syzkaller login: [ 371.674657][ T2673] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 2778: Connection refused ps_root_recvmsgcb: failed to send message to pid 2782: Connection refused ps_root_recvmsgcb: failed to send message to pid 2783: Connection refused ps_root_recvmsgcb: failed to send message to pid 2793: Connection refused [ 381.916426][ T2673] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 402.976040][ T2829] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 402.986151][ T2829] CPU: 0 PID: 2829 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 402.988253][ T2829] Hardware name: riscv-virtio,qemu (DT) [ 402.989406][ T2829] Call Trace: [ 402.990279][ T2829] [] dump_backtrace+0x2e/0x3c [ 402.991637][ T2829] [] show_stack+0x34/0x40 [ 402.993254][ T2829] [] dump_stack_lvl+0xe0/0x14c [ 402.994584][ T2829] [] dump_stack+0x1c/0x24 [ 402.995825][ T2829] [] warn_alloc+0x168/0x22c [ 402.997083][ T2829] [] __vmalloc_node_range+0xb6c/0xdb4 [ 402.998660][ T2829] [] bpf_jit_alloc_exec+0x46/0x52 [ 403.000103][ T2829] [] bpf_jit_binary_alloc+0x96/0x13c [ 403.001613][ T2829] [] bpf_int_jit_compile+0x886/0xaa6 [ 403.003099][ T2829] [] bpf_prog_select_runtime+0x1a2/0x22e [ 403.004814][ T2829] [] bpf_migrate_filter+0x258/0x2be [ 403.006403][ T2829] [] bpf_prepare_filter+0x10e/0x1b4 [ 403.008047][ T2829] [] __get_filter+0x148/0x1a0 [ 403.009642][ T2829] [] sk_attach_filter+0x22/0x11a [ 403.011136][ T2829] [] sk_setsockopt+0x144e/0x270c [ 403.012774][ T2829] [] sock_setsockopt+0x48/0x58 [ 403.014434][ T2829] [] __sys_setsockopt+0x3f0/0x418 [ 403.015953][ T2829] [] sys_setsockopt+0x3a/0x4c [ 403.017370][ T2829] [] ret_from_syscall+0x0/0x2 [ 403.034157][ T2829] Mem-Info: [ 403.035628][ T2829] active_anon:1109 inactive_anon:43 isolated_anon:0 [ 403.035628][ T2829] active_file:0 inactive_file:4031 isolated_file:0 [ 403.035628][ T2829] unevictable:768 dirty:2305 writeback:0 [ 403.035628][ T2829] slab_reclaimable:5045 slab_unreclaimable:18383 [ 403.035628][ T2829] mapped:1094 shmem:806 pagetables:102 [ 403.035628][ T2829] sec_pagetables:0 bounce:0 [ 403.035628][ T2829] kernel_misc_reclaimable:0 [ 403.035628][ T2829] free:282666 free_pcp:681 free_cma:4096 [ 403.039014][ T2829] Node 0 active_anon:4436kB inactive_anon:172kB active_file:0kB inactive_file:16124kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:4376kB dirty:9220kB writeback:0kB shmem:3224kB writeback_tmp:0kB kernel_stack:4448kB pagetables:408kB sec_pagetables:0kB all_unreclaimable? no [ 403.048655][ T2829] Node 0 DMA32 free:1130664kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:4436kB inactive_anon:172kB active_file:0kB inactive_file:16124kB unevictable:3072kB writepending:9220kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:2716kB local_pcp:2152kB free_cma:16384kB [ 403.055184][ T2829] lowmem_reserve[]: 0 0 0 [ 403.067382][ T2829] Node 0 DMA32: 14*4kB (UME) 2*8kB (UE) 40*16kB (UE) 19*32kB (U) 6*64kB (UME) 2*128kB (UM) 1*256kB (M) 2*512kB (ME) 1*1024kB (E) 4*2048kB (MEC) 273*4096kB (MC) = 1130664kB [ 403.136747][ T2829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.140307][ T2829] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 403.144419][ T2829] 4839 total pagecache pages [ 403.145801][ T2829] 0 pages in swap cache [ 403.146977][ T2829] Free swap = 0kB [ 403.148095][ T2829] Total swap = 0kB [ 403.149272][ T2829] 523776 pages RAM [ 403.150436][ T2829] 0 pages HighMem/MovableOnly [ 403.151634][ T2829] 184025 pages reserved [ 403.156421][ T2829] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 Warning: Permanently added '[localhost]:63015' (ECDSA) to the list of known hosts. 1970/01/01 00:07:38 fuzzer started ps_root_recvmsgcb: failed to send message to pid 2830: Connection refused ps_root_recvmsgcb: failed to send message to pid 2829: Connection refused ps_root_recvmsgcb: failed to send message to pid 2832: Connection refused ps_root_recvmsgcb: failed to send message to pid 2831: Connection refused 1970/01/01 00:07:49 dialing manager at localhost:45631 [ 473.571704][ T2847] cgroup: Unknown subsys name 'net' [ 474.498402][ T2847] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:07:54 syscalls: 2945 1970/01/01 00:07:54 code coverage: enabled 1970/01/01 00:07:54 comparison tracing: enabled 1970/01/01 00:07:54 extra coverage: enabled 1970/01/01 00:07:54 delay kcov mmap: enabled 1970/01/01 00:07:54 setuid sandbox: enabled 1970/01/01 00:07:54 namespace sandbox: enabled 1970/01/01 00:07:54 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:07:54 fault injection: enabled 1970/01/01 00:07:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:07:54 net packet injection: enabled 1970/01/01 00:07:54 net device setup: enabled 1970/01/01 00:07:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:07:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:07:54 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:07:54 USB emulation: enabled 1970/01/01 00:07:54 hci packet injection: /dev/vhci does not exist 1970/01/01 00:07:54 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:07:54 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:07:58 fetching corpus: 50, signal 30229/32053 (executing program) 1970/01/01 00:08:01 fetching corpus: 100, signal 46376/49868 (executing program) 1970/01/01 00:08:08 fetching corpus: 150, signal 59597/64629 (executing program) 1970/01/01 00:08:10 fetching corpus: 200, signal 66629/73180 (executing program) 1970/01/01 00:08:13 fetching corpus: 250, signal 73304/81322 (executing program) 1970/01/01 00:08:14 fetching corpus: 300, signal 77480/86926 (executing program) 1970/01/01 00:08:18 fetching corpus: 350, signal 82828/93639 (executing program) 1970/01/01 00:08:19 fetching corpus: 400, signal 86919/99105 (executing program) 1970/01/01 00:08:21 fetching corpus: 450, signal 91716/105186 (executing program) 1970/01/01 00:08:23 fetching corpus: 500, signal 94761/109603 (executing program) 1970/01/01 00:08:25 fetching corpus: 550, signal 97754/113916 (executing program) 1970/01/01 00:08:27 fetching corpus: 600, signal 101506/118899 (executing program) 1970/01/01 00:08:29 fetching corpus: 650, signal 104872/123438 (executing program) 1970/01/01 00:08:30 fetching corpus: 700, signal 108281/128053 (executing program) 1970/01/01 00:08:32 fetching corpus: 750, signal 110827/131777 (executing program) 1970/01/01 00:08:34 fetching corpus: 800, signal 113596/135698 (executing program) 1970/01/01 00:08:37 fetching corpus: 850, signal 116459/139688 (executing program) 1970/01/01 00:08:39 fetching corpus: 900, signal 119602/143855 (executing program) 1970/01/01 00:08:43 fetching corpus: 950, signal 122066/147399 (executing program) 1970/01/01 00:08:45 fetching corpus: 1000, signal 124343/150799 (executing program) 1970/01/01 00:08:49 fetching corpus: 1050, signal 126996/154463 (executing program) 1970/01/01 00:08:50 fetching corpus: 1100, signal 129143/157658 (executing program) [ 532.079566][ T2858] warn_alloc: 3 callbacks suppressed [ 532.080087][ T2858] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 532.098863][ T2858] CPU: 0 PID: 2858 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 532.100855][ T2858] Hardware name: riscv-virtio,qemu (DT) [ 532.102117][ T2858] Call Trace: [ 532.103548][ T2858] [] dump_backtrace+0x2e/0x3c [ 532.105280][ T2858] [] show_stack+0x34/0x40 [ 532.106767][ T2858] [] dump_stack_lvl+0xe0/0x14c [ 532.108426][ T2858] [] dump_stack+0x1c/0x24 [ 532.109949][ T2858] [] warn_alloc+0x168/0x22c [ 532.111411][ T2858] [] __vmalloc_node_range+0xb6c/0xdb4 [ 532.113460][ T2858] [] bpf_jit_alloc_exec+0x46/0x52 [ 532.115048][ T2858] [] bpf_jit_binary_alloc+0x96/0x13c [ 532.116525][ T2858] [] bpf_int_jit_compile+0x886/0xaa6 [ 532.117954][ T2858] [] bpf_prog_select_runtime+0x1a2/0x22e [ 532.119501][ T2858] [] bpf_migrate_filter+0x258/0x2be [ 532.121162][ T2858] [] bpf_prepare_filter+0x10e/0x1b4 [ 532.123148][ T2858] [] __get_filter+0x148/0x1a0 [ 532.124830][ T2858] [] sk_attach_filter+0x22/0x11a [ 532.126246][ T2858] [] sk_setsockopt+0x144e/0x270c [ 532.127771][ T2858] [] sock_setsockopt+0x48/0x58 [ 532.129353][ T2858] [] __sys_setsockopt+0x3f0/0x418 [ 532.130823][ T2858] [] sys_setsockopt+0x3a/0x4c [ 532.133516][ T2858] [] ret_from_syscall+0x0/0x2 [ 532.138974][ T2858] Mem-Info: [ 532.139831][ T2858] active_anon:9666 inactive_anon:44 isolated_anon:0 [ 532.139831][ T2858] active_file:0 inactive_file:7110 isolated_file:0 [ 532.139831][ T2858] unevictable:768 dirty:0 writeback:0 [ 532.139831][ T2858] slab_reclaimable:5328 slab_unreclaimable:18870 [ 532.139831][ T2858] mapped:4445 shmem:807 pagetables:135 [ 532.139831][ T2858] sec_pagetables:0 bounce:0 [ 532.139831][ T2858] kernel_misc_reclaimable:0 [ 532.139831][ T2858] free:269893 free_pcp:837 free_cma:4096 [ 532.144912][ T2858] Node 0 active_anon:38664kB inactive_anon:176kB active_file:0kB inactive_file:28440kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3228kB writeback_tmp:0kB kernel_stack:4728kB pagetables:540kB sec_pagetables:0kB all_unreclaimable? no [ 532.146878][ T2858] Node 0 DMA32 free:1079572kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:38664kB inactive_anon:176kB active_file:0kB inactive_file:28440kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3348kB local_pcp:1100kB free_cma:16384kB [ 532.149323][ T2858] lowmem_reserve[]: 0 0 0 [ 532.151082][ T2858] Node 0 DMA32: 1*4kB (E) 0*8kB 3*16kB (E) 7*32kB (UE) 4*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UM) 3*2048kB (EC) 261*4096kB (MC) = 1079572kB [ 532.180885][ T2858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.213226][ T2858] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 532.214700][ T2858] 7917 total pagecache pages [ 532.215719][ T2858] 0 pages in swap cache [ 532.216618][ T2858] Free swap = 0kB [ 532.217461][ T2858] Total swap = 0kB [ 532.218345][ T2858] 523776 pages RAM [ 532.219200][ T2858] 0 pages HighMem/MovableOnly [ 532.220109][ T2858] 184025 pages reserved [ 532.220944][ T2858] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:08:53 fetching corpus: 1150, signal 130675/160294 (executing program) 1970/01/01 00:08:55 fetching corpus: 1200, signal 132232/162955 (executing program) 1970/01/01 00:08:56 fetching corpus: 1250, signal 134520/166222 (executing program) 1970/01/01 00:08:59 fetching corpus: 1300, signal 136229/168966 (executing program) 1970/01/01 00:09:01 fetching corpus: 1350, signal 138432/172130 (executing program) 1970/01/01 00:09:03 fetching corpus: 1400, signal 140583/175191 (executing program) 1970/01/01 00:09:04 fetching corpus: 1450, signal 141467/177200 (executing program) 1970/01/01 00:09:06 fetching corpus: 1500, signal 143166/179822 (executing program) 1970/01/01 00:09:08 fetching corpus: 1550, signal 145032/182586 (executing program) 1970/01/01 00:09:10 fetching corpus: 1600, signal 146686/185116 (executing program) 1970/01/01 00:09:12 fetching corpus: 1650, signal 148032/187390 (executing program) 1970/01/01 00:09:14 fetching corpus: 1700, signal 149993/190097 (executing program) 1970/01/01 00:09:15 fetching corpus: 1750, signal 151680/192617 (executing program) 1970/01/01 00:09:17 fetching corpus: 1800, signal 153197/195046 (executing program) 1970/01/01 00:09:18 fetching corpus: 1850, signal 154349/197107 (executing program) 1970/01/01 00:09:20 fetching corpus: 1900, signal 155331/199088 (executing program) 1970/01/01 00:09:22 fetching corpus: 1950, signal 156775/201363 (executing program) 1970/01/01 00:09:25 fetching corpus: 2000, signal 158143/203547 (executing program) 1970/01/01 00:09:27 fetching corpus: 2050, signal 160917/206816 (executing program) 1970/01/01 00:09:29 fetching corpus: 2100, signal 162101/208852 (executing program) 1970/01/01 00:09:30 fetching corpus: 2150, signal 163292/210892 (executing program) 1970/01/01 00:09:32 fetching corpus: 2200, signal 164291/212755 (executing program) 1970/01/01 00:09:35 fetching corpus: 2250, signal 165406/214746 (executing program) 1970/01/01 00:09:37 fetching corpus: 2300, signal 166643/216796 (executing program) 1970/01/01 00:09:40 fetching corpus: 2350, signal 167862/218794 (executing program) 1970/01/01 00:09:45 fetching corpus: 2400, signal 169164/220827 (executing program) 1970/01/01 00:09:47 fetching corpus: 2450, signal 170519/222927 (executing program) 1970/01/01 00:09:49 fetching corpus: 2500, signal 171354/224609 (executing program) 1970/01/01 00:09:51 fetching corpus: 2550, signal 172286/226382 (executing program) 1970/01/01 00:09:53 fetching corpus: 2600, signal 173498/228300 (executing program) ps_root_recvmsgcb: failed to send message to pid 2858: Connection refused ps_root_recvmsgcb: failed to send message to pid 2860: Connection refused ps_root_recvmsgcb: failed to send message to pid 2859: Connection refused 1970/01/01 00:09:55 fetching corpus: 2650, signal 174175/229843 (executing program) ps_root_recvmsgcb: failed to send message to pid 2861: Connection refused 1970/01/01 00:09:57 fetching corpus: 2700, signal 175013/231512 (executing program) 1970/01/01 00:09:59 fetching corpus: 2750, signal 176269/233407 (executing program) 1970/01/01 00:10:01 fetching corpus: 2800, signal 177531/235324 (executing program) 1970/01/01 00:10:02 fetching corpus: 2850, signal 178734/237147 (executing program) 1970/01/01 00:10:04 fetching corpus: 2900, signal 179790/238946 (executing program) 1970/01/01 00:10:06 fetching corpus: 2950, signal 180784/240698 (executing program) 1970/01/01 00:10:09 fetching corpus: 3000, signal 181593/242253 (executing program) 1970/01/01 00:10:11 fetching corpus: 3050, signal 182483/243829 (executing program) 1970/01/01 00:10:13 fetching corpus: 3100, signal 183344/245375 (executing program) 1970/01/01 00:10:15 fetching corpus: 3150, signal 184376/247077 (executing program) 1970/01/01 00:10:17 fetching corpus: 3200, signal 185363/248714 (executing program) 1970/01/01 00:10:19 fetching corpus: 3250, signal 186758/250620 (executing program) 1970/01/01 00:10:22 fetching corpus: 3300, signal 187633/252142 (executing program) 1970/01/01 00:10:23 fetching corpus: 3350, signal 188883/253901 (executing program) 1970/01/01 00:10:25 fetching corpus: 3400, signal 189626/255383 (executing program) 1970/01/01 00:10:27 fetching corpus: 3450, signal 191030/257205 (executing program) 1970/01/01 00:10:29 fetching corpus: 3500, signal 191782/258646 (executing program) 1970/01/01 00:10:31 fetching corpus: 3550, signal 192570/260102 (executing program) 1970/01/01 00:10:33 fetching corpus: 3600, signal 193378/261536 (executing program) 1970/01/01 00:10:35 fetching corpus: 3650, signal 194286/262985 (executing program) 1970/01/01 00:10:36 fetching corpus: 3700, signal 195131/264460 (executing program) 1970/01/01 00:10:38 fetching corpus: 3750, signal 196241/266051 (executing program) 1970/01/01 00:10:41 fetching corpus: 3800, signal 197033/267490 (executing program) 1970/01/01 00:10:44 fetching corpus: 3850, signal 197876/268894 (executing program) 1970/01/01 00:10:46 fetching corpus: 3900, signal 198738/270310 (executing program) 1970/01/01 00:10:48 fetching corpus: 3950, signal 199411/271644 (executing program) 1970/01/01 00:10:50 fetching corpus: 