last executing test programs: 59m44.969776705s ago: executing program 0 (id=143): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="a893", 0x2}, {0x0}], 0x2, &(0x7f00000003c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x4, 0x41, 0x1}}], 0x1c, 0x4048800}, 0xc0) 59m40.54418015s ago: executing program 0 (id=146): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/72, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 59m39.11368077s ago: executing program 0 (id=148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x25, &(0x7f0000000080)={r1, 0x3}, 0x8) 59m36.831168345s ago: executing program 0 (id=150): fspick(0xffffffffffffff9c, 0x0, 0x33219fa63f5b5ced) 59m34.699543085s ago: executing program 0 (id=151): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) 59m31.304615461s ago: executing program 0 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xa0, @loopback, 0x6712}, 0x1c) 58m45.333852384s ago: executing program 32 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xa0, @loopback, 0x6712}, 0x1c) 53m40.906251898s ago: executing program 1 (id=215): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0x0, 0xfff, 0x0, 0x0, 0x7f, 0x7, 0x4}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) (fail_nth: 1) 53m40.905950418s ago: executing program 1 (id=216): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903, 0x0, 0x0, 0xa4}, 0x21) 53m34.909568697s ago: executing program 1 (id=219): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x92) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 53m24.94354352s ago: executing program 1 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCADDRT(r1, 0x5452, &(0x7f00000000c0)={0xfdfdffff, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 53m21.497534657s ago: executing program 1 (id=222): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x100) syz_io_uring_setup(0x102c0c, &(0x7f0000000400)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000000100), &(0x7f00000004c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 53m10.603509366s ago: executing program 1 (id=224): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) unshare(0x62040200) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000840)={0x6, 'caif0\x00', {0x3}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f443ee190000000000", @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="0c00b555269c40001f0000000c0058091f2518af5e850c160c00580026000000000000000c0058005a000000000000000d0058000b000000000000000c005879197101fe60ab5600"], 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f4ff28bd7000dedbdf257b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010000006f0000001400fe00f6b267ee0c063c74def8f19e7c72f5650a000600080211000001000014000201e743052ac8d9890dc343dec175214feb140002015143199bc74bc17e59fb81ede456bacb"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x1b, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) 52m22.668331064s ago: executing program 33 (id=224): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) unshare(0x62040200) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000840)={0x6, 'caif0\x00', {0x3}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f443ee190000000000", @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="0c00b555269c40001f0000000c0058091f2518af5e850c160c00580026000000000000000c0058005a000000000000000d0058000b000000000000000c005879197101fe60ab5600"], 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f4ff28bd7000dedbdf257b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010000006f0000001400fe00f6b267ee0c063c74def8f19e7c72f5650a000600080211000001000014000201e743052ac8d9890dc343dec175214feb140002015143199bc74bc17e59fb81ede456bacb"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x1b, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) 49m5.139119319s ago: executing program 3 (id=262): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6, 0xfff, 0x5, 0x0, 0x1b, "a67f05364da8d73949484191abfa6a27fc1699"}) 48m59.178910788s ago: executing program 3 (id=264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xf}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x0, 0x0, 0x0, 0xfff7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x1}) r1 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) semctl$GETNCNT(r1, 0x1, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r5, &(0x7f00000000c0)='./file0\x00') openat(r5, &(0x7f0000000280)='./file0/../file0\x00', 0x400000, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 48m43.104995993s ago: executing program 3 (id=266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e6844a50c1901a74755126b71e8565b9e3ef93c32dbc227d405505d6daadca7cf8667f7a2bd4c7dadb0f47dea9d9b7f664e9138004ef770485ff19de418a8701e50cadf0db6cb2e2f2ce7769660451308df001e4e0f17228807b5a240cf07cab9b663f75b34e739045f", 0xde}, {&(0x7f0000000140)="d599a5a0", 0x4}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa06f48f9f5db4b57ab6ddc4780a7dd7d2a1b9e0c6a147ca39732aba5ae5a73e678410320baeb434c0685ba7cbb6d1fe8c6a7e42c6b", 0x47}, {&(0x7f0000000fc0)="8e02ce374a95c3f22fb4328f2cb9d29b687f81454c1818b86e5ef364287f66f0958c2db04e3d3faf71f4442f8a0490784e35fce38acd10b221179de9e6513a893146cab95208fe93fbb6e2eaecc0746d3c5d69d32c2d155444c4d59a4c65a68adc", 0x61}], 0x4}}], 0x1, 0x0) 48m37.906351511s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800044, &(0x7f0000000800)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r2]) fcntl$setlease(r3, 0x400, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x88800) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r5, 0x12, 0x0, @void}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e00010400d74e00000000000a000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="9e046d53107ada615b729736d2d963894611995cbbd70f3f3c33fd5f90c0bc1f2f2c8ec9c92461acdc2766cdedbb2ae20eef8376691a2b95510c934f101651eb01de5f779498558c4a44a10567603e448c91230bad27a365589ac742df5d729d2b8ce98722c6383ac03c4ddca032d4bab20eee56dc640cfdc6a0680436caa643f89c6e13b32188da08f892cd3a1c94f1eb349e77c56e2ad068b466c501b35e69a4b663fcdf0a56e31e0b61338428eb882bcdbe5027062760a4e662ecd23eb7e21d62e5fc9a146cc98490b0ff1e58152cb10c709f74d20f00d64843d3e898b3f8f130e70622b2eb6144f798662b4d", 0xee}, {&(0x7f0000000580)="0dbad451bc1d4fc074d0345abcac9727a8bb812e60bd003d8e6d8aeb268eea3b88fc422d2631de515d3630f53e656697712e276d0bbdb0a397a9b818d804f295425cba3fbd34d2151e5623cb3d19d1e2b44003a938ce7d8a4e15e05862998df9ab8d18e8a9d5fe9f310ed2c51cf7b0c290976ab460f099e310f870315b72a66eff66bf7bf966cff58d499c6f", 0x8c}], 0x2, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf5dc}}], 0xc8}, 0x4000000) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pread64(r0, &(0x7f0000000780)=""/108, 0x6c, 0x5) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') close(r3) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 48m30.813827472s ago: executing program 3 (id=269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001040), 0x1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000001080)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 48m25.656292138s ago: executing program 3 (id=271): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000000500)) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f00002cef88)="d8", 0x1) 48m20.788374556s ago: executing program 34 (id=271): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000000500)) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f00002cef88)="d8", 0x1) 35m31.53201656s ago: executing program 4 (id=391): semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@remote}, {@initdev}, {@local}, {@local}, {@dev}]}}) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000240)={@local}, 0x14) sendmmsg$inet6(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="f04f969842c742c0d1551248070ecbea878c441e450876de3416ecd2beb1425151f6cc3434c45c002a7ae58096ba5be20080025e807dd639e400b1fc6653ef87feb5126bb989420240", 0x49}], 0x1}}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x3, 0x200}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1f4, &(0x7f0000000080)={0x77359400}) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f00000019c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0xff97) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 35m20.233883224s ago: executing program 4 (id=393): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r1, 0x141201) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) (async) syz_open_pts(r1, 0x141201) (async) fcntl$setstatus(r3, 0x4, 0x102800) (async) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 35m16.870291107s ago: executing program 4 (id=395): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x8f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)=0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c000000000011907800000000e00000899cdd6d18369283c0c5375a0100020e200008907892b068c92b71a54b9a59b1eab08bdbc586d02039959ec4deb54df2b7408cb70b634fdffcaf6f33acf8f887dcfcdb9bc099bd1b5e519b9bb072d74396da92e572f386f49b564d63a5bfd12c145c912d1cc78a847d01f1dad1dc62822c50b530c42c373ac8f32a55d01ac78b056c50ee2cf40cb379b42b54a474a0d12f446486a03238207bbfb83464e7389093f65e3e3fc4168931224c5dba4215e2de13b69c8938b250779e98c83268793f645095ec948bfaacfe018259d817867b4d7c2623d8a0747feebdc0"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x40c4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r7, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ec97bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f142", 0x6b}], 0x2}, 0x0) r11 = semget$private(0x0, 0x4, 0x0) semtimedop(r11, &(0x7f0000001480)=[{0x0, 0xfff7}], 0x1, &(0x7f00000014c0)={0x0, 0x3938700}) pread64(r0, &(0x7f0000002040)=""/100, 0x64, 0xfa6) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 34m58.513695606s ago: executing program 4 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = syz_open_dev$ndb(&(0x7f0000000e00), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x800, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x0, 0xd0, 0x1c0, 0x1c0, 0x320, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [], 0x4000}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)="ddd3fbcb28601fb12b67904f54d3f7d65465ca0c26", 0x15}, {&(0x7f00000000c0)="64ee5066baea993e2d003e201be35e54eac70d428126c870c78a35c5ed18886a31bef5f17db81f020dca8fd899800cc5a4fb25c9bee8ba", 0x37}, {&(0x7f0000000840)="2395550cb01003cf3a21f5d5c5decb437a8a1baf6d87a17576690db7f47cba4ca04ad8e314e7393797314421e49e5c5577f6fe9e9d3e010f7bf9c7b9fbc1d8229f1e667524dc0b444fc1aea4b4a8c45f97f154589c55eeaa5529a92db7c7cb3a2d020e92bf8f72ade45013be569dcc72e9143591a92020f8412a38d279172cceaa565890fa42a88bd3d9f4ea17514b60629cc67dc94558071719cb6e505af2be45c62a2152a49ae8cdff05bf26015ca0e223d4dedcf2c75ef445745a50c877df37084a2a9696ae02996894bdd0ac2ce0dd32acc0d0a3a44d3a79d1ed439943d2b53bb4c4eb538a1093ed63cf65dbf5b55704b13d34407f37d7101cb97b3ecf71f9eb8b9ee9543d454bd0d463bf54744d8e0b35270ddf0b262bfd0ac87aa29c77391591564bf6ea2469d05cb1e220b5cb39cfb5443f1cc61c3aa12a981b05cf5ef1651c11e4d5a24e95dc917cc15fd083227055d40ea0c4ea4a587b4549487bbb5d55bdaaac72ae81594914f43b30c3d4e58e1cd3bc45be5784c15cb84536a67caa6003c5300aa5910bcc0faee29236bb5297d4e2133e3d1eb4ca300d054d65c8de3b5f1a53ddf5c97c64fc9d508815be134b6c2f1cd684b6d858689c7ecf938da3a5679f1bd7877da78487fd2ac7d2c4bc8dcca22858d4cae90b8239bd6d18b2cb6c9e236e1eaf37353975db047f426702d48efc646e2689420dd4dc34a4ee0c5dc3e26a5e163e7cfcdacad4cf5811cb3d224baa4f14bccd959fa3cb3a13b93e5ab437d85e71cd5b8de5e7a307a7a3da9755f9f0aa36bef866ebf62422aaabeb9127e83eaf71dbbc0eb859499a29d05e368be529d688d0c81754c44c160653f418787d06e5126fff0b3f2e4024148bf54678042b324de725ea66010970f67d641fbd7230baf57c5688c8e34157a18c1e72a9fea104311a208ad2860a70bab4d5dab80df8bf1f838ddf636ee5b5caadfcb93293fb7041874bf32691b4651bc243c021dd2cbe8e846907ec16bf394a417ca2d83610bf3bd0c8a8df57001556967c1b141dc7e5d1e3a7a4ddf69a8a09ce7b4e91e96868c726c65101a7c636f73e872d2df5e1a0ff57f38847ccfade9145d03031a2bf5c267432c171341a9c463848d3874de140fe175536295d747767f497700775087b03bf08d55ed22b3d4a7a59154c19e443354652e5cabb5c00176003ef42641c7e2fa9b3cd2a71d587699ac94ac129cf7d13ce1c98ecb783a18a54e2ff4ea08ae5f0399afc1608a8e3c08bc50bd7cf50211c7251f54718e42a26c1b634d402b24d8112b7f7b260fe4727007d838fbbe376a67faffc1c4f486a403ed7462f8c1c998309cde65aa8b72d30860a5276dd3f6d1fc3e194081acce529f0a8d2dcf49a717de5092a63a45bf6e0c6ecdca59e661b64cddb95b88e3a934c12e814eff7310523ef9872d4ebfce8efd1acb6aeac3c455e91a32b4e9ef74e4cb551d39a5c11b825b62f4bf1e44bca711fe87597d1bd97e3a41bb7496f5fe16f0bf4d5a02a763a15c80061b9631ae19019bf030e2ae4262a3af5414a3ad7aa7fb17d2da4487e5369be885fb9a7ef01ee24bec7d2acc332bdaba58d97fe412e9934d8eb956b79e33ae163bc3bb7f2975bc8ae963726fffcb34cc680e4ba0f50879a231a04c77a86df15d93cec6b3a8ed61153dd1d13b223283d206f51fbfb281786370869b8916c466e9703c069654fbe34574fc336712e0882150c149bcdccb926cc8357a20f8c5544ad4795118bc3628d0f65450caf8feed36ed10ea4fcfd82ff3995db47a297358558ad1bc3fef54821eca021e8b65088b1cffbe0baa0c695ec8bdf49a91d7ecda984c9bc03041311907572b1c61ba03c8ebe1c62b01e960cedc1c1aba890f967ac4cfb0e4a84b677ec2609f36710471ebd6dde5753ed24af0c6850ec7693ac4df18cf6e91170cee907dfaa2286e97eaa5d47d02cb4858046be54f0699108e9a7ef6d17c2b19b8867e2085f3877ac77fa8f178d19af2f598bf239b60c3fa102bcbb2124530ff759cae0af6f33e80bafcd32faa3f7486b51efd90195423991e1cddc0a4be1278364c3e0d0f8323836a53a630784bb440aefa3a034a5f04e1b6268a37f2c15bd7f8d577e31a453a7c32cffa639f460793cb18518c2e468f75a31a2a5cb20320dec23fdff82c850bebd4917e58174fc632d3f331f681b2d3d81395a55972aa498e7d14da03e01bd88173c41af3e8ce389e82e04ba6252674b37998645b921c0bea6fe5cf8ca675f11c3f5c64241048a49ddd0c85f001500256c3437b62f41c9543bddf55cc216fd29bcf13df01cda95e160bc843ada7907343e0f34daa838b5777ef69f2f34ebc12729ec8ec3a7b68622930a935cb8a88aaeb2c240fbf0d1f03491c0734bf547e0f066cb3db2fd6b5f2aba770b470d54b8b23c756d5691b44ae6495a75ada0d442056c4e8d726aa24922551c999bcc6564ac1c70879e1f423caedc65b752376bcbef4aceae2e2463e7240d06277b98366ccd2ea341d8e225609a0812c3d8f6dff71a1b826ec2141c1c2d3503a93408ec81e22a04b8afe842dd61b2eb748a6f2c529f6c89bc7062abc67164a1f8192495a4cd156c80eff6d49e6e4d4abc141fa85f17db266df417c8c6bdbb28fe968ea6ae02a9f87a1ef05dc7893e25f2b40022fdb776f4e506b20ffc6a1bd1c9813c0bbf1aa78a9bc2b9d9dd9af4714dfaad8b3f22d57b9df2f60be8d30e8ae461f0e09452219099dabeb6000bd80af6b965ac109af6d07fadd94825de5841ccdb9ce2be739cb3bdc9a8e67ccff9a37eebf230daa130e6d2b426be68cf679019ca9e0a664bef143efa8a2c53e5aabdffa2fa05dd112417009f2c38f26b076857f10843aa6cf1068acf537772df7ed8e6d7eacc1f777cfcd53c7bda6eccecf7ebc56e381989fbe85e790df543a092f8e3792d3b25b8886567bf33a487e751568ba92f5f7a6d01d42d3b9c776945febc1f2abe773d67fa1413bae4574edb20d2637ef9889fb9487dcb38144ad5b3e0b928805fdf646b4cc0ddfc93ecc1f4c872455bd02e607ef1d04a7c3156a8e43b68710882f994d756e939da4f9d62c6c8f92caf4c15d777bc5bc15714b7ca8fd26b82aec850f15747e8d2dbdf48ffdedba16af7cf66d17cce2d87aeefa29c61bb4e9d8ff1990b7b65daa3daa43ec8dc8c7ede5964f96518b064c07beddb36e6c607bf4db55f328f387ed7e5b1104fe6f03d19b74a84b48fd46512f0701c6d832c7ab34c38e83410382eb8873bb2a22c568920f32ba37e5bedea5267f0c6c0b82762a58c99b03e85d8885bc91c571899bd2c93b0df92e742280f0386026f52634c09a8c214fb4ec43cb003519e839b774b2637b8602a446c0b3cedf6e045f156ede4aa595df1a2ba3bb73fe05431780bb689ee306de0c18f700470c63f714e74df3dfdb48722cdcc08ad40ac28f8c80d853482959d27c6aa44d7d930aeee0caf10840d4b58ab2cb29d294fd91fdb7485b7d001115476539b50c207c239a6d13e04ce566b19cd1d4771b33439beec0cb73285cfd99bb1b3b305019d5db382d9bd4ed9788ce4a31b3a944e57b787d5af4471aa68af2d49b1541fd158959cb21b27f1e7f77f635a1faa5f5313eb3995fac6c4f9564f2ef75cd0c4f5f7616eb8829ccfd47412240644af42bf9f782559952849402c439700fc2e9a1783e5f56f3cc256bcce8eb5bca40b5929ae2fbff5db5acca4fab105bf6740cbc67f56c81163194f32fd22847fa1c168e17868d04e11de4ed9a91992777a9ea29a304dd698d10b039a031b6c93984af5d7c4a36bc659a0cb6ae62c140190cfa135e9dd23913dc7c9a45e400ddb8ec0bf5791bd87fcc92d82740307d4f764753069626423f58e543fdf5160f0b9e29f5c2ebf9aaffa9b9ab049292699794c0e18bb30659066d0481fa48d52d22f880a9d3edbecfb1648a2b67a89c4a1bc1bd89555a66c6e516481aff45930001fa1f93cf2ac37de9b90f7c95bdec7e634d7edd7e701038ed5f6b614628847e93a72c2ab67d09ca036940e1aae2ed90b891ff514023a8c545b405c2f088ee2a3c98f34ac71fd35f545562c0070731913694b78716c191f4c2c7808d57ff0339939d0a06e844ebb096b3db9a36f2629c503db8fabba49692f91073840f46643c9d0fd5327fe634ca5ee318f38974ae2ae53d5c15af85ec613be2aa5a9732dfa2862c6cc80a5878861bf0889ed015dbf6a51479afcac4d71037953b6112dcd60f877b2a02c6f4ab7959c0045de2d10bf40b24952a4ccf5fe0bfe6f7ad7adfeb149674655bc5868585d5974557ca23a2a7999dacce1766e8adb07c55926c4c6e170ce6fb801e52ec547e2d71c52b005aea753baf2bc43b5e5deafd994c61fc7f895037c49a10b20c0ef9b8d283be43b23f89cee77c348c5831e79f3e3e8933a127d27c3b3446bb9c161049fb10697b8bc2b551daf05050699e8116c4714f8efd6743213abcb845853b447f23d012bcf1f2af60a949666e5bd738c070d8e18824a300ab21d4e4a336ec2c4b950796c38fd43c5ff976aabe359bce1b1874b0626ff9e525f2fea09281dbcee18f64aa42432ba8fa2919300fc5099c4d958bceb24e23f0c12af7b75141ec01557a290bb4660d87315553b5dbd214f67a703dfe1497c52d9fc3e2a686f60c5649e3ae5bdda12b2da37e88ba6368cea9b203dfadbe24706085a99247334f687a43448cd29cb9bd9d4439f22634952bad63616fba310f56889f216207cde65e0794a89def0466071e2129405d171b127bfe3adcdc8370e5381a78cb69f35c099661baa5e7257dbcf98ff5908ead82813c6854fa560c8b8dbcd4e5aa1b23ce434790836a3f2bfd50b4c20ea92cd87e628aafd07a08a73b85a9db8b6fc660286f4089a22bbbcf18dd34f00c62089d688ca0221e959074edbc7d2f9ab0868e1d89e120eb1f7be203969eacbd09b0428754a35f6ee763ad7be6c8a2f1115e2bb05bbd77d7cc8e215eae51a9bbe6ac4de43afc84d9896f6fe1031d5c63d539eaa620f80f6df9b29c3f7d0279b5637882f821eef0a48ae12b8027478a6b78d122e974cf3250d3f579b4c984da2564572e4386fda5b46759b8ac3128b746f0f6c1adfeebb1b15440c6351a7b1db96e3167aea6350f32137dca18fc8b837ceed6d2acf0a9b14604f07f3b1a82d4e8903252a10c85fbf426e2553c7a93e51013e37b0200aeae2d8ffab0e6f0c96bf0b9e57971a940e0ecf556aea55d98795c1f6b38e7682b6d339ecdcad6b5549157cffc1e920ffe8eb83b5f5cf6eb597024532da4b388c6ab4278111c37a30e582ffb00e01c9ea0b5a22a9e795946c7c969754f357dcbc3d72f819455a02b5771ec577fb9f2e91c2e40c954a2c45f59838e9099d33a1086819c704cef442d5306c31e836f86644c10842e6c129624a2f5686605fa6eb7137e554edd3457392170a3ab78962c85c254ce1f96439db58abfd1ecc5a90a54dc77ceb01bbfb623627e1afcccc8d6a4796bffbf68d88b52ba4ef06ff52763f4f028bd9df11ee5469ffa0c27423fa156b2bd90e3c314ef9b902c672fc381bb1b5fda78c6c3ac02d9ceddd736588896bf64100de7c10a176f8feaddf877cbc7894de98ecbf9bcb5c37eb1b9a936764b5356663a00123ea01edfdd5cb1c348283871b924af50cd19e06b5f00b2f0a025eff11b9598749ca9f477f3f23b1edf33642f341fd1569bca0e08c672865dbda8086ba4413828cfeb59f6e2d1a2c7a8194362ce4a0c886d80094f55f5873e025fda3295272ce53aabb15", 