last executing test programs: 27.780642017s ago: executing program 0 (id=1889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x7, 0xa2}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="579ec3e258cdf2a50ea4c16e4ceb8f8390bc71b6983c2a1d84198131d50eb8ba9cb914d53d691e6dc3cf8ac53868cd627bbcd9623d50c451cd147153ca3d70d3f7f53ed38e178c68c9697dd806b3c78b4ca6185154e006071b416238928249da3629db263a36527829a296335797fd08a7c4df2cea7acb81234a59579aa4754dba4b20a7774076242cd3e5", @ANYRESHEX, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000000) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x100000000}, &(0x7f0000000340)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000300)=0xd071) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1028c4, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) openat$sndseq(0xffffff9c, &(0x7f0000000580), 0x26580) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="019800000000000020030000000001006772653515f7201e1c392a658b41dae20e8169e7ac06394977f9000000ecffffff00000000fbff136367629899736fcf2f2889928709b37b8bb195eac5a5d3f3cc9bcdb94660f0085c1ab09aaa0637544019a536ffbeabda0339fb33418fb18ae0dcd758dd1972d62ff481bf514dd099d019da19046ba3fa8af8194d78e269d559f2b11f47cd997f5d6b"], 0x40}}, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000540)) 26.626341314s ago: executing program 0 (id=1892): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newchain={0x1ff0, 0x64, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0x7, 0x8}, {0xc, 0xfff0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x800}, @filter_kind_options=@f_u32={{0x8}, {0x1f9c, 0x2, [@TCA_U32_ACT={0x6d0, 0x7, [@m_mpls={0xb4, 0xe, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdd163}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0x9, 0x6, 0x4, 0x3}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xae808}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0x4c, 0x6, "1f4d47f94843fb8147ae3efba8af118cd8d92d9f33b4b9d7e6f17edb83d8005dbfad866205fbcf8e77f235f08e18368d78aa321c11b31ec61e6ea00e1901181b12c050b57a67a2e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xdc, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8000, 0x4, 0x8, 0x4}, @empty, @rand_addr=0x64010102, 0xff, 0x1}}]}, {0x89, 0x6, "4c001fade9ad94f6e118c8673a52b03d062ec1dd8aed3429cea8de14a44938beabcaecc7058a48f846f718741b192c25d535b197d967db7921fa16314a1acc0a3865de2bcd4b548e4342a7bb17daf08920bd86d014b17b3fd5b60ca0e6256cd02e5fd3b376efb883d323a34f7ec26ad31c2b027443a5cc97b5b95a1523350fbf1d92866696"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x94, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x76f5}]}, {0x45, 0x6, "ac88c239091b384608d1357a80cadb9d6e1544f272f3d62077d2e7ba299add8469e0b0ea7930e26a63b2cff9296a748c4b2879e2dc79ac3d9fe9b4ed8545298bab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x2e, 0x3, 'blkio.throttle.io_service_bytes_recursive\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5f95a882, 0x6, 0x5, 0x2, 0x8}}]}, {0x93, 0x6, "cb3fede5f1402ff612bdc009c6c6ab87f8c441db07aac9563e2492181abe86bcf50538dea2312a1d387a91bf8901b320768d302d7d9e61043a45e82714057b5f874ef6bdf31408fadcaccfe98ed97860a4a228d3e543754ef4c50c04cf70e1ae9ade057373beffc6d0ae227e3194ba4cf46343c4a3d4f959d1b2adabb5627216b60ef0c5acf66641d10de9381aec91"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x18c, 0x1b, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0xffffffffffffffff, 0x7fffffff, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc04, 0xbd, 0x2, 0xb6e, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x20000000, 0x9, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x5, 0x603, 0xffffffff}, 0x37be}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x0, 0x7, 0x400, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xba9, 0x5, 0xff, 0x967d}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x1, 0x4, 0x1, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0xa, 0x9}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x5, 0x81}, 0x1}}]}, {0x5f, 0x6, "f353584fbbe56787d7bbda049b263373d8481ddb16fa431c1e5a20938fa911fe32a0c33e95a3c48946f73d234866343986b8cc7e65f658dce76e1e7c0ebe15fcf2f02433d2472027f14c1c660d6ef79a12ee9993748250ff723a7e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x94, 0x1a, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0x5e, 0x6, "70f436766653206a40fd740f8c2bea52b6375d5a539007651b25399c2bf7bf9905807c4194715607996fd860bf720317d9fded01462192d6c0f61da72fc5d494b02d7f93b5942df966b44a799d6b3ce79106998c87e7d503bd89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x110, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x84}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffffb, 0x20000000, 0x5, 0x9}}]}, {0xa1, 0x6, "81596064789d3afb71f9525a90ecba2fd8063e1a91a3e9ae01a5a40f637f42878f672140bb07443a1f8ba1730a425a1676130e60840f6d0993fe223525955a593076243d1f54ce0f87e0f27dbe1d809610bde43cf81323b4d787f6355bb2dee36b37d5ec1ca475304d6b9f45dcf52bc022739994a77a6147fbe447b601c007bf84ee65ef9a0e27fcbd8ef3be805f6528cddb3d81c5ad5c2e5ac420e5ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x70, 0x17, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x28, 0x6, "0ea3883f2d5d9e593bc60dbc3ad2287c10f6e5d18756e5d4054d4e8ee18f5183f09a41f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xffff}}, @TCA_U32_INDEV={0x14, 0x8, 'ipvlan1\x00'}, @TCA_U32_ACT={0x1750, 0x7, [@m_xt={0xa0, 0x1c, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "91cdc1023e0a3452f2b66cc13cb49e4038b0730757b1212bf03da8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x1070, 0x5, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="f2fbc887e532"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa}]}, {0x1004, 0x6, "a6924fab3b8d0307c59d7b2de4a290331bd38d8118d9d191de94faa7c3d661b1e801468fcbc0972c33409755043858c77b2c79b238be81c619b1cccb2dc12e87550ab4929686392e73c13a69b0162b0f220c6e5787b79b6f7b083d81205c63e7592b6d3fe85b41b5ab5807478ca9107f6cb88edcf9b12068673664ebf8e3ffe74657eaa155a1f5bbc952d388c629a579acb264ed88fafe8c0dd40ad3a9e0d3feac2fbf2d27d01ef586342c034d17cf6569996471de8e81089163f0dd5e7ed356ac6a0ad4ed17d797e4164a82ab7d45410c1ae98d7c4fb5a6c8284ecf54a050b2ad93e5de130e889441d1368c8940dd030805f07c4ce9112abde9be0ebbc44c865e3f076b53868f9b9eaf9bf9c3c1149cd1affad06a442de047df1ddb273955b1c3e5f79c25a019ffef7ced366dd0939c83107e5686b0911f8219149ca253c63a57ccaf6a4d7aaebad93a6359342d808643a98f5dac848d4a9effa1e5bdbcefb149daa1a422ef6aae77799a6da24338077813a4ecf7cfa7e0e7764c4761885cff01c1d1a48be1e3a76095e3cdb91cbf6c61de7b77882985ca3b032be275bbba0efe563876e4e81187870765ff164f7ef727b1f88fcd697134a1b64ac1056dff77863cff186f11d02212232b5db808a5d5713e38ccd62b220ce9d6ccb743e732e38244cb5c95d401d7d1b965f7ce6630dbfcaa6d4a5dc3b7c79584fcdbc15b03fb0631e899b69e7ab313dac24e7c22d6a969366f914f2cea4680f88c3c018308822930d185652b3eaa5cd9184b48beafe4c5d376db796e33ed8aaceab66e0a1af2cb581071524f377752e2f776dfa343f6792c4ee8bfd50ddd7d77ae5328ba8826189355caeaaf8b53e71a2d85874def0b84d75cb97ef481484272205e4403f42009bea370ad8ffbda207ecb507fba50d72c7b7309620da8fc592c60118ee7a31476157112fdc158f88c756cdbf8a1cadc1a6caec02d80588d8fc488865b7a37d82395f0e1ea0f1e1c8da8fed76a16ed6b301418f8c98f793859760f2440b8f0ec2d5be08d6ecce6eb5fbd5f93e1e961df95e631545793610eabdb8c0fd7a265dd0abbd7941b7cb83dfbc18849f390c16d956ba3c62737a70b1703b820cc50798214740a5ca927c4ce5cca7a37ba46c4159c12be4ed41ad107d2aba96dec99705c78abb189e9010275bec13874f74b0d22f8bcd55d5a6379f46010f0b33a2b29a2368098a26f4f70ac8c187072143c565ad61263c00f1890d33305f655bfddffb3f07b73825997f371c530a88d2ed7a07831881529203fae7ef3341b6ea446f4a7a4dbe5c08311c78237bc85953f0f6ee7be05721d978b0cf7f82d5a2a98e85214b7bc10d1b0982fd0062a322bca9481afecc882e8b091ef0593d9ef605fc715ee2c02b8a4d9ac36d9cd3d43c840002451caa8d268b7f39622ee8a9fd44e9bf85f35ce5d163c691be81611dba35e569a8d8e034aa5fd8cb05af446838db6f20847a9948312d7f859b92e436170297226eac14d40e087cb33ada52982be1fec2a4759686f5322d6f1a3c038a277d41d756d07e6f60f4da0c998f9bb9cfacffb471454e0558bfcd4178dcf235f6dd610d593d8a512e7cf5995f1a4185572f51dbf808aa798c9eb4dc2edac4c503f146ec2c5866656ecf08c847e1db0e7169849ca6cd142f9677958b60160ebaafa11e73c6dd4f2c4a59691ee44f9e50fae4fc835867a14d05dcd22def31125b3e27787f3d6eb13758ec531e172422788772fbfb58b6e8f382f77ac6c10845f2a6f1ab09e4169a00b1bb182a98f062d4fd2b0e4149a663bbbd02a10eb23975a669775187713cbe48e8b9795f6aaad9e98361d962fbd227fe435b41ca93d02f31deda4a35d395cc28c4da15130b3303e67a128195e5346a1dbaeac6eb6936a04bc63a880ccc02d8bbcc6e783e59d7f4d477a1939fa7f28de7a118b05dec45a82048f8a9068dc7ff7a77dc3a3e02e9187442bbd4f93e907e302bb0e9328f2bb1f5010b9ba325b9349f66ce3bd55959855ba3dd885cb3a7037f040eef301433f5524de62a56bc228a69f54cbf34d1711519ee5263b8a72ee6c9533f4073d7b5d6a5724eaa6220b99ded4df755ef612f8087b72c0763ae4525e96ce25b9a3a7a2eab4b64fcf38e61383b9596f262b5f449fcdceb60f57421d4e608f2c7804e04b8cc28ee11ecbd3a0d959525b3607e350f284fe80c82d2fcfdcb53e23c665fcd4dfc962cb9e451b85a46795c6a4223d17f2537db4b9928a3b146666f9d82afef07406a8a14d6b28fb190992a24390a41d0ad90afea0e0018e8ba1f92f036cfbae5af0a6d1b3c789837383789e3b5fd30bdd10bb8193d8127003097f751d5d0f71f2f86d9de33a543648c48a864241cd1b3dde70fde3018cc4029d1843d56115cd3acd8e5b4ef2d22166463de1b78cfbfedb4ff4d9aab9c0a37d319b29e2801c3a70bf74f6fbce63180053648d89f8e293b3dd4d41a927adb331a7c02d384ba25e49478fe0823bc04aa94a865ba937c0578a004d00193b09290ceb32b125278b4bef99dfb6f27c2b35e1f3f7201bbdfec65b3a125617a546e770362774392a190904d5fc86739f1842446a7a700439a7235d56f921802ab3aabed4df4232b4a69c41626d2d53fbfb2a473017e8a367312c3f46b78db6e7d164b6e934a28d6628ff84a24e2376b3ace51d16398e25ad199a47910d3c0071e90967a83895487962c628cbb45fdfcc34d4fd50abd0a6d08e4dd9942187fc3680f511f770f83dd5acd2d7a086f0c9a42f1780c9859c2873e06315b4e6c856ce1ab19c77d243c07ce67e036bda84428639b74afbf53f091112a47f9c7cc489e5d6461abc62f8b57cb402e4c396077405baf6a99e8b7d82cde3f819872014acbdabf83be9397a5dec77167c6863f26bdc63afc860b625ff3c39dde9d5c01a41656b97cb15e8fe5e961b691d7f25b979233e25bb50ac856b4b222184769672c158f176d913903413acdb91d814a5c85a673d37641743066d92f9456a0f187c8596194a8bd65c8fec84b3bdefce28d6598a88aabd08446aaa71b71b8482221750a583889b5b3900f42282f964a95cac821bf68e70fd6fdcb785905519a6806ef16907493b634a83fba5c1025482356ef225329affa499b489e2f3b6abe29f26d1cb33bab979f9880924223b53bb859a8fdf518e3415150da29387c38ebfec6e5c55f73cc1ca70129c1982049cec3a60fede1c1e0aa443a5398397f2e054c1790900c9bd94c2e161df989b1ec5a8e26e067ede113f78caf00658eb536570420dac2b7fe1e1648a98a61c77aa9c5ecbbce9a47d6ceb2fa272f7402ace466bc0cfe027d66fcd7c7de4d00daa6c69135718ae82a29bc15f6e3a6cd40365922514bf0463904a2397c9692df8dde9df49c60bf9b0ccfb3e82f7784dea4a0ef801253f7b9f71f9e1e57d7e94c47abbf0810995b668e8c7f315cc3e399b46e04f5dcbddd635c6b462503fa2915d22d2b787d3d36aed934f79524ceeea2cd100490c0fec56c489e9833347271bb1e27758fa0515da7db150d0f3081f3623be69cc60f8860b79e9b9366daa5d87055ab08e421ecc3a902af58d6c9b17e22a665c99bd7436977fd42e157b9d807be5556f9366458a1e38174a86195e0ad4bffbb1d2ab70383c21307b8911bb8b6decd6eebe40f48594e5e3cadcd6a393a9b8c0f647182255a2c0eb98294e2758eeab420e92dc7235d49a1d800e58fa00b2b405c3f3892703d6597bde84fbdacb27e3ea80cef6187f9b681259abd9bcc8a667d6c7be9f640770654897112681550e6854688e1dba9e63bac52d498d6ae9cab7e6ff3286f3caeda8dfc1db834adfeb152d1ef4f5262545146d2acca656ac348aa38ce2d004586a83371e25d6e239729ee9c1cf71e26876de6f47f2c89ef298d2cd66fa7a1156bb5e054cac0af3fd41b91c2213290d7aa1020759b6a64962e3185a74560fb0103642d96559d7ef96bca32dbbdfce2c675bc919d4d3af3026636e9c0052328d165551f2d1c480a1672ef7fb4e6c584600188eaf64909f1f5e1ef4af65adabae51da8c22a4954de840ac2cbd5de381792133bedef63d6cf461db869e236353567b359e58b242f0bad9984ed2ca6bd5f72d82b56bba564febe024123650f01103c4ab1b4af4be357262e51d117226895b4dabeed134c7b398789638379ad34fec9bc53a2a92aac7723bf674234f12899fa14c9043a12149beb6b3ef7bc04408b42a89d65e90c1950f83a5127382d5a8dbfd09367f75a11d4e3023bdade1c2f4b15d08e8d8502c704633b6138ebee70310c8bfa426f86178482d9887996c80de06e3b068b769aaf648dbc005ea12fb29e21afec99153b8a5c5d9c28ea476c7eebb822ce5b39d071ad64bd845e6f4fa5848689306a1c3c4cc9fd78bed60c7af65de527a0147e6d23afda76479a43ea7cc77e9e20581af113065cb6b1389561b58b810a007edf472daed6f4730f6318aa8de74b44de8dfcba1fa8f9993ffa576dc0e344fb230f5cc12da59ccfb00f490e59698aa8fe526cb61c91c1ba614588b48defd0e9786fa83ef0b8724d947c9764684c135e3ba38eba4c724effc3817d83a8d76fbc76fc79cfb15e5999e6f4ab65d8850929c2f096a7e5eb5eb7bda312239af4b6352cd909b22735c9878263bff7d931418cd1621de975910ea9c12c045dbcefe709f65017cac583342c6a68d62a6044cf81d93831000a37d656391cce200824d9e35e8b7299bde3878ac4f74e8a95632619b2ca665a60c6e1ea5ace16f0cae04c799524ecdb8c9e090a70f73f0bce08054815bfe8c1b9de0bfbeedfb4d57dcad2cbc6bda8700c6216f98ce682548c013dabadbc0a3a20150dee330486318bf33c5a71eac5f6c09298694e16cfdbddd26c2fe17c194eb71f94d7c60ad9f3f367124cc347a74b4a27549d803f7da046911bced8dc4677750e60dc2fcaa1dccc2b95f8e95fd28a57d5f73c1c7a4ecd0680f2c6782c61788dc39f7d0ee5f5bba21336bdc90ee3fdce143d2fcee00ba7d875b3934869443349b0995cf12fa8aeb19594f4260c0e850d250850eec2549e47d1b8fb340874b3a620b22be86eb9516d08d2256ad55181f844890d9e66775bdfd8c831daa8ad478cb02f6258e126899075f1b39ec5816acd9c382ac6394e580d46da8ed91b4c616e5626829148f52f7a090e80ceb05f4d4f75de6aad1e9253072db77be0f23804dda89b0140e9656e0caecf88d57e3db79eed995c4d72ba0ac81533a676ae379fe449416e65b91d1dc0f58280ae4e9fc9192d573f2bb077917281976a67c45abd97f0d89d22e1f5092150a19a9e1ff9e54e7971704f38753fb407607486d619f233416f272663e81fb05b7c25c5d4ed8f2e1a935f8c47e44f252cbc351035b4f08f8fce9e7557949997b95f2c02f0a834fbbc0e2dc9988400eac4e3d097a4b64b075c24cbd25c560d65b79e3fe7bdd82601ffba992083d481d676329526018d376d46fc46a0b08a0240960de51ad46ad48d5647a1c608d90fcae1f2d315bcaf070bcc460946da86fb37f440d0dee0e601e4a27290fb77636564398ae7c8ffb0597525cc07777b3e9a77d1010607639bf5e855236ff88f63fad122c882533bd8ae8e80c7f42a547374eb048ec8db5389b43dfd53c26594c4eb15d64d9840870059972529460ed095f56c555d5e180034571fbefa5583b536710a6efc4f56a85a2a0a4c57a484c579f132f061e25f5cccea94cbaaad4de64fb5f22c7b6d91ef23a4aeb2f2695a664be7b637698f7cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x154, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x74, 0x3, 0x5, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4c8, 0x1, 0x7, 0xd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x6d4, 0x20000000, 0xfffffff9, 0x3}, 0x4}}]}, {0xc6, 0x6, "581b86a8d39853ba94f1676de0cec67b422a24681a4c8d4323a6ca8bb1c9f625e7391c6297e8a0ae69d9d12c7e7bf87c1fa0ad3b533a987f8698fb9d5e99535dffe39a13cbb2aec831e8a59caf04de701ee5f7efdd64e221bc5c1009ed2905e2566ccc00d77f3a6a68c3866175f9b9e520e6d3cc39d819073830cfe19804cfedba763b99d5b8aaed1f52975736e459778ff3cc8c5bb214ff5f211dcbfd114c1fec826c50f53f179256a71a8c7c726403f8ceb2c133caedbe209135362366b5571fe6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xf0, 0x11, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x800, 0x2, 0x87c}}, @TCA_DEF_DATA={0x9, 0x3, '-(-]\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#! '}, @TCA_DEF_PARMS={0x18, 0x2, {0xdd80, 0x3, 0x1, 0x8040005, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xcae, 0x6, 0x100, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0x4, 0x3, 0xfffff800, 0x3}}]}, {0x4f, 0x6, "c87a2dc9a7f132e8354161004fe4fbbccc1803088f9f5d70f3aef98bbf166f6af099ff5cd43444fc6c5daf45b51583dc03277aa0be39af18539ed68d23331fca4bb600950f173e5f118be6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xe8, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc704, 0x8, 0x6, 0x8, 0x4d}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x5, 0x0, 0x9, 0x9}}}]}, {0x69, 0x6, "055b4997f5380db90d4afb1dc34a1d8900217810defecb13c18aedc1ba70f7342ae98c11e461cc5e9629fbcbbcb13f9d468af68661fab462a38f9082889e61e4eaf8c76f7be034f1343b0c75d11f1871b6064dced2babbb8e53e3126713f05b281155b5c3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xb8, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1000}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x71, 0x6, "c5e716fee6e68a0f9373d6cb366183ebdebfa842eb2a9ee23f02dca2d56c718f4abdfdd94a44de47579c64b1c8710e4eebe4da09df5f3025ad45d35b4cb886fe8b9b9ca5e45377825daa490a229f1339da481cf9aab92e5f3ed263a3feebc294c330816c2c87418477f810ce92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x164, 0xd, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2c5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0xffff8001, 0xffffffffffffffff, 0x8, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4c1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x2ed, 0x20000000, 0x1, 0x5}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x7, 0x8, 0x1, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd93}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8e6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xac, 0x6, "3ea2c5e6d13b171caafa92b976f46b6fedd20f50fe6be0c3f5570ad6bd9a2f12eb87d3e8361456f2491c1331582d1b349429d1dc04cc153ac238236fa57f8f7ef6fd935c08a0fb276dbafcf2478b350642527344e29ebbec2ca1787534bc3e6f8c21ed09dd601b0971a762d00dc929ce859109b9884ab7b627c5b27dfbf1c1c77b5b52c17d13da13d40e870b643404e8b1d24e01bb3de8eacb49545acedef1e9301e790c1dab394e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xf4, 0x1, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xa82}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd8, 0xc71, 0x6, 0x9, 0xe}, 0x1}}]}, {0x6d, 0x6, "bb1f15b0a5cd50c89aa09510cd3750bcf4d126e95b301aefd8042e150708121f2818b4e2fced2dcc0c0213956c45ffcc2f8b0779527ec0792c6532c5aef48cc08ad43b219b1741d9054d8d68d6fa59630b0ea4dd02636caa439a6cc72b033772543757f1feb3dc9eb4"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_U32_POLICE={0x4}, @TCA_U32_ACT={0x134, 0x7, [@m_ctinfo={0x130, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8afa, 0x3, 0x0, 0x1ff, 0x6}}]}, {0xe4, 0x6, "0bd438a1e2c27d8c8b3ec5f39e195551aea1a192f9d65339ca591a5d4f166876092f473eb1d6075ebb13552eed097c9f21785c19865167dff8a111d013adc25e23d2fd99efee951e8e7452f8073c667ce1084f6c67ee64e05f4f9b8adcab147f1473e8d6157f228aa0971c3fb894d6fccb819bf2164b9e39d1809af50d56370ec97b0ac782c2f7abc61aa7bfcf02e1ea7076f580d1c50b96258d9872ed960eb1a9c9be239ff5b0cd26bbf14c2ad52e1add6e86804fe9cca9898de135b9dff68e429050ff5ca7726feab69b1887c7192b34b6ccbcace2ca46efc313ca6c6074f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_INDEV={0x14, 0x8, 'veth1\x00'}, @TCA_U32_HASH={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_CHAIN={0x8}]}, 0x1ff0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000008400000000070000000700002c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000280)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x12) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x4010) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "0ca474864549ddec", '\x00', "6563aff3", "5ba3b7deb8fd11a3"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) 25.70600047s ago: executing program 0 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x1f00, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 25.466385908s ago: executing program 0 (id=1898): socket$kcm(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) 25.458284962s ago: executing program 0 (id=1899): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffc, @local, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "d22bd2a3"}}}}}, 0x0) r3 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0xf91, 0x10100, 0x0, 0x8002b1}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x103382) ioctl$LOOP_CHANGE_FD(r7, 0x40041271, 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r6, r6) readv(r8, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) 24.495981479s ago: executing program 0 (id=1902): socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x61f2816356e7b9f0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102379, 0xfffffffffffffd4b) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x402b02, 0x0) (async, rerun: 32) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="adddb26cde9afcff066ca41e5436a3f9807aa3b71ba8f0c8e2be3cdbe17b47ad1f36eea4539df7af1eaa9090a6075da7a3e4f493f5a302aa65eaf6b68d0fb40751d00d9086429cdd2f21dedb5105c03c50312c7b94d8ac67389d80", 0x5b}, {&(0x7f0000000380)="24c75c27313d4fad76d4e5dc2211d0c00a3c18976064c120f85963a2157615d2b2c13d83260656ad7452bee7381f0c5ac57cbcd07bd8e49d7b297bff4557bf5cb78a9b98958542f3c9d7f083db070b7354f5b18ee7c4a6d5b9205be141ad84ff2f2dd582123d19b4375a828c42152a62f876e12dc61ca4da21aa6d2bad3816def5786bea897ebd6168a00d9b3101e404d7a924e825d581c14037d2c45888adf2259535fe32fa4ce03434e44789cc45be66978449e9f48e88692eb37f08ea5358f0724177e12eb89abd3dae8bfe63", 0xce}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000040)="60b353241860ff97c100dbfe54", 