last executing test programs: 4.72225358s ago: executing program 2 (id=3296): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030022003505d25a806f8c2394f90435fc600400110a0a74010037153e3702480111043b4b529185d515f4173e8000f01700d1bd00000000", 0x3a}], 0x1}, 0x0) 4.721901017s ago: executing program 2 (id=3297): socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1, 0x5}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f0000000140)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001080)=[{&(0x7f0000000b80)=""/212, 0xd4}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000c80)=""/244, 0xf4}, {&(0x7f0000000d80)=""/151, 0x97}, {&(0x7f0000000e40)=""/122, 0x7a}, {&(0x7f0000000ec0)=""/149, 0x95}, {&(0x7f0000000f80)=""/253, 0xfd}, {&(0x7f0000000540)=""/39, 0x27}], 0x8, 0x2400000, 0x7f) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=<r5=>0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000480)={0x1000, 0x9, {r5}, {0xee00}, 0xf98, 0xffff}) process_vm_writev(r5, &(0x7f0000000400)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000640)=""/251, 0xfb}], 0x3, &(0x7f0000000480)=[{&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000900)=""/254, 0xfe}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/168, 0xa8}], 0x6, 0x0) 4.250414351s ago: executing program 1 (id=3305): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c0cc}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x5, &(0x7f0000000180)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x20000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x40) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x44, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x44}}, 0x0) fallocate(r4, 0x11, 0x596b, 0xd3eb) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000400)=[{0x3c, 0xff, 0x1, 0xac}, {0x2, 0x20, 0xb3, 0x3ff}, {0x100, 0x3, 0x1, 0x750}, {0x7ff, 0xcd, 0xf7, 0x7289}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c6cd0a10fd30000002000110a00000000000000000a000000ff0000"], 0x1c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r3, 0xfff, 0x80000}) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r12, 0x4008ae48, 0x2) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0xcf0242258c2ce6ae}, 0x20000000) 4.151752923s ago: executing program 1 (id=3308): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000167000/0x1000)=nil, 0x12000}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x1, 0x2000, 0x0, 0x1b4}, &(0x7f0000000080), &(0x7f0000000140)) 3.791899207s ago: executing program 2 (id=3311): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/156, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.292211871s ago: executing program 1 (id=3315): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r4 = socket(0x840000000002, 0x3, 0x100) write$UHID_CREATE2(r3, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xbf, 0x37, 0x1, 0x1, 0x71, 0x8, "ee3296072124cb4ed27d7a3cbbc2fa8c36935356ce43d266c198df4a856aa81634f218d502f8e58eedbedda78653960bc9d98d4a9c96bd97e4e2106d5cddfe62fe49497eec8a9c2830afc1eb7370f0e8d834f5ca9948f25c482ae9c33c6f3c685b9f0d94156652e4e80699f1755d7f119cce81e5ea1341632735ffb43000ac94dff7274f4c4313ae91a1f4d3a934e635d6c74c6df0d83baa753202a9495449f91281a9f8c6d0a8fe13c37b5a6030e9ebc10c71e3194dda3cc4be661dee08e6"}}, 0x1d7) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r4, &(0x7f00000000c0), 0x0, 0xa, 0x6e6f2b53, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8011) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0xff88) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x20000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, 0x0) 2.765456597s ago: executing program 0 (id=3317): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x200000000000011, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008009776b7040000000000008500000033"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) (async) shmat(0x0, &(0x7f00001c2000/0x1000)=nil, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000280)=""/141, 0x8d}], 0x1, 0xfffffff8, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) 2.67262883s ago: executing program 0 (id=3318): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3%\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1o\xb8\x8f]\x14\x1d\x00\x00\x00\x00\x00', 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (fail_nth: 2) 2.532820204s ago: executing program 0 (id=3319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000eaff0000000000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) pread64(r5, &(0x7f0000000040)=""/238, 0xee, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_open_dev$video(0x0, 0x7fffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffffffffffffffd, 0x5]}, 0x0, 0x8) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) 2.493217166s ago: executing program 0 (id=3320): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="43c90006d5f8169e0000cdcbd26a2e407a38b07d2adb903041be4c7b5e64e0682fe4bf5022dba24efa524ff871179a0f796085b9fd8cc82cade7b7b4ccef5c67fb27f1036d50f7a5c9420fbe0374a5b06e07ca13f037d7f090cd6d1fc2f0fa671a60df81c3e75b850c35137d9f69a201bfd66851a634dea88de59e8d2b6956d3074c7b49e5a605776cd1e06fabfb0dac4310f8f5e8753165be934f7a30876175820752e6fcdf1df123a27b632f0c84348cf80a2a0c32c69a7ee52cdc6da8e0f44accb3f4641304c37f2cd0f02ea9bc69289d1dde"], 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25030000000900010073797a300000000005000400010000001400020076657468310200"/62], 0x44}, 0x1, 0x0, 0x0, 0x2008080}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x6, 0x2, 0x2, 0xa, 0x0, 0xffff}, 0x20) 2.421860237s ago: executing program 0 (id=3321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = epoll_create1(0x0) read(r1, &(0x7f00000000c0)=""/183, 0xb7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) close(r0) (fail_nth: 2) 2.301689926s ago: executing program 0 (id=3322): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd12e}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x4, @remote, 0x9}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000003c0)="f863a5df432bc970417716588f37e27d32c4def910bf6af531689123aa3f3cebc3e73d7a3d5b038dd227cb1260e7ee9c3bf8e276601f15074905fac13936b894f9347690b12cfc264230099728b356ff52027d4129b3319ff83618f0c0e8b96b63a17e2425518aa626987804aee10b8d0f4ae1114c51635c084dba64e94c2893a6ba823fd8a745a59ca82e8beaf2aa54ced8d2fb078c45d2d24fbb2118608959a61392cb75511b67b35c50c361b32c1eb3cfe221a2694bea", 0xb8}, {&(0x7f0000000300)="c062", 0x2}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="49d69dc306e749f8f01b0ca8ed7e0d2540758eed229b93a9c57453acbfe78414905d3c8936f467ed126dbd2c00d6085dac31043a3ce8bcacb0eca801a65a7ae20ae4d667aa3240df6d80ea0e224ad8fea061046dee0c342733f75462bf6e58a53eac525b6ac69335b05137b4a2782590cfb93ca90338b938e910fb28ada3af3658941626c46b1ace7414ebe038686a1d5a96638a08ef2d511daf7d989f40f0143f3288cc4d143a623c13498aecda8906c5f9f3ebcb0453aec4d97540c76d4d21cd242db56a1dc151b9d2de15613c47aa17cb16dddd6406b0e60295c7b141106bb9a693da334cac62313f716779aca9a29e6b8f0db115", 0xf6}, {&(0x7f00000005c0)="916b442a24900bda21ad2ea8684fb4f97ac6a71d00cd678aeee78f775a30040645bd797a31d42886992b0932b2bd21d3c220cc4b9fc88df244009535e0a69a6a669d27aed2e009515407c0ad", 0x4c}, {&(0x7f0000000640)="6b3864d3e6922ae767b150dc1002c761a61f8afd7208a5da547eb3ebe4fbc6ba7d5543c0cfecec132b94b26a10c1a026d9270d25bb54d92deac120d092680fdaed87b610f7eafacf81b293008e0cb73fea1836a4d99c0e4a61865fd3cc7f0586e15492fbcb631fe925fe9c7efeb5a65e0d7c4f354dd417034320fd81bdf2d0660eabc8127bbf50c382ed3934fe6f", 0x8e}], 0x6, &(0x7f0000001240)=ANY=[@ANYBLOB="100000002900000008000000020000005400000029000000390000008708000e00000000fe8000000000000000000000000000bbfc0000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000001340000002900000039000000e904000800000000fe8000000000000000000000000000aafc0000000000000000000000000000013400000029000000370000002b030000000000000401070102080004010605020008050293c2010500000000000000000000000010000000290000003e000000ffffff7f"], 0xdc}}, {{&(0x7f0000000880)={0xa, 0x4e21, 0x0, @empty, 0x3ff}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="14bfc696885d6a71cc05b358193d32ceeb25c0d52759eeb29aaeac65f34de000a7387e36b7516923085e95775a064592eb57af4431f1ae7364e7bd80ca00b9772bb9770ad476b52af6a9579813fe", 0x4e}, {&(0x7f0000000940)="8d9876cfc3dc7ab30c6ebfcfcf2b4d608b4d5632f8d609c8fe841d3924470dcca1af6da4e5b75321efc6bbdbc13b88f85383f56d6567a196d3c685e1ef27", 0x3e}, {&(0x7f0000000980)="867c5b049595839ad8560f12f231d070be84c0a15458bebd76c3ed124a89e49f1fab9a7342be1ad0ff9251117dee637dfc6762bde06c898f2359e9485a3dbb1ce6b660d36f979f1363a593ecb2f55d02fd3b2c42a850a8b47f7ced9e88459978fc6c3f65a370e1f3c171fe53c90611191a31bf01dfdccd02d966b0a97e65dc7ff82a6a6fef955933b703352940fa3092444ad29961938def2d6051d849a6bb258dc1f6873d563734f347e26ac8e5b8c47ebc6aec4588a14fa8dd515c68c95119412d1acc60b0fa785beb98a10a575928a5cf1aa95feac41493ce92", 0xdb}, {&(0x7f0000000a80)="d341e0df08000000000000009c37d9ee6bd91effa3f2bacf57640fc33c99b40bee07fe4c07e925b864f5c000bae05f407c", 0x31}], 0x4}}, {{&(0x7f0000000b00)={0xa, 0x4e22, 0x80, @mcast2, 0x7ff}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000b40)="c07caf2508b91887658e6d8be2c0f5c9865c0c99e3aa9960b631e60ee1baa8631f3d7cf159618910adabf2a4df459732bf0d3bb04cfced4d7495ad21d8c75e7ac920f625d3acf60354dcd604e33621da47e5fa700c38aded9a7f94de79bd79599fb0a0d2cd38ae9a33a7780a17372c5bf9833bb2ad440cc24f198f7addd29936d950ee31eaf68fc59edb3dd2a79d113041e177994b5bd2c967b0f60d003fa43b0aaa7d8818afc98b853e2db6add07528cb70f67d1afecd28095bfa99717a861c729df76951779730bb21655588655727e1c9c4461b1d4ff152651eb614e5d9c4f610dfc56611d3c2bd141b61bcb1d4fe5bf99dcd1548", 0xf6}, {&(0x7f0000000c40)="e44d55dc9eae70be7b80ec1dff3c0ff0e31e122e7164713dce4951d5765dfd3fb9b05c529d9cb7040e545f1dd918ffc757c8bad4669c988a18855877d5bd8da6432e8c7d3655a924f1ddab6fd1bc8fa1cc536a979bb571c5530495447e476a4512f7a703768832583648776c739b6bcd07082301d3a7c1b3dc6cbcb98498810acb468c6dbccb190deee13eb0e8704e6ba0c243f959bf37be1ee9672d5736f5680ebc3093199b65f947f391b37c1ad4a9437df9e767ef4eb97087fd804319397a1a97606db1059f69c6a188", 0xcb}, {&(0x7f0000000d40)="66899de8e9c6d1cc5e6519591cf7136d1e6e11599a48d047c1f0c78289c5d7883c36da066e5ff236362dc062f806932ba0226d0e94bda74a7609b353c673e4634334b5a961e8aa314abfef4fc1cdfc513b6be6d60c0f4f0e9c4b2c3a226fd5194fb70e10146c15da356b0ffd5c5e69e002257fbbe07bd5217cf7ca95562287c42727eeb10e6c1dc984ca85c186b586eb97e5b577a795e49176ee75780d4e5c06acf9b39ed967f93f0f8f64cf2b2206d4519db415e9deaa36c7ff30cec51e4294462dfc7026d205ef8b26489f2e3a9e36e5", 0xd1}, {&(0x7f0000000e40)="9a0b58d38858b544bd13245a8bd23e12a067b4f3e24bf4b700ca6169b5543e21f7b760c08eff5a4254352fde4de0f325ae989a0cff22a5784ecdce2620801817c6bb6008a5ae544b431287d80cf9abe400375a0088a36861cde597a1efec2de806ad042d41e0aa487aa8d01eb0de4f23bc6432d015e700306dc4400d6c9f2e4f1adc6fc7a4e8b659a139642d0d5dd03b5f726677ef6610725540bec66bb5d6c424fa46dad1454bd4646d312b9e1641e1789150d37c769498aa9fbd5c8f0b74448d", 0xc1}, {&(0x7f0000000f40)="87004a72de86f296dc7a03c7a618f956cf4437c64e83ac5a4565a90ff07703b1431ee4c3ed043b059ca8656fea507a42c1df8488459bdbd03a8a5c89ed5c27ae147c04f40efff72ed8b137835836c1ca99dc5c4a883b5b8ea09dc9e51616f0e74b19946c247465cc37bc5d6223ca5e22736b6b16fcd8ceb0e8182780926b64042abec0394ea2000b16acebb6cb", 0x8d}], 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="5c00000029000000370000002e080000000000000738000000000c040700ffffffffffffffff883fdc6e3d0000f300000000000000000000000200000000000000000008000000810081bafe0ad2f646260000200000002900000032000000fe88000000000000000000000000010100000000000000860d00000000000000586c772da72684dafe687e16c2a5ba91df8b207196f471e17d69865e03000000008dfcb84e80ac", @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, {{&(0x7f0000001500)={0xa, 0x4e20, 0x513, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001540)="6fa0bf95cfb39bff824e04d1f046a308e68ad3ffb0823d6d16fbb26dd39af5e908b1e8199bb8c3e0227e672780ae538284546cfdddd73b93ee6dce241f7a6829ef0e6c6dc8171099adabc30b1c129b2cc7091755cff71393977bf0d5a3ed453f876e31632c1a51c1991d5b73d6c4ca30e55fcf5bbc97bb0fc305a62c7fcc110fa79f3a6f76ab7a476e6ce0579d3114f546d5382dda1328358cdf4d", 0x9b}, {&(0x7f0000001600)="2a2c95711965446c341559ce9f5aac0b2943eb721eeb782b3d53a298bd57f195acaa8528120e8390ade09558f8c37d0f95dd8b766a0b346d4d0dbb13153c81202e56cdce33247cd1749f2a1262c92d007f3b19eb5152fd308f7b2a24c659a3e1aeb5b015264fc050a4a22bcd3666510ab4f1327a29d6aabb5c692c3f8fd623a4ed27a405403e83e03c65d4cee44ca40063", 0x91}, {&(0x7f00000016c0)="6c2d3db1e83fe8b426ab02784725d18f79419cfdb402701e37292fad7d69ba35c3429901f576e625fbd04af7eac92e8b5a272cc51ea93592fa4a0cc68a4151dce4efdf336b8addec399b952daa07", 