last executing test programs: 19.924045206s ago: executing program 3 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) 19.923895088s ago: executing program 3 (id=1614): openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f00000059c0)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20004040) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04060006048bf73aab980ad9524950902ec628dd93d77db265f65382de8ed429806dfd4f0b0b22fca98973edf36c7140cb31a866a8969538f88725074409000000ee85d1b3bb05a94e7f5e5aeb9f8f8dc1a17d0579396a81cc3071b22798015b9503e78c399efe1f90c8c1832517bd28a869e20000"], 0x7) 19.873887923s ago: executing program 3 (id=1615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x632}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 19.00343259s ago: executing program 3 (id=1621): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x11, &(0x7f00000002c0)="1a00000002000000", 0x8) setfsuid(0x0) 18.943988561s ago: executing program 3 (id=1622): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x185586, 0x1f00) 18.742722485s ago: executing program 1 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000250400000008000c000a01010200"/28], 0x1c}}, 0x4000804) r1 = socket(0x10, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2}) fcntl$setsig(r7, 0xa, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000", @ANYRESOCT=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) splice(r9, 0x0, r11, 0x0, 0x25a5, 0xa) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) sendmmsg$unix(r6, &(0x7f00000001c0), 0x0, 0x40015) 17.823545555s ago: executing program 1 (id=1627): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ext2\x00', 0x0, &(0x7f0000000140)='grpquota') 17.823068879s ago: executing program 1 (id=1628): syz_80211_inject_frame(0x0, 0x0, 0x32) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x100}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x1, 0xe, {{0x5b, 0x4, 0x0, 0x3, 0x16c, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xa, 0x1, 0x1, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x1000}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x5, [{@private=0xa010102, 0x3}]}, @generic={0x89, 0xa, "20a5f5b93002286e"}, @timestamp={0x44, 0x14, 0x4c, 0x0, 0xb, [0x0, 0x6f7790bc, 0x3a, 0xc5]}, @cipso={0x86, 0x4c, 0x3, [{0x2, 0xb, "69fb88983338f5aae9"}, {0x5, 0x5, "983a76"}, {0x1, 0x9, "9f5e5d6367f3a6"}, {0x1, 0x5, "9c6086"}, {0x7, 0xa, "58499981e7d4985c"}, {0x6, 0x4, "1249"}, {0x5, 0x7, "5044fc6cbe"}, {0x7, 0x6, "0b2142a3"}, {0x0, 0x8, "ff6c30715389"}, {0x6, 0x5, "d5d603"}]}, @rr={0x7, 0xf, 0x4f, [@rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0x3, [0x8001]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0xf, [{@multicast2, 0x1}, {@rand_addr=0x64010102, 0xfffff803}, {@broadcast, 0x8}, {@broadcast, 0x5}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@private=0xa010101, 0x800}, {@empty, 0x101}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x63a}]}, @timestamp_prespec={0x44, 0x3c, 0x66, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@private=0xa010101, 0x7}, {@local, 0x5}, {@rand_addr=0x64010101, 0xfff}, {@multicast1, 0x6}, {@multicast1, 0xe}, {@loopback, 0x1}]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r8, @flow_dissector}, 0x94) getsockname$unix(r0, &(0x7f00000005c0)=@abs, &(0x7f0000000300)=0x6e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r9, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 17.239125858s ago: executing program 2 (id=1634): syslog(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}]}, 0x24}}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x20000) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) close(0x4) socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 17.143783821s ago: executing program 1 (id=1635): socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) truncate(0x0, 0x80000001) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 17.143115853s ago: executing program 2 (id=1636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0), 0x0}) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (fail_nth: 13) 16.743931583s ago: executing program 0 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000080)={0x8, 0x100028b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000ffff0000073501000008000085200000010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4040800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000180)=0xff, 0x4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 16.583910472s ago: executing program 0 (id=1638): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x20000) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) close(0x4) socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x1000000}) 16.583295358s ago: executing program 0 (id=1639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f, 0x0}, &(0x7f0000000400)=0x40) 16.493863665s ago: executing program 0 (id=1640): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x3, 0x7f, 0xd43}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}}, 0x0) pwritev(r5, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x240000c1) 16.047587765s ago: executing program 2 (id=1641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(r1, r1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000880)={0x581, "69bd14cc1d070ad5f5101f4a50cffbba89dc74f9f8a8281508b8468aaf7d96eca6ef4047514f602f0f7023cdbc4cd9dbd3aeb1f37651e61bfba7d09f8c042fe4ab6fc2f86b6d9b460572108293d8b3e5512809cf89fd16931714147b762a5803af0e5ab49865eed0105d535355549e483b1972b3f11d6c53ef20c278b8b771274137fba1d670b6897be8a450db7959207a6e5d55b8b3ec42c2843e980f3d020603d7ecb2d73a960e5241af1b4d20e51862b52314c5d9eec3d0daa468b25fd7d40bce40d94e932835ea881fe0b7bc1c4f6fd21e1a97b303bd1f5b53c171d76a3c922dd5cbe16d9301d0cba7e5680aa626c83cf4dadf109eba66cd491296df35b53fda48362ca2ad9c7dd7a37e788c7affbcfdbabc9fc8da3f6b3e199322a296a67766fa9af02fbfaf31d91f962a3db1e468100d0181f426ef5b472c07c55f691ec5330db9dbed7dcba7ea472688f456db7ec7c64077e8abd4d1397e0a8b0f45a417d3cd9797f2e8f1612f7236f141a04f09beb7585f570906567796c6fb42b4bc0606c0044a16d7fbfd0a2667065b8d20566569009e79435e7151b096848295da5cdcd68fff4ad0124c1c099678d041b24012df800eb15c306ff82d133d3c473d3cf9d8931673848add6fbcdccccccda4f52b82817bea21c7c03b789f5ac11a773950fe95e5b96ecdac79de1bf0f02186ddafa25383e1d3a316cec595816dffdc66a7495e89314967efaf917406785ee7cc5280e12ad37bf8fe5f91df47a0ee1ed2d7ef575ff5090941a4f890232ea3c4f5f0a01e180761c9cd9b7a7d146a086c77023f72e80a7d7f418ecebbfd5e359f0d35075a1412c1d79753a83d17acecbf999394e44881bea0e4f083cfd986cacf818bccc640bf08f1aaa7ba21b4882e473f490508a7c086197679455213d51e886bb7f937563132d2a3cea9b36b35403990195dd56e3ac048d181d3436f3767e60266ac5f8d15dde72661977fc1d0d4f1c09bc777e5fd826c8dc24c8368dc858257afaccab083c774aaa0e774943ef30fdcf0cd58f231739cb0648b5319b4e195e696a6b649d1fc3152ea11ee58f2f7245dc9617a8d1af026e4c6e912b66685629289bc0f3778f41a41931744d4dd4c69b60c2bce74520866811d40489c64f05df1f1f2870b63b32965946569678d6a35f2cabc818cab0931947480e288bb90d1a96bdc1f8387c5e34c8aa0659a33147579566c34fdc2af3fae3bd120ca91aca8bd545033ac22c129dffe84a671702d41357b25bdf5006f39cac93de55f656d96574c4a87fdcdafe261a3800ab27df3e3bb7871d524d4fcdabdeaf532a7c211be015659d5bd190e91814f8b5e53b4dc7fbad0fe435276073e17989789c16120ddaf77f327ceef03d8e4248947c61c998b8817b3f7e0887ec57fd107eecf215e4a7445f16cd23590e4ed60fb0fd5ae8f3d72bc26a50119e3484e5b8089be99a438373d4a702ce94a5f1f12d9274efda4c15b6a1dd382bc02d18afd70e410a2824295388ea6b8951ac8a2f9bd9b09b6db29aeef86d7407a315fa244af555a881447e4951d3f635f4e20ff590a024f8897f678f3ca6650cdeeb493deffa6ddf81be1c8fa37960778bbad9e401a19c1b8b07e80adabaf28b52b02ced78ea7d414352232d5993dc457c93cd44447514f67d2e49996bf33917b4df1702f5e7d69e71d0119c3d286e7e5ab942d65280cdf9382ab51953aa1577bbaf382051e65e51d835d0a86963f035a67b1e5d2ba4b12efa85f27b5809be755097a512a779d1de4a40443824f0a29135b2293298473240f5bee63d21a5fa6927d6166c1a46a473d9592a41e1cb4bbde010aa9e6db4159938b64d3feb4306dae56d7226b964104d47ffb700834cd564a31ad727172042204b15e33629180d82c32cb2d2d4dd650eb4bc1c055a6d0a93dab8349b332074751ad72114510aa59538532e6e96cc069d4ea2980350201df44e73047aa22d3842a61d1ee"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 15.90365569s ago: executing program 3 (id=1642): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000880)={0x581, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 15.368811897s ago: executing program 0 (id=1643): syz_80211_inject_frame(0x0, 0x0, 0x32) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x100}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x1, 0xe, {{0x5b, 0x4, 0x0, 0x3, 0x16c, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xa, 0x1, 0x1, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x1000}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x5, [{@private=0xa010102, 0x3}]}, @generic={0x89, 0xa, "20a5f5b93002286e"}, @timestamp={0x44, 0x14, 0x4c, 0x0, 0xb, [0x0, 0x6f7790bc, 0x3a, 0xc5]}, @cipso={0x86, 0x4c, 0x3, [{0x2, 0xb, "69fb88983338f5aae9"}, {0x5, 0x5, "983a76"}, {0x1, 0x9, "9f5e5d6367f3a6"}, {0x1, 0x5, "9c6086"}, {0x7, 0xa, "58499981e7d4985c"}, {0x6, 0x4, "1249"}, {0x5, 0x7, "5044fc6cbe"}, {0x7, 0x6, "0b2142a3"}, {0x0, 0x8, "ff6c30715389"}, {0x6, 0x5, "d5d603"}]}, @rr={0x7, 0xf, 0x4f, [@rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0x3, [0x8001]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0xf, [{@multicast2, 0x1}, {@rand_addr=0x64010102, 0xfffff803}, {@broadcast, 0x8}, {@broadcast, 0x5}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@private=0xa010101, 0x800}, {@empty, 0x101}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x63a}]}, @timestamp_prespec={0x44, 0x3c, 0x66, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@private=0xa010101, 0x7}, {@local, 0x5}, {@rand_addr=0x64010101, 0xfff}, {@multicast1, 0x6}, {@multicast1, 0xe}, {@loopback, 0x1}]}]}}}}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r10, @flow_dissector}, 0x94) getsockname$unix(r0, &(0x7f00000005c0)=@abs, &(0x7f0000000300)=0x6e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r11, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 15.143582456s ago: executing program 2 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x30000, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, '7'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 15.056156705s ago: executing program 2 (id=1645): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) close_range(r0, 0xffffffffffffffff, 0xb000200) 14.913653756s ago: executing program 2 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c94, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a0, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x241d}, @NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "47c2c46cb105d933da46616d72406f79bd5b5c7889fc2cc47f2ac639309271851c448875aec76eab011fc03ec2866416b2419cf959b70a6e8707bb052ce5a60e25b34e050ff1c46ff5575013f0ea051925240e6453552f2b019b"}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x6f}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4c}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x25}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a34, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "4b73491c8c0825a0257a72a20b2c83c296c430b2be4f3157d3c7cd27ce120752f1d4577d5932089d1cff6e0d32a3cb438e5141d5bf6a2df420727525c3a6d7df57c063cc203581ffe4ec7eff30590666dd9a8d1c86ac8acd75d422cdab999eb51f14b6f98909f62311d7c8baf93756fde11d308547f669594ad63e215a1448f15d9fd7b507b4f526abdd"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, {0x14c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5c, 0x6, 0x1, 0x0, "567684070f54605d73cf8e1df499e7ccadcf6747e89591b007fb66520cba82702020145d1795bab38b9d268bc1b316f0ee0e963d3969f0024f3bb502d33b7e42f26ac26e02ee8764a1ac92a4fbd08f8ea401b7ec0fd07c92"}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x138c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "55d03a1310b9a053694b1bc0503117e76243a1625cdb8acd378dff9e5a13c1d99ce94122125e97cfeecf094c1773ac0a9a9d540a51068e0e03205429247f5488ea946724005e40d233c4ee572124cc39f42388c1007e41e144d294afb005c9a34119f72065d2ab4db372"}, @NFTA_DATA_VALUE={0x52, 0x1, "0847a08be1c1f31789bb272a9cef04be77101c78c30820aa56772f3e699e56fae78b5d26e5732af1a06825488ebc61a3e8b56a72e089bbb00426b5ffe822df389e710e5380b977fda7499b58b060"}, @NFTA_DATA_VALUE={0xf8, 0x1, "e97ac2ef530ca7b36b66d19d2079d14af9798f377abe60877554efca40da21b7d628c13f15da1e6a76c8ec62dba215c6c0313bf8c33c340433dae0c8dfa5b5126e78aa023eb13b2246556432b52c0e5b6d250292b10922d1c704273e933f8e950b6e1a3b7cf40aa5dd64aaac2f0b29557d69a3f32f722bf6394d83c423cf811f4ba424fe61d74026a6eab399ed80c6c5b40c356e8b0e378bad98a9d3484884e534cf0c5fd5deb9605c806d108cd7aba8276039fe5a6df4e9760a1135659d0253177fe77ed83dd11818aa8541f7e0011fc8febd237d92f57131d461c5fdd613c2c89206ceed70f8b4ec90744eb2b931fcd52a77c4"}, @NFTA_DATA_VALUE={0xa5, 0x1, "cac89ae0c0e33754f864f7a743a6250fa1a9f1e64fd053300f7838fc830e978f2455c06cede26360cd8413a6c014c378182ac10fae7eefc39623c56204f118569297a20753bc376be7b03c9f9462ac27193b65c75c8d091a3d64681c5d37c6ef546b8eda62e013c547008f6b5e4240926015e14be55d50e4a559cccae4260772cb789e2820c1f2c10ecb713b1dfce0de1b51b17b44c2725001b809fdd69f208054"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "1dd0841ca8cf9142a9772b5e20fe4728c6c3e12b062651d6329c2a25891fb6496fe9dda29fa87361eb3c62256ff410ea7ce2248b85e03db38f093c09de724e16c6d5fc4eee9f1bfc65b1fd4887cb02a4471f5f31bb144b73ccc15cdc850136e679c0a3dd79a5c7bc7f104ec11f0b014cdd791407e29a91b671fb99e0ff8a11e6a14a1802139c08d8029e6c8c14867c74da249aa588276075153cb1a5f952a6d59bae63f9e85f54899e79e4ba6ef196"}, @NFTA_DATA_VALUE={0x5, 0x1, "85"}]}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "d3ad26f8fffd5ed3ae1265c0"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x24a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "8b1f0f4a29ad137d78782c80607e1ea9411500f851b5b9cfeb2dfaa732fa4d33333947330903cd4afb729cd1ea95f1d8c45908db5dba3178b7efcc30c3d08783f63fdf4dfb85f4f191cdb810c5fbcec037450a66d1705e6142daca86ff008f809cacc25d18dfb855d30c3c19a9d44be9cd24692ea8655f62a7ed1c24517562489552b58f5ea5bcb81263d2baf85e00d263b138cfcdea4363eee4d5578e41debd16246a"}, @NFTA_DATA_VALUE={0x1d, 0x1, "0a195ecfd27a017a578c2c20435b425e82ff906e2894d97a7a"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "1b363cadbd0a03b3bd34719acc2f5de92d"}]}, @NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "9c7b40f9b622e91d5f44800f9b24f0f3eceee400316421baa16fb299a8569bb15288195277ff1893f4a5fb8daa471511ea26aa7d10471628faa39d6d69aba7f6a33496ce5552c44669238c1560da5f516754e997c7212202efa6223a88e821cedfa6aee62eaa916344b1a61d5de1c58150ba8242b949494b7a9c3b7a782a6db8e01bac636eef31b2d0a349c157a8dadc18e3"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x210c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "f407f6e11ae6d3519dab84a2a3ed2d555a655b8402ab1755e09cdde767c9672bd73a7f788a343a6de2e71475a5736e8164431496d4336f7c441e486b60ef059dd0b5360dd8a86184cd3d07e2214185163949d68153c28aae79116837da5284d0d3dd0af00b358c97f6389058b0ff0e85fa4fe3b46f7dba2355488ac123c6ff7ca485066617d9a9e364fad3daaa95a325f3a128303c59e4b5f12fd292853a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}]}}}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "62737fa7c87d51fa3dc2ac46d6ede4cdcfeaa9705fcb12bcb4eeb0ad297447da4b4a94ed1226f07d1a9e6a5ccc6ef8fe53c013d159c0eff2e61ad9129db06419ecc640b1616bd50f0b74722f4cade01e004921dbfe0f81112ac2a06835f97e2645fa48bf796b2e23e15acd0b2cbbc11f5d52d4cc90f335410a22886e4386d668f59e12b84981420c95d336246329711eb8bc5021b876ef77f882455ed5954a9a54969c0072e295c4db37a1e29878012cf65bce40ca2f9a2b35124d40891c2022179a66aec789170ec9db47830c051cb0a6cdcafae615a1506c004f576e6d4d6ed4caefc92feb3f26a57a023365d68cf1d9ef96a34f6b20"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5d8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3d30}}, 0x0) 14.663855383s ago: executing program 1 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0xf000, &(0x7f0000000680)={&(0x7f00000000c0)={0x3c, r1, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}}, 0x0) 14.66335951s ago: executing program 1 (id=1648): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2, 0x0, 0x0, 0xf}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x8, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2e}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x4004, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x9a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x38, &(0x7f0000000440)=""/56, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x5, 0xe, 0x7fff}, 0x10, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[r5, r5, r5], &(0x7f0000000540)=[{0x0, 0x1, 0xd, 0xb}, {0x4, 0x1, 0x11, 0xa}, {0x2, 0x3, 0xf, 0xa}, {0x5, 0x3, 0x7, 0x8}, {0x4, 0x5, 0xb, 0x9}], 0x10, 0x5b}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000001540)={&(0x7f0000001580)=""/146, 0x92, 0x0, &(0x7f0000000280)=""/185, 0xb9}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a191445ebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c5101d32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000994b20cda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb110df586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x1, 0x84) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 13.903830309s ago: executing program 0 (id=1649): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x836114226d35bb22) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd63ee288604d4110000000000000000000000000000000001fe88000000000000000000000000010100190000000000000102000005020001000100088caa3d9fc34610b96650af8b7759466a9a2493ebb0be5ee44f28a4a0804da09125fe957a68658da34ba0d628d0084a0a4346259bae17d28eedcde583bbf68690bc7ae234ce95f0f8b30ce1bc4fad9abb4dfd951cf242f06c54e7dcb889084b7f1aa87d8e5f7c4b446e0baab9c896857b779c078b9bacdad243cd53aeec911192408f0ac93d2fb3238e813e4163000100000100000100c910ff020000000000000000000000000001c910fe80000000000000000000000000003a050200000000000000007332000000000000050200090740000000010e0608000180ffffffffffff00020000000000000900000000000000010000000000000004000000000000000100000000000000bd9b000000000000c2040000000481aee29af31e62dba058e676be61a35214a83e45a88d07ca8903436ebc981602622e85bea50f9eae419b18774c3587b040659ac014880220b5b36b3488eda1bf9ed6aa21223358a82cc44b035307d0bcb2b6a2db0a649da291555cf3ec2fc2f713b2bec5cfa0df2d7c855bbead7e29aa63aaa25d2007f4183a54aa8dc5dd4ff872088c0938554fdc1122308949fdfe6f5438f67f828d5fbbb8794af8a782598e9c869981a631d8fc9695444f569d4ca3040101018b26289fed7ee581029317cc63c72358cceb3358d820b4e6fc3873f03aeac5f034e32d356a87215c1cab0d9ec13038fa08adba99e57b0499b9754609f6e5066847a3bbdc26c4fba18ee5a742927752e14420e3630da4064e5ca15961b67c27ee1261d9cfa4f035a71b279a36707de16a54c7712e8e398c5bb9f135f5bb45b7b7d6a65ba97aefae2baec023fb0502000201000000000000008704040280100600fe880000000000000000000000000101fc0100000000000000000000000000001201000000000000000100c20400000005000000000000002c0b00eb0700000000005e43e32b4823f0b16b7717e86c8c10d005afd0466b509b56063f809ab742441c2d4e8fdaeaef0c9058658052103c876416d709d56ed8f561be9ac7c901a748ca954e2e144607100000000302020700ffffffffffffffffc204000010000000003b0404020028ff0320010000000000000000000000000001fc020000000000000000000000000001161200000000000001010008882bea1a6e009d20fedce2f1a969b258671059b4957836292c34338fe61d97751bbe2f0f74f23f6dc613ff0e724162510b1fddf7472ef528cc45f0366d0bae465019925cfd2b7684b2c782e03c01009158499080ef74c92e79f76790a866979bb57200e2b629fb8d0cbfbc2df77bbc50efe8bb21e22eeaa55b96713ba6e4a1dfb68f208c51dbdeb4aec204fffffff700000000004e224e2200ec9078820400018000000034065ad17fec7227d872a5324d38306e4711f6177cc8c1f6c585ea4d1f6ddd644f858273babc902c18361d993580db96c386cd893b9f3208c945f3bd37afe49804e59ebba7c07cc69ce76d85dfaa249c77b02f61dbc4265b7a7abd2cadd165afa8fc8911b16d66641fe65d5e0cd18e0d005fbfeda1817b6a79cbaabdbd1c38119b6c5b8e65eccd8ed3734693730f39c953af7daf23c8ac3ea934729589998c306b71221075c87cf661929145f9ee48161cb2ec24751e2d10c1ef56f23daa32c0a74cdc425d1cebbb0df7f4ef2ef60d516c8fd7786c1c67e944dcf48c"], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf25090000001c000180060001005dc50000080003000a01010008000300e0000002240006800600010002000000060005024e220000060005004e240000060001000a0000000800040000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x121600, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x4010, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 32 (id=1642): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000880)={0x581, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) kernel console output (not intermixed with test programs): 174.362809][ T8680] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 174.362829][ T8680] should_failslab+0xc2/0x120 [ 174.362839][ T8680] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 174.362857][ T8680] ? kasprintf+0xc7/0x100 [ 174.362869][ T8680] kvasprintf+0xbc/0x160 [ 174.362879][ T8680] ? __pfx_kvasprintf+0x10/0x10 [ 174.362889][ T8680] ? mark_held_locks+0x49/0x80 [ 174.362904][ T8680] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 174.362919][ T8680] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.362937][ T8680] kasprintf+0xc7/0x100 [ 174.362946][ T8680] ? __pfx_kasprintf+0x10/0x10 [ 174.362959][ T8680] ? __pfx_sta_info_cleanup+0x10/0x10 [ 174.362977][ T8680] ieee80211_alloc_led_names+0x86/0x420 [ 174.362996][ T8680] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 174.363010][ T8680] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 174.363034][ T8680] ? rcu_is_watching+0x12/0xc0 [ 174.363046][ T8680] ? trace_kmalloc+0x2b/0xd0 [ 174.363056][ T8680] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 174.363073][ T8680] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 174.363089][ T8680] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 174.363105][ T8680] ? __asan_memcpy+0x3c/0x60 [ 174.363121][ T8680] hwsim_new_radio_nl+0xb51/0x12c0 [ 174.363139][ T8680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.363160][ T8680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 174.363174][ T8680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 174.363191][ T8680] genl_family_rcv_msg_doit+0x206/0x2f0 [ 174.363205][ T8680] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.363218][ T8680] ? trace_cap_capable+0x18d/0x200 [ 174.363232][ T8680] ? bpf_lsm_capable+0x9/0x10 [ 174.363246][ T8680] ? security_capable+0x7e/0x260 [ 174.363256][ T8680] ? ns_capable+0xd7/0x110 [ 174.363269][ T8680] genl_rcv_msg+0x55c/0x800 [ 174.363283][ T8680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.363296][ T8680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.363314][ T8680] ? __lock_acquire+0x622/0x1c90 [ 174.363330][ T8680] netlink_rcv_skb+0x155/0x420 [ 174.363341][ T8680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.363355][ T8680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.363371][ T8680] ? netlink_deliver_tap+0x1ae/0xd30 [ 174.363392][ T8680] ? is_vmalloc_addr+0x86/0xa0 [ 174.363410][ T8680] genl_rcv+0x28/0x40 [ 174.363420][ T8680] netlink_unicast+0x58d/0x850 [ 174.363433][ T8680] ? __pfx_netlink_unicast+0x10/0x10 [ 174.363448][ T8680] netlink_sendmsg+0x8d1/0xdd0 [ 174.363461][ T8680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.363473][ T8680] ? __import_iovec+0x1dd/0x650 [ 174.363486][ T8680] ____sys_sendmsg+0xa95/0xc70 [ 174.363499][ T8680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.363510][ T8680] ? get_compat_msghdr+0x11a/0x170 [ 174.363534][ T8680] ___sys_sendmsg+0x134/0x1d0 [ 174.363551][ T8680] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.363573][ T8680] ? find_held_lock+0x2b/0x80 [ 174.363593][ T8680] __sys_sendmsg+0x16d/0x220 [ 174.363609][ T8680] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.363631][ T8680] ? rcu_is_watching+0x12/0xc0 [ 174.363644][ T8680] __do_fast_syscall_32+0x7c/0x3a0 [ 174.363662][ T8680] do_fast_syscall_32+0x32/0x80 [ 174.363679][ T8680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.363693][ T8680] RIP: 0023:0xf7f85579 [ 174.363701][ T8680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.363712][ T8680] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 174.363723][ T8680] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 174.363730][ T8680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.363736][ T8680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.363742][ T8680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.363748][ T8680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.363761][ T8680] [ 174.606099][ T8681] netlink: 'syz.2.691': attribute type 11 has an invalid length. [ 174.609427][ T8681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.691'. [ 175.483737][ T8746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.754076][ T8751] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 175.774037][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.874095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.876666][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.083625][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.265120][ T8741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.914295][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.917304][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.709'. [ 177.061909][ T8779] syzkaller1: entered promiscuous mode [ 177.063701][ T8779] syzkaller1: entered allmulticast mode [ 177.211884][ T8783] FAULT_INJECTION: forcing a failure. [ 177.211884][ T8783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.216013][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.3.712 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 177.216028][ T8783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.216035][ T8783] Call Trace: [ 177.216040][ T8783] [ 177.216044][ T8783] dump_stack_lvl+0x16c/0x1f0 [ 177.216064][ T8783] should_fail_ex+0x512/0x640 [ 177.216082][ T8783] _copy_to_user+0x32/0xd0 [ 177.216100][ T8783] simple_read_from_buffer+0xcb/0x170 [ 177.216116][ T8783] proc_fail_nth_read+0x197/0x270 [ 177.216130][ T8783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.216143][ T8783] ? rw_verify_area+0xcf/0x680 [ 177.216157][ T8783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.216169][ T8783] vfs_read+0x1e1/0xc60 [ 177.216185][ T8783] ? fdget_pos+0x2a2/0x370 [ 177.216202][ T8783] ? __pfx_vfs_read+0x10/0x10 [ 177.216215][ T8783] ? find_held_lock+0x2b/0x80 [ 177.216231][ T8783] ? __fget_files+0x20e/0x3c0 [ 177.216249][ T8783] ksys_read+0x12a/0x250 [ 177.216264][ T8783] ? __pfx_ksys_read+0x10/0x10 [ 177.216280][ T8783] ? rcu_is_watching+0x12/0xc0 [ 177.216293][ T8783] __do_fast_syscall_32+0x7c/0x3a0 [ 177.216311][ T8783] do_fast_syscall_32+0x32/0x80 [ 177.216328][ T8783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.216341][ T8783] RIP: 0023:0xf7f46579 [ 177.216350][ T8783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.216365][ T8783] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 177.216375][ T8783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 177.216382][ T8783] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 177.216388][ T8783] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 177.216394][ T8783] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 177.216400][ T8783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.216413][ T8783] [ 177.386701][ T8794] mkiss: ax0: crc mode is auto. [ 177.623690][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 177.623706][ T40] audit: type=1326 audit(1752295721.629:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.627799][ T8796] FAULT_INJECTION: forcing a failure. [ 177.627799][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.633961][ T40] audit: type=1326 audit(1752295721.629:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.638591][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.0.715 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 177.638607][ T8796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.638614][ T8796] Call Trace: [ 177.638617][ T8796] [ 177.638622][ T8796] dump_stack_lvl+0x16c/0x1f0 [ 177.638642][ T8796] should_fail_ex+0x512/0x640 [ 177.638660][ T8796] copy_fpstate_to_sigframe+0x854/0xaf0 [ 177.638674][ T8796] ? do_raw_spin_lock+0x12c/0x2b0 [ 177.638694][ T8796] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 177.638711][ T8796] ? x86_task_fpu+0x5f/0x90 [ 177.638724][ T8796] get_sigframe+0x4a8/0x9c0 [ 177.638738][ T8796] ? __pfx_get_sigframe+0x10/0x10 [ 177.638749][ T8796] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 177.638767][ T8796] ? _raw_spin_unlock_irq+0x29/0x50 [ 177.638781][ T8796] ? siginfo_layout+0x177/0x290 [ 177.638796][ T8796] ia32_setup_frame+0xe2/0xa50 [ 177.638812][ T8796] ? find_held_lock+0x2b/0x80 [ 177.638823][ T8796] ? __pfx_ia32_setup_frame+0x10/0x10 [ 177.638839][ T8796] ? __lock_acquire+0xb8a/0x1c90 [ 177.638856][ T8796] arch_do_signal_or_restart+0x59c/0x790 [ 177.638869][ T8796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.638885][ T8796] ? __might_fault+0x13b/0x190 [ 177.638905][ T8796] exit_to_user_mode_loop+0x84/0x110 [ 177.638922][ T8796] __do_fast_syscall_32+0x2ac/0x3a0 [ 177.638940][ T8796] do_fast_syscall_32+0x32/0x80 [ 177.638956][ T8796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.638970][ T8796] RIP: 0023:0xf7f85579 [ 177.638979][ T8796] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.638990][ T8796] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000154 [ 177.639000][ T8796] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000e [ 177.639007][ T8796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.639013][ T8796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.639018][ T8796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.639024][ T8796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.639037][ T8796] [ 177.722853][ T40] audit: type=1326 audit(1752295721.629:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.730477][ T40] audit: type=1326 audit(1752295721.629:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.739215][ T40] audit: type=1326 audit(1752295721.629:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.747740][ T40] audit: type=1326 audit(1752295721.629:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.756200][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.759837][ T40] audit: type=1326 audit(1752295721.629:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 177.768372][ T40] audit: type=1326 audit(1752295721.629:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 177.776860][ T40] audit: type=1326 audit(1752295721.629:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 177.784763][ T40] audit: type=1326 audit(1752295721.629:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 178.508634][ T8797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.142015][ T8824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.723'. [ 179.145049][ T8821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.723'. [ 179.331426][ T5315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.492932][ T5315] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 179.495646][ T5315] usb 5-1: config 0 has no interface number 0 [ 179.499225][ T5315] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 179.502275][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.505153][ T5315] usb 5-1: Product: syz [ 179.506509][ T5315] usb 5-1: Manufacturer: syz [ 179.508038][ T5315] usb 5-1: SerialNumber: syz [ 179.515489][ T5315] usb 5-1: config 0 descriptor?? [ 179.520296][ T5315] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 179.725637][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.793993][ T5315] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 179.796609][ T5315] gspca_pac7302 5-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 179.800578][ T5315] usb 5-1: USB disconnect, device number 6 [ 179.869132][ T8831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.441995][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.794413][ T8869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.736'. [ 181.937192][ T8871] FAULT_INJECTION: forcing a failure. [ 181.937192][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.942560][ T8871] CPU: 2 UID: 0 PID: 8871 Comm: syz.2.738 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 181.942577][ T8871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.942584][ T8871] Call Trace: [ 181.942596][ T8871] [ 181.942600][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 181.942643][ T8871] should_fail_ex+0x512/0x640 [ 181.942666][ T8871] _copy_from_user+0x2e/0xd0 [ 181.942683][ T8871] kstrtouint_from_user+0xd6/0x1d0 [ 181.942697][ T8871] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 181.942710][ T8871] ? __lock_acquire+0xb8a/0x1c90 [ 181.942731][ T8871] proc_fail_nth_write+0x83/0x250 [ 181.942745][ T8871] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.942761][ T8871] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.942773][ T8871] vfs_write+0x2a0/0x1150 [ 181.942792][ T8871] ? __pfx_vfs_write+0x10/0x10 [ 181.942806][ T8871] ? find_held_lock+0x2b/0x80 [ 181.942820][ T8871] ? __fget_files+0x20e/0x3c0 [ 181.942839][ T8871] ksys_write+0x12a/0x250 [ 181.942854][ T8871] ? __pfx_ksys_write+0x10/0x10 [ 181.942871][ T8871] ? rcu_is_watching+0x12/0xc0 [ 181.942885][ T8871] __do_fast_syscall_32+0x7c/0x3a0 [ 181.942903][ T8871] do_fast_syscall_32+0x32/0x80 [ 181.942920][ T8871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.942933][ T8871] RIP: 0023:0xf7fc3579 [ 181.942942][ T8871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.942952][ T8871] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 181.942963][ T8871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 181.942969][ T8871] RDX: 0000000000000001 RSI: 00000000f7453ff4 RDI: 0000000000000000 [ 181.942975][ T8871] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 181.942981][ T8871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.942987][ T8871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.943000][ T8871] [ 182.308910][ T8883] netlink: 84 bytes leftover after parsing attributes in process `syz.0.739'. [ 182.516476][ T8890] netlink: 'syz.1.744': attribute type 2 has an invalid length. [ 182.518912][ T8890] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 182.521714][ T8890] netlink: 1164 bytes leftover after parsing attributes in process `syz.1.744'. [ 183.103643][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 183.103655][ T40] audit: type=1400 audit(1752295727.109:328): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8893 comm="syz.0.745" [ 183.946244][ T8901] input: syz1 as /devices/virtual/input/input21 [ 184.051156][ T8906] input: syz0 as /devices/virtual/input/input22 [ 184.153264][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 184.453590][ T8914] input: syz0 as /devices/virtual/input/input23 [ 184.471525][ T8914] FAULT_INJECTION: forcing a failure. [ 184.471525][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.475746][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.0.751 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 184.475762][ T8914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.475779][ T8914] Call Trace: [ 184.475785][ T8914] [ 184.475789][ T8914] dump_stack_lvl+0x16c/0x1f0 [ 184.475808][ T8914] should_fail_ex+0x512/0x640 [ 184.475827][ T8914] _copy_from_iter+0x29f/0x16f0 [ 184.475845][ T8914] ? __alloc_skb+0x200/0x380 [ 184.475862][ T8914] ? __pfx__copy_from_iter+0x10/0x10 [ 184.475885][ T8914] netlink_sendmsg+0x829/0xdd0 [ 184.475898][ T8914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.475910][ T8914] ? __import_iovec+0x1dd/0x650 [ 184.475923][ T8914] ____sys_sendmsg+0xa95/0xc70 [ 184.475937][ T8914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.475948][ T8914] ? get_compat_msghdr+0x11a/0x170 [ 184.475970][ T8914] ___sys_sendmsg+0x134/0x1d0 [ 184.475987][ T8914] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.476009][ T8914] ? find_held_lock+0x2b/0x80 [ 184.476030][ T8914] __sys_sendmsg+0x16d/0x220 [ 184.476046][ T8914] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.476068][ T8914] ? rcu_is_watching+0x12/0xc0 [ 184.476082][ T8914] __do_fast_syscall_32+0x7c/0x3a0 [ 184.476100][ T8914] do_fast_syscall_32+0x32/0x80 [ 184.476116][ T8914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.476130][ T8914] RIP: 0023:0xf7f85579 [ 184.476138][ T8914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.476149][ T8914] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 184.476160][ T8914] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000180 [ 184.476167][ T8914] RDX: 0000000000040880 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.476173][ T8914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.476179][ T8914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.476185][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.476198][ T8914] [ 184.890275][ T8921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.752'. [ 185.774969][ T8935] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 186.531529][ T6025] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 186.691500][ T6025] usb 7-1: Using ep0 maxpacket: 8 [ 186.694525][ T6025] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 186.697098][ T6025] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.700065][ T6025] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.703367][ T6025] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.706423][ T6025] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.710391][ T6025] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.721450][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.936017][ T6025] usb 7-1: usb_control_msg returned -32 [ 186.938529][ T6025] usbtmc 7-1:16.0: can't read capabilities [ 186.988547][ T8957] usb usb9: check_ctrlrecip: process 8957 (syz.0.765) requesting ep 01 but needs 81 [ 186.992098][ T8957] usb usb9: usbfs: process 8957 (syz.0.765) did not claim interface 0 before use [ 187.304018][ T8970] ip6_vti0 speed is unknown, defaulting to 1000 [ 187.409132][ T8970] lo speed is unknown, defaulting to 1000 [ 187.592175][ T8977] overlayfs: failed to clone upperpath [ 188.958038][ T8990] ip6_vti0 speed is unknown, defaulting to 1000 [ 189.180861][ T8990] lo speed is unknown, defaulting to 1000 [ 189.295594][ T24] usb 7-1: USB disconnect, device number 4 [ 189.355436][ T8999] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 189.405413][ T8999] gretap1: entered promiscuous mode [ 189.509373][ T8999] bond1: (slave gretap1): making interface the new active one [ 189.522742][ T8999] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 189.723275][ T9010] FAULT_INJECTION: forcing a failure. [ 189.723275][ T9010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.731077][ T9010] CPU: 2 UID: 0 PID: 9010 Comm: syz.0.776 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 189.731104][ T9010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.731114][ T9010] Call Trace: [ 189.731121][ T9010] [ 189.731126][ T9010] dump_stack_lvl+0x16c/0x1f0 [ 189.731158][ T9010] should_fail_ex+0x512/0x640 [ 189.731188][ T9010] _copy_to_user+0x32/0xd0 [ 189.731218][ T9010] snd_ctl_ioctl_compat+0xa61/0xc50 [ 189.731245][ T9010] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 189.731278][ T9010] ? find_held_lock+0x2b/0x80 [ 189.731298][ T9010] ? hook_file_ioctl_common+0x145/0x410 [ 189.731343][ T9010] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 189.731371][ T9010] __ia32_compat_sys_ioctl+0x242/0x370 [ 189.731396][ T9010] __do_fast_syscall_32+0x7c/0x3a0 [ 189.731424][ T9010] do_fast_syscall_32+0x32/0x80 [ 189.731450][ T9010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.731472][ T9010] RIP: 0023:0xf7f85579 [ 189.731485][ T9010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.731502][ T9010] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 189.731519][ T9010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0485510 [ 189.731529][ T9010] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.731539][ T9010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.731549][ T9010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.731560][ T9010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.731582][ T9010] [ 189.788971][ T9013] syz.2.777: vmalloc error: size 20480, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.796333][ T9013] CPU: 2 UID: 0 PID: 9013 Comm: syz.2.777 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 189.796358][ T9013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.796369][ T9013] Call Trace: [ 189.796375][ T9013] [ 189.796382][ T9013] dump_stack_lvl+0x16c/0x1f0 [ 189.796412][ T9013] warn_alloc+0x248/0x3a0 [ 189.796441][ T9013] ? __pfx_warn_alloc+0x10/0x10 [ 189.796468][ T9013] ? alloc_pages_mpol+0x25a/0x550 [ 189.796488][ T9013] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 189.796506][ T9013] ? trace_kmalloc+0x2b/0xd0 [ 189.796532][ T9013] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 189.796564][ T9013] ? kernel_clone+0xfc/0x960 [ 189.796593][ T9013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.796614][ T9013] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 189.796643][ T9013] ? kernel_clone+0xfc/0x960 [ 189.796663][ T9013] __vmalloc_node_noprof+0xad/0xf0 [ 189.796684][ T9013] ? kernel_clone+0xfc/0x960 [ 189.796708][ T9013] copy_process+0x2c70/0x7650 [ 189.796742][ T9013] ? __pfx_copy_process+0x10/0x10 [ 189.796777][ T9013] kernel_clone+0xfc/0x960 [ 189.796802][ T9013] ? __pfx_kernel_clone+0x10/0x10 [ 189.796834][ T9013] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 189.796864][ T9013] __do_compat_sys_ia32_clone+0xcb/0x110 [ 189.796887][ T9013] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 189.796920][ T9013] ? ksys_write+0x1ac/0x250 [ 189.796943][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 189.796970][ T9013] ? rcu_is_watching+0x12/0xc0 [ 189.796992][ T9013] __do_fast_syscall_32+0x7c/0x3a0 [ 189.797041][ T9013] do_fast_syscall_32+0x32/0x80 [ 189.797068][ T9013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.797091][ T9013] RIP: 0023:0xf7fc3579 [ 189.797105][ T9013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.797122][ T9013] RSP: 002b:00000000f50c550c EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 189.797139][ T9013] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 0000000000000000 [ 189.797150][ T9013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.797161][ T9013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.797171][ T9013] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.797181][ T9013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.797211][ T9013] [ 189.797218][ T9013] Mem-Info: [ 189.896880][ T9013] active_anon:7646 inactive_anon:657 isolated_anon:0 [ 189.896880][ T9013] active_file:6699 inactive_file:42128 isolated_file:0 [ 189.896880][ T9013] unevictable:1768 dirty:68 writeback:0 [ 189.896880][ T9013] slab_reclaimable:7718 slab_unreclaimable:58845 [ 189.896880][ T9013] mapped:27542 shmem:4698 pagetables:1250 [ 189.896880][ T9013] sec_pagetables:310 bounce:0 [ 189.896880][ T9013] kernel_misc_reclaimable:0 [ 189.896880][ T9013] free:35360 free_pcp:11266 free_cma:0 [ 189.915186][ T9013] Node 0 active_anon:2456kB inactive_anon:1992kB active_file:596kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4024kB dirty:0kB writeback:0kB shmem:6880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8064kB pagetables:1920kB sec_pagetables:1132kB all_unreclaimable? no Balloon:0kB [ 189.926951][ T9013] Node 1 active_anon:28176kB inactive_anon:608kB active_file:26264kB inactive_file:168312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106212kB dirty:348kB writeback:0kB shmem:12064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5144kB pagetables:3000kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB [ 189.939931][ T9013] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:424kB local_pcp:8kB free_cma:0kB [ 189.949456][ T9013] lowmem_reserve[]: 0 288 288 288 288 [ 189.951162][ T9013] Node 0 DMA32 free:19524kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1216KB active_anon:2664kB inactive_anon:2016kB active_file:616kB inactive_file:108kB unevictable:3536kB writepending:0kB present:1032196kB managed:295892kB mlocked:0kB bounce:0kB free_pcp:7032kB local_pcp:436kB free_cma:0kB [ 189.961304][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 189.963116][ T9013] Node 1 DMA32 free:119724kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:4096KB free_highatomic:1232KB active_anon:28176kB inactive_anon:608kB active_file:26264kB inactive_file:168312kB unevictable:3536kB writepending:348kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:37364kB local_pcp:4964kB free_cma:0kB [ 189.974016][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 189.975541][ T9013] Node 0 DMA: 32*4kB (UM) 14*8kB (UM) 5*16kB (U) 11*32kB (UM) 6*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2080kB [ 189.980062][ T9013] Node 0 DMA32: 33*4kB (UMEH) 86*8kB (UMEH) 85*16kB (UME) 94*32kB (UMEH) 92*64kB (UMEH) 36*128kB (UMEH) 11*256kB (UMH) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19524kB [ 189.986203][ T9013] Node 1 DMA32: 1032*4kB (MEH) 625*8kB (MEH) 669*16kB (MEH) 411*32kB (UMEH) 457*64kB (UMEH) 121*128kB (UMEH) 16*256kB (UMEH) 20*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 2*4096kB (U) = 119704kB [ 189.993766][ T9013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.997750][ T9013] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 190.001621][ T9013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.005056][ T9013] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 190.008418][ T9013] 53959 total pagecache pages [ 190.009981][ T9013] 332 pages in swap cache [ 190.011478][ T9013] Free swap = 120140kB [ 190.013235][ T9013] Total swap = 124996kB [ 190.014722][ T9013] 524155 pages RAM [ 190.015895][ T9013] 0 pages HighMem/MovableOnly [ 190.017391][ T9013] 209271 pages reserved [ 190.018703][ T9013] 0 pages cma reserved [ 190.568365][ T9021] syz.2.780 (9021): attempted to duplicate a private mapping with mremap. This is not supported. [ 191.913850][ T9056] FAULT_INJECTION: forcing a failure. [ 191.913850][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.919308][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.3.788 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 191.919332][ T9056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.919343][ T9056] Call Trace: [ 191.919350][ T9056] [ 191.919356][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 191.919387][ T9056] should_fail_ex+0x512/0x640 [ 191.919417][ T9056] _copy_to_user+0x32/0xd0 [ 191.919452][ T9056] simple_read_from_buffer+0xcb/0x170 [ 191.919477][ T9056] proc_fail_nth_read+0x197/0x270 [ 191.919499][ T9056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.919521][ T9056] ? rw_verify_area+0xcf/0x680 [ 191.919543][ T9056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.919564][ T9056] vfs_read+0x1e1/0xc60 [ 191.919590][ T9056] ? fdget_pos+0x2a2/0x370 [ 191.919618][ T9056] ? __pfx_vfs_read+0x10/0x10 [ 191.919641][ T9056] ? find_held_lock+0x2b/0x80 [ 191.919667][ T9056] ? __fget_files+0x20e/0x3c0 [ 191.919699][ T9056] ksys_read+0x12a/0x250 [ 191.919722][ T9056] ? __pfx_ksys_read+0x10/0x10 [ 191.919748][ T9056] ? rcu_is_watching+0x12/0xc0 [ 191.919771][ T9056] __do_fast_syscall_32+0x7c/0x3a0 [ 191.919800][ T9056] do_fast_syscall_32+0x32/0x80 [ 191.919826][ T9056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.919847][ T9056] RIP: 0023:0xf7f46579 [ 191.919861][ T9056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.919878][ T9056] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 191.919895][ T9056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 191.919906][ T9056] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 191.919916][ T9056] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 191.919926][ T9056] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 191.919936][ T9056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.919960][ T9056] [ 192.290621][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.202876][ T9080] mkiss: ax0: crc mode is auto. [ 193.334552][ T9083] netlink: 56 bytes leftover after parsing attributes in process `syz.3.798'. [ 193.675220][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.677453][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.003897][ T9092] fuseblk: Bad value for 'fd' [ 194.200073][ T9100] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.245807][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.323295][ T9100] lo speed is unknown, defaulting to 1000 [ 194.580270][ T9111] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 194.582879][ T9111] tipc: Resetting bearer [ 194.586329][ T9111] team0: left promiscuous mode [ 194.587806][ T9111] team_slave_0: left promiscuous mode [ 194.590028][ T9111] team_slave_1: left promiscuous mode [ 194.594637][ T9111] tipc: Resetting bearer [ 194.596849][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.599800][ T9111] team0: entered promiscuous mode [ 194.602116][ T9111] team_slave_0: entered promiscuous mode [ 194.604421][ T9111] team_slave_1: entered promiscuous mode [ 194.606901][ T9111] bond0: (slave team0): Enslaving as an active interface with an up link [ 194.923394][ T9128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.811'. [ 194.927261][ T9125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.811'. [ 197.207118][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.543239][ T9160] fuseblk: Bad value for 'fd' [ 197.692384][ T9165] netlink: 'syz.3.820': attribute type 28 has an invalid length. [ 197.979708][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.821'. [ 198.883435][ T9173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.207995][ T9187] No such timeout policy "syz1" [ 199.527324][ T9196] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.829'. [ 200.183846][ T9206] minix: Unknown parameter 'barrier' [ 200.275242][ T9209] dvmrp0: entered allmulticast mode [ 200.283934][ T9208] dvmrp0: left allmulticast mode [ 200.711540][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.906949][ T5970] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 200.916475][ T9216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.834'. [ 200.920179][ T9214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.834'. [ 201.695325][ T9239] netlink: 96 bytes leftover after parsing attributes in process `syz.2.842'. [ 201.785660][ T9244] fuseblk: Bad value for 'fd' [ 201.799742][ T9222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.908083][ T9252] netlink: 72 bytes leftover after parsing attributes in process `syz.3.847'. [ 201.910971][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 201.984824][ T9260] FAULT_INJECTION: forcing a failure. [ 201.984824][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 201.988823][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.3.849 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 201.988838][ T9260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.988846][ T9260] Call Trace: [ 201.988850][ T9260] [ 201.988854][ T9260] dump_stack_lvl+0x16c/0x1f0 [ 201.988873][ T9260] should_fail_ex+0x512/0x640 [ 201.988891][ T9260] ? dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 201.988932][ T9260] should_failslab+0xc2/0x120 [ 201.988944][ T9260] __kmalloc_noprof+0xd2/0x510 [ 201.988964][ T9260] dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 201.988982][ T9260] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 201.989001][ T9260] ? lockdep_init_map_type+0x5c/0x280 [ 201.989019][ T9260] register_netdevice+0x49d/0x2270 [ 201.989033][ T9260] ? __pfx_register_netdevice+0x10/0x10 [ 201.989045][ T9260] ? __pfx_macsec_newlink+0x10/0x10 [ 201.989062][ T9260] macsec_newlink+0x512/0x1d70 [ 201.989082][ T9260] ? __pfx_macsec_newlink+0x10/0x10 [ 201.989097][ T9260] ? rcu_is_watching+0x12/0xc0 [ 201.989109][ T9260] ? trace_kmalloc+0x2b/0xd0 [ 201.989119][ T9260] ? __kvmalloc_node_noprof+0x298/0x620 [ 201.989135][ T9260] ? alloc_netdev_mqs+0xfbe/0x1570 [ 201.989151][ T9260] ? validate_linkmsg+0x57c/0xb60 [ 201.989173][ T9260] ? __pfx_validate_linkmsg+0x10/0x10 [ 201.989189][ T9260] ? alloc_netdev_mqs+0xe7e/0x1570 [ 201.989208][ T9260] ? rtnl_create_link+0xa4a/0xf90 [ 201.989224][ T9260] ? __pfx_macsec_newlink+0x10/0x10 [ 201.989240][ T9260] rtnl_newlink+0xc42/0x2000 [ 201.989261][ T9260] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.989281][ T9260] ? kfree_skbmem+0x1a4/0x1f0 [ 201.989301][ T9260] ? rcu_is_watching+0x12/0xc0 [ 201.989312][ T9260] ? trace_cap_capable+0x18d/0x200 [ 201.989327][ T9260] ? find_held_lock+0x2b/0x80 [ 201.989337][ T9260] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.989353][ T9260] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.989368][ T9260] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 201.989386][ T9260] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.989402][ T9260] rtnetlink_rcv_msg+0x95e/0xe90 [ 201.989422][ T9260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.989442][ T9260] ? ref_tracker_free+0x37c/0x830 [ 201.989461][ T9260] netlink_rcv_skb+0x155/0x420 [ 201.989472][ T9260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.989490][ T9260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.989506][ T9260] ? netlink_deliver_tap+0x1ae/0xd30 [ 201.989526][ T9260] netlink_unicast+0x58d/0x850 [ 201.989539][ T9260] ? __pfx_netlink_unicast+0x10/0x10 [ 201.989554][ T9260] netlink_sendmsg+0x8d1/0xdd0 [ 201.989567][ T9260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.989579][ T9260] ? __import_iovec+0x1dd/0x650 [ 201.989592][ T9260] ____sys_sendmsg+0xa95/0xc70 [ 201.989606][ T9260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.989617][ T9260] ? get_compat_msghdr+0x11a/0x170 [ 201.989640][ T9260] ___sys_sendmsg+0x134/0x1d0 [ 201.989657][ T9260] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.989679][ T9260] ? find_held_lock+0x2b/0x80 [ 201.989699][ T9260] __sys_sendmsg+0x16d/0x220 [ 201.989715][ T9260] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.989737][ T9260] ? rcu_is_watching+0x12/0xc0 [ 201.989750][ T9260] __do_fast_syscall_32+0x7c/0x3a0 [ 201.989769][ T9260] do_fast_syscall_32+0x32/0x80 [ 201.989785][ T9260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.989799][ T9260] RIP: 0023:0xf7f46579 [ 201.989807][ T9260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.989818][ T9260] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 201.989840][ T9260] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 