0xd}, {&(0x7f0000001480)="a8de361b07ed81783232af34fcfefee7df91ca4d8c9eea144a6a91da1fb7354f49cb7a97e64b707751ce12f110cdb8d7ab8c0ceb3529474d54c6decae0330363a992c90c55f8a49624b3637566008725b961488a734955c7c965a4be", 0x5c}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) recvmsg$kcm(r1, 0x0, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) syz_clone(0x48004000, 0x0, 0xfe42, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0x9, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xdc) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 64) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 9.520141209s ago: executing program 32 (id=1902): socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x61f2816356e7b9f0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102379, 0xfffffffffffffd4b) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x402b02, 0x0) (async, rerun: 32) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="adddb26cde9afcff066ca41e5436a3f9807aa3b71ba8f0c8e2be3cdbe17b47ad1f36eea4539df7af1eaa9090a6075da7a3e4f493f5a302aa65eaf6b68d0fb40751d00d9086429cdd2f21dedb5105c03c50312c7b94d8ac67389d80", 0x5b}, {&(0x7f0000000380)="24c75c27313d4fad76d4e5dc2211d0c00a3c18976064c120f85963a2157615d2b2c13d83260656ad7452bee7381f0c5ac57cbcd07bd8e49d7b297bff4557bf5cb78a9b98958542f3c9d7f083db070b7354f5b18ee7c4a6d5b9205be141ad84ff2f2dd582123d19b4375a828c42152a62f876e12dc61ca4da21aa6d2bad3816def5786bea897ebd6168a00d9b3101e404d7a924e825d581c14037d2c45888adf2259535fe32fa4ce03434e44789cc45be66978449e9f48e88692eb37f08ea5358f0724177e12eb89abd3dae8bfe63", 0xce}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000040)="60b353241860ff97c100dbfe54", 0xd}, {&(0x7f0000001480)="a8de361b07ed81783232af34fcfefee7df91ca4d8c9eea144a6a91da1fb7354f49cb7a97e64b707751ce12f110cdb8d7ab8c0ceb3529474d54c6decae0330363a992c90c55f8a49624b3637566008725b961488a734955c7c965a4be", 0x5c}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) recvmsg$kcm(r1, 0x0, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) syz_clone(0x48004000, 0x0, 0xfe42, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0x9, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xdc) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 64) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 9.428798626s ago: executing program 1 (id=1959): open(0x0, 0x400141042, 0x0) creat(&(0x7f0000001200)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x7361cb4d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) (fail_nth: 1) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) 8.976473617s ago: executing program 1 (id=1963): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 8.976061219s ago: executing program 1 (id=1964): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x100}) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x17, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0), 0x84000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) setsockopt(r4, 0x2, 0x9, &(0x7f00000003c0)="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", 0xfd) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e001400008c71ef28ff4b"], 0xffdd) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6.296009273s ago: executing program 1 (id=1973): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x100}) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x17, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0), 0x84000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) setsockopt(r4, 0x2, 0x9, &(0x7f00000003c0)="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", 0xfd) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e001400008c71ef28ff4b"], 0xffdd) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.719837781s ago: executing program 4 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3cd5ef7c0898408f5777ae774fc7987cca4198983f15e8d3d454445a215d92e500f0067"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (fail_nth: 10) 4.982239802s ago: executing program 4 (id=1979): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.875730052s ago: executing program 4 (id=1981): syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="63eced8e46dc0600a3a988425e43", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x61) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0xfffffffc, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f000000eec0)=0x60, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x0, 0xfff0}, 'syz1\x00', 0xd}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000003, 0x1c3800) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) 3.732561422s ago: executing program 4 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x20000000, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 3.596461065s ago: executing program 4 (id=1987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x7, 0xa2}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="579ec3e258cdf2a50ea4c16e4ceb8f8390bc71b6983c2a1d84198131d50eb8ba9cb914d53d691e6dc3cf8ac53868cd627bbcd9623d50c451cd147153ca3d70d3f7f53ed38e178c68c9697dd806b3c78b4ca6185154e006071b416238928249da3629db263a36527829a296335797fd08a7c4df2cea7acb81234a59579aa4754dba4b20a7774076242cd3e5", @ANYRESHEX, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000000) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x100000000}, &(0x7f0000000340)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000300)=0xd071) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1028c4, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) openat$sndseq(0xffffff9c, &(0x7f0000000580), 0x26580) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="019800000000000020030000000001006772653515f7201e1c392a658b41dae20e8169e7ac06394977f9000000ecffffff00000000fbff136367629899736fcf2f2889928709b37b8bb195eac5a5d3f3cc9bcdb94660f0085c1ab09aaa0637544019a536ffbeabda0339fb33418fb18ae0dcd758dd1972d62ff481bf514dd099d019da19046ba3fa8af8194d78e269d559f2b11f47cd997f5d6bffaaf5cbbe83fda8771c50dd5369fa9cdb3ccc"], 0x40}}, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000540)) 3.536104159s ago: executing program 3 (id=1988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 3.448040307s ago: executing program 3 (id=1989): syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 3.386145409s ago: executing program 3 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00004000000000000000000000000000000000b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) flock(r2, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0xe0fc, 0x4, 0x400000, 0x3a7}, &(0x7f0000000100), &(0x7f0000000200)) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000080), &(0x7f0000000380), r9}) io_uring_enter(r6, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r11 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r12, 0x402c5828, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) flock(r2, 0x6) flock(r2, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.296268854s ago: executing program 2 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4003}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002db57000fcdbdf253e00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008850}, 0x4040000) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) sched_getaffinity(0x0, 0x4, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x5016, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000080)={&(0x7f0000001480)}) 3.05635641s ago: executing program 2 (id=1992): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x3, r8, 0x0, 0x0, 0x0, 0x2000000}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000240)={0x2, r4}) 2.328141401s ago: executing program 4 (id=1993): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="c33fcb186b2e5f7e087b8a8eeb1b587cee45d05b49cb70143e2a8e8376eeeda1ad331651f162ddceb6dc817d63198b71da0b6729bc70b4df3b5b089af690d1f973784974cdc93a91034f4e290341587a7394eb4e5bc1ed340e211b0607a553f76bf7f6728672f9c06398f652e1a92f2cee2b7afbffe76a0e646df8c7ca6b94a5b8035901e720a78c9c786673511b733de974118a47d3b156859f4c7063e2b99fd1f592c8884c5c3b8a2968a66a2367e01f434094c99495d1480915ea60fe3e28f6de7388dee2116605ea8e457df6bf83890020f5d4ec83db8f43444dc5d4cc5ff47eb4a422ae1a9b8cd17dbcb664edab7a0ee67f3d817bd6d41dd7ce008bcc7d5dc3836d3ce7a7347d5951026b237e4d6d1a415e0be4eb2327e32c604b64ffab901e90191c2288c8eb8d48e59e132fc800934cc82fca25a7615283fa9423eb7de34f7fd65d42ecb2703867871207106257898670c66a38216f1b34c5dcf0cdf1e227a0e06b65a63838791c1f07383707a4550fe4e549304597130bec6fb46b8cf6b4ffa8dc403071f63b6e84d0bd929bee87993c85be3c048b6961a9e49162177acf7f3f24f4e0e19095bafc84ded52ca3170d99cafffbdbf6acd1b6ae07d3f6d5ae4e0691a50a3e1adce3933fec8ae71046da14716cc98cce8c3796cd6a48caa505d0d954b85a7dac89f00af7fe4e3dbac106105f45b83a3628fd46e47780efe4a1594d8b7c6936f3403dd79ba117aa4c746d91d1776018d77c3a44d1f6287148db7724e3e9b7bac8361bee7bcdb944a775e16d843197414512f42cb3c84441f10c3880f42c5544ff12d96b997b94a40dccbdd1dc25ba474dd82be747ba6cd3a223a2f29e25e8419dfaa920e1356dbc36b382e9acdc79e462c6fc920df4dae53bbaa60047c318e72119906e06fb2645985edebb1890206bcdffd56514a2b7061338fc6606c0504054d99364ea3d0bd6ab651dda011128ee03ac9cc2a2d7d64123998a940bc4bf5e74ecfeb360dd33c22150a94deefcb36fab13a3adfed49142eb6947c13519f96604350088b140a8323eb69017ac050fdf1df8f953edb09e1f334c898e5dbb8043639fce67694c579f33243623e1204eb23f092a9dd6dac90e88c0fc4c74e3dd660365c2b73a917ab17269d14b1167c447fe0c83e0c3472dadc35c1a031c9ecc2313c3ceab90a173be50d88c76026f032961d7e0d9f666f9f1679139f9b8845a38a19fda970bc608daeee381add78a491024ca5af485e0e0fddbc6cc9f0c34a56571aaab9ba63dbddb788782d6cb6c6a7939a4132591f2780a9417343bfd054390a43486e86d25050f909aa8c3d03fe1c05b899f6f55b82eeefd4b46893fa74a61671fcba3fbd9df7a96327e70dd3c0957727fd96e68cb6a2a7620f8858e1f6daaab1a97746b916f80ca84a6cc80711e84d066dee51914572201bdf6b40c8de7a075d8f57d32c2dc413741e6538e599776f035557c6f3d422d4e812bc7c8ec5e698e229c6a8a60c2da5462d46eb83e6facf23afb8f22835b1fb7424225046be471d0ef177bdf1184e76fc96d7a49d5d9034c1009b32210915860aa2517f26ca5f66a9eaf7c7b0e104565d5220b70199d31b4dce3ac8e333850b6650765968e45114740b9d5c23f248873bc3451d0a476ea7866d75f63ea7fafe7b008770320b06a8b1310ada1259686d751e81161b84c9068d01ccea2d9f9a733328c47e9b9807fba04aa80a4c27565a17f35f266b98cac2864b1d998d5be1a343d33c533f5232b7003eddf698e10028855dc1016ae8a3aa9817fab16229883b8c7eaad8cd0b2725e63cac82225ea02871f97f7c6347bea4c119b98550804ffdbc1d5f1184db70b63eee8b55aa2ff637df8cf19c37c5c097c31cf9b3e1ca3ad449b240a87b1a474e1f2c2adcfcab59ad6475aef2b144a026ac943052b7e31b834f858ca36ca183da21a7872ff79b0c47d97cd0738411ee5ff953c8556441d9906612197ee4d7fa09777931e3d08e4aaba87b118cc5bd5441eca207c1defece7e58dc050ef9dc789ad46116701d7a9cf8774270ae6064a12426cec07139b17fe17104ba195bcf0ee2f43682794abb4e78ab4df64d132caa44a14f92f6085c0502c6e1f42260c1ffe57d4ff581655b037a1b713fe329e6f5cd084297fd1e298a419bd90da15593e2f6f2f69edd11b32281e608abbec6e900dfbfdd220815113e74ecda9d79f1096e30a18b4967134839b325932b32d21a52a8a3c5d5081c4cd7684757e5d393127072413a53b2dae9c6d31ea67a47ca53674dabfd8dcc127ecb757ccfc667c13b4c0db5f4776c708bf68f91b4ce723cd410873f797e7b042a7fe45a85f95f496aaac079bffc7e5191e71fbdacfdad55dfa72db9207b6a199289cecfcadb683b1cca5333645008da2d75cb152070a25c9a01399b7fa347892300a79ad8b1a778cfcb5b1f1e9671524e17cd33a1cbbbb33eda5ca12eff65bccfb6a4d921a76f2164411e503eabc6e850e340c60bff0e69cf697652e336343950598e7a92e161fe208fa6fe031caa568686ff602cff29262e9a7008bfd0cc7cac3655baaa773756ced4b12a57d77e3f6b7b56784c00f912cbdbe47bbf14d6c304fb8d8651f65a9504c152d781bc7df91c755cb6085940cc46bd088a4bfbc5ec53255341c98f4752e1894d7a588fb02ac2974d6efc4c39bf8fe00d176f79c7ecc089b2ace0c6434dbd9a4f75badf28aafa624f614c2221250a026ded7373ee488c6630d1fe5578c7ad2db659e40d6805733fee446ecd9caceb3366f773b717ebe5a0c550a1c3dd43e06432e122afaae2857ada147b4c45b9571fb4aee763fac32bde7def5d10a093ad4851d5e302dff4076b6f2feabe7d2c85a62dc067f07ac5b6df3c1cdb1af8eae25a4de7696353bed658c0c0eb4151c69f54a675ce74566bc66808041a465ae835018ea68b292b77bb14e1a3a0f79a5401137600cd5defca346e32486c6e61cb02b1492471408a31c67f06feb64520318ad1c9a56f7edaa7736e1135c3b9bed4af3da00f19190d890ed50b6bfd88462053b1491aac50a4c1693784280c764d431db0818860c69d102673bf55c823a86d90564e154ac2eb657262a997472fc543957c43a841364ed80f6f84e75c461fdc2eead9b3d7b02fd6d0e8bcbe0ac68ec7f8f8e96b6ed037a3e275327a2f1400b1646793bc5f9da3c55279c5600dca85b064279974ab65c59cba4b9c2aecfa76803acaf182414d2c728dc62b2a0b52f989e6e8e9922060caa84b81e45c9d7d6792fc1bf5bd8ab0fc86bf7df3998292ba2191ea73c50c4fd6947383aba9cfd5f989c291b2bda5f0e5eb3e5fee035b10190ea51f63a4ac844630ad85344e477ad8313479043c6ab579ea8b54f9a9e0283350b131dfdcb219d5512e72ce4e34ecdfdd7f1f465fefe585a9bf648fb5e334df14f514eba0f21a80004cbfafc028f589191"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {0x0}], 0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000ffc00000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0331684426", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f00000000c0)}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001800)={0x0, 0xda3b, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000001c00)={0x0, 0x5, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002000)={0x0, 0xe5a7c63b00761233, {0x8, @struct={0x4, 0x437}, r5, 0x5, 0x4, 0x2d, 0x1, 0x8000000000000001, 0xa, @struct={0x6, 0x18}, 0x839, 0x8, [0x2af, 0x4, 0x2, 0x800, 0x401, 0x1d8e]}, {0x3ff, @struct={0x8, 0x570e67d3}, r6, 0x7, 0x0, 0x1f2, 0x2, 0x1, 0x80, @usage=0x10000000000000, 0x0, 0x3, [0x3, 0x67, 0x4, 0xfffffffffffffffb, 0x3, 0x3]}, {0x5f, @usage=0xc, r7, 0x3, 0xffff, 0x8, 0x5, 0x1ff, 0x440, @struct={0x2}, 0x7, 0x5, [0xffffffffffffff81, 0xa120, 0x7, 0x7, 0x6, 0xffffffffffffffff]}, {0x401, 0x0, 0x100}}) 901.304315ms ago: executing program 1 (id=1994): syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x2, 0xffffffffffffffff, 0x2}) write$UHID_DESTROY(r0, &(0x7f0000000480), 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000004600000004000000fc0793011c5ee0d52d9981f4781c8449d9f9f35a2fc0b798db27e528ee5c998c1b23852f7eeacf8a68c006af378166c847454020522eefe88d44e7eb99be06677c1c22be1e"], 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000002c0)={0x4, 0x3, 0xda4f6ff633845490, 0x0, 0x7}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x800) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x200000a) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x20000000) 901.185269ms ago: executing program 2 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3cd5ef7c0898408f5777ae774fc7987cca4198983f15e8d3d454445a215d92e500f0067"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (fail_nth: 11) 705.931987ms ago: executing program 2 (id=1996): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x7fffffff, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040841) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000007900000000000000950000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = fcntl$dupfd(r5, 0x0, r0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x3f2, 0x100, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x44844) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x15) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300202800"}) 697.447558ms ago: executing program 3 (id=1997): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) socket$kcm(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(0x0, 0x4, 0x4200) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x7, 0x5]}, 0x8, 0x800) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r6, r5, 0x0, 0x180000504) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8102f002b0001000502150003000900090001020a000409040d00c300050003000afa020004000303080016ec050000000100"], 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000400)=""/254) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) 606.221518ms ago: executing program 2 (id=1999): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x2c, 0x9}) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) openat$ptmx(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x10002, 0x6, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x7fffffff, r3}) 546.462283ms ago: executing program 2 (id=2000): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x100}) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x17, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0), 0x84000) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) setsockopt(r4, 0x2, 0x9, &(0x7f00000003c0)="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", 0xfd) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e001400008c71ef28ff4b"], 0xffdd) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 185.897663ms ago: executing program 3 (id=2001): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000301, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) close(r7) socket(0x2b, 0x1, 0x1) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x86, 0x40000) (async) r10 = syz_open_dev$media(&(0x7f00000000c0), 0x86, 0x40000) ppoll(&(0x7f0000000180)=[{r1}, {r3, 0x4}, {r5, 0x8021}, {r10, 0x200}, {r2, 0x4450}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x7, 0x5053]}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010840)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb16}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.561329ms ago: executing program 3 (id=2002): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/53, 0x35}], 0x1, &(0x7f00000004c0)=""/164, 0xa4}}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)='\v', 0x57}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000340)='bridge0\x00') shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x8001}, &(0x7f0000000200)=0x8) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) 0s ago: executing program 1 (id=2003): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x7}, 0x14) kernel console output (not intermixed with test programs): und [ 183.966673][ T9296] UDF-fs: Scanning with blocksize 4096 failed [ 183.968421][ T9296] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 184.120402][ T9300] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 184.122701][ T9300] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 184.125193][ T9300] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.901'. [ 186.621272][ T5940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 186.624214][ T5940] Bluetooth: hci3: Injecting HCI hardware error event [ 186.627257][ T5943] Bluetooth: hci3: hardware error 0x00 [ 186.917986][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 187.297063][ T9378] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 89 [ 187.430124][ T9387] input: syz1 as /devices/virtual/input/input7 [ 187.705853][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.174476][ T9418] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.251889][ T9418] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.305396][ T9418] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.378938][ T9418] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.469283][ T9418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.477920][ T9418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.486254][ T9418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.496259][ T30] libceph: connect (1)[c::]:6789 error -101 [ 188.496885][ T9418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.498083][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 188.587467][ T9448] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.655061][ T9438] ceph: No mds server is up or the cluster is laggy [ 188.709737][ T5943] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 189.586795][ T9473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.963'. [ 189.589334][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'. [ 189.591990][ T9473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.963'. [ 189.770453][ T9487] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 191.471431][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.656712][ T9551] tipc: Started in network mode [ 191.658304][ T9551] tipc: Node identity 7f000001, cluster identity 4711 [ 191.661204][ T9551] tipc: Enabled bearer , priority 10 [ 191.698126][ T9553] tipc: Enabling of bearer rejected, already enabled [ 191.702860][ T9553] tipc: Enabled bearer , priority 0 [ 192.005958][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.009236][ T9564] batadv_slave_1: entered promiscuous mode [ 192.014607][ T9564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 192.069093][ T9570] netlink: 336 bytes leftover after parsing attributes in process `syz.2.998'. [ 192.073063][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 192.158777][ T9579] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1002'. [ 192.205722][ T73] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz1 [ 192.712609][ T8841] tipc: Node number set to 2130706433 [ 193.040165][ T9628] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1024'. [ 193.043577][ T9628] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1024'. [ 193.433330][ T9642] input: syz1 as /devices/virtual/input/input10 [ 193.661529][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206397][ T9667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.071756][ T9671] 9pnet_fd: p9_fd_create_tcp (9671): problem connecting socket to 127.0.0.1 [ 195.387209][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 196.953068][ T9762] tipc: Started in network mode [ 196.955714][ T9762] tipc: Node identity 96bfc0282e04, cluster identity 4711 [ 196.957943][ T9762] tipc: Enabled bearer , priority 0 [ 196.962077][ T9762] tipc: Enabled bearer , priority 0 [ 196.964142][ T9762] tipc: Bearer : already 2 bearers with priority 0 [ 196.966319][ T9762] tipc: Enabling of bearer rejected, cannot adjust to lower [ 196.970758][ T9761] tipc: Disabling bearer [ 197.961438][ T25] tipc: Node number set to 3099312168 [ 198.159021][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 198.163837][ T9802] vlan2: entered allmulticast mode [ 198.165359][ T9802] bond0: entered allmulticast mode [ 198.166930][ T9802] bond_slave_0: entered allmulticast mode [ 198.168557][ T9802] bond_slave_1: entered allmulticast mode [ 198.173545][ T9802] bond0: left allmulticast mode [ 198.175015][ T9802] bond_slave_0: left allmulticast mode [ 198.176589][ T9802] bond_slave_1: left allmulticast mode [ 198.362052][ T9813] fuse: Unknown parameter 'ÿÿ¹SM@ÎêPË¢' [ 198.368488][ T9813] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1094'. [ 198.371811][ T9813] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1094'. [ 198.423466][ T9817] sp0: Synchronizing with TNC [ 199.153244][ T9834] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 199.637576][ T9857] team0: No ports can be present during mode change [ 200.205023][ T9871] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1116'. [ 200.520633][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.604611][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1125'. [ 200.682400][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.686708][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.690979][ T25] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 200.694470][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.699455][ T25] usb 6-1: config 0 descriptor?? [ 200.856650][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.856650][ T9899] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 200.864526][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.864526][ T9899] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 200.868728][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 200.872639][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.872639][ T9899] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 200.877658][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 200.882878][ T9899] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 200.885713][ T9899] UDF-fs: Scanning with blocksize 512 failed [ 200.888741][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.888741][ T9899] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 200.894032][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.894032][ T9899] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 200.898491][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 200.903024][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.903024][ T9899] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 200.907006][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 200.910274][ T9899] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 200.912593][ T9899] UDF-fs: Scanning with blocksize 1024 failed [ 200.914543][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.914543][ T9899] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 200.918593][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.918593][ T9899] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 200.923841][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 200.927269][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.927269][ T9899] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 200.933000][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 200.936732][ T9899] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 200.940853][ T9899] UDF-fs: Scanning with blocksize 2048 failed [ 200.943197][ T9899] syz.3.1127: attempt to access beyond end of device [ 200.943197][ T9899] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 200.947784][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 200.951772][ T9899] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 200.955468][ T9899] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 200.958448][ T9899] UDF-fs: Scanning with blocksize 4096 failed [ 200.960773][ T9899] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 201.111878][ T25] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 201.114096][ T25] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 201.116135][ T25] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 201.118127][ T25] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 201.120688][ T25] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 201.123541][ T25] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 201.132833][ T25] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 201.310564][ T5979] usb 6-1: USB disconnect, device number 9 [ 201.635602][ T9930] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 201.638014][ T9930] tipc: Enabled bearer , priority 10 [ 201.668345][ T9931] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 201.864042][ T9943] tipc: Resetting bearer [ 201.877544][ T9943] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 201.880695][ T9943] tipc: Resetting bearer [ 201.884312][ T9943] bridge0: port 1(team0) entered disabled state [ 201.886534][ T9943] team0: left allmulticast mode [ 201.887948][ T9943] team0: left promiscuous mode [ 201.889404][ T9943] bridge0: port 1(team0) entered disabled state [ 201.894114][ T9943] tipc: Resetting bearer [ 201.896046][ T9943] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.898685][ T9943] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.782054][T10016] netlink: 'syz.2.1159': attribute type 2 has an invalid length. [ 203.555382][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 203.558606][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 203.846541][T10058] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 204.000851][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 204.827181][T10084] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1181'. [ 204.830279][T10084] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1181'. [ 205.660572][T10124] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1199'. [ 205.663212][T10124] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1199'. [ 205.816216][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 206.382699][ T57] kernel write not supported for file /snd/seq (pid: 57 comm: kworker/3:1) [ 206.574116][T10155] syzkaller0: entered promiscuous mode [ 206.575737][T10155] syzkaller0: entered allmulticast mode [ 206.773015][T10165] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 206.775892][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 208.233156][T10197] random: crng reseeded on system resumption [ 208.356944][T10198] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 208.415279][T10200] loop7: detected capacity change from 0 to 16384 [ 208.539927][T10201] loop7: detected capacity change from 16384 to 16383 [ 208.545810][T10200] blk_print_req_error: 27 callbacks suppressed [ 208.545822][T10200] I/O error, dev loop7, sector 5760 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 208.547427][T10201] I/O error, dev loop7, sector 2816 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 208.548729][T10200] I/O error, dev loop7, sector 6016 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 208.550848][T10201] buffer_io_error: 25 callbacks suppressed [ 208.550857][T10201] Buffer I/O error on dev loop7, logical block 352, lost async page write [ 208.553914][T10200] I/O error, dev loop7, sector 5760 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.556461][T10201] Buffer I/O error on dev loop7, logical block 353, lost async page write [ 208.558195][T10200] Buffer I/O error on dev loop7, logical block 720, async page read [ 208.560650][T10201] Buffer I/O error on dev loop7, logical block 354, lost async page write [ 208.560703][T10201] Buffer I/O error on dev loop7, logical block 355, lost async page write [ 208.560730][T10201] Buffer I/O error on dev loop7, logical block 356, lost async page write [ 208.560753][T10201] Buffer I/O error on dev loop7, logical block 357, lost async page write [ 208.560792][T10201] Buffer I/O error on dev loop7, logical block 358, lost async page write [ 208.580390][T10201] Buffer I/O error on dev loop7, logical block 359, lost async page write [ 208.583605][T10201] Buffer I/O error on dev loop7, logical block 360, lost async page write [ 208.589979][T10201] I/O error, dev loop7, sector 3840 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 208.595854][T10201] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x800 phys_seg 80 prio class 0 [ 208.605303][T10201] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.608005][T10201] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.610764][T10201] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.613427][T10201] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.616275][T10201] ldm_validate_partition_table(): Disk read failed. [ 208.618323][T10201] Dev loop7: unable to read RDB block 0 [ 208.621027][T10201] loop7: unable to read partition table [ 208.622750][T10201] loop_reread_partitions: partition scan of loop7 (R%0Öå—ÊT·$7ñ)]W°ÝÈð?”18úá´;9ƒŽ) failed (rc=-5) [ 209.029812][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 209.210242][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 209.214831][ T30] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.217362][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.221830][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.226144][ T30] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.228750][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.235475][ T30] usb 8-1: Product: syz [ 209.236714][ T30] usb 8-1: Manufacturer: syz [ 209.238077][ T30] usb 8-1: SerialNumber: syz [ 209.466190][ T30] usb 8-1: 0:2 : does not exist [ 209.502053][ T30] usb 8-1: USB disconnect, device number 4 [ 209.710633][ T9344] udevd[9344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.161807][T10238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.163968][T10238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 211.775359][T10290] IPv6: addrconf: prefix option has invalid lifetime [ 212.069696][ T5943] Bluetooth: hci1: command 0x0406 tx timeout [ 212.143036][T10328] team0: No ports can be present during mode change [ 213.137542][T10364] fuse: Unknown parameter 'user_i00000000000000000000' [ 213.140036][T10364] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1287'. [ 213.142536][T10364] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1287'. [ 213.220737][T10369] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1282' sets config #0 [ 213.906140][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 213.914626][T10393] vlan3: entered allmulticast mode [ 213.916162][T10393] bond0: entered allmulticast mode [ 213.917648][T10393] bond_slave_0: entered allmulticast mode [ 213.919310][T10393] bond_slave_1: entered allmulticast mode [ 213.922278][T10393] bond0: left allmulticast mode [ 213.923790][T10393] bond_slave_0: left allmulticast mode [ 213.925351][T10393] bond_slave_1: left allmulticast mode [ 214.018673][T10399] syz.0.1301 (10399): drop_caches: 2 [ 214.139896][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 214.755150][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'. [ 214.896482][T10452] fuse: Unknown parameter 'ÿÿ¹SM@ÎêPË¢' [ 214.902826][T10452] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1323'. [ 214.905541][T10452] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1323'. [ 215.013965][T10460] bridge0: entered allmulticast mode [ 215.635325][T10480] fuse: Unknown parameter 'ÿÿ¹SM@ÎêPË¢' [ 215.641902][T10480] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1333'. [ 215.644658][T10480] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1333'. [ 216.218249][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1360'. [ 216.222920][T10530] vlan2: entered promiscuous mode [ 216.224533][T10530] bridge0: entered promiscuous mode [ 216.226170][T10530] vlan2: entered allmulticast mode [ 216.229899][ T5943] Bluetooth: hci1: command 0x0406 tx timeout [ 216.870139][T10570] ucma_write: process 1041 (syz.0.1378) changed security contexts after opening file descriptor, this is not allowed. [ 216.883863][T10572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1379'. [ 218.063937][T10662] tipc: Enabled bearer , priority 0 [ 218.067624][T10662] tipc: Bearer : already 2 bearers with priority 0 [ 218.070717][T10662] tipc: Enabling of bearer rejected, cannot adjust to lower [ 219.350757][T10676] netlink: 'syz.2.1421': attribute type 30 has an invalid length. [ 219.369783][T10659] syzkaller0: entered promiscuous mode [ 219.371671][T10659] syzkaller0: entered allmulticast mode [ 220.761503][T10692] __nla_validate_parse: 4 callbacks suppressed [ 220.761516][T10692] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1424'. [ 220.769985][T10692] netlink: zone id is out of range [ 220.771614][T10692] netlink: zone id is out of range [ 220.773038][T10692] netlink: zone id is out of range [ 220.775159][T10692] netlink: get zone limit has 8 unknown bytes [ 220.980831][T10696] tipc: Enabled bearer , priority 0 [ 220.985494][T10696] tipc: Bearer : already 2 bearers with priority 0 [ 220.988327][T10696] tipc: Enabling of bearer rejected, cannot adjust to lower [ 220.996336][T10695] tipc: Disabling bearer [ 221.162039][T10707] fuse: Unknown parameter 'user_i00000000000000000000' [ 221.901553][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 222.133879][T10720] FAULT_INJECTION: forcing a failure. [ 222.133879][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 222.138950][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.3.1435 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 222.143217][T10720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.147350][T10720] Call Trace: [ 222.148697][T10720] [ 222.149919][T10720] dump_stack_lvl+0x16c/0x1f0 [ 222.151830][T10720] should_fail_ex+0x497/0x5b0 [ 222.153760][T10720] ? fs_reclaim_acquire+0xae/0x150 [ 222.155820][T10720] should_failslab+0xc2/0x120 [ 222.157731][T10720] __kmalloc_noprof+0xce/0x4f0 [ 222.159649][T10720] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 222.161804][T10720] ? tomoyo_realpath_from_path+0xbf/0x710 [ 222.164039][T10720] tomoyo_realpath_from_path+0xbf/0x710 [ 222.166203][T10720] ? tomoyo_path_number_perm+0x235/0x5b0 [ 222.168182][T10720] tomoyo_path_number_perm+0x248/0x5b0 [ 222.169868][T10720] ? tomoyo_path_number_perm+0x235/0x5b0 [ 222.171682][T10720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.173644][T10720] ? __pfx_lock_release+0x10/0x10 [ 222.175100][T10720] ? trace_lock_acquire+0x14e/0x1f0 [ 222.176914][T10720] ? lock_acquire+0x2f/0xb0 [ 222.178184][T10720] ? __fget_files+0x40/0x3a0 [ 222.179655][T10720] ? __fget_files+0x206/0x3a0 [ 222.181449][T10720] security_file_ioctl_compat+0x9b/0x240 [ 222.183567][T10720] __do_compat_sys_ioctl+0x4e/0x2c0 [ 222.185560][T10720] __do_fast_syscall_32+0x73/0x120 [ 222.187536][T10720] do_fast_syscall_32+0x32/0x80 [ 222.189453][T10720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.191979][T10720] RIP: 0023:0xf70be579 [ 222.193601][T10720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.194698][T10722] syzkaller0: entered promiscuous mode [ 222.201017][T10720] RSP: 002b:00000000f50b055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 222.201054][T10720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080047437 [ 222.201066][T10720] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.201077][T10720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.201089][T10720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.201100][T10720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.201127][T10720] [ 222.203249][T10722] syzkaller0: entered allmulticast mode [ 222.209780][T10720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.256764][T10724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.273286][T10726] tipc: Bearer : already 2 bearers with priority 0 [ 222.275739][T10726] tipc: Enabling of bearer rejected, cannot adjust to lower [ 222.404986][T10734] tipc: Enabled bearer , priority 0 [ 222.487766][T10741] fuse: Unknown parameter 'user_i00000000000000000000' [ 223.419908][T10751] FAULT_INJECTION: forcing a failure. [ 223.419908][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.423659][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.1.1448 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 223.426749][T10751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.429918][T10751] Call Trace: [ 223.430907][T10751] [ 223.431770][T10751] dump_stack_lvl+0x16c/0x1f0 [ 223.433140][T10751] should_fail_ex+0x497/0x5b0 [ 223.434504][T10751] _copy_from_user+0x2e/0xd0 [ 223.435887][T10751] move_addr_to_kernel+0x68/0x160 [ 223.437478][T10751] __sys_bind+0x11c/0x260 [ 223.438734][T10751] ? __pfx___sys_bind+0x10/0x10 [ 223.440135][T10751] ? __fget_files+0x206/0x3a0 [ 223.441508][T10751] ? __pfx_ksys_write+0x10/0x10 [ 223.442963][T10751] __ia32_sys_bind+0x71/0xb0 [ 223.444295][T10751] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 223.446184][T10751] __do_fast_syscall_32+0x73/0x120 [ 223.447611][T10751] do_fast_syscall_32+0x32/0x80 [ 223.449000][T10751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.450736][T10751] RIP: 0023:0xf7f24579 [ 223.451850][T10751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.457025][T10751] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 223.459401][T10751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 223.461629][T10751] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.463816][T10751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.465943][T10751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.468343][T10751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.471226][T10751] [ 224.279310][ T39] audit: type=1804 audit(1736064049.537:58): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1453" name="/newroot/360/file0/file0" dev="9p" ino=37098960 res=1 errno=0 [ 224.336210][ T39] audit: type=1800 audit(1736064049.607:59): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1453" name="bus" dev="9p" ino=37099007 res=0 errno=0 [ 224.349651][ T39] audit: type=1800 audit(1736064049.627:60): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1453" name="bus" dev="9p" ino=37099007 res=0 errno=0 [ 224.525720][T10743] syzkaller0: entered promiscuous mode [ 224.527517][T10743] syzkaller0: entered allmulticast mode [ 224.677382][T10776] overlayfs: missing 'lowerdir' [ 224.695348][T10779] fuse: Unknown parameter 'user_i00000000000000000000' [ 226.367613][T10802] netlink: 'syz.0.1468': attribute type 30 has an invalid length. [ 226.374404][T10796] syzkaller0: entered promiscuous mode [ 226.376071][T10796] syzkaller0: entered allmulticast mode [ 226.465838][T10810] fuse: Unknown parameter 'user_id00000000000000000000' [ 226.868949][T10814] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1470'. [ 226.876161][T10814] netlink: zone id is out of range [ 226.881118][T10814] netlink: zone id is out of range [ 226.884910][T10814] netlink: zone id is out of range [ 226.888609][T10814] netlink: zone id is out of range [ 226.891313][T10814] netlink: zone id is out of range [ 226.894137][T10814] netlink: zone id is out of range [ 226.897834][T10814] netlink: zone id is out of range [ 226.902933][T10814] netlink: zone id is out of range [ 226.905628][T10814] netlink: zone id is out of range [ 226.909347][T10814] netlink: zone id is out of range [ 228.772326][T10840] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 228.774512][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 229.825977][T10835] syzkaller0: entered promiscuous mode [ 229.827798][T10835] syzkaller0: entered allmulticast mode [ 229.893643][T10852] tipc: Failed to obtain node identity [ 229.895287][T10852] tipc: Enabling of bearer rejected, failed to enable media [ 229.941580][T10854] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.004873][T10865] fuse: Unknown parameter 'user_id00000000000000000000' [ 232.671175][ T39] audit: type=1326 audit(1736064057.947:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.3.1489" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 232.771468][T10882] tmpfs: Bad value for 'mpol' [ 232.854651][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1488'. [ 233.223636][T10873] syzkaller0: entered promiscuous mode [ 233.225397][T10873] syzkaller0: entered allmulticast mode [ 233.617949][T10897] fuse: Bad value for 'fd' [ 234.829814][ T1449] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 235.173096][T10915] net_ratelimit: 5 callbacks suppressed [ 235.173154][T10915] netlink: zone id is out of range [ 235.177851][T10915] netlink: zone id is out of range [ 235.183440][T10915] netlink: zone id is out of range [ 235.317296][T10908] ipvlan2: entered promiscuous mode [ 235.943136][T10942] fuse: Bad value for 'fd' [ 235.959885][T10938] syzkaller0: entered promiscuous mode [ 235.961703][T10938] syzkaller0: entered allmulticast mode [ 238.257057][T10968] netlink: 'syz.0.1515': attribute type 30 has an invalid length. [ 238.309554][T10971] FAULT_INJECTION: forcing a failure. [ 238.309554][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 238.314412][T10971] CPU: 2 UID: 0 PID: 10971 Comm: syz.0.1516 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 238.318693][T10971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.322947][T10971] Call Trace: [ 238.324281][T10971] [ 238.325505][T10971] dump_stack_lvl+0x16c/0x1f0 [ 238.327301][T10971] should_fail_ex+0x497/0x5b0 [ 238.328800][T10971] ? fs_reclaim_acquire+0xae/0x150 [ 238.330423][T10971] should_failslab+0xc2/0x120 [ 238.331820][T10971] __kmalloc_noprof+0xce/0x4f0 [ 238.333240][T10971] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 238.335119][T10971] ? tomoyo_realpath_from_path+0xbf/0x710 [ 238.337327][T10971] tomoyo_realpath_from_path+0xbf/0x710 [ 238.339443][T10971] ? tomoyo_path_number_perm+0x235/0x5b0 [ 238.341603][T10971] tomoyo_path_number_perm+0x248/0x5b0 [ 238.343691][T10971] ? tomoyo_path_number_perm+0x235/0x5b0 [ 238.345731][T10971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.347513][T10971] ? __pfx_lock_release+0x10/0x10 [ 238.349019][T10971] ? trace_lock_acquire+0x14e/0x1f0 [ 238.350538][T10971] ? lock_acquire+0x2f/0xb0 [ 238.351859][T10971] ? __fget_files+0x40/0x3a0 [ 238.353218][T10971] ? __fget_files+0x206/0x3a0 [ 238.354734][T10971] security_file_ioctl_compat+0x9b/0x240 [ 238.356521][T10971] __do_compat_sys_ioctl+0x4e/0x2c0 [ 238.358035][T10971] __do_fast_syscall_32+0x73/0x120 [ 238.359991][T10971] do_fast_syscall_32+0x32/0x80 [ 238.361744][T10971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.363648][T10971] RIP: 0023:0xf7f16579 [ 238.365067][T10971] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.371043][T10971] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.374225][T10971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080047437 [ 238.377359][T10971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.380517][T10971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.383722][T10971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.386290][T10971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.388576][T10971] [ 238.390661][T10971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.736884][T10978] Driver unsupported XDP return value 0 on prog (id 326) dev N/A, expect packet loss! [ 238.964206][T10981] FAULT_INJECTION: forcing a failure. [ 238.964206][T10981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.969303][T10981] CPU: 3 UID: 0 PID: 10981 Comm: syz.1.1518 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 238.973459][T10981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.977593][T10981] Call Trace: [ 238.978926][T10981] [ 238.980097][T10981] dump_stack_lvl+0x16c/0x1f0 [ 238.981965][T10981] should_fail_ex+0x497/0x5b0 [ 238.983671][T10981] _copy_to_user+0x32/0xd0 [ 238.985207][T10981] simple_read_from_buffer+0xd0/0x160 [ 238.986815][T10981] proc_fail_nth_read+0x198/0x270 [ 238.988322][T10981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.990386][T10981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.992261][T10981] vfs_read+0x1df/0xbe0 [ 238.993496][T10981] ? __fget_files+0x1fc/0x3a0 [ 238.995346][T10981] ? __pfx___mutex_lock+0x10/0x10 [ 238.997404][T10981] ? __pfx_vfs_read+0x10/0x10 [ 238.998849][T10981] ? __fget_files+0x206/0x3a0 [ 239.000208][T10981] ksys_read+0x12b/0x250 [ 239.001459][T10981] ? __pfx_ksys_read+0x10/0x10 [ 239.002869][T10981] __do_fast_syscall_32+0x73/0x120 [ 239.004474][T10981] do_fast_syscall_32+0x32/0x80 [ 239.005935][T10981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.007798][T10981] RIP: 0023:0xf7f24579 [ 239.009023][T10981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.015013][T10981] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 239.018052][T10981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 239.020365][T10981] RDX: 000000000000000f RSI: 00000000f73b3ff4 RDI: 0000000000000000 [ 239.022680][T10981] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 239.025173][T10981] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 239.027741][T10981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.030974][T10981] [ 239.032191][ C3] vkms_vblank_simulate: vblank timer overrun [ 239.599926][T10986] tipc: Started in network mode [ 239.601974][T10986] tipc: Node identity 7a51dd6f456d, cluster identity 4711 [ 239.604875][T10986] tipc: Enabled bearer , priority 0 [ 239.630708][T10985] tipc: Disabling bearer [ 239.757451][T10994] FAULT_INJECTION: forcing a failure. [ 239.757451][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 239.761733][T10994] CPU: 2 UID: 0 PID: 10994 Comm: syz.3.1524 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 239.764923][T10994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.768027][T10994] Call Trace: [ 239.769034][T10994] [ 239.769942][T10994] dump_stack_lvl+0x16c/0x1f0 [ 239.771305][T10994] should_fail_ex+0x497/0x5b0 [ 239.772640][T10994] ? fs_reclaim_acquire+0xae/0x150 [ 239.774111][T10994] should_failslab+0xc2/0x120 [ 239.775446][T10994] __kmalloc_node_noprof+0xd1/0x520 [ 239.776965][T10994] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 239.778555][T10994] __kvmalloc_node_noprof+0xad/0x1a0 [ 239.780091][T10994] __do_sys_add_key+0x1f8/0x460 [ 239.781496][T10994] ? __pfx___do_sys_add_key+0x10/0x10 [ 239.783052][T10994] ? ksys_write+0x1ba/0x250 [ 239.784366][T10994] __do_fast_syscall_32+0x73/0x120 [ 239.785855][T10994] do_fast_syscall_32+0x32/0x80 [ 239.787254][T10994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.789107][T10994] RIP: 0023:0xf70be579 [ 239.790309][T10994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.795767][T10994] RSP: 002b:00000000f50b055c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 239.798131][T10994] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000000 [ 239.800387][T10994] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 00000000fffffffb [ 239.802658][T10994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.804916][T10994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 239.807181][T10994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.809501][T10994] [ 240.107420][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1527'. [ 240.114009][T11003] netlink: 'syz.1.1527': attribute type 27 has an invalid length. [ 240.121734][T11006] netlink: 'syz.2.1528': attribute type 30 has an invalid length. [ 240.152387][T11003] bridge0: left promiscuous mode [ 240.162962][T11003] tipc: Resetting bearer [ 240.166942][ T39] audit: type=1326 audit(1736064065.437:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.181995][ T39] audit: type=1326 audit(1736064065.437:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.188266][ T39] audit: type=1326 audit(1736064065.437:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.197611][ T39] audit: type=1326 audit(1736064065.447:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.204668][ T39] audit: type=1326 audit(1736064065.447:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.213460][ T39] audit: type=1326 audit(1736064065.447:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.228240][ T39] audit: type=1326 audit(1736064065.457:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.237750][ T39] audit: type=1326 audit(1736064065.457:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24598 code=0x7ffc0000 [ 240.244695][ T39] audit: type=1326 audit(1736064065.457:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.252281][ T39] audit: type=1326 audit(1736064065.457:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.1.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 240.359576][T11003] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.365191][T11003] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.367915][T11003] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.371350][T11003] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.388425][T11003] ipvlan2: left promiscuous mode [ 240.404871][T11003] vlan2: left promiscuous mode [ 240.406368][T11003] vlan2: left allmulticast mode [ 240.427631][T11007] bridge0: port 1(netdevsim0) entered blocking state [ 240.430306][T11007] bridge0: port 1(netdevsim0) entered disabled state [ 240.432419][T11007] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 240.435470][T11007] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 240.467700][T11023] tipc: Started in network mode [ 240.469061][T11023] tipc: Node identity dead1e830bcf, cluster identity 4711 [ 240.471681][T11023] tipc: Enabled bearer , priority 0 [ 240.475834][T11023] tipc: Enabled bearer , priority 0 [ 240.479573][T11022] tipc: Disabling bearer [ 241.587815][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1541'. [ 241.599791][ T57] tipc: Node number set to 3579977347 [ 241.701541][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.704577][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.707433][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.720202][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.723212][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.726161][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.729298][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.732439][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.735303][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.738320][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.741372][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.744188][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.747061][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.750183][T11058] 9pnet_fd: p9_fd_create_unix (11058): problem connecting socket: ./file0: -111 [ 241.813055][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 241.971762][T11085] fuse: Unknown parameter '0x0000000000000004' [ 242.636378][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 242.768351][T11110] binder: Unknown parameter 'st' [ 242.779389][T11110] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1562'. [ 242.998011][T11121] FAULT_INJECTION: forcing a failure. [ 242.998011][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.003947][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.2.1566 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 243.006922][T11121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.009928][T11121] Call Trace: [ 243.010837][T11121] [ 243.011680][T11121] dump_stack_lvl+0x16c/0x1f0 [ 243.012994][T11121] should_fail_ex+0x497/0x5b0 [ 243.014335][T11121] _copy_to_user+0x32/0xd0 [ 243.015537][T11121] simple_read_from_buffer+0xd0/0x160 [ 243.017028][T11121] proc_fail_nth_read+0x198/0x270 [ 243.018495][T11121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.020052][T11121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.021576][T11121] vfs_read+0x1df/0xbe0 [ 243.022770][T11121] ? __fget_files+0x1fc/0x3a0 [ 243.024100][T11121] ? __pfx___mutex_lock+0x10/0x10 [ 243.025534][T11121] ? __pfx_vfs_read+0x10/0x10 [ 243.026827][T11121] ? __fget_files+0x206/0x3a0 [ 243.028148][T11121] ksys_read+0x12b/0x250 [ 243.029362][T11121] ? __pfx_ksys_read+0x10/0x10 [ 243.030685][T11121] __do_fast_syscall_32+0x73/0x120 [ 243.032308][T11121] do_fast_syscall_32+0x32/0x80 [ 243.033744][T11121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.035535][T11121] RIP: 0023:0xf7f84579 [ 243.036707][T11121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.042157][T11121] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 243.044516][T11121] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 243.046823][T11121] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 243.049163][T11121] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 243.051450][T11121] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 243.053738][T11121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.056439][T11121] [ 243.154600][T11132] tipc: Enabled bearer , priority 0 [ 243.158011][T11132] tipc: Enabling of bearer rejected, already enabled [ 243.164968][T11131] tipc: Disabling bearer [ 243.260515][T11135] fuse: Unknown parameter '0x0000000000000004' [ 243.874687][T11158] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 243.877026][T11158] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1581'. [ 244.136946][T11173] netlink: 207036 bytes leftover after parsing attributes in process `syz.1.1583'. [ 244.389713][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 244.550260][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 244.553731][ T57] usb 8-1: config 0 has no interfaces? [ 244.554165][T11178] fuse: Unknown parameter '0x0000000000000004' [ 244.557780][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 244.562071][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.564724][ T57] usb 8-1: Product: syz [ 244.565969][ T57] usb 8-1: Manufacturer: syz [ 244.567308][ T57] usb 8-1: SerialNumber: syz [ 244.577552][ T57] usb 8-1: config 0 descriptor?? [ 244.736189][T11181] FAULT_INJECTION: forcing a failure. [ 244.736189][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 244.739970][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.2.1587 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 244.743212][T11181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.746398][T11181] Call Trace: [ 244.747366][T11181] [ 244.748225][T11181] dump_stack_lvl+0x16c/0x1f0 [ 244.749614][T11181] should_fail_ex+0x497/0x5b0 [ 244.750979][T11181] ? fs_reclaim_acquire+0xae/0x150 [ 244.752761][T11181] should_failslab+0xc2/0x120 [ 244.754221][T11181] __kmalloc_noprof+0xce/0x4f0 [ 244.755605][T11181] ? d_absolute_path+0x137/0x1b0 [ 244.757054][T11181] ? tomoyo_encode2+0x100/0x3e0 [ 244.758494][T11181] tomoyo_encode2+0x100/0x3e0 [ 244.759860][T11181] tomoyo_realpath_from_path+0x1a7/0x710 [ 244.761819][T11181] tomoyo_path_number_perm+0x248/0x5b0 [ 244.763405][T11181] ? tomoyo_path_number_perm+0x235/0x5b0 [ 244.765074][T11181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.766959][T11181] ? __pfx_lock_release+0x10/0x10 [ 244.768456][T11181] ? trace_lock_acquire+0x14e/0x1f0 [ 244.770021][T11181] ? lock_acquire+0x2f/0xb0 [ 244.771448][T11181] ? __fget_files+0x40/0x3a0 [ 244.772811][T11181] ? __fget_files+0x206/0x3a0 [ 244.774253][T11181] security_file_ioctl_compat+0x9b/0x240 [ 244.776032][T11181] __do_compat_sys_ioctl+0x4e/0x2c0 [ 244.777632][T11181] __do_fast_syscall_32+0x73/0x120 [ 244.779171][T11181] do_fast_syscall_32+0x32/0x80 [ 244.780643][T11181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.782562][T11181] RIP: 0023:0xf7f84579 [ 244.783792][T11181] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.789520][T11181] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 244.791998][T11181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 244.794370][T11181] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.796758][T11181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.799234][T11181] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 244.801621][T11181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.804233][T11181] [ 244.805488][T11181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.900700][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 244.903531][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 244.906189][T11190] netlink: 'syz.2.1589': attribute type 20 has an invalid length. [ 244.909767][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 244.912895][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 244.916009][T11189] netlink: 'syz.2.1589': attribute type 20 has an invalid length. [ 246.258089][T11217] syzkaller0: entered promiscuous mode [ 246.260061][T11217] syzkaller0: entered allmulticast mode [ 246.411714][T11224] fuse: Unknown parameter '0x0000000000000004' [ 246.957279][ T35] usb 8-1: USB disconnect, device number 6 [ 247.822239][T11229] tipc: Enabled bearer , priority 0 [ 248.959928][ T5980] tipc: Node number set to 1060953455 [ 249.000630][T11268] fuse: Unknown parameter '0x0000000000000004' [ 250.949776][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 251.102608][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.105155][ T25] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 251.108912][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.111880][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.117437][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.120600][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.122874][ T25] usb 8-1: Product: syz [ 251.124072][ T25] usb 8-1: Manufacturer: syz [ 251.133460][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 251.135010][ T25] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 251.347320][ T25] usb 8-1: USB disconnect, device number 7 [ 251.963140][T11318] FAULT_INJECTION: forcing a failure. [ 251.963140][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 251.968533][T11318] CPU: 1 UID: 0 PID: 11318 Comm: syz.3.1629 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 251.971843][T11318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.974876][T11318] Call Trace: [ 251.975848][T11318] [ 251.976702][T11318] dump_stack_lvl+0x16c/0x1f0 [ 251.978070][T11318] should_fail_ex+0x497/0x5b0 [ 251.979450][T11318] ? fs_reclaim_acquire+0xae/0x150 [ 251.980906][T11318] should_failslab+0xc2/0x120 [ 251.982224][T11318] __kmalloc_noprof+0xce/0x4f0 [ 251.983555][T11318] ? compat_i2cdev_ioctl+0x1b3/0x530 [ 251.985013][T11318] compat_i2cdev_ioctl+0x1b3/0x530 [ 251.986471][T11318] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 251.988029][T11318] ? __fget_files+0x206/0x3a0 [ 251.989390][T11318] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 251.991040][T11318] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 251.991376][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 251.991386][ T39] audit: type=1326 audit(1736064077.267:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.992514][T11318] __do_fast_syscall_32+0x73/0x120 [ 251.994249][ T39] audit: type=1326 audit(1736064077.267:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.000119][T11318] do_fast_syscall_32+0x32/0x80 [ 252.000139][T11318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.000154][T11318] RIP: 0023:0xf70be579 [ 252.000163][T11318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 252.000173][T11318] RSP: 002b:00000000f50b055c EFLAGS: 00000296 [ 252.002049][ T39] audit: type=1326 audit(1736064077.267:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.007567][T11318] ORIG_RAX: 0000000000000036 [ 252.009010][ T39] audit: type=1326 