last executing test programs: 6.600090563s ago: executing program 0 (id=4715): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114000000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 6.429913184s ago: executing program 0 (id=4716): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = syz_open_dev$audion(&(0x7f00000003c0), 0x7, 0x80) syz_io_uring_setup(0x10001e1d, &(0x7f0000000200)={0x0, 0x86f7, 0x800, 0x10004, 0x2000000, 0x0, r0}, 0x0, 0x0) unshare(0x2040400) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x4000000, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r4, 0x5329, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffebf, &(0x7f0000000400)={&(0x7f0000000480)=@gettaction={0x34, 0x32, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf6f}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50341, 0x0) lseek(r5, 0xfffffffffffffffe, 0x1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0xfffffbfffffffffa, 0x3, 0x7b, 0x8000000000000001, 0x4, 0x5, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)={0x3ff, 0x0, 0x0, 0x2, 0x400000000, 0xd3, 0x7, 0x3}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) 5.999541231s ago: executing program 0 (id=4720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7323, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.509625486s ago: executing program 2 (id=4726): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x0, 0xffff}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', r3, 0x20, 0xb0, 0x7f, 0xea8d, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x3, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0xa5, 0x0, 0xc, [0xbb8, 0x7, 0x7, 0xfffffffc, 0x4]}]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@bridge_newvlan={0x60, 0x70, 0x400, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}]}, 0x60}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) timer_create(0x0, 0x0, &(0x7f0000000000)) (async, rerun: 32) timer_delete(0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4002, &(0x7f0000000100)='barrier') 5.419558365s ago: executing program 2 (id=4727): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x102) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'macsec0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x6, 0x12, 0xe61a, "7338c79d0e80"}}) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0xb, 0x7fffffff, 0x47308f7c, 0x54102, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0xe, @void, @value, @value=r5}, 0x50) openat$proc_mixer(0xffffff9c, &(0x7f0000001100)='/proc/asound/card1/oss_mixer\x00', 0x100, 0x0) sendfile(r0, r3, 0x0, 0xb) 5.029731102s ago: executing program 0 (id=4730): openat(0xffffffffffffff9c, 0x0, 0x10200, 0x1d) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x58}}, 0x0) eventfd(0xff7ffff7) prlimit64(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_clone(0x25000000, 0x0, 0xfffffdae, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000006140)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.446739653s ago: executing program 2 (id=4732): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x9) ioperm(0x0, 0x9, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"], 0x40}, 0x20000004) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0xffd}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000080)=@usbdevfs_connect={0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xffffffffffffffaf, 0x0, &(0x7f0000000140), 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioperm(0x6, 0x7, 0x2) ioctl$EVIOCSCLOCKID(r4, 0x40084504, &(0x7f0000ffcffc)) r5 = getpid() openat$rtc(0xffffff9c, &(0x7f0000000000), 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12) r7 = openat$ptp1(0xffffff9c, &(0x7f0000000240), 0x8000, 0x0) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 4.406266141s ago: executing program 3 (id=4733): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x177981, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000025c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32, @ANYRES32, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffff", @ANYRES32, @ANYRES32, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ff", @ANYRES32, @ANYRES32, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a000000000000000600000000000000060000000000000003", @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32, @ANYRES32, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f00000000008000400000", @ANYBLOB="4e34a940476410c063aedd11fc95096279e694752a414f876660299121126278720fa75d28bdea2783087d985dfff5fc7f0ef443b15b1e3cb2588108abcf0d68b99933538ad10e252a61aafc5484dae00d567b5484da99bf35ff1120fa842e85880139e373f3e9c6d2ae0c04486691758c6d03ec7f4736c27a387fa04c39a65690fad7c4e62c09f6b4ddc52fd7a8d2075251287bf3c3f23f295b06", @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff0600000000400000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB], 0x658) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0xee01, 0xee00, r5, 0x0, 0x1}, 0x0, 0x0, 0xfff, 0x800, 0x800, 0x80000000, 0x2, 0x58, 0x7fff, 0x69, r0, r0}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r6, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r7, 0x3516, 0x3e44, 0x8, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x10001b, 0xfe}, 0x20) 4.406054488s ago: executing program 0 (id=4734): socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001900)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r6, 0x541c, 0x0) 4.260009011s ago: executing program 2 (id=4735): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000001bc0)={'trans=virtio,', {[{@cache_readahead}]}}) 4.135993534s ago: executing program 2 (id=4736): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) (fail_nth: 4) 3.52062235s ago: executing program 3 (id=4738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7323, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.078507427s ago: executing program 2 (id=4739): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x80, 0x1) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 2.998616033s ago: executing program 0 (id=4742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='rxrpc_rtt_rx\x00', r0}, 0x18) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2084) writev(r1, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = dup(r4) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000) r6 = io_uring_setup(0x4019, &(0x7f0000000000)={0x0, 0x8f63, 0x1, 0x0, 0xe0, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x300000a, 0x10, r6, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x5b03, &(0x7f0000000040)) fspick(r1, &(0x7f00000029c0)='./file0\x00', 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) dup2(r10, 0xffffffffffffffff) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r11, 0x3302) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 2.54987096s ago: executing program 3 (id=4744): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000001bc0)={'trans=virtio,', {[{@cache_readahead}]}}) 2.449884002s ago: executing program 3 (id=4745): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) semget(0x1, 0x3, 0x319) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x5, 0x71bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x600, 0x64}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}, 0x1, 0x2, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001a0001002cbd7000000000000a800000000000010000000000000300", @ANYRES32=0x0, @ANYBLOB="1d0008801bad3b695c96e1b5b4c15c4442d9020d368ca937affff7e71000000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x1}}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) ioperm(0x0, 0x1, 0x1bf4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.758240655s ago: executing program 1 (id=4747): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x890c, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.699721096s ago: executing program 1 (id=4748): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x80, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 1.699409977s ago: executing program 1 (id=4749): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x349241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaa01008848293e00"/24], 0x18) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="805f893267f878b5f500265a5ad7b00e50d13f0b65395cdfe156d0c8cfc0ba8f773b822752c7a0d6ed14e382f47ba7b360cd848b", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x4, 0x1, {0xfc}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.429390788s ago: executing program 1 (id=4750): socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001900)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r6, 0x541c, 0x0) 909.927461ms ago: executing program 3 (id=4751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7323, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 468.880617ms ago: executing program 1 (id=4752): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000001bc0)={'trans=virtio,', {[{@cache_readahead}]}}) 378.606321ms ago: executing program 1 (id=4753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) fcntl$setstatus(r3, 0x407, 0x46800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000024c0)=[{{&(0x7f0000000440)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/181, 0xb5}, {&(0x7f0000000a80)=""/209, 0xd1}, {&(0x7f0000000b80)=""/134, 0x86}], 0x8, &(0x7f0000000c40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001c40)=@nl=@unspec, 0x80, &(0x7f0000000700)=[{&(0x7f0000001cc0)=""/96, 0x60}, {&(0x7f0000001d40)=""/125, 0x7d}, {&(0x7f0000001dc0)=""/124, 0x7c}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001e40)=""/249, 0xf9}, {&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/227, 0xe3}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/64, 0x40}, {&(0x7f00000022c0)=""/65, 0x41}], 0x7}, 0x1}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/33, 0x21}], 0x1, &(0x7f0000002480)=""/41, 0x29}, 0xfff}], 0x4, 0x20, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100000900000000000000000000000000000000000c00490008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xe, 0x5, 0x42, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x1, 0x761}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000006e0000000200000000000085000000560000950000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 0s ago: executing program 3 (id=4754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) kernel console output (not intermixed with test programs): tlink: 44 bytes leftover after parsing attributes in process `syz.2.4491'. [ 914.375536][T24691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4491'. [ 914.440713][T24691] binder: BC_ATTEMPT_ACQUIRE not supported [ 914.442563][T24691] binder: 24690:24691 ioctl c0306201 80000100 returned -22 [ 915.635705][T24724] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4498'. [ 915.639977][T24724] block nbd0: Unsupported socket: shutdown callout must be supported. [ 915.644488][T24720] wireguard0: entered promiscuous mode [ 915.646971][T24720] wireguard0: entered allmulticast mode [ 915.805980][T24727] FAULT_INJECTION: forcing a failure. [ 915.805980][T24727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.811413][T24727] CPU: 2 UID: 0 PID: 24727 Comm: syz.2.4500 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 915.811435][T24727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 915.811446][T24727] Call Trace: [ 915.811452][T24727] [ 915.811459][T24727] dump_stack_lvl+0x16c/0x1f0 [ 915.811486][T24727] should_fail_ex+0x512/0x640 [ 915.811513][T24727] strncpy_from_user+0x3b/0x2e0 [ 915.811536][T24727] bpf_prog_load+0x1aef/0x2490 [ 915.811566][T24727] ? __pfx_bpf_prog_load+0x10/0x10 [ 915.811608][T24727] ? bpf_lsm_bpf+0x9/0x10 [ 915.811627][T24727] __sys_bpf+0x433c/0x4d80 [ 915.811653][T24727] ? __pfx___sys_bpf+0x10/0x10 [ 915.811675][T24727] ? ksys_write+0x190/0x240 [ 915.811695][T24727] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 915.811732][T24727] ? fput+0x70/0xf0 [ 915.811751][T24727] ? ksys_write+0x1b9/0x240 [ 915.811766][T24727] ? __pfx_ksys_write+0x10/0x10 [ 915.811784][T24727] __ia32_sys_bpf+0x76/0xe0 [ 915.811809][T24727] __do_fast_syscall_32+0x73/0x120 [ 915.811834][T24727] do_fast_syscall_32+0x32/0x80 [ 915.811855][T24727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.811875][T24727] RIP: 0023:0xf7f26579 [ 915.811888][T24727] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 915.811903][T24727] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 915.811919][T24727] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 915.811929][T24727] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.811939][T24727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.811948][T24727] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 915.811957][T24727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.811987][T24727] [ 916.024308][T24731] xt_TCPMSS: Only works on TCP SYN packets [ 917.076177][T24757] netlink: 'syz.0.4505': attribute type 11 has an invalid length. [ 917.078855][T24757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4505'. [ 917.138149][T24759] syz.2.4508: attempt to access beyond end of device [ 917.138149][T24759] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 917.288232][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.291454][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.297101][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.305141][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.308616][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.312250][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.316600][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.320672][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.324681][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.327567][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.329998][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.332542][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.335286][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.338546][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.341888][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.345080][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.348163][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.351202][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.354351][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.357632][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.360895][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.364159][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.367439][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.369792][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.372150][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.374743][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.377209][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.379516][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.381778][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.384186][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.386851][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.389210][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 917.404052][ T6640] hid-generic 0004:FFFFFFFF:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 917.524498][ T5989] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 917.639775][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.642231][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.646941][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.649947][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.652368][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.655362][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.657759][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.660190][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.662580][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.666044][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.668427][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.670801][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.673172][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.675746][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.678148][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.680528][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.682905][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.685465][ T5989] usb 7-1: config 0 has no interfaces? [ 917.687545][ T5989] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 917.687886][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.693646][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.693650][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.696419][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696433][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696444][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696455][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696466][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696478][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696489][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696500][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696511][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696523][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696534][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696545][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.696556][T14865] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 