201.989847][ T9260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.989853][ T9260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.989859][ T9260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 201.989865][ T9260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.989878][ T9260] [ 202.773734][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 202.804193][ T5970] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 202.815855][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 202.833251][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 202.845335][ T9278] geneve2: entered promiscuous mode [ 202.850395][ T9278] geneve2: entered allmulticast mode [ 203.594495][ T9290] pim6reg1: entered promiscuous mode [ 203.596780][ T9290] pim6reg1: entered allmulticast mode [ 203.744712][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 204.619308][ T9308] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 204.622359][ T9308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.863'. [ 204.664700][ T9308] netfs: Couldn't get user pages (rc=-14) [ 205.515444][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 205.593434][ T9333] input: syz1 as /devices/virtual/input/input24 [ 205.604547][ T9334] FAULT_INJECTION: forcing a failure. [ 205.604547][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 205.608471][ T9334] CPU: 2 UID: 0 PID: 9334 Comm: syz.3.870 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 205.608486][ T9334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.608493][ T9334] Call Trace: [ 205.608497][ T9334] [ 205.608501][ T9334] dump_stack_lvl+0x16c/0x1f0 [ 205.608534][ T9334] should_fail_ex+0x512/0x640 [ 205.608554][ T9334] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 205.608571][ T9334] should_failslab+0xc2/0x120 [ 205.608581][ T9334] __kmalloc_cache_noprof+0x6a/0x3e0 [ 205.608595][ T9334] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 205.608610][ T9334] ? __vmalloc_node_noprof+0xad/0xf0 [ 205.608623][ T9334] ? bpf_prog_alloc_no_stats+0x116/0x630 [ 205.608639][ T9334] bpf_prog_alloc_no_stats+0x116/0x630 [ 205.608656][ T9334] bpf_prog_alloc+0x3b/0x230 [ 205.608669][ T9334] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.608686][ T9334] bpf_prog_load+0x160e/0x2490 [ 205.608706][ T9334] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.608735][ T9334] __sys_bpf+0x433c/0x4d80 [ 205.608746][ T9334] ? __pfx___sys_bpf+0x10/0x10 [ 205.608756][ T9334] ? ksys_write+0x190/0x250 [ 205.608774][ T9334] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 205.608798][ T9334] ? fput+0x70/0xf0 [ 205.608808][ T9334] ? ksys_write+0x1ac/0x250 [ 205.608823][ T9334] ? __pfx_ksys_write+0x10/0x10 [ 205.608840][ T9334] __ia32_sys_bpf+0x76/0xe0 [ 205.608851][ T9334] __do_fast_syscall_32+0x7c/0x3a0 [ 205.608891][ T9334] do_fast_syscall_32+0x32/0x80 [ 205.608908][ T9334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.608922][ T9334] RIP: 0023:0xf7f46579 [ 205.608931][ T9334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.608941][ T9334] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 205.608951][ T9334] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 205.608958][ T9334] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.608964][ T9334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.608970][ T9334] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.608976][ T9334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.608989][ T9334] [ 206.432068][ T9347] FAULT_INJECTION: forcing a failure. [ 206.432068][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 206.438272][ T9347] CPU: 2 UID: 0 PID: 9347 Comm: syz.0.877 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 206.438287][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.438294][ T9347] Call Trace: [ 206.438298][ T9347] [ 206.438302][ T9347] dump_stack_lvl+0x16c/0x1f0 [ 206.438322][ T9347] should_fail_ex+0x512/0x640 [ 206.438339][ T9347] ? __kvmalloc_node_noprof+0x124/0x620 [ 206.438356][ T9347] should_failslab+0xc2/0x120 [ 206.438374][ T9347] __kvmalloc_node_noprof+0x137/0x620 [ 206.438390][ T9347] ? hash_netnet_create+0x8bd/0x1a20 [ 206.438403][ T9347] ? hash_netnet_create+0x8bd/0x1a20 [ 206.438413][ T9347] hash_netnet_create+0x8bd/0x1a20 [ 206.438424][ T9347] ? __print_lock_name+0xd0/0xe0 [ 206.438451][ T9347] ? __pfx_hash_netnet_create+0x10/0x10 [ 206.438464][ T9347] ? __pfx_hash_netnet_create+0x10/0x10 [ 206.438475][ T9347] ? ip_set_create+0x7e1/0x14d0 [ 206.438490][ T9347] ip_set_create+0x7e1/0x14d0 [ 206.438507][ T9347] ? __pfx_ip_set_create+0x10/0x10 [ 206.438522][ T9347] ? trace_contention_end+0xdd/0x130 [ 206.438547][ T9347] ? find_held_lock+0x2b/0x80 [ 206.438561][ T9347] nfnetlink_rcv_msg+0x9f9/0x1200 [ 206.438580][ T9347] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.438596][ T9347] ? consume_skb+0xcc/0x100 [ 206.438619][ T9347] ? __pfx___dev_queue_xmit+0x10/0x10 [ 206.438637][ T9347] netlink_rcv_skb+0x155/0x420 [ 206.438648][ T9347] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.438662][ T9347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.438679][ T9347] ? ns_capable+0xd7/0x110 [ 206.438692][ T9347] nfnetlink_rcv+0x1b3/0x430 [ 206.438705][ T9347] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 206.438718][ T9347] ? netlink_deliver_tap+0x1ae/0xd30 [ 206.438738][ T9347] netlink_unicast+0x58d/0x850 [ 206.438751][ T9347] ? __pfx_netlink_unicast+0x10/0x10 [ 206.438766][ T9347] netlink_sendmsg+0x8d1/0xdd0 [ 206.438779][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.438791][ T9347] ? __import_iovec+0x1dd/0x650 [ 206.438805][ T9347] ____sys_sendmsg+0xa95/0xc70 [ 206.438818][ T9347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.438829][ T9347] ? get_compat_msghdr+0x11a/0x170 [ 206.438852][ T9347] ___sys_sendmsg+0x134/0x1d0 [ 206.438868][ T9347] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.438891][ T9347] ? find_held_lock+0x2b/0x80 [ 206.438911][ T9347] __sys_sendmsg+0x16d/0x220 [ 206.438926][ T9347] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.438961][ T9347] ? rcu_is_watching+0x12/0xc0 [ 206.438975][ T9347] __do_fast_syscall_32+0x7c/0x3a0 [ 206.438993][ T9347] do_fast_syscall_32+0x32/0x80 [ 206.439009][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.439024][ T9347] RIP: 0023:0xf7f85579 [ 206.439033][ T9347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 206.439044][ T9347] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 206.439054][ T9347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 206.439061][ T9347] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.439067][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.439073][ T9347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 206.439079][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.439092][ T9347] [ 207.342995][ T9365] ptrace attach of "/syz-executor exec"[5958] was attempted by "/syz-executor exec"[9365] [ 207.366405][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 207.465570][ T9375] hfs: unable to load iocharset "io#harset" [ 207.503010][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 217.852950][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.891'. [ 218.129969][ T9434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.357002][ T9434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.897193][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.890'. [ 218.900482][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.890'. [ 219.486808][ T9482] fuse: Unknown parameter 'ÿ0x0000000000000003' [ 219.911787][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.917521][ T9428] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 219.944283][ T9428] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 220.081584][ T5970] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.086932][ T9428] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 220.089748][ T9428] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 220.401587][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.405431][ T9428] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 220.407798][ T9428] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 220.421967][ T9496] netlink: 'syz.0.897': attribute type 4 has an invalid length. [ 220.523091][ T9497] siw: device registration error -23 [ 221.109433][ T9505] sp0: Synchronizing with TNC [ 221.715955][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.719200][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.722178][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.754530][ T9521] infiniband @: RDMA CMA: cma_listen_on_dev, error -98 [ 221.832657][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.840052][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.849813][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.857387][ T9521] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.355623][ T9542] netlink: 'syz.3.904': attribute type 28 has an invalid length. [ 222.395032][ T9544] tipc: Enabled bearer , priority 0 [ 222.397793][ T9544] syzkaller0: entered promiscuous mode [ 222.399612][ T9544] syzkaller0: entered allmulticast mode [ 222.470005][ T9544] tipc: Resetting bearer [ 222.584735][ T9543] tipc: Resetting bearer [ 222.634246][ T9543] tipc: Disabling bearer [ 223.729704][ T9568] syz.2.905 (9568) used greatest stack depth: 19144 bytes left [ 224.678745][ T9580] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.020311][ T9580] lo speed is unknown, defaulting to 1000 [ 225.042547][ T9580] virt_wifi0 speed is unknown, defaulting to 1000 [ 225.061482][ T40] audit: type=1326 audit(1752295769.059:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.068046][ T40] audit: type=1326 audit(1752295769.059:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.075357][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 225.081485][ T40] audit: type=1326 audit(1752295769.079:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.087984][ T40] audit: type=1326 audit(1752295769.079:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.112285][ T40] audit: type=1326 audit(1752295769.079:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.118849][ T40] audit: type=1326 audit(1752295769.079:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.143163][ T40] audit: type=1326 audit(1752295769.079:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.162159][ T40] audit: type=1326 audit(1752295769.079:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.168730][ T40] audit: type=1326 audit(1752295769.079:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 225.192949][ T40] audit: type=1326 audit(1752295769.199:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 226.061451][ T5315] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 226.223676][ T5315] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.227131][ T5315] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.230272][ T5315] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.243483][ T5315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.247965][ T9588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.252009][ T5315] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.784254][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.787404][ T9648] batadv_slave_0: entered promiscuous mode [ 228.526112][ T1017] usb 7-1: USB disconnect, device number 5 [ 229.062392][ T9667] (syz.0.926,9667,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 229.065083][ T9667] (syz.0.926,9667,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 229.744719][ T9687] ======================================================= [ 229.744719][ T9687] WARNING: The mand mount option has been deprecated and [ 229.744719][ T9687] and is ignored by this kernel. Remove the mand [ 229.744719][ T9687] option from the mount to silence this warning. [ 229.744719][ T9687] ======================================================= [ 229.972716][ T9700] futex_wake_op: syz.1.936 tries to shift op by 144; fix this program [ 230.510908][ T9723] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 230.515065][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 231.187366][ T5315] ip6_vti0 speed is unknown, defaulting to 1000 [ 231.190913][ T10] lo speed is unknown, defaulting to 1000 [ 232.001628][ T9750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.947'. [ 232.011693][ T9744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.947'. [ 232.297673][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 232.300970][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 232.305013][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 233.433094][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 233.536635][ T9801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.961'. [ 233.553959][ T9800] netlink: 'syz.1.963': attribute type 27 has an invalid length. [ 233.559274][ T9800] lo: left promiscuous mode [ 233.565300][ T9800] tunl0: left promiscuous mode [ 233.568249][ T9800] gre0: left promiscuous mode [ 233.577734][ T9800] gretap0: left promiscuous mode [ 233.584137][ T9800] erspan0: left promiscuous mode [ 233.587875][ T9800] ip_vti0: left promiscuous mode [ 233.594454][ T9800] ip6_vti0: left promiscuous mode [ 233.598573][ T9800] sit0: left promiscuous mode [ 233.602770][ T9800] ip6tnl0: left promiscuous mode [ 233.607394][ T9800] ip6gre0: left promiscuous mode [ 233.617439][ T9800] ip6gretap0: left promiscuous mode [ 233.623935][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.627206][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.630927][ T9800] bridge0: left promiscuous mode [ 233.639887][ T9800] vcan0: left promiscuous mode [ 233.647245][ T9800] bond0: left promiscuous mode [ 233.649454][ T9800] bond_slave_0: left promiscuous mode [ 233.656133][ T9800] bond_slave_1: left promiscuous mode [ 233.658561][ T9800] team0: left promiscuous mode [ 233.660530][ T9800] team_slave_0: left promiscuous mode [ 233.664459][ T9800] team_slave_1: left promiscuous mode [ 233.670535][ T9800] tipc: Resetting bearer [ 233.679896][ T9800] dummy0: left promiscuous mode [ 233.689773][ T9800] nlmon0: left promiscuous mode [ 233.693102][ T9800] caif0: left promiscuous mode [ 233.737381][ T9800] batadv_slave_0: left promiscuous mode [ 233.742645][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.794635][ T9800] vlan0: left promiscuous mode [ 233.820272][ T9808] xt_ecn: cannot match TCP bits for non-tcp packets [ 233.828089][ T9800] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.830873][ T9800] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.835533][ T9800] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.839234][ T9800] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.844139][ T9800] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 233.851466][ T9805] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'. [ 233.854369][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'. [ 234.273461][ T9815] /dev/sr0: Can't open blockdev [ 234.392190][ T9820] openvswitch: netlink: Key type 177 is out of range max 32 [ 234.865312][ T9847] random: crng reseeded on system resumption [ 234.975893][ T9854] ip6gre1: entered allmulticast mode [ 236.214380][ T9882] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.266792][ T9893] netlink: 'syz.0.991': attribute type 10 has an invalid length. [ 236.325754][ T9884] __nla_validate_parse: 1 callbacks suppressed [ 236.325772][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 236.485324][ T9908] befs: (nbd2): No write support. Marking filesystem read-only [ 236.489161][ T9908] syz.2.993: attempt to access beyond end of device [ 236.489161][ T9908] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 236.495538][ T9908] befs: (nbd2): unable to read superblock [ 236.539707][ T9913] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.935212][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.996'. [ 236.938346][ T9921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.996'. [ 237.034665][ T9924] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.997'. [ 237.578352][ T40] kauditd_printk_skb: 259 callbacks suppressed [ 237.578370][ T40] audit: type=1326 audit(1752295781.579:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.0.1001" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85579 code=0x0 [ 237.737284][ T9941] FAULT_INJECTION: forcing a failure. [ 237.737284][ T9941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.741291][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.2.1004 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 237.741306][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.741326][ T9941] Call Trace: [ 237.741330][ T9941] [ 237.741335][ T9941] dump_stack_lvl+0x16c/0x1f0 [ 237.741354][ T9941] should_fail_ex+0x512/0x640 [ 237.741372][ T9941] _copy_to_user+0x32/0xd0 [ 237.741389][ T9941] msr_read+0x14e/0x250 [ 237.741402][ T9941] ? __pfx_msr_read+0x10/0x10 [ 237.741413][ T9941] ? bpf_lsm_file_permission+0x9/0x10 [ 237.741425][ T9941] ? security_file_permission+0x71/0x210 [ 237.741441][ T9941] ? rw_verify_area+0xcf/0x680 [ 237.741454][ T9941] ? __pfx_msr_read+0x10/0x10 [ 237.741466][ T9941] vfs_read+0x1e1/0xc60 [ 237.741484][ T9941] ? __pfx_vfs_read+0x10/0x10 [ 237.741498][ T9941] ? find_held_lock+0x2b/0x80 [ 237.741512][ T9941] ? __fget_files+0x204/0x3c0 [ 237.741528][ T9941] ? __fget_files+0x20e/0x3c0 [ 237.741542][ T9941] ? handle_mm_fault+0x280/0xd10 [ 237.741560][ T9941] ksys_read+0x12a/0x250 [ 237.741574][ T9941] ? __pfx_ksys_read+0x10/0x10 [ 237.741591][ T9941] ? rcu_is_watching+0x12/0xc0 [ 237.741604][ T9941] __do_fast_syscall_32+0x7c/0x3a0 [ 237.741622][ T9941] do_fast_syscall_32+0x32/0x80 [ 237.741638][ T9941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.741653][ T9941] RIP: 0023:0xf7fc3579 [ 237.741661][ T9941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 237.741672][ T9941] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 237.741682][ T9941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019680 [ 237.741689][ T9941] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.741695][ T9941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.741701][ T9941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.741707][ T9941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.741720][ T9941] [ 238.081447][ T6026] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 238.118267][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 238.125964][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 238.179655][ T9951] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 238.182468][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 238.186012][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 238.245799][ T6026] usb 7-1: Using ep0 maxpacket: 32 [ 238.251891][ T6026] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 238.255396][ T6026] usb 7-1: config 0 has no interface number 0 [ 238.257966][ T6026] usb 7-1: config 0 interface 184 has no altsetting 0 [ 238.272952][ T6026] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 238.276494][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.279779][ T6026] usb 7-1: Product: syz [ 238.291411][ T6026] usb 7-1: Manufacturer: syz [ 238.292934][ T6026] usb 7-1: SerialNumber: syz [ 238.295909][ T6026] usb 7-1: config 0 descriptor?? [ 238.305014][ T6026] smsc75xx v1.0.0 [ 238.306324][ T6026] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 238.309783][ T6026] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 238.441601][ T1326] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 238.459042][ T9962] overlayfs: failed to clone upperpath [ 238.498855][ T6026] usb 7-1: USB disconnect, device number 6 [ 238.631736][ T9969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 238.932474][ T9954] vhci_hcd: connection reset by peer [ 238.936752][ T13] vhci_hcd: stop threads [ 238.938713][ T13] vhci_hcd: release socket [ 238.941130][ T13] vhci_hcd: disconnect device [ 239.059789][ T9971] fuse: Unknown parameter ' ' [ 239.556986][ T9977] ip6_vti0 speed is unknown, defaulting to 1000 [ 239.725687][ T9977] lo speed is unknown, defaulting to 1000 [ 239.729197][ T9977] virt_wifi0 speed is unknown, defaulting to 1000 [ 239.961429][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.121927][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 240.132995][ T24] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 240.136526][ T24] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 240.140285][ T24] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 240.145701][ T24] usb 7-1: config 250 has no interface number 0 [ 240.149882][ T24] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 240.155013][ T24] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 240.158440][ T24] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.162027][ T24] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.166335][ T24] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 240.172023][ T24] usb 7-1: config 250 interface 228 has no altsetting 0 [ 240.178177][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 240.181995][ T24] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 240.185370][ T24] usb 7-1: Product: syz [ 240.187178][ T24] usb 7-1: SerialNumber: syz [ 240.198241][ T24] hub 7-1:250.228: bad descriptor, ignoring hub [ 240.199114][T10003] netlink: 'syz.0.1022': attribute type 28 has an invalid length. [ 240.200927][ T24] hub 7-1:250.228: probe with driver hub failed with error -5 [ 240.409717][ T24] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 240.542183][ T34] usb 7-1: USB disconnect, device number 7 [ 240.546441][ T34] usblp0: removed [ 241.040455][T10022] program syz.3.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.048188][T10023] program syz.3.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.163191][T10008] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000008' [ 241.165554][T10027] overlayfs: missing 'lowerdir' [ 241.167287][T10008] overlayfs: missing 'lowerdir' [ 241.242644][T10022] netfs: Couldn't get user pages (rc=-14) [ 241.817805][T10043] bond1: entered promiscuous mode [ 241.917533][T10052] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 241.944226][T10052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.133830][T10052] bond1: (slave veth3): Enslaving as an active interface with a down link [ 242.156276][T10054] vlan2: entered allmulticast mode [ 242.158544][T10054] veth1: entered allmulticast mode [ 242.164834][T10054] veth1: entered promiscuous mode [ 242.168108][T10054] veth1: left promiscuous mode [ 242.172520][T10054] bond1: (slave vlan2): making interface the new active one [ 242.176218][T10054] veth1: entered promiscuous mode [ 242.178980][T10054] vlan2: entered promiscuous mode [ 242.183014][T10054] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 242.720815][T10063] FAULT_INJECTION: forcing a failure. [ 242.720815][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 242.728816][T10063] CPU: 3 UID: 0 PID: 10063 Comm: syz.3.1037 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 242.728856][T10063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.728868][T10063] Call Trace: [ 242.728873][T10063] [ 242.728880][T10063] dump_stack_lvl+0x16c/0x1f0 [ 242.728911][T10063] should_fail_ex+0x512/0x640 [ 242.728937][T10063] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 242.728966][T10063] should_failslab+0xc2/0x120 [ 242.728984][T10063] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 242.729009][T10063] ? __alloc_skb+0x2b2/0x380 [ 242.729038][T10063] __alloc_skb+0x2b2/0x380 [ 242.729062][T10063] ? __pfx___alloc_skb+0x10/0x10 [ 242.729095][T10063] netlink_alloc_large_skb+0x69/0x130 [ 242.729116][T10063] netlink_sendmsg+0x6a1/0xdd0 [ 242.729138][T10063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.729158][T10063] ? __import_iovec+0x1dd/0x650 [ 242.729180][T10063] ____sys_sendmsg+0xa95/0xc70 [ 242.729203][T10063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.729220][T10063] ? get_compat_msghdr+0x11a/0x170 [ 242.729258][T10063] ___sys_sendmsg+0x134/0x1d0 [ 242.729285][T10063] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.729322][T10063] ? find_held_lock+0x2b/0x80 [ 242.729358][T10063] __sys_sendmsg+0x16d/0x220 [ 242.729384][T10063] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.729421][T10063] ? rcu_is_watching+0x12/0xc0 [ 242.729444][T10063] __do_fast_syscall_32+0x7c/0x3a0 [ 242.729473][T10063] do_fast_syscall_32+0x32/0x80 [ 242.729499][T10063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.729521][T10063] RIP: 0023:0xf7f46579 [ 242.729534][T10063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.729551][T10063] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 242.729568][T10063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 242.729579][T10063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.729589][T10063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.729599][T10063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.729609][T10063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.729633][T10063] [ 243.017545][ T40] audit: type=1326 audit(1752295787.019:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.0.1040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 243.031167][ T40] audit: type=1326 audit(1752295787.029:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10072 comm="syz.0.1040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 243.389137][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 243.621673][ T1326] vhci_hcd: vhci_device speed not set [ 243.776611][T10097] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.847364][ T40] audit: type=1804 audit(1752295787.839:601): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1047" name="cgroup.controllers" dev="tmpfs" ino=1457 res=1 errno=0 [ 243.856274][ T40] audit: type=1800 audit(1752295787.839:602): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1047" name="cgroup.controllers" dev="tmpfs" ino=1457 res=0 errno=0 [ 243.865896][ T40] audit: type=1800 audit(1752295787.849:603): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1047" name="cgroup.controllers" dev="tmpfs" ino=1457 res=0 errno=0 [ 244.054870][T10097] lo speed is unknown, defaulting to 1000 [ 244.059723][T10097] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.630488][ T40] audit: type=1326 audit(1752295788.629:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 244.639555][ T40] audit: type=1326 audit(1752295788.629:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 244.646806][ T40] audit: type=1326 audit(1752295788.629:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 244.654393][ T40] audit: type=1326 audit(1752295788.629:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85598 code=0x7ffc0000 [ 244.661622][ T40] audit: type=1326 audit(1752295788.629:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.0.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 244.818102][T10143] netdevsim netdevsim1: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 244.822532][T10143] netdevsim netdevsim1: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 245.707728][T10154] 9pnet_fd: Insufficient options for proto=fd [ 248.084130][T10212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1082'. [ 248.087348][T10209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1082'. [ 249.884661][T10258] FAULT_INJECTION: forcing a failure. [ 249.884661][T10258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.888765][T10258] CPU: 1 UID: 0 PID: 10258 Comm: syz.2.1097 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 249.888780][T10258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.888787][T10258] Call Trace: [ 249.888791][T10258] [ 249.888795][T10258] dump_stack_lvl+0x16c/0x1f0 [ 249.888815][T10258] should_fail_ex+0x512/0x640 [ 249.888834][T10258] _copy_from_user+0x2e/0xd0 [ 249.888851][T10258] __do_sys_openat2+0xf7/0x2d0 [ 249.888864][T10258] ? __pfx___do_sys_openat2+0x10/0x10 [ 249.888875][T10258] ? ksys_write+0x1ac/0x250 [ 249.888893][T10258] ? rcu_is_watching+0x12/0xc0 [ 249.888907][T10258] __do_fast_syscall_32+0x7c/0x3a0 [ 249.888925][T10258] do_fast_syscall_32+0x32/0x80 [ 249.888941][T10258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.888955][T10258] RIP: 0023:0xf7fc3579 [ 249.888963][T10258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.888974][T10258] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 00000000000001b5 [ 249.888984][T10258] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 249.888991][T10258] RDX: 0000000080000040 RSI: 0000000000000018 RDI: 0000000000000000 [ 249.888997][T10258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.889003][T10258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.889009][T10258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.889022][T10258] [ 250.765682][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1099'. [ 251.249289][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 251.315354][T10294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 251.317969][T10294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.322664][T10294] vhci_hcd vhci_hcd.0: Device attached [ 251.581501][ T34] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 251.915739][T10301] vhci_hcd: connection reset by peer [ 251.918109][ T13] vhci_hcd: stop threads [ 251.922509][ T13] vhci_hcd: release socket [ 251.924538][ T13] vhci_hcd: disconnect device [ 252.023439][T10307] netlink: 'syz.1.1109': attribute type 7 has an invalid length. [ 252.026826][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'. [ 252.966834][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 252.969694][T10326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 253.708309][ T10] IPVS: starting estimator thread 0... [ 253.708490][T10346] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 253.813174][T10346] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1118'. [ 253.816329][T10346] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1118'. [ 253.821663][T10347] IPVS: using max 42 ests per chain, 100800 per kthread [ 254.111790][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 254.500811][T10366] team0: Mode changed to "loadbalance" [ 254.612929][ T12] vlan2: left promiscuous mode [ 255.113764][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.115850][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.772373][ T10] IPVS: starting estimator thread 0... [ 255.871987][T10405] IPVS: using max 42 ests per chain, 100800 per kthread [ 256.190682][T10416] syz2: rxe_newlink: already configured on ip6_vti0 [ 256.438851][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 256.781454][ T34] vhci_hcd: vhci_device speed not set [ 257.138868][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 257.139184][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 257.142589][T10446] IPVS: Error joining to the multicast group [ 257.401122][ T40] kauditd_printk_skb: 343 callbacks suppressed [ 257.401140][ T40] audit: type=1326 audit(1752295801.399:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 257.413258][ T40] audit: type=1326 audit(1752295801.399:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.425428][ T40] audit: type=1326 audit(1752295801.399:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.436029][ T40] audit: type=1326 audit(1752295801.409:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.445779][ T40] audit: type=1326 audit(1752295801.409:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.454736][ T40] audit: type=1326 audit(1752295801.409:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.467884][ T40] audit: type=1326 audit(1752295801.409:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.476703][ T40] audit: type=1326 audit(1752295801.409:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.486795][ T40] audit: type=1326 audit(1752295801.409:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.497093][ T40] audit: type=1326 audit(1752295801.409:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1154" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 257.519273][T10452] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.591278][T10452] lo speed is unknown, defaulting to 1000 [ 257.593809][T10452] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.680520][T10470] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 257.782905][T10475] netlink: 'syz.2.1157': attribute type 28 has an invalid length. [ 257.863641][T10478] netlink: 'syz.3.1158': attribute type 28 has an invalid length. [ 257.903598][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 258.126558][T10500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1163'. [ 258.708596][T10515] FAULT_INJECTION: forcing a failure. [ 258.708596][T10515] name failslab, interval 1, probability 0, space 0, times 0 [ 258.714501][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.2.1168 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 258.714516][T10515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.714523][T10515] Call Trace: [ 258.714528][T10515] [ 258.714532][T10515] dump_stack_lvl+0x16c/0x1f0 [ 258.714552][T10515] should_fail_ex+0x512/0x640 [ 258.714571][T10515] should_failslab+0xc2/0x120 [ 258.714583][T10515] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 258.714600][T10515] ? skb_clone+0x190/0x3f0 [ 258.714619][T10515] skb_clone+0x190/0x3f0 [ 258.714635][T10515] netlink_deliver_tap+0xabd/0xd30 [ 258.714656][T10515] netlink_unicast+0x702/0x850 [ 258.714679][T10515] ? __pfx_netlink_unicast+0x10/0x10 [ 258.714697][T10515] netlink_ack+0x696/0xb80 [ 258.714712][T10515] netlink_rcv_skb+0x332/0x420 [ 258.714722][T10515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.714741][T10515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.714757][T10515] ? netlink_deliver_tap+0x1ae/0xd30 [ 258.714777][T10515] netlink_unicast+0x58d/0x850 [ 258.714790][T10515] ? __pfx_netlink_unicast+0x10/0x10 [ 258.714805][T10515] netlink_sendmsg+0x8d1/0xdd0 [ 258.714818][T10515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.714830][T10515] ? __import_iovec+0x1dd/0x650 [ 258.714843][T10515] ____sys_sendmsg+0xa95/0xc70 [ 258.714857][T10515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.714872][T10515] ? get_compat_msghdr+0x11a/0x170 [ 258.714895][T10515] ___sys_sendmsg+0x134/0x1d0 [ 258.714911][T10515] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.714934][T10515] ? find_held_lock+0x2b/0x80 [ 258.714955][T10515] __sys_sendmsg+0x16d/0x220 [ 258.714971][T10515] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.714993][T10515] ? rcu_is_watching+0x12/0xc0 [ 258.715007][T10515] __do_fast_syscall_32+0x7c/0x3a0 [ 258.715025][T10515] do_fast_syscall_32+0x32/0x80 [ 258.715042][T10515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.715056][T10515] RIP: 0023:0xf7fc3579 [ 258.715065][T10515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 258.715075][T10515] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 258.715085][T10515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 258.715092][T10515] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.715098][T10515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.715104][T10515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 258.715110][T10515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.715123][T10515] [ 258.826677][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 259.292555][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1178'. [ 259.296674][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1178'. [ 259.317294][T10546] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 259.320066][T10546] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 259.326076][T10546] vhci_hcd vhci_hcd.0: Device attached [ 259.473870][T10547] vhci_hcd: connection closed [ 259.474202][ T1138] vhci_hcd: stop threads [ 259.478179][ T1138] vhci_hcd: release socket [ 259.484353][ T1138] vhci_hcd: disconnect device [ 259.488444][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1179'. [ 259.513173][ T34] vhci_hcd: vhci_device speed not set [ 260.026541][T10565] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1181'. [ 260.433156][T10574] wlan1: mtu greater than device maximum [ 260.987272][T10590] 9pnet_virtio: no channels available for device syz [ 260.990358][T10590] 9pnet_virtio: no