audit(1736064077.267:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.010795][T11318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 252.010804][T11318] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.010810][T11318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.010816][T11318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 252.010822][T11318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.010835][T11318] [ 252.047362][ T39] audit: type=1326 audit(1736064077.267:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.054072][ T39] audit: type=1326 audit(1736064077.267:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.062250][ T39] audit: type=1326 audit(1736064077.267:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.068704][ T39] audit: type=1326 audit(1736064077.267:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.074864][ T39] audit: type=1326 audit(1736064077.267:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.080949][ T39] audit: type=1326 audit(1736064077.267:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 252.458201][T11331] xfs: Unknown parameter 'grpquota' [ 252.699967][T11339] netlink: 196796 bytes leftover after parsing attributes in process `syz.0.1633'. [ 252.773138][T11338] syzkaller0: entered promiscuous mode [ 252.775306][T11338] syzkaller0: entered allmulticast mode [ 253.300426][T11344] netlink: 'syz.0.1637': attribute type 13 has an invalid length. [ 253.302815][T11344] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1637'. [ 253.980355][T11344] syz_tun: refused to change device tx_queue_len [ 253.982307][T11344] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 254.040333][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 254.079074][T11360] FAULT_INJECTION: forcing a failure. [ 254.079074][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 254.083348][T11360] CPU: 3 UID: 0 PID: 11360 Comm: syz.0.1643 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 254.086422][T11360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.089561][T11360] Call Trace: [ 254.090537][T11360] [ 254.091396][T11360] dump_stack_lvl+0x16c/0x1f0 [ 254.092784][T11360] should_fail_ex+0x497/0x5b0 [ 254.094160][T11360] ? fs_reclaim_acquire+0xae/0x150 [ 254.095652][T11360] should_failslab+0xc2/0x120 [ 254.097027][T11360] __kmalloc_cache_noprof+0x68/0x420 [ 254.098620][T11360] ? kasan_save_track+0x14/0x30 [ 254.100027][T11360] x509_cert_parse+0xfc/0x900 [ 254.101428][T11360] ? __pfx_down_read+0x10/0x10 [ 254.102833][T11360] x509_key_preparse+0x65/0x960 [ 254.104242][T11360] asymmetric_key_preparse+0xc7/0x190 [ 254.105802][T11360] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 254.107529][T11360] __key_create_or_update+0x459/0xe10 [ 254.109177][T11360] ? __pfx___key_create_or_update+0x10/0x10 [ 254.110885][T11360] ? lookup_user_key+0x2ca/0x12f0 [ 254.112530][T11360] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 254.114305][T11360] key_create_or_update+0x42/0x60 [ 254.115768][T11360] __do_sys_add_key+0x29c/0x460 [ 254.117163][T11360] ? __pfx___do_sys_add_key+0x10/0x10 [ 254.118723][T11360] ? ksys_write+0x1ba/0x250 [ 254.120047][T11360] __do_fast_syscall_32+0x73/0x120 [ 254.121540][T11360] do_fast_syscall_32+0x32/0x80 [ 254.122965][T11360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.124787][T11360] RIP: 0023:0xf7f16579 [ 254.125973][T11360] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.131631][T11360] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 254.134018][T11360] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000000 [ 254.136241][T11360] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 00000000fffffffb [ 254.138486][T11360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.140763][T11360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.143042][T11360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.145311][T11360] [ 254.276252][T11366] syzkaller0: entered promiscuous mode [ 254.277912][T11366] syzkaller0: entered allmulticast mode [ 254.376582][T11379] FAULT_INJECTION: forcing a failure. [ 254.376582][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 254.382197][T11379] CPU: 3 UID: 0 PID: 11379 Comm: syz.2.1650 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 254.385265][T11379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.388264][T11379] Call Trace: [ 254.389232][T11379] [ 254.390091][T11379] dump_stack_lvl+0x16c/0x1f0 [ 254.391445][T11379] should_fail_ex+0x497/0x5b0 [ 254.392799][T11379] ? fs_reclaim_acquire+0xae/0x150 [ 254.394210][T11379] should_failslab+0xc2/0x120 [ 254.395550][T11379] __kmalloc_noprof+0xce/0x4f0 [ 254.396897][T11379] ? compat_i2cdev_ioctl+0x1b3/0x530 [ 254.398419][T11379] compat_i2cdev_ioctl+0x1b3/0x530 [ 254.399856][T11379] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 254.401365][T11379] ? __fget_files+0x206/0x3a0 [ 254.402679][T11379] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 254.404212][T11379] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 254.405666][T11379] __do_fast_syscall_32+0x73/0x120 [ 254.407079][T11379] do_fast_syscall_32+0x32/0x80 [ 254.408592][T11379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.410329][T11379] RIP: 0023:0xf7f84579 [ 254.411449][T11379] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.416740][T11379] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 254.419083][T11379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 254.421302][T11379] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.423586][T11379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.425760][T11379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.428041][T11379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.430299][T11379] [ 254.434890][T11370] syzkaller0: entered promiscuous mode [ 254.437187][T11370] syzkaller0: entered allmulticast mode [ 255.102649][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.162005][T11385] syzkaller0: entered promiscuous mode [ 256.163595][T11385] syzkaller0: entered allmulticast mode [ 257.052641][T11395] fuse: Bad value for 'group_id' [ 257.054451][T11395] fuse: Bad value for 'group_id' [ 257.288932][T11397] overlayfs: failed to resolve './file1': -2 [ 257.581319][T11400] fuse: Unknown parameter ' ' [ 257.980369][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1657'. [ 259.031760][T11414] syzkaller0: entered promiscuous mode [ 259.033387][T11414] syzkaller0: entered allmulticast mode [ 259.217878][T11425] syzkaller1: entered promiscuous mode [ 259.219531][T11425] syzkaller1: entered allmulticast mode [ 259.359679][ T30] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 259.542406][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.550149][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.557015][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 259.560660][ T30] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.564044][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.568521][T11423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.572009][ T30] hub 8-1:1.0: bad descriptor, ignoring hub [ 259.575942][ T30] hub 8-1:1.0: probe with driver hub failed with error -5 [ 259.578300][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 259.580163][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 259.583912][ T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 259.585685][ T30] cdc_wdm 8-1:1.0: Unknown control protocol [ 259.894424][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 259.896767][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 259.900190][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 259.902093][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 259.903971][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 259.905851][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 260.959049][T11418] syzkaller0: entered promiscuous mode [ 260.960841][T11418] syzkaller0: entered allmulticast mode [ 261.060752][T11435] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1667'. [ 261.064042][T11435] openvswitch: netlink: Message has 12 unknown bytes. [ 261.080889][ T35] usb 8-1: USB disconnect, device number 8 [ 261.522996][T11453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1671'. [ 262.715615][T11473] FAULT_INJECTION: forcing a failure. [ 262.715615][T11473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.719980][T11473] CPU: 3 UID: 0 PID: 11473 Comm: syz.0.1677 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 262.722973][T11473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.726239][T11473] Call Trace: [ 262.727178][T11473] [ 262.728024][T11473] dump_stack_lvl+0x16c/0x1f0 [ 262.729357][T11473] should_fail_ex+0x497/0x5b0 [ 262.730688][T11473] _copy_to_user+0x32/0xd0 [ 262.732319][T11473] simple_read_from_buffer+0xd0/0x160 [ 262.733844][T11473] proc_fail_nth_read+0x198/0x270 [ 262.735284][T11473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.736860][T11473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.738534][T11473] vfs_read+0x1df/0xbe0 [ 262.739766][T11473] ? __fget_files+0x1fc/0x3a0 [ 262.741144][T11473] ? __pfx___mutex_lock+0x10/0x10 [ 262.742487][T11473] ? __pfx_vfs_read+0x10/0x10 [ 262.743777][T11473] ? __fget_files+0x206/0x3a0 [ 262.745080][T11473] ksys_read+0x12b/0x250 [ 262.746241][T11473] ? __pfx_ksys_read+0x10/0x10 [ 262.747587][T11473] __do_fast_syscall_32+0x73/0x120 [ 262.749052][T11473] do_fast_syscall_32+0x32/0x80 [ 262.750414][T11473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.752182][T11473] RIP: 0023:0xf7f16579 [ 262.753342][T11473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.758709][T11473] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 262.761056][T11473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5066620 [ 262.763267][T11473] RDX: 000000000000000f RSI: 00000000f73a3ff4 RDI: 0000000000000000 [ 262.765480][T11473] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 262.767688][T11473] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 262.769901][T11473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.772107][T11473] [ 263.645969][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1685'. [ 263.960114][T11511] syzkaller0: entered promiscuous mode [ 263.961750][T11511] syzkaller0: entered allmulticast mode [ 264.151512][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1687'. [ 264.250397][T11514] tmpfs: Bad value for 'mpol' [ 264.818078][ T39] kauditd_printk_skb: 170 callbacks suppressed [ 264.818088][ T39] audit: type=1326 audit(1736064090.087:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.836135][ T39] audit: type=1326 audit(1736064090.087:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.843196][ T39] audit: type=1326 audit(1736064090.097:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.849299][ T39] audit: type=1326 audit(1736064090.117:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.861542][ T39] audit: type=1326 audit(1736064090.127:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11525 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.867571][ T39] audit: type=1326 audit(1736064090.127:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.879357][ T39] audit: type=1326 audit(1736064090.127:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.885584][ T39] audit: type=1326 audit(1736064090.127:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.891949][ T39] audit: type=1326 audit(1736064090.127:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 264.898018][ T39] audit: type=1326 audit(1736064090.127:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11525 comm="syz.0.1691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f16598 code=0x7ffc0000 [ 265.806756][T11526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.821708][T11533] tipc: Enabling of bearer rejected, already enabled [ 265.884446][T11526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.021780][T11526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.079055][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1696'. [ 266.169229][T11526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.221134][T11521] syzkaller0: entered promiscuous mode [ 266.224051][T11521] syzkaller0: entered allmulticast mode [ 266.266494][T11526] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.282979][T11526] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.288852][T11526] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.296467][T11526] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.407093][T11552] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 266.471721][T11556] ip6gre1: entered allmulticast mode [ 266.473785][T11556] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 266.477820][T11556] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 266.483663][T11556] bond10: (slave ip6gre1): making interface the new active one [ 266.487436][T11556] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 266.498857][T11549] ip6t_srh: unknown srh invflags 85DA [ 266.949719][ T5966] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.112100][ T5966] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.114696][ T5966] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 267.117744][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.121702][ T5966] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.128473][ T5966] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.131510][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.133844][ T5966] usb 5-1: Product: syz [ 267.135102][ T5966] usb 5-1: Manufacturer: syz [ 267.145832][ T5966] cdc_wdm 5-1:1.0: skipping garbage [ 267.147417][ T5966] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 267.599389][ T25] usb 5-1: USB disconnect, device number 14 [ 268.150264][T11583] FAULT_INJECTION: forcing a failure. [ 268.150264][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.153981][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.0.1708 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 268.157024][T11583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.160109][T11583] Call Trace: [ 268.161093][T11583] [ 268.161967][T11583] dump_stack_lvl+0x16c/0x1f0 [ 268.163329][T11583] should_fail_ex+0x497/0x5b0 [ 268.164688][T11583] _copy_from_iter+0x29b/0x1400 [ 268.166109][T11583] ? trace_lock_acquire+0x14e/0x1f0 [ 268.167613][T11583] ? __alloc_skb+0x200/0x380 [ 268.168983][T11583] ? __pfx__copy_from_iter+0x10/0x10 [ 268.170492][T11583] ? __virt_addr_valid+0x1a4/0x590 [ 268.171967][T11583] ? __virt_addr_valid+0x5e/0x590 [ 268.173418][T11583] ? __phys_addr_symbol+0x30/0x80 [ 268.174885][T11583] ? __check_object_size+0x488/0x710 [ 268.176406][T11583] netlink_sendmsg+0x813/0xd70 [ 268.177796][T11583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.179332][T11583] ____sys_sendmsg+0x9ae/0xb40 [ 268.180710][T11583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.182226][T11583] ? get_compat_msghdr+0x11b/0x170 [ 268.183704][T11583] ___sys_sendmsg+0x135/0x1e0 [ 268.185070][T11583] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.186562][T11583] ? __pfx_lock_release+0x10/0x10 [ 268.188005][T11583] ? trace_lock_acquire+0x14e/0x1f0 [ 268.189538][T11583] ? __fget_files+0x206/0x3a0 [ 268.190897][T11583] __sys_sendmsg+0x16e/0x220 [ 268.192228][T11583] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.193713][T11583] __do_fast_syscall_32+0x73/0x120 [ 268.195179][T11583] do_fast_syscall_32+0x32/0x80 [ 268.196586][T11583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.198431][T11583] RIP: 0023:0xf7f16579 [ 268.199603][T11583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.205064][T11583] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 268.207437][T11583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 268.209727][T11583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.211976][T11583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.214232][T11583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 268.216485][T11583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.218766][T11583] [ 268.401981][T11589] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1707'. [ 268.405532][T11589] netlink: zone id is out of range [ 268.407001][T11589] netlink: zone id is out of range [ 268.408518][T11589] netlink: get zone limit has 8 unknown bytes [ 268.411077][T11592] syzkaller0: entered promiscuous mode [ 268.412654][T11592] syzkaller0: entered allmulticast mode [ 268.486780][T11594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1710'. [ 268.559360][T11600] vivid-002: disconnect [ 268.589972][T11595] vivid-002: reconnect [ 268.651673][T11603] netlink: 'syz.3.1714': attribute type 30 has an invalid length. [ 269.664306][T11603] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 270.327527][T11629] mkiss: ax0: crc mode is auto. [ 270.751427][T11627] syzkaller0: entered promiscuous mode [ 270.753116][T11627] syzkaller0: entered allmulticast mode [ 270.787328][T11640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1726'. [ 270.829861][T11642] FAULT_INJECTION: forcing a failure. [ 270.829861][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 270.833525][T11642] CPU: 3 UID: 0 PID: 11642 Comm: syz.1.1727 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 270.836569][T11642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.839777][T11642] Call Trace: [ 270.840756][T11642] [ 270.841673][T11642] dump_stack_lvl+0x16c/0x1f0 [ 270.843179][T11642] should_fail_ex+0x497/0x5b0 [ 270.844560][T11642] ? fs_reclaim_acquire+0xae/0x150 [ 270.846096][T11642] should_failslab+0xc2/0x120 [ 270.847493][T11642] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 270.849241][T11642] ? __alloc_skb+0x2b3/0x380 [ 270.850654][T11642] __alloc_skb+0x2b3/0x380 [ 270.851956][T11642] ? __pfx___alloc_skb+0x10/0x10 [ 270.853413][T11642] ? __lock_acquire+0xcc5/0x3c40 [ 270.854849][T11642] __tipc_nl_compat_doit+0xa2/0x3d0 [ 270.856373][T11642] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 270.858096][T11642] ? hlock_class+0x4e/0x130 [ 270.859436][T11642] ? bpf_lsm_capable+0x9/0x10 [ 270.860808][T11642] ? security_capable+0x7e/0x260 [ 270.862245][T11642] tipc_nl_compat_doit+0x11e/0x290 [ 270.863731][T11642] tipc_nl_compat_recv+0x91e/0xc00 [ 270.865240][T11642] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 270.866852][T11642] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 270.868589][T11642] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 270.870446][T11642] ? __mutex_trylock_common+0xea/0x250 [ 270.872024][T11642] ? rcu_is_watching+0x12/0xc0 [ 270.873424][T11642] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 270.875555][T11642] genl_family_rcv_msg_doit+0x202/0x2f0 [ 270.877157][T11642] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.878918][T11642] ? genl_get_cmd+0x195/0x580 [ 270.880273][T11642] ? __radix_tree_lookup+0x21f/0x2c0 [ 270.881810][T11642] genl_rcv_msg+0x565/0x800 [ 270.883117][T11642] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.884541][T11642] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 270.886176][T11642] ? __pfx___lock_acquire+0x10/0x10 [ 270.887669][T11642] netlink_rcv_skb+0x165/0x410 [ 270.889086][T11642] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.890536][T11642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.892071][T11642] ? down_read+0xc9/0x330 [ 270.893335][T11642] ? __pfx_down_read+0x10/0x10 [ 270.894730][T11642] ? netlink_deliver_tap+0x1ae/0xca0 [ 270.896255][T11642] genl_rcv+0x28/0x40 [ 270.897431][T11642] netlink_unicast+0x53c/0x7f0 [ 270.898839][T11642] ? __pfx_netlink_unicast+0x10/0x10 [ 270.900350][T11642] ? __phys_addr_symbol+0x30/0x80 [ 270.901819][T11642] ? __check_object_size+0x488/0x710 [ 270.903337][T11642] netlink_sendmsg+0x8b8/0xd70 [ 270.904717][T11642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.906261][T11642] ____sys_sendmsg+0x9ae/0xb40 [ 270.907647][T11642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.909216][T11642] ? get_compat_msghdr+0x11b/0x170 [ 270.910693][T11642] ___sys_sendmsg+0x135/0x1e0 [ 270.912053][T11642] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.913575][T11642] ? __pfx_lock_release+0x10/0x10 [ 270.914985][T11642] ? trace_lock_acquire+0x14e/0x1f0 [ 270.916499][T11642] ? __fget_files+0x206/0x3a0 [ 270.917899][T11642] __sys_sendmsg+0x16e/0x220 [ 270.919246][T11642] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.920731][T11642] __do_fast_syscall_32+0x73/0x120 [ 