0x4e}], 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x124}}], 0x4, 0xc005) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000035d80)=""/102398, 0xfffffffffffffff3) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141a42, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file2/file0\x00', r3, &(0x7f0000000280)='./file2/file0\x00') lsm_set_self_attr(0xc, &(0x7f000001a700)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES32=r3, @ANYRES8=0x0], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r4, 0x5605) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) r5 = syz_open_dev$radio(&(0x7f0000019300), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) writev(r4, &(0x7f0000019380)=[{&(0x7f0000019440)="3fbc3728982ce2ecec8a2e2badca0788cd68513de9afe062a657423317ff604b0359d58e127cbff47ce4dbcacb0db7c2a6b962305c1ce0a49a29456971cf76aa04c74b29539d84ee2fca457182e58c59ca10d501935a18352f62dd0fb0df70cc5a22de6379e268adec62221f431e36a64276d16d0a8c66d441c4b48ed17a6cc7b7e8786c877cfdb57785f9317353fb04f2", 0x91}, {&(0x7f0000019500)="6f1515d72989b85609750668bf8a6cac05c7defe84383b67fb71c9cd44fb7644c0796923ad8a11b25347f9366b3f6d09c509ca89776d1c7658a9ac25c9234f69acf62a9268d6da6bd3ad52f8d3345ddf4c1072739c281687cf23882be437fa719ad8873ff3b2472dc5da9883cefd39b5aaf6ae80f3bc1b7c2f75d6548409f5bd7dfe51a89677a33b2b018a9953fb87f3e3362797e4cfd3baa4e4bfa3cfb2599d60476ae6ea317664e8f6ab813cfa8d372f22fd0990436d00dcefa4976b95bf67ee09066342", 0xc5}, {&(0x7f0000019600)="27d968566c59b33d1db5cfaa3c19db7233a6fd4910c306dd562f2b8ccdaa39de56f97b0ddcb2d6e8f14326ce5c857057581db3546b19fd2b89e2af0480a94a61a23f5da77c927895e00e550808296a6391952ec866a8130eb7ccddf6858ae2484b362d0812c760140de76f9786d1080c73df52e614828ae31aeb25e0cc59f11e9d2d883e8048ed3c467a8928582d5542df876ec4df7359b8898958bf11b72e5d7896cf2bf2f78b381e9f2fcfafa176166410cd81d8b9fc", 0xb7}, {&(0x7f0000019700)="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", 0x1000}, {&(0x7f000001c740)="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", 0x611}], 0x5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000480)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.288598503s ago: executing program 2 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) timer_create(0x1, &(0x7f0000000000)={0x0, 0x36, 0x2, @thr={&(0x7f00000002c0)="2f21a04c0c15f30ef5b31cbfd23e0094b83920a12e3c20055f400f8e548140a03d3a342ee89b8ca2077f021a4e711d46e3a480aa5356decdafea491e963d55cd18cd4cf7e9998aff67ee14e7336ea9deff9a79ee1bba3aa09aa88a5d8000e91bf12943846f97c738153386d45e74f33ee98835837e828fafae23d37bffe7961f8b6f5f5c83396c7aa8348a97cc44b3c550120496cf77bc8f9341dd9f21f23a4f4506efca808a1db1f968b8489c5edc19636cb19d6ea24776bfe21054317efcf062ccf8053d66", &(0x7f0000000180)="716c202013881c7e3f7177b09f9db47f2836acf29dc0f65a7d80459c7d629ecc6c4fe7b03e228d4a53df7d9b7e5dcb6abde9d910f1ca557e408149b76cbf0fa1b7decc59b928cb53e61e69dbd76e56a6c29653189b609b8c75bb7826c88821fa997f9bf935b5d81a8a811b7d55eaf43273f078d6b1f2653428275a4cd4c46ecea20e04f3101f477f9d087fced59994bc4845448244e45595959dcb84a10cbfc0b8bd"}}, &(0x7f0000000080)=<r1=>0x0) timer_settime(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000440), 0x1000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x1, 0x4, 0xee4, 0xa7e, 0x8, 0x7, 0x4}, &(0x7f00000004c0)={0x80, 0x67, 0x200, 0x2, 0x1a, 0x2, 0xffffffffffff3d2e, 0x5c03}, &(0x7f0000000500)={0x8, 0x10001, 0x84c9, 0xffff, 0x2, 0x7, 0x8, 0x9}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x3, 0x8]}, 0x8}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.170732962s ago: executing program 1 (id=3325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000200)=0x8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000180)=""/30, &(0x7f0000001bc0)=0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x0, 0xffffff2c, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8}, 0x10) 2.170592205s ago: executing program 3 (id=3326): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.210626121s ago: executing program 1 (id=3327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x32, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x13, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) socket$kcm(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20041, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write$tcp_mem(r6, &(0x7f0000000040)={0x800800000000}, 0x48) 1.205642719s ago: executing program 3 (id=3328): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x10000, 0x7f}, {0x2, 0x3}]}, 0x14, 0x7ae7aa5afb4f68be) 1.149796378s ago: executing program 2 (id=3329): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 1.109187471s ago: executing program 3 (id=3330): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x4003}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 1.022086478s ago: executing program 3 (id=3331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, &(0x7f0000000540)=""/183, 0xb7}, 0xfb2f}, {{&(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/59, 0x3b}], 0x3, &(0x7f0000000800)=""/150, 0x96}, 0xfffffff6}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/115, 0x73}, {&(0x7f00000009c0)=""/181, 0xb5}, {&(0x7f0000000a80)=""/18, 0x12}], 0x3}, 0x10000}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/76, 0x4c}], 0x1, &(0x7f0000000bc0)=""/202, 0xca}, 0xffff}, {{&(0x7f0000000cc0)=@x25, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000001340)=""/260, 0x104}, 0x4}, {{&(0x7f0000000f00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/53, 0x35}, {&(0x7f0000001000)}, {&(0x7f0000001040)=""/198, 0xc6}, {&(0x7f0000001140)=""/103, 0x67}], 0x4, &(0x7f0000001200)=""/88, 0x58}, 0x7fffffff}], 0x6, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x100000000) r4 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmat(r4, &(0x7f00005d4000/0x4000)=nil, 0x3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x6b, &(0x7f00000001c0)=""/107, 0x41100, 0x78, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 264.064251ms ago: executing program 2 (id=3332): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="050405", 0x3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d04712000000005000000182ce0ab6d000041a15be2d9d13cd1cb0c238e61cfd6a5d7cd0eaa50e027db032ddbfe85e53b87eb950a450000000000000000", 0x52}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x3254, &(0x7f0000000100)={0x0, 0xae31, 0x10, 0x2000000, 0x17b}, &(0x7f0000000000), &(0x7f0000000180)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x67fd, &(0x7f0000000380)={0x0, 0x3400, 0x200, 0x3, 0x4000022c, 0x0, r5}, 0x0, 0x0) io_uring_setup(0x4d67, &(0x7f0000000300)={0x0, 0x94d1, 0x400, 0xffffbffd, 0x53}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x27951080, &(0x7f0000000900)="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", 0x2, 0x0, 0x0, 0x0) syz_clone(0x80082000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 142.090439ms ago: executing program 3 (id=3333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r0=>0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 1.116802ms ago: executing program 1 (id=3334): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x4003}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 0s ago: executing program 3 (id=3342): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r0=>0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): c::]:6789 connect error [ 1059.893393][T18187] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1059.948477][T18177] ceph: No mds server is up or the cluster is laggy [ 1059.954791][ T5399] libceph: connect (1)[c::]:6789 error -101 [ 1059.956417][ T5399] libceph: mon0 (1)[c::]:6789 connect error [ 1060.071967][T18188] blktrace: Concurrent blktraces are not allowed on sg0 [ 1060.211559][ T5399] libceph: connect (1)[c::]:6789 error -101 [ 1060.213200][ T5399] libceph: mon0 (1)[c::]:6789 connect error [ 1060.555189][T18187] ceph: No mds server is up or the cluster is laggy [ 1060.886376][T18212] FAULT_INJECTION: forcing a failure. [ 1060.886376][T18212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1060.889752][T18212] CPU: 3 UID: 0 PID: 18212 Comm: syz.0.2954 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1060.892400][T18212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1060.895042][T18212] Call Trace: [ 1060.895903][T18212] <TASK> [ 1060.896653][T18212] dump_stack_lvl+0x16c/0x1f0 [ 1060.897872][T18212] should_fail_ex+0x497/0x5b0 [ 1060.899039][T18212] ? fs_reclaim_acquire+0xae/0x150 [ 1060.900280][T18212] should_fail_alloc_page+0xe7/0x130 [ 1060.901571][T18212] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1060.903093][T18212] ? hlock_class+0x4e/0x130 [ 1060.904243][T18212] __alloc_pages_noprof+0x190/0x25a0 [ 1060.905550][T18212] ? __pfx_mark_lock+0x10/0x10 [ 1060.906755][T18212] ? __pfx___lock_acquire+0x10/0x10 [ 1060.908070][T18212] ? __pfx___lock_acquire+0x10/0x10 [ 1060.909334][T18212] ? mark_lock+0xb5/0xc60 [ 1060.910412][T18212] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1060.911922][T18212] ? hlock_class+0x4e/0x130 [ 1060.913101][T18212] ? mark_lock+0xb5/0xc60 [ 1060.914176][T18212] ? mark_lock+0xb5/0xc60 [ 1060.915267][T18212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1060.916706][T18212] ? policy_nodemask+0xea/0x4e0 [ 1060.917957][T18212] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1060.919312][T18212] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1060.920778][T18212] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1060.922164][T18212] folio_alloc_mpol_noprof+0x36/0xd0 [ 1060.923504][T18212] vma_alloc_folio_noprof+0xee/0x1b0 [ 1060.924900][T18212] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1060.926493][T18212] ? find_held_lock+0x2d/0x110 [ 1060.927791][T18212] do_pte_missing+0x2010/0x3e50 [ 1060.929078][T18212] __handle_mm_fault+0x100a/0x2a10 [ 1060.930449][T18212] ? __pfx_mt_find+0x10/0x10 [ 1060.931671][T18212] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1060.933139][T18212] ? __pfx___handle_mm_fault+0x10/0x10 [ 1060.934565][T18212] ? find_vma+0xc0/0x140 [ 1060.935679][T18212] ? __pfx_find_vma+0x10/0x10 [ 1060.936922][T18212] handle_mm_fault+0x3fa/0xaa0 [ 1060.938185][T18212] do_user_addr_fault+0x7a3/0x13f0 [ 1060.939541][T18212] exc_page_fault+0x5c/0xc0 [ 1060.940742][T18212] asm_exc_page_fault+0x26/0x30 [ 1060.942020][T18212] RIP: 0010:_copy_to_iter+0x374/0x13e0 [ 1060.943448][T18212] Code: 4d 85 ed 0f 85 59 ff ff ff e8 58 5c 05 fd 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 d8 b8 66 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 <f3> a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 28 ff ff ff [ 1060.948432][T18212] RSP: 0018:ffffc90003fff8e8 EFLAGS: 00050246 [ 1060.949989][T18212] RAX: 0000000000000001 RBX: 0000000020001a80 RCX: 0000000000000581 [ 1060.952066][T18212] RDX: ffffed100b0040b1 RSI: ffff888058020000 RDI: 0000000020001a80 [ 1060.954122][T18212] RBP: ffffc90003fffd70 R08: 0000000000000000 R09: ffffed100b0040b0 [ 1060.956183][T18212] R10: ffff888058020580 R11: 0000000000000000 R12: 0000000020002001 [ 1060.958235][T18212] R13: 0000000000000000 R14: ffff888058020000 R15: 0000000000000581 [ 1060.960300][T18212] ? _copy_to_iter+0x368/0x13e0 [ 1060.961586][T18212] ? __pfx__copy_to_iter+0x10/0x10 [ 1060.962931][T18212] ? __virt_addr_valid+0x1a4/0x590 [ 1060.964266][T18212] ? __virt_addr_valid+0x5e/0x590 [ 1060.965578][T18212] ? const_folio_flags.constprop.0+0x56/0x150 [ 1060.967205][T18212] ? __phys_addr_symbol+0x30/0x80 [ 1060.968519][T18212] ? __check_object_size+0x488/0x710 [ 1060.969904][T18212] simple_copy_to_iter+0x4f/0x80 [ 1060.971226][T18212] __skb_datagram_iter+0x5a6/0x8c0 [ 1060.972581][T18212] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1060.974060][T18212] skb_copy_datagram_iter+0x40/0x50 [ 1060.975434][T18212] udpv6_recvmsg+0x115c/0x19a0 [ 1060.976710][T18212] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 1060.978135][T18212] ? aa_sk_perm+0x2f5/0xb20 [ 1060.979340][T18212] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 1060.980711][T18212] inet6_recvmsg+0x43e/0x6a0 [ 1060.981924][T18212] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1060.983267][T18212] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1060.984602][T18212] sock_recvmsg+0xfe/0x250 [ 1060.985776][T18212] __sys_recvfrom+0x1a5/0x2e0 [ 1060.987025][T18212] ? __pfx___sys_recvfrom+0x10/0x10 [ 1060.988425][T18212] ? ksys_write+0x1ad/0x260 [ 1060.989622][T18212] ? __pfx_ksys_write+0x10/0x10 [ 1060.990922][T18212] __ia32_compat_sys_recvfrom+0xe4/0x1c0 [ 1060.992382][T18212] ? lockdep_hardirqs_on+0x7c/0x110 [ 