917.698590][T14865] hid-generic 0004:FFFFFFFF:0000.000C: hidraw2: HID v0.00 Device [syz0] on syz0 [ 917.703931][ T5989] usb 7-1: config 0 descriptor?? [ 917.904465][T16965] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 918.057485][T16965] usb 5-1: config 0 has no interfaces? [ 918.059391][T16965] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 918.062564][T16965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.067255][T16965] usb 5-1: config 0 descriptor?? [ 918.104460][T24763] FAULT_INJECTION: forcing a failure. [ 918.104460][T24763] name failslab, interval 1, probability 0, space 0, times 1 [ 918.108657][T24763] CPU: 1 UID: 0 PID: 24763 Comm: syz.2.4508 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 918.108672][T24763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 918.108678][T24763] Call Trace: [ 918.108683][T24763] [ 918.108687][T24763] dump_stack_lvl+0x16c/0x1f0 [ 918.108704][T24763] should_fail_ex+0x512/0x640 [ 918.108732][T24763] should_failslab+0xc2/0x120 [ 918.108747][T24763] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 918.108759][T24763] ? __alloc_skb+0x2b2/0x380 [ 918.108770][T24763] ? __lock_acquire+0x5ca/0x1ba0 [ 918.108784][T24763] __alloc_skb+0x2b2/0x380 [ 918.108793][T24763] ? __pfx___alloc_skb+0x10/0x10 [ 918.108808][T24763] tipc_buf_acquire+0x26/0xe0 [ 918.108819][T24763] tipc_msg_reverse+0x1e9/0x920 [ 918.108833][T24763] tipc_sk_respond+0xfe/0x310 [ 918.108848][T24763] ? __pfx_tipc_sk_respond+0x10/0x10 [ 918.108863][T24763] ? __lock_acquire+0x5ca/0x1ba0 [ 918.108875][T24763] ? register_lock_class+0x41/0x4c0 [ 918.108887][T24763] ? look_up_lock_class+0x6b/0x150 [ 918.108906][T24763] tsk_rej_rx_queue+0x10f/0x1d0 [ 918.108923][T24763] __tipc_shutdown+0x724/0xee0 [ 918.108941][T24763] ? __pfx___tipc_shutdown+0x10/0x10 [ 918.108957][T24763] ? do_raw_spin_lock+0x12c/0x2b0 [ 918.108971][T24763] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 918.108986][T24763] ? __pfx_woken_wake_function+0x10/0x10 [ 918.109003][T24763] ? tipc_sk_filtering+0x420/0x520 [ 918.109020][T24763] tipc_release+0xe2/0x1640 [ 918.109034][T24763] ? down_write+0x14d/0x200 [ 918.109048][T24763] ? __pfx_down_write+0x10/0x10 [ 918.109062][T24763] ? __pfx_locks_remove_file+0x10/0x10 [ 918.109078][T24763] __sock_release+0xb0/0x270 [ 918.109090][T24763] ? __pfx_sock_close+0x10/0x10 [ 918.109100][T24763] sock_close+0x1c/0x30 [ 918.109110][T24763] __fput+0x3ff/0xb70 [ 918.109125][T24763] fput_close_sync+0x118/0x260 [ 918.109138][T24763] ? __pfx_fput_close_sync+0x10/0x10 [ 918.109149][T24763] ? dnotify_flush+0x79/0x4c0 [ 918.109162][T24763] __ia32_sys_close+0x8b/0x120 [ 918.109176][T24763] __do_fast_syscall_32+0x73/0x120 [ 918.109191][T24763] do_fast_syscall_32+0x32/0x80 [ 918.109204][T24763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.109216][T24763] RIP: 0023:0xf7f26579 [ 918.109225][T24763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 918.109234][T24763] RSP: 002b:00000000f502555c EFLAGS: 00000296 ORIG_RAX: 0000000000000006 [ 918.109244][T24763] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 918.109250][T24763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.109256][T24763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.109261][T24763] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 918.109267][T24763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.109279][T24763] [ 918.203754][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.257068][ T5989] usb 7-1: USB disconnect, device number 76 [ 918.519976][ T6640] usb 5-1: USB disconnect, device number 87 [ 921.093891][T24827] FAULT_INJECTION: forcing a failure. [ 921.093891][T24827] name failslab, interval 1, probability 0, space 0, times 0 [ 921.098531][T24827] CPU: 1 UID: 0 PID: 24827 Comm: syz.2.4519 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 921.098556][T24827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 921.098565][T24827] Call Trace: [ 921.098571][T24827] [ 921.098577][T24827] dump_stack_lvl+0x16c/0x1f0 [ 921.098601][T24827] should_fail_ex+0x512/0x640 [ 921.098620][T24827] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 921.098639][T24827] should_failslab+0xc2/0x120 [ 921.098657][T24827] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 921.098675][T24827] ? security_file_alloc+0x34/0x2b0 [ 921.098723][T24827] security_file_alloc+0x34/0x2b0 [ 921.098744][T24827] init_file+0x93/0x4c0 [ 921.098764][T24827] alloc_empty_file+0x73/0x1e0 [ 921.098784][T24827] alloc_file_pseudo+0x13a/0x230 [ 921.098806][T24827] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 921.098827][T24827] sock_alloc_file+0x50/0x210 [ 921.098842][T24827] do_accept+0x240/0x530 [ 921.098861][T24827] ? do_raw_spin_lock+0x12c/0x2b0 [ 921.098880][T24827] ? __pfx_do_accept+0x10/0x10 [ 921.098919][T24827] __sys_accept4+0x100/0x1b0 [ 921.098951][T24827] ? __pfx___sys_accept4+0x10/0x10 [ 921.098977][T24827] __ia32_sys_accept4+0x94/0x100 [ 921.099001][T24827] __do_fast_syscall_32+0x73/0x120 [ 921.099026][T24827] do_fast_syscall_32+0x32/0x80 [ 921.099048][T24827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.099069][T24827] RIP: 0023:0xf7f26579 [ 921.099080][T24827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 921.099094][T24827] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 921.099111][T24827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 921.099121][T24827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.099130][T24827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.099141][T24827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 921.099149][T24827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.099164][T24827] [ 921.176592][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.271316][T24852] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4524'. [ 923.078781][T24874] FAULT_INJECTION: forcing a failure. [ 923.078781][T24874] name failslab, interval 1, probability 0, space 0, times 0 [ 923.083954][T24874] CPU: 0 UID: 0 PID: 24874 Comm: syz.3.4527 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 923.083976][T24874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 923.083987][T24874] Call Trace: [ 923.083994][T24874] [ 923.084001][T24874] dump_stack_lvl+0x16c/0x1f0 [ 923.084027][T24874] should_fail_ex+0x512/0x640 [ 923.084053][T24874] should_failslab+0xc2/0x120 [ 923.084073][T24874] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 923.084094][T24874] ? skb_clone+0x190/0x3f0 [ 923.084117][T24874] skb_clone+0x190/0x3f0 [ 923.084137][T24874] netlink_deliver_tap+0xabd/0xd30 [ 923.084160][T24874] netlink_unicast+0x6b2/0x7f0 [ 923.084181][T24874] ? __pfx_netlink_unicast+0x10/0x10 [ 923.084208][T24874] netlink_ack+0x696/0xb80 [ 923.084233][T24874] netlink_rcv_skb+0x347/0x440 [ 923.084251][T24874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 923.084276][T24874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.084294][T24874] ? __pfx_aa_get_newest_label+0x10/0x10 [ 923.084321][T24874] ? bpf_lsm_capable+0x9/0x10 [ 923.084338][T24874] ? security_capable+0x7e/0x260 [ 923.084379][T24874] ? ns_capable+0xd7/0x110 [ 923.084400][T24874] nfnetlink_rcv+0x1b3/0x430 [ 923.084420][T24874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 923.084440][T24874] ? netlink_deliver_tap+0x1ae/0xd30 [ 923.084462][T24874] netlink_unicast+0x53a/0x7f0 [ 923.084484][T24874] ? __pfx_netlink_unicast+0x10/0x10 [ 923.084510][T24874] netlink_sendmsg+0x8d1/0xdd0 [ 923.084533][T24874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.084554][T24874] ? __import_iovec+0x1c8/0x660 [ 923.084585][T24874] ____sys_sendmsg+0xa95/0xc70 [ 923.084606][T24874] ? __bpf_trace_f2fs__folio+0x20/0x110 [ 923.084628][T24874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.084649][T24874] ? get_compat_msghdr+0x11a/0x170 [ 923.084678][T24874] ___sys_sendmsg+0x134/0x1d0 [ 923.084697][T24874] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.084743][T24874] __sys_sendmsg+0x16d/0x220 [ 923.084761][T24874] ? __pfx___sys_sendmsg+0x10/0x10 [ 923.084790][T24874] ? rcu_is_watching+0x12/0xc0 [ 923.084810][T24874] __do_fast_syscall_32+0x73/0x120 [ 923.084835][T24874] do_fast_syscall_32+0x32/0x80 [ 923.084857][T24874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 923.084877][T24874] RIP: 0023:0xf709e579 [ 923.084890][T24874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 923.084906][T24874] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 923.084927][T24874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 923.084939][T24874] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 923.084948][T24874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 923.084957][T24874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 923.084967][T24874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.084988][T24874] [ 923.460346][T24881] wireguard0: entered promiscuous mode [ 923.462135][T24881] wireguard0: entered allmulticast mode [ 923.492124][T24885] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4531'. [ 923.529608][T24889] syz.2.4533: attempt to access beyond end of device [ 923.529608][T24889] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 923.576599][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.579951][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.583202][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.588688][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.591669][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.594072][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.596720][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.599169][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.601584][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.604006][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.606863][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.609262][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.611696][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.614110][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.616831][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.619273][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.621710][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.624170][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.627014][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.629456][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.632081][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.634559][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.637005][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.639417][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.641827][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.644274][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.647610][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.650070][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.653434][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.657155][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 923.663867][ T5989] hid-generic 0004:FFFFFFFF:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 923.804600][T24127] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 923.967299][T24127] usb 7-1: config 0 has no interfaces? [ 923.969824][T24127] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 923.973741][T24127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.984659][T24127] usb 7-1: config 0 descriptor?? [ 924.515522][ T5989] usb 7-1: USB disconnect, device number 77 [ 925.265609][T24931] FAULT_INJECTION: forcing a failure. [ 925.265609][T24931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.271292][T24931] CPU: 0 UID: 0 PID: 24931 Comm: syz.3.4541 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 925.271315][T24931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 925.271325][T24931] Call Trace: [ 925.271332][T24931] [ 925.271353][T24931] dump_stack_lvl+0x16c/0x1f0 [ 925.271380][T24931] should_fail_ex+0x512/0x640 [ 925.271408][T24931] _copy_to_user+0x32/0xd0 [ 925.271434][T24931] simple_read_from_buffer+0xcb/0x170 [ 925.271459][T24931] proc_fail_nth_read+0x197/0x270 [ 925.271481][T24931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 925.271505][T24931] ? rw_verify_area+0xcf/0x680 [ 925.271526][T24931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 925.271548][T24931] vfs_read+0x1de/0xc70 [ 925.271566][T24931] ? __pfx___mutex_lock+0x10/0x10 [ 925.271585][T24931] ? __pfx_vfs_read+0x10/0x10 [ 925.271607][T24931] ? __fget_files+0x20e/0x3c0 [ 925.271636][T24931] ksys_read+0x12a/0x240 [ 925.271652][T24931] ? __pfx_ksys_read+0x10/0x10 [ 925.271669][T24931] ? rcu_is_watching+0x12/0xc0 [ 925.271689][T24931] __do_fast_syscall_32+0x73/0x120 [ 925.271711][T24931] do_fast_syscall_32+0x32/0x80 [ 925.271732][T24931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.271751][T24931] RIP: 0023:0xf709e579 [ 925.271765][T24931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 925.271779][T24931] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 925.271795][T24931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f508e620 [ 925.271806][T24931] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 925.271813][T24931] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 925.271830][T24931] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 925.271838][T24931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.271859][T24931] [ 925.431159][T24938] FAULT_INJECTION: forcing a failure. [ 925.431159][T24938] name failslab, interval 1, probability 0, space 0, times 0 [ 925.436702][T24938] CPU: 3 UID: 0 PID: 24938 Comm: syz.2.4543 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 925.436723][T24938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 925.436732][T24938] Call Trace: [ 925.436738][T24938] [ 925.436745][T24938] dump_stack_lvl+0x16c/0x1f0 [ 925.436770][T24938] should_fail_ex+0x512/0x640 [ 925.436791][T24938] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 925.436811][T24938] should_failslab+0xc2/0x120 [ 925.436828][T24938] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 925.436843][T24938] ? __pfx___might_resched+0x10/0x10 [ 925.436859][T24938] ? alloc_vmap_area+0x613/0x2970 [ 925.436885][T24938] alloc_vmap_area+0x613/0x2970 [ 925.436917][T24938] ? __pfx_alloc_vmap_area+0x10/0x10 [ 925.436944][T24938] __get_vm_area_node+0x1a7/0x300 [ 925.436971][T24938] __vmalloc_node_range_noprof+0x277/0x1540 [ 925.436994][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.437012][T24938] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 925.437027][T24938] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 925.437042][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.437057][T24938] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.437077][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.437090][T24938] vmalloc_noprof+0x6b/0x90 [ 925.437104][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.437121][T24938] compat_do_replace+0x1af/0x7c0 [ 925.437135][T24938] ? __pfx_compat_do_replace+0x10/0x10 [ 925.437147][T24938] ? aa_get_newest_label+0x375/0x680 [ 925.437158][T24938] ? __pfx_aa_get_newest_label+0x10/0x10 [ 925.437173][T24938] ? bpf_lsm_capable+0x9/0x10 [ 925.437184][T24938] ? security_capable+0x7e/0x260 [ 925.437201][T24938] do_ebt_set_ctl+0x2f5/0x3c0 [ 925.437215][T24938] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 925.437228][T24938] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 925.437245][T24938] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 925.437258][T24938] nf_setsockopt+0x8a/0xf0 [ 925.437270][T24938] ip_setsockopt+0xcb/0xf0 [ 925.437285][T24938] tcp_setsockopt+0xa4/0x100 [ 925.437302][T24938] smc_setsockopt+0x1b3/0xa00 [ 925.437311][T24938] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 925.437326][T24938] ? __pfx_smc_setsockopt+0x10/0x10 [ 925.437336][T24938] ? find_held_lock+0x2b/0x80 [ 925.437348][T24938] ? __pfx_smc_setsockopt+0x10/0x10 [ 925.437357][T24938] do_sock_setsockopt+0x221/0x470 [ 925.437370][T24938] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 925.437390][T24938] __sys_setsockopt+0x120/0x1a0 [ 925.437403][T24938] __ia32_sys_setsockopt+0xbc/0x160 [ 925.437412][T24938] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.437425][T24938] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 925.437438][T24938] __do_fast_syscall_32+0x73/0x120 [ 925.437452][T24938] do_fast_syscall_32+0x32/0x80 [ 925.437466][T24938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.437479][T24938] RIP: 0023:0xf7f26579 [ 925.437487][T24938] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 925.437497][T24938] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 925.437506][T24938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 925.437513][T24938] RDX: 0000000000000080 RSI: 0000000080000180 RDI: 00000000000000e0 [ 925.437518][T24938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.437524][T24938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 925.437530][T24938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.437542][T24938] [ 