270.922225][T11642] do_fast_syscall_32+0x32/0x80 [ 270.923640][T11642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.925471][T11642] RIP: 0023:0xf7f24579 [ 270.926658][T11642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 270.932164][T11642] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 270.934501][T11642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 270.936769][T11642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.939039][T11642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.941326][T11642] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 270.943595][T11642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.945900][T11642] [ 271.259863][ T6079] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 271.571243][ T6079] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.573766][ T6079] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 271.576622][ T6079] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.579164][ T6079] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.587825][ T6079] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.590870][ T6079] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.593538][ T6079] usb 8-1: Product: syz [ 271.594901][ T6079] usb 8-1: Manufacturer: syz [ 271.605433][ T6079] cdc_wdm 8-1:1.0: skipping garbage [ 271.607422][ T6079] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 271.836267][ T6079] usb 8-1: USB disconnect, device number 9 [ 273.340804][T11676] syzkaller0: entered promiscuous mode [ 273.342308][T11676] syzkaller0: entered allmulticast mode [ 273.428896][T11678] netlink: 'syz.2.1740': attribute type 30 has an invalid length. [ 274.661172][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 274.663781][T11729] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.978526][T11749] block nbd0: shutting down sockets [ 276.270220][T11725] syzkaller0: entered promiscuous mode [ 276.271852][T11725] syzkaller0: entered allmulticast mode [ 276.743791][T11753] syzkaller0: entered promiscuous mode [ 276.745265][T11753] syzkaller0: entered allmulticast mode [ 279.666591][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1758'. [ 280.444831][T11787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.976578][T11792] hpfs: hpfs_map_sector(): read error [ 281.060222][T11799] FAULT_INJECTION: forcing a failure. [ 281.060222][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 281.063979][T11799] CPU: 3 UID: 0 PID: 11799 Comm: syz.0.1768 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 281.067047][T11799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.070143][T11799] Call Trace: [ 281.071101][T11799] [ 281.071958][T11799] dump_stack_lvl+0x16c/0x1f0 [ 281.073323][T11799] should_fail_ex+0x497/0x5b0 [ 281.074674][T11799] ? fs_reclaim_acquire+0xae/0x150 [ 281.076145][T11799] should_failslab+0xc2/0x120 [ 281.077510][T11799] __kmalloc_noprof+0xce/0x4f0 [ 281.078944][T11799] ? stack_depot_save_flags+0x28/0x9e0 [ 281.080503][T11799] ? __tipc_nl_compat_doit+0xe5/0x3d0 [ 281.082063][T11799] __tipc_nl_compat_doit+0xe5/0x3d0 [ 281.083562][T11799] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 281.085241][T11799] ? hlock_class+0x4e/0x130 [ 281.086563][T11799] ? bpf_lsm_capable+0x9/0x10 [ 281.087936][T11799] ? security_capable+0x7e/0x260 [ 281.089423][T11799] tipc_nl_compat_doit+0x11e/0x290 [ 281.090899][T11799] tipc_nl_compat_recv+0x91e/0xc00 [ 281.092373][T11799] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 281.094035][T11799] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 281.095758][T11799] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 281.097603][T11799] ? __mutex_trylock_common+0xea/0x250 [ 281.099259][T11799] ? rcu_is_watching+0x12/0xc0 [ 281.100630][T11799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 281.102738][T11799] genl_family_rcv_msg_doit+0x202/0x2f0 [ 281.104315][T11799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.106052][T11799] ? genl_get_cmd+0x195/0x580 [ 281.107405][T11799] ? __radix_tree_lookup+0x21f/0x2c0 [ 281.108943][T11799] genl_rcv_msg+0x565/0x800 [ 281.110245][T11799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.111683][T11799] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 281.113292][T11799] netlink_rcv_skb+0x165/0x410 [ 281.114667][T11799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.116118][T11799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.117636][T11799] ? down_read+0xc9/0x330 [ 281.118945][T11799] ? __pfx_down_read+0x10/0x10 [ 281.120320][T11799] ? netlink_deliver_tap+0x1ae/0xca0 [ 281.121840][T11799] genl_rcv+0x28/0x40 [ 281.122984][T11799] netlink_unicast+0x53c/0x7f0 [ 281.124311][T11799] ? __pfx_netlink_unicast+0x10/0x10 [ 281.125834][T11799] ? __phys_addr_symbol+0x30/0x80 [ 281.127284][T11799] ? __check_object_size+0x488/0x710 [ 281.128856][T11799] netlink_sendmsg+0x8b8/0xd70 [ 281.130230][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.131749][T11799] ____sys_sendmsg+0x9ae/0xb40 [ 281.133130][T11799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.134606][T11799] ? get_compat_msghdr+0x11b/0x170 [ 281.136474][T11799] ___sys_sendmsg+0x135/0x1e0 [ 281.138383][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.140112][T11799] ? __pfx_lock_release+0x10/0x10 [ 281.141571][T11799] ? trace_lock_acquire+0x14e/0x1f0 [ 281.143062][T11799] ? __fget_files+0x206/0x3a0 [ 281.144415][T11799] __sys_sendmsg+0x16e/0x220 [ 281.145762][T11799] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.147241][T11799] __do_fast_syscall_32+0x73/0x120 [ 281.148910][T11799] do_fast_syscall_32+0x32/0x80 [ 281.150313][T11799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.152123][T11799] RIP: 0023:0xf7f16579 [ 281.153306][T11799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.158812][T11799] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 281.161955][T11799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 281.164342][T11799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.166613][T11799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.168907][T11799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.171172][T11799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.173444][T11799] [ 281.255591][T11803] tipc: Enabling of bearer rejected, already enabled [ 281.515974][T11827] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1778'. [ 281.537238][T11833] tipc: Bearer : already 2 bearers with priority 0 [ 281.540263][T11833] tipc: Enabling of bearer rejected, cannot adjust to lower [ 281.560658][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 282.312520][T11849] netlink: 'syz.3.1785': attribute type 30 has an invalid length. [ 282.644445][T11872] syzkaller0: entered promiscuous mode [ 282.646282][T11872] syzkaller0: entered allmulticast mode [ 282.702698][T11873] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1788'. [ 283.201869][ T6079] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 283.383230][ T6079] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.385830][ T6079] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 283.388719][ T6079] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.392183][ T6079] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.412217][ T6079] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.414993][ T6079] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.417376][ T6079] usb 8-1: Product: syz [ 283.418627][ T6079] usb 8-1: Manufacturer: syz [ 283.959951][ T6079] cdc_wdm 8-1:1.0: skipping garbage [ 283.961518][ T6079] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 284.144714][T11885] FAULT_INJECTION: forcing a failure. [ 284.144714][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 284.148504][T11885] CPU: 2 UID: 0 PID: 11885 Comm: syz.2.1795 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 284.151574][T11885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.154616][T11885] Call Trace: [ 284.155599][T11885] [ 284.156459][T11885] dump_stack_lvl+0x16c/0x1f0 [ 284.157835][T11885] should_fail_ex+0x497/0x5b0 [ 284.159222][T11885] ? fs_reclaim_acquire+0xae/0x150 [ 284.160709][T11885] should_failslab+0xc2/0x120 [ 284.162094][T11885] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 284.163768][T11885] ? __alloc_skb+0x2b3/0x380 [ 284.165120][T11885] __alloc_skb+0x2b3/0x380 [ 284.166402][T11885] ? __pfx___alloc_skb+0x10/0x10 [ 284.167826][T11885] ? rcu_is_watching+0x12/0xc0 [ 284.169209][T11885] ? trace_kmalloc+0x2d/0xd0 [ 284.170553][T11885] ? __kmalloc_noprof+0x23b/0x4f0 [ 284.172000][T11885] ? stack_depot_save_flags+0x28/0x9e0 [ 284.173572][T11885] ? __tipc_nl_compat_doit+0xe5/0x3d0 [ 284.175083][T11885] __tipc_nl_compat_doit+0x111/0x3d0 [ 284.176596][T11885] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 284.178283][T11885] ? hlock_class+0x4e/0x130 [ 284.179599][T11885] ? bpf_lsm_capable+0x9/0x10 [ 284.180987][T11885] ? security_capable+0x7e/0x260 [ 284.182393][T11885] tipc_nl_compat_doit+0x11e/0x290 [ 284.183804][T11885] tipc_nl_compat_recv+0x91e/0xc00 [ 284.185232][T11885] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 284.186782][T11885] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 284.188450][T11885] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 284.190252][T11885] ? __mutex_trylock_common+0xea/0x250 [ 284.191792][T11885] ? rcu_is_watching+0x12/0xc0 [ 284.193102][T11885] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 284.195106][T11885] genl_family_rcv_msg_doit+0x202/0x2f0 [ 284.196700][T11885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.198397][T11885] ? genl_get_cmd+0x195/0x580 [ 284.199689][T11885] ? __radix_tree_lookup+0x21f/0x2c0 [ 284.201160][T11885] genl_rcv_msg+0x565/0x800 [ 284.202475][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.203874][T11885] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 284.205439][T11885] netlink_rcv_skb+0x165/0x410 [ 284.206748][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.208171][T11885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.209646][T11885] ? down_read+0xc9/0x330 [ 284.210842][T11885] ? __pfx_down_read+0x10/0x10 [ 284.212169][T11885] ? netlink_deliver_tap+0x1ae/0xca0 [ 284.213591][T11885] genl_rcv+0x28/0x40 [ 284.214694][T11885] netlink_unicast+0x53c/0x7f0 [ 284.216005][T11885] ? __pfx_netlink_unicast+0x10/0x10 [ 284.217475][T11885] ? __phys_addr_symbol+0x30/0x80 [ 284.218902][T11885] ? __check_object_size+0x488/0x710 [ 284.220367][T11885] netlink_sendmsg+0x8b8/0xd70 [ 284.221726][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.223208][T11885] ____sys_sendmsg+0x9ae/0xb40 [ 284.224559][T11885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.226038][T11885] ? get_compat_msghdr+0x11b/0x170 [ 284.227473][T11885] ___sys_sendmsg+0x135/0x1e0 [ 284.228831][T11885] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.230293][T11885] ? __pfx_lock_release+0x10/0x10 [ 284.231740][T11885] ? trace_lock_acquire+0x14e/0x1f0 [ 284.233237][T11885] ? __fget_files+0x206/0x3a0 [ 284.234595][T11885] __sys_sendmsg+0x16e/0x220 [ 284.235919][T11885] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.237326][T11885] __do_fast_syscall_32+0x73/0x120 [ 284.238807][T11885] do_fast_syscall_32+0x32/0x80 [ 284.240195][T11885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.242009][T11885] RIP: 0023:0xf7f84579 [ 284.243178][T11885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 284.248580][T11885] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 284.251029][T11885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 284.253407][T11885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.255651][T11885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.257873][T11885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.260226][T11885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.262712][T11885] [ 284.277671][ T5980] usb 8-1: USB disconnect, device number 10 [ 284.869443][T11878] syzkaller0: entered promiscuous mode [ 284.877722][T11878] syzkaller0: entered allmulticast mode [ 285.543041][T11908] tipc: Bearer : already 2 bearers with priority 0 [ 285.545158][T11908] tipc: Enabling of bearer rejected, cannot adjust to lower [ 286.000015][T11913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1804'. [ 287.634545][T11919] syzkaller0: entered promiscuous mode [ 287.636186][T11919] syzkaller0: entered allmulticast mode [ 288.363714][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 289.125239][T11932] bridge0: entered allmulticast mode [ 289.129469][T11942] team0: left allmulticast mode [ 289.131017][T11942] team_slave_0: left allmulticast mode [ 289.132613][T11942] team_slave_1: left allmulticast mode [ 289.134286][T11942] bridge0: port 3(team0) entered disabled state [ 289.143501][T11942] bridge_slave_1: left allmulticast mode [ 289.145135][T11942] bridge_slave_1: left promiscuous mode [ 289.146768][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.156108][T11942] bridge_slave_0: left allmulticast mode [ 289.158256][T11942] bridge_slave_0: left promiscuous mode [ 289.160582][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.422702][T11955] netlink: 'syz.2.1815': attribute type 30 has an invalid length. [ 289.478755][T11959] tipc: Enabling of bearer rejected, already enabled [ 289.480581][T11953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1814'. [ 289.658010][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 289.730292][T11974] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 289.735995][T11973] syzkaller0: entered promiscuous mode [ 289.737651][T11973] syzkaller0: entered allmulticast mode [ 289.743428][T11974] team0: left promiscuous mode [ 289.744895][T11974] team_slave_0: left promiscuous mode [ 289.746709][T11974] team_slave_1: left promiscuous mode [ 289.791671][T11974] batman_adv: batadv0: Adding interface: team0 [ 289.793730][T11974] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.801031][T11974] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 289.878877][T11979] tipc: Enabling of bearer rejected, already enabled [ 289.984803][T11984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1826'. [ 290.071607][T11965] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 290.081504][T11965] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1818'. [ 290.112341][T11986] tipc: Enabling of bearer rejected, already enabled [ 290.116900][T11986] FAULT_INJECTION: forcing a failure. [ 290.116900][T11986] name failslab, interval 1, probability 0, space 0, times 0 [ 290.125893][T11986] CPU: 2 UID: 0 PID: 11986 Comm: syz.2.1827 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 290.129019][T11986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.132082][T11986] Call Trace: [ 290.133062][T11986] [ 290.133916][T11986] dump_stack_lvl+0x16c/0x1f0 [ 290.135294][T11986] should_fail_ex+0x497/0x5b0 [ 290.136657][T11986] ? fs_reclaim_acquire+0xae/0x150 [ 290.138138][T11986] should_failslab+0xc2/0x120 [ 290.139502][T11986] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 290.141181][T11986] ? __alloc_skb+0x2b3/0x380 [ 290.142716][T11986] __alloc_skb+0x2b3/0x380 [ 290.143948][T11986] ? __pfx___alloc_skb+0x10/0x10 [ 290.145335][T11986] ? bpf_lsm_capable+0x9/0x10 [ 290.146651][T11986] ? security_capable+0x7e/0x260 [ 290.148090][T11986] tipc_get_err_tlv+0x34/0xd0 [ 290.149458][T11986] tipc_nl_compat_recv+0xa8e/0xc00 [ 290.150913][T11986] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 290.152488][T11986] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 290.154114][T11986] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 290.155338][T11965] team_slave_0: entered promiscuous mode [ 290.155923][T11986] ? __mutex_trylock_common+0xea/0x250 [ 290.155967][T11986] ? rcu_is_watching+0x12/0xc0 [ 290.157581][T11965] team_slave_1: entered promiscuous mode [ 290.159105][T11986] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 290.159126][T11986] genl_family_rcv_msg_doit+0x202/0x2f0 [ 290.159140][T11986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.160923][T11965] team0: entered promiscuous mode [ 290.162035][T11986] ? genl_get_cmd+0x195/0x580 [ 290.162054][T11986] ? __radix_tree_lookup+0x21f/0x2c0 [ 290.162068][T11986] genl_rcv_msg+0x565/0x800 [ 290.162081][T11986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.162094][T11986] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 290.175767][T11986] netlink_rcv_skb+0x165/0x410 [ 290.177123][T11986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.178677][T11986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.180144][T11986] ? down_read+0xc9/0x330 [ 290.181373][T11986] ? __pfx_down_read+0x10/0x10 [ 290.182696][T11986] ? netlink_deliver_tap+0x1ae/0xca0 [ 290.184154][T11986] genl_rcv+0x28/0x40 [ 290.185279][T11986] netlink_unicast+0x53c/0x7f0 [ 290.186613][T11986] ? __pfx_netlink_unicast+0x10/0x10 [ 290.188150][T11986] ? __phys_addr_symbol+0x30/0x80 [ 290.189539][T11986] ? __check_object_size+0x488/0x710 [ 290.190962][T11986] netlink_sendmsg+0x8b8/0xd70 [ 290.192285][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.193754][T11986] ____sys_sendmsg+0x9ae/0xb40 [ 290.195108][T11986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.196569][T11986] ? get_compat_msghdr+0x11b/0x170 [ 290.198070][T11986] ___sys_sendmsg+0x135/0x1e0 [ 290.199385][T11986] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.200853][T11986] ? __pfx_lock_release+0x10/0x10 [ 290.202256][T11986] ? trace_lock_acquire+0x14e/0x1f0 [ 290.203686][T11986] ? __fget_files+0x206/0x3a0 [ 290.205012][T11986] __sys_sendmsg+0x16e/0x220 [ 290.206292][T11986] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.207731][T11986] __do_fast_syscall_32+0x73/0x120 [ 290.209306][T11986] do_fast_syscall_32+0x32/0x80 [ 290.210649][T11986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.212485][T11986] RIP: 0023:0xf7f84579 [ 290.213636][T11986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 290.219072][T11986] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 290.219966][T11965] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.223159][T11986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 290.223169][T11986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.223176][T11986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.223182][T11986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 290.223188][T11986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.223201][T11986] [ 290.239568][T11965] batman_adv: batadv0: Interface activated: team0 [ 290.248024][T11965] batman_adv: batadv0: Interface deactivated: team0 [ 290.252721][T11965] batman_adv: batadv0: Removing interface: team0 [ 290.257907][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 290.877275][T12010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1835'. [ 291.828295][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 292.366569][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 292.587182][T12024] syz.1.1838 (12024): drop_caches: 1 [ 292.764915][T12046] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1846'. [ 292.766774][T12048] tipc: Bearer : already 2 bearers with priority 0 [ 292.769814][T12048] tipc: Enabling of bearer rejected, cannot adjust to lower [ 292.774157][T12048] tipc: Enabling of bearer rejected, already enabled [ 293.400744][T12071] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 293.508135][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 293.673110][T12080] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1852'. [ 293.676809][T12080] netlink: zone id is out of range [ 293.678824][T12080] netlink: zone id is out of range [ 293.681314][T12080] netlink: get zone limit has 8 unknown bytes [ 293.761944][T12077] syz.0.1854 (12077): drop_caches: 1 [ 294.003767][T12085] tipc: Enabling of bearer rejected, already enabled [ 294.013679][T12087] tipc: Enabled bearer , priority 0 [ 294.016993][T12087] tipc: Enabling of bearer rejected, already enabled [ 294.021572][T12086] tipc: Disabling bearer [ 294.115365][T12095] netlink: 'syz.0.1861': attribute type 30 has an invalid length. [ 294.681619][T12107] syzkaller0: entered promiscuous mode [ 294.683190][T12107] syzkaller0: entered allmulticast mode [ 294.842017][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1867'. [ 294.865849][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1867'. [ 294.869362][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1867'. [ 297.055187][T12141] tipc: Enabling of bearer