1060.993746][T18212] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1060.995461][T18212] __do_fast_syscall_32+0x73/0x120 [ 1060.996808][T18212] do_fast_syscall_32+0x32/0x80 [ 1060.998080][T18212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1060.999728][T18212] RIP: 0023:0xf7f88579 [ 1061.000797][T18212] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1061.005765][T18212] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000173 [ 1061.007986][T18212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001a80 [ 1061.010032][T18212] RDX: 0000000000001000 RSI: 0000000000000012 RDI: 0000000000000000 [ 1061.012089][T18212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1061.014167][T18212] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1061.016232][T18212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1061.018298][T18212] </TASK> [ 1061.019209][ C3] vkms_vblank_simulate: vblank timer overrun [ 1061.111555][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'. [ 1061.151345][T18220] mkiss: ax0: crc mode is auto. [ 1061.255438][ T5399] libceph: connect (1)[c::]:6789 error -101 [ 1061.257096][ T5399] libceph: mon0 (1)[c::]:6789 connect error [ 1061.334060][T18236] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1061.418772][T18249] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1061.459885][T18251] FAULT_INJECTION: forcing a failure. [ 1061.459885][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.464373][T18251] CPU: 1 UID: 0 PID: 18251 Comm: syz.1.2964 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1061.468053][T18251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1061.471762][T18251] Call Trace: [ 1061.472986][T18251] <TASK> [ 1061.473703][T18241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1061.474056][T18251] dump_stack_lvl+0x16c/0x1f0 [ 1061.477978][T18251] should_fail_ex+0x497/0x5b0 [ 1061.479616][T18251] ? fs_reclaim_acquire+0xae/0x150 [ 1061.481385][T18251] should_failslab+0xc2/0x120 [ 1061.483095][T18251] __kmalloc_noprof+0xcb/0x410 [ 1061.484759][T18251] ? rcu_is_watching+0x12/0xc0 [ 1061.486420][T18251] tomoyo_encode2+0x100/0x3e0 [ 1061.488054][T18251] tomoyo_realpath_from_path+0x1a7/0x710 [ 1061.489985][T18251] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1061.491492][T18226] ceph: No mds server is up or the cluster is laggy [ 1061.491924][T18251] tomoyo_path_number_perm+0x245/0x5b0 [ 1061.491949][T18251] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1061.497486][T18251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1061.499578][T18251] ? trace_lock_acquire+0x14a/0x1d0 [ 1061.501365][T18251] ? lock_acquire+0x2f/0xb0 [ 1061.502948][T18251] ? __fget_files+0x40/0x3f0 [ 1061.504697][T18251] ? __fget_files+0x244/0x3f0 [ 1061.505963][T18251] security_file_ioctl_compat+0x9b/0x240 [ 1061.507893][T18251] __do_compat_sys_ioctl+0x52/0x2b0 [ 1061.509681][T18251] __do_fast_syscall_32+0x73/0x120 [ 1061.511482][T18251] do_fast_syscall_32+0x32/0x80 [ 1061.513172][T18251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.515392][T18251] RIP: 0023:0xf7fa4579 [ 1061.516802][T18251] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1061.523368][T18251] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1061.526228][T18251] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 1061.528954][T18251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1061.531686][T18251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1061.534408][T18251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1061.537113][T18251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1061.539837][T18251] </TASK> [ 1061.541316][T18251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.541797][ T5399] libceph: connect (1)[c::]:6789 error -101 [ 1061.545312][T18251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1061.545386][ T5399] libceph: mon0 (1)[c::]:6789 connect error [ 1061.562989][ T5417] libceph: connect (1)[c::]:6789 error -101 [ 1061.564728][ T5417] libceph: mon0 (1)[c::]:6789 connect error [ 1061.821557][ T5417] libceph: connect (1)[c::]:6789 error -101 [ 1061.823346][ T5417] libceph: mon0 (1)[c::]:6789 connect error [ 1061.959141][T18267] blktrace: Concurrent blktraces are not allowed on sg0 [ 1062.075368][T18249] ceph: No mds server is up or the cluster is laggy [ 1062.242431][ T1069] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1062.244197][ T1069] ata1: failed to read log page 10h (errno=-5) [ 1062.245999][ T1069] ata1.00: exception Emask 0x1 SAct 0x4000000 SErr 0x0 action 0x0 [ 1062.248073][ T1069] ata1.00: irq_stat 0x40000000 [ 1062.249334][ T1069] ata1.00: failed command: WRITE FPDMA QUEUED [ 1062.250953][ T1069] ata1.00: cmd 61/18:d0:ba:24:10/00:00:00:00:00/40 tag 26 ncq dma 12288 out [ 1062.250953][ T1069] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1062.255820][ T1069] ata1.00: status: { DRDY } [ 1062.258087][ T1069] ata1.00: error: { ABRT } [ 1062.261588][ T1069] ata1.00: configured for UDMA/100 [ 1062.263544][ T1069] ata1: EH complete [ 1062.274791][T18280] mkiss: ax0: crc mode is auto. [ 1062.607217][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1062.620125][T18293] overlayfs: missing 'lowerdir' [ 1062.839465][T18298] fuse: Unknown parameter 'group_id00000000000000000000' [ 1062.959203][T15831] libceph: connect (1)[c::]:6789 error -101 [ 1063.024155][T15831] libceph: mon0 (1)[c::]:6789 connect error [ 1063.110602][T18307] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1063.165075][T18300] ceph: No mds server is up or the cluster is laggy [ 1063.766707][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1063.796627][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1064.505456][T18342] fuse: Unknown parameter 'group_id00000000000000000000' [ 1064.593130][T18346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 1064.658883][T18346] overlayfs: missing 'lowerdir' [ 1064.661098][T18350] blktrace: Concurrent blktraces are not allowed on sg0 [ 1064.662729][T18351] netlink: 'syz.1.2991': attribute type 2 has an invalid length. [ 1064.937150][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 1065.465260][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1065.778291][T18377] overlayfs: failed to resolve './file1': -2 [ 1066.220610][T18388] pim6reg: entered allmulticast mode [ 1066.262512][T18390] FAULT_INJECTION: forcing a failure. [ 1066.262512][T18390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.265933][T18390] CPU: 1 UID: 0 PID: 18390 Comm: syz.2.3002 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1066.268687][T18390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1066.271483][T18390] Call Trace: [ 1066.272363][T18390] <TASK> [ 1066.273139][T18390] dump_stack_lvl+0x16c/0x1f0 [ 1066.274398][T18390] should_fail_ex+0x497/0x5b0 [ 1066.275640][T18390] _copy_from_user+0x30/0xf0 [ 1066.276851][T18390] ip6_mroute_setsockopt+0x5b4/0x2790 [ 1066.278259][T18390] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1066.279792][T18390] ? __up_read+0x2d0/0x760 [ 1066.280962][T18390] ? hlock_class+0x4e/0x130 [ 1066.282157][T18390] ? mark_lock+0xb5/0xc60 [ 1066.283301][T18390] ? find_held_lock+0x2d/0x110 [ 1066.284893][T18390] ? __might_fault+0x13b/0x190 [ 1066.286230][T18390] ? lock_acquire+0x2f/0xb0 [ 1066.287832][T18390] ? __might_fault+0xe3/0x190 [ 1066.289350][T18390] ? __might_fault+0xe3/0x190 [ 1066.290892][T18390] ? do_ipv6_setsockopt+0x8f7/0x4800 [ 1066.292316][T18390] do_ipv6_setsockopt+0x8f7/0x4800 [ 1066.293943][T18390] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1066.295488][T18390] ? hlock_class+0x4e/0x130 [ 1066.296648][T18390] ? mark_lock+0xb5/0xc60 [ 1066.297782][T18390] ? aa_label_sk_perm+0x19d/0x5a0 [ 1066.299108][T18390] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1066.300512][T18390] ? __pfx___lock_acquire+0x10/0x10 [ 1066.301906][T18390] ? hlock_class+0x4e/0x130 [ 1066.303115][T18390] ? ipv6_setsockopt+0xcb/0x170 [ 1066.304378][T18390] ipv6_setsockopt+0xcb/0x170 [ 1066.305620][T18390] rawv6_setsockopt+0xdc/0x700 [ 1066.306892][T18390] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1066.308291][T18390] ? sock_common_setsockopt+0x2e/0xf0 [ 1066.309696][T18390] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1066.311280][T18390] do_sock_setsockopt+0x222/0x480 [ 1066.312600][T18390] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1066.314045][T18390] ? fdget+0x176/0x210 [ 1066.315135][T18390] __sys_setsockopt+0x1a4/0x270 [ 1066.316419][T18390] ? __pfx___sys_setsockopt+0x10/0x10 [ 1066.317819][T18390] ? fput+0x30/0x390 [ 1066.318861][T18390] ? ksys_write+0x1ad/0x260 [ 1066.320060][T18390] ? __pfx_ksys_write+0x10/0x10 [ 1066.321337][T18390] __ia32_sys_setsockopt+0xbc/0x160 [ 1066.322709][T18390] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.324073][T18390] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1066.325789][T18390] __do_fast_syscall_32+0x73/0x120 [ 1066.327141][T18390] do_fast_syscall_32+0x32/0x80 [ 1066.328427][T18390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.330095][T18390] RIP: 0023:0xf747e579 [ 1066.331186][T18390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1066.336177][T18390] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1066.338351][T18390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1066.340401][T18390] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 000000000000005c [ 1066.342451][T18390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.344495][T18390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1066.346558][T18390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.348619][T18390] </TASK> [ 1066.379401][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1066.389253][T18397] pim6reg: entered allmulticast mode [ 1066.415032][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1066.602580][T18428] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1066.661149][T18407] ceph: No mds server is up or the cluster is laggy [ 1066.663940][T18432] FAULT_INJECTION: forcing a failure. [ 1066.663940][T18432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.667328][T18432] CPU: 1 UID: 0 PID: 18432 Comm: syz.3.3015 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1066.670076][T18432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1066.672844][T18432] Call Trace: [ 1066.673715][T18432] <TASK> [ 1066.674497][T18432] dump_stack_lvl+0x16c/0x1f0 [ 1066.675726][T18432] should_fail_ex+0x497/0x5b0 [ 1066.676955][T18432] _copy_from_user+0x30/0xf0 [ 1066.678167][T18432] ip6_mroute_setsockopt+0x12aa/0x2790 [ 1066.679593][T18432] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1066.681117][T18432] ? __up_read+0x2d0/0x760 [ 1066.682373][T18432] ? hlock_class+0x4e/0x130 [ 1066.683567][T18432] ? mark_lock+0xb5/0xc60 [ 1066.684708][T18432] ? find_held_lock+0x2d/0x110 [ 1066.685961][T18432] ? __might_fault+0x13b/0x190 [ 1066.687219][T18432] ? lock_acquire+0x2f/0xb0 [ 1066.688420][T18432] ? __might_fault+0xe3/0x190 [ 1066.689662][T18432] ? __might_fault+0xe3/0x190 [ 1066.690922][T18432] ? do_ipv6_setsockopt+0x8f7/0x4800 [ 1066.692298][T18432] do_ipv6_setsockopt+0x8f7/0x4800 [ 1066.693642][T18432] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1066.695085][T18432] ? hlock_class+0x4e/0x130 [ 1066.696277][T18432] ? mark_lock+0xb5/0xc60 [ 1066.697408][T18432] ? aa_label_sk_perm+0x19d/0x5a0 [ 1066.698737][T18432] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1066.700136][T18432] ? __pfx___lock_acquire+0x10/0x10 [ 1066.701497][T18432] ? hlock_class+0x4e/0x130 [ 1066.702706][T18432] ? ipv6_setsockopt+0xcb/0x170 [ 1066.703975][T18432] ipv6_setsockopt+0xcb/0x170 [ 1066.705200][T18432] rawv6_setsockopt+0xdc/0x700 [ 1066.706461][T18432] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1066.707859][T18432] ? sock_common_setsockopt+0x2e/0xf0 [ 1066.709257][T18432] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1066.710815][T18432] do_sock_setsockopt+0x222/0x480 [ 1066.712096][T18432] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1066.713477][T18432] ? fdget+0x176/0x210 [ 1066.714533][T18432] __sys_setsockopt+0x1a4/0x270 [ 1066.715816][T18432] ? __pfx___sys_setsockopt+0x10/0x10 [ 1066.717228][T18432] ? fput+0x30/0x390 [ 1066.718258][T18432] ? ksys_write+0x1ad/0x260 [ 1066.719452][T18432] ? __pfx_ksys_write+0x10/0x10 [ 1066.720723][T18432] __ia32_sys_setsockopt+0xbc/0x160 [ 1066.722082][T18432] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.723473][T18432] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1066.725195][T18432] __do_fast_syscall_32+0x73/0x120 [ 1066.726899][T18432] do_fast_syscall_32+0x32/0x80 [ 