channels available for device syz [ 260.993700][T10590] 9pnet_virtio: no channels available for device syz [ 260.996899][T10590] 9pnet_virtio: no channels available for device syz [ 261.003654][T10590] 9pnet_virtio: no channels available for device syz [ 261.008804][T10590] 9pnet_virtio: no channels available for device syz [ 261.014589][T10590] 9pnet_virtio: no channels available for device syz [ 261.017815][T10590] 9pnet_virtio: no channels available for device syz [ 261.020965][T10590] 9pnet_virtio: no channels available for device syz [ 261.024035][T10590] 9pnet_virtio: no channels available for device syz [ 261.027508][T10590] 9pnet_virtio: no channels available for device syz [ 261.030495][T10590] 9pnet_virtio: no channels available for device syz [ 261.034275][T10590] 9pnet_virtio: no channels available for device syz [ 261.040136][T10590] 9pnet_virtio: no channels available for device syz [ 261.043779][T10590] 9pnet_virtio: no channels available for device syz [ 261.046833][T10590] 9pnet_virtio: no channels available for device syz [ 261.049934][T10590] 9pnet_virtio: no channels available for device syz [ 261.052995][T10590] 9pnet_virtio: no channels available for device syz [ 261.055989][T10590] 9pnet_virtio: no channels available for device syz [ 261.059565][T10590] 9pnet_virtio: no channels available for device syz [ 261.063094][T10590] 9pnet_virtio: no channels available for device syz [ 261.066235][T10590] 9pnet_virtio: no channels available for device syz [ 261.069431][T10590] 9pnet_virtio: no channels available for device syz [ 261.072849][T10590] 9pnet_virtio: no channels available for device syz [ 261.075831][T10590] 9pnet_virtio: no channels available for device syz [ 261.083800][T10590] 9pnet_virtio: no channels available for device syz [ 261.086951][T10590] 9pnet_virtio: no channels available for device syz [ 261.090112][T10590] 9pnet_virtio: no channels available for device syz [ 261.093224][T10590] 9pnet_virtio: no channels available for device syz [ 261.096819][T10590] 9pnet_virtio: no channels available for device syz [ 261.099919][T10590] 9pnet_virtio: no channels available for device syz [ 261.103110][T10590] 9pnet_virtio: no channels available for device syz [ 261.106292][T10590] 9pnet_virtio: no channels available for device syz [ 261.109396][T10590] 9pnet_virtio: no channels available for device syz [ 261.112513][T10590] 9pnet_virtio: no channels available for device syz [ 261.115623][T10590] 9pnet_virtio: no channels available for device syz [ 261.118655][T10590] 9pnet_virtio: no channels available for device syz [ 261.121845][T10590] 9pnet_virtio: no channels available for device syz [ 261.124873][T10590] 9pnet_virtio: no channels available for device syz [ 261.127829][T10590] 9pnet_virtio: no channels available for device syz [ 261.130701][T10590] 9pnet_virtio: no channels available for device syz [ 261.137276][T10590] 9pnet_virtio: no channels available for device syz [ 261.140328][T10590] 9pnet_virtio: no channels available for device syz [ 261.143524][T10590] 9pnet_virtio: no channels available for device syz [ 261.146378][T10590] 9pnet_virtio: no channels available for device syz [ 261.149377][T10590] 9pnet_virtio: no channels available for device syz [ 261.152730][T10590] 9pnet_virtio: no channels available for device syz [ 261.155789][T10590] 9pnet_virtio: no channels available for device syz [ 261.158775][T10590] 9pnet_virtio: no channels available for device syz [ 261.161913][T10590] 9pnet_virtio: no channels available for device syz [ 261.172624][T10590] 9pnet_virtio: no channels available for device syz [ 261.175553][T10590] 9pnet_virtio: no channels available for device syz [ 261.178736][T10590] 9pnet_virtio: no channels available for device syz [ 261.182426][T10590] 9pnet_virtio: no channels available for device syz [ 261.185686][T10590] 9pnet_virtio: no channels available for device syz [ 261.188768][T10590] 9pnet_virtio: no channels available for device syz [ 261.192105][T10590] 9pnet_virtio: no channels available for device syz [ 261.195737][T10590] 9pnet_virtio: no channels available for device syz [ 261.201734][T10590] 9pnet_virtio: no channels available for device syz [ 261.204508][T10590] 9pnet_virtio: no channels available for device syz [ 261.206679][T10590] 9pnet_virtio: no channels available for device syz [ 261.209164][T10590] 9pnet_virtio: no channels available for device syz [ 261.216404][T10590] 9pnet_virtio: no channels available for device syz [ 261.220206][T10590] 9pnet_virtio: no channels available for device syz [ 261.277130][T10595] overlayfs: failed to clone upperpath [ 261.479512][T10599] tmpfs: Unknown parameter 'grpquota_blo#k_hardlimit' [ 261.484933][T10599] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 261.838641][T10604] __nla_validate_parse: 2 callbacks suppressed [ 261.838688][T10604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1194'. [ 261.846227][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1194'. [ 262.042344][T10608] netlink: 'syz.1.1196': attribute type 28 has an invalid length. [ 262.780686][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 262.871543][T10626] overlayfs: failed to clone upperpath [ 262.922272][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 262.957841][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 262.957859][ T40] audit: type=1326 audit(1752295806.959:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 262.969485][ T40] audit: type=1326 audit(1752295806.959:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 262.978719][ T40] audit: type=1326 audit(1752295806.959:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 262.985913][ T40] audit: type=1326 audit(1752295806.959:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 262.993004][ T40] audit: type=1326 audit(1752295806.959:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 262.999983][ T40] audit: type=1326 audit(1752295806.959:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 263.010579][ T40] audit: type=1326 audit(1752295806.959:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 263.017778][ T40] audit: type=1326 audit(1752295806.959:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 263.025901][ T40] audit: type=1326 audit(1752295806.959:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 263.033940][T10640] fuse: Unknown parameter 'Ü%zúçÏ&Síùÿ¼¸!-ÎGíoWV†ewa>5÷®5/ˆut•\xÜh×å' [ 263.034139][ T40] audit: type=1326 audit(1752295806.959:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.0.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 263.444257][T10666] netlink: 'syz.2.1210': attribute type 28 has an invalid length. [ 263.566283][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 263.573927][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 263.755565][T10684] overlayfs: failed to clone upperpath [ 263.834799][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 263.839601][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 263.879195][T10688] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1218'. [ 263.883330][T10688] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1218'. [ 263.888446][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 264.167737][T10695] bridge4: entered promiscuous mode [ 264.169479][T10695] bridge4: entered allmulticast mode [ 264.274856][T10668] ceph: No mds server is up or the cluster is laggy [ 264.633908][T10708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1220'. [ 264.637434][T10706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1220'. [ 265.004354][T10723] xt_CT: No such helper "syz0" [ 265.262528][T10738] FAULT_INJECTION: forcing a failure. [ 265.262528][T10738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.267743][T10738] CPU: 3 UID: 0 PID: 10738 Comm: syz.3.1231 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 265.267758][T10738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.267765][T10738] Call Trace: [ 265.267770][T10738] [ 265.267774][T10738] dump_stack_lvl+0x16c/0x1f0 [ 265.267794][T10738] should_fail_ex+0x512/0x640 [ 265.267813][T10738] _copy_to_user+0x32/0xd0 [ 265.267831][T10738] simple_read_from_buffer+0xcb/0x170 [ 265.267848][T10738] proc_fail_nth_read+0x197/0x270 [ 265.267863][T10738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.267876][T10738] ? rw_verify_area+0xcf/0x680 [ 265.267890][T10738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.267902][T10738] vfs_read+0x1e1/0xc60 [ 265.267918][T10738] ? fdget_pos+0x2a2/0x370 [ 265.267935][T10738] ? __pfx_vfs_read+0x10/0x10 [ 265.267948][T10738] ? find_held_lock+0x2b/0x80 [ 265.267964][T10738] ? __fget_files+0x20e/0x3c0 [ 265.267982][T10738] ksys_read+0x12a/0x250 [ 265.267997][T10738] ? __pfx_ksys_read+0x10/0x10 [ 265.268013][T10738] ? __secure_computing+0x21c/0x320 [ 265.268029][T10738] __do_fast_syscall_32+0x7c/0x3a0 [ 265.268046][T10738] do_fast_syscall_32+0x32/0x80 [ 265.268063][T10738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.268077][T10738] RIP: 0023:0xf7f46579 [ 265.268086][T10738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.268096][T10738] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 265.268106][T10738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5066620 [ 265.268113][T10738] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 265.268119][T10738] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 265.268125][T10738] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 265.268131][T10738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.268144][T10738] [ 266.429381][T10770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.956821][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 267.061541][ T6047] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 267.223035][ T6047] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.226260][ T6047] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.229088][ T6047] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 267.231955][ T6047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.235629][ T6047] usb 7-1: config 0 descriptor?? [ 267.239682][ T6047] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 267.242234][ T6047] dvb-usb: bulk message failed: -22 (3/0) [ 267.249409][ T6047] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 267.252801][ T6047] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 267.255474][ T6047] usb 7-1: media controller created [ 267.259547][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.265961][ T6047] dvb-usb: bulk message failed: -22 (6/0) [ 267.268019][ T6047] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 267.272193][ T6047] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input26 [ 267.283261][ T6047] dvb-usb: schedule remote query interval to 150 msecs. [ 267.289020][ T6047] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 267.445009][ T6047] dvb-usb: bulk message failed: -22 (1/0) [ 267.445098][ T836] usb 7-1: USB disconnect, device number 8 [ 267.447029][ T6047] dvb-usb: error while querying for an remote control event. [ 267.484685][ T836] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 268.389087][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 268.391258][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 268.663639][ T6047] libceph: connect (1)[c::]:6789 error -101 [ 268.666199][ T6047] libceph: mon0 (1)[c::]:6789 connect error [ 268.676955][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1254'. [ 268.680605][T10813] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 268.928667][T10801] ceph: No mds server is up or the cluster is laggy [ 269.248938][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 269.479498][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'. [ 269.570943][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 270.181015][T10841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1263'. [ 271.309613][T10860] ip6_vti0 speed is unknown, defaulting to 1000 [ 271.458668][T10860] lo speed is unknown, defaulting to 1000 [ 271.461152][T10860] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.561096][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 271.561109][ T40] audit: type=1326 audit(1752295815.559:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.582640][ T40] audit: type=1326 audit(1752295815.579:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.590772][ T40] audit: type=1326 audit(1752295815.579:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.600143][ T40] audit: type=1326 audit(1752295815.579:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.631661][ T40] audit: type=1326 audit(1752295815.579:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.675642][ T40] audit: type=1326 audit(1752295815.579:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.695359][ T40] audit: type=1326 audit(1752295815.579:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.703426][ T40] audit: type=1326 audit(1752295815.579:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.710215][ T40] audit: type=1326 audit(1752295815.579:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.717021][ T40] audit: type=1326 audit(1752295815.579:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 271.736116][T10878] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 271.738643][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 271.742844][T10878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1276'. [ 272.548506][T10945] overlayfs: failed to clone upperpath [ 272.601563][T10949] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1293'. [ 272.814651][T10958] tmpfs: Unknown parameter 'mpol:0' [ 273.249876][T10966] overlayfs: failed to clone upperpath [ 273.402527][T10976] IPVS: length: 24 != 792 [ 273.561024][T10981] afs: Unknown parameter 'ÿÿ' [ 273.731409][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1316'. [ 275.471760][T11049] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1337'. [ 275.919878][T11065] FAULT_INJECTION: forcing a failure. [ 275.919878][T11065] name failslab, interval 1, probability 0, space 0, times 0 [ 275.925679][T11065] CPU: 2 UID: 0 PID: 11065 Comm: syz.2.1344 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 275.925706][T11065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 275.925717][T11065] Call Trace: [ 275.925723][T11065] [ 275.925731][T11065] dump_stack_lvl+0x16c/0x1f0 [ 275.925764][T11065] should_fail_ex+0x512/0x640 [ 275.925789][T11065] ? __kvmalloc_node_noprof+0x124/0x620 [ 275.925819][T11065] should_failslab+0xc2/0x120 [ 275.925838][T11065] __kvmalloc_node_noprof+0x137/0x620 [ 275.925862][T11065] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 275.925887][T11065] ? packet_setsockopt+0x203e/0x33c0 [ 275.925916][T11065] ? packet_setsockopt+0x203e/0x33c0 [ 275.925940][T11065] packet_setsockopt+0x203e/0x33c0 [ 275.925970][T11065] ? __pfx_packet_setsockopt+0x10/0x10 [ 275.926021][T11065] ? aa_sk_perm+0x2f4/0xb10 [ 275.926049][T11065] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.926077][T11065] ? __pfx_packet_setsockopt+0x10/0x10 [ 275.926103][T11065] do_sock_setsockopt+0x221/0x470 [ 275.926123][T11065] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 275.926158][T11065] __sys_setsockopt+0x120/0x1a0 [ 275.926189][T11065] __ia32_sys_setsockopt+0xbc/0x160 [ 275.926213][T11065] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.926238][T11065] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 275.926265][T11065] __do_fast_syscall_32+0x7c/0x3a0 [ 275.926296][T11065] do_fast_syscall_32+0x32/0x80 [ 275.926323][T11065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.926346][T11065] RIP: 0023:0xf7fc3579 [ 275.926361][T11065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 275.926379][T11065] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 275.926403][T11065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 275.926414][T11065] RDX: 0000000000000012 RSI: 0000000080000240 RDI: 0000000000000004 [ 275.926425][T11065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.926434][T11065] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 275.926446][T11065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.926471][T11065] [ 276.116919][T11072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1347'. [ 276.215575][T11080] nftables ruleset with unbound set [ 276.218675][T11080] befs: (nullb0): No write support. Marking filesystem read-only [ 276.222519][T11080] befs: (nullb0): invalid magic header [ 276.318685][T11089] sp0: Synchronizing with TNC [ 276.431982][T11089] [U] è [ 278.089927][T11131] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 278.145694][T11131] nvme_fabrics: missing parameter 'transport=%s' [ 278.148238][T11131] nvme_fabrics: missing parameter 'nqn=%s' [ 278.532555][T11142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1369'. [ 278.659753][T11161] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1372'. [ 278.694637][T11161] batadv1: entered allmulticast mode [ 279.149435][T11171] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1376'. [ 279.152437][T11171] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1376'. [ 279.399428][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 279.399443][ T40] audit: type=1326 audit(1752295823.399:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.2.1377" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3579 code=0x0 [ 279.850389][T11179] overlayfs: failed to clone upperpath [ 280.944053][T11207] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 281.185120][T11215] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1390'. [ 281.189048][T11215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1390'. [ 282.416533][T11237] vlan4: entered promiscuous mode [ 282.418172][T11237] vlan4: entered allmulticast mode [ 282.419922][T11237] hsr_slave_1: entered allmulticast mode [ 282.463331][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 282.467295][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 282.689446][T11250] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 282.692336][T11250] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 284.894505][T11304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1414'. [ 