rejected, failed to enable media [ 297.145105][T12149] syzkaller0: entered promiscuous mode [ 297.148165][T12149] syzkaller0: entered allmulticast mode [ 297.221265][T12160] netlink: 'syz.1.1878': attribute type 30 has an invalid length. [ 299.140025][T12152] syzkaller0: entered promiscuous mode [ 299.141639][T12152] syzkaller0: entered allmulticast mode [ 299.316103][T12192] tipc: Enabled bearer , priority 0 [ 299.321172][T12192] tipc: Enabling of bearer rejected, already enabled [ 299.328036][T12191] tipc: Disabling bearer [ 299.620819][T12202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1889'. [ 299.882750][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 300.031747][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.035312][ T25] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 300.039227][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.043187][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.049495][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.053298][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.056341][ T25] usb 8-1: Product: syz [ 300.057995][ T25] usb 8-1: Manufacturer: syz [ 300.070663][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 300.073230][ T25] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 300.307238][ T25] usb 8-1: USB disconnect, device number 11 [ 301.780121][T12221] tipc: Enabling of bearer rejected, already enabled [ 301.820057][T12227] FAULT_INJECTION: forcing a failure. [ 301.820057][T12227] name failslab, interval 1, probability 0, space 0, times 0 [ 301.824140][T12227] CPU: 0 UID: 0 PID: 12227 Comm: syz.3.1897 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 301.827393][T12227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.830976][T12227] Call Trace: [ 301.832024][T12227] [ 301.832919][T12227] dump_stack_lvl+0x16c/0x1f0 [ 301.834303][T12227] should_fail_ex+0x497/0x5b0 [ 301.835695][T12227] should_failslab+0xc2/0x120 [ 301.837081][T12227] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 301.838693][T12227] ? skb_clone+0x190/0x3f0 [ 301.840078][T12227] skb_clone+0x190/0x3f0 [ 301.841350][T12227] netlink_deliver_tap+0xafd/0xca0 [ 301.842866][T12227] netlink_unicast+0x5e1/0x7f0 [ 301.844269][T12227] ? __pfx_netlink_unicast+0x10/0x10 [ 301.845849][T12227] ? __phys_addr_symbol+0x30/0x80 [ 301.847355][T12227] ? __check_object_size+0x488/0x710 [ 301.848955][T12227] netlink_sendmsg+0x8b8/0xd70 [ 301.850381][T12227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.851957][T12227] ____sys_sendmsg+0x9ae/0xb40 [ 301.853373][T12227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.854923][T12227] ? get_compat_msghdr+0x11b/0x170 [ 301.856441][T12227] ___sys_sendmsg+0x135/0x1e0 [ 301.857894][T12227] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.859426][T12227] ? __pfx_lock_release+0x10/0x10 [ 301.860926][T12227] ? trace_lock_acquire+0x14e/0x1f0 [ 301.861136][T12218] syzkaller0: entered promiscuous mode [ 301.862449][T12227] ? __fget_files+0x206/0x3a0 [ 301.864760][T12218] syzkaller0: entered allmulticast mode [ 301.866152][T12227] __sys_sendmsg+0x16e/0x220 [ 301.869867][T12227] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.871399][T12227] __do_fast_syscall_32+0x73/0x120 [ 301.872950][T12227] do_fast_syscall_32+0x32/0x80 [ 301.874440][T12227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.876309][T12227] RIP: 0023:0xf70be579 [ 301.877552][T12227] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.883206][T12227] RSP: 002b:00000000f50b055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 301.885616][T12227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 301.887942][T12227] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.890269][T12227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.892643][T12227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 301.894970][T12227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.897300][T12227] [ 302.084611][T12236] sctp: [Deprecated]: syz.2.1900 (pid 12236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.084611][T12236] Use struct sctp_sack_info instead [ 303.713284][T12235] syz.2.1900 (12235) used greatest stack depth: 20768 bytes left [ 304.690723][T12234] syzkaller0: entered promiscuous mode [ 304.692951][T12234] syzkaller0: entered allmulticast mode [ 304.909756][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 306.619470][T12259] tipc: Enabling of bearer rejected, already enabled [ 306.621286][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 307.505946][T12295] vivid-002: disconnect [ 307.581249][T12274] syzkaller0: entered promiscuous mode [ 307.583630][T12274] syzkaller0: entered allmulticast mode [ 307.986182][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 308.266851][T12293] vivid-002: reconnect [ 308.543739][T12300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1918'. [ 309.829786][T12323] netlink: 'syz.3.1923': attribute type 30 has an invalid length. [ 310.227506][T12340] vivid-003: disconnect [ 310.997280][T12337] vivid-003: reconnect [ 311.260367][T12353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1930'. [ 312.179089][T12365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 312.199380][T12359] syzkaller0: entered promiscuous mode [ 312.200935][T12359] syzkaller0: entered allmulticast mode [ 312.249016][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 313.254648][T12378] vivid-002: disconnect [ 314.018120][T12374] vivid-002: reconnect [ 314.031576][T12382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1941'. [ 315.139501][ T5943] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 315.145248][T12398] FAULT_INJECTION: forcing a failure. [ 315.145248][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.151165][T12398] CPU: 3 UID: 0 PID: 12398 Comm: syz.2.1945 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 315.155339][T12398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.159312][T12398] Call Trace: [ 315.160584][T12398] [ 315.161731][T12398] dump_stack_lvl+0x16c/0x1f0 [ 315.163548][T12398] should_fail_ex+0x497/0x5b0 [ 315.165321][T12398] _copy_to_user+0x32/0xd0 [ 315.167012][T12398] simple_read_from_buffer+0xd0/0x160 [ 315.169073][T12398] proc_fail_nth_read+0x198/0x270 [ 315.170960][T12398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.173048][T12398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.175177][T12398] vfs_read+0x1df/0xbe0 [ 315.176783][T12398] ? __fget_files+0x1fc/0x3a0 [ 315.178579][T12398] ? __pfx___mutex_lock+0x10/0x10 [ 315.180519][T12398] ? __pfx_vfs_read+0x10/0x10 [ 315.182333][T12398] ? __fget_files+0x206/0x3a0 [ 315.184154][T12398] ksys_read+0x12b/0x250 [ 315.185799][T12398] ? __pfx_ksys_read+0x10/0x10 [ 315.187647][T12398] __do_fast_syscall_32+0x73/0x120 [ 315.189618][T12398] do_fast_syscall_32+0x32/0x80 [ 315.191526][T12398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.193934][T12398] RIP: 0023:0xf7f84579 [ 315.195512][T12398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.201041][T12398] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 315.203590][T12398] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50d6620 [ 315.206786][T12398] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 315.209749][T12398] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 315.212023][T12398] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 315.214358][T12398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.216634][T12398] [ 315.257486][T12404] tipc: Enabling of bearer rejected, already enabled [ 315.368942][T12412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1950'. [ 316.006876][T12418] vivid-003: disconnect [ 316.546341][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.786720][T12416] vivid-003: reconnect [ 317.012392][T12435] vivid-003: disconnect [ 317.340928][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1955'. [ 317.737868][T12431] vivid-003: reconnect [ 317.977514][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.981815][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.985085][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.988860][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.995491][ T5940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.997897][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.119081][T12447] chnl_net:caif_netlink_parms(): no params data found [ 318.181508][T12453] FAULT_INJECTION: forcing a failure. [ 318.181508][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.190395][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.1.1959 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 318.193516][T12453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.196612][T12453] Call Trace: [ 318.197582][T12453] [ 318.198477][T12453] dump_stack_lvl+0x16c/0x1f0 [ 318.199845][T12453] should_fail_ex+0x497/0x5b0 [ 318.201281][T12453] _copy_to_user+0x32/0xd0 [ 318.202571][T12453] simple_read_from_buffer+0xd0/0x160 [ 318.204178][T12453] proc_fail_nth_read+0x198/0x270 [ 318.206140][T12453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.207840][T12453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.209457][T12453] vfs_read+0x1df/0xbe0 [ 318.210661][T12453] ? __fget_files+0x1fc/0x3a0 [ 318.212020][T12453] ? __pfx___mutex_lock+0x10/0x10 [ 318.213450][T12453] ? __pfx_vfs_read+0x10/0x10 [ 318.214829][T12453] ? __fget_files+0x206/0x3a0 [ 318.216196][T12453] ksys_read+0x12b/0x250 [ 318.217432][T12453] ? __pfx_ksys_read+0x10/0x10 [ 318.218812][T12453] __do_fast_syscall_32+0x73/0x120 [ 318.220306][T12453] do_fast_syscall_32+0x32/0x80 [ 318.221734][T12453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.223589][T12453] RIP: 0023:0xf7f24579 [ 318.225170][T12453] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.230885][T12453] RSP: 002b:00000000f5055590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 318.233255][T12453] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5055620 [ 318.235540][T12453] RDX: 000000000000000f RSI: 00000000f73b3ff4 RDI: 0000000000000000 [ 318.237821][T12453] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 318.240094][T12453] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 318.242379][T12453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.244678][T12453] [ 318.270964][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.274130][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.276291][T12447] bridge_slave_0: entered allmulticast mode [ 318.278488][T12447] bridge_slave_0: entered promiscuous mode [ 318.292591][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.294648][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.296714][T12447] bridge_slave_1: entered allmulticast mode [ 318.298860][T12447] bridge_slave_1: entered promiscuous mode [ 318.366783][T12447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.384597][T12447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.455649][T12447] team0: Port device team_slave_0 added [ 318.458803][T12447] team0: Port device team_slave_1 added [ 318.492348][T12447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.494512][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.502289][T12447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.506406][T12447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.508420][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.521295][T12447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.569255][T12447] hsr_slave_0: entered promiscuous mode [ 318.573159][T12447] hsr_slave_1: entered promiscuous mode [ 318.575353][T12447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.578874][T12447] Cannot create hsr debugfs directory [ 318.666867][T12464] syzkaller0: entered promiscuous mode [ 318.668951][T12464] syzkaller0: entered allmulticast mode [ 318.706289][T12447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.710651][T12447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.716397][T12447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.721335][T12447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.738749][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.740793][T12447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.742851][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.744831][T12447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.768760][T12447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.777542][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.792540][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.842766][T12447] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.851317][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.853363][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.872019][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.874122][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.992051][T12447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.114517][T12479] 9pnet_fd: Insufficient options for proto=fd [ 319.118521][T12479] vivid-002: disconnect [ 319.122813][T12478] vivid-002: reconnect [ 320.062698][ T5943] Bluetooth: hci4: command tx timeout [ 320.878733][T12484] tipc: Enabling of bearer rejected, already enabled [ 320.882883][T12499] syzkaller1: entered promiscuous mode [ 320.884476][T12499] syzkaller1: entered allmulticast mode [ 320.958314][T12447] veth0_vlan: entered promiscuous mode [ 320.969486][T12447] veth1_vlan: entered promiscuous mode [ 320.987382][T12447] veth0_macvtap: entered promiscuous mode [ 321.002036][T12447] veth1_macvtap: entered promiscuous mode [ 321.012095][T12447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.015891][T12447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.019567][T12447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.036498][T12447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.039296][T12447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.048603][T12447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.058685][T12447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.064561][T12447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.069950][T12447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.073069][T12447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.074640][T12509] 9pnet_fd: Insufficient options for proto=fd [ 321.076635][T12447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.083440][T12509] vivid-000: disconnect [ 321.086398][T12508] vivid-000: reconnect [ 321.090514][T12447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.096534][T12447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.101152][T12447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.104612][T12447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.108044][T12447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.181925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.184173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.216922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.221798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.283660][T12513] could not allocate digest TFM handle tgr160 [ 321.333947][T12520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.382979][T12524] trusted_key: encrypted_key: insufficient parameters specified [ 321.390705][T12524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.139707][ T5943] Bluetooth: hci4: command tx timeout [ 322.188180][T12526] FAULT_INJECTION: forcing a failure. [ 322.188180][T12526] name failslab, interval 1, probability 0, space 0, times 0 [ 322.194918][T12526] CPU: 3 UID: 0 PID: 12526 Comm: syz.4.1978 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 322.197980][T12526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.201499][T12526] Call Trace: [ 322.202837][T12526] [ 322.203862][T12526] dump_stack_lvl+0x16c/0x1f0 [ 322.205133][T12526] should_fail_ex+0x497/0x5b0 [ 322.206552][T12526] should_failslab+0xc2/0x120 [ 322.207942][T12526] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 322.209496][T12526] ? skb_clone+0x190/0x3f0 [ 322.211263][T12526] skb_clone+0x190/0x3f0 [ 322.212995][T12526] netlink_deliver_tap+0xafd/0xca0 [ 322.214459][T12526] netlink_unicast+0x6b4/0x7f0 [ 322.215783][T12526] ? __pfx_netlink_unicast+0x10/0x10 [ 322.217221][T12526] ? genl_rcv_msg+0x4bd/0x800 [ 322.218548][T12526] netlink_ack+0x6a5/0xb20 [ 322.219878][T12526] netlink_rcv_skb+0x327/0x410 [ 322.221798][T12526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.223663][T12526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.225121][T12526] ? down_read+0xc9/0x330 [ 322.226322][T12526] ? __pfx_down_read+0x10/0x10 [ 322.227645][T12526] ? netlink_deliver_tap+0x1ae/0xca0 [ 322.229109][T12526] genl_rcv+0x28/0x40 [ 322.230523][T12526] netlink_unicast+0x53c/0x7f0 [ 322.232437][T12526] ? __pfx_netlink_unicast+0x10/0x10 [ 322.234100][T12526] ? __phys_addr_symbol+0x30/0x80 [ 322.235511][T12526] ? __check_object_size+0x488/0x710 [ 322.236991][T12526] netlink_sendmsg+0x8b8/0xd70 [ 322.238366][T12526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.240008][T12526] ____sys_sendmsg+0x9ae/0xb40 [ 322.241972][T12526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.243881][T12526] ? get_compat_msghdr+0x11b/0x170 [ 322.245362][T12526] ___sys_sendmsg+0x135/0x1e0 [ 322.246721][T12526] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.248222][T12526] ? __pfx_lock_release+0x10/0x10 [ 322.249706][T12526] ? trace_lock_acquire+0x14e/0x1f0 [ 322.251279][T12526] ? __fget_files+0x206/0x3a0 [ 322.252659][T12526] __sys_sendmsg+0x16e/0x220 [ 322.253992][T12526] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.255477][T12526] __do_fast_syscall_32+0x73/0x120 [ 322.256957][T12526] do_fast_syscall_32+0x32/0x80 [ 322.258391][T12526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.260423][T12526] RIP: 0023:0xf7f73579 [ 322.261689][T12526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.267096][T12526] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 322.269458][T12526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 322.272045][T12526] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.274220][T12526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.276421][T12526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 322.278681][T12526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.281447][T12526] [ 322.505786][T12536] input: syz1 as /devices/virtual/input/input12 [ 322.882865][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806965c400: rx timeout, send abort [ 322.924274][T12542] /dev/nbd2: Can't open blockdev [ 323.227711][T12507] syzkaller0: entered promiscuous mode [ 323.230383][T12507] syzkaller0: entered allmulticast mode [ 323.385825][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806965c400: abort rx timeout. Force session deactivation [ 323.620910][T12549] tipc: Failed to obtain node identity [ 323.622552][T12549] tipc: Enabling of bearer rejected, failed to enable media [ 323.787290][T12555] tipc: Enabling of bearer rejected, already enabled [ 323.827963][T12557] 9pnet_fd: Insufficient options for proto=fd [ 323.853541][T12557] vivid-002: disconnect [ 323.861574][T12556] vivid-002: reconnect [ 323.925058][T12559] 9pnet_fd: Insufficient options for proto=fd [ 323.927263][T12559] vivid-000: disconnect [ 323.928670][T12558] vivid-000: reconnect [ 324.100835][T12560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 324.219698][ T5943] Bluetooth: hci4: command tx timeout [ 326.300152][ T5943] Bluetooth: hci4: command tx timeout [ 326.394813][T12582] FAULT_INJECTION: forcing a failure. [ 326.394813][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 326.398773][T12582] CPU: 3 UID: 0 PID: 12582 Comm: syz.2.1995 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 326.402003][T12582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.405028][T12582] Call Trace: [ 326.405967][T12582] [ 326.406812][T12582] dump_stack_lvl+0x16c/0x1f0 [ 326.408106][T12582] should_fail_ex+0x497/0x5b0 [ 326.409444][T12582] ? fs_reclaim_acquire+0xae/0x150 [ 326.410891][T12582] should_failslab+0xc2/0x120 [ 326.412224][T12582] __kmalloc_node_noprof+0xd1/0x520 [ 326.413697][T12582] ? __up_read+0x1fb/0x760 [ 326.414979][T12582] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 326.416579][T12582] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 326.418126][T12582] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 326.419718][T12582] crypto_create_tfm_node+0x83/0x320 [ 