4000, signal 200043/272913 (executing program) 1970/01/01 00:10:51 fetching corpus: 4050, signal 200777/274255 (executing program) 1970/01/01 00:10:53 fetching corpus: 4100, signal 201728/275700 (executing program) 1970/01/01 00:10:56 fetching corpus: 4150, signal 202557/277091 (executing program) [ 658.594494][ T2862] warn_alloc: 3 callbacks suppressed [ 658.594874][ T2862] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 658.599751][ T2862] CPU: 1 PID: 2862 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 658.601426][ T2862] Hardware name: riscv-virtio,qemu (DT) [ 658.603077][ T2862] Call Trace: [ 658.604383][ T2862] [] dump_backtrace+0x2e/0x3c [ 658.606092][ T2862] [] show_stack+0x34/0x40 [ 658.607613][ T2862] [] dump_stack_lvl+0xe0/0x14c [ 658.609228][ T2862] [] dump_stack+0x1c/0x24 [ 658.610799][ T2862] [] warn_alloc+0x168/0x22c [ 658.612274][ T2862] [] __vmalloc_node_range+0xb6c/0xdb4 [ 658.614350][ T2862] [] bpf_jit_alloc_exec+0x46/0x52 [ 658.615815][ T2862] [] bpf_jit_binary_alloc+0x96/0x13c [ 658.617315][ T2862] [] bpf_int_jit_compile+0x886/0xaa6 [ 658.618787][ T2862] [] bpf_prog_select_runtime+0x1a2/0x22e [ 658.620271][ T2862] [] bpf_migrate_filter+0x258/0x2be [ 658.621952][ T2862] [] bpf_prepare_filter+0x10e/0x1b4 [ 658.623998][ T2862] [] __get_filter+0x148/0x1a0 [ 658.625584][ T2862] [] sk_attach_filter+0x22/0x11a [ 658.627009][ T2862] [] sk_setsockopt+0x144e/0x270c [ 658.628598][ T2862] [] sock_setsockopt+0x48/0x58 [ 658.630116][ T2862] [] __sys_setsockopt+0x3f0/0x418 [ 658.631505][ T2862] [] sys_setsockopt+0x3a/0x4c [ 658.633373][ T2862] [] ret_from_syscall+0x0/0x2 [ 658.724826][ T2862] Mem-Info: [ 658.726338][ T2862] active_anon:13320 inactive_anon:46 isolated_anon:0 [ 658.726338][ T2862] active_file:0 inactive_file:7114 isolated_file:0 [ 658.726338][ T2862] unevictable:768 dirty:0 writeback:0 [ 658.726338][ T2862] slab_reclaimable:5176 slab_unreclaimable:19561 [ 658.726338][ T2862] mapped:4445 shmem:809 pagetables:134 [ 658.726338][ T2862] sec_pagetables:0 bounce:0 [ 658.726338][ T2862] kernel_misc_reclaimable:0 [ 658.726338][ T2862] free:265468 free_pcp:1183 free_cma:4096 [ 658.743720][ T2862] Node 0 active_anon:53280kB inactive_anon:184kB active_file:0kB inactive_file:28456kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3236kB writeback_tmp:0kB kernel_stack:4696kB pagetables:536kB sec_pagetables:0kB all_unreclaimable? no [ 658.747111][ T2862] Node 0 DMA32 free:1061872kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:53280kB inactive_anon:184kB active_file:0kB inactive_file:28456kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:4732kB local_pcp:2016kB free_cma:16384kB [ 658.750799][ T2862] lowmem_reserve[]: 0 0 0 [ 658.786234][ T2862] Node 0 DMA32: 52*4kB (UE) 4*8kB (UE) 18*16kB (UME) 11*32kB (UE) 6*64kB (ME) 2*128kB (E) 2*256kB (UE) 0*512kB 1*1024kB (M) 5*2048kB (UMEC) 256*4096kB (MC) = 1061872kB [ 658.809877][ T2862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.811439][ T2862] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 658.826522][ T2862] 7923 total pagecache pages [ 658.828167][ T2862] 0 pages in swap cache [ 658.829373][ T2862] Free swap = 0kB [ 658.830546][ T2862] Total swap = 0kB [ 658.831690][ T2862] 523776 pages RAM [ 658.837560][ T2862] 0 pages HighMem/MovableOnly [ 658.838802][ T2862] 184025 pages reserved [ 658.839826][ T2862] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:10:59 fetching corpus: 4200, signal 203443/278452 (executing program) ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:11:01 fetching corpus: 4250, signal 204626/279997 (executing program) 1970/01/01 00:11:03 fetching corpus: 4300, signal 205395/281307 (executing program) 1970/01/01 00:11:05 fetching corpus: 4350, signal 205932/282486 (executing program) 1970/01/01 00:11:07 fetching corpus: 4400, signal 206799/283849 (executing program) 1970/01/01 00:11:08 fetching corpus: 4450, signal 207428/285042 (executing program) 1970/01/01 00:11:10 fetching corpus: 4500, signal 208410/286397 (executing program) 1970/01/01 00:11:12 fetching corpus: 4550, signal 208976/287584 (executing program) 1970/01/01 00:11:14 fetching corpus: 4600, signal 209529/288724 (executing program) 1970/01/01 00:11:16 fetching corpus: 4650, signal 210368/290021 (executing program) 1970/01/01 00:11:19 fetching corpus: 4700, signal 211360/291381 (executing program) 1970/01/01 00:11:21 fetching corpus: 4750, signal 212127/292637 (executing program) 1970/01/01 00:11:23 fetching corpus: 4800, signal 212851/293862 (executing program) 1970/01/01 00:11:26 fetching corpus: 4850, signal 213426/294977 (executing program) 1970/01/01 00:11:29 fetching corpus: 4900, signal 214154/296141 (executing program) 1970/01/01 00:11:31 fetching corpus: 4950, signal 214966/297354 (executing program) 1970/01/01 00:11:32 fetching corpus: 5000, signal 216060/298673 (executing program) 1970/01/01 00:11:34 fetching corpus: 5050, signal 216678/299795 (executing program) 1970/01/01 00:11:36 fetching corpus: 5100, signal 217358/300930 (executing program) 1970/01/01 00:11:38 fetching corpus: 5150, signal 217973/302048 (executing program) 1970/01/01 00:11:41 fetching corpus: 5200, signal 218635/303119 (executing program) 1970/01/01 00:11:43 fetching corpus: 5250, signal 219270/304209 (executing program) 1970/01/01 00:11:45 fetching corpus: 5300, signal 219788/305222 (executing program) 1970/01/01 00:11:48 fetching corpus: 5350, signal 220500/306353 (executing program) 1970/01/01 00:11:51 fetching corpus: 5400, signal 221169/307402 (executing program) 1970/01/01 00:11:53 fetching corpus: 5450, signal 221774/308444 (executing program) 1970/01/01 00:11:54 fetching corpus: 5500, signal 222207/309443 (executing program) 1970/01/01 00:11:55 fetching corpus: 5550, signal 222783/310441 (executing program) 1970/01/01 00:11:57 fetching corpus: 5600, signal 223281/311434 (executing program) 1970/01/01 00:11:59 fetching corpus: 5650, signal 223892/312430 (executing program) ps_root_recvmsgcb: failed to send message to pid 2862: Connection refused 1970/01/01 00:12:01 fetching corpus: 5700, signal 224522/313423 (executing program) ps_root_recvmsgcb: failed to send message to pid 2863: Connection refused 1970/01/01 00:12:03 fetching corpus: 5750, signal 225470/314556 (executing program) ps_root_recvmsgcb: failed to send message to pid 2865: Connection refused ps_root_recvmsgcb: failed to send message to pid 2864: Connection refused 1970/01/01 00:12:05 fetching corpus: 5800, signal 225990/315500 (executing program) 1970/01/01 00:12:08 fetching corpus: 5850, signal 226809/316570 (executing program) 1970/01/01 00:12:10 fetching corpus: 5900, signal 227465/317574 (executing program) 1970/01/01 00:12:12 fetching corpus: 5950, signal 228152/318581 (executing program) 1970/01/01 00:12:14 fetching corpus: 6000, signal 228801/319563 (executing program) 1970/01/01 00:12:17 fetching corpus: 6050, signal 229374/320519 (executing program) 1970/01/01 00:12:21 fetching corpus: 6100, signal 229899/321470 (executing program) 1970/01/01 00:12:24 fetching corpus: 6150, signal 230609/322422 (executing program) 1970/01/01 00:12:26 fetching corpus: 6200, signal 231100/323354 (executing program) 1970/01/01 00:12:28 fetching corpus: 6250, signal 231448/324217 (executing program) 1970/01/01 00:12:30 fetching corpus: 6300, signal 231988/325084 (executing program) 1970/01/01 00:12:32 fetching corpus: 6350, signal 232652/326016 (executing program) 1970/01/01 00:12:35 fetching corpus: 6400, signal 233233/326863 (executing program) 1970/01/01 00:12:36 fetching corpus: 6450, signal 233688/327716 (executing program) 1970/01/01 00:12:38 fetching corpus: 6500, signal 234100/328551 (executing program) 1970/01/01 00:12:39 fetching corpus: 6550, signal 234398/329377 (executing program) 1970/01/01 00:12:42 fetching corpus: 6600, signal 235252/330308 (executing program) 1970/01/01 00:12:45 fetching corpus: 6650, signal 235703/331140 (executing program) 1970/01/01 00:12:47 fetching corpus: 6700, signal 236200/331988 (executing program) 1970/01/01 00:12:49 fetching corpus: 6750, signal 236540/332794 (executing program) 1970/01/01 00:12:51 fetching corpus: 6800, signal 236938/333641 (executing program) 1970/01/01 00:12:52 fetching corpus: 6850, signal 237278/334436 (executing program) 1970/01/01 00:12:54 fetching corpus: 6900, signal 237966/335276 (executing program) 1970/01/01 00:12:56 fetching corpus: 6950, signal 238596/336155 (executing program) 1970/01/01 00:12:57 fetching corpus: 7000, signal 239310/337046 (executing program) 1970/01/01 00:12:59 fetching corpus: 7050, signal 239853/337928 (executing program) 1970/01/01 00:13:01 fetching corpus: 7100, signal 240276/338696 (executing program) 1970/01/01 00:13:03 fetching corpus: 7150, signal 240706/339499 (executing program) 1970/01/01 00:13:05 fetching corpus: 7200, signal 241316/340343 (executing program) [ 786.396938][ T2873] warn_alloc: 3 callbacks suppressed [ 786.397317][ T2873] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 786.424845][ T2873] CPU: 1 PID: 2873 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 786.426409][ T2873] Hardware name: riscv-virtio,qemu (DT) [ 786.427393][ T2873] Call Trace: [ 786.428579][ T2873] [] dump_backtrace+0x2e/0x3c [ 786.430340][ T2873] [] show_stack+0x34/0x40 [ 786.432004][ T2873] [] dump_stack_lvl+0xe0/0x14c [ 786.433800][ T2873] [] dump_stack+0x1c/0x24 [ 786.435509][ T2873] [] warn_alloc+0x168/0x22c [ 786.437081][ T2873] [] __vmalloc_node_range+0xb6c/0xdb4 [ 786.438839][ T2873] [] bpf_jit_alloc_exec+0x46/0x52 [ 786.440557][ T2873] [] bpf_jit_binary_alloc+0x96/0x13c [ 786.442365][ T2873] [] bpf_int_jit_compile+0x886/0xaa6 [ 786.444136][ T2873] [] bpf_prog_select_runtime+0x1a2/0x22e [ 786.446260][ T2873] [] bpf_migrate_filter+0x258/0x2be [ 786.448282][ T2873] [] bpf_prepare_filter+0x10e/0x1b4 [ 786.450113][ T2873] [] __get_filter+0x148/0x1a0 [ 786.451895][ T2873] [] sk_attach_filter+0x22/0x11a [ 786.453586][ T2873] [] sk_setsockopt+0x144e/0x270c [ 786.455385][ T2873] [] sock_setsockopt+0x48/0x58 [ 786.457168][ T2873] [] __sys_setsockopt+0x3f0/0x418 [ 786.458942][ T2873] [] sys_setsockopt+0x3a/0x4c [ 786.460809][ T2873] [] ret_from_syscall+0x0/0x2 [ 786.526618][ T2873] Mem-Info: [ 786.528747][ T2873] active_anon:17647 inactive_anon:48 isolated_anon:0 [ 786.528747][ T2873] active_file:0 inactive_file:7124 isolated_file:0 [ 786.528747][ T2873] unevictable:768 dirty:0 writeback:0 [ 786.528747][ T2873] slab_reclaimable:5156 slab_unreclaimable:19135 [ 786.528747][ T2873] mapped:4445 shmem:811 pagetables:142 [ 786.528747][ T2873] sec_pagetables:0 bounce:0 [ 786.528747][ T2873] kernel_misc_reclaimable:0 [ 786.528747][ T2873] free:261879 free_pcp:874 free_cma:4096 [ 786.536504][ T2873] Node 0 active_anon:70588kB inactive_anon:192kB active_file:0kB inactive_file:28496kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3244kB writeback_tmp:0kB kernel_stack:4568kB pagetables:568kB sec_pagetables:0kB all_unreclaimable? no [ 786.539659][ T2873] Node 0 DMA32 free:1047516kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:70588kB inactive_anon:192kB active_file:0kB inactive_file:28496kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3496kB local_pcp:2036kB free_cma:16384kB [ 786.546807][ T2873] lowmem_reserve[]: 0 0 0 [ 786.549384][ T2873] Node 0 DMA32: 151*4kB (UE) 96*8kB (UME) 34*16kB (UE) 65*32kB (UE) 11*64kB (UE) 3*128kB (ME) 2*256kB (UE) 1*512kB (U) 1*1024kB (U) 4*2048kB (MEC) 252*4096kB (MC) = 1047516kB [ 786.560944][ T2873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.613680][ T2873] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 786.617953][ T2873] 7935 total pagecache pages [ 786.619398][ T2873] 0 pages in swap cache [ 786.620575][ T2873] Free swap = 0kB [ 786.621653][ T2873] Total swap = 0kB [ 786.626419][ T2873] 523776 pages RAM [ 786.630674][ T2873] 0 pages HighMem/MovableOnly [ 786.632946][ T2873] 184025 pages reserved [ 786.634154][ T2873] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:13:07 fetching corpus: 7250, signal 241640/341109 (executing program) ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:13:09 fetching corpus: 7300, signal 242140/341948 (executing program) 1970/01/01 00:13:11 fetching corpus: 7350, signal 242503/342719 (executing program) 1970/01/01 00:13:13 fetching corpus: 7400, signal 242845/343406 (executing program) 1970/01/01 00:13:14 fetching corpus: 7450, signal 243420/344204 (executing program) 1970/01/01 00:13:16 fetching corpus: 7500, signal 243824/345000 (executing program) 1970/01/01 00:13:18 fetching corpus: 7550, signal 244342/345755 (executing program) 1970/01/01 00:13:21 fetching corpus: 7600, signal 244860/346540 (executing program) 1970/01/01 00:13:22 fetching corpus: 7650, signal 245327/347275 (executing program) 1970/01/01 00:13:25 fetching corpus: 7700, signal 245842/348030 (executing program) 1970/01/01 00:13:27 fetching corpus: 7750, signal 246345/348750 (executing program) 1970/01/01 00:13:29 fetching corpus: 7800, signal 246923/349477 (executing program) 1970/01/01 00:13:31 fetching corpus: 7850, signal 247486/350234 (executing program) 1970/01/01 00:13:32 fetching corpus: 7900, signal 247953/350920 (executing program) 1970/01/01 00:13:34 fetching corpus: 7950, signal 248495/351663 (executing program) 1970/01/01 00:13:36 fetching corpus: 8000, signal 248836/352373 (executing program) 1970/01/01 00:13:38 fetching corpus: 8050, signal 249315/353084 (executing program) 1970/01/01 00:13:39 fetching corpus: 8100, signal 249743/353778 (executing program) 1970/01/01 00:13:41 fetching corpus: 8150, signal 250180/354447 (executing program) 1970/01/01 00:13:43 fetching corpus: 8200, signal 250863/355153 (executing program) 1970/01/01 00:13:45 fetching corpus: 8250, signal 251466/355826 (executing program) 1970/01/01 00:13:47 fetching corpus: 8300, signal 252051/356499 (executing program) 1970/01/01 00:13:50 fetching corpus: 8350, signal 252655/357205 (executing program) 1970/01/01 00:13:53 fetching corpus: 8400, signal 253076/357872 (executing program) 1970/01/01 00:13:54 fetching corpus: 8450, signal 253599/358560 (executing program) 1970/01/01 00:13:56 fetching corpus: 8500, signal 254022/359172 (executing program) 1970/01/01 00:13:58 fetching corpus: 8550, signal 254516/359812 (executing program) 1970/01/01 00:14:01 fetching corpus: 8600, signal 255016/360448 (executing program) 1970/01/01 00:14:03 fetching corpus: 8650, signal 255501/361077 (executing program) 1970/01/01 00:14:05 fetching corpus: 8700, signal 255931/361716 (executing program) 1970/01/01 00:14:07 fetching corpus: 8750, signal 256334/362306 (executing program) 1970/01/01 00:14:08 fetching corpus: 8800, signal 256690/362931 (executing program) ps_root_recvmsgcb: failed to send message to pid 2873: Connection refused 1970/01/01 00:14:10 fetching corpus: 8850, signal 257124/363559 (executing program) ps_root_recvmsgcb: failed to send message to pid 2874: Connection refused ps_root_recvmsgcb: failed to send message to pid 2876: Connection refused ps_root_recvmsgcb: failed to send message to pid 2875: Connection refused 1970/01/01 00:14:12 fetching corpus: 8900, signal 