x5}) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r4, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000540)='./file0\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[@ANYBLOB="041155541d60612d9129e3daa5025f9eaa3dfcb40a0414b2536dc0ccd174a840c41adb7a176a6ca22cec027e291b6b686769c6f2147630c5ed0d65ead5f43cfa93bce089e305cf7c7191774e7896121a1df82a9f8844f3d1f80713b25c3860055fa56d8cd70a83ec628b669e29574aae840951dade6b406626a6172fe31c7d131e8e0868797009d67929f9d1cb3eb0d5320ea56e9320421b4f8b210000b7736240838683c6edc9b86394af79993df241abc142fa674b2ab2e9caf726deec3bc95257fbc7077c8f6e25f17b064636a3a415102a74d8473ba340231f29f9fe1fa32d08000000fee5cfe362a81b80409a182353579285c3be44acc2169f2952a6c9552e9a447a06c481d9c344c639c8bc74e366fdede805c256696307b778494a250c6d98131a92215082274eb5cb7b83b10112f4e673804a21c85b89cc01e2459b9ac7f76bd79f730b043ff7a1a76d3b1a79c6c55746c696db067dc9a7253fd4e2ed972176189c45796243258a0f20af81f86a7d1dff437940447e42b54a7e5a8d5f692c26ef54d0fc09ed3ae20168b829ed474a8fa87cb3c5a28126cd4bacb26df20b2a19a7d534ada9fbd203e0225d1b80c33554875985138ff995bee080dbfcad840d1fcfb96a67cf79bc530b55c726cd4291f98e1e1df00debe73a5ae9f6c1f9d1841ffc06ffc30551a3e209fc4600", @ANYRES32=r0, @ANYRES64=r4, @ANYRES16=0x0], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400745142, 0x81) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd, &(0x7f0000000380)={0x0, 0xfffffffe, 0x10000, 0x3, 0x1f2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) 2.008930633s ago: executing program 4 (id=1029): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff]) setfsgid(r1) 1.913849817s ago: executing program 4 (id=1030): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x3231564e, 0x0, 0x4, [{0x0, 0xf}, {0x20010}, {0xfffffffd, 0x3}, {}, {}, {}, {0x0, 0x800}], 0xf, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$khugepaged_scan(r1, 0x0, 0x0) 1.518089753s ago: executing program 3 (id=1031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x3f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r5, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2", 0x20}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1.058028473s ago: executing program 0 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_xen(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x345065, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tkill(r0, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x5}, 0x9c) r7 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x4cffd461aa14836d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, '\x00'}) socket(0x10, 0x3, 0x0) 930.470006ms ago: executing program 2 (id=1033): socket(0x40000000015, 0x5, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180), &(0x7f0000000340)) (async) r1 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xfffffffd, 0x6, 0x1, 0x200, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xfffffffd, 0x6, 0x1, 0x200, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, r4}) bind$802154_raw(r5, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) 930.229628ms ago: executing program 2 (id=1034): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="74100012", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 502.130349ms ago: executing program 4 (id=1035): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0xf0, 0x0) 501.905713ms ago: executing program 3 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f0000000300), 0x8) 0s ago: executing program 0 (id=1037): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0xf0, 0x0) kernel console output (not intermixed with test programs): /0x10 [ 136.467004][ T8174] ____sys_sendmsg+0xaaf/0xc90 [ 136.467018][ T8174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.467029][ T8174] ? get_compat_msghdr+0x11b/0x170 [ 136.467047][ T8174] ___sys_sendmsg+0x135/0x1e0 [ 136.467063][ T8174] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.467083][ T8174] ? __pfx_lock_release+0x10/0x10 [ 136.467100][ T8174] ? trace_lock_acquire+0x14e/0x1f0 [ 136.467117][ T8174] ? __fget_files+0x206/0x3a0 [ 136.467137][ T8174] __sys_sendmsg+0x16e/0x220 [ 136.467152][ T8174] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.467175][ T8174] __do_fast_syscall_32+0x73/0x120 [ 136.467190][ T8174] do_fast_syscall_32+0x32/0x80 [ 136.467204][ T8174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.467223][ T8174] RIP: 0023:0xf7fe6579 [ 136.467232][ T8174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.467248][ T8174] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 136.467258][ T8174] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 136.467265][ T8174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.467271][ T8174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.467277][ T8174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.467283][ T8174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.467295][ T8174] [ 136.488146][ T5953] Bluetooth: hci0: command tx timeout [ 136.506295][ T40] audit: type=1326 audit(1739981851.935:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.0.657" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6579 code=0x0 [ 136.542220][ T8179] all: renamed from bridge_slave_0 [ 136.562172][ T8181] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 136.564411][ T8181] [U] J"—e:ÀÆ" [ 136.595411][ T8185] overlayfs: missing 'lowerdir' [ 136.770089][ T8190] FAULT_INJECTION: forcing a failure. [ 136.770089][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 136.773750][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.2.661 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 136.773764][ T8190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.773772][ T8190] Call Trace: [ 136.773785][ T8190] [ 136.773791][ T8190] dump_stack_lvl+0x16c/0x1f0 [ 136.773812][ T8190] should_fail_ex+0x50a/0x650 [ 136.773831][ T8190] ? fs_reclaim_acquire+0xae/0x150 [ 136.773847][ T8190] should_failslab+0xc2/0x120 [ 136.773859][ T8190] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 136.773878][ T8190] ? __alloc_skb+0x2b1/0x380 [ 136.773896][ T8190] __alloc_skb+0x2b1/0x380 [ 136.773910][ T8190] ? __pfx___alloc_skb+0x10/0x10 [ 136.773925][ T8190] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 136.773943][ T8190] netlink_alloc_large_skb+0x69/0x130 [ 136.773958][ T8190] netlink_sendmsg+0x689/0xd70 [ 136.773974][ T8190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.773993][ T8190] ____sys_sendmsg+0xaaf/0xc90 [ 136.774015][ T8190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.774027][ T8190] ? get_compat_msghdr+0x11b/0x170 [ 136.774046][ T8190] ___sys_sendmsg+0x135/0x1e0 [ 136.774062][ T8190] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.774082][ T8190] ? __pfx_lock_release+0x10/0x10 [ 136.774098][ T8190] ? trace_lock_acquire+0x14e/0x1f0 [ 136.774116][ T8190] ? __fget_files+0x206/0x3a0 [ 136.774134][ T8190] __sys_sendmsg+0x16e/0x220 [ 136.774150][ T8190] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.774173][ T8190] __do_fast_syscall_32+0x73/0x120 [ 136.774189][ T8190] do_fast_syscall_32+0x32/0x80 [ 136.774202][ T8190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.774222][ T8190] RIP: 0023:0xf748e579 [ 136.774231][ T8190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.774243][ T8190] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 136.774254][ T8190] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 136.774260][ T8190] RDX: 0000000000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.774266][ T8190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.774272][ T8190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.774279][ T8190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.774291][ T8190] [ 136.873592][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.917001][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.918836][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.981448][ T8192] Bluetooth: MGMT ver 1.23 [ 137.216614][ T8199] FAULT_INJECTION: forcing a failure. [ 137.216614][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 137.220337][ T8199] CPU: 2 UID: 0 PID: 8199 Comm: syz.4.664 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 137.220353][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.220360][ T8199] Call Trace: [ 137.220363][ T8199] [ 137.220368][ T8199] dump_stack_lvl+0x16c/0x1f0 [ 137.220389][ T8199] should_fail_ex+0x50a/0x650 [ 137.220408][ T8199] ? fs_reclaim_acquire+0xae/0x150 [ 137.220425][ T8199] should_failslab+0xc2/0x120 [ 137.220436][ T8199] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 137.220454][ T8199] ? __alloc_skb+0x2b1/0x380 [ 137.220473][ T8199] __alloc_skb+0x2b1/0x380 [ 137.220486][ T8199] ? __pfx___alloc_skb+0x10/0x10 [ 137.220502][ T8199] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 137.220519][ T8199] netlink_alloc_large_skb+0x69/0x130 [ 137.220534][ T8199] netlink_sendmsg+0x689/0xd70 [ 137.220551][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.220569][ T8199] ____sys_sendmsg+0xaaf/0xc90 [ 137.220583][ T8199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.220593][ T8199] ? get_compat_msghdr+0x11b/0x170 [ 137.220611][ T8199] ___sys_sendmsg+0x135/0x1e0 [ 137.220627][ T8199] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.220647][ T8199] ? __pfx_lock_release+0x10/0x10 [ 137.220664][ T8199] ? trace_lock_acquire+0x14e/0x1f0 [ 137.220681][ T8199] ? __fget_files+0x206/0x3a0 [ 137.220700][ T8199] __sys_sendmsg+0x16e/0x220 [ 137.220716][ T8199] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.220739][ T8199] __do_fast_syscall_32+0x73/0x120 [ 137.220755][ T8199] do_fast_syscall_32+0x32/0x80 [ 137.220768][ T8199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.220787][ T8199] RIP: 0023:0xf7f56579 [ 137.220795][ T8199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.220806][ T8199] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.220816][ T8199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 137.220823][ T8199] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.220828][ T8199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.220834][ T8199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.220840][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.220852][ T8199] [ 137.711056][ T8211] overlayfs: missing 'lowerdir' [ 137.742868][ T8217] FAULT_INJECTION: forcing a failure. [ 137.742868][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 137.746427][ T8217] CPU: 2 UID: 0 PID: 8217 Comm: syz.0.672 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 137.746450][ T8217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.746460][ T8217] Call Trace: [ 137.746465][ T8217] [ 137.746473][ T8217] dump_stack_lvl+0x16c/0x1f0 [ 137.746505][ T8217] should_fail_ex+0x50a/0x650 [ 137.746532][ T8217] ? fs_reclaim_acquire+0xae/0x150 [ 137.746557][ T8217] should_failslab+0xc2/0x120 [ 137.746575][ T8217] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 137.746602][ T8217] ? __alloc_skb+0x2b1/0x380 [ 137.746630][ T8217] __alloc_skb+0x2b1/0x380 [ 137.746652][ T8217] ? __pfx___alloc_skb+0x10/0x10 [ 137.746677][ T8217] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 137.746705][ T8217] netlink_alloc_large_skb+0x69/0x130 [ 137.746728][ T8217] netlink_sendmsg+0x689/0xd70 [ 137.746753][ T8217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.746784][ T8217] ____sys_sendmsg+0xaaf/0xc90 [ 137.746804][ T8217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.746822][ T8217] ? get_compat_msghdr+0x11b/0x170 [ 137.746852][ T8217] ___sys_sendmsg+0x135/0x1e0 [ 137.746878][ T8217] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.746911][ T8217] ? __pfx_lock_release+0x10/0x10 [ 137.746935][ T8217] ? trace_lock_acquire+0x14e/0x1f0 [ 137.746963][ T8217] ? __fget_files+0x206/0x3a0 [ 137.746994][ T8217] __sys_sendmsg+0x16e/0x220 [ 137.747018][ T8217] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.747056][ T8217] __do_fast_syscall_32+0x73/0x120 [ 137.747081][ T8217] do_fast_syscall_32+0x32/0x80 [ 137.747102][ T8217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.747130][ T8217] RIP: 0023:0xf7fe6579 [ 137.747143][ T8217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.747160][ T8217] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.747177][ T8217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 137.747188][ T8217] RDX: 0000000000040044 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.747198][ T8217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.747208][ T8217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.747218][ T8217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.747239][ T8217] [ 137.885805][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 137.926441][ T8234] overlayfs: missing 'lowerdir' [ 138.016593][ T8243] Failed to get privilege flags for destination (handle=0x2:0x0) [ 138.140791][ T8241] netlink: 260 bytes leftover after parsing attributes in process `syz.2.682'. [ 138.150974][ T8248] FAULT_INJECTION: forcing a failure. [ 138.150974][ T8248] name failslab, interval 1, probability 0, space 0, times 0 [ 138.166550][ T8248] CPU: 3 UID: 0 PID: 8248 Comm: syz.3.684 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 138.166568][ T8248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.166574][ T8248] Call Trace: [ 138.166578][ T8248] [ 138.166584][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.166583][ T8248] dump_stack_lvl+0x16c/0x1f0 [ 138.166606][ T8248] should_fail_ex+0x50a/0x650 [ 138.166624][ T8248] ? fs_reclaim_acquire+0xae/0x150 [ 138.166641][ T8248] should_failslab+0xc2/0x120 [ 138.166653][ T8248] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 138.166671][ T8248] ? __alloc_skb+0x2b1/0x380 [ 138.166688][ T8248] __alloc_skb+0x2b1/0x380 [ 138.166702][ T8248] ? __pfx___alloc_skb+0x10/0x10 [ 138.166718][ T8248] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 138.166735][ T8248] netlink_alloc_large_skb+0x69/0x130 [ 138.166751][ T8248] netlink_sendmsg+0x689/0xd70 [ 138.166767][ T8248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.166785][ T8248] ____sys_sendmsg+0xaaf/0xc90 [ 138.166798][ T8248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.166809][ T8248] ? get_compat_msghdr+0x11b/0x170 [ 138.166826][ T8248] ___sys_sendmsg+0x135/0x1e0 [ 138.166842][ T8248] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.166862][ T8248] ? __pfx_lock_release+0x10/0x10 [ 138.166879][ T8248] ? trace_lock_acquire+0x14e/0x1f0 [ 138.166896][ T8248] ? __fget_files+0x206/0x3a0 [ 138.166915][ T8248] __sys_sendmsg+0x16e/0x220 [ 138.166930][ T8248] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.166953][ T8248] __do_fast_syscall_32+0x73/0x120 [ 138.166969][ T8248] do_fast_syscall_32+0x32/0x80 [ 138.166982][ T8248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.167003][ T8248] RIP: 0023:0xf7f72579 [ 138.167011][ T8248] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.167023][ T8248] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 138.167034][ T8248] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 138.167040][ T8248] RDX: 0000000020004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.167047][ T8248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.167053][ T8248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.167059][ T8248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.167071][ T8248] [ 138.389624][ T8265] overlayfs: missing 'lowerdir' [ 138.425756][ T8268] FAULT_INJECTION: forcing a