1066.728281][T18432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.729935][T18432] RIP: 0023:0xf749e579 [ 1066.731028][T18432] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1066.735967][T18432] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1066.738141][T18432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1066.740213][T18432] RDX: 00000000000000d4 RSI: 0000000020000080 RDI: 0000000000000004 [ 1066.742258][T18432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.744316][T18432] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1066.746377][T18432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.748446][T18432] </TASK> [ 1066.796466][T18437] netlink: 'syz.3.3016': attribute type 18 has an invalid length. [ 1066.814192][T18437] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.816890][T18437] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.819123][T18437] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.821434][T18437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.841338][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 1066.889120][T18443] FAULT_INJECTION: forcing a failure. [ 1066.889120][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.892983][T18443] CPU: 1 UID: 0 PID: 18443 Comm: syz.3.3019 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1066.895797][T18443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1066.898492][T18443] Call Trace: [ 1066.899373][T18443] <TASK> [ 1066.900157][T18443] dump_stack_lvl+0x16c/0x1f0 [ 1066.901399][T18443] should_fail_ex+0x497/0x5b0 [ 1066.902646][T18443] ? fs_reclaim_acquire+0xae/0x150 [ 1066.903988][T18443] should_failslab+0xc2/0x120 [ 1066.905229][T18443] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1066.906758][T18443] ? __alloc_skb+0x2b3/0x380 [ 1066.907961][T18443] __alloc_skb+0x2b3/0x380 [ 1066.909143][T18443] ? __pfx___alloc_skb+0x10/0x10 [ 1066.910466][T18443] ? lock_acquire+0x2f/0xb0 [ 1066.911665][T18443] netlink_alloc_large_skb+0x69/0x130 [ 1066.913068][T18443] netlink_sendmsg+0x689/0xd70 [ 1066.914325][T18443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.915719][T18443] ? lock_acquire+0x2f/0xb0 [ 1066.916918][T18443] ____sys_sendmsg+0x9ae/0xb40 [ 1066.918183][T18443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1066.919576][T18443] ? get_compat_msghdr+0x11b/0x170 [ 1066.920923][T18443] ? __pfx___lock_acquire+0x10/0x10 [ 1066.922301][T18443] ___sys_sendmsg+0x135/0x1e0 [ 1066.923553][T18443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.924922][T18443] ? lock_acquire+0x2f/0xb0 [ 1066.926119][T18443] ? __fget_files+0x40/0x3f0 [ 1066.927349][T18443] ? fdget+0x176/0x210 [ 1066.928430][T18443] __sys_sendmsg+0x117/0x1f0 [ 1066.929651][T18443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1066.931101][T18443] ? __fget_files+0x244/0x3f0 [ 1066.932360][T18443] __do_fast_syscall_32+0x73/0x120 [ 1066.933705][T18443] do_fast_syscall_32+0x32/0x80 [ 1066.935000][T18443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.936662][T18443] RIP: 0023:0xf749e579 [ 1066.937741][T18443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1066.942761][T18443] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1066.944942][T18443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1066.947033][T18443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1066.949122][T18443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.951206][T18443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1066.953272][T18443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.955360][T18443] </TASK> [ 1067.262689][T18450] FAULT_INJECTION: forcing a failure. [ 1067.262689][T18450] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.266240][T18450] CPU: 0 UID: 0 PID: 18450 Comm: syz.0.3021 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1067.269044][T18450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1067.271852][T18450] Call Trace: [ 1067.272874][T18450] <TASK> [ 1067.273671][T18450] dump_stack_lvl+0x16c/0x1f0 [ 1067.274932][T18450] should_fail_ex+0x497/0x5b0 [ 1067.276182][T18450] ? fs_reclaim_acquire+0xae/0x150 [ 1067.277538][T18450] should_failslab+0xc2/0x120 [ 1067.278798][T18450] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1067.280342][T18450] ? __alloc_skb+0x2b3/0x380 [ 1067.281575][T18450] __alloc_skb+0x2b3/0x380 [ 1067.282769][T18450] ? __pfx___alloc_skb+0x10/0x10 [ 1067.284074][T18450] ? lock_acquire+0x2f/0xb0 [ 1067.285278][T18450] netlink_alloc_large_skb+0x69/0x130 [ 1067.286699][T18450] netlink_sendmsg+0x689/0xd70 [ 1067.287965][T18450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1067.289352][T18450] ? lock_acquire+0x2f/0xb0 [ 1067.290578][T18450] ____sys_sendmsg+0x9ae/0xb40 [ 1067.291855][T18450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1067.293239][T18450] ? get_compat_msghdr+0x11b/0x170 [ 1067.294586][T18450] ? __pfx___lock_acquire+0x10/0x10 [ 1067.295956][T18450] ___sys_sendmsg+0x135/0x1e0 [ 1067.297200][T18450] ? __pfx____sys_sendmsg+0x10/0x10 [ 1067.298573][T18450] ? lock_acquire+0x2f/0xb0 [ 1067.299767][T18450] ? __fget_files+0x40/0x3f0 [ 1067.300993][T18450] ? fdget+0x176/0x210 [ 1067.302072][T18450] __sys_sendmsg+0x117/0x1f0 [ 1067.303290][T18450] ? __pfx___sys_sendmsg+0x10/0x10 [ 1067.304633][T18450] ? __fget_files+0x244/0x3f0 [ 1067.305875][T18450] __do_fast_syscall_32+0x73/0x120 [ 1067.307232][T18450] do_fast_syscall_32+0x32/0x80 [ 1067.308512][T18450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.310175][T18450] RIP: 0023:0xf7f88579 [ 1067.311254][T18450] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.316249][T18450] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1067.318507][T18450] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1067.320576][T18450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.322858][T18450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.324896][T18450] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1067.326956][T18450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.329008][T18450] </TASK> [ 1067.865979][T18480] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1067.921378][T18465] ceph: No mds server is up or the cluster is laggy [ 1067.971802][T18483] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1068.034467][T18474] ceph: No mds server is up or the cluster is laggy [ 1068.095119][T18488] FAULT_INJECTION: forcing a failure. [ 1068.095119][T18488] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.098533][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.1.3032 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1068.101525][T18488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1068.104336][T18488] Call Trace: [ 1068.105221][T18488] <TASK> [ 1068.105998][T18488] dump_stack_lvl+0x16c/0x1f0 [ 1068.107307][T18488] should_fail_ex+0x497/0x5b0 [ 1068.108547][T18488] ? fs_reclaim_acquire+0xae/0x150 [ 1068.109894][T18488] should_failslab+0xc2/0x120 [ 1068.112439][T18488] __kmalloc_noprof+0xcb/0x410 [ 1068.113955][T18488] io_alloc_async_data+0x9d/0x150 [ 1068.115298][T18488] io_prep_rw+0x30d/0xb70 [ 1068.116435][T18488] io_prep_rwv+0xa8/0x350 [ 1068.117579][T18488] ? __pfx_io_prep_rwv+0x10/0x10 [ 1068.118889][T18488] ? __mutex_lock+0x1a6/0x9c0 [ 1068.120131][T18488] io_submit_sqes+0x8aa/0x2530 [ 1068.121401][T18488] __do_sys_io_uring_enter+0xc0f/0x1170 [ 1068.123733][T18488] ? __fget_files+0x244/0x3f0 [ 1068.124809][T18488] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1068.126269][T18488] ? fput+0x30/0x390 [ 1068.128826][T18488] ? ksys_write+0x1ad/0x260 [ 1068.128842][T18488] ? __pfx_ksys_write+0x10/0x10 [ 1068.131790][T18488] __do_fast_syscall_32+0x73/0x120 [ 1068.133145][T18488] do_fast_syscall_32+0x32/0x80 [ 1068.134442][T18488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1068.136153][T18488] RIP: 0023:0xf7fa4579 [ 1068.137185][T18488] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1068.142385][T18488] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1068.142398][T18488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 1068.142405][T18488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1068.142412][T18488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.142418][T18488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1068.142424][T18488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.142436][T18488] </TASK> [ 1068.257821][T18507] sctp: [Deprecated]: syz.0.3036 (pid 18507) Use of int in maxseg socket option. [ 1068.257821][T18507] Use struct sctp_assoc_value instead [ 1068.792488][T18511] FAULT_INJECTION: forcing a failure. [ 1068.792488][T18511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.795920][T18511] CPU: 2 UID: 0 PID: 18511 Comm: syz.2.3038 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1068.798698][T18511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1068.801495][T18511] Call Trace: [ 1068.802408][T18511] <TASK> [ 1068.803196][T18511] dump_stack_lvl+0x16c/0x1f0 [ 1068.804422][T18511] should_fail_ex+0x497/0x5b0 [ 1068.805672][T18511] _copy_from_user+0x30/0xf0 [ 1068.806911][T18511] sctp_setsockopt+0x422/0xb880 [ 1068.808204][T18511] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1068.809589][T18511] ? __pfx_aa_sk_perm+0x10/0x10 [ 1068.810901][T18511] ? sock_common_setsockopt+0x2e/0xf0 [ 1068.812308][T18511] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1068.813849][T18511] do_sock_setsockopt+0x222/0x480 [ 1068.815191][T18511] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1068.816648][T18511] ? fdget+0x176/0x210 [ 1068.817753][T18511] __sys_setsockopt+0x1a4/0x270 [ 1068.819068][T18511] ? __pfx___sys_setsockopt+0x10/0x10 [ 1068.820483][T18511] ? fput+0x30/0x390 [ 1068.821530][T18511] ? ksys_write+0x1ad/0x260 [ 1068.822741][T18511] ? __pfx_ksys_write+0x10/0x10 [ 1068.824027][T18511] __ia32_sys_setsockopt+0xbc/0x160 [ 1068.825407][T18511] ? lockdep_hardirqs_on+0x7c/0x110 [ 1068.826795][T18511] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1068.828521][T18511] __do_fast_syscall_32+0x73/0x120 [ 1068.829875][T18511] do_fast_syscall_32+0x32/0x80 [ 1068.831207][T18511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1068.832870][T18511] RIP: 0023:0xf747e579 [ 1068.833953][T18511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1068.838969][T18511] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1068.841153][T18511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1068.843231][T18511] RDX: 000000000000000d RSI: 0000000020000480 RDI: 0000000000000004 [ 1068.845302][T18511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.847390][T18511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1068.849462][T18511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.851565][T18511] </TASK> [ 1069.123685][T18530] libceph: resolve '. [ 1069.123685][T18530] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$ [ 1069.123685][T18530] ' (ret=-3): failed [ 1069.130396][T18530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.134059][T18530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.142159][T18533] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1069.204615][T18517] ceph: No mds server is up or the cluster is laggy [ 1069.277930][T18539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.287846][T18539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.640427][T18569] fuse: Unknown parameter 'group_id00000000000000000000' [ 1070.743308][T18581] overlayfs: failed to resolve './file0': -2 [ 1070.780299][T18584] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1070.833801][T18564] ceph: No mds server is up or the cluster is laggy [ 1071.525186][T18601] FAULT_INJECTION: forcing a failure. [ 1071.525186][T18601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.529423][T18601] CPU: 3 UID: 0 PID: 18601 Comm: syz.2.3063 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1071.533091][T18601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1071.536777][T18601] Call Trace: [ 1071.537941][T18601] <TASK> [ 1071.538980][T18601] dump_stack_lvl+0x16c/0x1f0 [ 1071.540632][T18601] should_fail_ex+0x497/0x5b0 [ 1071.542261][T18601] _copy_from_iter+0x29b/0x13e0 [ 1071.543984][T18601] ? __pfx__copy_from_iter+0x10/0x10 [ 1071.545795][T18601] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1071.547884][T18601] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 1071.549920][T18601] ? __pfx_lock_release+0x10/0x10 [ 1071.551699][T18601] ? trace_lock_acquire+0x14a/0x1d0 [ 1071.553495][T18601] copy_page_from_iter+0xa5/0x120 [ 1071.555246][T18601] tun_build_skb.constprop.0+0x294/0x1120 [ 