257550/364164 (executing program) 1970/01/01 00:14:14 fetching corpus: 8949, signal 258054/364807 (executing program) 1970/01/01 00:14:16 fetching corpus: 8999, signal 258467/365400 (executing program) 1970/01/01 00:14:18 fetching corpus: 9049, signal 258876/366013 (executing program) 1970/01/01 00:14:20 fetching corpus: 9099, signal 259247/366626 (executing program) 1970/01/01 00:14:22 fetching corpus: 9149, signal 259724/367173 (executing program) 1970/01/01 00:14:24 fetching corpus: 9199, signal 260128/367496 (executing program) 1970/01/01 00:14:26 fetching corpus: 9249, signal 260866/367496 (executing program) 1970/01/01 00:14:28 fetching corpus: 9299, signal 261302/367496 (executing program) 1970/01/01 00:14:30 fetching corpus: 9349, signal 261926/367496 (executing program) 1970/01/01 00:14:32 fetching corpus: 9399, signal 262295/367496 (executing program) 1970/01/01 00:14:34 fetching corpus: 9449, signal 262869/367501 (executing program) 1970/01/01 00:14:35 fetching corpus: 9499, signal 263256/367501 (executing program) 1970/01/01 00:14:37 fetching corpus: 9549, signal 263635/367501 (executing program) 1970/01/01 00:14:39 fetching corpus: 9599, signal 264139/367501 (executing program) 1970/01/01 00:14:41 fetching corpus: 9649, signal 264523/367501 (executing program) 1970/01/01 00:14:42 fetching corpus: 9699, signal 264935/367501 (executing program) 1970/01/01 00:14:43 fetching corpus: 9749, signal 265317/367503 (executing program) 1970/01/01 00:14:48 fetching corpus: 9799, signal 265809/367503 (executing program) 1970/01/01 00:14:50 fetching corpus: 9849, signal 266352/367508 (executing program) 1970/01/01 00:14:53 fetching corpus: 9899, signal 266770/367508 (executing program) 1970/01/01 00:14:54 fetching corpus: 9949, signal 267321/367509 (executing program) 1970/01/01 00:14:56 fetching corpus: 9999, signal 267738/367509 (executing program) 1970/01/01 00:14:59 fetching corpus: 10049, signal 268122/367509 (executing program) 1970/01/01 00:15:01 fetching corpus: 10099, signal 268581/367510 (executing program) 1970/01/01 00:15:03 fetching corpus: 10149, signal 269011/367510 (executing program) 1970/01/01 00:15:05 fetching corpus: 10199, signal 269478/367510 (executing program) 1970/01/01 00:15:06 fetching corpus: 10249, signal 269961/367510 (executing program) 1970/01/01 00:15:08 fetching corpus: 10299, signal 270252/367520 (executing program) 1970/01/01 00:15:10 fetching corpus: 10349, signal 270672/367520 (executing program) 1970/01/01 00:15:12 fetching corpus: 10399, signal 271079/367520 (executing program) [ 913.905830][ T2877] warn_alloc: 3 callbacks suppressed [ 913.906084][ T2877] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 913.909683][ T2877] CPU: 1 PID: 2877 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 913.910909][ T2877] Hardware name: riscv-virtio,qemu (DT) [ 913.911818][ T2877] Call Trace: [ 913.912833][ T2877] [] dump_backtrace+0x2e/0x3c [ 913.914023][ T2877] [] show_stack+0x34/0x40 [ 913.915059][ T2877] [] dump_stack_lvl+0xe0/0x14c [ 913.916064][ T2877] [] dump_stack+0x1c/0x24 [ 913.917034][ T2877] [] warn_alloc+0x168/0x22c [ 913.918027][ T2877] [] __vmalloc_node_range+0xb6c/0xdb4 [ 913.919070][ T2877] [] bpf_jit_alloc_exec+0x46/0x52 [ 913.920050][ T2877] [] bpf_jit_binary_alloc+0x96/0x13c [ 913.921103][ T2877] [] bpf_int_jit_compile+0x886/0xaa6 [ 913.922142][ T2877] [] bpf_prog_select_runtime+0x1a2/0x22e [ 913.923538][ T2877] [] bpf_migrate_filter+0x258/0x2be [ 913.924632][ T2877] [] bpf_prepare_filter+0x10e/0x1b4 [ 913.925735][ T2877] [] __get_filter+0x148/0x1a0 [ 913.926750][ T2877] [] sk_attach_filter+0x22/0x11a [ 913.927703][ T2877] [] sk_setsockopt+0x144e/0x270c [ 913.928793][ T2877] [] sock_setsockopt+0x48/0x58 [ 913.929833][ T2877] [] __sys_setsockopt+0x3f0/0x418 [ 913.930786][ T2877] [] sys_setsockopt+0x3a/0x4c [ 913.931703][ T2877] [] ret_from_syscall+0x0/0x2 [ 913.938580][ T2877] Mem-Info: [ 913.939513][ T2877] active_anon:20435 inactive_anon:49 isolated_anon:0 [ 913.939513][ T2877] active_file:0 inactive_file:7128 isolated_file:0 [ 913.939513][ T2877] unevictable:768 dirty:0 writeback:0 [ 913.939513][ T2877] slab_reclaimable:5156 slab_unreclaimable:19326 [ 913.939513][ T2877] mapped:4445 shmem:812 pagetables:155 [ 913.939513][ T2877] sec_pagetables:0 bounce:0 [ 913.939513][ T2877] kernel_misc_reclaimable:0 [ 913.939513][ T2877] free:259246 free_pcp:426 free_cma:4096 [ 913.983885][ T2877] Node 0 active_anon:81740kB inactive_anon:196kB active_file:0kB inactive_file:28512kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3248kB writeback_tmp:0kB kernel_stack:4576kB pagetables:620kB sec_pagetables:0kB all_unreclaimable? no [ 913.997897][ T2877] Node 0 DMA32 free:1036984kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:81740kB inactive_anon:196kB active_file:0kB inactive_file:28512kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:1664kB local_pcp:1156kB free_cma:16384kB [ 914.035237][ T2877] lowmem_reserve[]: 0 0 0 [ 914.038116][ T2877] Node 0 DMA32: 226*4kB (UME) 102*8kB (UE) 56*16kB (UE) 48*32kB (UE) 14*64kB (UME) 4*128kB (UE) 3*256kB (UME) 1*512kB (U) 2*1024kB (UM) 4*2048kB (MEC) 249*4096kB (MC) = 1036984kB [ 914.050263][ T2877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.069694][ T2877] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 914.080628][ T2877] 7940 total pagecache pages [ 914.095115][ T2877] 0 pages in swap cache [ 914.096659][ T2877] Free swap = 0kB [ 914.097744][ T2877] Total swap = 0kB [ 914.098940][ T2877] 523776 pages RAM [ 914.099799][ T2877] 0 pages HighMem/MovableOnly [ 914.100696][ T2877] 184025 pages reserved [ 914.101548][ T2877] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:15:14 fetching corpus: 10449, signal 271465/367520 (executing program) ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:15:16 fetching corpus: 10499, signal 271842/367521 (executing program) 1970/01/01 00:15:18 fetching corpus: 10549, signal 272161/367521 (executing program) 1970/01/01 00:15:20 fetching corpus: 10599, signal 272553/367521 (executing program) 1970/01/01 00:15:23 fetching corpus: 10649, signal 272952/367521 (executing program) 1970/01/01 00:15:24 fetching corpus: 10699, signal 273449/367521 (executing program) 1970/01/01 00:15:27 fetching corpus: 10749, signal 273767/367523 (executing program) 1970/01/01 00:15:29 fetching corpus: 10799, signal 274065/367523 (executing program) 1970/01/01 00:15:31 fetching corpus: 10849, signal 274409/367523 (executing program) 1970/01/01 00:15:33 fetching corpus: 10899, signal 274700/367523 (executing program) 1970/01/01 00:15:35 fetching corpus: 10949, signal 275291/367523 (executing program) 1970/01/01 00:15:38 fetching corpus: 10999, signal 275717/367523 (executing program) 1970/01/01 00:15:40 fetching corpus: 11049, signal 276068/367523 (executing program) 1970/01/01 00:15:43 fetching corpus: 11099, signal 276512/367523 (executing program) 1970/01/01 00:15:44 fetching corpus: 11149, signal 276844/367523 (executing program) 1970/01/01 00:15:50 fetching corpus: 11199, signal 277375/367523 (executing program) 1970/01/01 00:15:52 fetching corpus: 11249, signal 277622/367523 (executing program) 1970/01/01 00:15:54 fetching corpus: 11299, signal 277977/367523 (executing program) 1970/01/01 00:15:57 fetching corpus: 11349, signal 278375/367523 (executing program) 1970/01/01 00:15:59 fetching corpus: 11399, signal 278704/367523 (executing program) 1970/01/01 00:16:01 fetching corpus: 11449, signal 279069/367525 (executing program) 1970/01/01 00:16:03 fetching corpus: 11499, signal 279461/367527 (executing program) 1970/01/01 00:16:04 fetching corpus: 11549, signal 279883/367527 (executing program) 1970/01/01 00:16:06 fetching corpus: 11599, signal 280258/367527 (executing program) 1970/01/01 00:16:08 fetching corpus: 11649, signal 280482/367527 (executing program) 1970/01/01 00:16:10 fetching corpus: 11699, signal 280798/367530 (executing program) 1970/01/01 00:16:12 fetching corpus: 11749, signal 281089/367532 (executing program) 1970/01/01 00:16:13 fetching corpus: 11799, signal 281460/367532 (executing program) 1970/01/01 00:16:16 fetching corpus: 11849, signal 281935/367533 (executing program) ps_root_recvmsgcb: failed to send message to pid 2877: Connection refused 1970/01/01 00:16:18 fetching corpus: 11899, signal 282267/367533 (executing program) ps_root_recvmsgcb: failed to send message to pid 2879: Connection refused ps_root_recvmsgcb: failed to send message to pid 2878: Connection refused ps_root_recvmsgcb: failed to send message to pid 2880: Connection refused 1970/01/01 00:16:20 fetching corpus: 11949, signal 282656/367533 (executing program) 1970/01/01 00:16:22 fetching corpus: 11999, signal 283296/367538 (executing program) 1970/01/01 00:16:25 fetching corpus: 12049, signal 283621/367541 (executing program) 1970/01/01 00:16:26 fetching corpus: 12099, signal 284040/367541 (executing program) 1970/01/01 00:16:28 fetching corpus: 12149, signal 284360/367541 (executing program) 1970/01/01 00:16:29 fetching corpus: 12199, signal 284749/367541 (executing program) 1970/01/01 00:16:31 fetching corpus: 12249, signal 285110/367541 (executing program) 1970/01/01 00:16:33 fetching corpus: 12299, signal 285485/367541 (executing program) 1970/01/01 00:16:36 fetching corpus: 12349, signal 285955/367541 (executing program) 1970/01/01 00:16:38 fetching corpus: 12399, signal 286690/367550 (executing program) 1970/01/01 00:16:41 fetching corpus: 12449, signal 287069/367552 (executing program) 1970/01/01 00:16:43 fetching corpus: 12499, signal 287494/367552 (executing program) 1970/01/01 00:16:45 fetching corpus: 12549, signal 287940/367552 (executing program) 1970/01/01 00:16:47 fetching corpus: 12599, signal 288196/367552 (executing program) 1970/01/01 00:16:49 fetching corpus: 12649, signal 288473/367554 (executing program) 1970/01/01 00:16:51 fetching corpus: 12699, signal 288741/367554 (executing program) 1970/01/01 00:16:55 fetching corpus: 12749, signal 289059/367554 (executing program) 1970/01/01 00:16:57 fetching corpus: 12799, signal 289429/367555 (executing program) 1970/01/01 00:16:59 fetching corpus: 12849, signal 289762/367555 (executing program) 1970/01/01 00:17:01 fetching corpus: 12899, signal 290068/367555 (executing program) 1970/01/01 00:17:03 fetching corpus: 12949, signal 290437/367555 (executing program) 1970/01/01 00:17:04 fetching corpus: 12999, signal 290793/367556 (executing program) 1970/01/01 00:17:06 fetching corpus: 13049, signal 291119/367556 (executing program) 1970/01/01 00:17:08 fetching corpus: 13099, signal 291515/367556 (executing program) 1970/01/01 00:17:10 fetching corpus: 13149, signal 291843/367556 (executing program) 1970/01/01 00:17:11 fetching corpus: 13199, signal 292112/367556 (executing program) 1970/01/01 00:17:13 fetching corpus: 13249, signal 292354/367556 (executing program) 1970/01/01 00:17:15 fetching corpus: 13299, signal 292620/367556 (executing program) 1970/01/01 00:17:17 fetching corpus: 13349, signal 292988/367556 (executing program) 1970/01/01 00:17:19 fetching corpus: 13399, signal 293351/367556 (executing program) [ 1041.410664][ T2888] warn_alloc: 3 callbacks suppressed [ 1041.411037][ T2888] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1041.417798][ T2888] CPU: 0 PID: 2888 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1041.419330][ T2888] Hardware name: riscv-virtio,qemu (DT) [ 1041.420502][ T2888] Call Trace: [ 1041.421543][ T2888] [] dump_backtrace+0x2e/0x3c [ 1041.423329][ T2888] [] show_stack+0x34/0x40 [ 1041.425130][ T2888] [] dump_stack_lvl+0xe0/0x14c [ 1041.426742][ T2888] [] dump_stack+0x1c/0x24 [ 1041.428284][ T2888] [] warn_alloc+0x168/0x22c [ 1041.429791][ T2888] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1041.431487][ T2888] [] bpf_jit_alloc_exec+0x46/0x52 [ 1041.433631][ T2888] [] bpf_jit_binary_alloc+0x96/0x13c [ 1041.435246][ T2888] [] bpf_int_jit_compile+0x886/0xaa6 [ 1041.436828][ T2888] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1041.438411][ T2888] [] bpf_migrate_filter+0x258/0x2be [ 1041.440121][ T2888] [] bpf_prepare_filter+0x10e/0x1b4 [ 1041.441997][ T2888] [] __get_filter+0x148/0x1a0 [ 1041.444415][ T2888] [] sk_attach_filter+0x22/0x11a [ 1041.446230][ T2888] [] sk_setsockopt+0x144e/0x270c [ 1041.448375][ T2888] [] sock_setsockopt+0x48/0x58 [ 1041.450384][ T2888] [] __sys_setsockopt+0x3f0/0x418 [ 1041.452306][ T2888] [] sys_setsockopt+0x3a/0x4c [ 1041.453990][ T2888] [] ret_from_syscall+0x0/0x2 [ 1041.505698][ T2888] Mem-Info: [ 1041.507044][ T2888] active_anon:23605 inactive_anon:51 isolated_anon:0 [ 1041.507044][ T2888] active_file:0 inactive_file:7138 isolated_file:0 [ 1041.507044][ T2888] unevictable:768 dirty:0 writeback:0 [ 1041.507044][ T2888] slab_reclaimable:5156 slab_unreclaimable:19287 [ 1041.507044][ T2888] mapped:4445 shmem:814 pagetables:159 [ 1041.507044][ T2888] sec_pagetables:0 bounce:0 [ 1041.507044][ T2888] kernel_misc_reclaimable:0 [ 1041.507044][ T2888] free:255520 free_pcp:966 free_cma:4096 [ 1041.510401][ T2888] Node 0 active_anon:94420kB inactive_anon:204kB active_file:0kB inactive_file:28552kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3256kB writeback_tmp:0kB kernel_stack:4600kB pagetables:636kB sec_pagetables:0kB all_unreclaimable? no [ 1041.533449][ T2888] Node 0 DMA32 free:1022080kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:94420kB inactive_anon:204kB active_file:0kB inactive_file:28552kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3792kB local_pcp:1408kB free_cma:16384kB [ 1041.536167][ T2888] lowmem_reserve[]: 0 0 0 [ 1041.538575][ T2888] Node 0 DMA32: 142*4kB (E) 11*8kB (E) 29*16kB (UME) 31*32kB (UE) 13*64kB (UE) 4*128kB (UE) 3*256kB (UME) 2*512kB (UM) 1*1024kB (U) 4*2048kB (MEC) 246*4096kB (MC) = 1022080kB [ 1041.578244][ T2888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.580074][ T2888] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1041.581648][ T2888] 7952 total pagecache pages [ 1041.613618][ T2888] 0 pages in swap cache [ 1041.617022][ T2888] Free swap = 0kB [ 1041.618162][ T2888] Total swap = 0kB [ 1041.619262][ T2888] 523776 pages RAM [ 1041.620364][ T2888] 0 pages HighMem/MovableOnly [ 1041.621514][ T2888] 184025 pages reserved [ 1041.635575][ T2888] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:17:23 fetching corpus: 13449, signal 293625/367584 (executing program) ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 1970/01/01 00:17:25 fetching corpus: 13499, signal 293820/367587 (executing program) 1970/01/01 00:17:26 fetching corpus: 13549, signal 294178/367587 (executing program) 1970/01/01 00:17:28 fetching corpus: 13599, signal 294553/367587 (executing program) 1970/01/01 00:17:30 fetching corpus: 13649, signal 294938/367587 (executing program) 1970/01/01 00:17:32 fetching corpus: 13699, signal 295209/367587 (executing program) 1970/01/01 00:17:33 fetching corpus: 13749, signal 295532/367587 (executing program) 1970/01/01 00:17:35 fetching corpus: 13799, signal 295801/367587 (executing program) 1970/01/01 00:17:37 fetching corpus: 13849, signal 296033/367587 (executing program) 1970/01/01 00:17:39 