326.421192][T12582] crypto_spawn_tfm2+0x62/0xb0 [ 326.422553][T12582] cryptd_aead_init_tfm+0x3d/0x130 [ 326.423982][T12582] ? __pfx_cryptd_aead_init_tfm+0x10/0x10 [ 326.425590][T12582] crypto_aead_init_tfm+0x149/0x1b0 [ 326.427068][T12582] crypto_create_tfm_node+0x100/0x320 [ 326.428606][T12582] crypto_alloc_tfm_node+0x102/0x260 [ 326.430080][T12582] cryptd_alloc_aead+0x117/0x200 [ 326.431469][T12582] ? __pfx_cryptd_alloc_aead+0x10/0x10 [ 326.433119][T12582] ? rcu_is_watching+0x12/0xc0 [ 326.434468][T12582] ? trace_kmalloc+0x2d/0xd0 [ 326.435777][T12582] ? __kmalloc_node_noprof+0x23d/0x520 [ 326.437309][T12582] simd_aead_init+0x69/0x1d0 [ 326.438659][T12582] ? __pfx_simd_aead_init+0x10/0x10 [ 326.440119][T12582] crypto_aead_init_tfm+0x149/0x1b0 [ 326.441591][T12582] crypto_create_tfm_node+0x100/0x320 [ 326.443087][T12582] crypto_alloc_tfm_node+0x102/0x260 [ 326.444655][T12582] tipc_aead_init.constprop.0+0x132/0xaa0 [ 326.446335][T12582] ? __crypto_alg_lookup+0x1eb/0x240 [ 326.447841][T12582] tipc_crypto_key_init+0x83/0x110 [ 326.449329][T12582] ? __pfx_tipc_crypto_key_init+0x10/0x10 [ 326.450904][T12582] ? crypto_mod_put+0x7e/0xf0 [ 326.452184][T12582] tipc_nl_node_set_key+0x56f/0xb00 [ 326.453658][T12582] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 326.455233][T12582] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 326.457259][T12582] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 326.459280][T12582] genl_family_rcv_msg_doit+0x202/0x2f0 [ 326.460826][T12582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.462438][T12582] ? genl_get_cmd+0x195/0x580 [ 326.463754][T12582] ? __radix_tree_lookup+0x21f/0x2c0 [ 326.465222][T12582] genl_rcv_msg+0x565/0x800 [ 326.466490][T12582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.467908][T12582] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 326.469492][T12582] netlink_rcv_skb+0x165/0x410 [ 326.470804][T12582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.472214][T12582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.473705][T12582] ? down_read+0xc9/0x330 [ 326.474946][T12582] ? __pfx_down_read+0x10/0x10 [ 326.476297][T12582] ? netlink_deliver_tap+0x1ae/0xca0 [ 326.477825][T12582] genl_rcv+0x28/0x40 [ 326.478948][T12582] netlink_unicast+0x53c/0x7f0 [ 326.480263][T12582] ? __pfx_netlink_unicast+0x10/0x10 [ 326.481742][T12582] ? __phys_addr_symbol+0x30/0x80 [ 326.483152][T12582] ? __check_object_size+0x488/0x710 [ 326.484633][T12582] netlink_sendmsg+0x8b8/0xd70 [ 326.485984][T12582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.487481][T12582] ____sys_sendmsg+0x9ae/0xb40 [ 326.488864][T12582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.490320][T12582] ? get_compat_msghdr+0x11b/0x170 [ 326.491751][T12582] ___sys_sendmsg+0x135/0x1e0 [ 326.493098][T12582] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.494589][T12582] ? __pfx_lock_release+0x10/0x10 [ 326.496048][T12582] ? trace_lock_acquire+0x14e/0x1f0 [ 326.497527][T12582] ? __fget_files+0x206/0x3a0 [ 326.498890][T12582] __sys_sendmsg+0x16e/0x220 [ 326.500203][T12582] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.501637][T12582] __do_fast_syscall_32+0x73/0x120 [ 326.503040][T12582] do_fast_syscall_32+0x32/0x80 [ 326.504394][T12582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.506141][T12582] RIP: 0023:0xf7f84579 [ 326.507279][T12582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.513064][T12582] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 326.515581][T12582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 326.518043][T12582] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.520225][T12582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.522424][T12582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 326.525072][T12582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.527326][T12582] [ 326.720983][T12583] /dev/nbd1: Can't open blockdev [ 327.103098][T12598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.128455][T12596] syzkaller0: entered promiscuous mode [ 327.130493][T12596] syzkaller0: entered allmulticast mode [ 327.580983][ T112] [ 327.581666][ T112] ====================================================== [ 327.583455][ T112] WARNING: possible circular locking dependency detected [ 327.585182][ T112] 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Not tainted [ 327.587290][ T112] ------------------------------------------------------ [ 327.590271][ T112] kswapd0/112 is trying to acquire lock: [ 327.591691][ T112] ffff888040fa0a70 (&q->q_usage_counter(io)#68){++++}-{0:0}, at: blk_mq_submit_bio+0x7ca/0x24c0 [ 327.594830][ T112] [ 327.594830][ T112] but task is already holding lock: [ 327.597344][ T112] ffffffff8df4ef60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xcd9/0x18f0 [ 327.600292][ T112] [ 327.600292][ T112] which lock already depends on the new lock. [ 327.600292][ T112] [ 327.602975][ T112] [ 327.602975][ T112] the existing dependency chain (in reverse order) is: [ 327.605188][ T112] [ 327.605188][ T112] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 327.607027][ T112] fs_reclaim_acquire+0x102/0x150 [ 327.608446][ T112] __kmalloc_node_noprof+0xb7/0x520 [ 327.609893][ T112] __kvmalloc_node_noprof+0xad/0x1a0 [ 327.611611][ T112] sbitmap_init_node+0x1ca/0x770 [ 327.613043][ T112] scsi_realloc_sdev_budget_map+0x2c7/0x610 [ 327.614649][ T112] scsi_add_lun+0x11b4/0x1fd0 [ 327.615974][ T112] scsi_probe_and_add_lun+0x4fa/0xda0 [ 327.617455][ T112] __scsi_add_device+0x24b/0x290 [ 327.618919][ T112] ata_scsi_scan_host+0x215/0x780 [ 327.620307][ T112] async_run_entry_fn+0x9c/0x530 [ 327.621803][ T112] process_one_work+0x958/0x1b30 [ 327.623168][ T112] worker_thread+0x6c8/0xf00 [ 327.624559][ T112] kthread+0x2c1/0x3a0 [ 327.625771][ T112] ret_from_fork+0x45/0x80 [ 327.627181][ T112] ret_from_fork_asm+0x1a/0x30 [ 327.628583][ T112] [ 327.628583][ T112] -> #0 (&q->q_usage_counter(io)#68){++++}-{0:0}: [ 327.630735][ T112] __lock_acquire+0x249e/0x3c40 [ 327.632079][ T112] lock_acquire.part.0+0x11b/0x380 [ 327.633487][ T112] __bio_queue_enter+0x4c6/0x740 [ 327.634865][ T112] blk_mq_submit_bio+0x7ca/0x24c0 [ 327.636237][ T112] __submit_bio+0x384/0x540 [ 327.637488][ T112] submit_bio_noacct_nocheck+0x698/0xd70 [ 327.639088][ T112] submit_bio_noacct+0x93a/0x1e20 [ 327.640481][ T112] __swap_writepage+0x3a3/0xf50 [ 327.641845][ T112] swap_writepage+0x403/0x1120 [ 327.643161][ T112] pageout+0x3b2/0xaa0 [ 327.644314][ T112] shrink_folio_list+0x3025/0x42d0 [ 327.645721][ T112] evict_folios+0x6e3/0x19c0 [ 327.647006][ T112] try_to_shrink_lruvec+0x61e/0xa80 [ 327.648470][ T112] shrink_one+0x3e3/0x7b0 [ 327.649705][ T112] shrink_node+0xbf0/0x3f20 [ 327.650966][ T112] balance_pgdat+0xc1f/0x18f0 [ 327.652253][ T112] kswapd+0x605/0xc00 [ 327.653410][ T112] kthread+0x2c1/0x3a0 [ 327.654578][ T112] ret_from_fork+0x45/0x80 [ 327.655825][ T112] ret_from_fork_asm+0x1a/0x30 [ 327.657160][ T112] [ 327.657160][ T112] other info that might help us debug this: [ 327.657160][ T112] [ 327.659772][ T112] Possible unsafe locking scenario: [ 327.659772][ T112] [ 327.661665][ T112] CPU0 CPU1 [ 327.663075][ T112] ---- ---- [ 327.664450][ T112] lock(fs_reclaim); [ 327.665485][ T112] lock(&q->q_usage_counter(io)#68); [ 327.667489][ T112] lock(fs_reclaim); [ 327.669190][ T112] rlock(&q->q_usage_counter(io)#68); [ 327.670564][ T112] [ 327.670564][ T112] *** DEADLOCK *** [ 327.670564][ T112] [ 327.672545][ T112] 1 lock held by kswapd0/112: [ 327.673726][ T112] #0: ffffffff8df4ef60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xcd9/0x18f0 [ 327.675993][ T112] [ 327.675993][ T112] stack backtrace: [ 327.677468][ T112] CPU: 2 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 327.680015][ T112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.682632][ T112] Call Trace: [ 327.683474][ T112] [ 327.684215][ T112] dump_stack_lvl+0x116/0x1f0 [ 327.685393][ T112] print_circular_bug+0x41c/0x610 [ 327.686635][ T112] check_noncircular+0x31a/0x400 [ 327.687915][ T112] ? __pfx_check_noncircular+0x10/0x10 [ 327.689292][ T112] ? lockdep_lock+0xc6/0x200 [ 327.690445][ T112] ? __pfx_lockdep_lock+0x10/0x10 [ 327.691710][ T112] __lock_acquire+0x249e/0x3c40 [ 327.692954][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 327.694262][ T112] lock_acquire.part.0+0x11b/0x380 [ 327.695556][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 327.696866][ T112] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 327.698308][ T112] ? rcu_is_watching+0x12/0xc0 [ 327.699520][ T112] ? trace_lock_acquire+0x14e/0x1f0 [ 327.700826][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 327.702140][ T112] ? lock_acquire+0x2f/0xb0 [ 327.703282][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 327.704603][ T112] __bio_queue_enter+0x4c6/0x740 [ 327.705857][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 327.707181][ T112] ? __pfx___bio_queue_enter+0x10/0x10 [ 327.708585][ T112] ? blk_mq_submit_bio+0x7b5/0x24c0 [ 327.709907][ T112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 327.711449][ T112] blk_mq_submit_bio+0x7ca/0x24c0 [ 327.712740][ T112] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 327.714108][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 327.715433][ T112] ? __pfx_mark_lock+0x10/0x10 [ 327.716645][ T112] ? lock_acquire.part.0+0x11b/0x380 [ 327.718028][ T112] __submit_bio+0x384/0x540 [ 327.719172][ T112] ? __pfx___submit_bio+0x10/0x10 [ 327.720446][ T112] ? trace_lock_acquire+0x14e/0x1f0 [ 327.721740][ T112] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 327.723205][ T112] submit_bio_noacct_nocheck+0x698/0xd70 [ 327.724635][ T112] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 327.726174][ T112] ? __pfx___might_resched+0x10/0x10 [ 327.727500][ T112] ? __pfx___folio_start_writeback+0x10/0x10 [ 327.729211][ T112] submit_bio_noacct+0x93a/0x1e20 [ 327.730501][ T112] __swap_writepage+0x3a3/0xf50 [ 327.731748][ T112] swap_writepage+0x403/0x1120 [ 327.732986][ T112] ? folio_clear_dirty_for_io+0x112/0x800 [ 327.734443][ T112] pageout+0x3b2/0xaa0 [ 327.735504][ T112] ? __pfx_pageout+0x10/0x10 [ 327.736849][ T112] ? __pfx_try_to_unmap_one+0x10/0x10 [ 327.738289][ T112] ? __pfx_folio_not_mapped+0x10/0x10 [ 327.739898][ T112] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 327.741442][ T112] ? folio_mark_dirty+0xd8/0x150 [ 327.742692][ T112] shrink_folio_list+0x3025/0x42d0 [ 327.743981][ T112] ? __pfx_shrink_folio_list+0x10/0x10 [ 327.745352][ T112] ? isolate_folios+0x1c57/0x3830 [ 327.746606][ T112] ? hlock_class+0x4e/0x130 [ 327.747762][ T112] ? mark_lock+0xb5/0xc60 [ 327.748957][ T112] ? mark_held_locks+0x9f/0xe0 [ 327.750192][ T112] evict_folios+0x6e3/0x19c0 [ 327.751354][ T112] ? do_shrink_slab+0xb2e/0x11c0 [ 327.752584][ T112] ? __pfx_evict_folios+0x10/0x10 [ 327.753828][ T112] ? find_held_lock+0x2d/0x110 [ 327.755051][ T112] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 327.756545][ T112] ? sc_swappiness+0xd4/0x190 [ 327.757736][ T112] try_to_shrink_lruvec+0x61e/0xa80 [ 327.759085][ T112] ? find_held_lock+0x2d/0x110 [ 327.760320][ T112] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 327.761741][ T112] ? shrink_node+0xbd0/0x3f20 [ 327.762910][ T112] shrink_one+0x3e3/0x7b0 [ 327.764002][ T112] ? shrink_node+0xbd0/0x3f20 [ 327.765179][ T112] shrink_node+0xbf0/0x3f20 [ 327.766337][ T112] ? shrink_node+0x93e/0x3f20 [ 327.767516][ T112] ? __pfx_shrink_node+0x10/0x10 [ 327.768816][ T112] ? __pfx_lock_release+0x10/0x10 [ 327.770070][ T112] ? percpu_ref_put_many.constprop.0+0x1b/0x150 [ 327.771616][ T112] ? balance_pgdat+0xc1f/0x18f0 [ 327.772843][ T112] balance_pgdat+0xc1f/0x18f0 [ 327.774030][ T112] ? __pfx_balance_pgdat+0x10/0x10 [ 327.775311][ T112] ? __switch_to+0x749/0x1190 [ 327.776513][ T112] ? __schedule+0xe60/0x5ad0 [ 327.777721][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 327.779077][ T112] ? __pfx___might_resched+0x10/0x10 [ 327.780420][ T112] ? set_pgdat_percpu_threshold+0xc3/0x330 [ 327.781883][ T112] kswapd+0x605/0xc00 [ 327.782898][ T112] ? __pfx_kswapd+0x10/0x10 [ 327.784037][ T112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 327.785568][ T112] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.786891][ T112] ? __kthread_parkme+0x148/0x220 [ 327.788236][ T112] ? __pfx_kswapd+0x10/0x10 [ 327.789402][ T112] kthread+0x2c1/0x3a0 [ 327.790422][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.791711][ T112] ? __pfx_kthread+0x10/0x10 [ 327.792891][ T112] ret_from_fork+0x45/0x80 [ 327.794032][ T112] ? __pfx_kthread+0x10/0x10 [ 327.795223][ T112] ret_from_fork_asm+0x1a/0x30 [ 327.796453][ T112] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.418975][ T8197] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.491620][ T8197] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.552069][ T8197] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.612196][ T8197] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.690893][ T8197] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.752285][ T8197] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.823057][ T8197] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.891131][ T8197] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.990911][ T8197] bridge_slave_1: left allmulticast mode [ 329.993160][ T8197] bridge_slave_1: left promiscuous mode [ 329.995425][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.019979][ T8197] bridge_slave_0: left allmulticast mode [ 330.022147][ T8197] bridge_slave_0: left promiscuous mode [ 330.024361][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.162018][ T8197] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 330.364176][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.367788][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.371597][ T8197] bond0 (unregistering): Released all slaves [ 330.374974][ T8197] bond1 (unregistering): Released all slaves [ 330.378248][ T8197] bond2 (unregistering): Released all slaves [ 330.382030][ T8197] bond3 (unregistering): Released all slaves [ 330.385370][ T8197] bond4 (unregistering): Released all slaves [ 330.388883][ T8197] bond5 (unregistering): Released all slaves [ 330.392421][ T8197] bond6 (unregistering): Released all slaves [ 330.395848][ T8197] bond7 (unregistering): Released all slaves [ 330.399179][ T8197] bond8 (unregistering): Released all slaves [ 330.402926][ T8197] bond9 (unregistering): Released all slaves [ 330.410622][ T8197] bond0 (unregistering): left promiscuous mode [ 330.412404][ T8197] bond_slave_0: left promiscuous mode [ 330.413906][ T8197] bond_slave_1: left promiscuous mode [ 330.417819][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.421217][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.424898][ T8197] bond0 (unregistering): Released all slaves [ 330.428479][ T8197] bond1 (unregistering): Released all slaves [ 330.432527][ T8197] bond2 (unregistering): Released all slaves [ 330.436433][ T8197] bond3 (unregistering): Released all slaves [ 330.445263][ T8197] bond4 (unregistering): Released all slaves [ 330.448658][ T8197] bond5 (unregistering): Released all slaves [ 330.452070][ T8197] bond6 (unregistering): Released all slaves [ 330.455557][ T8197] bond7 (unregistering): Released all slaves [ 330.460138][ T8197] bond8 (unregistering): Released all slaves [ 330.464893][ T8197] bond9 (unregistering): Released all slaves [ 330.478413][ T8197] bond10 (unregistering): Released all slaves [ 330.487025][ T8197] bond11 (unregistering): Released all slaves [ 330.490657][ T8197] bond12 (unregistering): Released all slaves [ 330.593181][ T8197] tipc: Disabling bearer [ 330.599759][ T8197] tipc: Disabling bearer [ 330.621686][ T8197] tipc: Disabling bearer [ 330.623506][ T8197] tipc: Left network mode [ 330.625483][ T8197] tipc: Disabling bearer [ 330.636582][ T8197] tipc: Left network mode [ 330.642549][ T8197] IPVS: stopping backup sync thread 12071 ... [ 331.092216][ T8197] hsr_slave_0: left promiscuous mode [ 331.099377][ T8197] hsr_slave_1: left promiscuous mode [ 331.102690][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.104842][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.107212][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.109386][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.113421][ T8197] hsr_slave_0: left promiscuous mode [ 331.115389][ T8197] hsr_slave_1: left promiscuous mode [ 331.117328][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.119490][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.122010][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.123972][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.128646][ T8197] veth1_macvtap: left promiscuous mode [ 331.131939][ T8197] veth0_macvtap: left promiscuous mode [ 331.133545][ T8197] veth1_vlan: left promiscuous mode [ 331.135062][ T8197] veth0_vlan: left promiscuous mode [ 331.137216][ T8197] veth1_macvtap: left promiscuous mode [ 331.138807][ T8197] veth0_macvtap: left promiscuous mode [ 331.140452][ T8197] veth1_vlan: left promiscuous mode [ 331.141954][ T8197] veth0_vlan: left promiscuous mode [ 331.548545][ T8197] team0 (unregistering): Port device team_slave_1 removed [ 331.615987][ T8197] team0 (unregistering): Port device team_slave_0 removed [ 333.190943][ T8197] IPVS: stop unused estimator thread 0... [ 333.324224][ T8197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.401826][ T8197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.485267][ T8197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.530882][ T8197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.608779][ T8197] bridge_slave_1: left allmulticast mode [ 333.610923][ T8197] bridge_slave_1: left promiscuous mode [ 333.613098][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.620588][ T8197] bridge_slave_0: left allmulticast mode [ 333.622382][ T8197] bridge_slave_0: left promiscuous mode [ 333.624451][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.705517][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.708994][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.712330][ T8197] bond0 (unregistering): Released all slaves [ 334.016332][ T8197] hsr_slave_0: left promiscuous mode [ 334.018334][ T8197] hsr_slave_1: left promiscuous mode [ 334.031904][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.034769][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.040942][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.043139][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.046588][ T8197] veth1_macvtap: left promiscuous mode [ 334.048218][ T8197] veth0_macvtap: left promiscuous mode [ 334.051578][ T8197] veth1_vlan: left promiscuous mode [ 334.053165][ T8197] veth0_vlan: left promiscuous mode [ 334.296604][ T8197] team0 (unregistering): Port device team_slave_1 removed [ 334.345423][ T8197] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 08:02:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90022d1fb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84c8f584 RDI=ffffc90022d1fb60 RBP=ffffc90022d1fb20 RSP=ffffc90022d1fa80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90022d1fb60 R14=ffffc90022d1fb28 R15=0000000000000000 RIP=ffffffff84c8f5ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207fd000 CR3=00000000492fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001031ac4 RBX=0000000000000001 RCX=ffffffff8b1a5819 RDX=ffffed10056a6fee RSI=ffffffff8bb17080 RDI=ffffffff81702ec9 RBP=ffffed10039dd910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=ffff88802b43fb10 R12=0000000000000001 R13=ffff88801ceec880 R14=ffffffff901ce7d0 R15=0000000000000000 RIP=ffffffff8b1a6bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002c000 CR3=00000000741da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143ef5 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc9000103e200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85143e90 R15=0000000000000000 RIP=ffffffff85143f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c43d4b7 CR3=000000001ec0c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002d3784 RBX=0000000000000003 RCX=ffffffff8b1a5819 RDX=ffffed10056e6fee RSI=ffffffff8bb17080 RDI=ffffffff81702ec9 RBP=ffffed10036ee488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801b772440 R14=ffffffff901ce7d0 R15=0000000000000000 RIP=ffffffff8b1a6bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002eb17ff8 CR3=000000001ec0c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000