925.437751][T24938] syz.2.4543: vmalloc error: size 128, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 925.570385][T24938] CPU: 2 UID: 0 PID: 24938 Comm: syz.2.4543 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 925.570400][T24938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 925.570406][T24938] Call Trace: [ 925.570410][T24938] [ 925.570415][T24938] dump_stack_lvl+0x16c/0x1f0 [ 925.570432][T24938] warn_alloc+0x248/0x3a0 [ 925.570444][T24938] ? __pfx_warn_alloc+0x10/0x10 [ 925.570456][T24938] ? kfree+0x2b6/0x4d0 [ 925.570474][T24938] ? __get_vm_area_node+0x1e5/0x300 [ 925.570506][T24938] __vmalloc_node_range_noprof+0xd31/0x1540 [ 925.570522][T24938] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 925.570536][T24938] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 925.570552][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.570567][T24938] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.570587][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.570599][T24938] vmalloc_noprof+0x6b/0x90 [ 925.570615][T24938] ? compat_do_replace+0x1af/0x7c0 [ 925.570627][T24938] compat_do_replace+0x1af/0x7c0 [ 925.570662][T24938] ? __pfx_compat_do_replace+0x10/0x10 [ 925.570677][T24938] ? aa_get_newest_label+0x375/0x680 [ 925.570688][T24938] ? __pfx_aa_get_newest_label+0x10/0x10 [ 925.570704][T24938] ? bpf_lsm_capable+0x9/0x10 [ 925.570714][T24938] ? security_capable+0x7e/0x260 [ 925.570732][T24938] do_ebt_set_ctl+0x2f5/0x3c0 [ 925.570746][T24938] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 925.570759][T24938] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 925.570776][T24938] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 925.570790][T24938] nf_setsockopt+0x8a/0xf0 [ 925.570802][T24938] ip_setsockopt+0xcb/0xf0 [ 925.570821][T24938] tcp_setsockopt+0xa4/0x100 [ 925.570838][T24938] smc_setsockopt+0x1b3/0xa00 [ 925.570847][T24938] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 925.570863][T24938] ? __pfx_smc_setsockopt+0x10/0x10 [ 925.570872][T24938] ? find_held_lock+0x2b/0x80 [ 925.570885][T24938] ? __pfx_smc_setsockopt+0x10/0x10 [ 925.570900][T24938] do_sock_setsockopt+0x221/0x470 [ 925.570919][T24938] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 925.570954][T24938] __sys_setsockopt+0x120/0x1a0 [ 925.570976][T24938] __ia32_sys_setsockopt+0xbc/0x160 [ 925.570993][T24938] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.571011][T24938] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 925.571025][T24938] __do_fast_syscall_32+0x73/0x120 [ 925.571039][T24938] do_fast_syscall_32+0x32/0x80 [ 925.571052][T24938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.571066][T24938] RIP: 0023:0xf7f26579 [ 925.571075][T24938] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 925.571085][T24938] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 925.571094][T24938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 925.571101][T24938] RDX: 0000000000000080 RSI: 0000000080000180 RDI: 00000000000000e0 [ 925.571107][T24938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.571112][T24938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 925.571118][T24938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.571131][T24938] [ 925.571147][T24938] Mem-Info: [ 925.679013][T24938] active_anon:9647 inactive_anon:0 isolated_anon:0 [ 925.679013][T24938] active_file:5701 inactive_file:14803 isolated_file:0 [ 925.679013][T24938] unevictable:1768 dirty:525 writeback:0 [ 925.679013][T24938] slab_reclaimable:10136 slab_unreclaimable:85538 [ 925.679013][T24938] mapped:23447 shmem:2699 pagetables:781 [ 925.679013][T24938] sec_pagetables:321 bounce:0 [ 925.679013][T24938] kernel_misc_reclaimable:0 [ 925.679013][T24938] free:44262 free_pcp:2335 free_cma:0 [ 925.693797][T24938] Node 0 active_anon:2520kB inactive_anon:0kB active_file:2100kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2756kB dirty:4kB writeback:0kB shmem:3696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8932kB pagetables:612kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 925.704597][T24938] Node 1 active_anon:36868kB inactive_anon:0kB active_file:20704kB inactive_file:59212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91832kB dirty:2096kB writeback:0kB shmem:7800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2820kB pagetables:2512kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB [ 925.715882][T24938] Node 0 DMA free:2836kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:460kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 925.724680][T24938] lowmem_reserve[]: 0 293 293 293 293 [ 925.726438][T24938] Node 0 DMA32 free:21524kB boost:4096kB min:17544kB low:20904kB high:24264kB reserved_highatomic:4096KB active_anon:2060kB inactive_anon:0kB active_file:2060kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:300248kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:0kB free_cma:0kB [ 925.735768][T24938] lowmem_reserve[]: 0 0 0 0 0 [ 925.737299][T24938] Node 1 DMA32 free:144308kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:6144KB active_anon:40368kB inactive_anon:0kB active_file:20704kB inactive_file:59212kB unevictable:3536kB writepending:2096kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:10968kB local_pcp:1520kB free_cma:0kB [ 925.746952][T24938] lowmem_reserve[]: 0 0 0 0 0 [ 925.748691][T24938] Node 0 DMA: 63*4kB (UE) 33*8kB (UE) 17*16kB (UE) 20*32kB (UE) 8*64kB (UE) 3*128kB (UE) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2836kB [ 925.753955][T24938] Node 0 DMA32: 433*4kB (UMEH) 294*8kB (UMEH) 142*16kB (UMEH) 176*32kB (UMEH) 69*64kB (UMEH) 24*128kB (UMEH) 6*256kB (ME) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 21524kB [ 925.759882][T24938] Node 1 DMA32: 12*4kB (UMEH) 840*8kB (UMEH) 970*16kB (UMEH) 627*32kB (UMEH) 213*64kB (UME) 26*128kB (UME) 22*256kB (UME) 21*512kB (UME) 11*1024kB (UM) 8*2048kB (UME) 10*4096kB (UM) = 144304kB [ 925.766053][T24938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.769180][T24938] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.772091][T24938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.775291][T24938] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.778248][T24938] 25649 total pagecache pages [ 925.779798][T24938] 121 pages in swap cache [ 925.781180][T24938] Free swap = 122112kB [ 925.782710][T24938] Total swap = 124996kB [ 925.784311][T24938] 524155 pages RAM [ 925.785875][T24938] 0 pages HighMem/MovableOnly [ 925.787394][T24938] 208182 pages reserved [ 925.788732][T24938] 0 pages cma reserved [ 926.090008][T24954] wireguard0: entered promiscuous mode [ 926.091777][T24954] wireguard0: entered allmulticast mode [ 926.520274][T24965] all: renamed from bridge_slave_0 (while UP) [ 927.210330][T24986] netlink: 'syz.2.4550': attribute type 11 has an invalid length. [ 927.222170][T24986] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4550'. [ 927.552677][T25001] FAULT_INJECTION: forcing a failure. [ 927.552677][T25001] name failslab, interval 1, probability 0, space 0, times 0 [ 927.557007][T25001] CPU: 3 UID: 0 PID: 25001 Comm: syz.0.4557 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 927.557032][T25001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 927.557039][T25001] Call Trace: [ 927.557043][T25001] [ 927.557047][T25001] dump_stack_lvl+0x16c/0x1f0 [ 927.557064][T25001] should_fail_ex+0x512/0x640 [ 927.557083][T25001] ? fs_reclaim_acquire+0xae/0x150 [ 927.557099][T25001] ? tomoyo_encode2+0x100/0x3e0 [ 927.557111][T25001] should_failslab+0xc2/0x120 [ 927.557124][T25001] __kmalloc_noprof+0xd2/0x510 [ 927.557134][T25001] ? d_absolute_path+0x136/0x1a0 [ 927.557149][T25001] tomoyo_encode2+0x100/0x3e0 [ 927.557165][T25001] tomoyo_encode+0x29/0x50 [ 927.557177][T25001] tomoyo_realpath_from_path+0x18f/0x6e0 [ 927.557195][T25001] tomoyo_mount_acl+0x1ae/0x850 [ 927.557206][T25001] ? kernel_text_address+0x8d/0x100 [ 927.557222][T25001] ? __kernel_text_address+0xd/0x40 [ 927.557237][T25001] ? unwind_get_return_address+0x59/0xa0 [ 927.557248][T25001] ? arch_stack_walk+0xa6/0x100 [ 927.557261][T25001] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 927.557288][T25001] ? tomoyo_domain+0xbb/0x150 [ 927.557302][T25001] ? tomoyo_profile+0x47/0x60 [ 927.557318][T25001] tomoyo_mount_permission+0x16d/0x420 [ 927.557330][T25001] ? tomoyo_mount_permission+0x14f/0x420 [ 927.557343][T25001] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 927.557364][T25001] security_sb_mount+0x9b/0x260 [ 927.557376][T25001] path_mount+0x128/0x1f20 [ 927.557388][T25001] ? kmem_cache_free+0x2d4/0x4d0 [ 927.557397][T25001] ? __pfx_path_mount+0x10/0x10 [ 927.557409][T25001] ? putname+0x154/0x1a0 [ 927.557422][T25001] __ia32_sys_mount+0x28b/0x310 [ 927.557433][T25001] ? __pfx___ia32_sys_mount+0x10/0x10 [ 927.557445][T25001] ? rcu_is_watching+0x12/0xc0 [ 927.557456][T25001] __do_fast_syscall_32+0x73/0x120 [ 927.557471][T25001] do_fast_syscall_32+0x32/0x80 [ 927.557484][T25001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 927.557497][T25001] RIP: 0023:0xf7fe6579 [ 927.557505][T25001] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 927.557515][T25001] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 927.557524][T25001] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 927.557531][T25001] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 00000000800004c0 [ 927.557537][T25001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.557542][T25001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 927.557548][T25001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.557561][T25001] [ 927.557586][T25001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 928.391654][T25027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4559'. [ 928.395764][T25027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'. [ 928.599874][T25037] 9pnet_virtio: no channels available for device ./file0/file0 [ 928.605640][T25037] libceph: resolve '0.' (ret=-3): failed [ 928.668180][T25043] FAULT_INJECTION: forcing a failure. [ 928.668180][T25043] name failslab, interval 1, probability 0, space 0, times 0 [ 928.672494][T25043] CPU: 1 UID: 0 PID: 25043 Comm: syz.2.4561 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 928.672521][T25043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 928.672528][T25043] Call Trace: [ 928.672532][T25043] [ 928.672536][T25043] dump_stack_lvl+0x16c/0x1f0 [ 928.672553][T25043] should_fail_ex+0x512/0x640 [ 928.672568][T25043] ? fs_reclaim_acquire+0xae/0x150 [ 928.672584][T25043] ? tomoyo_encode2+0x100/0x3e0 [ 928.672597][T25043] should_failslab+0xc2/0x120 [ 928.672609][T25043] __kmalloc_noprof+0xd2/0x510 [ 928.672620][T25043] ? d_absolute_path+0x136/0x1a0 [ 928.672634][T25043] tomoyo_encode2+0x100/0x3e0 [ 928.672649][T25043] tomoyo_encode+0x29/0x50 [ 928.672661][T25043] tomoyo_realpath_from_path+0x18f/0x6e0 [ 928.672679][T25043] tomoyo_mount_acl+0x1ae/0x850 [ 928.672690][T25043] ? lock_acquire+0x179/0x350 [ 928.672704][T25043] ? find_held_lock+0x2b/0x80 [ 928.672713][T25043] ? finish_task_switch.isra.0+0x21c/0xc10 [ 928.672724][T25043] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 928.672736][T25043] ? finish_task_switch.isra.0+0x221/0xc10 [ 928.672747][T25043] ? finish_task_switch.isra.0+0x221/0xc10 [ 928.672757][T25043] ? rcu_is_watching+0x12/0xc0 [ 928.672777][T25043] ? tomoyo_domain+0xbb/0x150 [ 928.672792][T25043] ? tomoyo_profile+0x47/0x60 [ 928.672807][T25043] tomoyo_mount_permission+0x16d/0x420 [ 928.672820][T25043] ? tomoyo_mount_permission+0x14f/0x420 [ 928.672834][T25043] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 928.672855][T25043] security_sb_mount+0x9b/0x260 [ 928.672867][T25043] path_mount+0x128/0x1f20 [ 928.672878][T25043] ? kmem_cache_free+0x2d4/0x4d0 [ 928.672888][T25043] ? __pfx_path_mount+0x10/0x10 [ 928.672900][T25043] ? putname+0x154/0x1a0 [ 928.672912][T25043] __ia32_sys_mount+0x28b/0x310 [ 928.672923][T25043] ? __pfx___ia32_sys_mount+0x10/0x10 [ 928.672935][T25043] ? rcu_is_watching+0x12/0xc0 [ 928.672945][T25043] __do_fast_syscall_32+0x73/0x120 [ 928.672960][T25043] do_fast_syscall_32+0x32/0x80 [ 928.672974][T25043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.672986][T25043] RIP: 0023:0xf7f26579 [ 928.672994][T25043] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 928.673004][T25043] RSP: 002b:00000000f500455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 928.673014][T25043] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000000 [ 928.673020][T25043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.673026][T25043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.673032][T25043] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 928.673037][T25043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.673050][T25043] [ 928.673078][T25043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 928.923604][T25045] FAULT_INJECTION: forcing a failure. [ 928.923604][T25045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 928.930818][T25045] CPU: 2 UID: 0 PID: 25045 Comm: syz.0.4563 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 928.930833][T25045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 928.930846][T25045] Call Trace: [ 928.930852][T25045] [ 928.930858][T25045] dump_stack_lvl+0x16c/0x1f0 [ 928.930883][T25045] should_fail_ex+0x512/0x640 [ 928.930910][T25045] should_fail_alloc_page+0xe7/0x130 [ 928.930930][T25045] prepare_alloc_pages+0x3c2/0x610 [ 928.930954][T25045] ? rcu_is_watching+0x12/0xc0 [ 928.930972][T25045] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 928.930993][T25045] ? __lock_acquire+0x5ca/0x1ba0 [ 928.931013][T25045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 928.931025][T25045] ? find_held_lock+0x2b/0x80 [ 928.931037][T25045] ? __lock_acquire+0x5ca/0x1ba0 [ 928.931050][T25045] ? __lock_acquire+0x5ca/0x1ba0 [ 928.931062][T25045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 928.931077][T25045] ? policy_nodemask+0xea/0x4e0 [ 928.931091][T25045] alloc_pages_mpol+0x1fb/0x550 [ 928.931104][T25045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 928.931116][T25045] ? __lock_acquire+0x5ca/0x1ba0 [ 928.931131][T25045] folio_alloc_mpol_noprof+0x36/0x2f0 [ 928.931145][T25045] vma_alloc_folio_noprof+0xed/0x1e0 [ 928.931159][T25045] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 928.931176][T25045] do_pte_missing+0x223d/0x3fb0 [ 928.931191][T25045] __handle_mm_fault+0x103d/0x2a40 [ 928.931204][T25045] ? __pfx___handle_mm_fault+0x10/0x10 [ 928.931221][T25045] ? find_vma+0xbf/0x140 [ 928.931234][T25045] ? __pfx_find_vma+0x10/0x10 [ 928.931248][T25045] handle_mm_fault+0x3fe/0xad0 [ 928.931260][T25045] do_user_addr_fault+0x7a6/0x1370 [ 928.931272][T25045] ? rcu_is_watching+0x12/0xc0 [ 928.931283][T25045] exc_page_fault+0x5c/0xc0 [ 928.931295][T25045] asm_exc_page_fault+0x26/0x30 [ 928.931305][T25045] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 928.931321][T25045] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 928.931331][T25045] RSP: 0018:ffffc900255479a8 EFLAGS: 00050202 [ 928.931339][T25045] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000380 [ 928.931345][T25045] RDX: ffff8880221a8000 RSI: ffffffff84cbb24d RDI: 0000000080b37000 [ 928.931352][T25045] RBP: ffffc90025547d30 R08: f9f0d9a003d2eb8b R09: 0000000000000001 [ 928.931358][T25045] R10: 0000000000000000 R11: 0000000000000000 R12: 000000007ffff000 [ 928.931363][T25045] R13: 0000000080b36380 R14: 0000000000b35000 R15: 0000000000001000 [ 928.931373][T25045] ? iov_iter_zero+0x3dd/0x13c0 [ 928.931390][T25045] iov_iter_zero+0x3ed/0x13c0 [ 928.931408][T25045] ? __pfx_iov_iter_zero+0x10/0x10 [ 928.931421][T25045] ? aa_file_perm+0x4d6/0xfb0 [ 928.931437][T25045] ? _kstrtoull+0x145/0x200 [ 928.931448][T25045] ? __pfx_aa_file_perm+0x10/0x10 [ 928.931462][T25045] read_iter_zero+0x13b/0x340 [ 928.931474][T25045] ? copy_compat_iovec_from_user+0x141/0x180 [ 928.931490][T25045] do_iter_readv_writev+0x735/0x950 [ 928.931507][T25045] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 928.931524][T25045] ? bpf_lsm_file_permission+0x9/0x10 [ 928.931539][T25045] ? security_file_permission+0x71/0x210 [ 928.931553][T25045] ? rw_verify_area+0xcf/0x680 [ 928.931568][T25045] vfs_readv+0x4c5/0x8a0 [ 928.931586][T25045] ? __pfx_vfs_readv+0x10/0x10 [ 928.931600][T25045] ? find_held_lock+0x2b/0x80 [ 928.931617][T25045] ? __fget_files+0x20e/0x3c0 [ 928.931636][T25045] ? do_preadv+0x1af/0x270 [ 928.931649][T25045] do_preadv+0x1af/0x270 [ 928.931664][T25045] ? __pfx_do_preadv+0x10/0x10 [ 928.931677][T25045] ? fput+0x70/0xf0 [ 928.931688][T25045] ? ksys_write+0x1b9/0x240 [ 928.931697][T25045] ? __pfx_ksys_write+0x10/0x10 [ 928.931707][T25045] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 928.931718][T25045] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 928.931733][T25045] __do_fast_syscall_32+0x73/0x120 [ 928.931748][T25045] do_fast_syscall_32+0x32/0x80 [ 928.931761][T25045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.931773][T25045] RIP: 0023:0xf7fe6579 [ 928.931781][T25045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 928.931790][T25045] RSP: 002b:00000000f50c455c EFLAGS: 00000296 ORIG_RAX: 000000000000017a [ 928.931799][T25045] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080001540 [ 928.931804][T25045] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.931810][T25045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.931815][T25045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 928.931821][T25045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.931833][T25045] [ 929.366484][T25059] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4568'. [ 929.942292][ T40] audit: type=1326 audit(1746193586.308:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.949556][ T40] audit: type=1326 audit(1746193586.308:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.956536][ T40] audit: type=1326 audit(1746193586.318:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.963670][ T40] audit: type=1326 audit(1746193586.318:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.971471][ T40] audit: type=1326 audit(1746193586.318:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.979512][ T40] audit: type=1326 audit(1746193586.318:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.986700][ T40] audit: type=1326 audit(1746193586.318:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 929.992669][T25080] netlink: 'syz.3.4570': attribute type 11 has an invalid length. [ 929.993209][ T40] audit: type=1326 audit(1746193586.318:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 930.003506][ T40] audit: type=1326 audit(1746193586.318:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 930.011801][ T40] audit: type=1326 audit(1746193586.318:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25075 comm="syz.0.4573" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 930.014523][T25080] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4570'. [ 930.505089][T25096] FAULT_INJECTION: forcing a failure. [ 930.505089][T25096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.509975][T25096] CPU: 2 UID: 0 PID: 25096 Comm: syz.2.4576 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 930.509996][T25096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 930.510006][T25096] Call Trace: [ 930.510011][T25096] [ 930.510017][T25096] dump_stack_lvl+0x16c/0x1f0 [ 930.510041][T25096] should_fail_ex+0x512/0x640 [ 930.510064][T25096] _copy_from_user+0x2e/0xd0 [ 930.510087][T25096] get_compat_msghdr+0xa7/0x170 [ 930.510103][T25096] ? __pfx_get_compat_msghdr+0x10/0x10 [ 930.510125][T25096] ___sys_sendmsg+0x1ae/0x1d0 [ 930.510140][T25096] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.510183][T25096] __sys_sendmsg+0x16d/0x220 [ 930.510199][T25096] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.510222][T25096] ? rcu_is_watching+0x12/0xc0 [ 930.510238][T25096] __do_fast_syscall_32+0x73/0x120 [ 930.510259][T25096] do_fast_syscall_32+0x32/0x80 [ 930.510279][T25096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 930.510297][T25096] RIP: 0023:0xf7f26579 [ 930.510309][T25096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 930.510321][T25096] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 930.510332][T25096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 930.510342][T25096] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.510351][T25096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.510360][T25096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 930.510369][T25096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.510389][T25096] [ 930.871102][T25121] FAULT_INJECTION: forcing a failure. [ 930.871102][T25121] name failslab, interval 1, probability 0, space 0, times 0 [ 930.876976][T25121] CPU: 1 UID: 0 PID: 25121 Comm: syz.3.4581 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 930.876991][T25121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 930.876997][T25121] Call Trace: [ 930.877001][T25121] [ 930.877005][T25121] dump_stack_lvl+0x16c/0x1f0 [ 930.877025][T25121] should_fail_ex+0x512/0x640 [ 930.877039][T25121] ? fs_reclaim_acquire+0xae/0x150 [ 930.877055][T25121] ? tomoyo_encode2+0x100/0x3e0 [ 930.877068][T25121] should_failslab+0xc2/0x120 [ 930.877080][T25121] __kmalloc_noprof+0xd2/0x510 [ 930.877091][T25121] ? d_absolute_path+0x136/0x1a0 [ 930.877105][T25121] tomoyo_encode2+0x100/0x3e0 [ 930.877119][T25121] tomoyo_encode+0x29/0x50 [ 930.877132][T25121] tomoyo_realpath_from_path+0x18f/0x6e0 [ 930.877149][T25121] tomoyo_path_number_perm+0x245/0x580 [ 930.877160][T25121] ? tomoyo_path_number_perm+0x237/0x580 [ 930.877173][T25121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 930.877197][T25121] ? find_held_lock+0x2b/0x80 [ 930.877207][T25121] ? hook_file_ioctl_common+0x145/0x410 [ 930.877218][T25121] ? __fget_files+0x204/0x3c0 [ 930.877235][T25121] ? __fget_files+0x20e/0x3c0 [ 930.877248][T25121] ? fput+0x70/0xf0 [ 930.877261][T25121] security_file_ioctl_compat+0x9b/0x240 [ 930.877275][T25121] __ia32_compat_sys_ioctl+0xc3/0x360 [ 930.877291][T25121] __do_fast_syscall_32+0x73/0x120 [ 930.877305][T25121] do_fast_syscall_32+0x32/0x80 [ 930.877319][T25121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 930.877331][T25121] RIP: 0023:0xf709e579 [ 930.877339][T25121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 930.877350][T25121] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 930.877359][T25121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007cb [ 930.877366][T25121] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.877371][T25121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.877377][T25121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 930.877382][T25121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 930.877395][T25121] [ 930.877404][T25121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 930.982533][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.984748][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.064517][T25131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4584'. [ 931.600732][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 932.470981][T25170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4594'. [ 932.722628][T25167] 9pnet_virtio: no channels available for device ./file0/file0 [ 932.727094][T25167] libceph: resolve '0.' (ret=-3): failed [ 933.364786][T25184] netlink: 'syz.2.4598': attribute type 10 has an invalid length. [ 933.550417][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 934.168152][T25201] netlink: 'syz.3.4601': attribute type 1 has an invalid length. [ 934.170666][T25201] netlink: 'syz.3.4601': attribute type 2 has an invalid length. [ 934.173132][T25201] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.4601'. [ 934.241597][T25205] FAULT_INJECTION: forcing a failure. [ 934.241597][T25205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.247075][T25205] CPU: 3 UID: 0 PID: 25205 Comm: syz.0.4602 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 934.247091][T25205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.247098][T25205] Call Trace: [ 934.247101][T25205] [ 934.247106][T25205] dump_stack_lvl+0x16c/0x1f0 [ 934.247123][T25205] should_fail_ex+0x512/0x640 [ 934.247140][T25205] _copy_from_user+0x2e/0xd0 [ 934.247155][T25205] get_compat_msghdr+0xa7/0x170 [ 934.247166][T25205] ? __pfx_get_compat_msghdr+0x10/0x10 [ 934.247180][T25205] ___sys_sendmsg+0x1ae/0x1d0 [ 934.247192][T25205] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.247218][T25205] __sys_sendmsg+0x16d/0x220 [ 934.247228][T25205] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.247244][T25205] ? rcu_is_watching+0x12/0xc0 [ 934.247255][T25205] __do_fast_syscall_32+0x73/0x120 [ 934.247270][T25205] do_fast_syscall_32+0x32/0x80 [ 934.247284][T25205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.247296][T25205] RIP: 0023:0xf7fe6579 [ 934.247305][T25205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 934.247315][T25205] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 934.247324][T25205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 934.247331][T25205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.247336][T25205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.247342][T25205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 934.247348][T25205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.247360][T25205] [ 934.356670][T25209] FAULT_INJECTION: forcing a failure. [ 934.356670][T25209] name failslab, interval 1, probability 0, space 0, times 0 [ 934.361495][T25209] CPU: 2 UID: 0 PID: 25209 Comm: syz.0.4604 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 934.361510][T25209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.361516][T25209] Call Trace: [ 934.361521][T25209] [ 934.361526][T25209] dump_stack_lvl+0x16c/0x1f0 [ 934.361544][T25209] should_fail_ex+0x512/0x640 [ 934.361558][T25209] ? __kmalloc_noprof+0xbf/0x510 [ 934.361571][T25209] ? drm_atomic_helper_dirtyfb+0x157/0x780 [ 934.361585][T25209] should_failslab+0xc2/0x120 [ 934.361597][T25209] __kmalloc_noprof+0xd2/0x510 [ 934.361608][T25209] ? drm_atomic_state_init+0x229/0x320 [ 934.361624][T25209] drm_atomic_helper_dirtyfb+0x157/0x780 [ 934.361637][T25209] ? __lock_acquire+0xaa4/0x1ba0 [ 934.361651][T25209] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 934.361678][T25209] drm_mode_dirtyfb_ioctl+0x30e/0x460 [ 934.361691][T25209] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 934.361706][T25209] drm_ioctl_kernel+0x1f1/0x3e0 [ 934.361715][T25209] ? __pfx_drm_mode_dirtyfb_ioctl+0x10/0x10 [ 934.361734][T25209] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 934.361756][T25209] drm_ioctl+0x5c9/0xc30 [ 934.361774][T25209] ? __pfx_drm_mode_dirtyfb_ioctl+0x10/0x10 [ 934.361796][T25209] ? __pfx_drm_ioctl+0x10/0x10 [ 934.361826][T25209] drm_compat_ioctl+0x327/0x460 [ 934.361846][T25209] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 934.361867][T25209] __ia32_compat_sys_ioctl+0x24c/0x360 [ 934.361885][T25209] __do_fast_syscall_32+0x73/0x120 [ 934.361901][T25209] do_fast_syscall_32+0x32/0x80 [ 934.361914][T25209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.361926][T25209] RIP: 0023:0xf7fe6579 [ 934.361935][T25209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 934.361944][T25209] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 934.361954][T25209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864b1 [ 934.361960][T25209] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.361966][T25209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.361972][T25209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 934.361977][T25209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.361990][T25209] [ 934.511226][T25216] FAULT_INJECTION: forcing a failure. [ 934.511226][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 934.515725][T25216] CPU: 0 UID: 0 PID: 25216 Comm: syz.0.4607 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 934.515772][T25216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.515783][T25216] Call Trace: [ 934.515789][T25216] [ 934.515796][T25216] dump_stack_lvl+0x16c/0x1f0 [ 934.515817][T25216] should_fail_ex+0x512/0x640 [ 934.515832][T25216] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 934.515849][T25216] should_failslab+0xc2/0x120 [ 934.515862][T25216] __kmalloc_cache_noprof+0x6a/0x3e0 [ 934.515877][T25216] ? snd_pcm_oss_change_params_locked+0x1db/0x3b40 [ 934.515895][T25216] snd_pcm_oss_change_params_locked+0x1db/0x3b40 [ 934.515911][T25216] ? rcu_is_watching+0x12/0xc0 [ 934.515922][T25216] ? __mutex_lock+0x1ca/0xb90 [ 934.515935][T25216] ? __kmalloc_noprof+0x223/0x510 [ 934.515944][T25216] ? do_sys_poll+0x24a/0xe00 [ 934.515958][T25216] ? __do_fast_syscall_32+0x73/0x120 [ 934.515971][T25216] ? do_fast_syscall_32+0x32/0x80 [ 934.515984][T25216] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 934.515999][T25216] ? __pfx___mutex_lock+0x10/0x10 [ 934.516011][T25216] ? __lock_acquire+0xaa4/0x1ba0 [ 934.516033][T25216] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 934.516047][T25216] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 934.516066][T25216] ? lockdep_hardirqs_on+0x7c/0x110 [ 934.516080][T25216] snd_pcm_oss_poll+0x549/0xaf0 [ 934.516095][T25216] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 934.516108][T25216] ? __fget_files+0x20e/0x3c0 [ 934.516126][T25216] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 934.516139][T25216] do_sys_poll+0x523/0xe00 [ 934.516158][T25216] ? __pfx_do_sys_poll+0x10/0x10 [ 934.516185][T25216] ? find_held_lock+0x2b/0x80 [ 934.516198][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516213][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516228][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516243][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516258][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516273][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516288][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516303][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516318][T25216] ? __pfx_pollwake+0x10/0x10 [ 934.516332][T25216] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 934.516347][T25216] ? set_compat_user_sigmask+0x213/0x2a0 [ 934.516358][T25216] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 934.516368][T25216] ? __fget_files+0x20e/0x3c0 [ 934.516385][T25216] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 934.516396][T25216] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 934.516406][T25216] ? ksys_write+0x1b9/0x240 [ 934.516415][T25216] ? __pfx_ksys_write+0x10/0x10 [ 934.516425][T25216] ? rcu_is_watching+0x12/0xc0 [ 934.516435][T25216] __do_fast_syscall_32+0x73/0x120 [ 934.516450][T25216] do_fast_syscall_32+0x32/0x80 [ 934.516463][T25216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.516476][T25216] RIP: 0023:0xf7fe6579 [ 934.516484][T25216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 934.516494][T25216] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 934.516504][T25216] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 934.516510][T25216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.516516][T25216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.516521][T25216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 934.516527][T25216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.516539][T25216] [ 934.820004][T25222] netlink: 'syz.3.4606': attribute type 11 has an invalid length. [ 934.822685][T25222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4606'. [ 935.097087][T25226] netlink: 'syz.1.4609': attribute type 29 has an invalid length. [ 935.101973][T25226] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 935.485543][T25241] netlink: 'syz.1.4609': attribute type 29 has an invalid length. [ 936.683082][T25262] geneve2: entered promiscuous mode [ 936.690471][T25262] geneve2: entered allmulticast mode [ 936.999405][ T5989] hid-generic 0000:0000:0000.000E: item fetching failed at offset 0/1 [ 937.003769][ T5989] hid-generic 0000:0000:0000.000E: probe with driver hid-generic failed with error -22 [ 937.450206][T25286] wireguard0: entered promiscuous mode [ 937.452063][T25286] wireguard0: entered allmulticast mode [ 938.389713][T25317] tipc: Started in network mode [ 938.391358][T25317] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 938.396734][T25317] tipc: Enabled bearer , priority 1 [ 938.687777][T25324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4627'. [ 938.690562][T25324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4627'. [ 938.693349][T25324] FAULT_INJECTION: forcing a failure. [ 938.693349][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 938.698855][T25324] CPU: 2 UID: 0 PID: 25324 Comm: syz.3.4627 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 938.698870][T25324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 938.698876][T25324] Call Trace: [ 938.698879][T25324] [ 938.698884][T25324] dump_stack_lvl+0x16c/0x1f0 [ 938.698900][T25324] should_fail_ex+0x512/0x640 [ 938.698915][T25324] ? __kvmalloc_node_noprof+0x122/0x600 [ 938.698927][T25324] should_failslab+0xc2/0x120 [ 938.698939][T25324] __kvmalloc_node_noprof+0x135/0x600 [ 938.698949][T25324] ? lockdep_init_map_type+0x5c/0x280 [ 938.698962][T25324] ? alloc_netdev_mqs+0xb5b/0x1570 [ 938.698977][T25324] ? alloc_netdev_mqs+0xb5b/0x1570 [ 938.698992][T25324] alloc_netdev_mqs+0xb5b/0x1570 [ 938.699006][T25324] rtnl_create_link+0xc10/0xfa0 [ 938.699020][T25324] rtnl_newlink+0xb69/0x2000 [ 938.699035][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 938.699052][T25324] ? kfree_skbmem+0x1a4/0x1f0 [ 938.699070][T25324] ? rcu_is_watching+0x12/0xc0 [ 938.699080][T25324] ? trace_cap_capable+0x18d/0x200 [ 938.699093][T25324] ? find_held_lock+0x2b/0x80 [ 938.699102][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 938.699112][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 938.699122][T25324] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 938.699133][T25324] ? __pfx_rtnl_newlink+0x10/0x10 [ 938.699144][T25324] rtnetlink_rcv_msg+0x95b/0xe90 [ 938.699156][T25324] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 938.699174][T25324] netlink_rcv_skb+0x16a/0x440 [ 938.699186][T25324] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 938.699198][T25324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 938.699217][T25324] ? netlink_deliver_tap+0x1ae/0xd30 [ 938.699231][T25324] netlink_unicast+0x53a/0x7f0 [ 938.699244][T25324] ? __pfx_netlink_unicast+0x10/0x10 [ 938.699259][T25324] netlink_sendmsg+0x8d1/0xdd0 [ 938.699273][T25324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.699285][T25324] ? __import_iovec+0x1c8/0x660 [ 938.699303][T25324] ____sys_sendmsg+0xa95/0xc70 [ 938.699318][T25324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.699331][T25324] ? get_compat_msghdr+0x11a/0x170 [ 938.699347][T25324] ___sys_sendmsg+0x134/0x1d0 [ 938.699358][T25324] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.699384][T25324] __sys_sendmsg+0x16d/0x220 [ 938.699395][T25324] ? __pfx___sys_sendmsg+0x10/0x10 [ 938.699411][T25324] ? rcu_is_watching+0x12/0xc0 [ 938.699422][T25324] __do_fast_syscall_32+0x73/0x120 [ 938.699437][T25324] do_fast_syscall_32+0x32/0x80 [ 938.699450][T25324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 938.699463][T25324] RIP: 0023:0xf709e579 [ 938.699471][T25324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 938.699481][T25324] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 938.699490][T25324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 938.699497][T25324] RDX: 0000000000048840 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.699502][T25324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.699508][T25324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 938.699513][T25324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.699526][T25324] [ 939.397320][ T6640] tipc: Node number set to 10136234 [ 939.544335][T25348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.550113][T25348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 939.553495][T25348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 939.557773][T25348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 939.561694][T25348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.669539][T25346] chnl_net:caif_netlink_parms(): no params data found [ 939.742505][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.784206][T25346] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.786983][T25346] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.789221][T25346] bridge_slave_0: entered allmulticast mode [ 939.792299][T25346] bridge_slave_0: entered promiscuous mode [ 939.795403][T25346] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.797834][T25346] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.800138][T25346] bridge_slave_1: entered allmulticast mode [ 939.802977][T25346] bridge_slave_1: entered promiscuous mode [ 939.844805][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.852022][T25346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.856844][T25346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.873201][T25355] FAULT_INJECTION: forcing a failure. [ 939.873201][T25355] name failslab, interval 1, probability 0, space 0, times 0 [ 939.877310][T25355] CPU: 1 UID: 0 PID: 25355 Comm: syz.3.4634 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 939.877325][T25355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.877332][T25355] Call Trace: [ 939.877336][T25355] [ 939.877340][T25355] dump_stack_lvl+0x16c/0x1f0 [ 939.877357][T25355] should_fail_ex+0x512/0x640 [ 939.877371][T25355] ? fs_reclaim_acquire+0xae/0x150 [ 939.877387][T25355] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 939.877401][T25355] should_failslab+0xc2/0x120 [ 939.877413][T25355] __kmalloc_noprof+0xd2/0x510 [ 939.877427][T25355] tomoyo_realpath_from_path+0xc2/0x6e0 [ 939.877445][T25355] tomoyo_check_open_permission+0x2ab/0x3c0 [ 939.877457][T25355] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 939.877482][T25355] ? do_raw_spin_lock+0x12c/0x2b0 [ 939.877500][T25355] tomoyo_file_open+0x6b/0x90 [ 939.877516][T25355] security_file_open+0x84/0x1e0 [ 939.877529][T25355] do_dentry_open+0x596/0x1c10 [ 939.877543][T25355] vfs_open+0x82/0x3f0 [ 939.877557][T25355] path_openat+0x1e5e/0x2d40 [ 939.877571][T25355] ? __pfx_path_openat+0x10/0x10 [ 939.877584][T25355] do_filp_open+0x20b/0x470 [ 939.877594][T25355] ? __pfx_do_filp_open+0x10/0x10 [ 939.877612][T25355] ? alloc_fd+0x471/0x7d0 [ 939.877631][T25355] do_sys_openat2+0x11b/0x1d0 [ 939.877643][T25355] ? __pfx_do_sys_openat2+0x10/0x10 [ 939.877657][T25355] ? __fget_files+0x20e/0x3c0 [ 939.877674][T25355] __ia32_compat_sys_openat+0x16d/0x210 [ 939.877689][T25355] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 939.877702][T25355] ? ksys_write+0x1b9/0x240 [ 939.877711][T25355] ? rcu_is_watching+0x12/0xc0 [ 939.877721][T25355] ? rcu_is_watching+0x12/0xc0 [ 939.877732][T25355] __do_fast_syscall_32+0x73/0x120 [ 939.877747][T25355] do_fast_syscall_32+0x32/0x80 [ 939.877760][T25355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.877772][T25355] RIP: 0023:0xf709e579 [ 939.877780][T25355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 939.877789][T25355] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 939.877799][T25355] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 939.877805][T25355] RDX: 0000000000149000 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.877811][T25355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.877816][T25355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 939.877822][T25355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 939.877834][T25355] [ 939.877838][T25355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.980643][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.012890][T25346] team0: Port device team_slave_0 added [ 940.017554][T25346] team0: Port device team_slave_1 added [ 940.064919][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.073423][T25346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.076915][T25346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.084919][T25346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.089248][T25346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.091521][T25346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.100212][T25346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.217045][T25346] hsr_slave_0: entered promiscuous mode [ 940.221152][T25346] hsr_slave_1: entered promiscuous mode [ 940.223796][T25346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.229200][T25346] Cannot create hsr debugfs directory [ 940.652576][T25373] FAULT_INJECTION: forcing a failure. [ 940.652576][T25373] name failslab, interval 1, probability 0, space 0, times 0 [ 940.665743][T25373] CPU: 1 UID: 0 PID: 25373 Comm: syz.3.4636 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 940.665758][T25373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 940.665776][T25373] Call Trace: [ 940.665780][T25373] [ 940.665784][T25373] dump_stack_lvl+0x16c/0x1f0 [ 940.665801][T25373] should_fail_ex+0x512/0x640 [ 940.665816][T25373] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 940.665829][T25373] should_failslab+0xc2/0x120 [ 940.665841][T25373] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 940.665853][T25373] ? __d_alloc+0x31/0xaa0 [ 940.665865][T25373] __d_alloc+0x31/0xaa0 [ 940.665876][T25373] d_alloc_pseudo+0x1c/0xc0 [ 940.665889][T25373] alloc_file_pseudo+0xcf/0x230 [ 940.665903][T25373] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 940.665915][T25373] ? do_raw_spin_unlock+0x172/0x230 [ 940.665933][T25373] __anon_inode_getfile+0xf7/0x370 [ 940.665948][T25373] ? find_held_lock+0x2b/0x80 [ 940.665959][T25373] anon_inode_getfd+0x52/0xb0 [ 940.665974][T25373] map_create+0xb68/0x1db0 [ 940.665992][T25373] ? __pfx_map_create+0x10/0x10 [ 940.666004][T25373] ? __might_fault+0xe3/0x190 [ 940.666014][T25373] ? __might_fault+0xe3/0x190 [ 940.666024][T25373] ? __might_fault+0x13b/0x190 [ 940.666040][T25373] __sys_bpf+0x47cc/0x4d80 [ 940.666055][T25373] ? __pfx___sys_bpf+0x10/0x10 [ 940.666069][T25373] ? ksys_write+0x190/0x240 [ 940.666080][T25373] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 940.666102][T25373] ? fput+0x70/0xf0 [ 940.666112][T25373] ? ksys_write+0x1b9/0x240 [ 940.666121][T25373] ? __pfx_ksys_write+0x10/0x10 [ 940.666133][T25373] __ia32_sys_bpf+0x76/0xe0 [ 940.666147][T25373] __do_fast_syscall_32+0x73/0x120 [ 940.666162][T25373] do_fast_syscall_32+0x32/0x80 [ 940.666175][T25373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.666187][T25373] RIP: 0023:0xf709e579 [ 940.666196][T25373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 940.666205][T25373] RSP: 002b:00000000f504c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 940.666216][T25373] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000340 [ 940.666222][T25373] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.666227][T25373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.666233][T25373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 940.666239][T25373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.666251][T25373] [ 940.789281][T25372] hub 6-0:1.0: USB hub found [ 940.791405][T25372] hub 6-0:1.0: 1 port detected [ 940.866531][T25376] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 25376 comm: syz.0.4637) [ 940.872496][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 940.872509][ T40] audit: type=1800 audit(1746193597.238:79): pid=25376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4637" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=137796 res=0 errno=0 [ 941.109687][ T75] bond0 (unregistering): Released all slaves [ 941.309928][ T75] tipc: Disabling bearer [ 941.339068][ T75] tipc: Left network mode [ 941.624607][ T5945] Bluetooth: hci2: command tx timeout [ 941.900163][ T75] hsr_slave_0: left promiscuous mode [ 941.902460][ T75] hsr_slave_1: left promiscuous mode [ 941.927162][ T75] veth1_macvtap: left promiscuous mode [ 941.929218][ T75] veth0_macvtap: left promiscuous mode [ 941.931121][ T75] veth1_vlan: left promiscuous mode [ 941.932880][ T75] veth0_vlan: left promiscuous mode [ 942.106455][T25395] FAULT_INJECTION: forcing a failure. [ 942.106455][T25395] name failslab, interval 1, probability 0, space 0, times 0 [ 942.113061][T25395] CPU: 3 UID: 0 PID: 25395 Comm: syz.3.4642 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 942.113076][T25395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 942.113082][T25395] Call Trace: [ 942.113086][T25395] [ 942.113090][T25395] dump_stack_lvl+0x16c/0x1f0 [ 942.113108][T25395] should_fail_ex+0x512/0x640 [ 942.113122][T25395] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 942.113135][T25395] should_failslab+0xc2/0x120 [ 942.113147][T25395] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 942.113158][T25395] ? getname_kernel+0x52/0x370 [ 942.113172][T25395] getname_kernel+0x52/0x370 [ 942.113184][T25395] kern_path+0x1d/0x50 [ 942.113200][T25395] lookup_bdev+0xd8/0x280 [ 942.113212][T25395] ? __pfx_lookup_bdev+0x10/0x10 [ 942.113222][T25395] ? resume_store+0x1b8/0x460 [ 942.113238][T25395] ? __asan_memcpy+0x3c/0x60 [ 942.113249][T25395] resume_store+0x1d6/0x460 [ 942.113264][T25395] ? __pfx_resume_store+0x10/0x10 [ 942.113282][T25395] ? find_held_lock+0x2b/0x80 [ 942.113294][T25395] ? __pfx_resume_store+0x10/0x10 [ 942.113308][T25395] kobj_attr_store+0x55/0x80 [ 942.113321][T25395] ? __pfx_kobj_attr_store+0x10/0x10 [ 942.113335][T25395] sysfs_kf_write+0xef/0x150 [ 942.113350][T25395] kernfs_fop_write_iter+0x351/0x510 [ 942.113362][T25395] ? __pfx_sysfs_kf_write+0x10/0x10 [ 942.113377][T25395] vfs_write+0x5ba/0x1180 [ 942.113387][T25395] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 942.113400][T25395] ? __pfx___mutex_lock+0x10/0x10 [ 942.113414][T25395] ? __pfx_vfs_write+0x10/0x10 [ 942.113432][T25395] ksys_write+0x12a/0x240 [ 942.113441][T25395] ? __pfx_ksys_write+0x10/0x10 [ 942.113451][T25395] ? rcu_is_watching+0x12/0xc0 [ 942.113463][T25395] __do_fast_syscall_32+0x73/0x120 [ 942.113478][T25395] do_fast_syscall_32+0x32/0x80 [ 942.113491][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.113504][T25395] RIP: 0023:0xf709e579 [ 942.113512][T25395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 942.113522][T25395] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 942.113532][T25395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 942.113538][T25395] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.113543][T25395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.113549][T25395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 942.113554][T25395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.113567][T25395] [ 943.694597][ T5945] Bluetooth: hci2: command tx timeout [ 943.929245][T25413] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 944.205792][T25346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 944.245466][T25346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 944.254925][T25346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 944.285004][T25346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 944.466700][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 944.526824][T25346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.542157][T25346] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.551177][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.553421][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.563101][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.565438][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.620613][T25346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 944.757299][T25346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.808164][T25346] veth0_vlan: entered promiscuous mode [ 944.813976][T25346] veth1_vlan: entered promiscuous mode [ 944.830670][T25346] veth0_macvtap: entered promiscuous mode [ 944.837686][T25346] veth1_macvtap: entered promiscuous mode [ 944.847046][T25346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.858058][T25346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.864782][T25346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.867650][T25346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.870562][T25346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.873324][T25346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.978976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.982072][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.018747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.021897][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.775052][ T5945] Bluetooth: hci2: command tx timeout [ 946.806510][T25504] netlink: 'syz.3.4659': attribute type 11 has an invalid length. [ 946.809003][T25504] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4659'. [ 947.224067][T25517] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 947.446314][T25529] FAULT_INJECTION: forcing a failure. [ 947.446314][T25529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.450725][T25529] CPU: 1 UID: 0 PID: 25529 Comm: syz.2.4665 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 947.450762][T25529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 947.450773][T25529] Call Trace: [ 947.450780][T25529] [ 947.450787][T25529] dump_stack_lvl+0x16c/0x1f0 [ 947.450812][T25529] should_fail_ex+0x512/0x640 [ 947.450838][T25529] _copy_from_iter+0x2a4/0x15b0 [ 947.450864][T25529] ? alloc_pages_mpol+0x25a/0x550 [ 947.450884][T25529] ? __pfx__copy_from_iter+0x10/0x10 [ 947.450906][T25529] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 947.450924][T25529] ? __kmalloc_noprof+0x242/0x510 [ 947.450952][T25529] af_alg_sendmsg+0x10dc/0x2920 [ 947.450987][T25529] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 947.451007][T25529] ? __might_fault+0xe3/0x190 [ 947.451025][T25529] ? __pfx_aa_sk_perm+0x10/0x10 [ 947.451050][T25529] __sys_sendto+0x495/0x510 [ 947.451066][T25529] ? __pfx___sys_sendto+0x10/0x10 [ 947.451079][T25529] ? __lock_acquire+0xaa4/0x1ba0 [ 947.451124][T25529] __ia32_compat_sys_socketcall+0x625/0x770 [ 947.451144][T25529] ? __fget_files+0x20e/0x3c0 [ 947.451166][T25529] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 947.451188][T25529] ? fput+0x70/0xf0 [ 947.451218][T25529] ? rcu_is_watching+0x12/0xc0 [ 947.451238][T25529] __do_fast_syscall_32+0x73/0x120 [ 947.451262][T25529] do_fast_syscall_32+0x32/0x80 [ 947.451284][T25529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.451304][T25529] RIP: 0023:0xf7f26579 [ 947.451318][T25529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 947.451334][T25529] RSP: 002b:00000000f5003430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 947.451350][T25529] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5003444 [ 947.451360][T25529] RDX: 0000000000000000 RSI: 00000000f5003560 RDI: 00000000f73b2ff4 [ 947.451369][T25529] RBP: 00000000f5003560 R08: 0000000000000000 R09: 0000000000000000 [ 947.451379][T25529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 947.451388][T25529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.451411][T25529] [ 947.452320][T25529] trusted_key: syz.2.4665 sent an empty control message without MSG_MORE. [ 947.656986][T25540] can0: slcan on ttyprintk. [ 947.681277][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4668'. [ 947.864454][ T5945] Bluetooth: hci2: command tx timeout [ 948.295760][T25568] FAULT_INJECTION: forcing a failure. [ 948.295760][T25568] name failslab, interval 1, probability 0, space 0, times 0 [ 948.299836][T25568] CPU: 2 UID: 0 PID: 25568 Comm: syz.2.4672 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 