fetching corpus: 13899, signal 296357/367587 (executing program) 1970/01/01 00:17:42 fetching corpus: 13949, signal 296750/367589 (executing program) 1970/01/01 00:17:44 fetching corpus: 13999, signal 297107/367589 (executing program) 1970/01/01 00:17:46 fetching corpus: 14049, signal 297366/367589 (executing program) 1970/01/01 00:17:49 fetching corpus: 14099, signal 297685/367589 (executing program) 1970/01/01 00:17:51 fetching corpus: 14149, signal 297972/367589 (executing program) 1970/01/01 00:17:53 fetching corpus: 14199, signal 298219/367591 (executing program) 1970/01/01 00:17:56 fetching corpus: 14249, signal 298412/367592 (executing program) 1970/01/01 00:17:58 fetching corpus: 14299, signal 298600/367592 (executing program) 1970/01/01 00:18:00 fetching corpus: 14349, signal 298944/367592 (executing program) 1970/01/01 00:18:02 fetching corpus: 14399, signal 299238/367593 (executing program) 1970/01/01 00:18:04 fetching corpus: 14449, signal 299488/367593 (executing program) 1970/01/01 00:18:05 fetching corpus: 14499, signal 299762/367593 (executing program) 1970/01/01 00:18:08 fetching corpus: 14549, signal 300061/367593 (executing program) 1970/01/01 00:18:09 fetching corpus: 14599, signal 300352/367595 (executing program) 1970/01/01 00:18:12 fetching corpus: 14649, signal 300570/367595 (executing program) 1970/01/01 00:18:14 fetching corpus: 14699, signal 300882/367595 (executing program) 1970/01/01 00:18:16 fetching corpus: 14749, signal 301159/367595 (executing program) 1970/01/01 00:18:18 fetching corpus: 14799, signal 301465/367601 (executing program) 1970/01/01 00:18:19 fetching corpus: 14849, signal 301770/367601 (executing program) 1970/01/01 00:18:21 fetching corpus: 14899, signal 302116/367601 (executing program) 1970/01/01 00:18:23 fetching corpus: 14949, signal 302582/367601 (executing program) ps_root_recvmsgcb: failed to send message to pid 2888: Connection refused 1970/01/01 00:18:25 fetching corpus: 14999, signal 302831/367601 (executing program) ps_root_recvmsgcb: failed to send message to pid 2889: Connection refused ps_root_recvmsgcb: failed to send message to pid 2890: Connection refused ps_root_recvmsgcb: failed to send message to pid 2891: Connection refused 1970/01/01 00:18:28 fetching corpus: 15049, signal 303129/367601 (executing program) 1970/01/01 00:18:30 fetching corpus: 15099, signal 303363/367601 (executing program) 1970/01/01 00:18:32 fetching corpus: 15149, signal 303664/367601 (executing program) 1970/01/01 00:18:34 fetching corpus: 15199, signal 303952/367601 (executing program) 1970/01/01 00:18:36 fetching corpus: 15249, signal 304223/367602 (executing program) 1970/01/01 00:18:37 fetching corpus: 15299, signal 304443/367602 (executing program) 1970/01/01 00:18:40 fetching corpus: 15349, signal 304744/367605 (executing program) 1970/01/01 00:18:41 fetching corpus: 15399, signal 305005/367605 (executing program) 1970/01/01 00:18:43 fetching corpus: 15449, signal 305252/367605 (executing program) 1970/01/01 00:18:46 fetching corpus: 15499, signal 305590/367606 (executing program) 1970/01/01 00:18:48 fetching corpus: 15549, signal 305824/367606 (executing program) 1970/01/01 00:18:50 fetching corpus: 15599, signal 306120/367607 (executing program) 1970/01/01 00:18:52 fetching corpus: 15649, signal 306385/367607 (executing program) 1970/01/01 00:18:54 fetching corpus: 15699, signal 306713/367607 (executing program) 1970/01/01 00:18:56 fetching corpus: 15749, signal 307004/367613 (executing program) 1970/01/01 00:18:59 fetching corpus: 15799, signal 307448/367613 (executing program) 1970/01/01 00:19:01 fetching corpus: 15849, signal 307678/367613 (executing program) 1970/01/01 00:19:02 fetching corpus: 15899, signal 307965/367615 (executing program) 1970/01/01 00:19:03 fetching corpus: 15949, signal 308275/367615 (executing program) 1970/01/01 00:19:05 fetching corpus: 15999, signal 308549/367615 (executing program) 1970/01/01 00:19:06 fetching corpus: 16021, signal 308656/367615 (executing program) 1970/01/01 00:19:06 fetching corpus: 16021, signal 308656/367615 (executing program) [ 1169.671275][ T2893] warn_alloc: 3 callbacks suppressed [ 1169.671579][ T2893] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1169.745684][ T2893] CPU: 1 PID: 2893 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1169.747815][ T2893] Hardware name: riscv-virtio,qemu (DT) [ 1169.749197][ T2893] Call Trace: [ 1169.750224][ T2893] [] dump_backtrace+0x2e/0x3c [ 1169.751761][ T2893] [] show_stack+0x34/0x40 [ 1169.753942][ T2893] [] dump_stack_lvl+0xe0/0x14c [ 1169.755583][ T2893] [] dump_stack+0x1c/0x24 [ 1169.757132][ T2893] [] warn_alloc+0x168/0x22c [ 1169.758644][ T2893] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1169.760235][ T2893] [] bpf_jit_alloc_exec+0x46/0x52 [ 1169.761674][ T2893] [] bpf_jit_binary_alloc+0x96/0x13c [ 1169.763886][ T2893] [] bpf_int_jit_compile+0x886/0xaa6 [ 1169.765551][ T2893] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1169.767123][ T2893] [] bpf_migrate_filter+0x258/0x2be [ 1169.768806][ T2893] [] bpf_prepare_filter+0x10e/0x1b4 [ 1169.770435][ T2893] [] __get_filter+0x148/0x1a0 [ 1169.772121][ T2893] [] sk_attach_filter+0x22/0x11a [ 1169.774143][ T2893] [] sk_setsockopt+0x144e/0x270c [ 1169.775764][ T2893] [] sock_setsockopt+0x48/0x58 [ 1169.777337][ T2893] [] __sys_setsockopt+0x3f0/0x418 [ 1169.778805][ T2893] [] sys_setsockopt+0x3a/0x4c [ 1169.780235][ T2893] [] ret_from_syscall+0x0/0x2 [ 1169.816423][ T2893] Mem-Info: [ 1169.818167][ T2893] active_anon:34784 inactive_anon:53 isolated_anon:0 [ 1169.818167][ T2893] active_file:0 inactive_file:7142 isolated_file:0 [ 1169.818167][ T2893] unevictable:768 dirty:0 writeback:0 [ 1169.818167][ T2893] slab_reclaimable:5156 slab_unreclaimable:19324 [ 1169.818167][ T2893] mapped:4445 shmem:816 pagetables:189 [ 1169.818167][ T2893] sec_pagetables:0 bounce:0 [ 1169.818167][ T2893] kernel_misc_reclaimable:0 [ 1169.818167][ T2893] free:244492 free_pcp:935 free_cma:4096 [ 1169.831417][ T2893] Node 0 active_anon:139136kB inactive_anon:212kB active_file:0kB inactive_file:28568kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:17780kB dirty:0kB writeback:0kB shmem:3264kB writeback_tmp:0kB kernel_stack:4608kB pagetables:756kB sec_pagetables:0kB all_unreclaimable? no [ 1169.840808][ T2893] Node 0 DMA32 free:977968kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:139136kB inactive_anon:212kB active_file:0kB inactive_file:28568kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3732kB local_pcp:1140kB free_cma:16384kB [ 1169.845181][ T2893] lowmem_reserve[]: 0 0 0 [ 1169.846840][ T2893] Node 0 DMA32: 248*4kB (UE) 54*8kB (UME) 32*16kB (UE) 23*32kB (UME) 13*64kB (UE) 5*128kB (UME) 2*256kB (UE) 1*512kB (U) 2*1024kB (UM) 4*2048kB (MEC) 235*4096kB (MC) = 977968kB [ 1169.867129][ T2893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1169.868627][ T2893] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1169.876167][ T2893] 7958 total pagecache pages [ 1169.877227][ T2893] 0 pages in swap cache [ 1169.878156][ T2893] Free swap = 0kB [ 1169.878884][ T2893] Total swap = 0kB [ 1169.879628][ T2893] 523776 pages RAM [ 1169.880392][ T2893] 0 pages HighMem/MovableOnly [ 1169.881114][ T2893] 184025 pages reserved [ 1169.884998][ T2893] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_root_recvmsgcb: failed to send message to pid 2893: Connection refused ps_root_recvmsgcb: failed to send message to pid 2894: Connection refused ps_root_recvmsgcb: failed to send message to pid 2895: Connection refused ps_root_recvmsgcb: failed to send message to pid 2896: Connection refused 1970/01/01 00:20:40 starting 2 fuzzer processes 00:20:41 executing program 0: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000000100)="44fa223aa033dc3e1206ac29dc748044aae689345989c589335298eab7138816daed5d7d", 0x24, 0x5}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f00000001c0)={0x8, r3}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x243749ec, 0x9, 0x6, 0x3, 0x6855, 0x101, 0xffff, 0xb7, 0x1c7, 0xffffff41, 0x146e, 0x7, 0x1, 0x3eb6050}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) io_setup(0x2, &(0x7f0000000300)=0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/uevent_seqnum', 0x2080, 0x80) io_submit(r4, 0x3, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000340)="60792b59b2f95b24a226013cf16147f4ed26dae0f056345640979b0752b608a755162b56b6a7d8ea977c25fae8d38914ab25308318038516d4b73a3275fcc5d770841032352c8491af33a74815581b6470e2dff7636e51ad56a9da88153768ad8dfa25c3d2118699a763f47956d776a51a7b6adeccb6567fcc7b855683b10df83264dcedaced869e1fa49c8764ceeaf73ca03951b106bd30586fbad56704dfef4f326069718766a8cf24d0b45b5f6bed936991d8e6539a047d318f066ae0c982d8e4e15a6ad4cd779be711ff94ad35ce763e40361e0196f6149a5bf7b2a5ad", 0xdf, 0x3, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000000480)="63b97dff6f9ccd8ad32044451340d5df883b84ce797776e6b08069cd9c21e6023e79d105cec822681e109fc9adfde59a4308847db9824a0a265f122f2ff4254ec2ea46c01ba9cfdc0152cef8c17826b33dff9e8807cd9e2aeddbcec5478c2fc4338dfd662938a2492aeeb7041783fe6a7782f6a6547be225e043bbe6877fbf046fc2faa4aaef43d842e1d1621ce8e023898157a8d60fe68db97a5eb7a2348eab5e77804b1fdae56047f5e1a20d6e51bbf377660c4dc6eeef50815d943b8f73e13533e13aa830bdafc4c78179678791ff4566adaff3d5aabcb8b275e36d78", 0xde, 0x401, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000000600)="5ca411bbfbf7006229210f68e24e23378a4e932f75942d3d6671ee10cbe26dbe7e02cd6e86c49e76666452dd3a56f7169d0483ca5111c737b748b2819da62ff46077ceae106fa0953bdf7c3ee60613b62bf83a0129c3cc13dd0bb7a8d324b15968de577f6df989c289bf57cd8ba5c08ead4d5dfc53cdbc5d68b6cf5a", 0x7c, 0x8, 0x0, 0x0, r1}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x86b1a79385813bb0}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x79}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) mount(&(0x7f0000000900)=@md0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='bpf\x00', 0x2000000, &(0x7f00000009c0)='&l#^+}[+$-%+,!!\x00') recvmmsg$unix(r1, &(0x7f0000003900)=[{{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/133, 0x85}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/54, 0x36}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)=""/189, 0xbd}], 0x4, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000001100)=""/170, 0xaa}, {&(0x7f00000011c0)=""/202, 0xca}], 0x3}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001680)=""/87, 0x57}, {&(0x7f0000001700)=""/129, 0x81}], 0x6}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/110, 0x6e}, {&(0x7f0000001b40)=""/237, 0xed}, {&(0x7f0000001c40)=""/78, 0x4e}, {&(0x7f0000001cc0)=""/148, 0x94}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/202, 0xca}], 0x9}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003300)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/175, 0xaf}, {&(0x7f0000003140)=""/201, 0xc9}, {&(0x7f0000003240)=""/162, 0xa2}], 0x4}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000003800)=[{&(0x7f00000033c0)=""/25, 0x19}, {&(0x7f0000003400)=""/109, 0x6d}, {&(0x7f0000003480)=""/58, 0x3a}, {&(0x7f00000034c0)=""/49, 0x31}, {&(0x7f0000003500)=""/193, 0xc1}, {&(0x7f0000003600)=""/137, 0x89}, {&(0x7f00000036c0)=""/180, 0xb4}, {&(0x7f0000003780)=""/85, 0x55}], 0x8, &(0x7f0000003880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x7, 0x20000040, &(0x7f0000003ac0)) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b00), 0x4000, 0x0) ioctl$IOMMU_IOAS_MAP(r14, 0x3b85, &(0x7f0000003c00)={0x28, 0x0, r2, 0x0, &(0x7f0000003b40)="52929532ed3e1d5c425a8667ed710a3db48c4130ae7ad97cbd51058b0f933847b905eab801a042a6cde519d4e4451517aba7cf89f88019d01d842ca52d3d8702708dde14f7935fe64c488f3221b9ceb1e3173e19489bd8be1e6d24bb38fc2b0ce85a6e1c6305dea2e22ad09a8040f99530166a12072071dce8f7fe001d4a5f190b2e4cb4795c6fdd2e8df1eef88e408b320869585f7ec60acd7412f824a4e3c33a517a816f95d02b9c13311d3ebbaa03e5e1e0ec81c803", 0xb7, 0x5}) bind$can_raw(r14, &(0x7f0000003c40), 0x10) ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000003c80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000003dc0)={0x28, 0x5, r15, 0x0, &(0x7f0000003cc0)="7a14aa3167406d40f9ccad92cd517ee0a0643a5dd16f055c49b33bc343d34ea9ef43c4bffe37da7360eb14832620bbe1bba755b265a51e8d52ae9a51edddb009ca6347c3493eb7979dd2f0edb5662807f81c493c94b0947b64aea6de7e63d248370e7949fc85b2ef81c0f41d8c10e7387ac03ad2477628879a81815a852f76aa4307bd19bff43b1e9e78e9aa5488a542eb881c480ab4e9965d99f572ba0f18cab35e012a3cbc60da9d9f839b515eb517ce784c5b4d02c0356aae4abf0eb5b64e15dcab05481caadd3c89d840c9c09b0c590f4f9ede848b05c505323262106c0706be2c9876a243", 0xe7, 0x1f}) ioctl$IOMMU_VFIO_IOAS$GET(r13, 0x3b88, &(0x7f0000003e00)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000003f00)={0x28, 0x1, r16, 0x0, &(0x7f0000003e40)="a75fa7bdf70af3cb25a57a81fd2214780047fb56a6f68ed3609616c626e2449f3630442aff1a8e55a82eeb9e8308ba907ebc24ccfeee0bf04fcb4c849dfd392d2f99154d781f24aca507f8bd39e55a6799d60a1ae2511fb11c32f01478e58952c6b9d6b77a91542d644516d1f07c607d78155c415b7fc6977130d646333b88d6e9dc7968c4cbb570acc4168356e21c7c2e56fd79c87f52c3239e2657e4fbfad9e95b2a8496d59baea739b92433327d2bfd302d", 0xb3, 0x3}) writev(r5, &(0x7f0000003fc0)=[{&(0x7f0000003f40)="d5eee8c1d26bbf7b0c127df3be9473be9518d65f653cf3a2431756840983c95e43f6f4d45ab29e5924d009f1b5674701ab9b9252b9af0bc93d463b95de4ad93876eb4d47b03655a9ba80ec6bfca2b09d2f558d9721bdc16643", 0x59}], 0x1) r17 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r17, 0x3b88, &(0x7f0000004040)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r11, 0x3b87, &(0x7f0000004080)={0x18, 0x1, 0x0, 0x0, r15, 0x2}) 00:20:41 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xab6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r1 = dup3(r0, r0, 0x0) r2 = syz_io_uring_setup(0xd0c, &(0x7f0000000140)={0x0, 0xd83c, 0x4, 0x1, 0xb8, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) r3 = syz_io_uring_setup(0x3030, &(0x7f0000000280)={0x0, 0xebdd, 0x4, 0x0, 0x21c, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000003c0)="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", 0xfc) r6 = epoll_create1(0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "7c1cd68f9e76618236e13b274c1af5d7"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000014c0)={0x0, 0x9, 0xbfc}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000018c0)={0x0, 0x0, {0x2, @struct={0x7fffffff, 0x4}, r7, 0x10001, 0xfffffffffffffff8, 0x1f, 0x9, 0x8000, 0x12, @usage=0x7, 0x3ff, 0x148058bc, [0x0, 0x3f, 0xbda7, 0x3f, 0xfffffffffffffffd]}, {0x0, @usage=0x10001, r8, 0x2, 0x7, 0x9, 0x0, 0x7, 0x3, @usage=0x1d2f3bd7, 0x0, 0x1, [0x3, 0x100000001, 0xfffffffffffffffa, 0x9, 0x1, 0xbe1d]}, {0x475c, @struct={0x2, 0x80000001}, 0x0, 0xb1, 0xfffffffffffffffb, 0x2, 0x800, 0x800, 0x80, @struct={0x3, 0x5}, 0x8, 0x1, [0x100, 0xe22f, 0x1, 0xffffffffffff1cdc, 0xfffffffffffffe01, 0x6d18]}, {0x4, 0x8000000000000001, 0x6}}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000001cc0)=0x3f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000001d00)={0x2}) bind$unix(r1, &(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001dc0)=0xfffffffffffffe00) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001f80)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, r1, &(0x7f0000001e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f40)='./file0\x00', 