286.016087][T11327] FAULT_INJECTION: forcing a failure. [ 286.016087][T11327] name failslab, interval 1, probability 0, space 0, times 0 [ 286.019868][T11327] CPU: 1 UID: 0 PID: 11327 Comm: syz.3.1422 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 286.019883][T11327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.019890][T11327] Call Trace: [ 286.019894][T11327] [ 286.019899][T11327] dump_stack_lvl+0x16c/0x1f0 [ 286.019919][T11327] should_fail_ex+0x512/0x640 [ 286.019935][T11327] ? __kvmalloc_node_noprof+0x124/0x620 [ 286.019952][T11327] should_failslab+0xc2/0x120 [ 286.019962][T11327] __kvmalloc_node_noprof+0x137/0x620 [ 286.019978][T11327] ? hash_netport_create+0x459/0x1250 [ 286.019995][T11327] ? hash_netport_create+0x459/0x1250 [ 286.020008][T11327] hash_netport_create+0x459/0x1250 [ 286.020023][T11327] ? __pfx_hash_netport_create+0x10/0x10 [ 286.020037][T11327] ip_set_create+0x7e1/0x14d0 [ 286.020054][T11327] ? __pfx_ip_set_create+0x10/0x10 [ 286.020087][T11327] ? trace_contention_end+0xdd/0x130 [ 286.020113][T11327] ? find_held_lock+0x2b/0x80 [ 286.020151][T11327] nfnetlink_rcv_msg+0x9f9/0x1200 [ 286.020177][T11327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 286.020193][T11327] ? consume_skb+0xcc/0x100 [ 286.020215][T11327] ? __pfx___dev_queue_xmit+0x10/0x10 [ 286.020232][T11327] netlink_rcv_skb+0x155/0x420 [ 286.020244][T11327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 286.020258][T11327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.020276][T11327] ? ns_capable+0xd7/0x110 [ 286.020289][T11327] nfnetlink_rcv+0x1b3/0x430 [ 286.020302][T11327] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 286.020315][T11327] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.020335][T11327] netlink_unicast+0x58d/0x850 [ 286.020348][T11327] ? __pfx_netlink_unicast+0x10/0x10 [ 286.020363][T11327] netlink_sendmsg+0x8d1/0xdd0 [ 286.020380][T11327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.020392][T11327] ? __import_iovec+0x1dd/0x650 [ 286.020406][T11327] ____sys_sendmsg+0xa95/0xc70 [ 286.020419][T11327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.020430][T11327] ? get_compat_msghdr+0x11a/0x170 [ 286.020454][T11327] ___sys_sendmsg+0x134/0x1d0 [ 286.020470][T11327] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.020493][T11327] ? find_held_lock+0x2b/0x80 [ 286.020512][T11327] __sys_sendmsg+0x16d/0x220 [ 286.020528][T11327] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.020550][T11327] ? rcu_is_watching+0x12/0xc0 [ 286.020564][T11327] __do_fast_syscall_32+0x7c/0x3a0 [ 286.020587][T11327] do_fast_syscall_32+0x32/0x80 [ 286.020609][T11327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.020623][T11327] RIP: 0023:0xf7f46579 [ 286.020634][T11327] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 286.020644][T11327] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 286.020655][T11327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 286.020662][T11327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.020668][T11327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.020674][T11327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 286.020680][T11327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.020693][T11327] [ 286.711143][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1426'. [ 286.720077][T11338] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 286.724242][T11338] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 286.784341][T11341] netlink: 'syz.1.1427': attribute type 10 has an invalid length. [ 286.964244][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 287.163898][T11348] 9pnet_fd: Insufficient options for proto=fd [ 287.671759][T11373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1436'. [ 288.553209][T11391] overlay: ./file0 is not a directory [ 288.575607][T11393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1442'. [ 289.035740][T11426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1447'. [ 292.335466][ T40] audit: type=1326 audit(1752295836.339:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.369233][ T40] audit: type=1326 audit(1752295836.349:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.383571][ T40] audit: type=1326 audit(1752295836.349:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.393665][ T40] audit: type=1326 audit(1752295836.349:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.411781][ T40] audit: type=1326 audit(1752295836.359:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.526198][ T40] audit: type=1326 audit(1752295836.359:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.599337][ T40] audit: type=1326 audit(1752295836.359:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.627583][ T40] audit: type=1326 audit(1752295836.359:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.651157][ T40] audit: type=1326 audit(1752295836.359:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 292.685593][ T40] audit: type=1326 audit(1752295836.359:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 293.765341][T11508] wireguard0: entered promiscuous mode [ 293.767124][T11508] wireguard0: entered allmulticast mode [ 294.385899][T11525] overlayfs: failed to clone upperpath [ 294.686116][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1482'. [ 295.135841][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1481'. [ 295.139603][T11529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1481'. [ 295.456159][T11542] binder: 11541:11542 ioctl c0046209 0 returned -22 [ 295.610013][T11544] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 295.871454][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 296.041462][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 296.048412][ T24] usb 7-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 296.055501][ T24] usb 7-1: New USB device found, idVendor=eb4c, idProduct=c3e9, bcdDevice=ec.2b [ 296.059301][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.064484][ T24] usb 7-1: Product: syz [ 296.065825][ T24] usb 7-1: Manufacturer: syz [ 296.067289][ T24] usb 7-1: SerialNumber: syz [ 296.084556][ T24] usb 7-1: config 0 descriptor?? [ 296.471137][ T836] usb 7-1: USB disconnect, device number 9 [ 297.177286][T11576] bond1: (slave gretap1): Releasing active interface [ 297.268692][T11580] netlink: 'syz.2.1495': attribute type 10 has an invalid length. [ 297.275685][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 297.282034][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1495'. [ 297.384501][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 297.499019][T11581] team0: Port device team_slave_0 removed [ 297.956791][T11589] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 297.980185][T11589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.606434][T11605] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 298.606434][T11605] program syz.2.1498 not setting count and/or reply_len properly [ 298.914741][T11607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1499'. [ 300.037116][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1505'. [ 302.351481][ T836] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 302.523203][ T836] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.526371][ T836] usb 7-1: config 0 has no interface number 0 [ 302.528942][ T836] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 302.536057][ T836] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 302.540366][ T836] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.543945][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.549442][ T836] usb 7-1: config 0 descriptor?? [ 302.557253][T11648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.563151][ T836] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 302.783206][ T836] usb 7-1: USB disconnect, device number 10 [ 303.385948][T11666] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 303.446374][T11675] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1520'. [ 304.211638][T11696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1525'. [ 307.248122][T11764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.029080][T11805] tmpfs: Bad value for 'mpol' [ 308.033469][T11805] bond0: (slave team0): Releasing backup interface [ 308.036048][T11805] tipc: Resetting bearer [ 308.037883][T11805] bridge_slave_0: left allmulticast mode [ 308.039692][T11805] bridge_slave_0: left promiscuous mode [ 308.041681][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.045631][T11805] bridge_slave_1: left allmulticast mode [ 308.047447][T11805] bridge_slave_1: left promiscuous mode [ 308.049293][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.054652][T11805] bond0: (slave bond_slave_0): Releasing backup interface [ 308.058485][T11805] bond0: (slave bond_slave_1): Releasing backup interface [ 308.064528][T11805] team0: Port device team_slave_1 removed [ 308.066596][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.070794][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.085969][T11805] team0: Mode changed to "loadbalance" [ 308.421300][T11809] No control pipe specified [ 308.586951][T11815] kernel profiling enabled (shift: 63) [ 308.588978][T11815] profiling shift: 63 too large [ 309.904174][T11843] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1581'. [ 310.202473][T11853] pim6reg: entered allmulticast mode [ 310.206518][T11853] pim6reg: left allmulticast mode [ 310.260236][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 310.267644][T11854] Device name not specified. [ 310.267644][T11854] [ 310.361450][ T836] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 310.512746][ T836] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.515788][ T836] usb 7-1: config 0 has no interface number 0 [ 310.518264][ T836] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 310.526416][ T836] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 310.530930][ T836] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 310.535603][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.540908][ T836] usb 7-1: config 0 descriptor?? [ 310.550444][T11850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.557061][ T836] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 310.756492][T11850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1584'. [ 310.771429][ T10] usb 7-1: USB disconnect, device number 11 [ 310.802522][T11861] random: crng reseeded on system resumption [ 311.353287][T11881] overlay: Unknown parameter 'smackfsroot' [ 311.574541][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 311.837028][T11925] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 311.857960][T11926] trusted_key: encrypted_key: keyword 'uMdate' not recognized [ 312.105267][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 312.338967][T11953] FAULT_INJECTION: forcing a failure. [ 312.338967][T11953] name failslab, interval 1, probability 0, space 0, times 0 [ 312.342972][T11953] CPU: 1 UID: 0 PID: 11953 Comm: syz.2.1618 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 312.342988][T11953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.342994][T11953] Call Trace: [ 312.342998][T11953] [ 312.343002][T11953] dump_stack_lvl+0x16c/0x1f0 [ 312.343022][T11953] should_fail_ex+0x512/0x640 [ 312.343041][T11953] should_failslab+0xc2/0x120 [ 312.343052][T11953] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 312.343068][T11953] ? find_held_lock+0x2b/0x80 [ 312.343080][T11953] ? dst_alloc+0x99/0x1a0 [ 312.343096][T11953] dst_alloc+0x99/0x1a0 [ 312.343115][T11953] rt_dst_alloc+0x35/0x3a0 [ 312.343128][T11953] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 312.343148][T11953] ip_route_output_key_hash+0x137/0x2e0 [ 312.343163][T11953] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 312.343182][T11953] ? find_held_lock+0x2b/0x80 [ 312.343195][T11953] ip_route_output_flow+0x27/0x150 [ 312.343211][T11953] udp_sendmsg+0x1bdd/0x29f0 [ 312.343225][T11953] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 312.343238][T11953] ? __pfx_udp_sendmsg+0x10/0x10 [ 312.343258][T11953] ? __pfx___might_resched+0x10/0x10 [ 312.343270][T11953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.343289][T11953] ? aa_sk_perm+0x2f4/0xb10 [ 312.343306][T11953] ? __import_iovec+0x1dd/0x650 [ 312.343315][T11953] ? __pfx_udp_sendmsg+0x10/0x10 [ 312.343327][T11953] inet_sendmsg+0x105/0x140 [ 312.343341][T11953] ____sys_sendmsg+0x973/0xc70 [ 312.343355][T11953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.343365][T11953] ? get_compat_msghdr+0x11a/0x170 [ 312.343385][T11953] ? __pfx__kstrtoull+0x10/0x10 [ 312.343400][T11953] ___sys_sendmsg+0x134/0x1d0 [ 312.343417][T11953] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.343431][T11953] ? __lock_acquire+0x622/0x1c90 [ 312.343459][T11953] ? __pfx___might_resched+0x10/0x10 [ 312.343474][T11953] __sys_sendmmsg+0x2f9/0x420 [ 312.343491][T11953] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.343512][T11953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 312.343535][T11953] ? fput+0x70/0xf0 [ 312.343545][T11953] ? ksys_write+0x1ac/0x250 [ 312.343560][T11953] ? __pfx_ksys_write+0x10/0x10 [ 312.343578][T11953] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 312.343596][T11953] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 312.343612][T11953] __do_fast_syscall_32+0x7c/0x3a0 [ 312.343630][T11953] do_fast_syscall_32+0x32/0x80 [ 312.343647][T11953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.343672][T11953] RIP: 0023:0xf7fc3579 [ 312.343681][T11953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.343692][T11953] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 312.343702][T11953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 312.343709][T11953] RDX: 0000000000000077 RSI: 0000000000007600 RDI: 0000000000000000 [ 312.343715][T11953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.343721][T11953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.343727][T11953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.343741][T11953] [ 313.446696][T11975] loop6: detected capacity change from 0 to 524287999 [ 314.572729][T11992] x_tables: duplicate underflow at hook 2 [ 314.635953][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 315.213754][T12013] FAULT_INJECTION: forcing a failure. [ 315.213754][T12013] name failslab, interval 1, probability 0, space 0, times 0 [ 315.218849][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.2.1636 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 315.218882][T12013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.218892][T12013] Call Trace: [ 315.218898][T12013] [ 315.218906][T12013] dump_stack_lvl+0x16c/0x1f0 [ 315.218935][T12013] should_fail_ex+0x512/0x640 [ 315.218957][T12013] ? __kvmalloc_node_noprof+0x124/0x620 [ 315.218981][T12013] should_failslab+0xc2/0x120 [ 315.218996][T12013] __kvmalloc_node_noprof+0x137/0x620 [ 315.219018][T12013] ? alloc_netdev_mqs+0xfbe/0x1570 [ 315.219047][T12013] ? alloc_netdev_mqs+0xfbe/0x1570 [ 315.219069][T12013] alloc_netdev_mqs+0xfbe/0x1570 [ 315.219105][T12013] rtnl_create_link+0xc08/0xf90 [ 315.219134][T12013] rtnl_newlink+0xb69/0x2000 [ 315.219166][T12013] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.219190][T12013] ? __pfx___schedule+0x10/0x10 [ 315.219229][T12013] ? rcu_is_watching+0x12/0xc0 [ 315.219246][T12013] ? trace_cap_capable+0x18d/0x200 [ 315.219268][T12013] ? find_held_lock+0x2b/0x80 [ 315.219284][T12013] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.219307][T12013] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.219330][T12013] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 315.219355][T12013] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.219379][T12013] rtnetlink_rcv_msg+0x95e/0xe90 [ 315.219406][T12013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.219430][T12013] ? __lock_acquire+0xb8a/0x1c90 [ 315.219462][T12013] netlink_rcv_skb+0x155/0x420 [ 315.219479][T12013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.219505][T12013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.219519][T12013] ? rcu_is_watching+0x12/0xc0 [ 315.219552][T12013] netlink_unicast+0x58d/0x850 [ 315.219571][T12013] ? __pfx_netlink_unicast+0x10/0x10 [ 315.219594][T12013] netlink_sendmsg+0x8d1/0xdd0 [ 315.219614][T12013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.219633][T12013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.219653][T12013] ____sys_sendmsg+0xa95/0xc70 [ 315.219673][T12013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.219689][T12013] ? get_compat_msghdr+0x11a/0x170 [ 315.219718][T12013] ? __lock_acquire+0x622/0x1c90 [ 315.219742][T12013] ___sys_sendmsg+0x134/0x1d0 [ 315.219766][T12013] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.219786][T12013] ? __lock_acquire+0x622/0x1c90 [ 315.219837][T12013] __sys_sendmmsg+0x2f9/0x420 [ 315.219863][T12013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.219935][T12013] ? fput+0x70/0xf0 [ 315.219951][T12013] ? ksys_write+0x1ac/0x250 [ 315.219979][T12013] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 315.220003][T12013] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 315.220027][T12013] __do_fast_syscall_32+0x7c/0x3a0 [ 315.220052][T12013] do_fast_syscall_32+0x32/0x80 [ 315.220075][T12013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.220101][T12013] RIP: 0023:0xf7fc3579 [ 315.220114][T12013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.220130][T12013] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 315.220146][T12013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 315.220156][T12013] RDX: 0000000092492627 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.220165][T12013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.220175][T12013] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 315.220184][T12013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.220207][T12013] [ 316.565310][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.567390][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.145665][T12042] netlink: 'syz.2.1645': attribute type 39 has an invalid length. [ 317.608394][T12053] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1648'. [ 