948.299850][T25568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 948.299856][T25568] Call Trace: [ 948.299861][T25568] [ 948.299865][T25568] dump_stack_lvl+0x16c/0x1f0 [ 948.299882][T25568] should_fail_ex+0x512/0x640 [ 948.299898][T25568] should_failslab+0xc2/0x120 [ 948.299911][T25568] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 948.299923][T25568] ? skb_clone+0x190/0x3f0 [ 948.299942][T25568] skb_clone+0x190/0x3f0 [ 948.299953][T25568] netlink_deliver_tap+0xabd/0xd30 [ 948.299968][T25568] netlink_unicast+0x5df/0x7f0 [ 948.299981][T25568] ? __pfx_netlink_unicast+0x10/0x10 [ 948.299996][T25568] netlink_sendmsg+0x8d1/0xdd0 [ 948.300010][T25568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.300022][T25568] ? __import_iovec+0x1c8/0x660 [ 948.300041][T25568] ____sys_sendmsg+0xa95/0xc70 [ 948.300055][T25568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.300068][T25568] ? get_compat_msghdr+0x11a/0x170 [ 948.300084][T25568] ___sys_sendmsg+0x134/0x1d0 [ 948.300095][T25568] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.300122][T25568] __sys_sendmsg+0x16d/0x220 [ 948.300132][T25568] ? __pfx___sys_sendmsg+0x10/0x10 [ 948.300148][T25568] ? rcu_is_watching+0x12/0xc0 [ 948.300160][T25568] __do_fast_syscall_32+0x73/0x120 [ 948.300175][T25568] do_fast_syscall_32+0x32/0x80 [ 948.300188][T25568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.300200][T25568] RIP: 0023:0xf7f26579 [ 948.300208][T25568] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 948.300218][T25568] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 948.300227][T25568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 948.300234][T25568] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.300239][T25568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.300245][T25568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 948.300251][T25568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.300263][T25568] [ 948.399719][T25571] vlan0: entered promiscuous mode [ 948.401658][T25571] vlan0: entered allmulticast mode [ 948.403370][T25571] hsr_slave_1: entered allmulticast mode [ 948.411829][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 948.494270][T25578] syz.1.4674: attempt to access beyond end of device [ 948.494270][T25578] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 948.569105][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.571516][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.573830][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.583989][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.590208][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.592573][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.595052][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.597924][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.600884][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.603244][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.606691][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.609270][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.611687][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.614093][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.618081][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.620482][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.622836][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.625716][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.628907][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.631488][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.633856][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.636786][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.640147][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.642557][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.645592][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.648530][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.651115][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.652877][T25586] FAULT_INJECTION: forcing a failure. [ 948.652877][T25586] name failslab, interval 1, probability 0, space 0, times 0 [ 948.653727][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.659597][T25539] can0 (unregistered): slcan off ttyprintk. [ 948.661218][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.668695][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.671092][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.673491][T16965] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 948.679617][T25586] CPU: 2 UID: 0 PID: 25586 Comm: syz.2.4675 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 948.679635][T25586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 948.679642][T25586] Call Trace: [ 948.679646][T25586] [ 948.679650][T25586] dump_stack_lvl+0x16c/0x1f0 [ 948.679668][T25586] should_fail_ex+0x512/0x640 [ 948.679685][T25586] should_failslab+0xc2/0x120 [ 948.679699][T25586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 948.679714][T25586] ? skb_clone+0x190/0x3f0 [ 948.679733][T25586] skb_clone+0x190/0x3f0 [ 948.679750][T25586] netlink_deliver_tap+0xabd/0xd30 [ 948.679773][T25586] netlink_unicast+0x5df/0x7f0 [ 948.679791][T25586] ? __pfx_netlink_unicast+0x10/0x10 [ 948.679808][T25586] netlink_sendmsg+0x8d1/0xdd0 [ 948.679822][T25586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.679835][T25586] ? __import_iovec+0x1c8/0x660 [ 948.679854][T25586] ____sys_sendmsg+0xa95/0xc70 [ 948.679875][T25586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.679889][T25586] ? get_compat_msghdr+0x11a/0x170 [ 948.679906][T25586] ___sys_sendmsg+0x134/0x1d0 [ 948.679918][T25586] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.679946][T25586] __sys_sendmsg+0x16d/0x220 [ 948.679957][T25586] ? __pfx___sys_sendmsg+0x10/0x10 [ 948.679973][T25586] ? rcu_is_watching+0x12/0xc0 [ 948.679984][T25586] ? rcu_is_watching+0x12/0xc0 [ 948.679995][T25586] __do_fast_syscall_32+0x73/0x120 [ 948.680011][T25586] do_fast_syscall_32+0x32/0x80 [ 948.680025][T25586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.680038][T25586] RIP: 0023:0xf7f26579 [ 948.680047][T25586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 948.680057][T25586] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 948.680068][T25586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 948.680074][T25586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.680080][T25586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.680086][T25586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 948.680092][T25586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.680105][T25586] [ 948.683477][T16965] hid-generic 0004:FFFFFFFF:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 948.711870][T25588] usb usb8: usbfs: process 25588 (syz.0.4676) did not claim interface 0 before use [ 948.800366][T25599] FAULT_INJECTION: forcing a failure. [ 948.800366][T25599] name failslab, interval 1, probability 0, space 0, times 0 [ 948.804463][T25599] CPU: 2 UID: 0 PID: 25599 Comm: syz.3.4680 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 948.804478][T25599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 948.804484][T25599] Call Trace: [ 948.804488][T25599] [ 948.804492][T25599] dump_stack_lvl+0x16c/0x1f0 [ 948.804509][T25599] should_fail_ex+0x512/0x640 [ 948.804526][T25599] should_failslab+0xc2/0x120 [ 948.804538][T25599] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 948.804551][T25599] ? skb_clone+0x190/0x3f0 [ 948.804564][T25599] skb_clone+0x190/0x3f0 [ 948.804575][T25599] netlink_deliver_tap+0xabd/0xd30 [ 948.804589][T25599] netlink_unicast+0x5df/0x7f0 [ 948.804602][T25599] ? __pfx_netlink_unicast+0x10/0x10 [ 948.804617][T25599] netlink_sendmsg+0x8d1/0xdd0 [ 948.804631][T25599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.804643][T25599] ? __import_iovec+0x1c8/0x660 [ 948.804661][T25599] ____sys_sendmsg+0xa95/0xc70 [ 948.804676][T25599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.804689][T25599] ? get_compat_msghdr+0x11a/0x170 [ 948.804705][T25599] ___sys_sendmsg+0x134/0x1d0 [ 948.804716][T25599] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.804743][T25599] __sys_sendmsg+0x16d/0x220 [ 948.804753][T25599] ? __pfx___sys_sendmsg+0x10/0x10 [ 948.804769][T25599] ? rcu_is_watching+0x12/0xc0 [ 948.804781][T25599] __do_fast_syscall_32+0x73/0x120 [ 948.804796][T25599] do_fast_syscall_32+0x32/0x80 [ 948.804809][T25599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.804821][T25599] RIP: 0023:0xf709e579 [ 948.804829][T25599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 948.804839][T25599] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 948.804849][T25599] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 948.804855][T25599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.804861][T25599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.804866][T25599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 948.804877][T25599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.804889][T25599] [ 948.884574][T24127] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 948.912687][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.915298][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.917602][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.919907][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.922246][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.926487][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.929594][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.932719][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.936900][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.939239][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.941855][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.944168][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.947679][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.950019][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.952332][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.956359][ T6006] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 948.961852][ T6006] hid-generic FFF9:0000:0203.0010: hidraw2: HID v0.00 Device [syz0] on syz1 [ 949.056514][T24127] usb 6-1: config 0 has no interfaces? [ 949.058216][T24127] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 949.062564][T24127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.066901][T24127] usb 6-1: config 0 descriptor?? [ 949.164933][T21422] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 949.523569][T24127] usb 6-1: USB disconnect, device number 80 [ 949.922786][T25618] FAULT_INJECTION: forcing a failure. [ 949.922786][T25618] name failslab, interval 1, probability 0, space 0, times 0 [ 949.928223][T25618] CPU: 2 UID: 0 PID: 25618 Comm: syz.0.4684 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 949.928247][T25618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 949.928256][T25618] Call Trace: [ 949.928263][T25618] [ 949.928269][T25618] dump_stack_lvl+0x16c/0x1f0 [ 949.928295][T25618] should_fail_ex+0x512/0x640 [ 949.928315][T25618] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 949.928341][T25618] should_failslab+0xc2/0x120 [ 949.928362][T25618] __kmalloc_cache_noprof+0x6a/0x3e0 [ 949.928385][T25618] ? __asan_memcpy+0x3c/0x60 [ 949.928397][T25618] ? sctp_association_new+0xbb/0x2a00 [ 949.928422][T25618] ? sctp_add_bind_addr+0x2a1/0x3f0 [ 949.928457][T25618] sctp_association_new+0xbb/0x2a00 [ 949.928482][T25618] ? sctp_v4_scope+0x171/0x1a0 [ 949.928503][T25618] sctp_connect_new_asoc+0x1b6/0x790 [ 949.928523][T25618] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 949.928543][T25618] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 949.928569][T25618] sctp_sendmsg+0x15f9/0x1ee0 [ 949.928584][T25618] ? __pfx_get_page_from_freelist+0x10/0x10 [ 949.928599][T25618] ? should_fail_alloc_page+0xee/0x130 [ 949.928624][T25618] ? __pfx_sctp_sendmsg+0x10/0x10 [ 949.928643][T25618] ? __pfx___might_resched+0x10/0x10 [ 949.928668][T25618] ? find_held_lock+0x2b/0x80 [ 949.928685][T25618] ? __pfx_aa_sk_perm+0x10/0x10 [ 949.928704][T25618] ? __import_iovec+0x1c8/0x660 [ 949.928726][T25618] ? __pfx_sctp_sendmsg+0x10/0x10 [ 949.928741][T25618] inet_sendmsg+0x119/0x140 [ 949.928763][T25618] ____sys_sendmsg+0x973/0xc70 [ 949.928787][T25618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.928806][T25618] ? get_compat_msghdr+0x11a/0x170 [ 949.928824][T25618] ? __pfx__kstrtoull+0x10/0x10 [ 949.928847][T25618] ___sys_sendmsg+0x134/0x1d0 [ 949.928865][T25618] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.928894][T25618] ? find_held_lock+0x2b/0x80 [ 949.928928][T25618] __sys_sendmmsg+0x2f9/0x420 [ 949.928949][T25618] ? __pfx___sys_sendmmsg+0x10/0x10 [ 949.928972][T25618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 949.929003][T25618] ? fput+0x70/0xf0 [ 949.929021][T25618] ? ksys_write+0x1b9/0x240 [ 949.929034][T25618] ? __pfx_ksys_write+0x10/0x10 [ 949.929054][T25618] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 949.929071][T25618] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 949.929091][T25618] __do_fast_syscall_32+0x73/0x120 [ 949.929114][T25618] do_fast_syscall_32+0x32/0x80 [ 949.929135][T25618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.929154][T25618] RIP: 0023:0xf7fe6579 [ 949.929166][T25618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 949.929181][T25618] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 949.929197][T25618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003a80 [ 949.929206][T25618] RDX: 0000000000000001 RSI: 0000000000008002 RDI: 0000000000000000 [ 949.929216][T25618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 949.929224][T25618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 949.929233][T25618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 949.929254][T25618] [ 950.867944][T25638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4689'. [ 950.871536][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4689'. [ 951.564872][T25656] FAULT_INJECTION: forcing a failure. [ 951.564872][T25656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.569060][T25656] CPU: 3 UID: 0 PID: 25656 Comm: syz.2.4695 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 951.569083][T25656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 951.569094][T25656] Call Trace: [ 951.569100][T25656] [ 951.569107][T25656] dump_stack_lvl+0x16c/0x1f0 [ 951.569134][T25656] should_fail_ex+0x512/0x640 [ 951.569160][T25656] _copy_from_user+0x2e/0xd0 [ 951.569184][T25656] binder_thread_write+0xa5c/0x4df0 [ 951.569214][T25656] ? __lock_acquire+0xaa4/0x1ba0 [ 951.569234][T25656] ? __pfx_binder_thread_write+0x10/0x10 [ 951.569257][T25656] ? binder_debug+0xde/0x1a0 [ 951.569279][T25656] ? binder_debug+0xde/0x1a0 [ 951.569296][T25656] ? __pfx_binder_debug+0x10/0x10 [ 951.569312][T25656] ? find_held_lock+0x2b/0x80 [ 951.569327][T25656] ? __pfx_binder_ioctl+0x10/0x10 [ 951.569340][T25656] binder_ioctl+0x26a7/0x7300 [ 951.569357][T25656] ? tomoyo_path_number_perm+0x295/0x580 [ 951.569372][T25656] ? tomoyo_path_number_perm+0x18d/0x580 [ 951.569384][T25656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 951.569396][T25656] ? __pfx_binder_ioctl+0x10/0x10 [ 951.569409][T25656] ? do_vfs_ioctl+0x512/0x1990 [ 951.569422][T25656] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 951.569444][T25656] ? find_held_lock+0x2b/0x80 [ 951.569452][T25656] ? hook_file_ioctl_common+0x145/0x410 [ 951.569466][T25656] ? __fget_files+0x20e/0x3c0 [ 951.569480][T25656] ? fput+0x70/0xf0 [ 951.569492][T25656] ? __pfx_binder_ioctl+0x10/0x10 [ 951.569505][T25656] compat_ptr_ioctl+0x6b/0xa0 [ 951.569517][T25656] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 951.569529][T25656] __ia32_compat_sys_ioctl+0x24c/0x360 [ 951.569544][T25656] __do_fast_syscall_32+0x73/0x120 [ 951.569559][T25656] do_fast_syscall_32+0x32/0x80 [ 951.569573][T25656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.569585][T25656] RIP: 0023:0xf7f26579 [ 951.569593][T25656] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 951.569603][T25656] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 951.569613][T25656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 951.569621][T25656] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.569627][T25656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.569633][T25656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 951.569638][T25656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.569651][T25656] [ 951.569656][T25656] binder: 25655:25656 ioctl c0306201 80000100 returned -14 [ 951.669402][T25656] fuse: Bad value for 'fd' [ 952.174555][T25666] FAULT_INJECTION: forcing a failure. [ 952.174555][T25666] name failslab, interval 1, probability 0, space 0, times 0 [ 952.179707][T25666] CPU: 0 UID: 0 PID: 25666 Comm: syz.1.4697 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 952.179730][T25666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 952.179741][T25666] Call Trace: [ 952.179748][T25666] [ 952.179755][T25666] dump_stack_lvl+0x16c/0x1f0 [ 952.179782][T25666] should_fail_ex+0x512/0x640 [ 952.179805][T25666] ? fs_reclaim_acquire+0xae/0x150 [ 952.179836][T25666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 952.179859][T25666] should_failslab+0xc2/0x120 [ 952.179879][T25666] __kmalloc_noprof+0xd2/0x510 [ 952.179904][T25666] tomoyo_realpath_from_path+0xc2/0x6e0 [ 952.179934][T25666] tomoyo_check_open_permission+0x2ab/0x3c0 [ 952.179955][T25666] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 952.180000][T25666] ? do_raw_spin_lock+0x12c/0x2b0 [ 952.180032][T25666] tomoyo_file_open+0x6b/0x90 [ 952.180055][T25666] security_file_open+0x84/0x1e0 [ 952.180075][T25666] do_dentry_open+0x596/0x1c10 [ 952.180098][T25666] vfs_open+0x82/0x3f0 [ 952.180119][T25666] path_openat+0x1e5e/0x2d40 [ 952.180142][T25666] ? __pfx_path_openat+0x10/0x10 [ 952.180164][T25666] do_filp_open+0x20b/0x470 [ 952.180180][T25666] ? __pfx_do_filp_open+0x10/0x10 [ 952.180214][T25666] ? alloc_fd+0x471/0x7d0 [ 952.180245][T25666] do_sys_openat2+0x11b/0x1d0 [ 952.180265][T25666] ? __pfx_do_sys_openat2+0x10/0x10 [ 952.180289][T25666] ? __fget_files+0x20e/0x3c0 [ 952.180314][T25666] __ia32_compat_sys_openat+0x16d/0x210 [ 952.180332][T25666] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 952.180348][T25666] ? ksys_write+0x1b9/0x240 [ 952.180363][T25666] ? rcu_is_watching+0x12/0xc0 [ 952.180378][T25666] __do_fast_syscall_32+0x73/0x120 [ 952.180398][T25666] do_fast_syscall_32+0x32/0x80 [ 952.180415][T25666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 952.180433][T25666] RIP: 0023:0xf7fb6579 [ 952.180445][T25666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 952.180459][T25666] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 952.180475][T25666] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 952.180486][T25666] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.180496][T25666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.180505][T25666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 952.180514][T25666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.180536][T25666] [ 952.180543][T25666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 952.306991][T25669] FAULT_INJECTION: forcing a failure. [ 952.306991][T25669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.312155][T25669] CPU: 0 UID: 0 PID: 25669 Comm: syz.3.4698 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 952.312177][T25669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 952.312188][T25669] Call Trace: [ 952.312195][T25669] [ 952.312201][T25669] dump_stack_lvl+0x16c/0x1f0 [ 952.312228][T25669] should_fail_ex+0x512/0x640 [ 952.312255][T25669] _copy_from_user+0x2e/0xd0 [ 952.312280][T25669] snd_seq_write+0x3ed/0x6d0 [ 952.312309][T25669] ? __pfx_snd_seq_write+0x10/0x10 [ 952.312332][T25669] ? bpf_lsm_file_permission+0x9/0x10 [ 952.312356][T25669] ? security_file_permission+0x71/0x210 [ 952.312378][T25669] ? rw_verify_area+0xcf/0x680 [ 952.312403][T25669] vfs_write+0x25c/0x1180 [ 952.312416][T25669] ? __pfx_snd_seq_write+0x10/0x10 [ 952.312443][T25669] ? __pfx_vfs_write+0x10/0x10 [ 952.312456][T25669] ? find_held_lock+0x2b/0x80 [ 952.312473][T25669] ? __fget_files+0x204/0x3c0 [ 952.312501][T25669] ? __fget_files+0x20e/0x3c0 [ 952.312532][T25669] ksys_write+0x205/0x240 [ 952.312548][T25669] ? __pfx_ksys_write+0x10/0x10 [ 952.312565][T25669] ? rcu_is_watching+0x12/0xc0 [ 952.312584][T25669] __do_fast_syscall_32+0x73/0x120 [ 952.312608][T25669] do_fast_syscall_32+0x32/0x80 [ 952.312630][T25669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 952.312655][T25669] RIP: 0023:0xf709e579 [ 952.312668][T25669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 952.312684][T25669] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 952.312701][T25669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 952.312711][T25669] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.312720][T25669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.312730][T25669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 952.312739][T25669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.312761][T25669] [ 952.413027][T25348] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 952.595291][T25676] fuse: Bad value for 'fd' [ 952.749843][T25649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 952.752488][T25649] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 952.760237][T25649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 952.762188][T25649] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 952.770291][T25649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 952.773046][T25649] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 952.778422][T25649] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 953.149835][T25688] netlink: 'syz.2.4701': attribute type 11 has an invalid length. [ 953.153115][T25688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4701'. [ 953.261530][T25687] netlink: 'syz.0.4700': attribute type 11 has an invalid length. [ 953.264565][T25687] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4700'. [ 953.379793][T25692] FAULT_INJECTION: forcing a failure. [ 953.379793][T25692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.385098][T25692] CPU: 2 UID: 0 PID: 25692 Comm: syz.1.4702 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 953.385112][T25692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 953.385118][T25692] Call Trace: [ 953.385122][T25692] [ 953.385126][T25692] dump_stack_lvl+0x16c/0x1f0 [ 953.385147][T25692] should_fail_ex+0x512/0x640 [ 953.385171][T25692] _copy_from_iter+0x2a4/0x15b0 [ 953.385197][T25692] ? __alloc_skb+0x200/0x380 [ 953.385214][T25692] ? __pfx__copy_from_iter+0x10/0x10 [ 953.385247][T25692] netlink_sendmsg+0x829/0xdd0 [ 953.385262][T25692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.385274][T25692] ? __import_iovec+0x1c8/0x660 [ 953.385292][T25692] ____sys_sendmsg+0xa95/0xc70 [ 953.385306][T25692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.385319][T25692] ? get_compat_msghdr+0x11a/0x170 [ 953.385335][T25692] ___sys_sendmsg+0x134/0x1d0 [ 953.385346][T25692] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.385377][T25692] __sys_sendmsg+0x16d/0x220 [ 953.385394][T25692] ? __pfx___sys_sendmsg+0x10/0x10 [ 953.385422][T25692] ? rcu_is_watching+0x12/0xc0 [ 953.385440][T25692] __do_fast_syscall_32+0x73/0x120 [ 953.385465][T25692] do_fast_syscall_32+0x32/0x80 [ 953.385485][T25692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 953.385502][T25692] RIP: 0023:0xf7fb6579 [ 953.385510][T25692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 953.385519][T25692] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 953.385529][T25692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 953.385535][T25692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.385541][T25692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 953.385546][T25692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 953.385552][T25692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 953.385564][T25692] [ 953.600587][T19267] libceph: connect (1)[c::]:6789 error -101 [ 953.604111][T19267] libceph: mon0 (1)[c::]:6789 connect error [ 953.611735][T19267] libceph: connect (1)[c::]:6789 error -101 [ 953.614052][T19267] libceph: mon0 (1)[c::]:6789 connect error [ 953.614563][T25348] Bluetooth: hci4: command 0x0406 tx timeout [ 953.635975][T25706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4704'. [ 953.849656][T25719] FAULT_INJECTION: forcing a failure. [ 953.849656][T25719] name failslab, interval 1, probability 0, space 0, times 0 [ 953.854498][T25719] CPU: 1 UID: 0 PID: 25719 Comm: syz.2.4706 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 953.854525][T25719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 953.854548][T25719] Call Trace: [ 953.854555][T25719] [ 953.854562][T25719] dump_stack_lvl+0x16c/0x1f0 [ 953.854588][T25719] should_fail_ex+0x512/0x640 [ 953.854606][T25719] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 953.854624][T25719] should_failslab+0xc2/0x120 [ 953.854638][T25719] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 953.854650][T25719] ? security_file_alloc+0x34/0x2b0 [ 953.854666][T25719] security_file_alloc+0x34/0x2b0 [ 953.854679][T25719] init_file+0x93/0x4c0 [ 953.854692][T25719] alloc_empty_file+0x73/0x1e0 [ 953.854706][T25719] path_openat+0xe0/0x2d40 [ 953.854715][T25719] ? __ia32_compat_sys_openat+0x16d/0x210 [ 953.854736][T25719] ? __do_fast_syscall_32+0x73/0x120 [ 953.854757][T25719] ? do_fast_syscall_32+0x32/0x80 [ 953.854778][T25719] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 953.854807][T25719] ? __pfx_path_openat+0x10/0x10 [ 953.854829][T25719] do_filp_open+0x20b/0x470 [ 953.854845][T25719] ? __pfx_do_filp_open+0x10/0x10 [ 953.854876][T25719] ? alloc_fd+0x471/0x7d0 [ 953.854907][T25719] do_sys_openat2+0x11b/0x1d0 [ 953.854930][T25719] ? __pfx_do_sys_openat2+0x10/0x10 [ 953.854953][T25719] ? __pfx___schedule+0x10/0x10 [ 953.854972][T25719] ? __fget_files+0x20e/0x3c0 [ 953.855003][T25719] __ia32_compat_sys_openat+0x16d/0x210 [ 953.855027][T25719] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 953.855050][T25719] ? ksys_write+0x1b9/0x240 [ 953.855071][T25719] ? rcu_is_watching+0x12/0xc0 [ 953.855091][T25719] __do_fast_syscall_32+0x73/0x120 [ 953.855117][T25719] do_fast_syscall_32+0x32/0x80 [ 953.855140][T25719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 953.855161][T25719] RIP: 0023:0xf7f26579 [ 953.855176][T25719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 953.855193][T25719] RSP: 002b:00000000f5025100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 953.855210][T25719] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5025150 [ 953.855221][T25719] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000f73b2ff4 [ 953.855232][T25719] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 953.855242][T25719] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 953.855252][T25719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 953.855275][T25719] [ 953.959255][T19267] libceph: connect (1)[c::]:6789 error -101 [ 953.962364][T19267] libceph: mon0 (1)[c::]:6789 connect error [ 954.061915][T25729] 9pnet_fd: p9_fd_create_unix (25729): problem connecting socket: ./file0/file0: -2 [ 954.386571][T25701] ceph: No mds server is up or the cluster is laggy [ 954.820623][T25348] Bluetooth: hci2: command 0x0405 tx timeout [ 954.824624][T25348] Bluetooth: hci0: command 0x0406 tx timeout [ 955.569820][T25762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4710'. [ 955.575771][T25762] bridge0: port 1(vlan2) entered blocking state [ 955.577864][T25762] bridge0: port 1(vlan2) entered disabled state [ 955.579866][T25762] vlan2: entered allmulticast mode [ 955.581450][T25762] bridge0: entered allmulticast mode [ 955.595092][T25762] vlan2: left allmulticast mode [ 955.596808][T25762] bridge0: left allmulticast mode [ 955.661077][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4713'. [ 955.694488][T25348] Bluetooth: hci4: command 0x0406 tx timeout [ 956.696176][T25803] bridge_slave_0: entered promiscuous mode [ 956.700783][T25803] bridge_slave_0: left promiscuous mode [ 956.944699][T25348] Bluetooth: hci0: command 0x0406 tx timeout [ 956.947529][T25348] Bluetooth: hci2: command 0x0405 tx timeout [ 957.155202][T25818] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 957.162506][T25818] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 958.228185][T25840] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4732' sets config #255 [ 958.647259][T25855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4736'. [ 958.723649][T25856] FAULT_INJECTION: forcing a failure. [ 958.723649][T25856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.728837][T25856] CPU: 3 UID: 0 PID: 25856 Comm: syz.2.4736 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 958.728851][T25856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 958.728858][T25856] Call Trace: [ 958.728862][T25856] [ 958.728866][T25856] dump_stack_lvl+0x16c/0x1f0 [ 958.728883][T25856] should_fail_ex+0x512/0x640 [ 958.728900][T25856] _copy_from_iter+0x2a4/0x15b0 [ 958.728917][T25856] ? __alloc_skb+0x200/0x380 [ 958.728928][T25856] ? __pfx__copy_from_iter+0x10/0x10 [ 958.728943][T25856] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 958.728959][T25856] netlink_sendmsg+0x829/0xdd0 [ 958.728972][T25856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.728985][T25856] ? __import_iovec+0x1c8/0x660 [ 958.729002][T25856] ____sys_sendmsg+0xa95/0xc70 [ 958.729017][T25856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.729030][T25856] ? get_compat_msghdr+0x11a/0x170 [ 958.729046][T25856] ___sys_sendmsg+0x134/0x1d0 [ 958.729057][T25856] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.729083][T25856] __sys_sendmsg+0x16d/0x220 [ 958.729093][T25856] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.729107][T25856] ? rcu_is_watching+0x12/0xc0 [ 958.729118][T25856] ? rcu_is_watching+0x12/0xc0 [ 958.729128][T25856] __do_fast_syscall_32+0x73/0x120 [ 958.729143][T25856] do_fast_syscall_32+0x32/0x80 [ 958.729156][T25856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.729169][T25856] RIP: 0023:0xf7f26579 [ 958.729177][T25856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 958.729186][T25856] RSP: 002b:00000000f502555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 958.729196][T25856] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 958.729202][T25856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.729208][T25856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.729213][T25856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 958.729219][T25856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.729231][T25856] [ 958.780396][T25860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4737'. [ 958.974442][ T5945] Bluetooth: hci2: command 0x0405 tx timeout [ 959.626618][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4743'. [ 959.682222][T25348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.692403][T25348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.697977][T25348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.701541][T25348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.705873][T25348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 959.806982][T25884] chnl_net:caif_netlink_parms(): no params data found [ 959.882597][T25884] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.885704][T25884] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.888648][T25884] bridge_slave_0: entered allmulticast mode [ 959.892768][T25884] bridge_slave_0: entered promiscuous mode [ 959.898784][T25884] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.901260][T25884] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.903499][T25884] bridge_slave_1: entered allmulticast mode [ 959.906385][T25884] bridge_slave_1: entered promiscuous mode [ 959.914480][ T6006] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 959.971111][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.992012][T25884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.997213][T25884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.032892][T25884] team0: Port device team_slave_0 added [ 960.038920][T25884] team0: Port device team_slave_1 added [ 960.072248][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.074468][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 960.078662][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 960.081875][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 960.085707][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 960.088819][ T6006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.093494][ T6006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 960.097246][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.099107][T25884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.102910][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.111227][T25884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.115875][T25884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.118248][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.127241][T25884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.143605][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.203812][T25884] hsr_slave_0: entered promiscuous mode [ 960.206155][T25884] hsr_slave_1: entered promiscuous mode [ 960.208262][T25884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.210580][T25884] Cannot create hsr debugfs directory [ 960.288112][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.307996][ T6006] usb 5-1: GET_CAPABILITIES returned 0 [ 960.309753][ T6006] usbtmc 5-1:16.0: can't read capabilities [ 960.530367][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4746'. [ 960.568105][T25904] random: crng reseeded on system resumption [ 960.759677][ T12] bond0 (unregistering): Released all slaves [ 961.112070][ T12] hsr_slave_0: left promiscuous mode [ 961.141535][ T12] veth1_macvtap: left promiscuous mode [ 961.143891][ T12] veth0_macvtap: left promiscuous mode [ 961.786525][T25348] Bluetooth: hci3: command tx timeout [ 962.497599][T25884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.501958][T25884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.507226][T25884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.511670][T25884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.568335][T25884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.578723][T25884] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.585887][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.588926][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.607484][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.609769][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.685701][T25946] [ 