0x0, 0x0, 0x1}, 0x26) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001fc0), 0x20a840, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000002000)={{0x5, 0xffffffff}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) truncate(&(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000002280)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x1cc, 0xfffffffffffffffc, 0xcbb, 0x101, 0xca3}, {0x1000, 0x4, 0x4, 0x6, 0x3, 0x7}], ['\x00', '\x00']}) connect$unix(0xffffffffffffffff, &(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$unix(r9, &(0x7f00000028c0)={&(0x7f0000002440)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000024c0)="1c99ee448ab99615c27d4e36e705d04572e764f576f963e6806fde3569374e7a5bbea8603e1e705356990417f24653a1fda19340fc969df6bc79ab917b04bcef470c5a47f2e7a7bd4d59df8d49e306fb0e8ab526acb0b9", 0x57}, {&(0x7f0000002540)="5735b04d4991d1dc7d15205dc3774ac4bedc399e1f1851a1c8ae6d49b6e4b3eb42ba42eeddd23547c7122c0b7aff4b80739b4283364dabed0117cbf0af6585106fe2f2964e709b1f4ef2256cccdb7c741f31f028d10c3d2353da652475b93192406ef5a4f47c3a09d79033f638457e15f6f17979faf1232a51082f7b9802755e48cf3ec575c304e07f94ba70dc0a9980", 0x90}, {&(0x7f0000002600)="d368479374c5ab2caad74747e05a1111736dc12c7516cad34ec8f2", 0x1b}, {&(0x7f0000002640)="4b7aa8438baad98493fbb068246b73aa8b19de622ee83de4998d15f3f70423d25651f2e75ce23ab188c9c6cd7f45560d3cc0af6889856244eda3a035019ae27a246e0f69a3189790448369a00dcc3cb8e68520a4d25271cd71e3167df51bcd91d322597f054ace3b215abfe3fd5654bf60edd784ce940af24ee19e02b8240549497dab6f5b8dad0a5c4877d101e85600bab6964488244cb04f0506efc97c9cabbf40b82eb48602b2d010d06b3a14f2d7ad82b16d944a21c2758a22f78ee53c002146bdf8d12e5e86e8d314cbd7c9eb3ca4a1cbc8", 0xd4}, {&(0x7f0000002740)="731a0758c0d791256d25cf5f21ba7056d82ce77a5c8760beff18e5c8afb9700750f97c4f8185359f8c72a345a14e046055af7e16301a4513ca3977f84c66e72a140ddffd48e1cffe7a78374c66da9fa199ec0123c51c862187a136558491978b1fda86954ea0002c7e2d929aed6eb1b2672ce5c1aa3a0f899b64749367853c06dc1afd1a7e628b1b72a0eb556617b9b666436b46fcfe65fa02fa0a71d3dac4f22e7a3fca1339975b6bb1a641788270284befe57f95be31d096c54e3a9ab668e8f5fd43ef351e5ac7e44a9ebd915312da725d00bfca4e5ad4d25c0d8a", 0xdc}], 0x5, 0x0, 0x0, 0x24810}, 0x4000) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000002900)=@abs, &(0x7f0000002980)=0x6e, 0x0) bind$unix(r10, &(0x7f00000029c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIGETBSZ(r11, 0x2, &(0x7f0000002a40)) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000002d00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x1f4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, 'SMC_PNETID\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffff8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf0}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) syz_io_uring_submit(0x0, r5, &(0x7f0000002d80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000002d40)}, 0x55d4) [ 1274.850727][ T2905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.458093][ T2905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.543354][ T2906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.117310][ T2906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.956240][ T2905] device hsr_slave_0 entered promiscuous mode [ 1289.001597][ T2905] device hsr_slave_1 entered promiscuous mode [ 1291.157560][ T2906] device hsr_slave_0 entered promiscuous mode [ 1291.238251][ T2906] device hsr_slave_1 entered promiscuous mode [ 1291.271690][ T2906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.279605][ T2906] Cannot create hsr debugfs directory [ 1298.587014][ T2905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1298.725193][ T2905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1298.782763][ T2905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1298.898083][ T2905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1300.705887][ T2906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1301.027740][ T2906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1301.266319][ T2906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1301.389574][ T3524] warn_alloc: 3 callbacks suppressed [ 1301.390005][ T3524] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1301.409618][ T3524] CPU: 1 PID: 3524 Comm: dhcpcd Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1301.411261][ T3524] Hardware name: riscv-virtio,qemu (DT) [ 1301.412928][ T3524] Call Trace: [ 1301.414671][ T3524] [] dump_backtrace+0x2e/0x3c [ 1301.416379][ T3524] [] show_stack+0x34/0x40 [ 1301.417976][ T3524] [] dump_stack_lvl+0xe0/0x14c [ 1301.419597][ T3524] [] dump_stack+0x1c/0x24 [ 1301.421303][ T3524] [] warn_alloc+0x168/0x22c [ 1301.423960][ T3524] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1301.425798][ T3524] [] bpf_jit_alloc_exec+0x46/0x52 [ 1301.427414][ T3524] [] bpf_jit_binary_alloc+0x96/0x13c [ 1301.429028][ T3524] [] bpf_int_jit_compile+0x886/0xaa6 [ 1301.430632][ T3524] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1301.432452][ T3524] [] bpf_migrate_filter+0x258/0x2be [ 1301.433971][ T3524] [] bpf_prepare_filter+0x10e/0x1b4 [ 1301.435712][ T3524] [] __get_filter+0x148/0x1a0 [ 1301.437357][ T3524] [] sk_attach_filter+0x22/0x11a [ 1301.438731][ T3524] [] sk_setsockopt+0x144e/0x270c [ 1301.440369][ T3524] [] sock_setsockopt+0x48/0x58 [ 1301.442068][ T3524] [] __sys_setsockopt+0x3f0/0x418 [ 1301.443745][ T3524] [] sys_setsockopt+0x3a/0x4c [ 1301.445328][ T3524] [] ret_from_syscall+0x0/0x2 [ 1301.574008][ T3524] Mem-Info: [ 1301.575219][ T3524] active_anon:61410 inactive_anon:58 isolated_anon:0 [ 1301.575219][ T3524] active_file:0 inactive_file:7172 isolated_file:0 [ 1301.575219][ T3524] unevictable:768 dirty:0 writeback:0 [ 1301.575219][ T3524] slab_reclaimable:5331 slab_unreclaimable:22016 [ 1301.575219][ T3524] mapped:8724 shmem:833 pagetables:293 [ 1301.575219][ T3524] sec_pagetables:0 bounce:0 [ 1301.575219][ T3524] kernel_misc_reclaimable:0 [ 1301.575219][ T3524] free:199035 free_pcp:734 free_cma:4096 [ 1301.578459][ T3524] Node 0 active_anon:245640kB inactive_anon:232kB active_file:0kB inactive_file:28688kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:3332kB writeback_tmp:0kB kernel_stack:5288kB pagetables:1172kB sec_pagetables:0kB all_unreclaimable? no [ 1301.580853][ T3524] Node 0 DMA32 free:796140kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:245640kB inactive_anon:232kB active_file:0kB inactive_file:28688kB unevictable:3072kB writepending:0kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:2936kB local_pcp:316kB free_cma:16384kB [ 1301.606452][ T2906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1301.645594][ T3524] lowmem_reserve[]: 0 0 0 ps_bpf_start_bpf: bpf_open: Unknown error 524 [ 1301.647759][ T3524] Node 0 DMA32: 123*4kB (E) 90*8kB (UME) 27*16kB (UE) 14*32kB (UME) 5*64kB (UME) 3*128kB (UM) 1*256kB (E) 1*512kB (M) 0*1024kB 5*2048kB (UMEC) 191*4096kB (MC) = 796140kB [ 1301.680177][ T3524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.681292][ T3524] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB ps_root_recvmsg: Unknown error 524 [ 1301.724646][ T3524] 8005 total pagecache pages [ 1301.725815][ T3524] 0 pages in swap cache [ 1301.726658][ T3524] Free swap = 0kB [ 1301.727496][ T3524] Total swap = 0kB [ 1301.728469][ T3524] 523776 pages RAM [ 1301.729203][ T3524] 0 pages HighMem/MovableOnly [ 1301.730109][ T3524] 184025 pages reserved [ 1301.730938][ T3524] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 [ 1312.651209][ T2905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.130560][ T2906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.256073][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1314.347079][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1314.848680][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1314.888449][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.928939][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.995813][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1325.160358][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1325.204993][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1325.967277][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1326.106418][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1326.128192][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1326.156221][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1326.180386][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1326.211381][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1326.248165][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1326.291106][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1326.687699][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.709713][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1327.228583][ T2906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.269570][ T2906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1327.611706][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1327.656502][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1327.679648][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1327.715549][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1327.854640][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1327.896349][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1328.124921][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1334.040000][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.047664][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.816074][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.819597][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1347.884837][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1347.924879][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1350.539240][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1350.575842][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1357.105346][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1357.159962][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1357.251372][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1357.295772][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1357.428653][ T2906] device veth0_vlan entered promiscuous mode [ 1357.690141][ T2906] device veth1_vlan entered promiscuous mode [ 1358.690696][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1358.717881][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1358.857552][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1358.876931][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.030083][ T2905] device veth0_vlan entered promiscuous mode [ 1359.051489][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1359.105402][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1359.315043][ T2906] device veth0_macvtap entered promiscuous mode [ 1359.542806][ T2905] device veth1_vlan entered promiscuous mode [ 1359.651472][ T2906] device veth1_macvtap entered promiscuous mode [ 1360.430077][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1360.479815][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1360.827618][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1360.839951][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1361.051262][ T2906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.074925][ T2906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.077037][ T2906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.079964][ T2906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.133403][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1361.188243][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1361.640743][ T2905] device veth0_macvtap entered promiscuous mode [ 1362.137996][ T2905] device veth1_macvtap entered promiscuous mode ps_root_recvmsgcb: failed to send message to pid 3524: Connection refused ps_root_recvmsgcb: failed to send message to pid 3525: Connection refused [ 1364.577830][ T2905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.579971][ T2905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.581784][ T2905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.599377][ T2905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.729251][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.780109][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.806573][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1364.844499][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready ps_root_recvmsgcb: failed to send message to pid 3527: Connection refused ps_root_recvmsgcb: failed to send message to pid 3526: Connection refused 00:22:48 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xab6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r1 = dup3(r0, r0, 0x0) r2 = syz_io_uring_setup(0xd0c, &(0x7f0000000140)={0x0, 0xd83c, 0x4, 0x1, 0xb8, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) (async) r3 = syz_io_uring_setup(0x3030, &(0x7f0000000280)={0x0, 0xebdd, 0x4, 0x0, 0x21c, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000003c0)="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", 0xfc) (async) r6 = epoll_create1(0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "7c1cd68f9e76618236e13b274c1af5d7"}) (rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000014c0)={0x0, 0x9, 0xbfc}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000018c0)={0x0, 0x0, {0x2, @struct={0x7fffffff, 0x4}, r7, 0x10001, 0xfffffffffffffff8, 0x1f, 0x9, 0x8000, 0x12, @usage=0x7, 0x3ff, 0x148058bc, [0x0, 0x3f, 0xbda7, 0x3f, 0xfffffffffffffffd]}, {0x0, @usage=0x10001, r8, 0x2, 0x7, 0x9, 0x0, 0x7, 0x3, @usage=0x1d2f3bd7, 0x0, 0x1, [0x3, 0x100000001, 0xfffffffffffffffa, 0x9, 0x1, 0xbe1d]}, {0x475c, @struct={0x2, 0x80000001}, 0x0, 0xb1, 0xfffffffffffffffb, 0x2, 0x800, 0x800, 0x80, @struct={0x3, 0x5}, 0x8, 0x1, [0x100, 0xe22f, 0x1, 0xffffffffffff1cdc, 0xfffffffffffffe01, 0x6d18]}, {0x4, 0x8000000000000001, 0x6}}) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f0000001cc0)=0x3f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000001d00)={0x2}) bind$unix(r1, &(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001dc0)=0xfffffffffffffe00) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000001f80)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, r1, &(0x7f0000001e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f40)='./file0\x00', 0x0, 0x0, 0x1}, 0x26) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001fc0), 0x20a840, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000002000)={{0x5, 0xffffffff}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) (async) truncate(&(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000002280)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x1cc, 0xfffffffffffffffc, 0xcbb, 0x101, 0xca3}, {0x1000, 0x4, 0x4, 0x6, 0x3, 