332.155812][ T1418] ================================================================== [ 332.158334][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 332.160563][ T1418] Read of size 8 at addr ffff88806afd6020 by task aoe_tx0/1418 [ 332.164404][ T1418] [ 332.165210][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 332.165224][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.165232][ T1418] Call Trace: [ 332.165236][ T1418] [ 332.165240][ T1418] dump_stack_lvl+0x116/0x1f0 [ 332.165259][ T1418] print_report+0xcd/0x680 [ 332.165269][ T1418] ? __virt_addr_valid+0x81/0x610 [ 332.165281][ T1418] ? __phys_addr+0xe8/0x180 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.165293][ T1418] ? handle_tx+0x5a5/0x630 [ 332.165302][ T1418] kasan_report+0xe0/0x110 [ 332.165311][ T1418] ? handle_tx+0x5a5/0x630 [ 332.165322][ T1418] handle_tx+0x5a5/0x630 [ 332.165334][ T1418] dev_hard_start_xmit+0x97/0x740 [ 332.165349][ T1418] __dev_queue_xmit+0x7eb/0x43e0 [ 332.165364][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.165378][ T1418] ? finish_task_switch.isra.0+0x221/0xc10 [ 332.165391][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.165402][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 332.165417][ T1418] ? __lock_acquire+0xb8a/0x1c90 [ 332.165432][ T1418] ? __lock_acquire+0xb8a/0x1c90 [ 332.165449][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 332.165468][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.165480][ T1418] tx+0xcc/0x190 [ 332.165493][ T1418] ? __pfx_tx+0x10/0x10 [ 332.165507][ T1418] kthread+0x1e1/0x3e0 [ 332.165519][ T1418] ? find_held_lock+0x2b/0x80 [ 332.165533][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.165545][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 332.165563][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.165580][ T1418] ? __kthread_parkme+0x19e/0x250 [ 332.165594][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.165603][ T1418] kthread+0x3c2/0x780 [ 332.165618][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.165634][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.165645][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.165660][ T1418] ret_from_fork+0x5d7/0x6f0 [ 332.165675][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.165690][ T1418] ret_from_fork_asm+0x1a/0x30 [ 332.165705][ T1418] [ 332.165709][ T1418] [ 332.227429][ T1418] Allocated by task 8791: [ 332.228779][ T1418] kasan_save_stack+0x33/0x60 [ 332.230250][ T1418] kasan_save_track+0x14/0x30 [ 332.231731][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 332.233194][ T1418] alloc_tty_struct+0x96/0x8c0 [ 332.234705][ T1418] tty_init_dev.part.0+0x1e/0x500 [ 332.236300][ T1418] tty_open+0xa50/0xf90 [ 332.237634][ T1418] chrdev_open+0x234/0x6a0 [ 332.239033][ T1418] do_dentry_open+0x741/0x1c10 [ 332.240537][ T1418] vfs_open+0x82/0x3f0 [ 332.241809][ T1418] path_openat+0x1de4/0x2cb0 [ 332.243250][ T1418] do_filp_open+0x20b/0x470 [ 332.244672][ T1418] do_sys_openat2+0x11b/0x1d0 [ 332.246145][ T1418] __ia32_compat_sys_openat+0x16d/0x210 [ 332.247863][ T1418] __do_fast_syscall_32+0x7c/0x3a0 [ 332.249455][ T1418] do_fast_syscall_32+0x32/0x80 [ 332.250964][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.252945][ T1418] [ 332.253700][ T1418] Freed by task 6026: [ 332.254971][ T1418] kasan_save_stack+0x33/0x60 [ 332.256481][ T1418] kasan_save_track+0x14/0x30 [ 332.257985][ T1418] kasan_save_free_info+0x3b/0x60 [ 332.259553][ T1418] __kasan_slab_free+0x51/0x70 [ 332.261051][ T1418] kfree+0x2b4/0x4d0 [ 332.262282][ T1418] process_one_work+0x9cf/0x1b70 [ 332.263833][ T1418] worker_thread+0x6c8/0xf10 [ 332.265280][ T1418] kthread+0x3c2/0x780 [ 332.266570][ T1418] ret_from_fork+0x5d7/0x6f0 [ 332.268020][ T1418] ret_from_fork_asm+0x1a/0x30 [ 332.269511][ T1418] [ 332.270274][ T1418] Last potentially related work creation: [ 332.272033][ T1418] kasan_save_stack+0x33/0x60 [ 332.273520][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 332.275152][ T1418] insert_work+0x36/0x230 [ 332.276538][ T1418] __queue_work+0x97e/0x10f0 [ 332.278021][ T1418] queue_work_on+0x1a4/0x1f0 [ 332.279464][ T1418] release_tty+0x4de/0x5d0 [ 332.280873][ T1418] tty_release_struct+0xb7/0xe0 [ 332.282398][ T1418] tty_release+0xe2d/0x1430 [ 332.283828][ T1418] __fput+0x402/0xb70 [ 332.285098][ T1418] task_work_run+0x150/0x240 [ 332.286562][ T1418] do_exit+0x86c/0x2bd0 [ 332.287878][ T1418] do_group_exit+0xd3/0x2a0 [ 332.289305][ T1418] get_signal+0x2673/0x26d0 [ 332.290721][ T1418] arch_do_signal_or_restart+0x8f/0x790 [ 332.292452][ T1418] exit_to_user_mode_loop+0x84/0x110 [ 332.294150][ T1418] __do_fast_syscall_32+0x2ac/0x3a0 [ 332.295810][ T1418] do_fast_syscall_32+0x32/0x80 [ 332.297335][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.299325][ T1418] [ 332.300094][ T1418] The buggy address belongs to the object at ffff88806afd6000 [ 332.300094][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 332.304429][ T1418] The buggy address is located 32 bytes inside of [ 332.304429][ T1418] freed 2048-byte region [ffff88806afd6000, ffff88806afd6800) [ 332.308493][ T1418] [ 332.309256][ T1418] The buggy address belongs to the physical page: [ 332.311227][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806afd5000 pfn:0x6afd0 [ 332.314299][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.316878][ T1418] memcg:ffff88806c717681 [ 332.318238][ T1418] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 332.320876][ T1418] page_type: f5(slab) [ 332.322127][ T1418] raw: 04fff00000000240 ffff88801b84c140 ffffea0001b94010 ffffea000145f610 [ 332.324794][ T1418] raw: ffff88806afd5000 0000000000080007 00000000f5000000 ffff88806c717681 [ 332.327439][ T1418] head: 04fff00000000240 ffff88801b84c140 ffffea0001b94010 ffffea000145f610 [ 332.330104][ T1418] head: ffff88806afd5000 0000000000080007 00000000f5000000 ffff88806c717681 [ 332.332771][ T1418] head: 04fff00000000003 ffffea0001abf401 00000000ffffffff 00000000ffffffff [ 332.335431][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 332.338135][ T1418] page dumped because: kasan: bad access detected [ 332.340110][ T1418] page_owner tracks the page as allocated [ 332.341860][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6278, tgid 6276 (syz.0.59), ts 62070441275, free_ts 62044220392 [ 332.348152][ T1418] post_alloc_hook+0x1c0/0x230 [ 332.349648][ T1418] get_page_from_freelist+0x1321/0x3890 [ 332.351358][ T1418] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 332.353254][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 332.354783][ T1418] new_slab+0x23b/0x330 [ 332.356113][ T1418] ___slab_alloc+0xd9c/0x1940 [ 332.357629][ T1418] __slab_alloc.constprop.0+0x56/0xb0 [ 332.359292][ T1418] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 332.361282][ T1418] kmemdup_noprof+0x29/0x60 [ 332.362715][ T1418] neigh_sysctl_register+0xb2/0x670 [ 332.364342][ T1418] addrconf_sysctl_register+0xb9/0x1f0 [ 332.366042][ T1418] ipv6_add_dev+0xb39/0x15f0 [ 332.367492][ T1418] addrconf_notify+0x53e/0x19e0 [ 332.369027][ T1418] notifier_call_chain+0xbc/0x410 [ 332.370589][ T1418] call_netdevice_notifiers_info+0xbe/0x140 [ 332.372421][ T1418] register_netdevice+0x182e/0x2270 [ 332.374040][ T1418] page last free pid 6276 tgid 6276 stack trace: [ 332.376029][ T1418] __free_frozen_pages+0x7fe/0x1180 [ 332.377681][ T1418] __put_partials+0x16d/0x1c0 [ 332.379143][ T1418] qlist_free_all+0x4d/0x120 [ 332.380610][ T1418] kasan_quarantine_reduce+0x195/0x1e0 [ 332.382297][ T1418] __kasan_slab_alloc+0x69/0x90 [ 332.383819][ T1418] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 332.385528][ T1418] jbd2__journal_start+0x193/0x6a0 [ 332.387120][ T1418] __ext4_journal_start_sb+0x195/0x690 [ 332.388866][ T1418] ext4_dirty_inode+0xa1/0x130 [ 332.390330][ T1418] __mark_inode_dirty+0x1ee/0xe50 [ 332.391859][ T1418] generic_update_time+0xcf/0xf0 [ 332.393416][ T1418] file_update_time+0x17d/0x1c0 [ 332.394931][ T1418] ext4_page_mkwrite+0x35e/0x1760 [ 332.396530][ T1418] do_page_mkwrite+0x171/0x380 [ 332.398058][ T1418] __handle_mm_fault+0x3829/0x5490 [ 332.399659][ T1418] handle_mm_fault+0x589/0xd10 [ 332.401173][ T1418] [ 332.401932][ T1418] Memory state around the buggy address: [ 332.403662][ T1418] ffff88806afd5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.406132][ T1418] ffff88806afd5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.408661][ T1418] >ffff88806afd6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.411105][ T1418] ^ [ 332.412691][ T1418] ffff88806afd6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.415162][ T1418] ffff88806afd6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.417671][ T1418] ================================================================== [ 332.420236][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.422452][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 332.426065][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.429426][ T1418] Call Trace: [ 332.430467][ T1418] [ 332.431799][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 332.433754][ T1418] panic+0x71c/0x800 [ 332.435299][ T1418] ? __pfx_panic+0x10/0x10 [ 332.437071][ T1418] ? irqentry_exit+0x3b/0x90 [ 332.438900][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.440814][ T1418] ? handle_tx+0x5a5/0x630 [ 332.442426][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 332.444430][ T1418] ? handle_tx+0x5a5/0x630 [ 332.446181][ T1418] check_panic_on_warn+0xab/0xb0 [ 332.448127][ T1418] end_report+0x107/0x170 [ 332.449819][ T1418] kasan_report+0xee/0x110 [ 332.451748][ T1418] ? handle_tx+0x5a5/0x630 [ 332.453302][ T1418] handle_tx+0x5a5/0x630 [ 332.454638][ T1418] dev_hard_start_xmit+0x97/0x740 [ 332.456222][ T1418] __dev_queue_xmit+0x7eb/0x43e0 [ 332.457767][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.459408][ T1418] ? finish_task_switch.isra.0+0x221/0xc10 [ 332.461243][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.462747][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 332.464463][ T1418] ? __lock_acquire+0xb8a/0x1c90 [ 332.466017][ T1418] ? __lock_acquire+0xb8a/0x1c90 [ 332.467579][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 332.469214][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.470713][ T1418] tx+0xcc/0x190 [ 332.471874][ T1418] ? __pfx_tx+0x10/0x10 [ 332.473208][ T1418] kthread+0x1e1/0x3e0 [ 332.474494][ T1418] ? find_held_lock+0x2b/0x80 [ 332.475979][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.477426][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 332.479251][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.480890][ T1418] ? __kthread_parkme+0x19e/0x250 [ 332.482471][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.483963][ T1418] kthread+0x3c2/0x780 [ 332.485256][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.486703][ T1418] ? rcu_is_watching+0x12/0xc0 [ 332.488217][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.489715][ T1418] ret_from_fork+0x5d7/0x6f0 [ 332.491186][ T1418] ? __pfx_kthread+0x10/0x10 [ 332.492673][ T1418] ret_from_fork_asm+0x1a/0x30 [ 332.494199][ T1418] [ 332.495880][ T1418] Kernel Offset: disabled [ 332.497252][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:47:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85583b65 RDI=ffffffff9b0ab980 RBP=ffffffff9b0ab940 RSP=ffffc9000778f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b0ab940 R15=ffffffff85583b00 RIP=ffffffff85583b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097521000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000050a82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab5b8db 00007ffdfab5b8db ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab5bde0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfab5bde0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61637379735f74 7361665f6f642020 5d3331303231545b 5d32353030323200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6661637373735574 7361665565642020 5733313032315451 5732353030323200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6870203435313230 3865656569205d38 31343154205b5d30 39333736352e3631 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030203030203030 2030302036322034 6220643820303020 3030203030203030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2036322034622064 3820303920303920 3039203039203363 203935206135203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64353c2030382064 6320343320663020 3565203938203535 2032352031352030 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020303020303020 3030203030203030 2030302030302030 3020303020303020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a746e6573657270 20426b3834333a67 6e69646e65706574 69727720426b3633 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8f6e2e18 RCX=ffffffff819861fc RDX=0000000000000000 RSI=ffffffff8df1f549 RDI=ffffffff8c1578e0 RBP=0000000000000000 RSP=ffffc9000397fbb0 R8 =0000000000000001 R9 =fffff5200072ff73 R10=0000000000000003 R11=0000000000000001 R12=ffffffff867bbe10 R13=0000000000000283 R14=ffff88802403a440 R15=00000000000018c7 RIP=ffffffff819811cc RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097621000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000579144ac CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4ff0c1151e46ca9 8412c3fb137e5eaa ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bec7d600af80ff79 bf75f92cb5a82f3c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 663242ea0e8cf81b 1e71a619860e25f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ac835abd730d992 77fc1e1a6e15e447 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 244a38e594147507 c2445a120e73b6ae ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 10e0131bf910aa67 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a428565299801dfa 6e2b56e23ef2234a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dca8526f00000000 056bb7a3b2503722 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 755850b62ded0a77 f49249239bccd430 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc2afe63fe0b87a3 db84cbc97310337c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000032 000056381ad4b2bf 0000000000000021 0000000000000033 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030623a7475706e 693d5341494c4144 4f4d006566663830 3030312030303030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c524d3a5b06091d 463d2064663f6444 0b014f3a23257976 6275656e79307573 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d776f7f7f7f7f7f 677d7f7f777f7f7f 7f797f7e7f7f7f77 7f7d6f7e7f3d757f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3000303030373131 4d39203930380030 3030373000312030 3030383130303830 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30002c30302c3131 4d2c202c30380030 3030003000302030 3030312030303030 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888023152440 RCX=ffffffff8b853726 RDX=ffff88802b43af08 RSI=0000000000000008 RDI=ffff88802b43a490 RBP=ffffc9000100fd80 RSP=ffffc9000100fbd0 R8 =0000000000000001 R9 =ffffed1004182910 R10=ffff888020c14887 R11=0000000000000001 R12=ffffffff8df29938 R13=ffff88802b43a400 R14=ffff888020c14880 R15=ffff88802b43a400 RIP=ffffffff8b8537a4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097721000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a61444ef40 CR3=000000004c31d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e308678c53f94f0f bf0dc294bb299fb7 e308678c53f94f0f bf0dc294bb299fb7 e308678c53f94f0f bf0dc294bb299fb7 e308678c53f94f0f bf0dc294bb299fb7 ZMM18=ef588a1260ddc6f2 451fafc10c8a2c91 ef588a1260ddc6f2 451fafc10c8a2c91 ef588a1260ddc6f2 451fafc10c8a2c91 ef588a1260ddc6f2 451fafc10c8a2c91 ZMM19=5d0c000000000000 0000000000000004 5d0c000000000000 0000000000000003 5d0c000000000000 0000000000000002 5d0c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373fffffffff821d beeaffffffff821d bed3ffffffff821d be79ffffffff821d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd65ffffffff821d bd07ffffffff821d bb82ffffffff821d bb78ffffffff821d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb37ffffffff821d b88affffffff821d b7bfffffffff821d 8780ffffffff821d ZMM24=7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b 7ef4776b7ef4776b ZMM25=d155d584d155d584 d155d584d155d584 d155d584d155d584 d155d584d155d584 d155d584d155d584 d155d584d155d584 d155d584d155d584 d155d584d155d584 ZMM26=4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 4e8c62434e8c6243 ZMM27=2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed 2415d4ed2415d4ed ZMM28=000001d0000001cf 000001ce000001cd 000001cc000001cb 000001ca000001c9 000001c8000001c7 000001c6000001c5 000001c4000001c3 000001c2000001c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4013000040130000 4013000040130000 4013000040130000 4013000040130000 4013000040130000 4013000040130000 4013000040130000 4013000040130000 info registers vcpu 3 CPU#3 RAX=ffffc90000415000 RBX=ffff888043757800 RCX=ffffffff819c3697 RDX=1ffff110086eae86 RSI=ffffffff865f8024 RDI=ffff888043757430 RBP=0000000000000001 RSP=ffffc900005e8ea8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffc90000415008 R13=ffff888043757428 R14=ffff88804060b000 R15=0000000000000000 RIP=ffffffff865f8072 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097821000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7485004 CR3=0000000070d91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddae01971070f206 b9c95b00b21a316a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6004fd41e904ed6a 352d8a0ed9739dd8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ba3f0942682e678 8863966c6350ccf8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9e3fcdf60ba8b7e d44d020ad861f2bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b9fe16d000000ca 00a431c249107558 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ca00000000 000000ca00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000049069722 0059f5b148bf1132 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 009d8d3749f56438 000000ca9f220650 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca1397e76e2f7dc5 5015501abaaccf23 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a95359d03e913b 10acc6403ead37e5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000