1071.557211][T18601] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1071.559343][T18601] ? __pfx___lock_acquire+0x10/0x10 [ 1071.561134][T18601] ? __pfx___lock_acquire+0x10/0x10 [ 1071.562943][T18601] ? __pfx___lock_acquire+0x10/0x10 [ 1071.564745][T18601] ? __lock_acquire+0xbdd/0x3ce0 [ 1071.566463][T18601] tun_get_user+0x872/0x3d70 [ 1071.568066][T18601] ? find_held_lock+0x2d/0x110 [ 1071.569757][T18601] ? __pfx_tun_get_user+0x10/0x10 [ 1071.571519][T18601] ? find_held_lock+0x2d/0x110 [ 1071.573373][T18601] ? __pfx_lock_release+0x10/0x10 [ 1071.574765][T18601] tun_chr_write_iter+0xdc/0x210 [ 1071.576468][T18601] vfs_write+0x6b5/0x1140 [ 1071.578031][T18601] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1071.580130][T18601] ? trace_lock_acquire+0x14a/0x1d0 [ 1071.581727][T18601] ? __pfx_vfs_write+0x10/0x10 [ 1071.583040][T18601] ? __fget_files+0x40/0x3f0 [ 1071.584293][T18601] ksys_write+0x12f/0x260 [ 1071.585461][T18601] ? __pfx_ksys_write+0x10/0x10 [ 1071.587156][T18601] __do_fast_syscall_32+0x73/0x120 [ 1071.588931][T18601] do_fast_syscall_32+0x32/0x80 [ 1071.590634][T18601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1071.592817][T18601] RIP: 0023:0xf747e579 [ 1071.594229][T18601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1071.600829][T18601] RSP: 002b:00000000f5766530 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1071.603691][T18601] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000200003c0 [ 1071.606403][T18601] RDX: 0000000000000036 RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1071.609109][T18601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1071.611841][T18601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1071.614557][T18601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1071.617225][T18601] </TASK> [ 1071.618231][ C3] vkms_vblank_simulate: vblank timer overrun [ 1071.765820][T18608] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3066'. [ 1071.974851][T18615] FAULT_INJECTION: forcing a failure. [ 1071.974851][T18615] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.978089][T18615] CPU: 2 UID: 0 PID: 18615 Comm: syz.3.3067 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1071.980862][T18615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1071.983644][T18615] Call Trace: [ 1071.984529][T18615] <TASK> [ 1071.985318][T18615] dump_stack_lvl+0x16c/0x1f0 [ 1071.986579][T18615] should_fail_ex+0x497/0x5b0 [ 1071.987831][T18615] ? fs_reclaim_acquire+0xae/0x150 [ 1071.989184][T18615] should_failslab+0xc2/0x120 [ 1071.990448][T18615] __kmalloc_noprof+0xcb/0x410 [ 1071.991715][T18615] ? rcu_is_watching+0x12/0xc0 [ 1071.992983][T18615] tomoyo_encode2+0x100/0x3e0 [ 1071.994215][T18615] tomoyo_realpath_from_path+0x1a7/0x710 [ 1071.995696][T18615] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1071.997174][T18615] tomoyo_path_number_perm+0x245/0x5b0 [ 1071.998607][T18615] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1072.000079][T18615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1072.001665][T18615] ? trace_lock_acquire+0x14a/0x1d0 [ 1072.003041][T18615] ? lock_acquire+0x2f/0xb0 [ 1072.004238][T18615] ? __fget_files+0x40/0x3f0 [ 1072.005460][T18615] ? __fget_files+0x244/0x3f0 [ 1072.006709][T18615] security_file_ioctl_compat+0x9b/0x240 [ 1072.008189][T18615] __do_compat_sys_ioctl+0x52/0x2b0 [ 1072.009562][T18615] __do_fast_syscall_32+0x73/0x120 [ 1072.010929][T18615] do_fast_syscall_32+0x32/0x80 [ 1072.012216][T18615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.013867][T18615] RIP: 0023:0xf749e579 [ 1072.014951][T18615] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1072.019938][T18615] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1072.022108][T18615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa08 [ 1072.024167][T18615] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.026231][T18615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.028301][T18615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1072.030387][T18615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.032454][T18615] </TASK> [ 1072.036545][T18615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.061192][T18618] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3068'. [ 1072.264219][T18625] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1072.327430][T18620] ceph: No mds server is up or the cluster is laggy [ 1072.642925][T18634] FAULT_INJECTION: forcing a failure. [ 1072.642925][T18634] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.646201][T18634] CPU: 2 UID: 0 PID: 18634 Comm: syz.0.3072 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1072.648980][T18634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1072.651807][T18634] Call Trace: [ 1072.652707][T18634] <TASK> [ 1072.653495][T18634] dump_stack_lvl+0x16c/0x1f0 [ 1072.654760][T18634] should_fail_ex+0x497/0x5b0 [ 1072.656012][T18634] ? fs_reclaim_acquire+0xae/0x150 [ 1072.657370][T18634] should_failslab+0xc2/0x120 [ 1072.658629][T18634] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1072.660163][T18634] ? __alloc_skb+0x2b3/0x380 [ 1072.661400][T18634] __alloc_skb+0x2b3/0x380 [ 1072.662588][T18634] ? __pfx___alloc_skb+0x10/0x10 [ 1072.664104][T18634] ? lock_acquire+0x2f/0xb0 [ 1072.665344][T18634] netlink_alloc_large_skb+0x69/0x130 [ 1072.666785][T18634] netlink_sendmsg+0x689/0xd70 [ 1072.668076][T18634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.669488][T18634] ? lock_acquire+0x2f/0xb0 [ 1072.670739][T18634] ____sys_sendmsg+0x9ae/0xb40 [ 1072.672023][T18634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.673439][T18634] ? get_compat_msghdr+0x11b/0x170 [ 1072.674811][T18634] ? __pfx___lock_acquire+0x10/0x10 [ 1072.676204][T18634] ___sys_sendmsg+0x135/0x1e0 [ 1072.677465][T18634] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.678867][T18634] ? lock_acquire+0x2f/0xb0 [ 1072.680081][T18634] ? __fget_files+0x40/0x3f0 [ 1072.681317][T18634] ? fdget+0x176/0x210 [ 1072.682418][T18634] __sys_sendmsg+0x117/0x1f0 [ 1072.683647][T18634] ? __pfx___sys_sendmsg+0x10/0x10 [ 1072.685000][T18634] ? __fget_files+0x244/0x3f0 [ 1072.686259][T18634] __do_fast_syscall_32+0x73/0x120 [ 1072.687638][T18634] do_fast_syscall_32+0x32/0x80 [ 1072.688943][T18634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.690636][T18634] RIP: 0023:0xf7f88579 [ 1072.691716][T18634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1072.696740][T18634] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1072.698930][T18634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1072.700999][T18634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.703083][T18634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.705161][T18634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1072.707240][T18634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.709315][T18634] </TASK> [ 1072.843941][T18636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.412574][T18648] FAULT_INJECTION: forcing a failure. [ 1073.412574][T18648] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.415925][T18648] CPU: 1 UID: 0 PID: 18648 Comm: syz.0.3076 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1073.418694][T18648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1073.421500][T18648] Call Trace: [ 1073.422384][T18648] <TASK> [ 1073.423163][T18648] dump_stack_lvl+0x16c/0x1f0 [ 1073.424407][T18648] should_fail_ex+0x497/0x5b0 [ 1073.425641][T18648] ? fs_reclaim_acquire+0xae/0x150 [ 1073.426986][T18648] should_failslab+0xc2/0x120 [ 1073.428230][T18648] __kmalloc_noprof+0xcb/0x410 [ 1073.429488][T18648] ? __pfx_d_absolute_path+0x10/0x10 [ 1073.430889][T18648] tomoyo_encode2+0x100/0x3e0 [ 1073.432258][T18648] tomoyo_realpath_from_path+0x1a7/0x710 [ 1073.433759][T18648] tomoyo_path_number_perm+0x245/0x5b0 [ 1073.435258][T18648] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1073.436728][T18648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1073.438322][T18648] ? trace_lock_acquire+0x14a/0x1d0 [ 1073.439688][T18648] ? lock_acquire+0x2f/0xb0 [ 1073.440890][T18648] ? __fget_files+0x40/0x3f0 [ 1073.442113][T18648] ? __fget_files+0x244/0x3f0 [ 1073.443366][T18648] security_file_ioctl_compat+0x9b/0x240 [ 1073.444859][T18648] __do_compat_sys_ioctl+0x52/0x2b0 [ 1073.446233][T18648] __do_fast_syscall_32+0x73/0x120 [ 1073.447590][T18648] do_fast_syscall_32+0x32/0x80 [ 1073.448881][T18648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1073.450559][T18648] RIP: 0023:0xf7f88579 [ 1073.451637][T18648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1073.456630][T18648] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1073.458805][T18648] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000227d [ 1073.460870][T18648] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1073.462941][T18648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1073.464998][T18648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1073.467096][T18648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1073.469182][T18648] </TASK> [ 1073.470218][T18648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1073.524164][T18650] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1073.686289][T18662] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1073.739378][T18653] ceph: No mds server is up or the cluster is laggy [ 1074.047790][T18670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.052007][T18670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.362372][T18662] ceph: No mds server is up or the cluster is laggy [ 1074.411429][T14768] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1074.562500][T14768] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1074.565167][T14768] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.568510][T14768] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1074.570847][T14768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.784295][T14768] usb 7-1: usb_control_msg returned -71 [ 1074.787127][T14768] usbtmc 7-1:16.0: can't read capabilities [ 1074.792984][T14768] usb 7-1: USB disconnect, device number 13 [ 1074.878106][T18692] netlink: 'syz.1.3091': attribute type 1 has an invalid length. [ 1074.880187][T18692] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1074.911345][ T30] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1075.033884][T18696] team_slave_1: mtu greater than device maximum [ 1075.035577][T18696] team0: Device team_slave_1 failed to change mtu [ 1075.071325][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 1075.075718][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1075.079781][ T30] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1075.082281][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.084881][ T30] usb 8-1: Product: syz [ 1075.085986][ T30] usb 8-1: Manufacturer: syz [ 1075.087214][ T30] usb 8-1: SerialNumber: syz [ 1075.089276][ T30] usb 8-1: config 0 descriptor?? [ 1075.091034][T18683] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1075.093933][ T30] hub 8-1:0.0: bad descriptor, ignoring hub [ 1075.095524][ T30] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1075.098420][ T30] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23 [ 1075.244389][T18707] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1075.297505][T18702] ceph: No mds server is up or the cluster is laggy [ 1075.663399][ T5399] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1075.811326][ T5399] usb 5-1: Using ep0 maxpacket: 32 [ 1075.813934][ T5399] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1075.816120][ T5399] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1075.818410][ T5399] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1075.820728][ T5399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.823319][ T5399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1075.825786][ T5399] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1075.829158][ T5399] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1075.831584][ T5399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.834862][ T5399] usb 5-1: config 0 descriptor?? [ 1075.909510][T18707] ceph: No mds server is up or the cluster is laggy [ 1076.045503][ T5399] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1076.049182][ T5399] usb 5-1: USB disconnect, device number 12 [ 1076.055712][ T5399] usblp0: removed [ 1076.166176][T18729] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1076.219566][T18723] ceph: No mds server is up or the cluster is laggy [ 1076.344468][T18737] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 1076.346782][T18737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3101'. [ 