0x7}], ['\x00', '\x00']}) connect$unix(0xffffffffffffffff, &(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) sendmsg$unix(r9, &(0x7f00000028c0)={&(0x7f0000002440)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000024c0)="1c99ee448ab99615c27d4e36e705d04572e764f576f963e6806fde3569374e7a5bbea8603e1e705356990417f24653a1fda19340fc969df6bc79ab917b04bcef470c5a47f2e7a7bd4d59df8d49e306fb0e8ab526acb0b9", 0x57}, {&(0x7f0000002540)="5735b04d4991d1dc7d15205dc3774ac4bedc399e1f1851a1c8ae6d49b6e4b3eb42ba42eeddd23547c7122c0b7aff4b80739b4283364dabed0117cbf0af6585106fe2f2964e709b1f4ef2256cccdb7c741f31f028d10c3d2353da652475b93192406ef5a4f47c3a09d79033f638457e15f6f17979faf1232a51082f7b9802755e48cf3ec575c304e07f94ba70dc0a9980", 0x90}, {&(0x7f0000002600)="d368479374c5ab2caad74747e05a1111736dc12c7516cad34ec8f2", 0x1b}, {&(0x7f0000002640)="4b7aa8438baad98493fbb068246b73aa8b19de622ee83de4998d15f3f70423d25651f2e75ce23ab188c9c6cd7f45560d3cc0af6889856244eda3a035019ae27a246e0f69a3189790448369a00dcc3cb8e68520a4d25271cd71e3167df51bcd91d322597f054ace3b215abfe3fd5654bf60edd784ce940af24ee19e02b8240549497dab6f5b8dad0a5c4877d101e85600bab6964488244cb04f0506efc97c9cabbf40b82eb48602b2d010d06b3a14f2d7ad82b16d944a21c2758a22f78ee53c002146bdf8d12e5e86e8d314cbd7c9eb3ca4a1cbc8", 0xd4}, {&(0x7f0000002740)="731a0758c0d791256d25cf5f21ba7056d82ce77a5c8760beff18e5c8afb9700750f97c4f8185359f8c72a345a14e046055af7e16301a4513ca3977f84c66e72a140ddffd48e1cffe7a78374c66da9fa199ec0123c51c862187a136558491978b1fda86954ea0002c7e2d929aed6eb1b2672ce5c1aa3a0f899b64749367853c06dc1afd1a7e628b1b72a0eb556617b9b666436b46fcfe65fa02fa0a71d3dac4f22e7a3fca1339975b6bb1a641788270284befe57f95be31d096c54e3a9ab668e8f5fd43ef351e5ac7e44a9ebd915312da725d00bfca4e5ad4d25c0d8a", 0xdc}], 0x5, 0x0, 0x0, 0x24810}, 0x4000) (async, rerun: 64) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000002900)=@abs, &(0x7f0000002980)=0x6e, 0x0) (rerun: 64) bind$unix(r10, &(0x7f00000029c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIGETBSZ(r11, 0x2, &(0x7f0000002a40)) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000002d00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x1f4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, 'SMC_PNETID\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffff8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf0}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) syz_io_uring_submit(0x0, r5, &(0x7f0000002d80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000002d40)}, 0x55d4) 00:22:50 executing program 0: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000000100)="44fa223aa033dc3e1206ac29dc748044aae689345989c589335298eab7138816daed5d7d", 0x24, 0x5}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f00000001c0)={0x8, r3}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x243749ec, 0x9, 0x6, 0x3, 0x6855, 0x101, 0xffff, 0xb7, 0x1c7, 0xffffff41, 0x146e, 0x7, 0x1, 0x3eb6050}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) io_setup(0x2, &(0x7f0000000300)=0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/uevent_seqnum', 0x2080, 0x80) io_submit(r4, 0x3, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000340)="60792b59b2f95b24a226013cf16147f4ed26dae0f056345640979b0752b608a755162b56b6a7d8ea977c25fae8d38914ab25308318038516d4b73a3275fcc5d770841032352c8491af33a74815581b6470e2dff7636e51ad56a9da88153768ad8dfa25c3d2118699a763f47956d776a51a7b6adeccb6567fcc7b855683b10df83264dcedaced869e1fa49c8764ceeaf73ca03951b106bd30586fbad56704dfef4f326069718766a8cf24d0b45b5f6bed936991d8e6539a047d318f066ae0c982d8e4e15a6ad4cd779be711ff94ad35ce763e40361e0196f6149a5bf7b2a5ad", 0xdf, 0x3, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000000480)="63b97dff6f9ccd8ad32044451340d5df883b84ce797776e6b08069cd9c21e6023e79d105cec822681e109fc9adfde59a4308847db9824a0a265f122f2ff4254ec2ea46c01ba9cfdc0152cef8c17826b33dff9e8807cd9e2aeddbcec5478c2fc4338dfd662938a2492aeeb7041783fe6a7782f6a6547be225e043bbe6877fbf046fc2faa4aaef43d842e1d1621ce8e023898157a8d60fe68db97a5eb7a2348eab5e77804b1fdae56047f5e1a20d6e51bbf377660c4dc6eeef50815d943b8f73e13533e13aa830bdafc4c78179678791ff4566adaff3d5aabcb8b275e36d78", 0xde, 0x401, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000000600)="5ca411bbfbf7006229210f68e24e23378a4e932f75942d3d6671ee10cbe26dbe7e02cd6e86c49e76666452dd3a56f7169d0483ca5111c737b748b2819da62ff46077ceae106fa0953bdf7c3ee60613b62bf83a0129c3cc13dd0bb7a8d324b15968de577f6df989c289bf57cd8ba5c08ead4d5dfc53cdbc5d68b6cf5a", 0x7c, 0x8, 0x0, 0x0, r1}]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x86b1a79385813bb0}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x79}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) mount(&(0x7f0000000900)=@md0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='bpf\x00', 0x2000000, &(0x7f00000009c0)='&l#^+}[+$-%+,!!\x00') (async) recvmmsg$unix(r1, &(0x7f0000003900)=[{{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/133, 0x85}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/54, 0x36}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)=""/189, 0xbd}], 0x4, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000001100)=""/170, 0xaa}, {&(0x7f00000011c0)=""/202, 0xca}], 0x3}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001680)=""/87, 0x57}, {&(0x7f0000001700)=""/129, 0x81}], 0x6}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/110, 0x6e}, {&(0x7f0000001b40)=""/237, 0xed}, {&(0x7f0000001c40)=""/78, 0x4e}, {&(0x7f0000001cc0)=""/148, 0x94}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/202, 0xca}], 0x9}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003300)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/175, 0xaf}, {&(0x7f0000003140)=""/201, 0xc9}, {&(0x7f0000003240)=""/162, 0xa2}], 0x4}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000003800)=[{&(0x7f00000033c0)=""/25, 0x19}, {&(0x7f0000003400)=""/109, 0x6d}, {&(0x7f0000003480)=""/58, 0x3a}, {&(0x7f00000034c0)=""/49, 0x31}, {&(0x7f0000003500)=""/193, 0xc1}, {&(0x7f0000003600)=""/137, 0x89}, {&(0x7f00000036c0)=""/180, 0xb4}, {&(0x7f0000003780)=""/85, 0x55}], 0x8, &(0x7f0000003880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x7, 0x20000040, &(0x7f0000003ac0)) (async) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b00), 0x4000, 0x0) ioctl$IOMMU_IOAS_MAP(r14, 0x3b85, &(0x7f0000003c00)={0x28, 0x0, r2, 0x0, &(0x7f0000003b40)="52929532ed3e1d5c425a8667ed710a3db48c4130ae7ad97cbd51058b0f933847b905eab801a042a6cde519d4e4451517aba7cf89f88019d01d842ca52d3d8702708dde14f7935fe64c488f3221b9ceb1e3173e19489bd8be1e6d24bb38fc2b0ce85a6e1c6305dea2e22ad09a8040f99530166a12072071dce8f7fe001d4a5f190b2e4cb4795c6fdd2e8df1eef88e408b320869585f7ec60acd7412f824a4e3c33a517a816f95d02b9c13311d3ebbaa03e5e1e0ec81c803", 0xb7, 0x5}) bind$can_raw(r14, &(0x7f0000003c40), 0x10) (async) ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000003c80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000003dc0)={0x28, 0x5, r15, 0x0, &(0x7f0000003cc0)="7a14aa3167406d40f9ccad92cd517ee0a0643a5dd16f055c49b33bc343d34ea9ef43c4bffe37da7360eb14832620bbe1bba755b265a51e8d52ae9a51edddb009ca6347c3493eb7979dd2f0edb5662807f81c493c94b0947b64aea6de7e63d248370e7949fc85b2ef81c0f41d8c10e7387ac03ad2477628879a81815a852f76aa4307bd19bff43b1e9e78e9aa5488a542eb881c480ab4e9965d99f572ba0f18cab35e012a3cbc60da9d9f839b515eb517ce784c5b4d02c0356aae4abf0eb5b64e15dcab05481caadd3c89d840c9c09b0c590f4f9ede848b05c505323262106c0706be2c9876a243", 0xe7, 0x1f}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r13, 0x3b88, &(0x7f0000003e00)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000003f00)={0x28, 0x1, r16, 0x0, &(0x7f0000003e40)="a75fa7bdf70af3cb25a57a81fd2214780047fb56a6f68ed3609616c626e2449f3630442aff1a8e55a82eeb9e8308ba907ebc24ccfeee0bf04fcb4c849dfd392d2f99154d781f24aca507f8bd39e55a6799d60a1ae2511fb11c32f01478e58952c6b9d6b77a91542d644516d1f07c607d78155c415b7fc6977130d646333b88d6e9dc7968c4cbb570acc4168356e21c7c2e56fd79c87f52c3239e2657e4fbfad9e95b2a8496d59baea739b92433327d2bfd302d", 0xb3, 0x3}) writev(r5, &(0x7f0000003fc0)=[{&(0x7f0000003f40)="d5eee8c1d26bbf7b0c127df3be9473be9518d65f653cf3a2431756840983c95e43f6f4d45ab29e5924d009f1b5674701ab9b9252b9af0bc93d463b95de4ad93876eb4d47b03655a9ba80ec6bfca2b09d2f558d9721bdc16643", 0x59}], 0x1) r17 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r17, 0x3b88, &(0x7f0000004040)={0xc}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r11, 0x3b87, &(0x7f0000004080)={0x18, 0x1, 0x0, 0x0, r15, 0x2}) 00:22:52 executing program 1: r0 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xab6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) r1 = dup3(r0, r0, 0x0) r2 = syz_io_uring_setup(0xd0c, &(0x7f0000000140)={0x0, 0xd83c, 0x4, 0x1, 0xb8, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) (async, rerun: 32) r3 = syz_io_uring_setup(0x3030, &(0x7f0000000280)={0x0, 0xebdd, 0x4, 0x0, 0x21c, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000003c0)="315f3915e1b16e8e2042267fab75feb59cd5ff5b7655a7b56b1a8000e0545941ea4cfac5cc5f4176d928a458f798225cf9d05ec13f4cbc18c0ea6532c2a7fab66b8afb562f21331acf831d102ed61a1e8e0637e0c21ede33b7a716fd9b6d5e853318e227056dbceea0ee2ef15520f4ad96b4f1f005a934e23c3014139cc47df2e14faf42dbf78ff9dd23890e9c7568eda288f44b6d4865f49b688c10750e24e0af150bde37806970ce0c8b3acd9434d1edc2e83c9512aa9312bea31caac7d5df23ad72fc686291fa19718bf114937279b095587d469aca4fc9949f56ed38eccbdb44ed3d8fb8d669dad6cb702ae1de16c526b9e07e7d3ef31ee59ac3", 0xfc) (async) r6 = epoll_create1(0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "7c1cd68f9e76618236e13b274c1af5d7"}) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000014c0)={0x0, 0x9, 0xbfc}) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000018c0)={0x0, 0x0, {0x2, @struct={0x7fffffff, 0x4}, r7, 0x10001, 0xfffffffffffffff8, 0x1f, 0x9, 0x8000, 0x12, @usage=0x7, 0x3ff, 0x148058bc, [0x0, 0x3f, 0xbda7, 0x3f, 0xfffffffffffffffd]}, {0x0, @usage=0x10001, r8, 0x2, 0x7, 0x9, 0x0, 0x7, 0x3, @usage=0x1d2f3bd7, 0x0, 0x1, [0x3, 0x100000001, 0xfffffffffffffffa, 0x9, 0x1, 0xbe1d]}, {0x475c, @struct={0x2, 0x80000001}, 0x0, 0xb1, 0xfffffffffffffffb, 0x2, 0x800, 0x800, 0x80, @struct={0x3, 0x5}, 0x8, 0x1, [0x100, 0xe22f, 0x1, 0xffffffffffff1cdc, 0xfffffffffffffe01, 0x6d18]}, {0x4, 0x8000000000000001, 0x6}}) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f0000001cc0)=0x3f) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000001d00)={0x2}) (async, rerun: 32) bind$unix(r1, &(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001dc0)=0xfffffffffffffe00) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001f80)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, r1, &(0x7f0000001e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f40)='./file0\x00', 0x0, 0x0, 0x1}, 0x26) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001fc0), 0x20a840, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000002000)={{0x5, 0xffffffff}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) (async) truncate(&(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000002280)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x1cc, 0xfffffffffffffffc, 0xcbb, 0x101, 0xca3}, {0x1000, 0x4, 0x4, 0x6, 0x3, 0x7}], ['\x00', '\x00']}) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) sendmsg$unix(r9, &(0x7f00000028c0)={&(0x7f0000002440)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000024c0)="1c99ee448ab99615c27d4e36e705d04572e764f576f963e6806fde3569374e7a5bbea8603e1e705356990417f24653a1fda19340fc969df6bc79ab917b04bcef470c5a47f2e7a7bd4d59df8d49e306fb0e8ab526acb0b9", 0x57}, {&(0x7f0000002540)="5735b04d4991d1dc7d15205dc3774ac4bedc399e1f1851a1c8ae6d49b6e4b3eb42ba42eeddd23547c7122c0b7aff4b80739b4283364dabed0117cbf0af6585106fe2f2964e709b1f4ef2256cccdb7c741f31f028d10c3d2353da652475b93192406ef5a4f47c3a09d79033f638457e15f6f17979faf1232a51082f7b9802755e48cf3ec575c304e07f94ba70dc0a9980", 0x90}, {&(0x7f0000002600)="d368479374c5ab2caad74747e05a1111736dc12c7516cad34ec8f2", 0x1b}, {&(0x7f0000002640)="4b7aa8438baad98493fbb068246b73aa8b19de622ee83de4998d15f3f70423d25651f2e75ce23ab188c9c6cd7f45560d3cc0af6889856244eda3a035019ae27a246e0f69a3189790448369a00dcc3cb8e68520a4d25271cd71e3167df51bcd91d322597f054ace3b215abfe3fd5654bf60edd784ce940af24ee19e02b8240549497dab6f5b8dad0a5c4877d101e85600bab6964488244cb04f0506efc97c9cabbf40b82eb48602b2d010d06b3a14f2d7ad82b16d944a21c2758a22f78ee53c002146bdf8d12e5e86e8d314cbd7c9eb3ca4a1cbc8", 0xd4}, {&(0x7f0000002740)="731a0758c0d791256d25cf5f21ba7056d82ce77a5c8760beff18e5c8afb9700750f97c4f8185359f8c72a345a14e046055af7e16301a4513ca3977f84c66e72a140ddffd48e1cffe7a78374c66da9fa199ec0123c51c862187a136558491978b1fda86954ea0002c7e2d929aed6eb1b2672ce5c1aa3a0f899b64749367853c06dc1afd1a7e628b1b72a0eb556617b9b666436b46fcfe65fa02fa0a71d3dac4f22e7a3fca1339975b6bb1a641788270284befe57f95be31d096c54e3a9ab668e8f5fd43ef351e5ac7e44a9ebd915312da725d00bfca4e5ad4d25c0d8a", 0xdc}], 0x5, 0x0, 0x0, 0x24810}, 0x4000) (async) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000002900)=@abs, &(0x7f0000002980)=0x6e, 0x0) bind$unix(r10, &(0x7f00000029c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIGETBSZ(r11, 0x2, &(0x7f0000002a40)) (async) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000002d00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x1f4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, 'SMC_PNETID\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffff8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf0}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) syz_io_uring_submit(0x0, r5, &(0x7f0000002d80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000002d40)}, 0x55d4) 00:22:53 executing program 0: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000000100)="44fa223aa033dc3e1206ac29dc748044aae689345989c589335298eab7138816daed5d7d", 0x24, 0x5}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f00000001c0)={0x8, r3}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x243749ec, 0x9, 0x6, 0x3, 0x6855, 0x101, 0xffff, 0xb7, 0x1c7, 0xffffff41, 0x146e, 0x7, 0x1, 0x3eb6050}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) io_setup(0x2, &(0x7f0000000300)=0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/uevent_seqnum', 0x2080, 0x80) io_submit(r4, 0x3, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000340)="60792b59b2f95b24a226013cf16147f4ed26dae0f056345640979b0752b608a755162b56b6a7d8ea977c25fae8d38914ab25308318038516d4b73a3275fcc5d770841032352c8491af33a74815581b6470e2dff7636e51ad56a9da88153768ad8dfa25c3d2118699a763f47956d776a51a7b6adeccb6567fcc7b855683b10df83264dcedaced869e1fa49c8764ceeaf73ca03951b106bd30586fbad56704dfef4f326069718766a8cf24d0b45b5f6bed936991d8e6539a047d318f066ae0c982d8e4e15a6ad4cd779be711ff94ad35ce763e40361e0196f6149a5bf7b2a5ad", 0xdf, 0x3, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000000480)="63b97dff6f9ccd8ad32044451340d5df883b84ce797776e6b08069cd9c21e6023e79d105cec822681e109fc9adfde59a4308847db9824a0a265f122f2ff4254ec2ea46c01ba9cfdc0152cef8c17826b33dff9e8807cd9e2aeddbcec5478c2fc4338dfd662938a2492aeeb7041783fe6a7782f6a6547be225e043bbe6877fbf046fc2faa4aaef43d842e1d1621ce8e023898157a8d60fe68db97a5eb7a2348eab5e77804b1fdae56047f5e1a20d6e51bbf377660c4dc6eeef50815d943b8f73e13533e13aa830bdafc4c78179678791ff4566adaff3d5aabcb8b275e36d78", 0xde, 0x401, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000000600)="5ca411bbfbf7006229210f68e24e23378a4e932f75942d3d6671ee10cbe26dbe7e02cd6e86c49e76666452dd3a56f7169d0483ca5111c737b748b2819da62ff46077ceae106fa0953bdf7c3ee60613b62bf83a0129c3cc13dd0bb7a8d324b15968de577f6df989c289bf57cd8ba5c08ead4d5dfc53cdbc5d68b6cf5a", 0x7c, 0x8, 0x0, 0x0, r1}]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x86b1a79385813bb0}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x79}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) mount(&(0x7f0000000900)=@md0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='bpf\x00', 0x2000000, &(0x7f00000009c0)='&l#^+}[+$-%+,!!