failure. [ 138.425756][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.429306][ T8268] CPU: 2 UID: 0 PID: 8268 Comm: syz.2.691 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 138.429321][ T8268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.429328][ T8268] Call Trace: [ 138.429332][ T8268] [ 138.429337][ T8268] dump_stack_lvl+0x16c/0x1f0 [ 138.429359][ T8268] should_fail_ex+0x50a/0x650 [ 138.429381][ T8268] strncpy_from_user+0x3b/0x2d0 [ 138.429398][ T8268] bpf_raw_tp_link_attach+0x115/0x5f0 [ 138.429419][ T8268] ? __pfx_lock_release+0x10/0x10 [ 138.429436][ T8268] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 138.429455][ T8268] ? lock_acquire+0x2f/0xb0 [ 138.429469][ T8268] ? __fget_files+0x40/0x3a0 [ 138.429489][ T8268] ? fput+0x67/0x440 [ 138.429501][ T8268] ? __bpf_prog_get+0xa0/0x290 [ 138.429516][ T8268] __sys_bpf+0x3a4/0x49c0 [ 138.429532][ T8268] ? __pfx_lock_release+0x10/0x10 [ 138.429548][ T8268] ? __pfx___sys_bpf+0x10/0x10 [ 138.429564][ T8268] ? vfs_write+0x306/0x1150 [ 138.429581][ T8268] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 138.429602][ T8268] ? fput+0x67/0x440 [ 138.429612][ T8268] ? ksys_write+0x1ba/0x250 [ 138.429627][ T8268] ? __pfx_ksys_write+0x10/0x10 [ 138.429643][ T8268] __ia32_sys_bpf+0x76/0xe0 [ 138.429654][ T8268] __do_fast_syscall_32+0x73/0x120 [ 138.429669][ T8268] do_fast_syscall_32+0x32/0x80 [ 138.429683][ T8268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.429702][ T8268] RIP: 0023:0xf748e579 [ 138.429711][ T8268] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.429722][ T8268] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 138.429732][ T8268] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000040 [ 138.429739][ T8268] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.429745][ T8268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.429751][ T8268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.429757][ T8268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.429769][ T8268] [ 138.521546][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.692'. [ 138.526591][ T8271] batadv3: entered promiscuous mode [ 138.528104][ T8271] batadv3: entered allmulticast mode [ 138.713253][ T5953] Bluetooth: hci0: command tx timeout [ 138.868092][ T8288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 138.870742][ T8288] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 138.935605][ T8292] netlink: 192 bytes leftover after parsing attributes in process `syz.2.700'. [ 139.293246][ T8295] FAULT_INJECTION: forcing a failure. [ 139.293246][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 139.296720][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'. [ 139.297648][ T8295] CPU: 2 UID: 0 PID: 8295 Comm: syz.3.701 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 139.297669][ T8295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.297680][ T8295] Call Trace: [ 139.297685][ T8295] [ 139.297692][ T8295] dump_stack_lvl+0x16c/0x1f0 [ 139.297721][ T8295] should_fail_ex+0x50a/0x650 [ 139.297745][ T8295] ? fs_reclaim_acquire+0xae/0x150 [ 139.297768][ T8295] should_failslab+0xc2/0x120 [ 139.297783][ T8295] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 139.297806][ T8295] ? __lock_acquire+0x15a9/0x3c40 [ 139.297827][ T8295] ? __alloc_skb+0x2b1/0x380 [ 139.297851][ T8295] __alloc_skb+0x2b1/0x380 [ 139.297870][ T8295] ? __pfx___alloc_skb+0x10/0x10 [ 139.297896][ T8295] netlink_alloc_large_skb+0x69/0x130 [ 139.297918][ T8295] netlink_sendmsg+0x689/0xd70 [ 139.297941][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.297967][ T8295] ____sys_sendmsg+0xaaf/0xc90 [ 139.297985][ T8295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.298000][ T8295] ? get_compat_msghdr+0x11b/0x170 [ 139.298025][ T8295] ___sys_sendmsg+0x135/0x1e0 [ 139.298047][ T8295] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.298075][ T8295] ? __pfx_lock_release+0x10/0x10 [ 139.298093][ T8295] ? trace_lock_acquire+0x14e/0x1f0 [ 139.298117][ T8295] ? __fget_files+0x206/0x3a0 [ 139.298144][ T8295] __sys_sendmsg+0x16e/0x220 [ 139.298165][ T8295] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.298198][ T8295] __do_fast_syscall_32+0x73/0x120 [ 139.298219][ T8295] do_fast_syscall_32+0x32/0x80 [ 139.298237][ T8295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.298266][ T8295] RIP: 0023:0xf7f72579 [ 139.298278][ T8295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.298292][ T8295] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 139.298307][ T8295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800026c0 [ 139.298317][ T8295] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.298326][ T8295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.298335][ T8295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.298343][ T8295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.298362][ T8295] [ 139.355087][ T8300] batadv3: entered promiscuous mode [ 139.374656][ T8300] batadv3: entered allmulticast mode [ 139.449503][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.551455][ T8307] netlink: 232 bytes leftover after parsing attributes in process `syz.2.706'. [ 139.577803][ T8307] macvtap1: entered promiscuous mode [ 139.580908][ T8307] syz_tun: entered promiscuous mode [ 139.587016][ T8307] team0: Device macvtap1 failed to register rx_handler [ 139.600339][ T8307] syz_tun: left promiscuous mode [ 139.871186][ T8323] FAULT_INJECTION: forcing a failure. [ 139.871186][ T8323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.874901][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.3.712 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 139.874916][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.874923][ T8323] Call Trace: [ 139.874935][ T8323] [ 139.874941][ T8323] dump_stack_lvl+0x16c/0x1f0 [ 139.874972][ T8323] should_fail_ex+0x50a/0x650 [ 139.874993][ T8323] _copy_from_user+0x2e/0xd0 [ 139.875006][ T8323] move_addr_to_kernel+0x68/0x160 [ 139.875021][ T8323] __get_compat_msghdr+0x3f1/0x4d0 [ 139.875036][ T8323] get_compat_msghdr+0xd3/0x170 [ 139.875047][ T8323] ? __pfx_get_compat_msghdr+0x10/0x10 [ 139.875094][ T8323] ___sys_sendmsg+0x1b0/0x1e0 [ 139.875111][ T8323] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.875131][ T8323] ? trace_lock_acquire+0x14e/0x1f0 [ 139.875154][ T8323] __sys_sendmmsg+0x2fa/0x420 [ 139.875171][ T8323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.875191][ T8323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.875210][ T8323] ? fput+0x67/0x440 [ 139.875223][ T8323] ? ksys_write+0x1ba/0x250 [ 139.875242][ T8323] ? __pfx_ksys_write+0x10/0x10 [ 139.875259][ T8323] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 139.875271][ T8323] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 139.875286][ T8323] __do_fast_syscall_32+0x73/0x120 [ 139.875301][ T8323] do_fast_syscall_32+0x32/0x80 [ 139.875314][ T8323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.875333][ T8323] RIP: 0023:0xf7f72579 [ 139.875342][ T8323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.875353][ T8323] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 139.875364][ T8323] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000440 [ 139.875371][ T8323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.875376][ T8323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.875382][ T8323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.875388][ T8323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.875400][ T8323] [ 140.340723][ T8338] FAULT_INJECTION: forcing a failure. [ 140.340723][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 140.344353][ T8338] CPU: 2 UID: 0 PID: 8338 Comm: syz.0.718 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 140.344373][ T8338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.344383][ T8338] Call Trace: [ 140.344401][ T8338] [ 140.344409][ T8338] dump_stack_lvl+0x16c/0x1f0 [ 140.344430][ T8338] should_fail_ex+0x50a/0x650 [ 140.344449][ T8338] ? fs_reclaim_acquire+0xae/0x150 [ 140.344466][ T8338] should_failslab+0xc2/0x120 [ 140.344478][ T8338] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 140.344496][ T8338] ? __alloc_skb+0x2b1/0x380 [ 140.344514][ T8338] __alloc_skb+0x2b1/0x380 [ 140.344528][ T8338] ? __pfx___alloc_skb+0x10/0x10 [ 140.344545][ T8338] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 140.344563][ T8338] netlink_alloc_large_skb+0x69/0x130 [ 140.344578][ T8338] netlink_sendmsg+0x689/0xd70 [ 140.344594][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.344612][ T8338] ____sys_sendmsg+0xaaf/0xc90 [ 140.344626][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.344637][ T8338] ? get_compat_msghdr+0x11b/0x170 [ 140.344656][ T8338] ___sys_sendmsg+0x135/0x1e0 [ 140.344682][ T8338] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.344703][ T8338] ? __pfx_lock_release+0x10/0x10 [ 140.344720][ T8338] ? trace_lock_acquire+0x14e/0x1f0 [ 140.344737][ T8338] ? __fget_files+0x206/0x3a0 [ 140.344756][ T8338] __sys_sendmsg+0x16e/0x220 [ 140.344772][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.344796][ T8338] __do_fast_syscall_32+0x73/0x120 [ 140.344813][ T8338] do_fast_syscall_32+0x32/0x80 [ 140.344826][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.344846][ T8338] RIP: 0023:0xf7fe6579 [ 140.344855][ T8338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.344866][ T8338] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 140.344876][ T8338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 140.344883][ T8338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.344889][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.344894][ T8338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.344900][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.344912][ T8338] [ 140.598968][ T8342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.600893][ T8342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.690360][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.946093][ T5953] Bluetooth: hci0: command tx timeout [ 141.108725][ T8350] FAULT_INJECTION: forcing a failure. [ 141.108725][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 141.125492][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.4.723 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 141.125512][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.125519][ T8350] Call Trace: [ 141.125524][ T8350] [ 141.125529][ T8350] dump_stack_lvl+0x16c/0x1f0 [ 141.125552][ T8350] should_fail_ex+0x50a/0x650 [ 141.125572][ T8350] ? fs_reclaim_acquire+0xae/0x150 [ 141.125588][ T8350] should_failslab+0xc2/0x120 [ 141.125600][ T8350] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 141.125619][ T8350] ? __alloc_skb+0x2b1/0x380 [ 141.125638][ T8350] __alloc_skb+0x2b1/0x380 [ 141.125652][ T8350] ? __pfx___alloc_skb+0x10/0x10 [ 141.125668][ T8350] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.125685][ T8350] netlink_alloc_large_skb+0x69/0x130 [ 141.125700][ T8350] netlink_sendmsg+0x689/0xd70 [ 141.125716][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.125735][ T8350] ____sys_sendmsg+0xaaf/0xc90 [ 141.125749][ T8350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.125759][ T8350] ? get_compat_msghdr+0x11b/0x170 [ 141.125778][ T8350] ___sys_sendmsg+0x135/0x1e0 [ 141.125794][ T8350] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.125814][ T8350] ? __pfx_lock_release+0x10/0x10 [ 141.125831][ T8350] ? trace_lock_acquire+0x14e/0x1f0 [ 141.125848][ T8350] ? __fget_files+0x206/0x3a0 [ 141.125867][ T8350] __sys_sendmsg+0x16e/0x220 [ 141.125883][ T8350] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.125906][ T8350] __do_fast_syscall_32+0x73/0x120 [ 141.125923][ T8350] do_fast_syscall_32+0x32/0x80 [ 141.125937][ T8350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.125956][ T8350] RIP: 0023:0xf7f56579 [ 141.125965][ T8350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.125976][ T8350] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.125987][ T8350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 141.125993][ T8350] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.125999][ T8350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.126005][ T8350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.126011][ T8350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.126023][ T8350] [ 141.211154][ T8352] FAULT_INJECTION: forcing a failure. [ 141.211154][ T8352] name failslab, interval 1, probability 0, space 0, times 0 [ 141.221551][ T8352] CPU: 2 UID: 0 PID: 8352 Comm: syz.3.724 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 141.221569][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.221575][ T8352] Call Trace: [ 141.221579][ T8352] [ 141.221583][ T8352] dump_stack_lvl+0x16c/0x1f0 [ 141.221605][ T8352] should_fail_ex+0x50a/0x650 [ 141.221624][ T8352] ? fs_reclaim_acquire+0xae/0x150 [ 141.221640][ T8352] should_failslab+0xc2/0x120 [ 141.221652][ T8352] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 141.221669][ T8352] ? __lock_acquire+0x15a9/0x3c40 [ 141.221686][ T8352] ? __alloc_skb+0x2b1/0x380 [ 141.221704][ T8352] __alloc_skb+0x2b1/0x380 [ 141.221718][ T8352] ? __pfx___alloc_skb+0x10/0x10 [ 141.221737][ T8352] netlink_alloc_large_skb+0x69/0x130 [ 141.221754][ T8352] netlink_sendmsg+0x689/0xd70 [ 141.221771][ T8352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.221789][ T8352] ____sys_sendmsg+0xaaf/0xc90 [ 141.221802][ T8352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.221812][ T8352] ? get_compat_msghdr+0x11b/0x170 [ 141.221830][ T8352] ___sys_sendmsg+0x135/0x1e0 [ 141.221846][ T8352] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.221866][ T8352] ? __pfx_lock_release+0x10/0x10 [ 141.221880][ T8352] ? trace_lock_acquire+0x14e/0x1f0 [ 141.221897][ T8352] ? __fget_files+0x206/0x3a0 [ 141.221916][ T8352] __sys_sendmsg+0x16e/0x220 [ 141.221932][ T8352] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.221954][ T8352] __do_fast_syscall_32+0x73/0x120 [ 141.221971][ T8352] do_fast_syscall_32+0x32/0x80 [ 141.221987][ T8352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.222011][ T8352] RIP: 0023:0xf7f72579 [ 141.222024][ T8352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.222038][ T8352] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.222054][ T8352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 141.222064][ T8352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.222073][ T8352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.222082][ T8352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.222091][ T8352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.222112][ T8352] [ 141.309205][ T8357] batadv3: entered promiscuous mode [ 141.310863][ T8357] batadv3: entered allmulticast mode [ 141.430281][ T8365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 141.432760][ T8365] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 141.438711][ T8365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 141.603557][ T8379] raw_sendmsg: syz.0.737 forgot to set AF_INET. Fix it! [ 141.694462][ T8386] FAULT_INJECTION: forcing a failure. [ 141.694462][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 141.698471][ T8386] CPU: 3 UID: 0 PID: 8386 Comm: syz.3.739 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 141.698486][ T8386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.698493][ T8386] Call Trace: [ 141.698497][ T8386] [ 141.698503][ T8386] dump_stack_lvl+0x16c/0x1f0 [ 141.698525][ T8386] should_fail_ex+0x50a/0x650 [ 141.698545][ T8386] ? fs_reclaim_acquire+0xae/0x150 [ 141.698562][ T8386] should_failslab+0xc2/0x120 [ 141.698574][ T8386] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 141.698593][ T8386] ? __alloc_skb+0x2b1/0x380 [ 141.698612][ T8386] __alloc_skb+0x2b1/0x380 [ 141.698626][ T8386] ? __pfx___alloc_skb+0x10/0x10 [ 141.698641][ T8386] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.698659][ T8386] netlink_alloc_large_skb+0x69/0x130 [ 141.698674][ T8386] netlink_sendmsg+0x689/0xd70 [ 141.698690][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.698709][ T8386] ____sys_sendmsg+0xaaf/0xc90 [ 141.698727][ T8386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.698742][ T8386] ? get_compat_msghdr+0x11b/0x170 [ 141.698767][ T8386] ___sys_sendmsg+0x135/0x1e0 [ 141.698791][ T8386] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.698821][ T8386] ? __pfx_lock_release+0x10/0x10 [ 141.698844][ T8386] ? trace_lock_acquire+0x14e/0x1f0 [ 141.698870][ T8386] ? __fget_files+0x206/0x3a0 [ 141.698897][ T8386] __sys_sendmsg+0x16e/0x220 [ 141.698919][ T8386] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.698955][ T8386] __do_fast_syscall_32+0x73/0x120 [ 141.698978][ T8386] do_fast_syscall_32+0x32/0x80 [ 141.698997][ T8386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.699022][ T8386] RIP: 0023:0xf7f72579 [ 141.699036][ T8386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.699066][ T8386] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.699082][ T8386] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 141.699090][ T8386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.699098][ T8386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.699107][ T8386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.699117][ T8386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.699136][ T8386] [ 141.772606][ C3] vkms_vblank_simulate: vblank timer overrun [ 141.813631][ T8391] batadv2: entered promiscuous mode [ 141.815256][ T8391] batadv2: entered allmulticast mode [ 141.909212][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.045572][ T8396] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.049035][ T8396] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 142.052675][ T8396] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.390300][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 142.468694][ T8407] FAULT_INJECTION: forcing a failure. [ 142.468694][ T8407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.472490][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.2.745 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 142.472505][ T8407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.472511][ T8407] Call Trace: [ 142.472515][ T8407] [ 142.472521][ T8407] dump_stack_lvl+0x16c/0x1f0 [ 142.472542][ T8407] should_fail_ex+0x50a/0x650 [ 142.472563][ T8407] _copy_from_user+0x2e/0xd0 [ 142.472576][ T8407] ip6_mroute_setsockopt+0x1df9/0x2420 [ 142.472597][ T8407] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 142.472613][ T8407] ? __pfx___lock_acquire+0x10/0x10 [ 142.472634][ T8407] ? find_held_lock+0x2d/0x110 [ 142.472651][ T8407] ? lock_acquire+0x2f/0xb0 [ 142.472665][ T8407] ? __might_fault+0xe3/0x190 [ 142.472678][ T8407] ? __might_fault+0xe3/0x190 [ 142.472691][ T8407] ? do_ipv6_setsockopt+0x8c4/0x4520 [ 142.472706][ T8407] do_ipv6_setsockopt+0x8c4/0x4520 [ 142.472718][ T8407] ? __pfx___lock_acquire+0x10/0x10 [ 142.472735][ T8407] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 142.472750][ T8407] ? hlock_class+0x4e/0x130 [ 142.472760][ T8407] ? mark_lock+0xb5/0xc60 [ 142.472773][ T8407] ? aa_label_sk_perm+0x19d/0x5a0 [ 142.472788][ T8407] ? __pfx_mark_lock+0x10/0x10 [ 142.472802][ T8407] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 142.472817][ T8407] ? find_held_lock+0x2d/0x110 [ 142.472836][ T8407] ? ipv6_setsockopt+0xcb/0x170 [ 142.472847][ T8407] ipv6_setsockopt+0xcb/0x170 [ 142.472860][ T8407] rawv6_setsockopt+0xd7/0x680 [ 142.472872][ T8407] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 142.472885][ T8407] ? sock_common_setsockopt+0x2e/0xf0 [ 142.472898][ T8407] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.472909][ T8407] do_sock_setsockopt+0x222/0x480 [ 142.472927][ T8407] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.472945][ T8407] ? lock_acquire+0x2f/0xb0 [ 142.472965][ T8407] __sys_setsockopt+0x1a0/0x230 [ 142.472982][ T8407] __ia32_sys_setsockopt+0xbc/0x160 [ 142.472996][ T8407] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.473010][ T8407] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 142.473024][ T8407] __do_fast_syscall_32+0x73/0x120 [ 142.473039][ T8407] do_fast_syscall_32+0x32/0x80 [ 142.473053][ T8407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.473072][ T8407] RIP: 0023:0xf748e579 [ 142.473081][ T8407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.473091][ T8407] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 142.473102][ T8407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 142.473108][ T8407] RDX: 00000000000000d4 RSI: 0000000080000140 RDI: 0000000000000004 [ 142.473114][ T8407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.473120][ T8407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.473126][ T8407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.473138][ T8407] [ 142.512817][ T8409] FAULT_INJECTION: forcing a failure. [ 142.512817][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 142.577272][ T8409] CPU: 3 UID: 0 PID: 8409 Comm: syz.0.746 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 142.577290][ T8409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.577297][ T8409] Call Trace: [ 142.577301][ T8409] [ 142.577307][ T8409] dump_stack_lvl+0x16c/0x1f0 [ 142.577330][ T8409] should_fail_ex+0x50a/0x650 [ 142.577350][ T8409] ? fs_reclaim_acquire+0xae/0x150 [ 142.577366][ T8409] should_failslab+0xc2/0x120 [ 142.577378][ T8409] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 142.577396][ T8409] ? __alloc_skb+0x2b1/0x380 [ 142.577414][ T8409] __alloc_skb+0x2b1/0x380 [ 142.577429][ T8409] ? __pfx___alloc_skb+0x10/0x10 [ 142.577461][ T8409] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 142.577480][ T8409] netlink_alloc_large_skb+0x69/0x130 [ 142.577496][ T8409] netlink_sendmsg+0x689/0xd70 [ 142.577512][ T8409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.577531][ T8409] ____sys_sendmsg+0xaaf/0xc90 [ 142.577545][ T8409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.577556][ T8409] ? get_compat_msghdr+0x11b/0x170 [ 142.577574][ T8409] ___sys_sendmsg+0x135/0x1e0 [ 142.577591][ T8409] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.577610][ T8409] ? __pfx_lock_release+0x10/0x10 [ 142.577627][ T8409] ? trace_lock_acquire+0x14e/0x1f0 [ 142.577644][ T8409] ? __fget_files+0x206/0x3a0 [ 142.577664][ T8409] __sys_sendmsg+0x16e/0x220 [ 142.577679][ T8409] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.577702][ T8409] __do_fast_syscall_32+0x73/0x120 [ 142.577718][ T8409] do_fast_syscall_32+0x32/0x80 [ 142.577732][ T8409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.577751][ T8409] RIP: 0023:0xf7fe6579 [ 142.577761][ T8409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.577772][ T8409] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 142.577782][ T8409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 142.577789][ T8409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.577795][ T8409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.577801][ T8409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.577807][ T8409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.577819][ T8409] [ 142.619363][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.669750][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.672693][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.675398][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 142.678480][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 142.684480][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.687152][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.689500][ T9] usb 8-1: Product: syz [ 142.690773][ T9] usb 8-1: Manufacturer: syz [ 142.700710][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 142.702277][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 142.709116][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 142.710955][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 142.955871][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 142.957782][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 142.959908][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 142.959951][ T56] usb 8-1: USB disconnect, device number 10 [ 142.961792][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 142.961802][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.964978][ T8422] netlink: 72 bytes leftover after parsing attributes in process `syz.4.750'. [ 143.096340][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.206447][ T8433] netlink: 72 bytes leftover after parsing attributes in process `syz.4.751'. [ 143.224820][ T8433] FAULT_INJECTION: forcing a failure. [ 143.224820][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 143.228466][ T8433] CPU: 3 UID: 0 PID: 8433 Comm: syz.4.751 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 143.228482][ T8433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.228488][ T8433] Call Trace: [ 143.228493][ T8433] [ 143.228498][ T8433] dump_stack_lvl+0x16c/0x1f0 [ 143.228520][ T8433] should_fail_ex+0x50a/0x650 [ 143.228539][ T8433] ? fs_reclaim_acquire+0xae/0x150 [ 143.228555][ T8433] ? tomoyo_encode2+0x100/0x3e0 [ 143.228570][ T8433] should_failslab+0xc2/0x120 [ 143.228582][ T8433] __kmalloc_noprof+0xcb/0x510 [ 143.228600][ T8433] ? rcu_is_watching+0x12/0xc0 [ 143.228615][ T8433] tomoyo_encode2+0x100/0x3e0 [ 143.228631][ T8433] tomoyo_encode+0x29/0x50 [ 143.228645][ T8433] tomoyo_realpath_from_path+0x19d/0x720 [ 143.228662][ T8433] ? tomoyo_path_number_perm+0x235/0x590 [ 143.228676][ T8433] tomoyo_path_number_perm+0x248/0x590 [ 143.228688][ T8433] ? tomoyo_path_number_perm+0x235/0x590 [ 143.228701][ T8433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.228725][ T8433] ? __pfx_lock_release+0x10/0x10 [ 143.228741][ T8433] ? trace_lock_acquire+0x14e/0x1f0 [ 143.228756][ T8433] ? lock_acquire+0x2f/0xb0 [ 143.228770][ T8433] ? __fget_files+0x40/0x3a0 [ 143.228788][ T8433] ? __fget_files+0x206/0x3a0 [ 143.228805][ T8433] security_file_ioctl_compat+0x9b/0x240 [ 143.228821][ T8433] __do_compat_sys_ioctl+0x4e/0x2c0 [ 143.228836][ T8433] __do_fast_syscall_32+0x73/0x120 [ 143.228852][ T8433] do_fast_syscall_32+0x32/0x80 [ 143.228866][ T8433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.228886][ T8433] RIP: 0023:0xf7f56579 [ 143.228895][ T8433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.228906][ T8433] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 143.228916][ T8433] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000400448e6 [ 143.228923][ T8433] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.228929][ T8433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.228935][ T8433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 143.228941][ T8433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.228953][ T8433] [ 143.228962][ T8433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.636065][ T8475] overlayfs: missing 'lowerdir' [ 143.647717][ T8478] FAULT_INJECTION: forcing a failure. [ 143.647717][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 143.657950][ T8478] CPU: 2 UID: 0 PID: 8478 Comm: syz.2.759 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 143.657968][ T8478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.657975][ T8478] Call Trace: [ 143.657979][ T8478] [ 143.657984][ T8478] dump_stack_lvl+0x16c/0x1f0 [ 143.658006][ T8478] should_fail_ex+0x50a/0x650 [ 143.658026][ T8478] ? fs_reclaim_acquire+0xae/0x150 [ 143.658042][ T8478] should_failslab+0xc2/0x120 [ 143.658053][ T8478] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 143.658071][ T8478] ? __alloc_skb+0x2b1/0x380 [ 143.658090][ T8478] __alloc_skb+0x2b1/0x380 [ 143.658104][ T8478] ? __pfx___alloc_skb+0x10/0x10 [ 143.658119][ T8478] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 143.658137][ T8478] netlink_alloc_large_skb+0x69/0x130 [ 143.658152][ T8478] netlink_sendmsg+0x689/0xd70 [ 143.658168][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.658194][ T8478] ____sys_sendmsg+0xaaf/0xc90 [ 143.658207][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.658218][ T8478] ? get_compat_msghdr+0x11b/0x170 [ 143.658236][ T8478] ___sys_sendmsg+0x135/0x1e0 [ 143.658253][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.658305][ T8478] ? __pfx_lock_release+0x10/0x10 [ 143.658322][ T8478] ? trace_lock_acquire+0x14e/0x1f0 [ 143.658338][ T8478] ? __fget_files+0x206/0x3a0 [ 143.658360][ T8478] __sys_sendmsg+0x16e/0x220 [ 143.658376][ T8478] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.658399][ T8478] __do_fast_syscall_32+0x73/0x120 [ 143.658415][ T8478] do_fast_syscall_32+0x32/0x80 [ 143.658428][ T8478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.658447][ T8478] RIP: 0023:0xf748e579 [ 143.658456][ T8478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.658467][ T8478] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 143.658478][ T8478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 143.658484][ T8478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.658490][ T8478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.658496][ T8478] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 143.658503][ T8478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.658515][ T8478] [ 143.667020][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 143.739486][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 143.792820][ T8490] batadv1: entered promiscuous mode [ 143.794366][ T8490] batadv1: entered allmulticast mode [ 143.836088][ T8494] FAULT_INJECTION: forcing a failure. [ 143.836088][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.842985][ T8494] CPU: 2 UID: 0 PID: 8494 Comm: syz.0.765 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 143.843004][ T8494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.843028][ T8494] Call Trace: [ 143.843032][ T8494] [ 143.843037][ T8494] dump_stack_lvl+0x16c/0x1f0 [ 143.843059][ T8494] should_fail_ex+0x50a/0x650 [ 143.843080][ T8494] _copy_to_user+0x32/0xd0 [ 143.843104][ T8494] simple_read_from_buffer+0xd0/0x160 [ 143.843122][ T8494] proc_fail_nth_read+0x198/0x270 [ 143.843137][ T8494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.843151][ T8494] ? rw_verify_area+0xcf/0x680 [ 143.843166][ T8494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.843179][ T8494] vfs_read+0x1df/0xbf0 [ 143.843194][ T8494] ? __fget_files+0x1fc/0x3a0 [ 143.843210][ T8494] ? __pfx___mutex_lock+0x10/0x10 [ 143.843229][ T8494] ? __pfx_vfs_read+0x10/0x10 [ 143.843247][ T8494] ? __fget_files+0x206/0x3a0 [ 143.843265][ T8494] ksys_read+0x12b/0x250 [ 143.843279][ T8494] ? __pfx_ksys_read+0x10/0x10 [ 143.843298][ T8494] __do_fast_syscall_32+0x73/0x120 [ 143.843313][ T8494] do_fast_syscall_32+0x32/0x80 [ 143.843327][ T8494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.843347][ T8494] RIP: 0023:0xf7fe6579 [ 143.843356][ T8494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.843367][ T8494] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 143.843378][ T8494] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 143.843385][ T8494] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 143.843391][ T8494] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 143.843397][ T8494] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 143.843402][ T8494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.843415][ T8494] [ 143.939523][ T8500] ALSA: mixer_oss: invalid OSS volume 'u' [ 144.082484][ T8512] FAULT_INJECTION: forcing a failure. [ 144.082484][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 144.086170][ T8512] CPU: 3 UID: 0 PID: 8512 Comm: syz.4.769 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 144.086186][ T8512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.086193][ T8512] Call Trace: [ 144.086197][ T8512] [ 144.086202][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 144.086222][ T8512] should_fail_ex+0x50a/0x650 [ 144.086242][ T8512] ? fs_reclaim_acquire+0xae/0x150 [ 144.086259][ T8512] should_failslab+0xc2/0x120 [ 144.086271][ T8512] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 144.086289][ T8512] ? __alloc_skb+0x2b1/0x380 [ 144.086307][ T8512] __alloc_skb+0x2b1/0x380 [ 144.086321][ T8512] ? __pfx___alloc_skb+0x10/0x10 [ 144.086337][ T8512] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 144.086354][ T8512] netlink_alloc_large_skb+0x69/0x130 [ 144.086370][ T8512] netlink_sendmsg+0x689/0xd70 [ 144.086386][ T8512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.086405][ T8512] ____sys_sendmsg+0xaaf/0xc90 [ 144.086418][ T8512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.086429][ T8512] ? get_compat_msghdr+0x11b/0x170 [ 144.086447][ T8512] ___sys_sendmsg+0x135/0x1e0 [ 144.086463][ T8512] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.086483][ T8512] ? __pfx_lock_release+0x10/0x10 [ 144.086506][ T8512] ? trace_lock_acquire+0x14e/0x1f0 [ 144.086522][ T8512] ? __fget_files+0x206/0x3a0 [ 144.086542][ T8512] __sys_sendmsg+0x16e/0x220 [ 144.086558][ T8512] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.086581][ T8512] __do_fast_syscall_32+0x73/0x120 [ 144.086598][ T8512] do_fast_syscall_32+0x32/0x80 [ 144.086611][ T8512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.086632][ T8512] RIP: 0023:0xf7f56579 [ 144.086641][ T8512] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.086651][ T8512] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 144.086661][ T8512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 144.086668][ T8512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.086674][ T8512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.086680][ T8512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.086686][ T8512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.086698][ T8512] [ 144.153691][ C3] vkms_vblank_simulate: vblank timer overrun [ 144.166401][ T8514] overlayfs: missing 'lowerdir' [ 144.237789][ T8516] input: syz0 as /devices/virtual/input/input8 [ 144.412597][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 144.987168][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 144.995748][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 145.042916][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 145.045380][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 145.047790][ T8557] netlink: 'syz.2.783': attribute type 20 has an invalid length. [ 145.617976][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.854559][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 146.096469][ T8583] FAULT_INJECTION: forcing a failure. [ 146.096469][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 146.100786][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.3.790 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 146.100819][ T8583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.100827][ T8583] Call Trace: [ 146.100831][ T8583] [ 146.100835][ T8583] dump_stack_lvl+0x16c/0x1f0 [ 146.100857][ T8583] should_fail_ex+0x50a/0x650 [ 146.100875][ T8583] ? fs_reclaim_acquire+0xae/0x150 [ 146.100892][ T8583] should_failslab+0xc2/0x120 [ 146.100903][ T8583] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 146.100921][ T8583] ? vm_area_dup+0x21/0x2f0 [ 146.100941][ T8583] vm_area_dup+0x21/0x2f0 [ 146.100956][ T8583] __split_vma+0x181/0x1160 [ 146.100974][ T8583] ? __pfx___schedule+0x10/0x10 [ 146.100985][ T8583] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.100998][ T8583] ? __pfx___split_vma+0x10/0x10 [ 146.101018][ T8583] ? mark_held_locks+0x9f/0xe0 [ 146.101035][ T8583] vms_gather_munmap_vmas+0x1c3/0x1730 [ 146.101056][ T8583] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 146.101073][ T8583] ? mas_walk+0x847/0x910 [ 146.101085][ T8583] ? mas_walk+0x6a6/0x910 [ 146.101101][ T8583] __mmap_region+0x328/0x2760 [ 146.101112][ T8583] ? __pfx___mmap_region+0x10/0x10 [ 146.101128][ T8583] ? finish_task_switch.isra.0+0x217/0xcc0 [ 146.101150][ T8583] ? hlock_class+0x4e/0x130 [ 146.101161][ T8583] ? mark_lock+0xb5/0xc60 [ 146.101176][ T8583] ? __pfx_mark_lock+0x10/0x10 [ 146.101190][ T8583] ? __pfx_mark_lock+0x10/0x10 [ 146.101205][ T8583] ? mark_held_locks+0x9f/0xe0 [ 146.101238][ T8583] mmap_region+0x1ab/0x3f0 [ 146.101250][ T8583] do_mmap+0xd8d/0x11b0 [ 146.101267][ T8583] ? __pfx_do_mmap+0x10/0x10 [ 146.101282][ T8583] ? __pfx_down_write_killable+0x10/0x10 [ 146.101299][ T8583] vm_mmap_pgoff+0x203/0x3a0 [ 146.101319][ T8583] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 146.101336][ T8583] ? __fget_files+0x206/0x3a0 [ 146.101354][ T8583] ksys_mmap_pgoff+0x32c/0x5c0 [ 146.101368][ T8583] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 146.101383][ T8583] __do_fast_syscall_32+0x73/0x120 [ 146.101398][ T8583] do_fast_syscall_32+0x32/0x80 [ 146.101411][ T8583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.101434][ T8583] RIP: 0023:0xf7f72579 [ 146.101443][ T8583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.101453][ T8583] RSP: 002b:00000000f505455c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 146.101464][ T8583] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 146.101470][ T8583] RDX: 0000000001000002 RSI: 0000000000011012 RDI: 000000000000000c [ 146.101476][ T8583] RBP: 00000000ffffd000 R08: 0000000000000000 R09: 0000000000000000 [ 146.101482][ T8583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.101488][ T8583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.101501][ T8583] [ 146.795096][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.023595][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 147.031209][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 147.034186][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 147.981555][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.136001][ T8621] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 148.143766][ T8621] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.232985][ T8632] FAULT_INJECTION: forcing a failure. [ 148.232985][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.242933][ T8632] CPU: 2 UID: 0 PID: 8632 Comm: syz.0.800 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 148.242951][ T8632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.242959][ T8632] Call Trace: [ 148.242963][ T8632] [ 148.242969][ T8632] dump_stack_lvl+0x16c/0x1f0 [ 148.242994][ T8632] should_fail_ex+0x50a/0x650 [ 148.243015][ T8632] strncpy_from_user+0x3b/0x2d0 [ 148.243033][ T8632] getname_flags.part.0+0x8f/0x550 [ 148.243049][ T8632] getname+0x8d/0xe0 [ 148.243064][ T8632] do_sys_openat2+0x104/0x1e0 [ 148.243076][ T8632] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.243089][ T8632] ? __fget_files+0x206/0x3a0 [ 148.243107][ T8632] __ia32_compat_sys_openat+0x16e/0x210 [ 148.243120][ T8632] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 148.243132][ T8632] ? ksys_write+0x1ba/0x250 [ 148.243151][ T8632] __do_fast_syscall_32+0x73/0x120 [ 148.243169][ T8632] do_fast_syscall_32+0x32/0x80 [ 148.243182][ T8632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.243208][ T8632] RIP: 0023:0xf7fe6579 [ 148.243217][ T8632] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 148.243228][ T8632] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 148.243239][ T8632] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 148.243245][ T8632] RDX: 0000000000004002 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.243252][ T8632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.243258][ T8632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.243264][ T8632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.243276][ T8632] [ 148.365463][ T40] audit: type=1326 audit(1739981863.029:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.372390][ T40] audit: type=1326 audit(1739981863.029:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.380449][ T40] audit: type=1326 audit(1739981863.038:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.388512][ T40] audit: type=1326 audit(1739981863.038:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.394840][ T40] audit: type=1326 audit(1739981863.038:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.400809][ T40] audit: type=1326 audit(1739981863.038:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.406492][ T40] audit: type=1326 audit(1739981863.038:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.412248][ T40] audit: type=1326 audit(1739981863.038:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.418046][ T40] audit: type=1326 audit(1739981863.038:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.426299][ T40] audit: type=1326 audit(1739981863.038:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 149.082638][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 149.089906][ T8657] batadv2: entered promiscuous mode [ 149.091889][ T8657] batadv2: entered allmulticast mode [ 149.151056][ T8659] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 149.153516][ T8659] netlink: 224 bytes leftover after parsing attributes in process `syz.2.804'. [ 149.210595][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.275942][ T8666] random: crng reseeded on system resumption [ 149.520956][ T8669] team0 (unregistering): Port device team_slave_0 removed [ 149.526056][ T8669] team0 (unregistering): Port device team_slave_1 removed [ 149.528768][ T8669] team0 (unregistering): Port device veth0_to_team removed [ 149.752777][ T8675] netlink: 'syz.2.808': attribute type 30 has an invalid length. [ 150.180347][ T8689] batadv1: entered promiscuous mode [ 150.181784][ T8689] batadv1: entered allmulticast mode [ 150.258362][ T63] hid-generic 0005:07C0:06E6.0004: item fetching failed at offset 0/1 [ 150.261474][ T63] hid-generic 0005:07C0:06E6.0004: probe with driver hid-generic failed with error -22 [ 150.408608][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.809634][ T8715] Invalid ELF header magic: != ELF [ 150.986199][ T8723] FAULT_INJECTION: forcing a failure. [ 150.986199][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.989974][ T8723] CPU: 3 UID: 0 PID: 8723 Comm: syz.3.817 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 150.989988][ T8723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.989995][ T8723] Call Trace: [ 150.990000][ T8723] [ 150.990038][ T8723] dump_stack_lvl+0x16c/0x1f0 [ 150.990058][ T8723] should_fail_ex+0x50a/0x650 [ 150.990083][ T8723] _copy_to_user+0x32/0xd0 [ 150.990096][ T8723] bpf_prog_test_run_syscall+0x4c1/0x770 [ 150.990114][ T8723] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 150.990132][ T8723] ? fput+0x67/0x440 [ 150.990145][ T8723] ? __bpf_prog_get+0xa0/0x290 [ 150.990161][ T8723] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 150.990175][ T8723] __sys_bpf+0xfc6/0x49c0 [ 150.990192][ T8723] ? __pfx_lock_release+0x10/0x10 [ 150.990209][ T8723] ? __pfx___sys_bpf+0x10/0x10 [ 150.990225][ T8723] ? vfs_write+0x306/0x1150 [ 150.990242][ T8723] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 150.990264][ T8723] ? fput+0x67/0x440 [ 150.990274][ T8723] ? ksys_write+0x1ba/0x250 [ 150.990288][ T8723] ? __pfx_ksys_write+0x10/0x10 [ 150.990305][ T8723] __ia32_sys_bpf+0x76/0xe0 [ 150.990315][ T8723] __do_fast_syscall_32+0x73/0x120 [ 150.990330][ T8723] do_fast_syscall_32+0x32/0x80 [ 150.990344][ T8723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.990363][ T8723] RIP: 0023:0xf7f72579 [ 150.990372][ T8723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.990383][ T8723] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 150.990393][ T8723] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 150.990399][ T8723] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 150.990406][ T8723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.990411][ T8723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.990417][ T8723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.990429][ T8723] [ 151.216884][ T8730] __nla_validate_parse: 2 callbacks suppressed [ 151.216899][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 151.225558][ T8730] batadv3: entered promiscuous mode [ 151.227026][ T8730] batadv3: entered allmulticast mode [ 151.647466][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.791768][ T8751] FAULT_INJECTION: forcing a failure. [ 151.791768][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 151.795210][ T8751] CPU: 2 UID: 0 PID: 8751 Comm: syz.0.827 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 151.795225][ T8751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.795233][ T8751] Call Trace: [ 151.795237][ T8751] [ 151.795242][ T8751] dump_stack_lvl+0x16c/0x1f0 [ 151.795263][ T8751] should_fail_ex+0x50a/0x650 [ 151.795282][ T8751] ? fs_reclaim_acquire+0xae/0x150 [ 151.795298][ T8751] ? tomoyo_encode2+0x100/0x3e0 [ 151.795314][ T8751] should_failslab+0xc2/0x120 [ 151.795326][ T8751] __kmalloc_noprof+0xcb/0x510 [ 151.795344][ T8751] ? rcu_is_watching+0x12/0xc0 [ 151.795358][ T8751] tomoyo_encode2+0x100/0x3e0 [ 151.795374][ T8751] tomoyo_encode+0x29/0x50 [ 151.795388][ T8751] tomoyo_realpath_from_path+0x19d/0x720 [ 151.795404][ T8751] ? tomoyo_path_number_perm+0x235/0x590 [ 151.795418][ T8751] tomoyo_path_number_perm+0x248/0x590 [ 151.795430][ T8751] ? tomoyo_path_number_perm+0x235/0x590 [ 151.795443][ T8751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.795467][ T8751] ? __pfx_lock_release+0x10/0x10 [ 151.795483][ T8751] ? trace_lock_acquire+0x14e/0x1f0 [ 151.795498][ T8751] ? lock_acquire+0x2f/0xb0 [ 151.795512][ T8751] ? __fget_files+0x40/0x3a0 [ 151.795530][ T8751] ? __fget_files+0x206/0x3a0 [ 151.795547][ T8751] security_file_ioctl_compat+0x9b/0x240 [ 151.795564][ T8751] __do_compat_sys_ioctl+0x4e/0x2c0 [ 151.795579][ T8751] __do_fast_syscall_32+0x73/0x120 [ 151.795595][ T8751] do_fast_syscall_32+0x32/0x80 [ 151.795609][ T8751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.795629][ T8751] RIP: 0023:0xf7fe6579 [ 151.795638][ T8751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.795648][ T8751] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 151.795659][ T8751] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800442d2 [ 151.795666][ T8751] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.795672][ T8751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.795678][ T8751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.795684][ T8751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.795696][ T8751] [ 151.795706][ T8751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.940410][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 151.945255][ T8757] batadv4: entered promiscuous mode [ 151.948473][ T8757] batadv4: entered allmulticast mode [ 152.835557][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.131175][ T8775] FAULT_INJECTION: forcing a failure. [ 153.131175][ T8775] name failslab, interval 1, probability 0, space 0, times 0 [ 153.135441][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.4.837 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 153.135456][ T8775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.135463][ T8775] Call Trace: [ 153.135466][ T8775] [ 153.135472][ T8775] dump_stack_lvl+0x16c/0x1f0 [ 153.135494][ T8775] should_fail_ex+0x50a/0x650 [ 153.135513][ T8775] ? fs_reclaim_acquire+0xae/0x150 [ 153.135530][ T8775] should_failslab+0xc2/0x120 [ 153.135541][ T8775] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 153.135559][ T8775] ? __alloc_skb+0x2b1/0x380 [ 153.135577][ T8775] __alloc_skb+0x2b1/0x380 [ 153.135591][ T8775] ? __pfx___alloc_skb+0x10/0x10 [ 153.135606][ T8775] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 153.135624][ T8775] netlink_alloc_large_skb+0x69/0x130 [ 153.135639][ T8775] netlink_sendmsg+0x689/0xd70 [ 153.135655][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.135673][ T8775] ____sys_sendmsg+0xaaf/0xc90 [ 153.135686][ T8775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.135697][ T8775] ? get_compat_msghdr+0x11b/0x170 [ 153.135714][ T8775] ___sys_sendmsg+0x135/0x1e0 [ 153.135730][ T8775] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.135750][ T8775] ? __pfx_lock_release+0x10/0x10 [ 153.135767][ T8775] ? trace_lock_acquire+0x14e/0x1f0 [ 153.135784][ T8775] ? __fget_files+0x206/0x3a0 [ 153.135803][ T8775] __sys_sendmsg+0x16e/0x220 [ 153.135818][ T8775] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.135841][ T8775] __do_fast_syscall_32+0x73/0x120 [ 153.135857][ T8775] do_fast_syscall_32+0x32/0x80 [ 153.135870][ T8775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.135889][ T8775] RIP: 0023:0xf7f56579 [ 153.135898][ T8775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.135909][ T8775] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 153.135920][ T8775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 153.135926][ T8775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.135932][ T8775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.135938][ T8775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.135944][ T8775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.135956][ T8775] [ 153.225967][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.247244][ T8777] FAULT_INJECTION: forcing a failure. [ 153.247244][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.250390][ T8777] CPU: 3 UID: 0 PID: 8777 Comm: syz.4.838 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 153.250405][ T8777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.250412][ T8777] Call Trace: [ 153.250416][ T8777] [ 153.250422][ T8777] dump_stack_lvl+0x16c/0x1f0 [ 153.250442][ T8777] should_fail_ex+0x50a/0x650 [ 153.250463][ T8777] _copy_from_user+0x2e/0xd0 [ 153.250476][ T8777] bpf_prog_get_info_by_fd+0x23d/0x2d30 [ 153.250493][ T8777] ? __lock_acquire+0xcc5/0x3c40 [ 153.250516][ T8777] ? __pfx_bpf_prog_get_info_by_fd+0x10/0x10 [ 153.250542][ T8777] ? __fget_files+0x206/0x3a0 [ 153.250563][ T8777] bpf_obj_get_info_by_fd+0x547/0xc80 [ 153.250579][ T8777] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 153.250594][ T8777] ? __might_fault+0x13b/0x190 [ 153.250606][ T8777] ? __pfx_lock_release+0x10/0x10 [ 153.250621][ T8777] ? trace_lock_acquire+0x14e/0x1f0 [ 153.250635][ T8777] ? lock_acquire+0x2f/0xb0 [ 153.250649][ T8777] ? __might_fault+0xe3/0x190 [ 153.250659][ T8777] ? __might_fault+0xe3/0x190 [ 153.250673][ T8777] __sys_bpf+0x1cc3/0x49c0 [ 153.250689][ T8777] ? __pfx_lock_release+0x10/0x10 [ 153.250704][ T8777] ? __pfx___sys_bpf+0x10/0x10 [ 153.250720][ T8777] ? vfs_write+0x306/0x1150 [ 153.250738][ T8777] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 153.250760][ T8777] ? fput+0x67/0x440 [ 153.250771][ T8777] ? ksys_write+0x1ba/0x250 [ 153.250785][ T8777] ? __pfx_ksys_write+0x10/0x10 [ 153.250802][ T8777] __ia32_sys_bpf+0x76/0xe0 [ 153.256687][ T8777] __do_fast_syscall_32+0x73/0x120 [ 153.256704][ T8777] do_fast_syscall_32+0x32/0x80 [ 153.256722][ T8777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.256749][ T8777] RIP: 0023:0xf7f56579 [ 153.256759][ T8777] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.256769][ T8777] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 153.256780][ T8777] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000740 [ 153.256787][ T8777] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.256793][ T8777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.256799][ T8777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.256805][ T8777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.256817][ T8777] [ 153.467559][ T8782] netfs: Couldn't get user pages (rc=-14) [ 153.554705][ T8787] FAULT_INJECTION: forcing a failure. [ 153.554705][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 153.559603][ T8787] CPU: 0 UID: 0 PID: 8787 Comm: syz.2.842 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 153.559618][ T8787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.559625][ T8787] Call Trace: [ 153.559629][ T8787] [ 153.559634][ T8787] dump_stack_lvl+0x116/0x1f0 [ 153.559658][ T8787] should_fail_ex+0x50a/0x650 [ 153.559679][ T8787] should_failslab+0xc2/0x120 [ 153.559691][ T8787] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 153.559711][ T8787] ? rcu_is_watching+0x12/0xc0 [ 153.559724][ T8787] ? netlink_realloc_groups+0x1a5/0x2c0 [ 153.559742][ T8787] krealloc_noprof+0x1fb/0x380 [ 153.559760][ T8787] netlink_realloc_groups+0x1a5/0x2c0 [ 153.559776][ T8787] netlink_setsockopt+0x551/0x8b0 [ 153.559791][ T8787] ? __pfx_netlink_setsockopt+0x10/0x10 [ 153.559808][ T8787] ? __pfx_netlink_setsockopt+0x10/0x10 [ 153.559822][ T8787] do_sock_setsockopt+0x222/0x480 [ 153.559842][ T8787] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 153.559860][ T8787] ? lock_acquire+0x2f/0xb0 [ 153.559882][ T8787] __sys_setsockopt+0x1a0/0x230 [ 153.559899][ T8787] __ia32_sys_setsockopt+0xbc/0x160 [ 153.559913][ T8787] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.559927][ T8787] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 153.559941][ T8787] __do_fast_syscall_32+0x73/0x120 [ 153.559956][ T8787] do_fast_syscall_32+0x32/0x80 [ 153.559970][ T8787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.559990][ T8787] RIP: 0023:0xf748e579 [ 153.559999][ T8787] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.560010][ T8787] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 153.560020][ T8787] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000010e [ 153.560026][ T8787] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.560032][ T8787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.560039][ T8787] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.560044][ T8787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.560057][ T8787] [ 153.619392][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.042633][ T222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.902466][ T8798] FAULT_INJECTION: forcing a failure. [ 154.902466][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 154.906203][ T8798] CPU: 2 UID: 0 PID: 8798 Comm: syz.2.846 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 154.906218][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.906225][ T8798] Call Trace: [ 154.906229][ T8798] [ 154.906235][ T8798] dump_stack_lvl+0x16c/0x1f0 [ 154.906255][ T8798] should_fail_ex+0x50a/0x650 [ 154.906274][ T8798] ? fs_reclaim_acquire+0xae/0x150 [ 154.906291][ T8798] should_failslab+0xc2/0x120 [ 154.906303][ T8798] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 154.906320][ T8798] ? __alloc_skb+0x2b1/0x380 [ 154.906339][ T8798] __alloc_skb+0x2b1/0x380 [ 154.906353][ T8798] ? __pfx___alloc_skb+0x10/0x10 [ 154.906368][ T8798] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.906385][ T8798] netlink_alloc_large_skb+0x69/0x130 [ 154.906405][ T8798] netlink_sendmsg+0x689/0xd70 [ 154.906421][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.906439][ T8798] ____sys_sendmsg+0xaaf/0xc90 [ 154.906452][ T8798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.906463][ T8798] ? get_compat_msghdr+0x11b/0x170 [ 154.906481][ T8798] ___sys_sendmsg+0x135/0x1e0 [ 154.906497][ T8798] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.906518][ T8798] ? __pfx_lock_release+0x10/0x10 [ 154.906534][ T8798] ? trace_lock_acquire+0x14e/0x1f0 [ 154.906551][ T8798] ? __fget_files+0x206/0x3a0 [ 154.906570][ T8798] __sys_sendmsg+0x16e/0x220 [ 154.906585][ T8798] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.906608][ T8798] __do_fast_syscall_32+0x73/0x120 [ 154.906624][ T8798] do_fast_syscall_32+0x32/0x80 [ 154.906638][ T8798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.906657][ T8798] RIP: 0023:0xf748e579 [ 154.906666][ T8798] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.906676][ T8798] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 154.906688][ T8798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 154.906695][ T8798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.906700][ T8798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.906706][ T8798] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.906712][ T8798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.906723][ T8798] [ 155.239496][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.303613][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 155.453248][ T8808] FAULT_INJECTION: forcing a failure. [ 155.453248][ T8808] name failslab, interval 1, probability 0, space 0, times 0 [ 155.456698][ T8808] CPU: 3 UID: 0 PID: 8808 Comm: syz.0.849 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 155.456713][ T8808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.456720][ T8808] Call Trace: [ 155.456725][ T8808] [ 155.456729][ T8808] dump_stack_lvl+0x16c/0x1f0 [ 155.456750][ T8808] should_fail_ex+0x50a/0x650 [ 155.456770][ T8808] ? fs_reclaim_acquire+0xae/0x150 [ 155.456787][ T8808] should_failslab+0xc2/0x120 [ 155.456798][ T8808] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 155.456816][ T8808] ? __alloc_skb+0x2b1/0x380 [ 155.456834][ T8808] __alloc_skb+0x2b1/0x380 [ 155.456848][ T8808] ? __pfx___alloc_skb+0x10/0x10 [ 155.456864][ T8808] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 155.456881][ T8808] netlink_alloc_large_skb+0x69/0x130 [ 155.456896][ T8808] netlink_sendmsg+0x689/0xd70 [ 155.456912][ T8808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.456930][ T8808] ____sys_sendmsg+0xaaf/0xc90 [ 155.456944][ T8808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.456954][ T8808] ? get_compat_msghdr+0x11b/0x170 [ 155.456973][ T8808] ___sys_sendmsg+0x135/0x1e0 [ 155.456989][ T8808] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.457009][ T8808] ? __pfx_lock_release+0x10/0x10 [ 155.457025][ T8808] ? trace_lock_acquire+0x14e/0x1f0 [ 155.457042][ T8808] ? __fget_files+0x206/0x3a0 [ 155.457061][ T8808] __sys_sendmsg+0x16e/0x220 [ 155.457077][ T8808] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.457105][ T8808] __do_fast_syscall_32+0x73/0x120 [ 155.457121][ T8808] do_fast_syscall_32+0x32/0x80 [ 155.457134][ T8808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.457154][ T8808] RIP: 0023:0xf7fe6579 [ 155.457163][ T8808] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.457173][ T8808] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 155.457184][ T8808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 155.457190][ T8808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.457196][ T8808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.457202][ T8808] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.457208][ T8808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.457219][ T8808] [ 155.467466][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.543697][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 155.547384][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.550790][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 155.554159][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 155.558855][ T8810] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 155.560792][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.564779][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.567528][ T9] usb 8-1: Product: syz [ 155.569066][ T9] usb 8-1: Manufacturer: syz [ 155.576281][ T8810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.576947][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 155.580783][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 155.585389][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 155.587218][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 155.603437][ T8810] geneve3: entered allmulticast mode [ 155.609737][ T8810] bond2: (slave geneve3): making interface the new active one [ 155.614107][ T8810] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 155.901626][ T834] usb 8-1: USB disconnect, device number 11 [ 156.028221][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 156.045411][ T8820] batadv3: entered promiscuous mode [ 156.046939][ T8820] batadv3: entered allmulticast mode [ 156.447886][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.984495][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.859'. [ 156.997025][ T8839] batadv4: entered promiscuous mode [ 156.999780][ T8839] batadv4: entered allmulticast mode [ 157.064102][ T8841] FAULT_INJECTION: forcing a failure. [ 157.064102][ T8841] name failslab, interval 1, probability 0, space 0, times 0 [ 157.068728][ T8841] CPU: 1 UID: 0 PID: 8841 Comm: syz.4.860 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 157.068763][ T8841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.068774][ T8841] Call Trace: [ 157.068780][ T8841] [ 157.068788][ T8841] dump_stack_lvl+0x16c/0x1f0 [ 157.068818][ T8841] should_fail_ex+0x50a/0x650 [ 157.068845][ T8841] ? fs_reclaim_acquire+0xae/0x150 [ 157.068870][ T8841] should_failslab+0xc2/0x120 [ 157.068888][ T8841] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 157.068915][ T8841] ? __alloc_skb+0x2b1/0x380 [ 157.068942][ T8841] __alloc_skb+0x2b1/0x380 [ 157.068964][ T8841] ? __pfx___alloc_skb+0x10/0x10 [ 157.068988][ T8841] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 157.069017][ T8841] netlink_alloc_large_skb+0x69/0x130 [ 157.069040][ T8841] netlink_sendmsg+0x689/0xd70 [ 157.069066][ T8841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.069096][ T8841] ____sys_sendmsg+0xaaf/0xc90 [ 157.069117][ T8841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.069133][ T8841] ? get_compat_msghdr+0x11b/0x170 [ 157.069162][ T8841] ___sys_sendmsg+0x135/0x1e0 [ 157.069187][ T8841] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.069221][ T8841] ? __pfx_lock_release+0x10/0x10 [ 157.069245][ T8841] ? trace_lock_acquire+0x14e/0x1f0 [ 157.069273][ T8841] ? __fget_files+0x206/0x3a0 [ 157.069303][ T8841] __sys_sendmsg+0x16e/0x220 [ 157.069327][ T8841] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.069371][ T8841] __do_fast_syscall_32+0x73/0x120 [ 157.069395][ T8841] do_fast_syscall_32+0x32/0x80 [ 157.069415][ T8841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.069442][ T8841] RIP: 0023:0xf7f56579 [ 157.069457][ T8841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.069473][ T8841] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 157.069490][ T8841] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 157.069501][ T8841] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.069511][ T8841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.069521][ T8841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.069531][ T8841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.069552][ T8841] [ 157.114811][ T8843] FAULT_INJECTION: forcing a failure. [ 157.114811][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 157.159223][ T8843] CPU: 0 UID: 0 PID: 8843 Comm: syz.4.861 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 157.159245][ T8843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.159255][ T8843] Call Trace: [ 157.159260][ T8843] [ 157.159268][ T8843] dump_stack_lvl+0x16c/0x1f0 [ 157.159296][ T8843] should_fail_ex+0x50a/0x650 [ 157.159322][ T8843] ? fs_reclaim_acquire+0xae/0x150 [ 157.159342][ T8843] should_failslab+0xc2/0x120 [ 157.159367][ T8843] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 157.159384][ T8843] ? __alloc_skb+0x2b1/0x380 [ 157.159402][ T8843] __alloc_skb+0x2b1/0x380 [ 157.159420][ T8843] ? __pfx___alloc_skb+0x10/0x10 [ 157.159435][ T8843] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 157.159453][ T8843] netlink_alloc_large_skb+0x69/0x130 [ 157.159468][ T8843] netlink_sendmsg+0x689/0xd70 [ 157.159484][ T8843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.159502][ T8843] ____sys_sendmsg+0xaaf/0xc90 [ 157.159516][ T8843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.159527][ T8843] ? get_compat_msghdr+0x11b/0x170 [ 157.159544][ T8843] ___sys_sendmsg+0x135/0x1e0 [ 157.159561][ T8843] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.159581][ T8843] ? __pfx_lock_release+0x10/0x10 [ 157.159598][ T8843] ? trace_lock_acquire+0x14e/0x1f0 [ 157.159614][ T8843] ? __fget_files+0x206/0x3a0 [ 157.159634][ T8843] __sys_sendmsg+0x16e/0x220 [ 157.159649][ T8843] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.159672][ T8843] __do_fast_syscall_32+0x73/0x120 [ 157.159689][ T8843] do_fast_syscall_32+0x32/0x80 [ 157.159702][ T8843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.159721][ T8843] RIP: 0023:0xf7f56579 [ 157.159731][ T8843] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.159742][ T8843] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 157.159752][ T8843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 157.159759][ T8843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.159765][ T8843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.159770][ T8843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.159776][ T8843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.159788][ T8843] [ 157.672987][ T8864] input: syz0 as /devices/virtual/input/input9 [ 157.709786][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.011526][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 158.014967][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 158.295538][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 158.444314][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 158.579803][ T8895] FAULT_INJECTION: forcing a failure. [ 158.579803][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 158.590100][ T8895] CPU: 3 UID: 0 PID: 8895 Comm: syz.2.875 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 158.590120][ T8895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.590130][ T8895] Call Trace: [ 158.590138][ T8895] [ 158.590146][ T8895] dump_stack_lvl+0x16c/0x1f0 [ 158.590173][ T8895] should_fail_ex+0x50a/0x650 [ 158.590199][ T8895] ? fs_reclaim_acquire+0xae/0x150 [ 158.590221][ T8895] ? iovec_from_user.part.0+0xf3/0x130 [ 158.590236][ T8895] should_failslab+0xc2/0x120 [ 158.590253][ T8895] __kmalloc_noprof+0xcb/0x510 [ 158.590276][ T8895] ? find_held_lock+0x2d/0x110 [ 158.590298][ T8895] iovec_from_user.part.0+0xf3/0x130 [ 158.590316][ T8895] __import_iovec+0xd6/0x6d0 [ 158.590338][ T8895] import_iovec+0x108/0x140 [ 158.590357][ T8895] get_compat_msghdr+0x10a/0x170 [ 158.590377][ T8895] ? __pfx_get_compat_msghdr+0x10/0x10 [ 158.590401][ T8895] ___sys_sendmsg+0x1b0/0x1e0 [ 158.590426][ T8895] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.590456][ T8895] ? trace_lock_acquire+0x14e/0x1f0 [ 158.590487][ T8895] __sys_sendmmsg+0x2fa/0x420 [ 158.590512][ T8895] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.590540][ T8895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.590569][ T8895] ? fput+0x67/0x440 [ 158.590585][ T8895] ? ksys_write+0x1ba/0x250 [ 158.590606][ T8895] ? __pfx_ksys_write+0x10/0x10 [ 158.590630][ T8895] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 158.590648][ T8895] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 158.590668][ T8895] __do_fast_syscall_32+0x73/0x120 [ 158.590689][ T8895] do_fast_syscall_32+0x32/0x80 [ 158.590708][ T8895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.590732][ T8895] RIP: 0023:0xf748e579 [ 158.590746][ T8895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.590760][ T8895] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 158.590775][ T8895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0 [ 158.590785][ T8895] RDX: 0000000000000172 RSI: 0000000004001c00 RDI: 0000000000000000 [ 158.590793][ T8895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.590802][ T8895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.590811][ T8895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.590830][ T8895] [ 158.679520][ C3] vkms_vblank_simulate: vblank timer overrun [ 158.906831][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.407412][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'. [ 159.956660][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.959531][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.961758][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.963813][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.966057][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.968382][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.970717][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.973113][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.975500][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.977728][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.980014][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.982163][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.984586][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.987037][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.989554][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.991643][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.994358][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.996475][ T8923] fuse: Unknown parameter 'grouppiä' [ 159.998454][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.000816][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.002477][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.004137][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.005827][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.007614][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.009236][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.010854][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.012531][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.014170][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.015803][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.017478][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.019266][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.020900][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.022548][ T8923] fuse: Unknown parameter 'grouppiä' [ 160.275900][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.342235][ T8936] FAULT_INJECTION: forcing a failure. [ 160.342235][ T8936] name failslab, interval 1, probability 0, space 0, times 0 [ 160.350082][ T8936] CPU: 3 UID: 0 PID: 8936 Comm: syz.2.889 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 160.350107][ T8936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.350114][ T8936] Call Trace: [ 160.350118][ T8936] [ 160.350124][ T8936] dump_stack_lvl+0x16c/0x1f0 [ 160.350146][ T8936] should_fail_ex+0x50a/0x650 [ 160.350166][ T8936] ? fs_reclaim_acquire+0xae/0x150 [ 160.350183][ T8936] ? tomoyo_encode2+0x100/0x3e0 [ 160.350198][ T8936] should_failslab+0xc2/0x120 [ 160.350209][ T8936] __kmalloc_noprof+0xcb/0x510 [ 160.350228][ T8936] ? rcu_is_watching+0x12/0xc0 [ 160.350242][ T8936] tomoyo_encode2+0x100/0x3e0 [ 160.350258][ T8936] tomoyo_encode+0x29/0x50 [ 160.350272][ T8936] tomoyo_realpath_from_path+0x19d/0x720 [ 160.350288][ T8936] ? tomoyo_path_number_perm+0x235/0x590 [ 160.350302][ T8936] tomoyo_path_number_perm+0x248/0x590 [ 160.350314][ T8936] ? tomoyo_path_number_perm+0x235/0x590 [ 160.350327][ T8936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.350351][ T8936] ? __pfx_lock_release+0x10/0x10 [ 160.350367][ T8936] ? trace_lock_acquire+0x14e/0x1f0 [ 160.350381][ T8936] ? lock_acquire+0x2f/0xb0 [ 160.350395][ T8936] ? __fget_files+0x40/0x3a0 [ 160.350413][ T8936] ? __fget_files+0x206/0x3a0 [ 160.350430][ T8936] security_file_ioctl_compat+0x9b/0x240 [ 160.350446][ T8936] __do_compat_sys_ioctl+0x4e/0x2c0 [ 160.350461][ T8936] __do_fast_syscall_32+0x73/0x120 [ 160.350477][ T8936] do_fast_syscall_32+0x32/0x80 [ 160.350491][ T8936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.350510][ T8936] RIP: 0023:0xf748e579 [ 160.350519][ T8936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.350530][ T8936] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 160.350541][ T8936] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b28 [ 160.350547][ T8936] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.350553][ T8936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.350559][ T8936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.350565][ T8936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.350577][ T8936] [ 160.350590][ T8936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.563800][ T8948] FAULT_INJECTION: forcing a failure. [ 160.563800][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.568132][ T8948] CPU: 2 UID: 0 PID: 8948 Comm: syz.4.892 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 160.568147][ T8948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.568154][ T8948] Call Trace: [ 160.568159][ T8948] [ 160.568165][ T8948] dump_stack_lvl+0x16c/0x1f0 [ 160.568186][ T8948] should_fail_ex+0x50a/0x650 [ 160.568208][ T8948] _copy_to_user+0x32/0xd0 [ 160.568221][ T8948] simple_read_from_buffer+0xd0/0x160 [ 160.568238][ T8948] proc_fail_nth_read+0x198/0x270 [ 160.568253][ T8948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.568267][ T8948] ? rw_verify_area+0xcf/0x680 [ 160.568285][ T8948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.568300][ T8948] vfs_read+0x1df/0xbf0 [ 160.568316][ T8948] ? __fget_files+0x1fc/0x3a0 [ 160.568333][ T8948] ? __pfx___mutex_lock+0x10/0x10 [ 160.568348][ T8948] ? __pfx_vfs_read+0x10/0x10 [ 160.568400][ T8948] ? __fget_files+0x206/0x3a0 [ 160.568420][ T8948] ksys_read+0x12b/0x250 [ 160.568435][ T8948] ? __pfx_ksys_read+0x10/0x10 [ 160.568458][ T8948] __do_fast_syscall_32+0x73/0x120 [ 160.568474][ T8948] do_fast_syscall_32+0x32/0x80 [ 160.568487][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.568507][ T8948] RIP: 0023:0xf7f56579 [ 160.568516][ T8948] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.568527][ T8948] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 160.568537][ T8948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5076620 [ 160.568544][ T8948] RDX: 000000000000000f RSI: 00000000f73dcff4 RDI: 0000000000000000 [ 160.568550][ T8948] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 160.568556][ T8948] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.568562][ T8948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.568574][ T8948] [ 160.862940][ C3] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.964360][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 160.972242][ T8959] bond1: entered promiscuous mode [ 160.974222][ T8959] bond1: entered allmulticast mode [ 161.482934][ T104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.738586][ T8976] input: syz0 as /devices/virtual/input/input10 [ 162.303524][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 162.324536][ T8989] bond2: entered promiscuous mode [ 162.326115][ T8989] bond2: entered allmulticast mode [ 162.366925][ T8995] FAULT_INJECTION: forcing a failure. [ 162.366925][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 162.370492][ T8995] CPU: 3 UID: 0 PID: 8995 Comm: syz.4.908 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 162.370506][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.370513][ T8995] Call Trace: [ 162.370517][ T8995] [ 162.370522][ T8995] dump_stack_lvl+0x16c/0x1f0 [ 162.370544][ T8995] should_fail_ex+0x50a/0x650 [ 162.370565][ T8995] should_failslab+0xc2/0x120 [ 162.370577][ T8995] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 162.370597][ T8995] ? skb_clone+0x190/0x3f0 [ 162.370617][ T8995] skb_clone+0x190/0x3f0 [ 162.370633][ T8995] netlink_deliver_tap+0xabd/0xd30 [ 162.370650][ T8995] netlink_unicast+0x5e1/0x7f0 [ 162.370666][ T8995] ? __pfx_netlink_unicast+0x10/0x10 [ 162.370681][ T8995] ? __phys_addr_symbol+0x30/0x80 [ 162.370693][ T8995] ? __check_object_size+0x488/0x710 [ 162.370707][ T8995] netlink_sendmsg+0x8b8/0xd70 [ 162.370722][ T8995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.370741][ T8995] ____sys_sendmsg+0xaaf/0xc90 [ 162.370755][ T8995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.370766][ T8995] ? get_compat_msghdr+0x11b/0x170 [ 162.370784][ T8995] ___sys_sendmsg+0x135/0x1e0 [ 162.370801][ T8995] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.370821][ T8995] ? __pfx_lock_release+0x10/0x10 [ 162.370838][ T8995] ? trace_lock_acquire+0x14e/0x1f0 [ 162.370855][ T8995] ? __fget_files+0x206/0x3a0 [ 162.370875][ T8995] __sys_sendmsg+0x16e/0x220 [ 162.370890][ T8995] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.370913][ T8995] __do_fast_syscall_32+0x73/0x120 [ 162.370930][ T8995] do_fast_syscall_32+0x32/0x80 [ 162.370944][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.370963][ T8995] RIP: 0023:0xf7f56579 [ 162.370971][ T8995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.370982][ T8995] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 162.370993][ T8995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 162.371004][ T8995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.371010][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.371016][ T8995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.371022][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.371034][ T8995] [ 162.463925][ C3] vkms_vblank_simulate: vblank timer overrun [ 162.543742][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 162.548339][ T9007] FAULT_INJECTION: forcing a failure. [ 162.548339][ T9007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.552509][ T9007] CPU: 2 UID: 0 PID: 9007 Comm: syz.3.912 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 162.552524][ T9007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.552531][ T9007] Call Trace: [ 162.552535][ T9007] [ 162.552539][ T9007] dump_stack_lvl+0x16c/0x1f0 [ 162.552561][ T9007] should_fail_ex+0x50a/0x650 [ 162.552579][ T9007] ? __pfx___might_resched+0x10/0x10 [ 162.552601][ T9007] should_fail_alloc_page+0xe7/0x130 [ 162.552614][ T9007] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 162.552632][ T9007] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 162.552656][ T9007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.552678][ T9007] ? rcu_is_watching+0x12/0xc0 [ 162.552691][ T9007] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 162.552705][ T9007] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 162.552722][ T9007] ? kmalloc_reserve+0x18b/0x2c0 [ 162.552735][ T9007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.552755][ T9007] ? policy_nodemask+0xea/0x4e0 [ 162.552775][ T9007] alloc_pages_mpol+0x1fc/0x540 [ 162.552786][ T9007] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.552803][ T9007] ? __pfx___alloc_skb+0x10/0x10 [ 162.552817][ T9007] ? find_held_lock+0x2d/0x110 [ 162.552832][ T9007] alloc_pages_noprof+0x131/0x390 [ 162.552842][ T9007] alloc_skb_with_frags+0x24b/0x850 [ 162.552861][ T9007] ? __might_fault+0xe3/0x190 [ 162.552874][ T9007] sock_alloc_send_pskb+0x7f1/0x980 [ 162.552888][ T9007] ? _copy_from_iter+0x15e/0x1560 [ 162.552917][ T9007] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 162.552933][ T9007] ? hlock_class+0x4e/0x130 [ 162.552943][ T9007] ? __lock_acquire+0xcc5/0x3c40 [ 162.552959][ T9007] ? iov_iter_advance+0x7d/0x6c0 [ 162.552971][ T9007] tun_get_user+0xd3b/0x3e50 [ 162.552995][ T9007] ? find_held_lock+0x2d/0x110 [ 162.553007][ T9007] ? __pfx_tun_get_user+0x10/0x10 [ 162.553026][ T9007] ? find_held_lock+0x2d/0x110 [ 162.553039][ T9007] ? __pfx_lock_release+0x10/0x10 [ 162.553060][ T9007] tun_chr_write_iter+0xdc/0x210 [ 162.553078][ T9007] vfs_write+0x5ae/0x1150 [ 162.553094][ T9007] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.553113][ T9007] ? __pfx_vfs_write+0x10/0x10 [ 162.553128][ T9007] ? __fget_files+0x40/0x3a0 [ 162.553150][ T9007] ksys_write+0x12b/0x250 [ 162.553164][ T9007] ? __pfx_ksys_write+0x10/0x10 [ 162.553183][ T9007] __do_fast_syscall_32+0x73/0x120 [ 162.553199][ T9007] do_fast_syscall_32+0x32/0x80 [ 162.553212][ T9007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.553232][ T9007] RIP: 0023:0xf7f72579 [ 162.553241][ T9007] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.553252][ T9007] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 162.553262][ T9007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 162.553274][ T9007] RDX: 0000000000000ffe RSI: 0000000000000000 RDI: 0000000000000000 [ 162.553280][ T9007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.553285][ T9007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.553291][ T9007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.553303][ T9007] [ 162.798240][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.041171][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 163.061201][ T9016] bond3: entered promiscuous mode [ 163.062624][ T9016] bond3: entered allmulticast mode [ 163.230388][ T9027] syz.2.919 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.299980][ T9027] netlink: 88 bytes leftover after parsing attributes in process `syz.2.919'. [ 163.995541][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.016643][ T9041] netfs: Couldn't get user pages (rc=-14) [ 164.237858][ T9052] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 164.287906][ T9054] evm: overlay not supported [ 164.299490][ T9052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.305251][ T9055] FAULT_INJECTION: forcing a failure. [ 164.305251][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 164.309201][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.3.925 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 164.309216][ T9055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.309226][ T9055] Call Trace: [ 164.309231][ T9055] [ 164.309238][ T9055] dump_stack_lvl+0x16c/0x1f0 [ 164.309265][ T9055] should_fail_ex+0x50a/0x650 [ 164.309290][ T9055] ? fs_reclaim_acquire+0xae/0x150 [ 164.309325][ T9055] should_failslab+0xc2/0x120 [ 164.309337][ T9055] __kmalloc_node_noprof+0xd1/0x510 [ 164.309356][ T9055] ? alloc_slab_obj_exts+0x41/0xa0 [ 164.309377][ T9055] alloc_slab_obj_exts+0x41/0xa0 [ 164.309397][ T9055] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 164.309425][ T9055] __kmalloc_node_noprof+0x439/0x510 [ 164.309442][ T9055] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 164.309461][ T9055] __kvmalloc_node_noprof+0xad/0x1a0 [ 164.309476][ T9055] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 164.309495][ T9055] alloc_netdev_mqs+0xd9/0x15d0 [ 164.309525][ T9055] rtnl_create_link+0xc10/0xfa0 [ 164.309548][ T9055] rtnl_newlink+0x14c6/0x1d60 [ 164.309566][ T9055] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.309583][ T9055] ? __pfx___lock_acquire+0x10/0x10 [ 164.309600][ T9055] ? kfree_skbmem+0x1a4/0x1f0 [ 164.309619][ T9055] ? aa_get_newest_label+0x376/0x680 [ 164.309641][ T9055] ? find_held_lock+0x2d/0x110 [ 164.309661][ T9055] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 164.309679][ T9055] ? __pfx_lock_release+0x10/0x10 [ 164.309694][ T9055] ? trace_lock_acquire+0x14e/0x1f0 [ 164.309709][ T9055] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.309724][ T9055] rtnetlink_rcv_msg+0x95b/0xea0 [ 164.309740][ T9055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.309766][ T9055] netlink_rcv_skb+0x16b/0x440 [ 164.309788][ T9055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.309810][ T9055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.309837][ T9055] ? netlink_deliver_tap+0x1ae/0xd30 [ 164.309854][ T9055] netlink_unicast+0x53c/0x7f0 [ 164.309869][ T9055] ? __pfx_netlink_unicast+0x10/0x10 [ 164.309883][ T9055] ? __phys_addr_symbol+0x30/0x80 [ 164.309896][ T9055] ? __check_object_size+0x488/0x710 [ 164.309909][ T9055] netlink_sendmsg+0x8b8/0xd70 [ 164.309925][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.309945][ T9055] ____sys_sendmsg+0xaaf/0xc90 [ 164.309963][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.309978][ T9055] ? get_compat_msghdr+0x11b/0x170 [ 164.310006][ T9055] ___sys_sendmsg+0x135/0x1e0 [ 164.310030][ T9055] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.310058][ T9055] ? __pfx_lock_release+0x10/0x10 [ 164.310077][ T9055] ? trace_lock_acquire+0x14e/0x1f0 [ 164.310101][ T9055] ? __fget_files+0x206/0x3a0 [ 164.310130][ T9055] __sys_sendmsg+0x16e/0x220 [ 164.310152][ T9055] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.310185][ T9055] __do_fast_syscall_32+0x73/0x120 [ 164.310207][ T9055] do_fast_syscall_32+0x32/0x80 [ 164.310226][ T9055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.310252][ T9055] RIP: 0023:0xf7f72579 [ 164.310261][ T9055] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.310271][ T9055] RSP: 002b:00000000f507555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 164.310282][ T9055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 164.310288][ T9055] RDX: 0000000020008044 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.310294][ T9055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.310307][ T9055] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.310316][ T9055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.310337][ T9055] [ 164.546289][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 164.554175][ T9057] bond4: entered promiscuous mode [ 164.555638][ T9057] bond4: entered allmulticast mode [ 164.561709][ T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 164.591089][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.927'. [ 164.627412][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'. [ 164.721986][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 164.725192][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.727973][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.730928][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.733777][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.737420][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.739958][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.004168][ T56] usb 9-1: GET_CAPABILITIES returned 0 [ 165.006088][ T56] usbtmc 9-1:16.0: can't read capabilities [ 165.054636][ T9071] syz.0.931: attempt to access beyond end of device [ 165.054636][ T9071] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 165.231364][ T834] usb 9-1: USB disconnect, device number 2 [ 165.278882][ T222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.232823][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 166.243079][ T9089] bond4: entered promiscuous mode [ 166.244592][ T9089] bond4: entered allmulticast mode [ 166.465206][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.697582][ T56] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 166.872612][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 166.875310][ T56] usb 7-1: not running at top speed; connect to a high speed hub [ 166.878400][ T56] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 166.881547][ T56] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.885256][ T56] usb 7-1: config 1 interface 0 has no altsetting 0 [ 166.889982][ T56] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 166.892738][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.895106][ T56] usb 7-1: Product: syz [ 166.896395][ T56] usb 7-1: Manufacturer: syz [ 166.897788][ T56] usb 7-1: SerialNumber: syz [ 166.902244][ T9087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.101605][ T9104] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 167.117098][ T9104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.339481][ T9112] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 167.466255][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 167.487297][ T9114] bond6: entered promiscuous mode [ 167.488884][ T9114] bond6: entered allmulticast mode [ 167.683364][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.872791][ T104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.153221][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 169.322231][ T56] usbhid 7-1:1.0: can't add hid device: -71 [ 169.325349][ T56] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 169.331162][ T56] usb 7-1: USB disconnect, device number 9 [ 169.337656][ T8695] udevd[8695]: setting mode of /dev/bus/usb/007/009 to 020664 failed: No such file or directory [ 169.342480][ T8695] udevd[8695]: setting owner of /dev/bus/usb/007/009 to uid=0, gid=0 failed: No such file or directory [ 170.067647][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.221395][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 170.894662][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 171.278702][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.459346][ T9234] team0: No ports can be present during mode change [ 171.467057][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 171.619434][ T9234] team0 (unregistering): Port device team_slave_0 removed [ 171.638568][ T9234] team0 (unregistering): Port device team_slave_1 removed [ 171.676323][ T9234] team0 (unregistering): Port device veth0_to_team removed [ 171.708355][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 171.864270][ T9246] netlink: 'syz.2.969': attribute type 21 has an invalid length. [ 171.866499][ T9246] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 172.136646][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 172.169310][ T9250] 8021q: adding VLAN 0 to HW filter on device bond7 [ 172.221273][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 172.484279][ T64] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.523331][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.530243][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.556048][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.561264][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.307311][ T9286] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 173.436067][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.439133][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.442407][ T9288] bridge0: entered allmulticast mode [ 173.505326][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 173.702585][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.350351][ T9301] netlink: 240 bytes leftover after parsing attributes in process `syz.3.988'. [ 174.352997][ T9301] netlink: 240 bytes leftover after parsing attributes in process `syz.3.988'. [ 174.502198][ T9304] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 174.519305][ T9304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.598034][ T9308] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 174.600268][ T9308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.988'. [ 174.969337][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 174.972305][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 174.986761][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'. [ 174.996990][ T9315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.031938][ T9315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.034093][ T9315] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 175.037494][ T9315] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 175.092074][ T222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.175135][ T9320] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 175.177031][ T9320] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.179284][ T9320] vhci_hcd vhci_hcd.0: Device attached [ 175.359633][ T9326] fuse: Unknown parameter 'user_i00000000000000000000' [ 175.519737][ T6868] usb 38-1: SetAddress Request (2) to port 0 [ 175.522686][ T6868] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 175.908840][ T9321] vhci_hcd: connection reset by peer [ 175.913218][ T12] vhci_hcd: stop threads [ 175.914542][ T12] vhci_hcd: release socket [ 175.916386][ T12] vhci_hcd: disconnect device [ 175.950450][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.997'. [ 175.960121][ T9333] tipc: Started in network mode [ 175.961554][ T9333] tipc: Node identity 4, cluster identity 4711 [ 175.963516][ T9333] tipc: Node number set to 4 [ 176.031302][ T9334] fuse: Bad value for 'fd' [ 176.230747][ T9336] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 176.325749][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 176.345422][ T9339] kvm: pic: non byte write [ 176.348489][ T9339] kvm: pic: non byte write [ 176.352499][ T9339] kvm: pic: level sensitive irq not supported [ 176.356063][ T9339] kvm: pic: single mode not supported [ 176.358566][ T9339] kvm: pic: level sensitive irq not supported [ 176.363215][ T9339] kvm: pic: level sensitive irq not supported [ 176.365785][ T9339] kvm: pic: level sensitive irq not supported [ 176.368465][ T9339] kvm: pic: level sensitive irq not supported [ 176.370917][ T9339] kvm: pic: level sensitive irq not supported [ 176.373487][ T9339] kvm: pic: level sensitive irq not supported [ 176.376451][ T9339] kvm: pic: level sensitive irq not supported [ 176.378988][ T9339] kvm: pic: level sensitive irq not supported [ 176.381466][ T9339] kvm: pic: level sensitive irq not supported [ 176.391599][ T9339] kvm: pic: single mode not supported [ 176.394108][ T9339] kvm: pic: single mode not supported [ 176.396382][ T9339] kvm: pic: single mode not supported [ 176.398602][ T9339] kvm: pic: single mode not supported [ 176.400820][ T9339] kvm: pic: single mode not supported [ 176.403006][ T9339] kvm: pic: single mode not supported [ 176.405207][ T9339] kvm: pic: single mode not supported [ 176.407531][ T9339] kvm: pic: single mode not supported [ 176.409729][ T9339] kvm: pic: single mode not supported [ 176.430948][ T9339] kvm: pic: non byte write [ 176.434867][ T9339] kvm: pic: non byte write [ 176.436754][ T9339] kvm: pic: non byte write [ 176.438969][ T9339] kvm: pic: non byte write [ 176.440919][ T9339] kvm: pic: non byte write [ 176.442807][ T9339] kvm: pic: non byte write [ 176.445338][ T9339] kvm: pic: non byte write [ 176.453818][ T9339] kvm: pic: non byte write [ 176.708867][ T9360] capability: warning: `syz.4.1006' uses 32-bit capabilities (legacy support in use) [ 176.770485][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 177.457257][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 177.519444][ T222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.661946][ T9387] FAULT_INJECTION: forcing a failure. [ 177.661946][ T9387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.665711][ T9387] CPU: 3 UID: 0 PID: 9387 Comm: syz.0.1012 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 177.665726][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.665733][ T9387] Call Trace: [ 177.665737][ T9387] [ 177.665742][ T9387] dump_stack_lvl+0x16c/0x1f0 [ 177.665762][ T9387] should_fail_ex+0x50a/0x650 [ 177.665783][ T9387] _copy_from_user+0x2e/0xd0 [ 177.665796][ T9387] get_compat_msghdr+0xa8/0x170 [ 177.665810][ T9387] ? __pfx_get_compat_msghdr+0x10/0x10 [ 177.665826][ T9387] ___sys_sendmsg+0x1b0/0x1e0 [ 177.665845][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.665864][ T9387] ? __pfx_lock_release+0x10/0x10 [ 177.665885][ T9387] ? trace_lock_acquire+0x14e/0x1f0 [ 177.665902][ T9387] ? __fget_files+0x206/0x3a0 [ 177.665922][ T9387] __sys_sendmsg+0x16e/0x220 [ 177.665937][ T9387] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.665960][ T9387] __do_fast_syscall_32+0x73/0x120 [ 177.665976][ T9387] do_fast_syscall_32+0x32/0x80 [ 177.665990][ T9387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.666009][ T9387] RIP: 0023:0xf7fe6579 [ 177.666018][ T9387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.666029][ T9387] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 177.666039][ T9387] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140 [ 177.666046][ T9387] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.666052][ T9387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.666057][ T9387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.666064][ T9387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.666075][ T9387] [ 177.979925][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1013'. [ 178.304115][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1018'. [ 178.705574][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.107036][ T9417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.111749][ T9417] lo speed is unknown, defaulting to 1000 [ 179.124244][ T9417] lo speed is unknown, defaulting to 1000 [ 179.126442][ T9417] lo speed is unknown, defaulting to 1000 [ 179.170899][ T9417] infiniband syz1: set active [ 179.173767][ T6511] lo speed is unknown, defaulting to 1000 [ 179.175600][ T9417] infiniband syz1: added lo [ 179.204635][ T9417] RDS/IB: syz1: added [ 179.206386][ T9417] smc: adding ib device syz1 with port count 1 [ 179.209402][ T9417] smc: ib device syz1 port 1 has pnetid [ 179.212998][ T9] lo speed is unknown, defaulting to 1000 [ 179.215671][ T9417] lo speed is unknown, defaulting to 1000 [ 179.265719][ T9417] lo speed is unknown, defaulting to 1000 [ 179.308783][ T9417] lo speed is unknown, defaulting to 1000 [ 179.351116][ T9417] lo speed is unknown, defaulting to 1000 [ 179.493624][ T9426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1025'. [ 179.518650][ T9426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.902943][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.507419][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 180.512807][ T9440] tipc: Started in network mode [ 180.514281][ T9440] tipc: Node identity 4, cluster identity 4711 [ 180.516005][ T9440] tipc: Node number set to 4 [ 180.961288][ T6868] usb 38-1: device descriptor read/8, error -110 [ 181.134394][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.153327][ T9454] vivid-007: disconnect [ 181.352267][ T9459] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1032'. [ 181.378365][ T6868] usb usb38-port1: attempt power cycle [ 181.491555][ T9446] vivid-007: reconnect [ 181.987820][ T6868] usb usb38-port1: unable to enumerate USB device [ 182.121621][ T9458] page: refcount:3 mapcount:1 mapping:ffff888045991f78 index:0xb0 pfn:0x77dbc [ 182.125818][ T9458] memcg:ffff888066822000 [ 182.127471][ T9458] aops:def_blk_aops ino:fa00000 [ 182.129278][ T9458] flags: 0x4fff6800000082d(locked|referenced|uptodate|lru|owner_2|node=1|zone=1|lastcpupid=0x7ff) [ 182.133157][ T9458] raw: 04fff6800000082d ffffea0001df6ec8 ffffea0001df6f48 ffff888045991f78 [ 182.136338][ T9458] raw: 00000000000000b0 0000000000000000 0000000300000000 ffff888066822000 [ 182.139483][ T9458] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 182.142187][ T9458] page_owner tracks the page as allocated [ 182.145726][ T9458] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9458, tgid 9457 (syz.2.1034), ts 181259001620, free_ts 166314325707 [ 182.153414][ T9458] post_alloc_hook+0x181/0x1b0 [ 182.154929][ T9458] get_page_from_freelist+0xfce/0x2f80 [ 182.156492][ T9458] __alloc_frozen_pages_noprof+0x221/0x2470 [ 182.158468][ T9458] alloc_pages_mpol+0x1fc/0x540 [ 182.160494][ T9458] folio_alloc_noprof+0x20/0x2d0 [ 182.162340][ T9458] filemap_alloc_folio_noprof+0x39b/0x470 [ 182.164449][ T9458] page_cache_ra_unbounded+0x2e8/0x7d0 [ 182.166448][ T9458] page_cache_ra_order+0x9cd/0xd00 [ 182.168377][ T9458] page_cache_async_ra+0x645/0x930 [ 182.170287][ T9458] filemap_fault+0xf38/0x2ca0 [ 182.172068][ T9458] __do_fault+0x10a/0x490 [ 182.173667][ T9458] do_pte_missing+0xecf/0x3e10 [ 182.175484][ T9458] __handle_mm_fault+0x1166/0x2c60 [ 182.177398][ T9458] handle_mm_fault+0x3fa/0xaa0 [ 182.179171][ T9458] do_user_addr_fault+0x7a3/0x13f0 [ 182.181145][ T9458] exc_page_fault+0x5c/0xc0 [ 182.182842][ T9458] page last free pid 9084 tgid 9082 stack trace: [ 182.185173][ T9458] free_unref_folios+0xa7b/0x1500 [ 182.187066][ T9458] folios_put_refs+0x587/0x7b0 [ 182.188871][ T9458] truncate_inode_pages_range+0x313/0xea0 [ 182.191122][ T9458] blkdev_flush_mapping+0xfb/0x290 [ 182.193169][ T9458] blkdev_put_whole+0xc4/0xf0 [ 182.194801][ T9458] bdev_release+0x47e/0x6d0 [ 182.196478][ T9458] blkdev_release+0x15/0x20 [ 182.197734][ T9458] __fput+0x3ff/0xb70 [ 182.199246][ T9458] task_work_run+0x14e/0x250 [ 182.200875][ T9458] do_exit+0xad8/0x2d70 [ 182.202032][ T9458] do_group_exit+0xd3/0x2a0 [ 182.203435][ T9458] get_signal+0x24ed/0x26c0 [ 182.204783][ T9458] arch_do_signal_or_restart+0x90/0x7e0 [ 182.206294][ T9458] syscall_exit_to_user_mode+0x150/0x2a0 [ 182.207961][ T9458] __do_fast_syscall_32+0x80/0x120 [ 182.209409][ T9458] do_fast_syscall_32+0x32/0x80 [ 182.210925][ T9458] ------------[ cut here ]------------ [ 182.212428][ T9458] kernel BUG at mm/filemap.c:154! [ 182.213799][ T9458] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 182.215997][ T9458] CPU: 3 UID: 0 PID: 9458 Comm: syz.2.1034 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 182.220711][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.223711][ T9458] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 182.225428][ T9458] Code: 57 0e cb ff 4c 8d 6b 30 31 ff 89 ee e8 4a 09 cb ff 85 ed 7e 17 e8 41 0e cb ff 48 c7 c6 00 85 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 2a 0e cb ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 182.230826][ T9458] RSP: 0018:ffffc900035bf548 EFLAGS: 00010093 [ 182.232531][ T9458] RAX: 0000000000000000 RBX: ffffea0001df6f00 RCX: ffffc900035bf3f0 [ 182.234769][ T9458] RDX: ffff8880230c0000 RSI: ffffffff81eed00e RDI: ffff8880230c0444 [ 182.236941][ T9458] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c4e22 [ 182.239200][ T9458] R10: ffffffff90627117 R11: 0000000000000004 R12: ffff888045991f78 [ 182.241344][ T9458] R13: ffffea0001df6f30 R14: ffffea0001df6f00 R15: dffffc0000000000 [ 182.243549][ T9458] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 182.246046][ T9458] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 182.247975][ T9458] CR2: ffffffffdfa50000 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 182.250176][ T9458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.252463][ T9458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.254660][ T9458] Call Trace: [ 182.255585][ T9458] [ 182.256397][ T9458] ? die+0x31/0x80 [ 182.257409][ T9458] ? do_trap+0x232/0x430 [ 182.258666][ T9458] ? filemap_unaccount_folio+0xef/0x860 [ 182.260130][ T9458] ? filemap_unaccount_folio+0xef/0x860 [ 182.261713][ T9458] ? do_error_trap+0xf4/0x230 [ 182.263048][ T9458] ? filemap_unaccount_folio+0xef/0x860 [ 182.264582][ T9458] ? handle_invalid_op+0x34/0x40 [ 182.266022][ T9458] ? filemap_unaccount_folio+0xef/0x860 [ 182.267495][ T9458] ? exc_invalid_op+0x2e/0x50 [ 182.268915][ T9458] ? asm_exc_invalid_op+0x1a/0x20 [ 182.270276][ T9458] ? filemap_unaccount_folio+0xee/0x860 [ 182.271779][ T9458] ? filemap_unaccount_folio+0xef/0x860 [ 182.273321][ T9458] ? filemap_unaccount_folio+0xee/0x860 [ 182.274879][ T9458] delete_from_page_cache_batch+0x1d5/0x990 [ 182.276608][ T9458] ? unmap_mapping_folio+0x1f0/0x3a0 [ 182.278048][ T9458] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 182.279846][ T9458] ? __pfx_unmap_mapping_folio+0x10/0x10 [ 182.281395][ T9458] truncate_inode_pages_range+0x27a/0xea0 [ 182.282927][ T9458] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 182.284699][ T9458] ? __pfx___send_ipi_mask+0x10/0x10 [ 182.286185][ T9458] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 182.287615][ T9458] ? __pfx_has_bh_in_lru+0x10/0x10 [ 182.289071][ T9458] blkdev_flush_mapping+0xfb/0x290 [ 182.290498][ T9458] ? filemap_check_errors+0xa9/0x160 [ 182.291988][ T9458] blkdev_put_whole+0xc4/0xf0 [ 182.293268][ T9458] bdev_release+0x47e/0x6d0 [ 182.294587][ T9458] ? task_work_run+0x80/0x250 [ 182.295895][ T9458] ? __pfx_blkdev_release+0x10/0x10 [ 182.297302][ T9458] blkdev_release+0x15/0x20 [ 182.298608][ T9458] __fput+0x3ff/0xb70 [ 182.299787][ T9458] task_work_run+0x14e/0x250 [ 182.301098][ T9458] ? __pfx_task_work_run+0x10/0x10 [ 182.302602][ T9458] ? do_raw_spin_unlock+0x172/0x230 [ 182.304148][ T9458] do_exit+0xad8/0x2d70 [ 182.305350][ T9458] ? get_signal+0x8f7/0x26c0 [ 182.306637][ T9458] ? __pfx_do_exit+0x10/0x10 [ 182.307944][ T9458] ? do_raw_spin_lock+0x12d/0x2c0 [ 182.309350][ T9458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.310849][ T9458] do_group_exit+0xd3/0x2a0 [ 182.312131][ T9458] get_signal+0x24ed/0x26c0 [ 182.313395][ T9458] ? __pfx_get_signal+0x10/0x10 [ 182.314808][ T9458] ? task_work_add+0x1d6/0x370 [ 182.316119][ T9458] arch_do_signal_or_restart+0x90/0x7e0 [ 182.317818][ T9458] ? __fget_files+0x206/0x3a0 [ 182.319326][ T9458] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.320956][ T9458] ? ksys_write+0x1ba/0x250 [ 182.322258][ T9458] ? __pfx_ksys_write+0x10/0x10 [ 182.323727][ T9458] syscall_exit_to_user_mode+0x150/0x2a0 [ 182.325326][ T9458] __do_fast_syscall_32+0x80/0x120 [ 182.326791][ T9458] do_fast_syscall_32+0x32/0x80 [ 182.328194][ T9458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.329923][ T9458] RIP: 0023:0xf748e579 [ 182.331034][ T9458] Code: Unable to access opcode bytes at 0xf748e54f. [ 182.332838][ T9458] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 182.335107][ T9458] RAX: 0000000000fc1000 RBX: 0000000000000009 RCX: 0000000080000000 [ 182.337291][ T9458] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 182.339427][ T9458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.341500][ T9458] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 182.343650][ T9458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.345836][ T9458] [ 182.346711][ T9458] Modules linked in: [ 182.347808][ T9458] ---[ end trace 0000000000000000 ]--- [ 182.349302][ T9458] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 182.350991][ T9458] Code: 57 0e cb ff 4c 8d 6b 30 31 ff 89 ee e8 4a 09 cb ff 85 ed 7e 17 e8 41 0e cb ff 48 c7 c6 00 85 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 2a 0e cb ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 182.356225][ T9458] RSP: 0018:ffffc900035bf548 EFLAGS: 00010093 [ 182.357882][ T9458] RAX: 0000000000000000 RBX: ffffea0001df6f00 RCX: ffffc900035bf3f0 [ 182.360084][ T9458] RDX: ffff8880230c0000 RSI: ffffffff81eed00e RDI: ffff8880230c0444 [ 182.362163][ T9458] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c4e22 [ 182.364247][ T9458] R10: ffffffff90627117 R11: 0000000000000004 R12: ffff888045991f78 [ 182.366385][ T9458] R13: ffffea0001df6f30 R14: ffffea0001df6f00 R15: dffffc0000000000 [ 182.368510][ T9458] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 182.370903][ T9458] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 182.372681][ T9458] CR2: ffffffffdfa50000 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 182.374908][ T9458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.377070][ T9458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.379243][ T9458] Kernel panic - not syncing: Fatal exception [ 182.381428][ T9458] Kernel Offset: disabled [ 182.382917][ T9458] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:18:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88801bd17ff8 RCX=ffffffff8227ad36 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88801bd17ff8 RBP=ffff88801bd17fb0 RSP=ffffc9000f6a7528 R8 =0000000000000000 R9 =ffffed10037a2fff R10=ffff88801bd17ffb R11=000000000000001e R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8227ad59 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080400000 CR3=00000000529fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000347fa78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc9000347fca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8167e058 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffdfa50000 CR3=0000000077bf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000cdc00000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b746740 RCX=ffffffff81adcf7a RDX=ffff888020610000 RSI=ffffffff81adcf54 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000104f928 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed10056e8ce9 R13=0000000000000001 R14=ffff88802b63ffc0 R15=ffff88802b746748 RIP=ffffffff81adcf56 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffdfa50000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e5095 RDI=ffffffff9ab6ce20 RBP=ffffffff9ab6cde0 RSP=ffffc900035bee80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=000000000000006e R14=ffffffff9ab6cde0 R15=0000000000000000 RIP=ffffffff853e50bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffdfa50000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000