0x1000}, {&(0x7f00000002c0)="99c90f97795372000006fb924c1600f28a88d4f02068255b8fc492b2fdc2281f1c738f1d9fdaa214c30e4e1ef6f36a67e3aa9e3f6d9b5f13e200cb2c38fd65344e762f9deb3e755a25b98559dcc6fb268e2ed5952f5a4a39ec981463cc10b72ed5a3bb460990391866d87de7475c580ce4e1708b", 0x74}, {&(0x7f0000000340)="1d27f7fed2b8105cece080677826125644eadf624828d49590f502661fc88700cfc8602b94146eba0808be376f504ac6b2a7f5d4922e3b86d8f046454be2465d016f49", 0x43}, {&(0x7f00000003c0)="58b72f42e02a0c48e2eab80596b8d636078add7a4908884450c29768ffbf9628764e5edcf3525d365af330ef30f854feb5ea2cdc159b807c22b09a9697f58d97963a9132bf18b1685751d38492cddaa097ce8c839b93f9a3d3751ce7959b680fe2ad55e6e264912d93603fa1eac747291c87a01abca221e084e6375ef05443b72edd7304174ca6a8866264e1d642a15ca42f4d6b47dd735ef4805c1c4e1bcf88334d5b86341a46cd14ae370d320ca67bd74b6fb7386b176b5572327c9fb3d693447b25667486bd5208fb45d9235a34fa9ac029b96eeaae0ee50d4cd2", 0xdc}], 0x6, 0x101, 0x8, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xfff, r1, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) clock_nanosleep(0xa, 0x0, 0x0, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000800)='./file0/../file0\x00', 0x1) 34m55.667194135s ago: executing program 4 (id=401): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0x0, 0x90, [0x20000200, 0x20000230], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000bc0c617a77622cbffdd2c6fe52"]}, 0x92) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {0x0}], 0x2) 34m40.444464867s ago: executing program 4 (id=402): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r0 = eventfd2(0xfffffffc, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x438a03, 0x0) pidfd_getfd(r1, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000100)={0x0, r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c0002800500070003000000080002", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/87}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000d07eb7be8c7446cb7eaf1e69f11eb218a86a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040341a0208009812ffff010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 34m35.507514334s ago: executing program 35 (id=402): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r0 = eventfd2(0xfffffffc, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x438a03, 0x0) pidfd_getfd(r1, r0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000100)={0x0, r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c0002800500070003000000080002", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/87}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000d07eb7be8c7446cb7eaf1e69f11eb218a86a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040341a0208009812ffff010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 11m22.453927372s ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 11m6.892360005s ago: executing program 2 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x4400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 10m47.748688245s ago: executing program 2 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000010000000000000000000000ffff", @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010000000000140003007866726d30"], 0x58}}, 0x0) 10m43.602960288s ago: executing program 2 (id=689): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 10m33.334383589s ago: executing program 2 (id=691): syz_usb_connect$uac1(0x5, 0x90, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0xac, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x4}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0xff, "920209"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x4, 0x9b, 0x10, 0xd3, 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x4, 0x2, [0x2, 0x2], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x81, 0x7f, 0xf0, {0x7, 0x25, 0x1, 0x81, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0xaf, 0x9, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 10m23.432704901s ago: executing program 2 (id=693): syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 9m36.907729765s ago: executing program 36 (id=693): syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 8m33.746181466s ago: executing program 5 (id=702): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x400}}, 0x4c}}, 0x0) recvmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) 8m24.922189158s ago: executing program 5 (id=703): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) splice(r1, &(0x7f0000000140)=0x8b, r2, &(0x7f0000000180)=0x2, 0x7, 0x1) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) 8m12.712880232s ago: executing program 5 (id=704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800f1ff07000000000000006f3fdb3193c7de626a25516f2eb62f0ad8ab854fe3b70138eefe2086397fcda452d5a7eeebc334d88271cbd62cc0135c0665ddf2a26e7a99cb181ea60a9a551639331baead75c68c5ba74119d70763f7100332a62e23da0428cdefe8e3f7d1e47f388213e5efee8ae5c0131d77750100f806e9fb24243566780c221b5d1b6386f2aa9879d207777d0937134373bc18db3f363baf47", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x19, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 8m4.597456254s ago: executing program 5 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7m54.51538851s ago: executing program 5 (id=706): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@empty, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 7m38.10235203s ago: executing program 5 (id=707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x20, 0x0, &(0x7f0000000000)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x1000000, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) shutdown(r4, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03068d3c5c980128876340860800702f"], 0xffdd) 6m51.264585683s ago: executing program 37 (id=707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x20, 0x0, &(0x7f0000000000)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x1000000, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) shutdown(r4, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03068d3c5c980128876340860800702f"], 0xffdd) 1m42.351593467s ago: executing program 6 (id=709): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m22.87213184s ago: executing program 6 (id=710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @private2, @mcast2={0xff, 0x5}, 0x0, 0x8}}) 54.172312527s ago: executing program 6 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 38.380122949s ago: executing program 6 (id=712): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 27.534803496s ago: executing program 6 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x2f, &(0x7f0000000540)=ANY=[@ANYBLOB="120100003ace440844100d805c570102030109021d0001000000000904000001ef01010009"], 0x0) 0s ago: executing program 6 (id=714): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x2}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x9, "6580a5e97612fe"}, {0x0, 0x2}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.1.13'. [ 564.684276][ T3886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 573.015028][ T3898] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 576.742445][ T3906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19'. [ 577.660936][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 578.066278][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 578.182575][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.190738][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 578.193268][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.382544][ T25] usb 2-1: config 0 descriptor?? [ 578.716425][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input0 [ 579.285968][ T25] bcm5974 2-1:0.0: could not read from device [ 579.551757][ T25] input: failed to attach handler mousedev to device input0, error: -5 [ 579.873223][ T25] usb 2-1: USB disconnect, device number 2 [ 593.160629][ T3936] : renamed from bond0 (while UP) [ 655.965859][ T4015] Zero length message leads to an empty skb [ 668.203042][ T900] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 668.889210][ T900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.892317][ T900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 668.919010][ T900] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 668.921489][ T900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.144801][ T900] usb 2-1: config 0 descriptor?? [ 669.252715][ T4027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 671.274885][ T900] usbhid 2-1:0.0: can't add hid device: -71 [ 671.282917][ T900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.369792][ T900] usb 2-1: USB disconnect, device number 3 [ 687.491738][ T35] audit: type=1326 audit(686.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 687.550968][ T35] audit: type=1326 audit(686.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.041030][ T35] audit: type=1326 audit(686.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=134 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.108222][ T35] audit: type=1326 audit(686.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.127908][ T35] audit: type=1326 audit(686.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.218248][ T35] audit: type=1326 audit(687.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=279 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.269082][ T35] audit: type=1326 audit(687.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.281826][ T35] audit: type=1326 audit(687.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.378178][ T35] audit: type=1326 audit(687.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=47 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 688.380982][ T35] audit: type=1326 audit(687.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.1.52" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 707.290194][ T4065] dummy0: entered promiscuous mode [ 716.749805][ T4075] netlink: 56 bytes leftover after parsing attributes in process `syz.0.62'. [ 743.741787][ T4097] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 743.995402][ T4097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 842.684226][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 847.684506][ T4167] syzkaller0: entered promiscuous mode [ 847.686079][ T4167] syzkaller0: entered allmulticast mode [ 858.837927][ T4173] pim6reg1: entered promiscuous mode [ 858.842574][ T4173] pim6reg1: entered allmulticast mode [ 887.519039][ T4238] syzkaller0: entered promiscuous mode [ 887.520521][ T4238] syzkaller0: entered allmulticast mode [ 945.039968][ T4346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 946.865165][ T4350] sit0: entered allmulticast mode [ 947.701286][ T4350] sit0: entered promiscuous mode [ 961.750338][ T4388] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 961.765097][ T4388] syz_tun: entered promiscuous mode [ 978.682527][ T4416] xt_hashlimit: size too large, truncated to 1048576 [ 1016.251844][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1016.520591][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1016.693962][ T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1016.696461][ T25] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1016.745504][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.982163][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1016.984699][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.018798][ T25] usb 2-1: Product: syz [ 1017.020889][ T25] usb 2-1: Manufacturer: syz [ 1017.022417][ T25] usb 2-1: SerialNumber: syz [ 1018.687824][ T25] usb 2-1: 0:2 : does not exist [ 1019.754314][ T25] usb 2-1: USB disconnect, device number 4 [ 1065.609140][ T4458] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1069.664192][ T4458] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 1069.668942][ T4458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.895774][ T4458] usb 2-1: config 0 descriptor?? [ 1071.959790][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.994228][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.195686][ T25] usb 2-1: USB disconnect, device number 5 [ 1079.688595][ T4478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.124110][ T4478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.348836][ T4478] hsr_slave_0: entered promiscuous mode [ 1102.708537][ T4478] hsr_slave_1: entered promiscuous mode [ 1102.739984][ T4478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.742931][ T4478] Cannot create hsr debugfs directory [ 1116.801972][ T4478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1116.911914][ T4478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.081371][ T4478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1117.246485][ T4478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1132.484475][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 1135.810429][ T4478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.031373][ T4837] smc: net device bond0 applied user defined pnetid SYZ0 [ 1152.488418][ T4843] can0: slcan on pts0. [ 1154.943452][ T4844] can0 (unregistered): slcan off pts0. [ 1167.320583][ T4858] can0: slcan on pts0. [ 1169.830096][ T4858] can0 (unregistered): slcan off pts0. [ 1212.432037][ T4478] veth0_vlan: entered promiscuous mode [ 1213.463582][ T4478] veth1_vlan: entered promiscuous mode [ 1215.051942][ T4478] veth0_macvtap: entered promiscuous mode [ 1215.642230][ T4478] veth1_macvtap: entered promiscuous mode [ 1217.101751][ T4478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.103314][ T4478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.104536][ T4478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.105710][ T4478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.367044][ T4927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.200'. [ 1264.135461][ T4935] can0: slcan on ptm0. [ 1269.182870][ T4934] can0 (unregistered): slcan off ptm0. [ 1322.246016][ T35] kauditd_printk_skb: 1 callbacks suppressed [ 1322.246463][ T35] audit: type=1326 audit(1321.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.213" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1322.291179][ T35] audit: type=1326 audit(1321.