\x00') (async) recvmmsg$unix(r1, &(0x7f0000003900)=[{{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/133, 0x85}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/54, 0x36}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)=""/189, 0xbd}], 0x4, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000001100)=""/170, 0xaa}, {&(0x7f00000011c0)=""/202, 0xca}], 0x3}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001680)=""/87, 0x57}, {&(0x7f0000001700)=""/129, 0x81}], 0x6}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/110, 0x6e}, {&(0x7f0000001b40)=""/237, 0xed}, {&(0x7f0000001c40)=""/78, 0x4e}, {&(0x7f0000001cc0)=""/148, 0x94}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/202, 0xca}], 0x9}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003300)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/175, 0xaf}, {&(0x7f0000003140)=""/201, 0xc9}, {&(0x7f0000003240)=""/162, 0xa2}], 0x4}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000003800)=[{&(0x7f00000033c0)=""/25, 0x19}, {&(0x7f0000003400)=""/109, 0x6d}, {&(0x7f0000003480)=""/58, 0x3a}, {&(0x7f00000034c0)=""/49, 0x31}, {&(0x7f0000003500)=""/193, 0xc1}, {&(0x7f0000003600)=""/137, 0x89}, {&(0x7f00000036c0)=""/180, 0xb4}, {&(0x7f0000003780)=""/85, 0x55}], 0x8, &(0x7f0000003880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x7, 0x20000040, &(0x7f0000003ac0)) (async) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b00), 0x4000, 0x0) ioctl$IOMMU_IOAS_MAP(r14, 0x3b85, &(0x7f0000003c00)={0x28, 0x0, r2, 0x0, &(0x7f0000003b40)="52929532ed3e1d5c425a8667ed710a3db48c4130ae7ad97cbd51058b0f933847b905eab801a042a6cde519d4e4451517aba7cf89f88019d01d842ca52d3d8702708dde14f7935fe64c488f3221b9ceb1e3173e19489bd8be1e6d24bb38fc2b0ce85a6e1c6305dea2e22ad09a8040f99530166a12072071dce8f7fe001d4a5f190b2e4cb4795c6fdd2e8df1eef88e408b320869585f7ec60acd7412f824a4e3c33a517a816f95d02b9c13311d3ebbaa03e5e1e0ec81c803", 0xb7, 0x5}) (async) bind$can_raw(r14, &(0x7f0000003c40), 0x10) (async) ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000003c80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000003dc0)={0x28, 0x5, r15, 0x0, &(0x7f0000003cc0)="7a14aa3167406d40f9ccad92cd517ee0a0643a5dd16f055c49b33bc343d34ea9ef43c4bffe37da7360eb14832620bbe1bba755b265a51e8d52ae9a51edddb009ca6347c3493eb7979dd2f0edb5662807f81c493c94b0947b64aea6de7e63d248370e7949fc85b2ef81c0f41d8c10e7387ac03ad2477628879a81815a852f76aa4307bd19bff43b1e9e78e9aa5488a542eb881c480ab4e9965d99f572ba0f18cab35e012a3cbc60da9d9f839b515eb517ce784c5b4d02c0356aae4abf0eb5b64e15dcab05481caadd3c89d840c9c09b0c590f4f9ede848b05c505323262106c0706be2c9876a243", 0xe7, 0x1f}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r13, 0x3b88, &(0x7f0000003e00)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000003f00)={0x28, 0x1, r16, 0x0, &(0x7f0000003e40)="a75fa7bdf70af3cb25a57a81fd2214780047fb56a6f68ed3609616c626e2449f3630442aff1a8e55a82eeb9e8308ba907ebc24ccfeee0bf04fcb4c849dfd392d2f99154d781f24aca507f8bd39e55a6799d60a1ae2511fb11c32f01478e58952c6b9d6b77a91542d644516d1f07c607d78155c415b7fc6977130d646333b88d6e9dc7968c4cbb570acc4168356e21c7c2e56fd79c87f52c3239e2657e4fbfad9e95b2a8496d59baea739b92433327d2bfd302d", 0xb3, 0x3}) (async) writev(r5, &(0x7f0000003fc0)=[{&(0x7f0000003f40)="d5eee8c1d26bbf7b0c127df3be9473be9518d65f653cf3a2431756840983c95e43f6f4d45ab29e5924d009f1b5674701ab9b9252b9af0bc93d463b95de4ad93876eb4d47b03655a9ba80ec6bfca2b09d2f558d9721bdc16643", 0x59}], 0x1) (async) r17 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r17, 0x3b88, &(0x7f0000004040)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r11, 0x3b87, &(0x7f0000004080)={0x18, 0x1, 0x0, 0x0, r15, 0x2}) 00:22:56 executing program 1: setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) 00:22:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\r'], 0x1, 0x74e, &(0x7f0000000840)="$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") syz_io_uring_setup(0x3db9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000003c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) [ 1379.839083][ T3622] warn_alloc: 3 callbacks suppressed [ 1379.839455][ T3622] syz-executor.1: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 1379.889171][ T3622] CPU: 1 PID: 3622 Comm: syz-executor.1 Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1379.890842][ T3622] Hardware name: riscv-virtio,qemu (DT) [ 1379.892129][ T3622] Call Trace: [ 1379.893621][ T3622] [] dump_backtrace+0x2e/0x3c [ 1379.895378][ T3622] [] show_stack+0x34/0x40 [ 1379.897383][ T3622] [] dump_stack_lvl+0xe0/0x14c [ 1379.898827][ T3622] [] dump_stack+0x1c/0x24 [ 1379.900443][ T3622] [] warn_alloc+0x168/0x22c [ 1379.902713][ T3622] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1379.904947][ T3622] [] bpf_jit_alloc_exec+0x46/0x52 [ 1379.906460][ T3622] [] bpf_jit_binary_alloc+0x96/0x13c [ 1379.908173][ T3622] [] bpf_int_jit_compile+0x886/0xaa6 [ 1379.910110][ T3622] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1379.911846][ T3622] [] bpf_prog_load+0xcb4/0x12b0 [ 1379.914380][ T3622] [] __sys_bpf+0x622/0x31d2 [ 1379.916047][ T3622] [] sys_bpf+0x28/0x36 [ 1379.917712][ T3622] [] ret_from_syscall+0x0/0x2 [ 1379.974840][ T3622] Mem-Info: [ 1379.976455][ T3622] active_anon:61172 inactive_anon:59 isolated_anon:0 [ 1379.976455][ T3622] active_file:0 inactive_file:7209 isolated_file:0 [ 1379.976455][ T3622] unevictable:768 dirty:10 writeback:0 [ 1379.976455][ T3622] slab_reclaimable:5409 slab_unreclaimable:23463 [ 1379.976455][ T3622] mapped:8762 shmem:847 pagetables:319 [ 1379.976455][ T3622] sec_pagetables:0 bounce:0 [ 1379.976455][ T3622] kernel_misc_reclaimable:0 [ 1379.976455][ T3622] free:197225 free_pcp:891 free_cma:4096 [ 1379.997529][ T3622] Node 0 active_anon:244688kB inactive_anon:236kB active_file:0kB inactive_file:28836kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:35048kB dirty:40kB writeback:0kB shmem:3388kB writeback_tmp:0kB kernel_stack:5408kB pagetables:1276kB sec_pagetables:0kB all_unreclaimable? no [ 1380.001304][ T3622] Node 0 DMA32 free:788900kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:244688kB inactive_anon:236kB active_file:0kB inactive_file:28836kB unevictable:3072kB writepending:40kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:1976kB free_cma:16384kB [ 1380.046182][ T3622] lowmem_reserve[]: 0 0 0 [ 1380.120860][ T3622] Node 0 DMA32: 137*4kB (ME) 274*8kB (UE) 137*16kB (UME) 11*32kB (UME) 4*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (M) 1*1024kB (E) 3*2048kB (MC) 189*4096kB (UMC) = 788900kB [ 1380.245587][ T3622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.261053][ T3622] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1380.328230][ T3622] 8056 total pagecache pages [ 1380.370616][ T3622] 0 pages in swap cache [ 1380.384430][ T3622] Free swap = 0kB [ 1380.406167][ T3622] Total swap = 0kB [ 1380.408797][ T3622] 523776 pages RAM [ 1380.410000][ T3622] 0 pages HighMem/MovableOnly [ 1380.411309][ T3622] 184025 pages reserved [ 1380.490776][ T3622] 4096 pages cma reserved 00:23:01 executing program 1: setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) [ 1384.148844][ T3623] loop0: detected capacity change from 0 to 2048 [ 1384.326569][ T3623] ext4: Unknown parameter '' 00:23:05 executing program 1: setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async) preadv(r1, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) (async) [ 1387.296458][ T27] audit: type=1800 audit(1386.520:2): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=635 res=0 errno=0 00:23:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\r'], 0x1, 0x74e, &(0x7f0000000840)="$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") syz_io_uring_setup(0x3db9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000003c0)=0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) 00:23:08 executing program 1: setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) [ 1392.027416][ T3637] warn_alloc: 2 callbacks suppressed [ 1392.027772][ T3637] syz-executor.1: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 1392.056868][ T3637] CPU: 0 PID: 3637 Comm: syz-executor.1 Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1392.058574][ T3637] Hardware name: riscv-virtio,qemu (DT) [ 1392.059582][ T3637] Call Trace: [ 1392.060482][ T3637] [] dump_backtrace+0x2e/0x3c [ 1392.061983][ T3637] [] show_stack+0x34/0x40 [ 1392.063529][ T3637] [] dump_stack_lvl+0xe0/0x14c [ 1392.065031][ T3637] [] dump_stack+0x1c/0x24 [ 1392.066614][ T3637] [] warn_alloc+0x168/0x22c [ 1392.068123][ T3637] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1392.069918][ T3637] [] bpf_jit_alloc_exec+0x46/0x52 [ 1392.071495][ T3637] [] bpf_jit_binary_alloc+0x96/0x13c [ 1392.073607][ T3637] [] bpf_int_jit_compile+0x886/0xaa6 [ 1392.075804][ T3637] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1392.077084][ T3637] [] bpf_prog_load+0xcb4/0x12b0 [ 1392.078430][ T3637] [] __sys_bpf+0x622/0x31d2 [ 1392.079554][ T3637] [] sys_bpf+0x28/0x36 [ 1392.080718][ T3637] [] ret_from_syscall+0x0/0x2 [ 1392.254274][ T3637] Mem-Info: [ 1392.255685][ T3637] active_anon:61181 inactive_anon:157 isolated_anon:0 [ 1392.255685][ T3637] active_file:0 inactive_file:7215 isolated_file:0 [ 1392.255685][ T3637] unevictable:768 dirty:13 writeback:0 [ 1392.255685][ T3637] slab_reclaimable:5422 slab_unreclaimable:23880 [ 1392.255685][ T3637] mapped:8750 shmem:935 pagetables:318 [ 1392.255685][ T3637] sec_pagetables:0 bounce:0 [ 1392.255685][ T3637] kernel_misc_reclaimable:0 [ 1392.255685][ T3637] free:196619 free_pcp:962 free_cma:4096 [ 1392.260905][ T3637] Node 0 active_anon:244724kB inactive_anon:628kB active_file:0kB inactive_file:28860kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:35000kB dirty:52kB writeback:0kB shmem:3740kB writeback_tmp:0kB kernel_stack:5440kB pagetables:1272kB sec_pagetables:0kB all_unreclaimable? no [ 1392.325274][ T3637] Node 0 DMA32 free:786476kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:244724kB inactive_anon:628kB active_file:0kB inactive_file:28860kB unevictable:3072kB writepending:52kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3832kB local_pcp:1952kB free_cma:16384kB [ 1392.329365][ T3637] lowmem_reserve[]: 0 0 0 [ 1392.374991][ T3637] Node 0 DMA32: 143*4kB (UME) 312*8kB (UME) 133*16kB (UM) 1*32kB (M) 7*64kB (UME) 4*128kB (UE) 2*256kB (E) 1*512kB (M) 1*1024kB (E) 4*2048kB (UMC) 188*4096kB (MC) = 786476kB [ 1392.418859][ T3637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1392.420766][ T3637] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1392.464741][ T3637] 8171 total pagecache pages [ 1392.466051][ T3637] 0 pages in swap cache [ 1392.467027][ T3637] Free swap = 0kB [ 1392.467964][ T3637] Total swap = 0kB [ 1392.469402][ T3637] 523776 pages RAM [ 1392.470675][ T3637] 0 pages HighMem/MovableOnly [ 1392.526041][ T3637] 184025 pages reserved [ 1392.527732][ T3637] 4096 pages cma reserved [ 1394.547332][ T3636] loop0: detected capacity change from 0 to 2048 00:23:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0x100bfaa, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x541b) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xb9, 0x80000) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x541b) sendfile(r4, r3, 0x0, 0x100000004) sendfile(r0, r0, 0x0, 0x100bfab) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x541b) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000100)={0x1, 0x8}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x4}}, 0x18) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 1394.966878][ T3636] ext4: Unknown parameter '' [ 1396.114368][ T27] audit: type=1800 audit(1395.340:3): pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=641 res=0 errno=0 00:23:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\r'], 0x1, 0x74e, &(0x7f0000000840)="$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") (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\r'], 0x1, 0x74e, &(0x7f0000000840)="$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") syz_io_uring_setup(0x3db9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000003c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) [ 1396.944906][ T27] audit: type=1800 audit(1396.170:4): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 [ 1400.117837][ T27] audit: type=1800 audit(1399.350:5): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=641 res=0 errno=0 00:23:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0x100bfaa, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x541b) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xb9, 0x80000) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x541b) sendfile(r4, r3, 0x0, 0x100000004) sendfile(r0, r0, 0x0, 0x100bfab) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x541b) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000100)={0x1, 0x8}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x4}}, 0x18) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0x100bfaa, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(r2, 0x541b) (async) syz_open_dev$loop(&(0x7f00000000c0), 0xb9, 0x80000) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(r4, 0x541b) (async) sendfile(r4, r3, 0x0, 0x100000004) (async) sendfile(r0, r0, 0x0, 0x100bfab) (async) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(r5, 0x541b) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000100)={0x1, 0x8}) (async) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) (async) [ 1402.107764][ T27] audit: type=1800 audit(1401.340:6): pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 00:23:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0x100bfaa, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x541b) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xb9, 0x80000) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x541b) sendfile(r4, r3, 0x0, 0x100000004) sendfile(r0, r0, 0x0, 0x100bfab) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x541b) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000100)={0x1, 0x8}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x4}}, 0x18) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 1404.073342][ T27] audit: type=1800 audit(1403.300:7): pid=3654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=641 res=0 errno=0 00:23:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0x100bfaa, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x541b) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xb9, 0x80000) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x541b) sendfile(r4, r3, 0x0, 