962.686518][T25946] ====================================================== [ 962.688678][T25946] WARNING: possible circular locking dependency detected [ 962.690844][T25946] 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 962.693943][T25946] ------------------------------------------------------ [ 962.696725][T25946] syz.3.4754/25946 is trying to acquire lock: [ 962.698620][T25946] ffff88804b9961e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 962.701725][T25946] [ 962.701725][T25946] but task is already holding lock: [ 962.703984][T25946] ffff888021473b28 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 962.707404][T25946] [ 962.707404][T25946] which lock already depends on the new lock. [ 962.707404][T25946] [ 962.710553][T25946] [ 962.710553][T25946] the existing dependency chain (in reverse order) is: [ 962.711023][T25884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.713278][T25946] [ 962.713278][T25946] -> #3 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 962.718073][T25946] blk_alloc_queue+0x619/0x760 [ 962.719725][T25946] blk_mq_alloc_queue+0x179/0x290 [ 962.721546][T25946] __blk_mq_alloc_disk+0x29/0x120 [ 962.723561][T25946] loop_add+0x496/0xb70 [ 962.725043][T25946] loop_init+0x164/0x270 [ 962.726556][T25946] do_one_initcall+0x120/0x6e0 [ 962.728193][T25946] kernel_init_freeable+0x5c2/0x900 [ 962.729545][T25884] veth0_vlan: entered promiscuous mode [ 962.729943][T25946] kernel_init+0x1c/0x2b0 [ 962.733668][T25946] ret_from_fork+0x45/0x80 [ 962.735242][T25946] ret_from_fork_asm+0x1a/0x30 [ 962.735376][T25884] veth1_vlan: entered promiscuous mode [ 962.736889][T25946] [ 962.736889][T25946] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 962.741370][T25946] fs_reclaim_acquire+0x102/0x150 [ 962.743086][T25946] kmem_cache_alloc_noprof+0x53/0x3b0 [ 962.744927][T25946] __kernfs_iattrs+0xbc/0x3f0 [ 962.746555][T25946] __kernfs_setattr+0x4d/0x3c0 [ 962.747786][T25884] veth0_macvtap: entered promiscuous mode [ 962.748178][T25946] kernfs_iop_setattr+0xda/0x120 [ 962.750991][T25884] veth1_macvtap: entered promiscuous mode [ 962.751575][T25946] notify_change+0x6a6/0x1230 [ 962.754895][T25946] do_truncate+0x15b/0x220 [ 962.756424][T25946] path_openat+0x2761/0x2d40 [ 962.756938][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.758078][T25946] do_filp_open+0x20b/0x470 [ 962.761148][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.762660][T25946] do_sys_openat2+0x11b/0x1d0 [ 962.766172][T25884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.767169][T25946] __x64_sys_openat+0x174/0x210 [ 962.770397][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.770940][T25946] do_syscall_64+0xcd/0x230 [ 962.774093][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.775630][T25946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.775643][T25946] [ 962.775643][T25946] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 962.775658][T25946] __mutex_lock+0x199/0xb90 [ 962.775670][T25946] __kernfs_iattrs+0x2b/0x3f0 [ 962.778881][T25884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.780290][T25946] __kernfs_setattr+0x4d/0x3c0 [ 962.783639][T25884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.783947][T25946] kernfs_iop_setattr+0xda/0x120 [ 962.785573][T25884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.787688][T25946] notify_change+0x6a6/0x1230 [ 962.789294][T25884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.791880][T25946] do_truncate+0x15b/0x220 [ 962.793517][T25884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.796116][T25946] path_openat+0x2761/0x2d40 [ 962.796129][T25946] do_filp_open+0x20b/0x470 [ 962.796136][T25946] do_sys_openat2+0x11b/0x1d0 [ 962.796148][T25946] __x64_sys_openat+0x174/0x210 [ 962.796160][T25946] do_syscall_64+0xcd/0x230 [ 962.796172][T25946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.814847][T25946] [ 962.814847][T25946] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 962.817439][T25946] __lock_acquire+0x1173/0x1ba0 [ 962.819112][T25946] lock_acquire+0x179/0x350 [ 962.820674][T25946] down_read+0x9b/0x480 [ 962.822143][T25946] kernfs_iop_getattr+0x9c/0xf0 [ 962.823796][T25946] vfs_getattr_nosec+0x2a9/0x430 [ 962.825441][T25946] vfs_getattr+0x4a/0x60 [ 962.826876][T25946] loop_query_min_dio_size.isra.0+0x120/0x260 [ 962.828892][T25946] lo_ioctl+0x1d33/0x27e0 [ 962.830445][T25946] lo_compat_ioctl+0xb9/0x170 [ 962.832016][T25946] compat_blkdev_ioctl+0x2eb/0x7a0 [ 962.833715][T25946] __ia32_compat_sys_ioctl+0x24c/0x360 [ 962.835605][T25946] __do_fast_syscall_32+0x73/0x120 [ 962.837327][T25946] do_fast_syscall_32+0x32/0x80 [ 962.838964][T25946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.841044][T25946] [ 962.841044][T25946] other info that might help us debug this: [ 962.841044][T25946] [ 962.844124][T25946] Chain exists of: [ 962.844124][T25946] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 962.844124][T25946] [ 962.848407][T25946] Possible unsafe locking scenario: [ 962.848407][T25946] [ 962.850635][T25946] CPU0 CPU1 [ 962.852238][T25946] ---- ---- [ 962.853843][T25946] lock(&q->q_usage_counter(io)#23); [ 962.855567][T25946] lock(fs_reclaim); [ 962.857554][T25946] lock(&q->q_usage_counter(io)#23); [ 962.859962][T25946] rlock(&root->kernfs_iattr_rwsem); [ 962.861625][T25946] [ 962.861625][T25946] *** DEADLOCK *** [ 962.861625][T25946] [ 962.864135][T25946] 3 locks held by syz.3.4754/25946: [ 962.865708][T25946] #0: ffff888023cfcb68 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x2a9/0x27e0 [ 962.868438][T25946] #1: ffff888021473b28 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 962.871986][T25946] #2: ffff888021473b60 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 962.875587][T25946] [ 962.875587][T25946] stack backtrace: [ 962.877352][T25946] CPU: 0 UID: 0 PID: 25946 Comm: syz.3.4754 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 962.877366][T25946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 962.877372][T25946] Call Trace: [ 962.877376][T25946] [ 962.877381][T25946] dump_stack_lvl+0x116/0x1f0 [ 962.877395][T25946] print_circular_bug+0x275/0x350 [ 962.877408][T25946] check_noncircular+0x14c/0x170 [ 962.877421][T25946] __lock_acquire+0x1173/0x1ba0 [ 962.877436][T25946] lock_acquire+0x179/0x350 [ 962.877447][T25946] ? kernfs_iop_getattr+0x9c/0xf0 [ 962.877463][T25946] ? __pfx___might_resched+0x10/0x10 [ 962.877475][T25946] down_read+0x9b/0x480 [ 962.877489][T25946] ? kernfs_iop_getattr+0x9c/0xf0 [ 962.877502][T25946] ? find_held_lock+0x2b/0x80 [ 962.877511][T25946] ? __pfx_down_read+0x10/0x10 [ 962.877524][T25946] ? kernfs_root+0xee/0x2a0 [ 962.877542][T25946] kernfs_iop_getattr+0x9c/0xf0 [ 962.877556][T25946] vfs_getattr_nosec+0x2a9/0x430 [ 962.877568][T25946] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 962.877582][T25946] vfs_getattr+0x4a/0x60 [ 962.877592][T25946] loop_query_min_dio_size.isra.0+0x120/0x260 [ 962.877607][T25946] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 962.877620][T25946] ? mark_held_locks+0x49/0x80 [ 962.877634][T25946] ? __pfx_autoremove_wake_function+0x10/0x10 [ 962.877646][T25946] ? blk_freeze_queue_start+0xec/0x140 [ 962.877658][T25946] lo_ioctl+0x1d33/0x27e0 [ 962.877673][T25946] ? kasan_save_stack+0x42/0x60 [ 962.877683][T25946] ? kasan_save_stack+0x33/0x60 [ 962.877692][T25946] ? kasan_save_track+0x14/0x30 [ 962.877701][T25946] ? kasan_save_free_info+0x3b/0x60 [ 962.877715][T25946] ? __kasan_slab_free+0x51/0x70 [ 962.877725][T25946] ? kfree+0x2b6/0x4d0 [ 962.877739][T25946] ? tomoyo_path_number_perm+0x470/0x580 [ 962.877750][T25946] ? security_file_ioctl_compat+0x9b/0x240 [ 962.877762][T25946] ? __ia32_compat_sys_ioctl+0xc3/0x360 [ 962.877775][T25946] ? __do_fast_syscall_32+0x73/0x120 [ 962.877788][T25946] ? do_fast_syscall_32+0x32/0x80 [ 962.877801][T25946] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.877813][T25946] ? __pfx_lo_ioctl+0x10/0x10 [ 962.877831][T25946] ? kasan_quarantine_put+0x10a/0x240 [ 962.877841][T25946] ? lockdep_hardirqs_on+0x7c/0x110 [ 962.877853][T25946] ? find_held_lock+0x2b/0x80 [ 962.877862][T25946] ? tomoyo_path_number_perm+0x295/0x580 [ 962.877874][T25946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 962.877887][T25946] ? blkdev_common_ioctl+0x1dd/0x2480 [ 962.877898][T25946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.877909][T25946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 962.877921][T25946] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 962.877932][T25946] ? do_vfs_ioctl+0x512/0x1990 [ 962.877944][T25946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 962.877960][T25946] lo_compat_ioctl+0xb9/0x170 [ 962.877974][T25946] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 962.877987][T25946] compat_blkdev_ioctl+0x2eb/0x7a0 [ 962.877998][T25946] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 962.878010][T25946] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 962.878021][T25946] __ia32_compat_sys_ioctl+0x24c/0x360 [ 962.878035][T25946] __do_fast_syscall_32+0x73/0x120 [ 962.878048][T25946] do_fast_syscall_32+0x32/0x80 [ 962.878061][T25946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.878073][T25946] RIP: 0023:0xf709e579 [ 962.878081][T25946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 962.878091][T25946] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 962.878100][T25946] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004c06 [ 962.878106][T25946] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 962.878112][T25946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.878117][T25946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.878123][T25946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.878131][T25946] [ 963.247694][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.346677][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.467878][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.618334][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.875667][ T12] bond0 (unregistering): Released all slaves [ 964.100216][ T12] hsr_slave_0: left promiscuous mode [ 964.102281][ T12] hsr_slave_1: left promiscuous mode [ 964.106167][ T12] veth1_macvtap: left promiscuous mode [ 964.107891][ T12] veth0_macvtap: left promiscuous mode [ 964.109645][ T12] veth1_vlan: left promiscuous mode [ 964.111319][ T12] veth0_vlan: left promiscuous mode [ 965.183035][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.249065][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.348411][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.419564][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.492409][ T12] bridge_slave_1: left allmulticast mode [ 965.494759][ T12] bridge_slave_1: left promiscuous mode [ 965.497075][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.501091][ T12] bridge_slave_0: left allmulticast mode [ 965.502934][ T12] bridge_slave_0: left promiscuous mode [ 965.505823][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.544654][T25880] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 965.608676][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.612370][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.616565][ T12] bond0 (unregistering): Released all slaves [ 965.622465][T25880] PM: hibernation: Basic memory bitmaps freed [ 965.634834][ T6640] usb 5-1: USB disconnect, device number 88 [ 965.870618][ T12] hsr_slave_0: left promiscuous mode [ 965.873222][ T12] hsr_slave_1: left promiscuous mode [ 965.875389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.877714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.881112][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.884131][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.890394][ T12] veth1_macvtap: left promiscuous mode [ 965.892601][ T12] veth0_macvtap: left promiscuous mode [ 965.895181][ T12] veth1_vlan: left promiscuous mode [ 965.897413][ T12] veth0_vlan: left promiscuous mode [ 966.079043][ T12] team0 (unregistering): Port device team_slave_1 removed [ 966.124293][ T12] team0 (unregistering): Port device team_slave_0 removed [ 966.722323][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.788290][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.879439][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.950556][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.028957][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.121711][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.167906][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.227400][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.292410][ T12] bridge_slave_1: left allmulticast mode [ 967.295195][ T12] bridge_slave_1: left promiscuous mode [ 967.297151][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.300724][ T12] bridge_slave_0: left allmulticast mode [ 967.302778][ T12] bridge_slave_0: left promiscuous mode [ 967.305542][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.632189][ T12] bond0 (unregistering): Released all slaves [ 967.637579][ T12] bond1 (unregistering): Released all slaves [ 967.645208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.649873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.654046][ T12] bond0 (unregistering): Released all slaves [ 967.850368][ T12] hsr_slave_0: left promiscuous mode [ 967.852803][ T12] hsr_slave_1: left promiscuous mode [ 967.857998][ T12] hsr_slave_0: left promiscuous mode [ 967.860362][ T12] hsr_slave_1: left promiscuous mode [ 967.862123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.864869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.867347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.869575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.874571][ T12] veth1_macvtap: left promiscuous mode [ 967.876230][ T12] veth0_macvtap: left promiscuous mode [ 967.877868][ T12] veth1_vlan: left promiscuous mode [ 967.879429][ T12] veth0_vlan: left promiscuous mode [ 967.881369][ T12] veth1_macvtap: left promiscuous mode [ 967.883027][ T12] veth0_macvtap: left promiscuous mode [ 967.885109][ T12] veth1_vlan: left promiscuous mode [ 967.886795][ T12] veth0_vlan: left promiscuous mode [ 968.595764][ T12] team0 (unregistering): Port device team_slave_1 removed [ 968.629423][ T12] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 13:46:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf835 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc90020ae6f48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addfb80 R15=ffffffff854bf7d0 RIP=ffffffff854bf85f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc1ca41108 CR3=000000006c824000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888000f0ad68 RCX=ffffffff8197f49c RDX=1ffff110000f8002 RSI=ffffc900042dfdf8 RDI=ffff888000f0a440 RBP=ffff888000f0a440 RSP=ffffc900042dfdd0 R8 =0000000000000001 R9 =fffff5200085bfad R10=0000000000000003 R11=0000000000000000 R12=1ffff9200085bfbb R13=0000000000000000 R14=ffff888000f0a440 R15=dffffc0000000000 RIP=ffffffff817eafc0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9a40c0d00 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff5ce81ff8 CR3=000000004f899000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 5664c8f55664c8f5 ZMM22=625b9429625b9429 625b9429625b9429 625b9429625b9429 625b9429625b9429 625b9429625b9429 625b9429625b9429 625b9429625b9429 625b9429625b9429 ZMM23=db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 db9636a0db9636a0 ZMM24=be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 be9b2350be9b2350 ZMM25=1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e 1246cd8e1246cd8e ZMM26=7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c 7dba7d3c7dba7d3c ZMM27=542f596e542f596e 542f596e542f596e 542f596e542f596e 542f596e542f596e 542f596e542f596e 542f596e542f596e 542f596e542f596e 542f596e542f596e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7423000074230000 7423000074230000 7423000074230000 7423000074230000 7423000074230000 7423000074230000 7423000074230000 7423000074230000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b241460 RCX=ffffffff81ae9e69 RDX=ffff888023288000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000df0f5b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=ffffed100564828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180 RIP=ffffffff81baacd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f66e40 CR3=000000004b156000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7402ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=ffff88804ac1c882 RCX=ffffffff8485308d RDX=ffff88801daec880 RSI=ffffffff8485309b RDI=0000000000000004 RBP=0000000000000073 RSP=ffffc9000dc7fb10 R8 =0000000000000004 R9 =000000000000000e R10=0000000000000002 R11=0000000000002bc0 R12=000000000000000e R13=ffff888060282ff1 R14=0000000000000002 R15=dffffc0000000000 RIP=ffffffff81baad0b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf264a7440 CR3=00000000544b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000