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.213" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1322.960789][ T35] audit: type=1326 audit(1321.810:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.213" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1322.964917][ T35] audit: type=1326 audit(1321.820:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.213" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1323.043203][ T35] audit: type=1326 audit(1321.860:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.213" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1325.313303][ T4987] FAULT_INJECTION: forcing a failure. [ 1325.313303][ T4987] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1325.316492][ T4987] CPU: 1 UID: 0 PID: 4987 Comm: syz.1.215 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1325.318116][ T4987] Hardware name: riscv-virtio,qemu (DT) [ 1325.319381][ T4987] Call Trace: [ 1325.320325][ T4987] [] dump_backtrace+0x2e/0x3c [ 1325.322427][ T4987] [] show_stack+0x34/0x40 [ 1325.323490][ T4987] [] dump_stack_lvl+0x122/0x196 [ 1325.324686][ T4987] [] dump_stack+0x1c/0x24 [ 1325.325793][ T4987] [] should_fail_ex+0x3f8/0x4e0 [ 1325.327261][ T4987] [] should_fail+0xe/0x16 [ 1325.328392][ T4987] [] should_fail_usercopy+0x1e/0x26 [ 1325.329628][ T4987] [] _copy_from_user+0x3a/0xfe [ 1325.331440][ T4987] [] do_replace+0x156/0x432 [ 1325.332439][ T4987] [] do_ipt_set_ctl+0x39e/0x92a [ 1325.333495][ T4987] [] nf_setsockopt+0x78/0xda [ 1325.334385][ T4987] [] ip_setsockopt+0xd2/0xe6 [ 1325.335250][ T4987] [] udp_setsockopt+0x7e/0xc2 [ 1325.336195][ T4987] [] sock_common_setsockopt+0x90/0xc0 [ 1325.337549][ T4987] [] do_sock_setsockopt+0x20a/0x402 [ 1325.338647][ T4987] [] __sys_setsockopt+0xf0/0x1aa [ 1325.339634][ T4987] [] __riscv_sys_setsockopt+0xa6/0x114 [ 1325.340635][ T4987] [] syscall_handler+0x94/0x118 [ 1325.341589][ T4987] [] do_trap_ecall_u+0x1aa/0x216 [ 1325.342589][ T4987] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1355.705679][ T4845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.904660][ T4845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.393996][ T4845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.410196][ T4845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.184798][ T4845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.441691][ T4845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.614364][ T4845] bond0 (unregistering): Released all slaves [ 1384.930426][ T4845] hsr_slave_0: left promiscuous mode [ 1385.074422][ T4845] hsr_slave_1: left promiscuous mode [ 1385.465198][ T4845] veth1_macvtap: left promiscuous mode [ 1385.473052][ T4845] veth0_macvtap: left promiscuous mode [ 1385.483107][ T4845] veth1_vlan: left promiscuous mode [ 1385.491605][ T4845] veth0_vlan: left promiscuous mode [ 1388.826197][ T5085] ======================================================= [ 1388.826197][ T5085] WARNING: The mand mount option has been deprecated and [ 1388.826197][ T5085] and is ignored by this kernel. Remove the mand [ 1388.826197][ T5085] option from the mount to silence this warning. [ 1388.826197][ T5085] ======================================================= [ 1416.980824][ T4845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.873757][ T4845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.755550][ T4845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.575319][ T4845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.448615][ T4845]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.554577][ T4845]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.633791][ T4845]  (unregistering): Released all slaves [ 1433.053883][ T4845] hsr_slave_0: left promiscuous mode [ 1433.202251][ T4845] hsr_slave_1: left promiscuous mode [ 1434.028005][ T4845] veth1_macvtap: left promiscuous mode [ 1434.099886][ T4845] veth0_macvtap: left promiscuous mode [ 1434.132791][ T4845] veth1_vlan: left promiscuous mode [ 1434.579649][ T4845] veth0_vlan: left promiscuous mode [ 1445.504808][ T5153] FAULT_INJECTION: forcing a failure. [ 1445.504808][ T5153] name failslab, interval 1, probability 0, space 0, times 1 [ 1445.511291][ T5153] CPU: 1 UID: 0 PID: 5153 Comm: syz.2.238 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1445.514191][ T5153] Hardware name: riscv-virtio,qemu (DT) [ 1445.515866][ T5153] Call Trace: [ 1445.517549][ T5153] [] dump_backtrace+0x2e/0x3c [ 1445.521594][ T5153] [] show_stack+0x34/0x40 [ 1445.522543][ T5153] [] dump_stack_lvl+0x122/0x196 [ 1445.523561][ T5153] [] dump_stack+0x1c/0x24 [ 1445.524579][ T5153] [] should_fail_ex+0x3f8/0x4e0 [ 1445.525659][ T5153] [] should_failslab+0xba/0x102 [ 1445.526778][ T5153] [] __kmalloc_noprof+0xca/0x4e4 [ 1445.527799][ T5153] [] tomoyo_realpath_from_path+0xb8/0x64a [ 1445.528966][ T5153] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 1445.530029][ T5153] [] tomoyo_file_ioctl+0x28/0x34 [ 1445.531307][ T5153] [] security_file_ioctl+0xb8/0x280 [ 1445.532535][ T5153] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 1445.533693][ T5153] [] syscall_handler+0x94/0x118 [ 1445.534972][ T5153] [] do_trap_ecall_u+0x1aa/0x216 [ 1445.536367][ T5153] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1445.597758][ T5153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1450.921634][ T5155] xt_CT: No such helper "pptp" [ 1477.463163][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.622924][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.013124][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.072358][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.909912][ T5404] FAULT_INJECTION: forcing a failure. [ 1493.909912][ T5404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.911967][ T5404] CPU: 1 UID: 0 PID: 5404 Comm: syz.2.246 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1493.913258][ T5404] Hardware name: riscv-virtio,qemu (DT) [ 1493.914176][ T5404] Call Trace: [ 1493.915021][ T5404] [] dump_backtrace+0x2e/0x3c [ 1493.916314][ T5404] [] show_stack+0x34/0x40 [ 1493.918191][ T5404] [] dump_stack_lvl+0x122/0x196 [ 1493.919381][ T5404] [] dump_stack+0x1c/0x24 [ 1493.920735][ T5404] [] should_fail_ex+0x3f8/0x4e0 [ 1493.921913][ T5404] [] should_fail+0xe/0x16 [ 1493.923148][ T5404] [] should_fail_usercopy+0x1e/0x26 [ 1493.924435][ T5404] [] _copy_from_user+0x3a/0xfe [ 1493.925689][ T5404] [] copy_msghdr_from_user+0xbe/0x176 [ 1493.927386][ T5404] [] ___sys_sendmsg+0x112/0x1e6 [ 1493.929235][ T5404] [] __sys_sendmsg+0x130/0x1f0 [ 1493.930915][ T5404] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1493.932621][ T5404] [] syscall_handler+0x94/0x118 [ 1493.934368][ T5404] [] do_trap_ecall_u+0x1aa/0x216 [ 1493.936207][ T5404] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1497.060168][ T5104] hsr_slave_0: entered promiscuous mode [ 1497.121197][ T5104] hsr_slave_1: entered promiscuous mode [ 1506.660563][ T5104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1507.171974][ T5104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1507.735547][ T5104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1508.005907][ T5104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1515.133003][ T5517] FAULT_INJECTION: forcing a failure. [ 1515.133003][ T5517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.173834][ T5517] CPU: 1 UID: 0 PID: 5517 Comm: syz.2.249 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1515.176169][ T5517] Hardware name: riscv-virtio,qemu (DT) [ 1515.177653][ T5517] Call Trace: [ 1515.178742][ T5517] [] dump_backtrace+0x2e/0x3c [ 1515.180582][ T5517] [] show_stack+0x34/0x40 [ 1515.182148][ T5517] [] dump_stack_lvl+0x122/0x196 [ 1515.183855][ T5517] [] dump_stack+0x1c/0x24 [ 1515.185557][ T5517] [] should_fail_ex+0x3f8/0x4e0 [ 1515.187864][ T5517] [] should_fail+0xe/0x16 [ 1515.189829][ T5517] [] should_fail_usercopy+0x1e/0x26 [ 1515.191694][ T5517] [] _copy_to_user+0x3a/0xc6 [ 1515.193443][ T5517] [] simple_read_from_buffer+0xd0/0x154 [ 1515.195150][ T5517] [] proc_fail_nth_read+0x194/0x27c [ 1515.196983][ T5517] [] vfs_read+0x1b0/0x86c [ 1515.198658][ T5517] [] ksys_read+0x128/0x266 [ 1515.200359][ T5517] [] __riscv_sys_read+0x6e/0x94 [ 1515.202021][ T5517] [] syscall_handler+0x94/0x118 [ 1515.203683][ T5517] [] do_trap_ecall_u+0x1aa/0x216 [ 1515.205439][ T5517] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1527.023182][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.073402][ T5560] FAULT_INJECTION: forcing a failure. [ 1543.073402][ T5560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.076133][ T5560] CPU: 0 UID: 0 PID: 5560 Comm: syz.2.253 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1543.077911][ T5560] Hardware name: riscv-virtio,qemu (DT) [ 1543.079023][ T5560] Call Trace: [ 1543.079986][ T5560] [] dump_backtrace+0x2e/0x3c [ 1543.081670][ T5560] [] show_stack+0x34/0x40 [ 1543.083091][ T5560] [] dump_stack_lvl+0x122/0x196 [ 1543.084703][ T5560] [] dump_stack+0x1c/0x24 [ 1543.086182][ T5560] [] should_fail_ex+0x3f8/0x4e0 [ 1543.087827][ T5560] [] should_fail+0xe/0x16 [ 1543.089596][ T5560] [] should_fail_usercopy+0x1e/0x26 [ 1543.091216][ T5560] [] _copy_from_user+0x3a/0xfe [ 1543.092757][ T5560] [] copy_msghdr_from_user+0xbe/0x176 [ 1543.094199][ T5560] [] ___sys_sendmsg+0x112/0x1e6 [ 1543.095635][ T5560] [] __sys_sendmsg+0x130/0x1f0 [ 1543.097103][ T5560] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1543.098658][ T5560] [] syscall_handler+0x94/0x118 [ 1543.100305][ T5560] [] do_trap_ecall_u+0x1aa/0x216 [ 1543.102095][ T5560] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1558.579260][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.598693][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.787869][ T5599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1588.157549][ T5104] veth0_vlan: entered promiscuous mode [ 1588.274120][ T5104] veth1_vlan: entered promiscuous mode [ 1592.015475][ T5104] veth0_macvtap: entered promiscuous mode [ 1592.311441][ T5104] veth1_macvtap: entered promiscuous mode [ 1594.889734][ T5104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.892687][ T5104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.948091][ T5104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.952788][ T5104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.822479][ T35] audit: type=1326 audit(1616.650:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.3.264" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1623.404501][ T5662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1623.421829][ T5662] FAULT_INJECTION: forcing a failure. [ 1623.421829][ T5662] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.423627][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.2.265 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1623.424801][ T5662] Hardware name: riscv-virtio,qemu (DT) [ 1623.425558][ T5662] Call Trace: [ 1623.426146][ T5662] [] dump_backtrace+0x2e/0x3c [ 1623.427371][ T5662] [] show_stack+0x34/0x40 [ 1623.428640][ T5662] [] dump_stack_lvl+0x122/0x196 [ 1623.429993][ T5662] [] dump_stack+0x1c/0x24 [ 1623.431033][ T5662] [] should_fail_ex+0x3f8/0x4e0 [ 1623.432006][ T5662] [] should_failslab+0xba/0x102 [ 1623.433051][ T5662] [] __kmalloc_noprof+0xca/0x4e4 [ 1623.434043][ T5662] [] tomoyo_realpath_from_path+0xb8/0x64a [ 1623.435088][ T5662] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 1623.436094][ T5662] [] tomoyo_file_ioctl+0x28/0x34 [ 1623.437656][ T5662] [] security_file_ioctl+0xb8/0x280 [ 1623.438693][ T5662] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 1623.439696][ T5662] [] syscall_handler+0x94/0x118 [ 1623.440713][ T5662] [] do_trap_ecall_u+0x1aa/0x216 [ 1623.441720][ T5662] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1623.445699][ T5662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1630.581860][ T5672] fuse: Unknown parameter '0000000000000000000600000000000000000000005' [ 1631.030986][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 1631.034003][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 1643.394652][ T4845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.493267][ T4845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.603023][ T5687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.270'. [ 1645.630054][ T5689] netlink: 72 bytes leftover after parsing attributes in process `syz.2.270'. [ 1647.985124][ T4845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.863992][ T4845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.802450][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.902839][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.303010][ T4845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.505222][ T4845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.710821][ T4845] bond0 (unregistering): Released all slaves [ 1661.935687][ T4845] hsr_slave_0: left promiscuous mode [ 1661.974582][ T4845] hsr_slave_1: left promiscuous mode [ 1662.248374][ T4845] veth1_macvtap: left promiscuous mode [ 1662.261810][ T4845] veth0_macvtap: left promiscuous mode [ 1662.284807][ T4845] veth1_vlan: left promiscuous mode [ 1662.325468][ T4845] veth0_vlan: left promiscuous mode [ 1670.913847][ T5720] FAULT_INJECTION: forcing a failure. [ 1670.913847][ T5720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.916085][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.2.275 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1670.918668][ T5720] Hardware name: riscv-virtio,qemu (DT) [ 1670.919698][ T5720] Call Trace: [ 1670.920465][ T5720] [] dump_backtrace+0x2e/0x3c [ 1670.921838][ T5720] [] show_stack+0x34/0x40 [ 1670.922876][ T5720] [] dump_stack_lvl+0x122/0x196 [ 1670.924225][ T5720] [] dump_stack+0x1c/0x24 [ 1670.925581][ T5720] [] should_fail_ex+0x3f8/0x4e0 [ 1670.926892][ T5720] [] should_fail+0xe/0x16 [ 1670.928387][ T5720] [] should_fail_usercopy+0x1e/0x26 [ 1670.929736][ T5720] [] _copy_from_user+0x3a/0xfe [ 1670.930958][ T5720] [] do_sock_getsockopt+0x2a2/0x5ea [ 1670.932054][ T5720] [] __sys_getsockopt+0x100/0x1b6 [ 1670.933143][ T5720] [] __riscv_sys_getsockopt+0xa6/0x114 [ 1670.934226][ T5720] [] syscall_handler+0x94/0x118 [ 1670.935344][ T5720] [] do_trap_ecall_u+0x1aa/0x216 [ 1670.936471][ T5720] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1688.368172][ T5722] netlink: 72 bytes leftover after parsing attributes in process `syz.2.276'. [ 1688.370455][ T5723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.276'. [ 1717.231163][ T5819] netlink: 72 bytes leftover after parsing attributes in process `syz.2.280'. [ 1718.855901][ T5819] netlink: 72 bytes leftover after parsing attributes in process `syz.2.280'. [ 1726.819024][ T5708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.046351][ T5708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.363372][ T5936] FAULT_INJECTION: forcing a failure. [ 1732.363372][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.365336][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.2.282 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1732.366717][ T5936] Hardware name: riscv-virtio,qemu (DT) [ 1732.367543][ T5936] Call Trace: [ 1732.368350][ T5936] [] dump_backtrace+0x2e/0x3c [ 1732.369553][ T5936] [] show_stack+0x34/0x40 [ 1732.370629][ T5936] [] dump_stack_lvl+0x122/0x196 [ 1732.371722][ T5936] [] dump_stack+0x1c/0x24 [ 1732.372685][ T5936] [] should_fail_ex+0x3f8/0x4e0 [ 1732.373802][ T5936] [] should_fail+0xe/0x16 [ 1732.374941][ T5936] [] should_fail_usercopy+0x1e/0x26 [ 1732.376147][ T5936] [] _copy_from_user+0x3a/0xfe [ 1732.377796][ T5936] [] copy_msghdr_from_user+0xbe/0x176 [ 1732.379268][ T5936] [] ___sys_sendmsg+0x112/0x1e6 [ 1732.381636][ T5936] [] __sys_sendmsg+0x130/0x1f0 [ 1732.382728][ T5936] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1732.383746][ T5936] [] syscall_handler+0x94/0x118 [ 1732.384771][ T5936] [] do_trap_ecall_u+0x1aa/0x216 [ 1732.385989][ T5936] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1759.001109][ T5708] hsr_slave_0: entered promiscuous mode [ 1759.063400][ T5708] hsr_slave_1: entered promiscuous mode [ 1767.948600][ T6069] FAULT_INJECTION: forcing a failure. [ 1767.948600][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.285995][ T5708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1768.392192][ T5708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1768.459901][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.2.285 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1768.464850][ T6069] Hardware name: riscv-virtio,qemu (DT) [ 1768.467299][ T6069] Call Trace: [ 1768.469403][ T6069] [] dump_backtrace+0x2e/0x3c [ 1768.472849][ T6069] [] show_stack+0x34/0x40 [ 1768.475851][ T6069] [] dump_stack_lvl+0x122/0x196 [ 1768.480802][ T6069] [] dump_stack+0x1c/0x24 [ 1768.484008][ T6069] [] should_fail_ex+0x3f8/0x4e0 [ 1768.487613][ T6069] [] should_fail+0xe/0x16 [ 1768.492035][ T6069] [] should_fail_usercopy+0x1e/0x26 [ 1768.495648][ T6069] [] _copy_from_user+0x3a/0xfe [ 1768.500021][ T6069] [] __sys_bpf+0x204/0x42cc [ 1768.502790][ T6069] [] __riscv_sys_bpf+0x6c/0x9e [ 1768.506347][ T6069] [] syscall_handler+0x94/0x118 [ 1768.509852][ T6069] [] do_trap_ecall_u+0x1aa/0x216 [ 1768.512172][ T6069] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1768.685839][ T5708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1769.373940][ T5708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1776.323800][ T6084] FAULT_INJECTION: forcing a failure. [ 1776.323800][ T6084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.330577][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.2.286 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1776.332652][ T6084] Hardware name: riscv-virtio,qemu (DT) [ 1776.333858][ T6084] Call Trace: [ 1776.334900][ T6084] [] dump_backtrace+0x2e/0x3c [ 1776.336559][ T6084] [] show_stack+0x34/0x40 [ 1776.337994][ T6084] [] dump_stack_lvl+0x122/0x196 [ 1776.339519][ T6084] [] dump_stack+0x1c/0x24 [ 1776.369500][ T6084] [] should_fail_ex+0x3f8/0x4e0 [ 1776.371384][ T6084] [] should_fail+0xe/0x16 [ 1776.374238][ T6084] [] should_fail_usercopy+0x1e/0x26 [ 1776.375997][ T6084] [] _copy_from_user+0x3a/0xfe [ 1776.377709][ T6084] [] copy_msghdr_from_user+0xbe/0x176 [ 1776.379289][ T6084] [] ___sys_sendmsg+0x112/0x1e6 [ 1776.382176][ T6084] [] __sys_sendmmsg+0x1fa/0x52a [ 1776.385030][ T6084] [] __riscv_sys_sendmmsg+0x8c/0xd8 [ 1776.388523][ T6084] [] syscall_handler+0x94/0x118 [ 1776.391291][ T6084] [] do_trap_ecall_u+0x1aa/0x216 [ 1776.394210][ T6084] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1796.411298][ T5708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.680333][ T6163] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 1902.684342][ T6163] netlink: 5 bytes leftover after parsing attributes in process `syz.2.295'. [ 1912.374735][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.295'. [ 1943.675628][ T5708] veth0_vlan: entered promiscuous mode [ 1945.856018][ T5708] veth1_vlan: entered promiscuous