0x100000004) (async) sendfile(r4, r3, 0x0, 0x100000004) sendfile(r0, r0, 0x0, 0x100bfab) (async) sendfile(r0, r0, 0x0, 0x100bfab) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x541b) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000100)={0x1, 0x8}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x4}}, 0x18) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 1407.214237][ T27] audit: type=1800 audit(1406.440:8): pid=3659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 [ 1407.259533][ T27] audit: type=1800 audit(1406.490:9): pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 00:23:28 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "dcb6d0fec848186a5768e5d905000064e55f41414f00"}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000600)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r8, 0x0, r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r7, 0x29, 0x4, 0x4, 0x3, 0x30, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0xf800, 0x8000, 0x7, 0x7fffffff}}) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x8000, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="2e3f7b2612d5ddc74978a7f841259e99e51a696076303f885d3f6a1c1d51bca346ac16107927dd7d3688f38644", 0x2d}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}, 0x0) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000005c0)={0x0, 'ip6gre0\x00', {0x1}, 0x9}) sendmsg$sock(r9, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000007c0)="fe17da71de1b757365a36f16e8304e82d660cc34619079b0031eb4f507a5d427135bc46d21b5ffa01a593bb83b7476fdb7fab06efdbef828741b82c46d1e139ad483455d964e14da35c046f29e2f05c00a365c4cc4b93463aacf616deb12ea8a269dac722666e835fbc4745af8e6e2c7a5836ce5c54ec41b0d32ea743d6f3a093843149faafbd600155ad1190df1d79777a6e6bb37ec4374d2f5d94b5cf175f99b3003c29cdddab8ceca2d5132e4bda938bdaada33d6ad824663a19cfae62080", 0xc0}], 0x1}, 0x4000000) 00:23:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1410.830350][ T3664] xt_connbytes: Forcing CT accounting to be enabled [ 1412.636131][ T3667] ================================================================== [ 1412.637447][ T3667] BUG: KASAN: global-out-of-bounds in memcmp+0x2a/0x6c [ 1412.639209][ T3667] Read of size 1 at addr ffffffff85d8d8c0 by task syz-executor.0/3667 [ 1412.640278][ T3667] [ 1412.641074][ T3667] CPU: 0 PID: 3667 Comm: syz-executor.0 Tainted: G W 6.2.0-rc1-syzkaller #0 [ 1412.642972][ T3667] Hardware name: riscv-virtio,qemu (DT) [ 1412.644261][ T3667] Call Trace: [ 1412.645289][ T3667] [] dump_backtrace+0x2e/0x3c [ 1412.646257][ T3667] [] show_stack+0x34/0x40 [ 1412.647166][ T3667] [] dump_stack_lvl+0xe0/0x14c [ 1412.648263][ T3667] [] print_report+0x1e4/0x4c0 [ 1412.649813][ T3667] [] kasan_report+0xb8/0xe6 [ 1412.651435][ T3667] [] __asan_load1+0x62/0x7a [ 1412.653131][ T3667] [] memcmp+0x2a/0x6c [ 1412.654542][ T3667] [] __hw_addr_add_ex+0xf6/0x3f0 [ 1412.655402][ T3667] [] dev_mc_add+0x7c/0xc4 [ 1412.656296][ T3667] [] mrp_init_applicant+0xc2/0x3a0 [ 1412.657305][ T3667] [] vlan_mvrp_init_applicant+0x26/0x30 [ 1412.658324][ T3667] [] register_vlan_dev+0x140/0x578 [ 1412.659290][ T3667] [] vlan_ioctl_handler+0x7f8/0xb76 [ 1412.660062][ T3667] [] sock_ioctl+0x1ac/0x650 [ 1412.660884][ T3667] [] sys_ioctl+0x112/0x14c [ 1412.661633][ T3667] [] ret_from_syscall+0x0/0x2 [ 1412.662376][ T3667] [ 1412.662852][ T3667] The buggy address belongs to the variable: [ 1412.663375][ T3667] vlan_mrp_app+0x60/0x2060 [ 1412.664106][ T3667] [ 1412.667633][ T3667] The buggy address belongs to the physical page: [ 1412.669571][ T3667] page:ff1c00000217e340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x85f8d [ 1412.671040][ T3667] flags: 0xffe000000001000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 1412.673977][ T3667] raw: 0ffe000000001000 ff1c00000217e348 ff1c00000217e348 0000000000000000 [ 1412.675256][ T3667] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1412.676414][ T3667] page dumped because: kasan: bad access detected [ 1412.677471][ T3667] page_owner info is not present (never set?) [ 1412.678937][ T3667] [ 1412.679596][ T3667] Memory state around the buggy address: [ 1412.680917][ T3667] ffffffff85d8d780: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 1412.682798][ T3667] ffffffff85d8d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1412.684564][ T3667] >ffffffff85d8d880: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 1412.685559][ T3667] ^ [ 1412.686575][ T3667] ffffffff85d8d900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1412.688295][ T3667] ffffffff85d8d980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1412.689440][ T3667] ================================================================== [ 1412.691285][ T3667] Disabling lock debugging due to kernel taint 00:23:32 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "dcb6d0fec848186a5768e5d905000064e55f41414f00"}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000600)=0x2, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r8, 0x0, r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r7, 0x29, 0x4, 0x4, 0x3, 0x30, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0xf800, 0x8000, 0x7, 0x7fffffff}}) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x8000, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="2e3f7b2612d5ddc74978a7f841259e99e51a696076303f885d3f6a1c1d51bca346ac16107927dd7d3688f38644", 0x2d}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}, 0x0) (async) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000005c0)={0x0, 'ip6gre0\x00', {0x1}, 0x9}) (async) sendmsg$sock(r9, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000007c0)="fe17da71de1b757365a36f16e8304e82d660cc34619079b0031eb4f507a5d427135bc46d21b5ffa01a593bb83b7476fdb7fab06efdbef828741b82c46d1e139ad483455d964e14da35c046f29e2f05c00a365c4cc4b93463aacf616deb12ea8a269dac722666e835fbc4745af8e6e2c7a5836ce5c54ec41b0d32ea743d6f3a093843149faafbd600155ad1190df1d79777a6e6bb37ec4374d2f5d94b5cf175f99b3003c29cdddab8ceca2d5132e4bda938bdaada33d6ad824663a19cfae62080", 0xc0}], 0x1}, 0x4000000) 00:23:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) (async) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:33 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "dcb6d0fec848186a5768e5d905000064e55f41414f00"}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000600)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, &(0x7f0000004440)=[{&(0x7f0000000100)=""/146, 0x92}], 0x1, 0x6, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r8, 0x0, r8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r7}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r7, 0x29, 0x4, 0x4, 0x3, 0x30, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0xf800, 0x8000, 0x7, 0x7fffffff}}) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x8000, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="2e3f7b2612d5ddc74978a7f841259e99e51a696076303f885d3f6a1c1d51bca346ac16107927dd7d3688f38644", 0x2d}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}, 0x0) (async) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000005c0)={0x0, 'ip6gre0\x00', {0x1}, 0x9}) (async) sendmsg$sock(r9, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000007c0)="fe17da71de1b757365a36f16e8304e82d660cc34619079b0031eb4f507a5d427135bc46d21b5ffa01a593bb83b7476fdb7fab06efdbef828741b82c46d1e139ad483455d964e14da35c046f29e2f05c00a365c4cc4b93463aacf616deb12ea8a269dac722666e835fbc4745af8e6e2c7a5836ce5c54ec41b0d32ea743d6f3a093843149faafbd600155ad1190df1d79777a6e6bb37ec4374d2f5d94b5cf175f99b3003c29cdddab8ceca2d5132e4bda938bdaada33d6ad824663a19cfae62080", 0xc0}], 0x1}, 0x4000000) 00:23:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) (async) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:38 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:41 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:42 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1424.199628][ T3747] fuse: Bad value for 'fd' 00:23:43 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1425.600882][ T3752] fuse: Bad value for 'fd' 00:23:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:45 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) [ 1426.196552][ T3755] fuse: Bad value for 'fd' 00:23:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1426.466286][ T3757] fuse: Bad value for 'fd' 00:23:45 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) [ 1426.959641][ T3759] fuse: Bad value for 'fd' 00:23:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:46 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) [ 1428.054138][ T3763] fuse: Bad value for 'fd' [ 1428.060707][ T3765] dhcpcd: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1428.080125][ T3765] CPU: 1 PID: 3765 Comm: dhcpcd Tainted: G B W 6.2.0-rc1-syzkaller #0 [ 1428.081405][ T3765] Hardware name: riscv-virtio,qemu (DT) [ 1428.082309][ T3765] Call Trace: [ 1428.083442][ T3765] [] dump_backtrace+0x2e/0x3c [ 1428.084853][ T3765] [] show_stack+0x34/0x40 [ 1428.086029][ T3765] [] dump_stack_lvl+0xe0/0x14c [ 1428.087316][ T3765] [] dump_stack+0x1c/0x24 [ 1428.088607][ T3765] [] warn_alloc+0x168/0x22c [ 1428.089860][ T3765] [] __vmalloc_node_range+0xb6c/0xdb4 [ 1428.091194][ T3765] [] bpf_jit_alloc_exec+0x46/0x52 [ 1428.093047][ T3765] [] bpf_jit_binary_alloc+0x96/0x13c [ 1428.094393][ T3765] [] bpf_int_jit_compile+0x886/0xaa6 [ 1428.095649][ T3765] [] bpf_prog_select_runtime+0x1a2/0x22e [ 1428.096958][ T3765] [] bpf_migrate_filter+0x258/0x2be [ 1428.098288][ T3765] [] bpf_prepare_filter+0x10e/0x1b4 [ 1428.099533][ T3765] [] __get_filter+0x148/0x1a0 [ 1428.100768][ T3765] [] sk_attach_filter+0x22/0x11a [ 1428.101900][ T3765] [] sk_setsockopt+0x144e/0x270c [ 1428.103701][ T3765] [] sock_setsockopt+0x48/0x58 [ 1428.104988][ T3765] [] __sys_setsockopt+0x3f0/0x418 [ 1428.106098][ T3765] [] sys_setsockopt+0x3a/0x4c [ 1428.107242][ T3765] [] ret_from_syscall+0x0/0x2 [ 1428.191101][ T3765] Mem-Info: [ 1428.199582][ T3765] active_anon:53275 inactive_anon:63 isolated_anon:0 [ 1428.199582][ T3765] active_file:0 inactive_file:7266 isolated_file:0 [ 1428.199582][ T3765] unevictable:768 dirty:26 writeback:0 [ 1428.199582][ T3765] slab_reclaimable:5561 slab_unreclaimable:23697 [ 1428.199582][ T3765] mapped:8801 shmem:891 pagetables:319 [ 1428.199582][ T3765] sec_pagetables:0 bounce:0 [ 1428.199582][ T3765] kernel_misc_reclaimable:0 [ 1428.199582][ T3765] free:204549 free_pcp:814 free_cma:4096 [ 1428.224477][ T3765] Node 0 active_anon:213100kB inactive_anon:252kB active_file:0kB inactive_file:29064kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:35204kB dirty:104kB writeback:0kB shmem:3564kB writeback_tmp:0kB kernel_stack:5488kB pagetables:1276kB sec_pagetables:0kB all_unreclaimable? no [ 1428.227622][ T3765] Node 0 DMA32 free:818196kB boost:0kB min:4656kB low:6012kB high:7368kB reserved_highatomic:0KB active_anon:213100kB inactive_anon:252kB active_file:0kB inactive_file:29064kB unevictable:3072kB writepending:104kB present:2095104kB managed:1359004kB mlocked:0kB bounce:0kB free_pcp:3328kB local_pcp:2272kB free_cma:16384kB [ 1428.230436][ T3765] lowmem_reserve[]: 0 0 0 ps_bpf_start_bpf: bpf_open: Unknown error 524 [ 1428.257008][ T3765] Node 0 DMA32: 415*4kB (ME) 597*8kB (UME) 335*16kB (UME) 68*32kB (UME) 44*64kB (UME) 25*128kB (UME) 12*256kB (UME) 9*512kB (ME) 6*1024kB (UM) 7*2048kB (MC) 188*4096kB (UMC) = 818196kB [ 1428.277346][ T3765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.278485][ T3765] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1428.279541][ T3765] 8157 total pagecache pages [ 1428.281044][ T3765] 0 pages in swap cache ps_root_recvmsg: Unknown error 524 [ 1428.307018][ T3765] Free swap = 0kB [ 1428.308519][ T3765] Total swap = 0kB [ 1428.309259][ T3765] 523776 pages RAM [ 1428.309984][ T3765] 0 pages HighMem/MovableOnly [ 1428.310680][ T3765] 184025 pages reserved [ 1428.311410][ T3765] 4096 pages cma reserved ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 00:23:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:48 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) ps_bpf_start_bpf: bpf_open: Unknown error 524 00:23:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) ps_root_recvmsg: Unknown error 524 00:23:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) ps_bpf_start_bpf: bpf_open: Unknown error 524 ps_root_recvmsg: Unknown error 524 00:23:49 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:50 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:23:51 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:23:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1433.357191][ T3798] fuse: Bad value for 'fd' 00:23:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1434.376222][ T3803] fuse: Bad value for 'fd' 00:23:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) [ 1434.945402][ T3807] fuse: Bad value for 'fd' 00:23:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) 00:23:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffeab) [ 1441.228412][ T3839] fuse: Bad value for 'fd' 00:24:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) [ 1442.307755][ T3844] fuse: Bad value for 'fd' VM DIAGNOSIS: 08:11:55 Registers: info registers vcpu 0 pc ffffffff80ee17ec mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff8011f604 sepc ffffffff83454114 mcause 8000000000000003 scause 8000000000000001 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80ee17ec x2/sp ff20000008be71d0 x3/gp ffffffff85efe540 x4/tp ff6000000b870000 x5/t0 502030203a555043 x6/t1 00000000000f0000 x7/t2 49502030203a5550 x8/s0 ff20000008be7200 x9/s1 ffffffff87df8760 x10/a0 ffffffff87df87a8 x11/a1 ff20000000259000 x12/a2 1ffffffff0fbf0f5 x13/a3 ffffffff80ee17ec x14/a4 0000000000000000 x15/a5 ffffffff87df87a8 x16/a6 ffffffff87df8851 x17/a7 0000000000000204 x18/s2 ff20000000259000 x19/s3 0000000000000020 x20/s4 ffffffff87df8760 x21/s5 ffffffff80ee17ac x22/s6 0000000000000000 x23/s7 ffffffff87bb83b1 x24/s8 ffffffff87df87b8 x25/s9 0000000000000010 x26/s10 0000000000000010 x27/s11 0000000000000001 x28/t3 ffffffff80128762 x29/t4 fffffffef0fbf0ec x30/t5 fffffffef0fbf0ed x31/t6 ffffffff87bb8357 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff8011dd3c mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff80005e88 mepc ffffffff80005e88 sepc ffffffff80005f64 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff83443768 x2/sp ff200000046a7c90 x3/gp ffffffff85efe540 x4/tp ff60000011c13100 x5/t0 0000000000046000 x6/t1 00000000000f0000 x7/t2 00ffffffd4ce1197 x8/s0 ff200000046a7ca0 x9/s1 0000000000001000 x10/a0 0000000000000120 x11/a1 ffffffffffffffff x12/a2 1fec000002382621 x13/a3 ffffffff801625a8 x14/a4 0000000000010000 x15/a5 0000000000000000 x16/a6 0000000000000000 x17/a7 0000000000010001 x18/s2 ff6000000822b828 x19/s3 ffffffff8517b960 x20/s4 0000000000000000 x21/s5 ffffffff83843848 x22/s6 ffffffffffffffff x23/s7 0000000000000012 x24/s8 ffffffff87c080e0 x25/s9 00ffffffd4ce1460 x26/s10 00000000000001f4 x27/s11 0000000000000007 x28/t3 fffffffff3f3f300 x29/t4 ffffffff801244de x30/t5 1fe40000008d4f50 x31/t6 0033db2580000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000