1076.691377][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1076.838982][T18729] ceph: No mds server is up or the cluster is laggy [ 1076.842562][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 1076.853084][ T30] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1076.855359][ T30] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1076.857947][ T30] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1076.860413][ T30] usb 7-1: config 250 has no interface number 0 [ 1076.862331][ T30] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1076.865382][ T30] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1076.868224][ T30] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.871009][ T30] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1076.948696][T18755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1076.992663][ T30] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1076.996240][ T30] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1076.999410][ T30] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1077.001871][ T30] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1077.004075][ T30] usb 7-1: Product: syz [ 1077.005213][ T30] usb 7-1: SerialNumber: syz [ 1077.009481][ T30] hub 7-1:250.228: bad descriptor, ignoring hub [ 1077.011196][ T30] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1077.222196][ T30] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1077.472196][T18763] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 1077.474255][T18763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1077.521698][T14768] usb 7-1: USB disconnect, device number 14 [ 1077.524545][T14768] usblp0: removed [ 1077.546699][ T30] usb 8-1: USB disconnect, device number 13 [ 1077.548296][ C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1077.601079][T18768] netlink: 'syz.3.3114': attribute type 4 has an invalid length. [ 1077.721753][T18775] FAULT_INJECTION: forcing a failure. [ 1077.721753][T18775] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.726064][T18775] CPU: 3 UID: 0 PID: 18775 Comm: syz.3.3117 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1077.729640][T18775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1077.733235][T18775] Call Trace: [ 1077.734376][T18775] <TASK> [ 1077.735376][T18775] dump_stack_lvl+0x16c/0x1f0 [ 1077.736974][T18775] should_fail_ex+0x497/0x5b0 [ 1077.738592][T18775] ? fs_reclaim_acquire+0xae/0x150 [ 1077.740330][T18775] should_failslab+0xc2/0x120 [ 1077.741933][T18775] __kmalloc_noprof+0xcb/0x410 [ 1077.743573][T18775] ? rcu_is_watching+0x12/0xc0 [ 1077.745205][T18775] tomoyo_encode2+0x100/0x3e0 [ 1077.746813][T18775] tomoyo_realpath_from_path+0x1a7/0x710 [ 1077.749058][T18775] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1077.750924][T18775] tomoyo_path_number_perm+0x245/0x5b0 [ 1077.753058][T18775] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1077.755531][T18775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1077.758010][T18775] ? trace_lock_acquire+0x14a/0x1d0 [ 1077.759954][T18775] ? lock_acquire+0x2f/0xb0 [ 1077.761652][T18775] ? __fget_files+0x40/0x3f0 [ 1077.763252][T18775] ? __fget_files+0x244/0x3f0 [ 1077.764857][T18775] security_file_ioctl_compat+0x9b/0x240 [ 1077.766774][T18775] __do_compat_sys_ioctl+0x52/0x2b0 [ 1077.768551][T18775] __do_fast_syscall_32+0x73/0x120 [ 1077.770326][T18775] do_fast_syscall_32+0x32/0x80 [ 1077.771994][T18775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1077.774143][T18775] RIP: 0023:0xf749e579 [ 1077.775281][T18775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1077.781784][T18775] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1077.784615][T18775] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040045701 [ 1077.787318][T18775] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.790012][T18775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1077.792700][T18775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1077.795383][T18775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1077.798071][T18775] </TASK> [ 1077.799160][ C3] vkms_vblank_simulate: vblank timer overrun [ 1077.801924][T18775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1077.861435][T14768] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1077.877697][T18782] binder_alloc: binder_alloc_mmap_handler: 18776 200a0000-200a2000 already mapped failed -16 [ 1077.964478][T18784] FAULT_INJECTION: forcing a failure. [ 1077.964478][T18784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.968095][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.3.3119 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1077.970889][T18784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1077.973653][T18784] Call Trace: [ 1077.974558][T18784] <TASK> [ 1077.975341][T18784] dump_stack_lvl+0x16c/0x1f0 [ 1077.976572][T18784] should_fail_ex+0x497/0x5b0 [ 1077.977811][T18784] _copy_from_user+0x30/0xf0 [ 1077.979044][T18784] kstrtouint_from_user+0xd7/0x1c0 [ 1077.980385][T18784] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1077.981869][T18784] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1077.983355][T18784] proc_fail_nth_write+0x84/0x250 [ 1077.984669][T18784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1077.986133][T18784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1077.987608][T18784] vfs_write+0x28e/0x1140 [ 1077.988743][T18784] ? __fget_files+0x23a/0x3f0 [ 1077.989975][T18784] ? fdget_pos+0x24c/0x360 [ 1077.991186][T18784] ? __pfx_lock_release+0x10/0x10 [ 1077.992498][T18784] ? trace_lock_acquire+0x14a/0x1d0 [ 1077.993855][T18784] ? __pfx_vfs_write+0x10/0x10 [ 1077.995125][T18784] ? __pfx___mutex_lock+0x10/0x10 [ 1077.996445][T18784] ? __fget_files+0x244/0x3f0 [ 1077.997679][T18784] ksys_write+0x12f/0x260 [ 1077.998834][T18784] ? __pfx_ksys_write+0x10/0x10 [ 1078.000110][T18784] __do_fast_syscall_32+0x73/0x120 [ 1078.001449][T18784] do_fast_syscall_32+0x32/0x80 [ 1078.002744][T18784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1078.004393][T18784] RIP: 0023:0xf749e579 [ 1078.005460][T18784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1078.010453][T18784] RSP: 002b:00000000f56435a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1078.011382][T14768] usb 7-1: Using ep0 maxpacket: 8 [ 1078.012602][T18784] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5643620 [ 1078.016295][T18784] RDX: 0000000000000001 RSI: 00000000f748bff4 RDI: 0000000000000000 [ 1078.017631][T14768] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1078.018357][T18784] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1078.018366][T18784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1078.020563][T14768] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1078.022572][T18784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1078.022590][T18784] </TASK> [ 1078.030022][T14768] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1078.032808][T14768] usb 7-1: config 250 has no interface number 0 [ 1078.034914][T14768] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1078.037878][T14768] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1078.040553][T14768] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1078.043436][T14768] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1078.046063][T14768] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1078.049488][T14768] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1078.052423][T14768] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1078.054763][T14768] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1078.056844][T14768] usb 7-1: Product: syz [ 1078.057931][T14768] usb 7-1: SerialNumber: syz [ 1078.061345][T14768] hub 7-1:250.228: bad descriptor, ignoring hub [ 1078.062941][T14768] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1078.187672][T18788] netlink: 'syz.3.3121': attribute type 9 has an invalid length. [ 1078.267577][T14768] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1078.291570][T14768] usb 7-1: USB disconnect, device number 15 [ 1078.294431][T14768] usblp0: removed [ 1079.050460][T18797] netlink: 'syz.2.3124': attribute type 4 has an invalid length. [ 1079.064875][T18792] netlink: 'syz.3.3122': attribute type 1 has an invalid length. [ 1079.067225][T18792] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1079.845470][T18819] openvswitch: netlink: Duplicate key (type 0). [ 1079.922006][T18824] FAULT_INJECTION: forcing a failure. [ 1079.922006][T18824] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.931975][T18824] CPU: 2 UID: 0 PID: 18824 Comm: syz.1.3132 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1079.934813][T18824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1079.937601][T18824] Call Trace: [ 1079.938492][T18824] <TASK> [ 1079.939276][T18824] dump_stack_lvl+0x16c/0x1f0 [ 1079.940538][T18824] should_fail_ex+0x497/0x5b0 [ 1079.941791][T18824] ? fs_reclaim_acquire+0xae/0x150 [ 1079.943153][T18824] should_failslab+0xc2/0x120 [ 1079.944406][T18824] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1079.945822][T18824] ? security_inode_alloc+0x3b/0x2b0 [ 1079.947220][T18824] security_inode_alloc+0x3b/0x2b0 [ 1079.948574][T18824] inode_init_always_gfp+0xc5f/0xfb0 [ 1079.949961][T18824] alloc_inode+0x82/0x230 [ 1079.951128][T18824] sock_alloc+0x40/0x280 [ 1079.952247][T18824] do_accept+0x144/0x530 [ 1079.953369][T18824] ? __pfx_do_accept+0x10/0x10 [ 1079.954642][T18824] __sys_accept4+0x102/0x1c0 [ 1079.955848][T18824] ? __pfx___sys_accept4+0x10/0x10 [ 1079.957193][T18824] ? __pfx_ksys_write+0x10/0x10 [ 1079.958482][T18824] __ia32_sys_accept4+0x94/0x100 [ 1079.959784][T18824] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1079.961511][T18824] __do_fast_syscall_32+0x73/0x120 [ 1079.962872][T18824] do_fast_syscall_32+0x32/0x80 [ 1079.964155][T18824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1079.965809][T18824] RIP: 0023:0xf7fa4579 [ 1079.966890][T18824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1079.971873][T18824] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 1079.974046][T18824] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 1079.976106][T18824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1079.978166][T18824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1079.980244][T18824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1079.982323][T18824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1079.984388][T18824] </TASK> [ 1080.300790][T18410] udevd[18410]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 1080.304330][T18410] udevd[18410]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 1080.307182][T18827] binder: 18820:18827 ioctl c0046209 0 returned -22 [ 1080.347653][T18825] binder: 18812:18825 ioctl c0046209 0 returned -22 [ 1080.453892][T18831] program syz.3.3133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.709774][T17256] block device autoloading is deprecated and will be removed. [ 1080.714030][T18534] udevd[18534]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 1080.716538][T18534] udevd[18534]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 1080.734354][T18838] netlink: 'syz.0.3136': attribute type 4 has an invalid length. [ 1080.837104][T18844] overlayfs: failed to resolve './file0:/': -2 [ 1080.841787][T18844] fuse: Unknown parameter '00000000000000000000011' [ 1080.844167][T18844] 9pnet_fd: Insufficient options for proto=fd [ 1080.991370][ T5399] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1081.153553][ T5399] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1081.156083][ T5399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.158159][ T5399] usb 5-1: Product: syz [ 1081.159282][ T5399] usb 5-1: Manufacturer: syz [ 1081.160548][ T5399] usb 5-1: SerialNumber: syz [ 1081.162988][ T5399] usb 5-1: config 0 descriptor?? [ 1081.165709][ T5399] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 013 [ 1081.431410][T14745] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1081.573524][T18840] FAULT_INJECTION: forcing a failure. [ 1081.573524][T18840] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.577886][T18840] CPU: 3 UID: 0 PID: 18840 Comm: syz.0.3138 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1081.581603][T18840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1081.585182][T18840] Call Trace: [ 1081.586340][T18840] <TASK> [ 1081.587372][T18840] dump_stack_lvl+0x16c/0x1f0 [ 1081.588994][T18840] should_fail_ex+0x497/0x5b0 [ 1081.590641][T18840] ? fs_reclaim_acquire+0xae/0x150 [ 1081.592404][T18840] should_failslab+0xc2/0x120 [ 1081.594032][T18840] __kmalloc_noprof+0xcb/0x410 [ 1081.595678][T18840] ? __pfx_d_absolute_path+0x10/0x10 [ 1081.597467][T18840] tomoyo_encode2+0x100/0x3e0 [ 1081.599088][T18840] tomoyo_realpath_from_path+0x1a7/0x710 [ 1081.600978][T18840] tomoyo_path_number_perm+0x245/0x5b0 [ 1081.602851][T18840] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1081.604756][T18840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1081.606810][T18840] ? trace_lock_acquire+0x14a/0x1d0 [ 1081.608580][T18840] ? lock_acquire+0x2f/0xb0 [ 1081.610149][T18840] ? __fget_files+0x40/0x3f0 [ 1081.611757][T18840] ? __fget_files+0x244/0x3f0 [ 1081.613363][T18840] security_file_ioctl_compat+0x9b/0x240 [ 1081.615298][T18840] __do_compat_sys_ioctl+0x52/0x2b0 [ 1081.617080][T18840] __do_fast_syscall_32+0x73/0x120 [ 1081.618863][T18840] do_fast_syscall_32+0x32/0x80 [ 1081.620543][T18840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1081.622713][T18840] RIP: 0023:0xf7f88579 [ 1081.624120][T18840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1081.630232][T18840] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1081.632424][T18840] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0145608 [ 1081.634501][T18840] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.636880][T18840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.639555][T18840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1081.642226][T18840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.644896][T18840] </TASK> [ 1081.646061][ C3] vkms_vblank_simulate: vblank timer overrun [ 1081.648805][T18840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1081.693151][T18850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.694632][T14745] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1081.698709][T14745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.698726][T18850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.703213][T14745] usb 8-1: Product: syz [ 1081.704899][T14745] usb 8-1: Manufacturer: syz [ 1081.706518][T14745] usb 8-1: SerialNumber: syz [ 1081.711986][T14745] usb 8-1: config 0 descriptor?? [ 1081.713803][ T5399] (null): failure reading functionality [ 1081.716899][T14745] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 014 [ 1081.722097][ T5399] i2c i2c-2: failure reading functionality [ 1081.726335][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3142'. [ 1081.736448][ T5399] i2c i2c-2: connected i2c-tiny-usb device [ 1081.739305][ T5399] usb 5-1: USB disconnect, device number 13 [ 1081.757967][T18854] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 1081.760010][T18854] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1081.832137][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'. [ 1082.281355][T14745] (null): failure reading functionality [ 1082.285151][T14745] i2c i2c-2: failure reading functionality [ 1082.287900][T14745] i2c i2c-2: connected i2c-tiny-usb device [ 1082.293314][T14745] usb 8-1: USB disconnect, device number 14 [ 1082.341161][T18876] fuse: Bad value for 'user_id' [ 1082.342566][T18876] fuse: Bad value for 'user_id' [ 1082.784199][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1082.858147][T18886] FAULT_INJECTION: forcing a failure. [ 1082.858147][T18886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.864008][T18886] CPU: 3 UID: 0 PID: 18886 Comm: syz.2.3151 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1082.867556][T18886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1082.871157][T18886] Call Trace: [ 1082.872324][T18886] <TASK> [ 1082.873468][T18886] dump_stack_lvl+0x16c/0x1f0 [ 1082.875105][T18886] should_fail_ex+0x497/0x5b0 [ 1082.876736][T18886] _copy_to_user+0x30/0xc0 [ 1082.878281][T18886] simple_read_from_buffer+0xd0/0x160 [ 1082.880114][T18886] proc_fail_nth_read+0x198/0x270 [ 1082.881838][T18886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.883737][T18886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.885617][T18886] vfs_read+0x1ce/0xbd0 [ 1082.887060][T18886] ? __fget_files+0x23a/0x3f0 [ 1082.888666][T18886] ? fdget_pos+0x24c/0x360 [ 1082.890206][T18886] ? __pfx_lock_release+0x10/0x10 [ 1082.891929][T18886] ? trace_lock_acquire+0x14a/0x1d0 [ 1082.893697][T18886] ? __pfx_vfs_read+0x10/0x10 [ 1082.895320][T18886] ? __pfx___mutex_lock+0x10/0x10 [ 1082.897050][T18886] ? __fget_files+0x244/0x3f0 [ 1082.898683][T18886] ksys_read+0x12f/0x260 [ 1082.900133][T18886] ? __pfx_ksys_read+0x10/0x10 [ 1082.901759][T18886] __do_fast_syscall_32+0x73/0x120 [ 1082.903519][T18886] do_fast_syscall_32+0x32/0x80 [ 1082.905177][T18886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1082.907335][T18886] RIP: 0023:0xf747e579 [ 1082.908720][T18886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1082.915208][T18886] RSP: 002b:00000000f57455a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1082.918020][T18886] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f5745620 [ 1082.920687][T18886] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1082.923373][T18886] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1082.926037][T18886] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1082.928704][T18886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.931393][T18886] </TASK> [ 1082.941495][T18883] delete_channel: no stack [ 1082.966985][T18893] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 1082.969649][T18893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3154'. [ 1083.005179][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1083.175302][ T39] audit: type=1326 audit(2000000344.689:18959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.204801][ T39] audit: type=1326 audit(2000000344.689:18960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.233994][ T39] audit: type=1326 audit(2000000344.689:18961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.240721][ T39] audit: type=1326 audit(2000000344.689:18962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.261084][ T39] audit: type=1326 audit(2000000344.689:18963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.276009][ T39] audit: type=1326 audit(2000000344.689:18964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.307586][ T39] audit: type=1326 audit(2000000344.689:18965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.317340][ T39] audit: type=1326 audit(2000000344.689:18966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.325726][ T39] audit: type=1326 audit(2000000344.689:18967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.334891][ T39] audit: type=1326 audit(2000000344.689:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.0.3156" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1083.356433][T18909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3158'. [ 1083.521309][T18914] No such timeout policy "syz1" [ 1083.525040][T18914] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3160'. [ 1083.822404][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1084.036497][T18915] delete_channel: no stack [ 1084.278975][T18929] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 1084.279891][T18897] delete_channel: no stack [ 1084.282005][T18929] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1084.318720][T18933] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 1084.320767][T18933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3173'. [ 1084.624969][T18937] FAULT_INJECTION: forcing a failure. [ 1084.624969][T18937] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.628577][T18937] CPU: 2 UID: 0 PID: 18937 Comm: syz.3.3167 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1084.631368][T18937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1084.634127][T18937] Call Trace: [ 1084.635011][T18937] <TASK> [ 1084.635786][T18937] dump_stack_lvl+0x16c/0x1f0 [ 1084.637022][T18937] should_fail_ex+0x497/0x5b0 [ 1084.638266][T18937] ? fs_reclaim_acquire+0xae/0x150 [ 1084.639600][T18937] should_failslab+0xc2/0x120 [ 1084.640834][T18937] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1084.642359][T18937] ? __alloc_skb+0x2b3/0x380 [ 1084.643574][T18937] __alloc_skb+0x2b3/0x380 [ 1084.644748][T18937] ? __pfx___alloc_skb+0x10/0x10 [ 1084.646041][T18937] ? lock_acquire+0x2f/0xb0 [ 1084.647286][T18937] netlink_alloc_large_skb+0x69/0x130 [ 1084.648684][T18937] netlink_sendmsg+0x689/0xd70 [ 1084.649953][T18937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.651343][T18937] ? lock_acquire+0x2f/0xb0 [ 1084.652540][T18937] ____sys_sendmsg+0x9ae/0xb40 [ 1084.653793][T18937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.655178][T18937] ? get_compat_msghdr+0x11b/0x170 [ 1084.656515][T18937] ? __pfx___lock_acquire+0x10/0x10 [ 1084.657876][T18937] ___sys_sendmsg+0x135/0x1e0 [ 1084.659126][T18937] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.660482][T18937] ? lock_acquire+0x2f/0xb0 [ 1084.661673][T18937] ? __fget_files+0x40/0x3f0 [ 1084.662889][T18937] ? fdget+0x176/0x210 [ 1084.663967][T18937] __sys_sendmsg+0x117/0x1f0 [ 1084.665181][T18937] ? __pfx___sys_sendmsg+0x10/0x10 [ 1084.666529][T18937] ? __fget_files+0x244/0x3f0 [ 1084.667800][T18937] __do_fast_syscall_32+0x73/0x120 [ 1084.669211][T18937] do_fast_syscall_32+0x32/0x80 [ 1084.670509][T18937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1084.672148][T18937] RIP: 0023:0xf749e579 [ 1084.673210][T18937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1084.678108][T18937] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1084.680265][T18937] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1084.682308][T18937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1084.684344][T18937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1084.686391][T18937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1084.688461][T18937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.690525][T18937] </TASK> [ 1085.617735][T18963] FAULT_INJECTION: forcing a failure. [ 1085.617735][T18963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.621107][T18963] CPU: 2 UID: 0 PID: 18963 Comm: syz.2.3176 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1085.623874][T18963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1085.627107][T18963] Call Trace: [ 1085.628291][T18963] <TASK> [ 1085.629065][T18963] dump_stack_lvl+0x16c/0x1f0 [ 1085.630388][T18963] should_fail_ex+0x497/0x5b0 [ 1085.631655][T18963] _copy_from_iter+0x29b/0x13e0 [ 1085.632974][T18963] ? __pfx__copy_from_iter+0x10/0x10 [ 1085.634414][T18963] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1085.636072][T18963] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 1085.637647][T18963] ? __pfx_lock_release+0x10/0x10 [ 1085.639042][T18963] ? trace_lock_acquire+0x14a/0x1d0 [ 1085.640429][T18963] copy_page_from_iter+0xa5/0x120 [ 1085.641774][T18963] tun_build_skb.constprop.0+0x294/0x1120 [ 1085.643328][T18963] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1085.644951][T18963] ? __pfx___lock_acquire+0x10/0x10 [ 1085.646498][T18963] ? __pfx___lock_acquire+0x10/0x10 [ 1085.647860][T18963] ? __pfx___lock_acquire+0x10/0x10 [ 1085.649225][T18963] ? __lock_acquire+0xbdd/0x3ce0 [ 1085.650552][T18963] tun_get_user+0x872/0x3d70 [ 1085.651768][T18963] ? find_held_lock+0x2d/0x110 [ 1085.653021][T18963] ? __pfx_tun_get_user+0x10/0x10 [ 1085.654360][T18963] ? find_held_lock+0x2d/0x110 [ 1085.655642][T18963] ? __pfx_lock_release+0x10/0x10 [ 1085.656968][T18963] tun_chr_write_iter+0xdc/0x210 [ 1085.658277][T18963] vfs_write+0x6b5/0x1140 [ 1085.659414][T18963] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1085.660856][T18963] ? trace_lock_acquire+0x14a/0x1d0 [ 1085.662227][T18963] ? __pfx_vfs_write+0x10/0x10 [ 1085.663486][T18963] ? __fget_files+0x40/0x3f0 [ 1085.664705][T18963] ksys_write+0x12f/0x260 [ 1085.665905][T18963] ? __pfx_ksys_write+0x10/0x10 [ 1085.667544][T18963] __do_fast_syscall_32+0x73/0x120 [ 1085.669097][T18963] do_fast_syscall_32+0x32/0x80 [ 1085.670433][T18963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1085.672192][T18963] RIP: 0023:0xf747e579 [ 1085.673299][T18963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1085.678558][T18963] RSP: 002b:00000000f5766530 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1085.680725][T18963] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000000 [ 1085.682774][T18963] RDX: 0000000000000046 RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1085.684814][T18963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1085.687039][T18963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1085.689065][T18963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1085.691122][T18963] </TASK> [ 