mode [ 1951.482940][ T5708] veth0_macvtap: entered promiscuous mode [ 1952.696086][ T5708] veth1_macvtap: entered promiscuous mode [ 1953.955784][ T5708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.962067][ T5708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.966262][ T5708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.973183][ T5708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.551919][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.708725][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.829135][ C1] vkms_vblank_simulate: vblank timer overrun [ 2005.991366][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.536764][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.901953][ T6218] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2017.343982][ T6238] FAULT_INJECTION: forcing a failure. [ 2017.343982][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.413746][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.4.303 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2017.419871][ T6238] Hardware name: riscv-virtio,qemu (DT) [ 2017.422849][ T6238] Call Trace: [ 2017.424561][ T6238] [] dump_backtrace+0x2e/0x3c [ 2017.427317][ T6238] [] show_stack+0x34/0x40 [ 2017.429974][ T6238] [] dump_stack_lvl+0x122/0x196 [ 2017.432781][ T6238] [] dump_stack+0x1c/0x24 [ 2017.435550][ T6238] [] should_fail_ex+0x3f8/0x4e0 [ 2017.438896][ T6238] [] should_fail+0xe/0x16 [ 2017.441808][ T6238] [] should_fail_usercopy+0x1e/0x26 [ 2017.445093][ T6238] [] _copy_from_user+0x3a/0xfe [ 2017.448048][ T6238] [] __sys_bpf+0x204/0x42cc [ 2017.451251][ T6238] [] __riscv_sys_bpf+0x6c/0x9e [ 2017.453276][ T6238] [] syscall_handler+0x94/0x118 [ 2017.455250][ T6238] [] do_trap_ecall_u+0x1aa/0x216 [ 2017.457361][ T6238] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2102.495102][ T35] audit: type=1326 audit(2101.330:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.4.313" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2103.999855][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2104.224928][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.634363][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.803634][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2108.190106][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2108.242365][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.800584][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.856346][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2122.004921][ T6320] binder: BINDER_SET_CONTEXT_MGR already set [ 2122.016575][ T6320] binder: 6318:6320 ioctl 4018620d 20000500 returned -16 [ 2123.715024][ T6319] block nbd4: server does not support multiple connections per device. [ 2124.059750][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2124.105413][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2124.416415][ T6322] netlink: 'syz.2.317': attribute type 9 has an invalid length. [ 2124.461843][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 2124.712518][ T6317] block nbd4: shutting down sockets [ 2138.617760][ C0] vkms_vblank_simulate: vblank timer overrun [ 2143.382605][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.423819][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.564529][ T6341] xt_bpf: check failed: parse error [ 2188.891906][ T6365] capability: warning: `syz.4.327' uses 32-bit capabilities (legacy support in use) [ 2203.336359][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.419458][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.904049][ T6401] FAULT_INJECTION: forcing a failure. [ 2223.904049][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.909338][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.4.336 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2223.911274][ T6401] Hardware name: riscv-virtio,qemu (DT) [ 2223.912629][ T6401] Call Trace: [ 2223.913722][ T6401] [] dump_backtrace+0x2e/0x3c [ 2223.915455][ T6401] [] show_stack+0x34/0x40 [ 2223.917161][ T6401] [] dump_stack_lvl+0x122/0x196 [ 2223.918911][ T6401] [] dump_stack+0x1c/0x24 [ 2223.920550][ T6401] [] should_fail_ex+0x3f8/0x4e0 [ 2223.922281][ T6401] [] should_failslab+0xba/0x102 [ 2223.923934][ T6401] [] kmem_cache_alloc_noprof+0x146/0x304 [ 2223.925694][ T6401] [] getname_flags.part.0+0x50/0x4b6 [ 2223.928753][ T6401] [] getname_flags+0x98/0xd8 [ 2223.930440][ T6401] [] user_path_at+0x28/0x52 [ 2223.932119][ T6401] [] do_faccessat+0x146/0x9c4 [ 2223.933777][ T6401] [] __riscv_sys_faccessat+0x70/0x96 [ 2223.935485][ T6401] [] syscall_handler+0x94/0x118 [ 2223.937437][ T6401] [] do_trap_ecall_u+0x1aa/0x216 [ 2223.939134][ T6401] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2233.902366][ T6408] FAULT_INJECTION: forcing a failure. [ 2233.902366][ T6408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2233.905795][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.4.339 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2233.910448][ T6408] Hardware name: riscv-virtio,qemu (DT) [ 2233.911799][ T6408] Call Trace: [ 2233.912832][ T6408] [] dump_backtrace+0x2e/0x3c [ 2233.914544][ T6408] [] show_stack+0x34/0x40 [ 2233.916128][ T6408] [] dump_stack_lvl+0x122/0x196 [ 2233.917917][ T6408] [] dump_stack+0x1c/0x24 [ 2233.919572][ T6408] [] should_fail_ex+0x3f8/0x4e0 [ 2233.921381][ T6408] [] should_fail+0xe/0x16 [ 2233.922897][ T6408] [] should_fail_usercopy+0x1e/0x26 [ 2233.924743][ T6408] [] _copy_to_user+0x3a/0xc6 [ 2233.926386][ T6408] [] copy_siginfo_to_user+0x28/0xb4 [ 2233.927985][ T6408] [] arch_do_signal_or_restart+0x4a0/0x1188 [ 2233.929642][ T6408] [] syscall_exit_to_user_mode+0x2a6/0x31e [ 2233.931439][ T6408] [] do_trap_ecall_u+0x86/0x216 [ 2233.933055][ T6408] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2250.112834][ T6414] FAULT_INJECTION: forcing a failure. [ 2250.112834][ T6414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2250.151709][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.2.341 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2250.156346][ T6414] Hardware name: riscv-virtio,qemu (DT) [ 2250.158950][ T6414] Call Trace: [ 2250.160625][ T6414] [] dump_backtrace+0x2e/0x3c [ 2250.162863][ T6414] [] show_stack+0x34/0x40 [ 2250.165378][ T6414] [] dump_stack_lvl+0x122/0x196 [ 2250.169233][ T6414] [] dump_stack+0x1c/0x24 [ 2250.171845][ T6414] [] should_fail_ex+0x3f8/0x4e0 [ 2250.175460][ T6414] [] should_fail+0xe/0x16 [ 2250.179151][ T6414] [] should_fail_usercopy+0x1e/0x26 [ 2250.181982][ T6414] [] _copy_from_user+0x3a/0xfe [ 2250.184627][ T6414] [] move_addr_to_kernel+0x72/0x14c [ 2250.187886][ T6414] [] __sys_bind+0xca/0x23a [ 2250.190478][ T6414] [] __riscv_sys_bind+0x6e/0xa0 [ 2250.191997][ T6414] [] syscall_handler+0x94/0x118 [ 2250.193583][ T6414] [] do_trap_ecall_u+0x1aa/0x216 [ 2250.195224][ T6414] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2254.380139][ T6416] tmpfs: Unknown parameter 'us|\ùÒ0uote' [ 2265.948963][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 2265.954637][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 2285.871212][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.875276][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2286.262271][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 2289.274701][ T6460] pim6reg: entered allmulticast mode [ 2303.713666][ T6467] FAULT_INJECTION: forcing a failure. [ 2303.713666][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2303.715253][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.4.353 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2303.716951][ T6467] Hardware name: riscv-virtio,qemu (DT) [ 2303.718160][ T6467] Call Trace: [ 2303.719184][ T6467] [] dump_backtrace+0x2e/0x3c [ 2303.720865][ T6467] [] show_stack+0x34/0x40 [ 2303.722243][ T6467] [] dump_stack_lvl+0x122/0x196 [ 2303.723904][ T6467] [] dump_stack+0x1c/0x24 [ 2303.725523][ T6467] [] should_fail_ex+0x3f8/0x4e0 [ 2303.727289][ T6467] [] should_fail+0xe/0x16 [ 2303.728809][ T6467] [] should_fail_usercopy+0x1e/0x26 [ 2303.730472][ T6467] [] _copy_from_user+0x3a/0xfe [ 2303.732041][ T6467] [] do_sock_getsockopt+0x2a2/0x5ea [ 2303.733713][ T6467] [] __sys_getsockopt+0x100/0x1b6 [ 2303.735142][ T6467] [] __riscv_sys_getsockopt+0xa6/0x114 [ 2303.736542][ T6467] [] syscall_handler+0x94/0x118 [ 2303.738136][ T6467] [] do_trap_ecall_u+0x1aa/0x216 [ 2303.739875][ T6467] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2306.231465][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2306.361036][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.366402][ T35] audit: type=1326 audit(2309.220:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.2.354" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2310.620962][ T6473] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 2319.118393][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 2321.618305][ T35] audit: type=1326 audit(2320.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.2.354" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2327.744301][ T6486] input: syz0 as /devices/virtual/input/input3 [ 2333.659361][ T6496] FAULT_INJECTION: forcing a failure. [ 2333.659361][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.662721][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz.2.361 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2333.664136][ T6496] Hardware name: riscv-virtio,qemu (DT) [ 2333.665137][ T6496] Call Trace: [ 2333.665950][ T6496] [] dump_backtrace+0x2e/0x3c [ 2333.667378][ T6496] [] show_stack+0x34/0x40 [ 2333.668712][ T6496] [] dump_stack_lvl+0x122/0x196 [ 2333.670131][ T6496] [] dump_stack+0x1c/0x24 [ 2333.671656][ T6496] [] should_fail_ex+0x3f8/0x4e0 [ 2333.673459][ T6496] [] should_failslab+0xba/0x102 [ 2333.674707][ T6496] [] kmem_cache_alloc_node_noprof+0x284/0x34e [ 2333.676159][ T6496] [] __alloc_skb+0x32c/0x42a [ 2333.677573][ T6496] [] tcp_stream_alloc_skb+0x38/0x516 [ 2333.678930][ T6496] [] tcp_sendmsg_locked+0x109a/0x367e [ 2333.680360][ T6496] [] tcp_sendmsg+0x32/0x4e [ 2333.683563][ T6496] [] inet_sendmsg+0x9c/0xda [ 2333.688012][ T6496] [] __sock_sendmsg+0xcc/0x160 [ 2333.690819][ T6496] [] __sys_sendto+0x230/0x320 [ 2333.692195][ T6496] [] __riscv_sys_sendto+0xc0/0x158 [ 2333.693576][ T6496] [] syscall_handler+0x94/0x118 [ 2333.694941][ T6496] [] do_trap_ecall_u+0x1aa/0x216 [ 2333.696732][ T6496] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2350.215921][ T6523] FAULT_INJECTION: forcing a failure. [ 2350.215921][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.225298][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.367 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2350.227864][ T6523] Hardware name: riscv-virtio,qemu (DT) [ 2350.229148][ T6523] Call Trace: [ 2350.230186][ T6523] [] dump_backtrace+0x2e/0x3c [ 2350.231905][ T6523] [] show_stack+0x34/0x40 [ 2350.233419][ T6523] [] dump_stack_lvl+0x122/0x196 [ 2350.235062][ T6523] [] dump_stack+0x1c/0x24 [ 2350.236741][ T6523] [] should_fail_ex+0x3f8/0x4e0 [ 2350.238465][ T6523] [] should_failslab+0xba/0x102 [ 2350.240026][ T6523] [] __kmalloc_noprof+0xca/0x4e4 [ 2350.241630][ T6523] [] tomoyo_realpath_from_path+0xb8/0x64a [ 2350.243326][ T6523] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 2350.244992][ T6523] [] tomoyo_file_ioctl+0x28/0x34 [ 2350.246653][ T6523] [] security_file_ioctl+0xb8/0x280 [ 2350.248274][ T6523] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 2350.250414][ T6523] [] syscall_handler+0x94/0x118 [ 2350.251917][ T6523] [] do_trap_ecall_u+0x1aa/0x216 [ 2350.253548][ T6523] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2350.311143][ T6523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2368.042569][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.079583][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.816196][ T6543] FAULT_INJECTION: forcing a failure. [ 2372.816196][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.830412][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.2.373 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2372.831574][ T6543] Hardware name: riscv-virtio,qemu (DT) [ 2372.832399][ T6543] Call Trace: [ 2372.832974][ T6543] [] dump_backtrace+0x2e/0x3c [ 2372.833909][ T6543] [] show_stack+0x34/0x40 [ 2372.834996][ T6543] [] dump_stack_lvl+0x122/0x196 [ 2372.835869][ T6543] [] dump_stack+0x1c/0x24 [ 2372.836846][ T6543] [] should_fail_ex+0x3f8/0x4e0 [ 2372.837805][ T6543] [] should_fail+0xe/0x16 [ 2372.838782][ T6543] [] should_fail_usercopy+0x1e/0x26 [ 2372.839846][ T6543] [] _copy_from_user+0x3a/0xfe [ 2372.840807][ T6543] [] __sys_bpf+0x204/0x42cc [ 2372.841839][ T6543] [] __riscv_sys_bpf+0x6c/0x9e [ 2372.842823][ T6543] [] syscall_handler+0x94/0x118 [ 2372.843691][ T6543] [] do_trap_ecall_u+0x1aa/0x216 [ 2372.844690][ T6543] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2380.006651][ T6547] xt_socket: unknown flags 0x8 [ 2396.612838][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 2396.615493][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 2398.594439][ T6562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2398.744219][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2398.881872][ T6565] FAULT_INJECTION: forcing a failure. [ 2398.881872][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.884166][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.2.381 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2398.885690][ T6565] Hardware name: riscv-virtio,qemu (DT) [ 2398.886690][ T6565] Call Trace: [ 2398.887628][ T6565] [] dump_backtrace+0x2e/0x3c [ 2398.889157][ T6565] [] show_stack+0x34/0x40 [ 2398.890472][ T6565] [] dump_stack_lvl+0x122/0x196 [ 2398.891905][ T6565] [] dump_stack+0x1c/0x24 [ 2398.893399][ T6565] [] should_fail_ex+0x3f8/0x4e0 [ 2398.894888][ T6565] [] should_fail+0xe/0x16 [ 2398.896363][ T6565] [] should_fail_usercopy+0x1e/0x26 [ 2398.897875][ T6565] [] _copy_from_user+0x3a/0xfe [ 2398.899304][ T6565] [] __sys_bpf+0x204/0x42cc [ 2398.900737][ T6565] [] __riscv_sys_bpf+0x6c/0x9e [ 2398.902111][ T6565] [] syscall_handler+0x94/0x118 [ 2398.903456][ T6565] [] do_trap_ecall_u+0x1aa/0x216 [ 2398.904973][ T6565] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2399.224297][ T6562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.382'. [ 2399.239505][ T6562] netlink: 43 bytes leftover after parsing attributes in process `syz.4.382'. [ 2399.241427][ T6562] netlink: 'syz.4.382': attribute type 5 has an invalid length. [ 2399.246499][ T6562] netlink: 43 bytes leftover after parsing attributes in process `syz.4.382'. [ 2401.323060][ T6568] FAULT_INJECTION: forcing a failure. [ 2401.323060][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.326175][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.383 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2401.328296][ T6568] Hardware name: riscv-virtio,qemu (DT) [ 2401.329574][ T6568] Call Trace: [ 2401.330678][ T6568] [] dump_backtrace+0x2e/0x3c [ 2401.332545][ T6568] [] show_stack+0x34/0x40 [ 2401.334177][ T6568] [] dump_stack_lvl+0x122/0x196 [ 2401.335894][ T6568] [] dump_stack+0x1c/0x24 [ 2401.337686][ T6568] [] should_fail_ex+0x3f8/0x4e0 [ 2401.339392][ T6568] [] should_failslab+0xba/0x102 [ 2401.341118][ T6568] [] kmem_cache_alloc_noprof+0x146/0x304 [ 2401.342829][ T6568] [] getname_flags.part.0+0x50/0x4b6 [ 2401.344567][ T6568] [] getname_uflags+0x9e/0xde [ 2401.346224][ T6568] [] __riscv_sys_execveat+0xae/0xf2 [ 2401.347855][ T6568] [] syscall_handler+0x94/0x118 [ 2401.349476][ T6568] [] do_trap_ecall_u+0x1aa/0x216 [ 2401.351176][ T6568] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2408.568959][ T6581] Illegal XDP return value 4294967274 on prog (id 38) dev N/A, expect packet loss! [ 2412.843520][ T6585] FAULT_INJECTION: forcing a failure. [ 2412.843520][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2412.845274][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.2.389 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2412.846445][ T6585] Hardware name: riscv-virtio,qemu (DT) [ 2412.847360][ T6585] Call Trace: [ 2412.848330][ T6585] [] dump_backtrace+0x2e/0x3c [ 2412.849374][ T6585] [] show_stack+0x34/0x40 [ 2412.850250][ T6585] [] dump_stack_lvl+0x122/0x196 [ 2412.851217][ T6585] [] dump_stack+0x1c/0x24 [ 2412.852157][ T6585] [] should_fail_ex+0x3f8/0x4e0 [ 2412.853156][ T6585] [] should_fail+0xe/0x16 [ 2412.854107][ T6585] [] should_fail_usercopy+0x1e/0x26 [ 2412.855100][ T6585] [] _copy_to_user+0x3a/0xc6 [ 2412.856030][ T6585] [] simple_read_from_buffer+0xd0/0x154 [ 2412.857355][ T6585] [] proc_fail_nth_read+0x194/0x27c [ 2412.858290][ T6585] [] vfs_read+0x1b0/0x86c [ 2412.859207][ T6585] [] ksys_read+0x128/0x266 [ 2412.860306][ T6585] [] __riscv_sys_read+0x6e/0x94 [ 2412.861236][ T6585] [] syscall_handler+0x94/0x118 [ 2412.862455][ T6585] [] do_trap_ecall_u+0x1aa/0x216 [ 2412.863441][ T6585] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2424.185608][ T6595] netlink: 'syz.4.391': attribute type 3 has an invalid length. [ 2429.396470][ T6602] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2439.743384][ T6608] infiniband syz1: set down [ 2439.745250][ T6608] infiniband syz1: added team_slave_0 [ 2439.773188][ T6608] syz1: rxe_create_cq: returned err = -12 [ 2439.776007][ T6608] infiniband syz1: Couldn't create ib_mad CQ [ 2439.822100][ T6608] infiniband syz1: Couldn't open port 1 [ 2440.794877][ T6608] RDS/IB: syz1: added [ 2440.816183][ T6608] smc: adding ib device syz1 with port count 1 [ 2440.832930][ T6608] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 2445.883142][ T6631] FAULT_INJECTION: forcing a failure. [ 2445.883142][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.895636][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.2.398 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2445.898155][ T6631] Hardware name: riscv-virtio,qemu (DT) [ 2445.899314][ T6631] Call Trace: [ 2445.900338][ T6631] [] dump_backtrace+0x2e/0x3c [ 2445.901984][ T6631] [] show_stack+0x34/0x40 [ 2445.903479][ T6631] [] dump_stack_lvl+0x122/0x196 [ 2445.905168][ T6631] [] dump_stack+0x1c/0x24 [ 2445.906780][ T6631] [] should_fail_ex+0x3f8/0x4e0 [ 2445.908466][ T6631] [] should_failslab+0xba/0x102 [ 2445.909949][ T6631] [] __kmalloc_cache_noprof+0x144/0x318 [ 2445.911629][ T6631] [] fuse_dev_do_write+0xc94/0x2fa6 [ 2445.913304][ T6631] [] fuse_dev_write+0x164/0x1e2 [ 2445.914815][ T6631] [] vfs_write+0x4d4/0x9b4 [ 2445.916460][ T6631] [] ksys_write+0x128/0x266 [ 2445.918037][ T6631] [] __riscv_sys_write+0x6e/0x94 [ 2445.919591][ T6631] [] syscall_handler+0x94/0x118 [ 2445.921127][ T6631] [] do_trap_ecall_u+0x1aa/0x216 [ 2445.922812][ T6631] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2451.555919][ T6640] ip6t_srh: unknown srh match flags 4000 [ 2452.903628][ T6641] netlink: 'syz.2.399': attribute type 27 has an invalid length. [ 2465.884295][ T6641] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.885820][ T6641] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.900305][ T6641] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.902729][ T6641] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.021880][ T6638] netlink: 'syz.2.399': attribute type 27 has an invalid length. [ 2468.414970][ T4845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.876554][ T4845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.842208][ T4845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.669820][ T4845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.755842][ T4845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2486.964473][ T4845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2487.162142][ T4845] bond0 (unregistering): Released all slaves [ 2498.167786][ T4845] hsr_slave_0: left promiscuous mode [ 2498.223620][ T4845] hsr_slave_1: left promiscuous mode [ 2498.524220][ T4845] veth1_macvtap: left promiscuous mode [ 2498.526067][ T4845] veth0_macvtap: left promiscuous mode [ 2498.534220][ T4845] veth1_vlan: left promiscuous mode [ 2498.537358][ T4845] veth0_vlan: left promiscuous mode [ 2503.772592][ T4845] pim6reg (unregistering): left allmulticast mode [ 2512.321600][ T3293] smc: removing ib device syz1 [ 2517.899945][ T6683] netlink: 116 bytes leftover after parsing attributes in process `syz.2.407'. [ 2551.646430][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2551.893121][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2558.248906][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.295527][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.033193][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.159508][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.523580][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.595384][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.738338][ T6660] hsr_slave_0: entered promiscuous mode [ 2567.784165][ T6660] hsr_slave_1: entered promiscuous mode [ 2578.152267][ T6660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2578.462999][ T6660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2578.784432][ T6660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2579.383223][ T6660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2585.700716][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.775832][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.444557][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2605.480636][ T7087] FAULT_INJECTION: forcing a failure. [ 2605.480636][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2605.491757][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.2.418 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2605.494099][ T7087] Hardware name: riscv-virtio,qemu (DT) [ 2605.495428][ T7087] Call Trace: [ 2605.496508][ T7087] [] dump_backtrace+0x2e/0x3c [ 2605.498369][ T7087] [] show_stack+0x34/0x40 [ 2605.499943][ T7087] [] dump_stack_lvl+0x122/0x196 [ 2605.501585][ T7087] [] dump_stack+0x1c/0x24 [ 2605.503080][ T7087] [] should_fail_ex+0x3f8/0x4e0 [ 2605.504705][ T7087] [] should_fail+0xe/0x16 [ 2605.506453][ T7087] [] should_fail_usercopy+0x1e/0x26 [ 2605.508373][ T7087] [] _copy_from_user+0x3a/0xfe [ 2605.510159][ T7087] [] copy_msghdr_from_user+0xbe/0x176 [ 2605.511617][ T7087] [] ___sys_sendmsg+0x112/0x1e6 [ 2605.513053][ T7087] [] __sys_sendmsg+0x130/0x1f0 [ 2605.514490][ T7087] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2605.515880][ T7087] [] syscall_handler+0x94/0x118 [ 2605.518301][ T7087] [] do_trap_ecall_u+0x1aa/0x216 [ 2605.519985][ T7087] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2630.360138][ T35] audit: type=1326 audit(2629.210:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.410404][ T35] audit: type=1326 audit(2629.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.550734][ T35] audit: type=1326 audit(2629.400:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=135 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.594045][ T35] audit: type=1326 audit(2629.400:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.688351][ T35] audit: type=1326 audit(2629.510:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.743500][ T35] audit: type=1326 audit(2629.600:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=178 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.746344][ T35] audit: type=1326 audit(2629.600:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.880647][ T35] audit: type=1326 audit(2629.670:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=107 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2630.919405][ T35] audit: type=1326 audit(2629.760:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2631.004986][ T35] audit: type=1326 audit(2629.780:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.2.423" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2661.313965][ T6660] veth0_vlan: entered promiscuous mode [ 2662.283039][ T6660] veth1_vlan: entered promiscuous mode [ 2663.859217][ T6660] veth0_macvtap: entered promiscuous mode [ 2664.013036][ T6660] veth1_macvtap: entered promiscuous mode [ 2665.155655][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 2665.444360][ T6660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.445889][ T6660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.481392][ T6660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.482922][ T6660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2675.963733][ T7178] pimreg: entered allmulticast mode [ 2694.222028][ T7201] FAULT_INJECTION: forcing a failure. [ 2694.222028][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2694.223594][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.2.437 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2694.224529][ T7201] Hardware name: riscv-virtio,qemu (DT) [ 2694.225131][ T7201] Call Trace: [ 2694.225664][ T7201] [] dump_backtrace+0x2e/0x3c [ 2694.226556][ T7201] [] show_stack+0x34/0x40 [ 2694.227384][ T7201] [] dump_stack_lvl+0x122/0x196 [ 2694.228330][ T7201] [] dump_stack+0x1c/0x24 [ 2694.229156][ T7201] [] should_fail_ex+0x3f8/0x4e0 [ 2694.230043][ T7201] [] should_fail+0xe/0x16 [ 2694.230941][ T7201] [] should_fail_usercopy+0x1e/0x26 [ 2694.231922][ T7201] [] _copy_from_user+0x3a/0xfe [ 2694.232911][ T7201] [] __sys_bpf+0x204/0x42cc [ 2694.233726][ T7201] [] __riscv_sys_bpf+0x6c/0x9e [ 2694.234545][ T7201] [] syscall_handler+0x94/0x118 [ 2694.235346][ T7201] [] do_trap_ecall_u+0x1aa/0x216 [ 2694.236192][ T7201] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2702.283487][ T35] kauditd_printk_skb: 38 callbacks suppressed [ 2702.284095][ T35] audit: type=1326 audit(2701.140:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.5.436" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2709.998349][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.020029][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.095133][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2711.125064][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2712.335805][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2712.375715][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2717.963857][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.080681][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2718.612070][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.650026][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2723.841654][ T7237] FAULT_INJECTION: forcing a failure. [ 2723.841654][ T7237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2723.844335][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz.2.445 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2723.846148][ T7237] Hardware name: riscv-virtio,qemu (DT) [ 2723.847922][ T7237] Call Trace: [ 2723.848961][ T7237] [] dump_backtrace+0x2e/0x3c [ 2723.850451][ T7237] [] show_stack+0x34/0x40 [ 2723.851420][ T7237] [] dump_stack_lvl+0x122/0x196 [ 2723.852717][ T7237] [] dump_stack+0x1c/0x24 [ 2723.853609][ T7237] [] should_fail_ex+0x3f8/0x4e0 [ 2723.854556][ T7237] [] should_fail+0xe/0x16 [ 2723.855492][ T7237] [] should_fail_usercopy+0x1e/0x26 [ 2723.856528][ T7237] [] _copy_from_user+0x3a/0xfe [ 2723.857455][ T7237] [] __sys_bpf+0x204/0x42cc [ 2723.858345][ T7237] [] __riscv_sys_bpf+0x6c/0x9e [ 2723.859246][ T7237] [] syscall_handler+0x94/0x118 [ 2723.860082][ T7237] [] do_trap_ecall_u+0x1aa/0x216 [ 2723.861035][ T7237] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2730.229535][ T7239] FAULT_INJECTION: forcing a failure. [ 2730.229535][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2730.234935][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.2.446 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2730.240050][ T7239] Hardware name: riscv-virtio,qemu (DT) [ 2730.242426][ T7239] Call Trace: [ 2730.244020][ T7239] [] dump_backtrace+0x2e/0x3c [ 2730.246765][ T7239] [] show_stack+0x34/0x40 [ 2730.248386][ T7239] [] dump_stack_lvl+0x122/0x196 [ 2730.250165][ T7239] [] dump_stack+0x1c/0x24 [ 2730.251725][ T7239] [] should_fail_ex+0x3f8/0x4e0 [ 2730.253284][ T7239] [] should_fail+0xe/0x16 [ 2730.254785][ T7239] [] should_fail_usercopy+0x1e/0x26 [ 2730.256550][ T7239] [] _copy_from_user+0x3a/0xfe [ 2730.258237][ T7239] [] do_sock_getsockopt+0x2a2/0x5ea [ 2730.259876][ T7239] [] __sys_getsockopt+0x100/0x1b6 [ 2730.261437][ T7239] [] __riscv_sys_getsockopt+0xa6/0x114 [ 2730.262908][ T7239] [] syscall_handler+0x94/0x118 [ 2730.264448][ T7239] [] do_trap_ecall_u+0x1aa/0x216 [ 2730.266175][ T7239] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2738.135607][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2738.170568][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.575898][ T7245] trusted_key: encrypted_key: insufficient parameters specified [ 2741.095713][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.259172][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2760.974143][ T7262] netlink: 'syz.5.453': attribute type 4 has an invalid length. [ 2765.952274][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2765.963750][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2774.610277][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 2774.615371][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 2775.804820][ T7284] process 'syz.5.460' launched './file1' with NULL argv: empty string added [ 2777.379144][ T7287] FAULT_INJECTION: forcing a failure. [ 2777.379144][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 2777.382668][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.2.461 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2777.384585][ T7287] Hardware name: riscv-virtio,qemu (DT) [ 2777.385709][ T7287] Call Trace: [ 2777.386709][ T7287] [] dump_backtrace+0x2e/0x3c [ 2777.388376][ T7287] [] show_stack+0x34/0x40 [ 2777.389798][ T7287] [] dump_stack_lvl+0x122/0x196 [ 2777.391367][ T7287] [] dump_stack+0x1c/0x24 [ 2777.392868][ T7287] [] should_fail_ex+0x3f8/0x4e0 [ 2777.394517][ T7287] [] should_failslab+0xba/0x102 [ 2777.396026][ T7287] [] __kmalloc_node_noprof+0xce/0x522 [ 2777.397754][ T7287] [] load_msg+0x4c/0x402 [ 2777.399238][ T7287] [] do_mq_timedsend+0x38c/0xb40 [ 2777.400692][ T7287] [] __riscv_sys_mq_timedsend+0x1aa/0x234 [ 2777.402243][ T7287] [] syscall_handler+0x94/0x118 [ 2777.403766][ T7287] [] do_trap_ecall_u+0x1aa/0x216 [ 2777.405359][ T7287] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2777.935227][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 2778.076125][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 2783.502397][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 2783.505252][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 2795.648940][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2795.836054][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2801.430864][ T4917] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0 [ 2801.434883][ T4917] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0 [ 2801.854866][ T4917] hid-generic 0000:0D17:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2805.891422][ T7325] FAULT_INJECTION: forcing a failure. [ 2805.891422][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2805.893202][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.2.466 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2805.894200][ T7325] Hardware name: riscv-virtio,qemu (DT) [ 2805.894955][ T7325] Call Trace: [ 2805.895523][ T7325] [] dump_backtrace+0x2e/0x3c [ 2805.896644][ T7325] [] show_stack+0x34/0x40 [ 2805.897752][ T7325] [] dump_stack_lvl+0x122/0x196 [ 2805.898796][ T7325] [] dump_stack+0x1c/0x24 [ 2805.899699][ T7325] [] should_fail_ex+0x3f8/0x4e0 [ 2805.900793][ T7325] [] should_fail+0xe/0x16 [ 2805.901773][ T7325] [] should_fail_usercopy+0x1e/0x26 [ 2805.902881][ T7325] [] _copy_from_user+0x3a/0xfe [ 2805.904093][ T7325] [] copy_msghdr_from_user+0xbe/0x176 [ 2805.905400][ T7325] [] ___sys_sendmsg+0x112/0x1e6 [ 2805.906438][ T7325] [] __sys_sendmsg+0x130/0x1f0 [ 2805.907622][ T7325] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2805.909864][ T7325] [] syscall_handler+0x94/0x118 [ 2805.911109][ T7325] [] do_trap_ecall_u+0x1aa/0x216 [ 2805.912357][ T7325] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2811.050311][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.056435][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.780724][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.814165][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2861.183815][ T7370] FAULT_INJECTION: forcing a failure. [ 2861.183815][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2861.196006][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.2.480 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2861.200864][ T7370] Hardware name: riscv-virtio,qemu (DT) [ 2861.203659][ T7370] Call Trace: [ 2861.205509][ T7370] [] dump_backtrace+0x2e/0x3c [ 2861.208712][ T7370] [] show_stack+0x34/0x40 [ 2861.211573][ T7370] [] dump_stack_lvl+0x122/0x196 [ 2861.214750][ T7370] [] dump_stack+0x1c/0x24 [ 2861.216372][ T7370] [] should_fail_ex+0x3f8/0x4e0 [ 2861.218782][ T7370] [] should_fail+0xe/0x16 [ 2861.220457][ T7370] [] should_fail_usercopy+0x1e/0x26 [ 2861.222113][ T7370] [] _copy_from_user+0x3a/0xfe [ 2861.223687][ T7370] [] copy_msghdr_from_user+0xbe/0x176 [ 2861.225244][ T7370] [] ___sys_recvmsg+0xde/0x19e [ 2861.226823][ T7370] [] do_recvmmsg+0x2a8/0x730 [ 2861.228418][ T7370] [] __riscv_sys_recvmmsg+0x228/0x26e [ 2861.229926][ T7370] [] syscall_handler+0x94/0x118 [ 2861.231416][ T7370] [] do_trap_ecall_u+0x1aa/0x216 [ 2861.233050][ T7370] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2871.186071][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2871.219287][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2884.602392][ T7395] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 2884.715136][ T7395] netlink: 'syz.2.484': attribute type 2 has an invalid length. [ 2885.161526][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 2885.164839][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 2892.032088][ T7400] netlink: 64 bytes leftover after parsing attributes in process `syz.5.487'. [ 2901.692123][ T7411] FAULT_INJECTION: forcing a failure. [ 2901.692123][ T7411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2901.696944][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.5.490 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2901.699531][ T7411] Hardware name: riscv-virtio,qemu (DT) [ 2901.701174][ T7411] Call Trace: [ 2901.702863][ T7411] [] dump_backtrace+0x2e/0x3c [ 2901.707227][ T7411] [] show_stack+0x34/0x40 [ 2901.708880][ T7411] [] dump_stack_lvl+0x122/0x196 [ 2901.710573][ T7411] [] dump_stack+0x1c/0x24 [ 2901.712216][ T7411] [] should_fail_ex+0x3f8/0x4e0 [ 2901.713939][ T7411] [] should_fail+0xe/0x16 [ 2901.715555][ T7411] [] should_fail_usercopy+0x1e/0x26 [ 2901.718023][ T7411] [] _copy_from_user+0x3a/0xfe [ 2901.719764][ T7411] [] copy_msghdr_from_user+0xbe/0x176 [ 2901.721491][ T7411] [] ___sys_sendmsg+0x112/0x1e6 [ 2901.723047][ T7411] [] __sys_sendmsg+0x130/0x1f0 [ 2901.724610][ T7411] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2901.726201][ T7411] [] syscall_handler+0x94/0x118 [ 2901.727830][ T7411] [] do_trap_ecall_u+0x1aa/0x216 [ 2901.729708][ T7411] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2903.592460][ T35] audit: type=1326 audit(2902.420:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.491" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2904.083069][ T35] audit: type=1326 audit(2902.940:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.491" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2906.444038][ T7416] FAULT_INJECTION: forcing a failure. [ 2906.444038][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.445924][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz.5.492 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2906.447214][ T7416] Hardware name: riscv-virtio,qemu (DT) [ 2906.447940][ T7416] Call Trace: [ 2906.448790][ T7416] [] dump_backtrace+0x2e/0x3c [ 2906.450441][ T7416] [] show_stack+0x34/0x40 [ 2906.451881][ T7416] [] dump_stack_lvl+0x122/0x196 [ 2906.453583][ T7416] [] dump_stack+0x1c/0x24 [ 2906.454518][ T7416] [] should_fail_ex+0x3f8/0x4e0 [ 2906.455583][ T7416] [] should_fail+0xe/0x16 [ 2906.456705][ T7416] [] should_fail_usercopy+0x1e/0x26 [ 2906.457965][ T7416] [] _copy_from_user+0x3a/0xfe [ 2906.459045][ T7416] [] __sys_bpf+0x204/0x42cc [ 2906.460387][ T7416] [] __riscv_sys_bpf+0x6c/0x9e [ 2906.461573][ T7416] [] syscall_handler+0x94/0x118 [ 2906.462751][ T7416] [] do_trap_ecall_u+0x1aa/0x216 [ 2906.464011][ T7416] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2918.085863][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2918.104533][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2931.501356][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2931.584905][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2931.893402][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2931.950849][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2932.191505][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2932.381623][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2941.444102][ T7448] FAULT_INJECTION: forcing a failure. [ 2941.444102][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2941.579963][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.5.498 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2941.584830][ T7448] Hardware name: riscv-virtio,qemu (DT) [ 2941.587456][ T7448] Call Trace: [ 2941.589494][ T7448] [] dump_backtrace+0x2e/0x3c [ 2941.592633][ T7448] [] show_stack+0x34/0x40 [ 2941.595625][ T7448] [] dump_stack_lvl+0x122/0x196 [ 2941.600569][ T7448] [] dump_stack+0x1c/0x24 [ 2941.610766][ T7448] [] should_fail_ex+0x3f8/0x4e0 [ 2941.621906][ T7448] [] should_fail+0xe/0x16 [ 2941.627067][ T7448] [] should_fail_usercopy+0x1e/0x26 [ 2941.631820][ T7448] [] _copy_from_user+0x3a/0xfe [ 2941.642696][ T7448] [] keyctl_dh_compute+0xc4/0x148 [ 2941.645999][ T7448] [] __riscv_sys_keyctl+0x158/0x572 [ 2941.658858][ T7448] [] syscall_handler+0x94/0x118 [ 2941.670034][ T7448] [] do_trap_ecall_u+0x1aa/0x216 [ 2941.672139][ T7448] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2952.535098][ T7452] ubi0: attaching mtd0 [ 2952.950835][ T7452] ubi0: scanning is finished [ 2952.954304][ T7452] ubi0: empty MTD device detected [ 2955.201093][ T7452] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2955.205264][ T7452] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2955.215560][ T7452] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2955.234805][ T7452] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 2955.378128][ T7452] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2955.381846][ T7452] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2955.385576][ T7452] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3866869612 [ 2955.458606][ T7452] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2955.464586][ T7457] ubi0: background thread "ubi_bgt0d" started, PID 7457 [ 2955.510961][ T7453] ubi0: detaching mtd0 [ 2956.350673][ T7453] ubi0: mtd0 is detached [ 2960.095520][ T7463] binder: 7462:7463 ioctl 400c620e 0 returned -14 [ 2970.816385][ T7467] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 2989.718773][ T7475] FAULT_INJECTION: forcing a failure. [ 2989.718773][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2989.723524][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.2.506 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2989.727082][ T7475] Hardware name: riscv-virtio,qemu (DT) [ 2989.729481][ T7475] Call Trace: [ 2989.731051][ T7475] [] dump_backtrace+0x2e/0x3c [ 2989.732857][ T7475] [] show_stack+0x34/0x40 [ 2989.735768][ T7475] [] dump_stack_lvl+0x122/0x196 [ 2989.738615][ T7475] [] dump_stack+0x1c/0x24 [ 2989.741011][ T7475] [] should_fail_ex+0x3f8/0x4e0 [ 2989.743459][ T7475] [] should_fail+0xe/0x16 [ 2989.746405][ T7475] [] should_fail_usercopy+0x1e/0x26 [ 2989.748268][ T7475] [] _copy_from_user+0x3a/0xfe [ 2989.750913][ T7475] [] copy_msghdr_from_user+0xbe/0x176 [ 2989.752723][ T7475] [] ___sys_sendmsg+0x112/0x1e6 [ 2989.755147][ T7475] [] __sys_sendmsg+0x130/0x1f0 [ 2989.756789][ T7475] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2989.758807][ T7475] [] syscall_handler+0x94/0x118 [ 2989.761413][ T7475] [] do_trap_ecall_u+0x1aa/0x216 [ 2989.763194][ T7475] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2997.200312][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'. [ 2997.204504][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'. [ 3001.855193][ T7484] dlm: Unknown command passed to DLM device : 0 [ 3001.855193][ T7484] [ 3020.251219][ T7496] FAULT_INJECTION: forcing a failure. [ 3020.251219][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.259964][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.5.514 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3020.263233][ T7496] Hardware name: riscv-virtio,qemu (DT) [ 3020.265373][ T7496] Call Trace: [ 3020.267153][ T7496] [] dump_backtrace+0x2e/0x3c [ 3020.269554][ T7496] [] show_stack+0x34/0x40 [ 3020.271833][ T7496] [] dump_stack_lvl+0x122/0x196 [ 3020.274398][ T7496] [] dump_stack+0x1c/0x24 [ 3020.276731][ T7496] [] should_fail_ex+0x3f8/0x4e0 [ 3020.279258][ T7496] [] should_failslab+0xba/0x102 [ 3020.281706][ T7496] [] __kmalloc_noprof+0xca/0x4e4 [ 3020.284311][ T7496] [] tomoyo_realpath_from_path+0xb8/0x64a [ 3020.286892][ T7496] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 3020.289642][ T7496] [] tomoyo_file_ioctl+0x28/0x34 [ 3020.292100][ T7496] [] security_file_ioctl+0xb8/0x280 [ 3020.294955][ T7496] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 3020.298793][ T7496] [] syscall_handler+0x94/0x118 [ 3020.301460][ T7496] [] do_trap_ecall_u+0x1aa/0x216 [ 3020.304045][ T7496] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3020.312446][ T7496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3040.284708][ T7516] FAULT_INJECTION: forcing a failure. [ 3040.284708][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3040.332764][ T7516] CPU: 1 UID: 0 PID: 7516 Comm: syz.2.520 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3040.335530][ T7516] Hardware name: riscv-virtio,qemu (DT) [ 3040.336453][ T7516] Call Trace: [ 3040.337417][ T7516] [] dump_backtrace+0x2e/0x3c [ 3040.338830][ T7516] [] show_stack+0x34/0x40 [ 3040.339916][ T7516] [] dump_stack_lvl+0x122/0x196 [ 3040.341107][ T7516] [] dump_stack+0x1c/0x24 [ 3040.342512][ T7516] [] should_fail_ex+0x3f8/0x4e0 [ 3040.343935][ T7516] [] should_fail+0xe/0x16 [ 3040.345522][ T7516] [] should_fail_usercopy+0x1e/0x26 [ 3040.347608][ T7516] [] _copy_from_user+0x3a/0xfe [ 3040.349140][ T7516] [] do_sock_getsockopt+0x2a2/0x5ea [ 3040.350329][ T7516] [] __sys_getsockopt+0x100/0x1b6 [ 3040.351402][ T7516] [] __riscv_sys_getsockopt+0xa6/0x114 [ 3040.352498][ T7516] [] syscall_handler+0x94/0x118 [ 3040.353676][ T7516] [] do_trap_ecall_u+0x1aa/0x216 [ 3040.354876][ T7516] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3048.594100][ T7520] FAULT_INJECTION: forcing a failure. [ 3048.594100][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.603631][ T7520] CPU: 1 UID: 60928 PID: 7520 Comm: syz.2.522 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3048.607692][ T7520] Hardware name: riscv-virtio,qemu (DT) [ 3048.609966][ T7520] Call Trace: [ 3048.611678][ T7520] [] dump_backtrace+0x2e/0x3c [ 3048.614794][ T7520] [] show_stack+0x34/0x40 [ 3048.616347][ T7520] [] dump_stack_lvl+0x122/0x196 [ 3048.619678][ T7520] [] dump_stack+0x1c/0x24 [ 3048.621554][ T7520] [] should_fail_ex+0x3f8/0x4e0 [ 3048.624531][ T7520] [] should_failslab+0xba/0x102 [ 3048.626413][ T7520] [] kmem_cache_alloc_noprof+0x146/0x304 [ 3048.630413][ T7520] [] getname_flags.part.0+0x50/0x4b6 [ 3048.633703][ T7520] [] getname_flags+0x98/0xd8 [ 3048.636819][ T7520] [] __riscv_sys_mkdirat+0x74/0xa0 [ 3048.639960][ T7520] [] syscall_handler+0x94/0x118 [ 3048.643136][ T7520] [] do_trap_ecall_u+0x1aa/0x216 [ 3048.646454][ T7520] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3055.945056][ T7527] FAULT_INJECTION: forcing a failure. [ 3055.945056][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3055.980550][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.2.525 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3055.984417][ T7527] Hardware name: riscv-virtio,qemu (DT) [ 3055.986223][ T7527] Call Trace: [ 3055.987802][ T7527] [] dump_backtrace+0x2e/0x3c [ 3055.990419][ T7527] [] show_stack+0x34/0x40 [ 3055.992995][ T7527] [] dump_stack_lvl+0x122/0x196 [ 3055.995352][ T7527] [] dump_stack+0x1c/0x24 [ 3055.997695][ T7527] [] should_fail_ex+0x3f8/0x4e0 [ 3056.000380][ T7527] [] should_fail+0xe/0x16 [ 3056.003735][ T7527] [] should_fail_usercopy+0x1e/0x26 [ 3056.006814][ T7527] [] _copy_from_user+0x3a/0xfe [ 3056.009606][ T7527] [] copy_msghdr_from_user+0xbe/0x176 [ 3056.012851][ T7527] [] ___sys_sendmsg+0x112/0x1e6 [ 3056.016336][ T7527] [] __sys_sendmsg+0x130/0x1f0 [ 3056.019470][ T7527] [] __riscv_sys_sendmsg+0x70/0xa2 [ 3056.023357][ T7527] [] syscall_handler+0x94/0x118 [ 3056.026389][ T7527] [] do_trap_ecall_u+0x1aa/0x216 [ 3056.029610][ T7527] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3057.080445][ T7525] FAULT_INJECTION: forcing a failure. [ 3057.080445][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3057.155498][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.5.524 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3057.160516][ T7525] Hardware name: riscv-virtio,qemu (DT) [ 3057.161756][ T7525] Call Trace: [ 3057.162993][ T7525] [] dump_backtrace+0x2e/0x3c [ 3057.164686][ T7525] [] show_stack+0x34/0x40 [ 3057.166292][ T7525] [] dump_stack_lvl+0x122/0x196 [ 3057.168051][ T7525] [] dump_stack+0x1c/0x24 [ 3057.169715][ T7525] [] should_fail_ex+0x3f8/0x4e0 [ 3057.171350][ T7525] [] should_fail+0xe/0x16 [ 3057.173032][ T7525] [] should_fail_usercopy+0x1e/0x26 [ 3057.175930][ T7525] [] _copy_from_user+0x3a/0xfe [ 3057.178869][ T7525] [] io_submit_one+0xd8/0x19c2 [ 3057.181567][ T7525] [] __riscv_sys_io_submit+0x202/0x376 [ 3057.184290][ T7525] [] syscall_handler+0x94/0x118 [ 3057.187490][ T7525] [] do_trap_ecall_u+0x1aa/0x216 [ 3057.190572][ T7525] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3067.418742][ T7538] FAULT_INJECTION: forcing a failure. [ 3067.418742][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3067.425888][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.2.528 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3067.430105][ T7538] Hardware name: riscv-virtio,qemu (DT) [ 3067.431394][ T7538] Call Trace: [ 3067.432528][ T7538] [] dump_backtrace+0x2e/0x3c [ 3067.434169][ T7538] [] show_stack+0x34/0x40 [ 3067.435581][ T7538] [] dump_stack_lvl+0x122/0x196 [ 3067.437580][ T7538] [] dump_stack+0x1c/0x24 [ 3067.439211][ T7538] [] should_fail_ex+0x3f8/0x4e0 [ 3067.440957][ T7538] [] should_fail+0xe/0x16 [ 3067.442611][ T7538] [] should_fail_usercopy+0x1e/0x26 [ 3067.444337][ T7538] [] _copy_to_user+0x3a/0xc6 [ 3067.445876][ T7538] [] copy_siginfo_to_user+0x28/0xb4 [ 3067.447967][ T7538] [] arch_do_signal_or_restart+0x4a0/0x1188 [ 3067.449551][ T7538] [] syscall_exit_to_user_mode+0x2a6/0x31e [ 3067.451280][ T7538] [] do_trap_ecall_u+0x86/0x216 [ 3067.453126][ T7538] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3068.674705][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.527'. [ 3082.635026][ T7549] FAULT_INJECTION: forcing a failure. [ 3082.635026][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3082.653321][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.5.532 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3082.658438][ T7549] Hardware name: riscv-virtio,qemu (DT) [ 3082.660664][ T7549] Call Trace: [ 3082.662436][ T7549] [] dump_backtrace+0x2e/0x3c [ 3082.665649][ T7549] [] show_stack+0x34/0x40 [ 3082.669227][ T7549] [] dump_stack_lvl+0x122/0x196 [ 3082.672477][ T7549] [] dump_stack+0x1c/0x24 [ 3082.674961][ T7549] [] should_fail_ex+0x3f8/0x4e0 [ 3082.678003][ T7549] [] should_fail+0xe/0x16 [ 3082.681009][ T7549] [] should_fail_usercopy+0x1e/0x26 [ 3082.683859][ T7549] [] _copy_from_user+0x3a/0xfe [ 3082.686473][ T7549] [] copy_msghdr_from_user+0xbe/0x176 [ 3082.689755][ T7549] [] ___sys_sendmsg+0x112/0x1e6 [ 3082.693216][ T7549] [] __sys_sendmsg+0x130/0x1f0 [ 3082.696339][ T7549] [] __riscv_sys_sendmsg+0x70/0xa2 [ 3082.700328][ T7549] [] syscall_handler+0x94/0x118 [ 3082.702944][ T7549] [] do_trap_ecall_u+0x1aa/0x216 [ 3082.706556][ T7549] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3092.011985][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 3092.083059][ T7559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.535'. [ 3092.222296][ T7559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.535'. [ 3098.182872][ T35] audit: type=1800 audit(3097.030:74): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.533" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3118.821443][ T7575] ucma_write: process 574 (syz.2.539) changed security contexts after opening file descriptor, this is not allowed. [ 3120.282780][ T7577] ptrace attach of "/syz-executor exec"[7578] was attempted by "/syz-executor exec"[7577] [ 3139.192564][ T7588] netlink: 'syz.5.542': attribute type 4 has an invalid length. [ 3139.446017][ T7588] netlink: 'syz.5.542': attribute type 4 has an invalid length. [ 3143.115317][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 3152.773568][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.121421][ C1] vkms_vblank_simulate: vblank timer overrun [ 3153.273887][ C1] vkms_vblank_simulate: vblank timer overrun [ 3160.996195][ T7607] FAULT_INJECTION: forcing a failure. [ 3160.996195][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3161.001966][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.2.546 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3161.005244][ T7607] Hardware name: riscv-virtio,qemu (DT) [ 3161.007446][ T7607] Call Trace: [ 3161.008635][ T7607] [] dump_backtrace+0x2e/0x3c [ 3161.010128][ T7607] [] show_stack+0x34/0x40 [ 3161.011418][ T7607] [] dump_stack_lvl+0x122/0x196 [ 3161.013685][ T7607] [] dump_stack+0x1c/0x24 [ 3161.016008][ T7607] [] should_fail_ex+0x3f8/0x4e0 [ 3161.018196][ T7607] [] should_fail+0xe/0x16 [ 3161.020688][ T7607] [] should_fail_usercopy+0x1e/0x26 [ 3161.023315][ T7607] [] _copy_from_user+0x3a/0xfe [ 3161.025877][ T7607] [] __sys_bpf+0x204/0x42cc [ 3161.027869][ T7607] [] __riscv_sys_bpf+0x6c/0x9e [ 3161.029727][ T7607] [] syscall_handler+0x94/0x118 [ 3161.031122][ T7607] [] do_trap_ecall_u+0x1aa/0x216 [ 3161.033671][ T7607] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3167.050110][ T7605] UHID_CREATE from different security context by process 148 (syz.5.545), this is not allowed. [ 3167.262151][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3167.422672][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3194.594825][ T35] audit: type=1326 audit(3193.450:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.2.553" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 3205.654341][ T35] audit: type=1326 audit(3204.510:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.2.555" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 3206.903879][ T7638] FAULT_INJECTION: forcing a failure. [ 3206.903879][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3206.936525][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.2.555 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3206.940363][ T7638] Hardware name: riscv-virtio,qemu (DT) [ 3206.942597][ T7638] Call Trace: [ 3206.944340][ T7638] [] dump_backtrace+0x2e/0x3c [ 3206.946981][ T7638] [] show_stack+0x34/0x40 [ 3206.949320][ T7638] [] dump_stack_lvl+0x122/0x196 [ 3206.952146][ T7638] [] dump_stack+0x1c/0x24 [ 3206.954609][ T7638] [] should_fail_ex+0x3f8/0x4e0 [ 3206.957244][ T7638] [] should_fail+0xe/0x16 [ 3206.959689][ T7638] [] should_fail_usercopy+0x1e/0x26 [ 3206.962438][ T7638] [] _copy_to_user+0x3a/0xc6 [ 3206.964851][ T7638] [] simple_read_from_buffer+0xd0/0x154 [ 3206.968018][ T7638] [] proc_fail_nth_read+0x194/0x27c [ 3206.970480][ T7638] [] vfs_read+0x1b0/0x86c [ 3206.972860][ T7638] [] ksys_read+0x128/0x266 [ 3206.975253][ T7638] [] __riscv_sys_read+0x6e/0x94 [ 3206.977727][ T7638] [] syscall_handler+0x94/0x118 [ 3206.979993][ T7638] [] do_trap_ecall_u+0x1aa/0x216 [ 3206.982672][ T7638] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3209.563291][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.643068][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3217.693332][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.557'. [ 3261.191024][ T7671] batadv_slave_0: entered promiscuous mode [ 3261.442778][ T7670] batadv_slave_0: left promiscuous mode [ 3264.068909][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.180864][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3271.929907][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3271.942249][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3311.078402][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3311.132044][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3333.611931][ T7718] FAULT_INJECTION: forcing a failure. [ 3333.611931][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3333.614528][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.2.575 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3333.616736][ T7718] Hardware name: riscv-virtio,qemu (DT) [ 3333.619106][ T7718] Call Trace: [ 3333.620769][ T7718] [] dump_backtrace+0x2e/0x3c [ 3333.622743][ T7718] [] show_stack+0x34/0x40 [ 3333.625132][ T7718] [] dump_stack_lvl+0x122/0x196 [ 3333.628838][ T7718] [] dump_stack+0x1c/0x24 [ 3333.631454][ T7718] [] should_fail_ex+0x3f8/0x4e0 [ 3333.633427][ T7718] [] should_fail+0xe/0x16 [ 3333.635923][ T7718] [] should_fail_usercopy+0x1e/0x26 [ 3333.647732][ T7718] [] _copy_from_user+0x3a/0xfe [ 3333.649637][ T7718] [] __sys_bpf+0x204/0x42cc [ 3333.651278][ T7718] [] __riscv_sys_bpf+0x6c/0x9e [ 3333.652912][ T7718] [] syscall_handler+0x94/0x118 [ 3333.654602][ T7718] [] do_trap_ecall_u+0x1aa/0x216 [ 3333.656232][ T7718] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3356.980971][ T7727] capability: warning: `syz.5.578' uses deprecated v2 capabilities in a way that may be insecure [ 3384.464890][ T7749] FAULT_INJECTION: forcing a failure. [ 3384.464890][ T7749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3384.490464][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.5.582 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3384.494320][ T7749] Hardware name: riscv-virtio,qemu (DT) [ 3384.496431][ T7749] Call Trace: [ 3384.498324][ T7749] [] dump_backtrace+0x2e/0x3c [ 3384.501137][ T7749] [] show_stack+0x34/0x40 [ 3384.502591][ T7749] [] dump_stack_lvl+0x122/0x196 [ 3384.505251][ T7749] [] dump_stack+0x1c/0x24 [ 3384.507598][ T7749] [] should_fail_ex+0x3f8/0x4e0 [ 3384.510319][ T7749] [] should_fail+0xe/0x16 [ 3384.511949][ T7749] [] should_fail_usercopy+0x1e/0x26 [ 3384.514819][ T7749] [] _copy_from_user+0x3a/0xfe [ 3384.516987][ T7749] [] __sys_bpf+0x204/0x42cc [ 3384.519131][ T7749] [] __riscv_sys_bpf+0x6c/0x9e [ 3384.521859][ T7749] [] syscall_handler+0x94/0x118 [ 3384.524753][ T7749] [] do_trap_ecall_u+0x1aa/0x216 [ 3384.526354][ T7749] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3389.574265][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3389.634820][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3389.980319][ T7751] futex_wake_op: syz.2.584 tries to shift op by -1; fix this program [ 3402.303818][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.979165][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3423.692153][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3423.959378][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3425.239966][ T7768] xt_TCPMSS: Only works on TCP SYN packets [ 3425.547894][ T7768] tmpfs: Bad value for 'mpol' [ 3425.580411][ T7769] tmpfs: Bad value for 'mpol' [ 3436.863236][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 3452.663782][ T7788] FAULT_INJECTION: forcing a failure. [ 3452.663782][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3452.760617][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.2.595 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3452.764694][ T7788] Hardware name: riscv-virtio,qemu (DT) [ 3452.766866][ T7788] Call Trace: [ 3452.768537][ T7788] [] dump_backtrace+0x2e/0x3c [ 3452.771635][ T7788] [] show_stack+0x34/0x40 [ 3452.774665][ T7788] [] dump_stack_lvl+0x122/0x196 [ 3452.787849][ T7788] [] dump_stack+0x1c/0x24 [ 3452.789974][ T7788] [] should_fail_ex+0x3f8/0x4e0 [ 3452.792149][ T7788] [] should_fail+0xe/0x16 [ 3452.795165][ T7788] [] should_fail_usercopy+0x1e/0x26 [ 3452.802615][ T7788] [] _copy_from_user+0x3a/0xfe [ 3452.805885][ T7788] [] copy_msghdr_from_user+0xbe/0x176 [ 3452.809168][ T7788] [] ___sys_sendmsg+0x112/0x1e6 [ 3452.818781][ T7788] [] __sys_sendmmsg+0x1fa/0x52a [ 3452.830246][ T7788] [] __riscv_sys_sendmmsg+0x8c/0xd8 [ 3452.832017][ T7788] [] syscall_handler+0x94/0x118 [ 3452.833712][ T7788] [] do_trap_ecall_u+0x1aa/0x216 [ 3452.835328][ T7788] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3455.071033][ T7785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.594'. [ 3456.691773][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3456.735712][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3456.989119][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.019896][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.023054][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.026284][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.085588][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.113757][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.141994][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.145524][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.222875][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.225869][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.253968][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.273149][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.286344][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.293219][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.295098][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.310041][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.314466][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.316330][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.330606][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.334984][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.338477][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.340301][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.341952][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.343638][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.348681][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.350612][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.352308][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.355261][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.360885][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.364051][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.393267][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.430809][ T7774] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3457.561718][ T7774] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 3463.040292][ T7798] ipt_REJECT: TCP_RESET invalid for non-tcp [ 3488.223868][ T7808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3494.231769][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 3501.272889][ T7814] FAULT_INJECTION: forcing a failure. [ 3501.272889][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 3501.276477][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.2.602 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3501.278722][ T7814] Hardware name: riscv-virtio,qemu (DT) [ 3501.280842][ T7814] Call Trace: [ 3501.282426][ T7814] [] dump_backtrace+0x2e/0x3c [ 3501.285030][ T7814] [] show_stack+0x34/0x40 [ 3501.287560][ T7814] [] dump_stack_lvl+0x122/0x196 [ 3501.290164][ T7814] [] dump_stack+0x1c/0x24 [ 3501.292690][ T7814] [] should_fail_ex+0x3f8/0x4e0 [ 3501.295267][ T7814] [] should_failslab+0xba/0x102 [ 3501.298287][ T7814] [] kmem_cache_alloc_node_noprof+0x284/0x34e [ 3501.301150][ T7814] [] __alloc_skb+0x32c/0x42a [ 3501.303737][ T7814] [] alloc_skb_with_frags+0xe2/0x836 [ 3501.306306][ T7814] [] sock_alloc_send_pskb+0x6e2/0x82a [ 3501.309195][ T7814] [] unix_dgram_sendmsg+0x3b8/0x15bc [ 3501.311765][ T7814] [] unix_seqpacket_sendmsg+0x11a/0x1ac [ 3501.314719][ T7814] [] __sock_sendmsg+0xcc/0x160 [ 3501.317836][ T7814] [] sock_write_iter+0x2a0/0x3ba [ 3501.320563][ T7814] [] vfs_write+0x4d4/0x9b4 [ 3501.323494][ T7814] [] ksys_write+0x1f0/0x266 [ 3501.326075][ T7814] [] __riscv_sys_write+0x6e/0x94 [ 3501.328739][ T7814] [] syscall_handler+0x94/0x118 [ 3501.331045][ T7814] [] do_trap_ecall_u+0x1aa/0x216 [ 3501.333713][ T7814] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3506.644661][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 3526.110561][ T7864] FAULT_INJECTION: forcing a failure. [ 3526.110561][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 3526.125051][ T7864] CPU: 1 UID: 0 PID: 7864 Comm: syz.5.609 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3526.129301][ T7864] Hardware name: riscv-virtio,qemu (DT) [ 3526.131410][ T7864] Call Trace: [ 3526.133112][ T7864] [] dump_backtrace+0x2e/0x3c [ 3526.134757][ T7864] [] show_stack+0x34/0x40 [ 3526.136082][ T7864] [] dump_stack_lvl+0x122/0x196 [ 3526.137580][ T7864] [] dump_stack+0x1c/0x24 [ 3526.138972][ T7864] [] should_fail_ex+0x3f8/0x4e0 [ 3526.140514][ T7864] [] should_failslab+0xba/0x102 [ 3526.141955][ T7864] [] __kmalloc_noprof+0xca/0x4e4 [ 3526.143426][ T7864] [] tomoyo_realpath_from_path+0xb8/0x64a [ 3526.161598][ T7864] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 3526.163299][ T7864] [] tomoyo_file_ioctl+0x28/0x34 [ 3526.164871][ T7864] [] security_file_ioctl+0xb8/0x280 [ 3526.166349][ T7864] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 3526.167732][ T7864] [] syscall_handler+0x94/0x118 [ 3526.169136][ T7864] [] do_trap_ecall_u+0x1aa/0x216 [ 3526.170611][ T7864] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3526.400643][ T7864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3543.324877][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 3545.538956][ T7869] macsec1: entered allmulticast mode [ 3545.541610][ T7869] veth1_macvtap: entered allmulticast mode [ 3545.823281][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3545.870940][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3547.184993][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 3548.210450][ T7869] veth1_macvtap (unregistering): left allmulticast mode [ 3557.206402][ T7896] FAULT_INJECTION: forcing a failure. [ 3557.206402][ T7896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3557.236212][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.5.613 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3557.240233][ T7896] Hardware name: riscv-virtio,qemu (DT) [ 3557.242505][ T7896] Call Trace: [ 3557.244195][ T7896] [] dump_backtrace+0x2e/0x3c [ 3557.247418][ T7896] [] show_stack+0x34/0x40 [ 3557.250408][ T7896] [] dump_stack_lvl+0x122/0x196 [ 3557.252408][ T7896] [] dump_stack+0x1c/0x24 [ 3557.254323][ T7896] [] should_fail_ex+0x3f8/0x4e0 [ 3557.258065][ T7896] [] should_fail+0xe/0x16 [ 3557.261164][ T7896] [] should_fail_usercopy+0x1e/0x26 [ 3557.264538][ T7896] [] _copy_to_user+0x3a/0xc6 [ 3557.268300][ T7896] [] simple_read_from_buffer+0xd0/0x154 [ 3557.270939][ T7896] [] proc_fail_nth_read+0x194/0x27c [ 3557.272984][ T7896] [] vfs_read+0x1b0/0x86c [ 3557.275160][ T7896] [] ksys_read+0x128/0x266 [ 3557.279940][ T7896] [] __riscv_sys_read+0x6e/0x94 [ 3557.282253][ T7896] [] syscall_handler+0x94/0x118 [ 3557.284367][ T7896] [] do_trap_ecall_u+0x1aa/0x216 [ 3557.286402][ T7896] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3561.375510][ T7899] FAULT_INJECTION: forcing a failure. [ 3561.375510][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3561.448499][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.2.614 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3561.452419][ T7899] Hardware name: riscv-virtio,qemu (DT) [ 3561.454734][ T7899] Call Trace: [ 3561.457029][ T7899] [] dump_backtrace+0x2e/0x3c [ 3561.460453][ T7899] [] show_stack+0x34/0x40 [ 3561.463343][ T7899] [] dump_stack_lvl+0x122/0x196 [ 3561.466217][ T7899] [] dump_stack+0x1c/0x24 [ 3561.470028][ T7899] [] should_fail_ex+0x3f8/0x4e0 [ 3561.473044][ T7899] [] should_fail+0xe/0x16 [ 3561.475771][ T7899] [] should_fail_usercopy+0x1e/0x26 [ 3561.479114][ T7899] [] _copy_from_user+0x3a/0xfe [ 3561.481907][ T7899] [] __do_sys_clock_adjtime+0xa6/0x23c [ 3561.485355][ T7899] [] __riscv_sys_clock_adjtime+0x50/0x70 [ 3561.489380][ T7899] [] syscall_handler+0x94/0x118 [ 3561.491987][ T7899] [] do_trap_ecall_u+0x1aa/0x216 [ 3561.493657][ T7899] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3573.234974][ T7908] FAULT_INJECTION: forcing a failure. [ 3573.234974][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3573.244812][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.2.618 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3573.249964][ T7908] Hardware name: riscv-virtio,qemu (DT) [ 3573.252128][ T7908] Call Trace: [ 3573.254017][ T7908] [] dump_backtrace+0x2e/0x3c [ 3573.256882][ T7908] [] show_stack+0x34/0x40 [ 3573.259174][ T7908] [] dump_stack_lvl+0x122/0x196 [ 3573.260990][ T7908] [] dump_stack+0x1c/0x24 [ 3573.262714][ T7908] [] should_fail_ex+0x3f8/0x4e0 [ 3573.265100][ T7908] [] should_fail+0xe/0x16 [ 3573.267375][ T7908] [] should_fail_usercopy+0x1e/0x26 [ 3573.269236][ T7908] [] _copy_to_user+0x3a/0xc6 [ 3573.270858][ T7908] [] copy_siginfo_to_user+0x28/0xb4 [ 3573.271981][ T7908] [] arch_do_signal_or_restart+0x4a0/0x1188 [ 3573.273254][ T7908] [] syscall_exit_to_user_mode+0x2a6/0x31e [ 3573.274566][ T7908] [] do_trap_ecall_u+0x86/0x216 [ 3573.275746][ T7908] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3604.842737][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'. [ 3607.972355][ T8077] binder: 8076:8077 ioctl c0046209 0 returned -22 [ 3611.560091][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3611.801885][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3613.662073][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3613.871810][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3618.838124][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3618.872568][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3627.208579][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3627.260710][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3629.196118][ T8110] netlink: 'syz.2.625': attribute type 6 has an invalid length. [ 3629.420621][ T8110] netlink: 'syz.2.625': attribute type 4 has an invalid length. [ 3629.773446][ T8114] FAULT_INJECTION: forcing a failure. [ 3629.773446][ T8114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3629.783390][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.5.626 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3629.788067][ T8114] Hardware name: riscv-virtio,qemu (DT) [ 3629.790587][ T8114] Call Trace: [ 3629.792383][ T8114] [] dump_backtrace+0x2e/0x3c [ 3629.795532][ T8114] [] show_stack+0x34/0x40 [ 3629.798347][ T8114] [] dump_stack_lvl+0x122/0x196 [ 3629.801489][ T8114] [] dump_stack+0x1c/0x24 [ 3629.804695][ T8114] [] should_fail_ex+0x3f8/0x4e0 [ 3629.813738][ T8114] [] should_fail+0xe/0x16 [ 3629.815668][ T8114] [] should_fail_usercopy+0x1e/0x26 [ 3629.817432][ T8114] [] _copy_to_user+0x3a/0xc6 [ 3629.819011][ T8114] [] simple_read_from_buffer+0xd0/0x154 [ 3629.820726][ T8114] [] proc_fail_nth_read+0x194/0x27c [ 3629.822246][ T8114] [] vfs_read+0x1b0/0x86c [ 3629.823797][ T8114] [] ksys_read+0x128/0x266 [ 3629.825431][ T8114] [] __riscv_sys_read+0x6e/0x94 [ 3629.827062][ T8114] [] syscall_handler+0x94/0x118 [ 3629.847644][ T8114] [] do_trap_ecall_u+0x1aa/0x216 [ 3629.849662][ T8114] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3631.874171][ T8110] xt_cgroup: path and classid specified [ 3667.729485][ T8135] FAULT_INJECTION: forcing a failure. [ 3667.729485][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3667.738890][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.2.632 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3667.743178][ T8135] Hardware name: riscv-virtio,qemu (DT) [ 3667.745625][ T8135] Call Trace: [ 3667.747452][ T8135] [] dump_backtrace+0x2e/0x3c [ 3667.749280][ T8135] [] show_stack+0x34/0x40 [ 3667.752312][ T8135] [] dump_stack_lvl+0x122/0x196 [ 3667.755985][ T8135] [] dump_stack+0x1c/0x24 [ 3667.759650][ T8135] [] should_fail_ex+0x3f8/0x4e0 [ 3667.763265][ T8135] [] should_fail+0xe/0x16 [ 3667.766514][ T8135] [] should_fail_usercopy+0x1e/0x26 [ 3667.770515][ T8135] [] _copy_from_user+0x3a/0xfe [ 3667.774049][ T8135] [] copy_msghdr_from_user+0xbe/0x176 [ 3667.777999][ T8135] [] ___sys_sendmsg+0x112/0x1e6 [ 3667.781420][ T8135] [] __sys_sendmmsg+0x1fa/0x52a [ 3667.784844][ T8135] [] __riscv_sys_sendmmsg+0x8c/0xd8 [ 3667.789427][ T8135] [] syscall_handler+0x94/0x118 [ 3667.792667][ T8135] [] do_trap_ecall_u+0x1aa/0x216 [ 3667.796458][ T8135] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3673.713417][ T8139] ipvlan1: entered promiscuous mode [ 3674.070064][ T8139] ipvlan1: left promiscuous mode [ 3676.374604][ T8146] FAULT_INJECTION: forcing a failure. [ 3676.374604][ T8146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3676.384431][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.2.635 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3676.389333][ T8146] Hardware name: riscv-virtio,qemu (DT) [ 3676.390729][ T8146] Call Trace: [ 3676.391880][ T8146] [] dump_backtrace+0x2e/0x3c [ 3676.393713][ T8146] [] show_stack+0x34/0x40 [ 3676.395219][ T8146] [] dump_stack_lvl+0x122/0x196 [ 3676.396965][ T8146] [] dump_stack+0x1c/0x24 [ 3676.398635][ T8146] [] should_fail_ex+0x3f8/0x4e0 [ 3676.400379][ T8146] [] should_fail+0xe/0x16 [ 3676.402079][ T8146] [] should_fail_usercopy+0x1e/0x26 [ 3676.404852][ T8146] [] _copy_from_user+0x3a/0xfe [ 3676.407918][ T8146] [] copy_msghdr_from_user+0xbe/0x176 [ 3676.413437][ T8146] [] ___sys_sendmsg+0x112/0x1e6 [ 3676.423565][ T8146] [] __sys_sendmsg+0x130/0x1f0 [ 3676.426527][ T8146] [] __riscv_sys_sendmsg+0x70/0xa2 [ 3676.429511][ T8146] [] syscall_handler+0x94/0x118 [ 3676.432272][ T8146] [] do_trap_ecall_u+0x1aa/0x216 [ 3676.435126][ T8146] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3717.057656][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3717.081077][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3727.765691][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3727.776106][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3750.763623][ T8193] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 3752.133251][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3752.261253][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3753.900757][ T8198] FAULT_INJECTION: forcing a failure. [ 3753.900757][ T8198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3753.906276][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.5.649 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3753.908734][ T8198] Hardware name: riscv-virtio,qemu (DT) [ 3753.910038][ T8198] Call Trace: [ 3753.911115][ T8198] [] dump_backtrace+0x2e/0x3c [ 3753.912871][ T8198] [] show_stack+0x34/0x40 [ 3753.914441][ T8198] [] dump_stack_lvl+0x122/0x196 [ 3753.916068][ T8198] [] dump_stack+0x1c/0x24 [ 3753.917845][ T8198] [] should_fail_ex+0x3f8/0x4e0 [ 3753.919698][ T8198] [] should_fail+0xe/0x16 [ 3753.921459][ T8198] [] should_fail_usercopy+0x1e/0x26 [ 3753.923232][ T8198] [] _copy_from_user+0x3a/0xfe [ 3753.924844][ T8198] [] __sys_bpf+0x204/0x42cc [ 3753.927712][ T8198] [] __riscv_sys_bpf+0x6c/0x9e [ 3753.929547][ T8198] [] syscall_handler+0x94/0x118 [ 3753.931110][ T8198] [] do_trap_ecall_u+0x1aa/0x216 [ 3753.932824][ T8198] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3760.359653][ T8202] netlink: 'syz.5.651': attribute type 4 has an invalid length. [ 3789.758699][ T35] audit: type=1326 audit(3788.050:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.2.660" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3789.761743][ T35] audit: type=1326 audit(3788.070:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.2.660" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3789.764174][ T35] audit: type=1326 audit(3788.090:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.2.660" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3789.781457][ T35] audit: type=1326 audit(3788.120:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.2.660" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3789.785142][ T35] audit: type=1326 audit(3788.130:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.2.660" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3791.641572][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3791.672103][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3810.434863][ T35] audit: type=1326 audit(3809.290:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.604357][ T35] audit: type=1326 audit(3809.450:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.688984][ T35] audit: type=1326 audit(3809.500:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.738522][ T35] audit: type=1326 audit(3809.590:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.759351][ T35] audit: type=1326 audit(3809.610:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.791129][ T35] audit: type=1326 audit(3809.640:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.812608][ T35] audit: type=1326 audit(3809.660:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.899607][ T35] audit: type=1326 audit(3809.750:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.960843][ T35] audit: type=1326 audit(3809.820:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3810.994438][ T35] audit: type=1326 audit(3809.850:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.667" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3819.611435][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3819.651336][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3858.539317][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3858.598191][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3901.924146][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 3907.253814][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3907.411460][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3916.691639][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3916.713251][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3928.483104][ T8314] syzkaller0: entered promiscuous mode [ 3928.491230][ T8314] syzkaller0: entered allmulticast mode [ 4002.771320][ T8324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4003.055129][ T8324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4003.120337][ T8324] bond0 (unregistering): Released all slaves [ 4003.975569][ T8324] bond1 (unregistering): Released all slaves [ 4005.304146][ T8324] hsr_slave_0: left promiscuous mode [ 4005.430059][ T8324] hsr_slave_1: left promiscuous mode [ 4075.291557][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4075.774213][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4098.364180][ T8588] xt_hashlimit: size too large, truncated to 1048576 [ 4120.933459][ T8331] hsr_slave_0: entered promiscuous mode [ 4121.212003][ T8331] hsr_slave_1: entered promiscuous mode [ 4121.298910][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4121.302939][ T8331] Cannot create hsr debugfs directory [ 4135.155739][ T8331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4135.532768][ T8331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4136.088146][ T8331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4136.624019][ T8331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4186.308959][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4277.663576][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4278.335878][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4335.154104][ T8727] hsr_slave_0: entered promiscuous mode [ 4335.422042][ T8727] hsr_slave_1: entered promiscuous mode [ 4335.619866][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4335.623513][ T8727] Cannot create hsr debugfs directory [ 4361.609873][ T8727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4362.380907][ T8727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4363.059970][ T8727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4363.682473][ T8727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4395.766047][ T8331] veth0_vlan: entered promiscuous mode [ 4397.543899][ T8331] veth1_vlan: entered promiscuous mode [ 4403.855672][ T8331] veth0_macvtap: entered promiscuous mode [ 4404.825926][ T8331] veth1_macvtap: entered promiscuous mode [ 4413.526335][ T8331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4413.542188][ T8331] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4413.544658][ T8331] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4413.580741][ T8331] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4423.553598][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4471.651433][ T8727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 4535.810386][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4536.953684][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4557.160122][ T36] INFO: task syz.5.707:8588 blocked for more than 430 seconds. [ 4557.162676][ T36] Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 4557.165677][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4557.808105][ T36] task:syz.5.707 state:D stack:0 pid:8588 tgid:8574 ppid:6660 flags:0x00000006 [ 4557.815509][ T36] Call Trace: [ 4557.858074][ T36] [] __schedule+0xd58/0x3848 [ 4557.861990][ T36] [] schedule+0xc4/0x324 [ 4557.865285][ T36] [] schedule_timeout+0x1e2/0x296 [ 4557.921930][ T36] [] __wait_for_common+0x1ca/0x4b6 [ 4557.939114][ T36] [] wait_for_completion+0x1a/0x22 [ 4557.942375][ T36] [] __flush_work+0x5ee/0xcba [ 4557.946332][ T36] [] __cancel_work_sync+0x136/0x15a [ 4557.991093][ T36] [] cancel_delayed_work_sync+0x1c/0x26 [ 4557.993308][ T36] [] htable_put.part.0+0x1a0/0x278 [ 4557.995188][ T36] [] hashlimit_mt_destroy+0x7e/0xa6 [ 4558.029113][ T36] [] cleanup_entry+0x15e/0x326 [ 4558.031376][ T36] [] translate_table+0xcf4/0x15da [ 4558.034195][ T36] [] do_replace+0x2f8/0x432 [ 4558.068161][ T36] [] do_ip6t_set_ctl+0x39e/0x92a [ 4558.071737][ T36] [] nf_setsockopt+0x78/0xda [ 4558.074989][ T36] [] ipv6_setsockopt+0x13c/0x16e [ 4558.099045][ T36] [] rawv6_setsockopt+0xe8/0x64c [ 4558.101354][ T36] [] sock_common_setsockopt+0x90/0xc0 [ 4558.103142][ T36] [] do_sock_setsockopt+0x20a/0x402 [ 4558.127971][ T36] [] __sys_setsockopt+0xf0/0x1aa [ 4558.130312][ T36] [] __riscv_sys_setsockopt+0xa6/0x114 [ 4558.132136][ T36] [] syscall_handler+0x94/0x118 [ 4558.133995][ T36] [] do_trap_ecall_u+0x1aa/0x216 [ 4558.135912][ T36] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 4558.162240][ T36] [ 4558.162240][ T36] Showing all locks held in the system: [ 4558.164514][ T36] 1 lock held by khungtaskd/36: [ 4558.166113][ T36] #0: ffffffff881cc080 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x68/0x2d6 [ 4558.193756][ T36] 1 lock held by klogd/2973: [ 4558.195421][ T36] 2 locks held by getty/3123: [ 4558.217978][ T36] #0: ff6000001c7360a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 4558.222829][ T36] #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd7c/0x129a [ 4558.259479][ T36] 1 lock held by sshd/3147: [ 4558.261452][ T36] 1 lock held by syz-executor/3149: [ 4558.263065][ T36] 2 locks held by kworker/0:3/3798: [ 4558.264926][ T36] 3 locks held by kworker/u10:4/4311: [ 4558.278951][ T36] 3 locks held by kworker/u10:7/4806: [ 4558.281881][ T36] 2 locks held by kworker/u10:6/5350: [ 4558.284313][ T36] 2 locks held by kworker/u10:5/6397: [ 4558.318075][ T36] #0: ff60000011071148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae SYZFAIL: failed to recv rpc [ 4558.325292][ T36] #1: ff20000002217c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae [ 4558.379192][ T36] 3 locks held by kworker/u10:8/7990: [ 4558.381365][ T36] 2 locks held by kworker/0:1/8778: [ 4558.382898][ T36] 1 lock held by modprobe/9158: [ 4558.384392][ T36] 2 locks held by syz.6.714/9159: [ 4558.386173][ T36] [ 4558.420014][ T36] ============================================= [ 4558.420014][ T36] [ 4558.422522][ T36] NMI backtrace for cpu 0 [ 4558.423761][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 4558.425443][ T36] Hardware name: riscv-virtio,qemu (DT) [ 4558.427270][ T36] Call Trace: [ 4558.428427][ T36] [] dump_backtrace+0x2e/0x3c [ 4558.430117][ T36] [] show_stack+0x34/0x40 [ 4558.432212][ T36] [] dump_stack_lvl+0x122/0x196 [ 4558.434065][ T36] [] dump_stack+0x1c/0x24 [ 4558.435766][ T36] [] nmi_cpu_backtrace+0x39c/0x39e [ 4558.437832][ T36] [] nmi_trigger_cpumask_backtrace+0x2b6/0x456 [ 4558.440981][ T36] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 4558.444949][ T36] [] watchdog+0xcfa/0x1178 [ 4558.446384][ T36] [] kthread+0x28c/0x3a6 [ 4558.455421][ T36] [] ret_from_fork+0xe/0x18 [ 4558.460315][ T36] Sending NMI from CPU 0 to CPUs 1: [ 4558.462708][ C1] NMI backtrace for cpu 1 [ 4558.464902][ C1] CPU: 1 UID: 0 PID: 3159 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 4558.469182][ C1] Hardware name: riscv-virtio,qemu (DT) [ 4558.470710][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 4558.472863][ C1] epc : __sanitizer_cov_trace_pc+0x0/0x7a [ 4558.474438][ C1] ra : skb_release_data+0x2c/0x86a [ 4558.475829][ C1] epc : ffffffff8042fcce ra : ffffffff84ca5e56 sp : ff2000000b667960 [ 4558.480407][ C1] gp : ffffffff899c0180 tp : ff6000001c2e0000 t0 : ff6000001c2e0b20 [ 4558.483832][ C1] t1 : ffebffff031833ac t2 : 0000000000000535 s0 : ff2000000b667a10 [ 4558.486861][ C1] s1 : ff60000018c19c80 a0 : ff60000018c19c80 a1 : 0000000000000002 [ 4558.489733][ C1] a2 : 0000000000000002 a3 : ffffffff84cb3fda a4 : 0000000000000000 [ 4558.492561][ C1] a5 : ff6000001c2e1000 a6 : 0000000000000003 a7 : ff60000018c19d67 [ 4558.495475][ C1] s2 : 0000000000000001 s3 : ffffffff8331ce0e s4 : ff60000018c19c80 [ 4558.498543][ C1] s5 : 0000000000000000 s6 : 0000000000000000 s7 : ffebffff07204003 [ 4558.500140][ C1] s8 : ff60000018c19c80 s9 : ff6000001c79d000 s10: dfffffff00000000 [ 4558.502680][ C1] s11: ffffffff86e3c93c t3 : 1fec00000385c163 t4 : ffebffff031833ac [ 4558.505082][ C1] t5 : ffebffff031833ad t6 : 1fec00000385c17c [ 4558.507309][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 4558.510148][ C1] [] __sanitizer_cov_trace_pc+0x0/0x7a [ 4558.512777][ C1] [] consume_skb+0xca/0xfa [ 4558.515220][ C1] [] nsim_dev_trap_report_work+0x85a/0xc14 [ 4558.518935][ C1] [] process_one_work+0x956/0x1dae [ 4558.521989][ C1] [] worker_thread+0x5be/0xdc6 [ 4558.523464][ C1] [] kthread+0x28c/0x3a6 [ 4558.524623][ C1] [] ret_from_fork+0xe/0x18 [ 4558.719382][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 4558.721913][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 4558.723921][ T36] Hardware name: riscv-virtio,qemu (DT) [ 4558.724892][ T36] Call Trace: [ 4558.726149][ T36] [] dump_backtrace+0x2e/0x3c [ 4558.729380][ T36] [] show_stack+0x34/0x40 [ 4558.730564][ T36] [] dump_stack_lvl+0x108/0x196 [ 4558.731866][ T36] [] dump_stack+0x1c/0x24 [ 4558.733124][ T36] [] panic+0x388/0x86c [ 4558.734491][ T36] [] watchdog+0x78a/0x1178 [ 4558.735916][ T36] [] kthread+0x28c/0x3a6 [ 4558.739035][ T36] [] ret_from_fork+0xe/0x18 [ 4558.740783][ T36] SMP: stopping secondary CPUs [ 4558.743639][ T36] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:16:30 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff808db9d2 mhartid 0000000000000000 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff8023cb46 sepc ffffffff800e2130 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a08990000009ad76 x0/zero 0000000000000000 x1/ra ffffffff8096fd1c x2/sp ff200000000068a0 x3/gp ffffffff899c0180 x4/tp ff6000001cc91a40 x5/t0 ffebffff0318dd36 x6/t1 ffebffff02ab8b88 x7/t2 ff6000005cdbf680 x8/s0 ff200000000068e0 x9/s1 ff60000018c6e8c0 x10/a0 ff60000018c6e9b0 x11/a1 0000000000002820 x12/a2 0000000000000000 x13/a3 ff200000000065c0 x14/a4 0000000000000000 x15/a5 ffffffff86002bb0 x16/a6 0000000000f00000 x17/a7 1fec0000039924c4 x18/s2 ff20000000006560 x19/s3 0000000000000000 x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffff85fdfc8c x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff86002870 x26/s10 0000000000007fff x27/s11 ff20000000006860 x28/t3 1fec0000039924ab x29/t4 ffebffff02ab8b88 x30/t5 ffebffff02ab8b89 x31/t6 1fec0000039924dd f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff81b7d220 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff8001fb0e sepc ffffffff808d953e vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a0898000000b6811 x0/zero 0000000000000000 x1/ra ffffffff81b7d1f6 x2/sp ff200000002e7690 x3/gp ffffffff899c0180 x4/tp ff60000014ef0000 x5/t0 ff60000014ef0b20 x6/t1 fffffffef21a98f0 x7/t2 0000000000000220 x8/s0 ff200000002e76d0 x9/s1 ffffffff90d4c780 x10/a0 ffffffff90d4c7c8 x11/a1 000000000000001f x12/a2 0000000000000002 x13/a3 ffffffff81b7d1f6 x14/a4 1ffffffff21a98f9 x15/a5 ff2000000006d000 x16/a6 0000000000000003 x17/a7 ffffffff90d4c783 x18/s2 0000000000000036 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 ffffffff90b6fb41 x24/s8 dfffffff00000000 x25/s9 fffffffef21a98fb x26/s10 0000000000000010 x27/s11 0000000000000010 x28/t3 1fec0000029de163 x29/t4 fffffffef21a98f0 x30/t5 fffffffef21a98f1 x31/t6 1fec0000029de181 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000