1085.746755][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 1085.753554][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 1086.757482][T18986] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 1086.958276][T18993] FAULT_INJECTION: forcing a failure. [ 1086.958276][T18993] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.963599][T18993] CPU: 3 UID: 0 PID: 18993 Comm: syz.3.3185 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1086.966440][T18993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1086.969212][T18993] Call Trace: [ 1086.970109][T18993] <TASK> [ 1086.970902][T18993] dump_stack_lvl+0x16c/0x1f0 [ 1086.972157][T18993] should_fail_ex+0x497/0x5b0 [ 1086.973419][T18993] ? fs_reclaim_acquire+0xae/0x150 [ 1086.974769][T18993] should_failslab+0xc2/0x120 [ 1086.976006][T18993] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1086.977523][T18993] ? __alloc_skb+0x2b3/0x380 [ 1086.978744][T18993] __alloc_skb+0x2b3/0x380 [ 1086.979918][T18993] ? __pfx___alloc_skb+0x10/0x10 [ 1086.981210][T18993] ? aa_sk_perm+0x2f5/0xb20 [ 1086.982406][T18993] ? __might_fault+0x13b/0x190 [ 1086.983654][T18993] ? __pfx_aa_sk_perm+0x10/0x10 [ 1086.984931][T18993] pfkey_sendmsg+0x16e/0x840 [ 1086.986152][T18993] ____sys_sendmsg+0x9ae/0xb40 [ 1086.987414][T18993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.988806][T18993] ? get_compat_msghdr+0x11b/0x170 [ 1086.990167][T18993] ? __pfx___lock_acquire+0x10/0x10 [ 1086.991527][T18993] ___sys_sendmsg+0x135/0x1e0 [ 1086.992763][T18993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.994133][T18993] ? lock_acquire+0x2f/0xb0 [ 1086.995340][T18993] ? __fget_files+0x40/0x3f0 [ 1086.996564][T18993] ? fdget+0x176/0x210 [ 1086.997634][T18993] __sys_sendmsg+0x117/0x1f0 [ 1086.998850][T18993] ? __pfx___sys_sendmsg+0x10/0x10 [ 1087.000178][T18993] ? __fget_files+0x244/0x3f0 [ 1087.001418][T18993] __do_fast_syscall_32+0x73/0x120 [ 1087.002755][T18993] do_fast_syscall_32+0x32/0x80 [ 1087.004035][T18993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.005686][T18993] RIP: 0023:0xf749e579 [ 1087.006764][T18993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1087.011734][T18993] RSP: 002b:00000000f578656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1087.013930][T18993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1087.016162][T18993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1087.018227][T18993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.020269][T18993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1087.022332][T18993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.024391][T18993] </TASK> [ 1087.074723][T18998] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.172017][T19003] FAULT_INJECTION: forcing a failure. [ 1087.172017][T19003] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.179314][T19003] CPU: 1 UID: 0 PID: 19003 Comm: syz.3.3188 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1087.182116][T19003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1087.184896][T19003] Call Trace: [ 1087.185780][T19003] <TASK> [ 1087.186531][T19003] dump_stack_lvl+0x16c/0x1f0 [ 1087.187772][T19003] should_fail_ex+0x497/0x5b0 [ 1087.189012][T19003] ? fs_reclaim_acquire+0xae/0x150 [ 1087.190415][T19003] should_failslab+0xc2/0x120 [ 1087.191658][T19003] __kmalloc_noprof+0xcb/0x410 [ 1087.192910][T19003] ? __pfx_d_absolute_path+0x10/0x10 [ 1087.194303][T19003] tomoyo_encode2+0x100/0x3e0 [ 1087.195546][T19003] tomoyo_realpath_from_path+0x1a7/0x710 [ 1087.197016][T19003] tomoyo_path_number_perm+0x245/0x5b0 [ 1087.198427][T19003] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1087.199899][T19003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1087.201483][T19003] ? trace_lock_acquire+0x14a/0x1d0 [ 1087.202851][T19003] ? lock_acquire+0x2f/0xb0 [ 1087.204046][T19003] ? __fget_files+0x40/0x3f0 [ 1087.205263][T19003] ? __fget_files+0x244/0x3f0 [ 1087.206501][T19003] security_file_ioctl_compat+0x9b/0x240 [ 1087.207967][T19003] __do_compat_sys_ioctl+0x52/0x2b0 [ 1087.209334][T19003] __do_fast_syscall_32+0x73/0x120 [ 1087.210688][T19003] do_fast_syscall_32+0x32/0x80 [ 1087.211964][T19003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.213614][T19003] RIP: 0023:0xf749e579 [ 1087.214693][T19003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1087.219652][T19003] RSP: 002b:00000000f576556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1087.221811][T19003] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000005501 [ 1087.223867][T19003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1087.225919][T19003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.227973][T19003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1087.230022][T19003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.232085][T19003] </TASK> [ 1087.232956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.235603][T19003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1087.241325][T19003] input: syz0 as /devices/virtual/input/input24 [ 1087.603897][T19010] atomic_op ffff888052fc8198 conn xmit_atomic 0000000000000000 [ 1087.651969][T19012] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 1087.654225][T19012] ipvlan1: entered promiscuous mode [ 1087.655948][T19012] batman_adv: batadv0: Adding interface: ipvlan1 [ 1087.657650][T19012] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.665410][T19012] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1087.680431][T19012] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.322554][T19015] input: syz0 as /devices/virtual/input/input25 [ 1088.828701][T19033] __nla_validate_parse: 1 callbacks suppressed [ 1088.828713][T19033] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3196'. [ 1090.024742][T19052] FAULT_INJECTION: forcing a failure. [ 1090.024742][T19052] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.028001][T19052] CPU: 3 UID: 0 PID: 19052 Comm: syz.1.3202 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1090.030776][T19052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1090.033584][T19052] Call Trace: [ 1090.034467][T19052] <TASK> [ 1090.035248][T19052] dump_stack_lvl+0x16c/0x1f0 [ 1090.036488][T19052] should_fail_ex+0x497/0x5b0 [ 1090.037727][T19052] ? fs_reclaim_acquire+0xae/0x150 [ 1090.039076][T19052] should_failslab+0xc2/0x120 [ 1090.040307][T19052] __kmalloc_noprof+0xcb/0x410 [ 1090.041582][T19052] ? __pfx_d_absolute_path+0x10/0x10 [ 1090.042966][T19052] tomoyo_encode2+0x100/0x3e0 [ 1090.044201][T19052] tomoyo_realpath_from_path+0x1a7/0x710 [ 1090.045662][T19052] tomoyo_path_number_perm+0x245/0x5b0 [ 1090.047184][T19052] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1090.048850][T19052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1090.050462][T19052] ? trace_lock_acquire+0x14a/0x1d0 [ 1090.051836][T19052] ? lock_acquire+0x2f/0xb0 [ 1090.053020][T19052] ? __fget_files+0x40/0x3f0 [ 1090.054252][T19052] ? __fget_files+0x244/0x3f0 [ 1090.055498][T19052] security_file_ioctl_compat+0x9b/0x240 [ 1090.056969][T19052] __do_compat_sys_ioctl+0x52/0x2b0 [ 1090.058343][T19052] __do_fast_syscall_32+0x73/0x120 [ 1090.059690][T19052] do_fast_syscall_32+0x32/0x80 [ 1090.060978][T19052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.062640][T19052] RIP: 0023:0xf7fa4579 [ 1090.063715][T19052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1090.068700][T19052] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1090.070881][T19052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af10 [ 1090.073104][T19052] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.075177][T19052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.077231][T19052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1090.079286][T19052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.081434][T19052] </TASK> [ 1090.085891][T19052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1091.129335][T19087] FAULT_INJECTION: forcing a failure. [ 1091.129335][T19087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.133616][T19087] CPU: 0 UID: 0 PID: 19087 Comm: syz.0.3212 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1091.136419][T19087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1091.139392][T19087] Call Trace: [ 1091.140290][T19087] <TASK> [ 1091.141083][T19087] dump_stack_lvl+0x16c/0x1f0 [ 1091.142353][T19087] should_fail_ex+0x497/0x5b0 [ 1091.143615][T19087] _copy_to_user+0x30/0xc0 [ 1091.144804][T19087] simple_read_from_buffer+0xd0/0x160 [ 1091.146225][T19087] proc_fail_nth_read+0x198/0x270 [ 1091.147565][T19087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.149018][T19087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.150502][T19087] vfs_read+0x1ce/0xbd0 [ 1091.151600][T19087] ? __fget_files+0x23a/0x3f0 [ 1091.152838][T19087] ? fdget_pos+0x24c/0x360 [ 1091.154014][T19087] ? __pfx_lock_release+0x10/0x10 [ 1091.155338][T19087] ? trace_lock_acquire+0x14a/0x1d0 [ 1091.156693][T19087] ? __pfx_vfs_read+0x10/0x10 [ 1091.157920][T19087] ? __pfx___mutex_lock+0x10/0x10 [ 1091.159261][T19087] ? __fget_files+0x244/0x3f0 [ 1091.160506][T19087] ksys_read+0x12f/0x260 [ 1091.161617][T19087] ? __pfx_ksys_read+0x10/0x10 [ 1091.162884][T19087] __do_fast_syscall_32+0x73/0x120 [ 1091.164230][T19087] do_fast_syscall_32+0x32/0x80 [ 1091.165513][T19087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1091.167189][T19087] RIP: 0023:0xf7f88579 [ 1091.168264][T19087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1091.173274][T19087] RSP: 002b:00000000f57065a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1091.175458][T19087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5706620 [ 1091.177526][T19087] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 1091.179590][T19087] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1091.181639][T19087] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1091.183703][T19087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1091.185767][T19087] </TASK> [ 1091.186754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1091.388338][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 1091.455092][T19098] FAULT_INJECTION: forcing a failure. [ 1091.455092][T19098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.458472][T19098] CPU: 3 UID: 0 PID: 19098 Comm: syz.0.3217 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1091.461238][T19098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1091.464166][T19098] Call Trace: [ 1091.465057][T19098] <TASK> [ 1091.465844][T19098] dump_stack_lvl+0x16c/0x1f0 [ 1091.467110][T19098] should_fail_ex+0x497/0x5b0 [ 1091.468361][T19098] _copy_from_user+0x30/0xf0 [ 1091.469587][T19098] kstrtouint_from_user+0xd7/0x1c0 [ 1091.470964][T19098] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1091.472467][T19098] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1091.473954][T19098] proc_fail_nth_write+0x84/0x250 [ 1091.475293][T19098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1091.476774][T19098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1091.478262][T19098] vfs_write+0x28e/0x1140 [ 1091.479407][T19098] ? __fget_files+0x23a/0x3f0 [ 1091.480656][T19098] ? fdget_pos+0x24c/0x360 [ 1091.481853][T19098] ? __pfx_lock_release+0x10/0x10 [ 1091.483189][T19098] ? trace_lock_acquire+0x14a/0x1d0 [ 1091.484561][T19098] ? __pfx_vfs_write+0x10/0x10 [ 1091.485825][T19098] ? __pfx___mutex_lock+0x10/0x10 [ 1091.487168][T19098] ? __fget_files+0x244/0x3f0 [ 1091.488413][T19098] ksys_write+0x12f/0x260 [ 1091.489559][T19098] ? __pfx_ksys_write+0x10/0x10 [ 1091.490867][T19098] __do_fast_syscall_32+0x73/0x120 [ 1091.492223][T19098] do_fast_syscall_32+0x32/0x80 [ 1091.493513][T19098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1091.495181][T19098] RIP: 0023:0xf7f88579 [ 1091.496258][T19098] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1091.501225][T19098] RSP: 002b:00000000f57065a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1091.503402][T19098] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5706620 [ 1091.505468][T19098] RDX: 0000000000000001 RSI: 00000000f740bff4 RDI: 0000000000000000 [ 1091.507538][T19098] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1091.509599][T19098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1091.511770][T19098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1091.513858][T19098] </TASK> [ 1092.182720][T19110] AppArmor: change_hat: Invalid input '0' [ 1092.283015][T19118] 9pnet_fd: Insufficient options for proto=fd [ 1092.344505][T19120] veth0_to_team: entered promiscuous mode [ 1092.346031][T19120] veth0_to_team: entered allmulticast mode [ 1093.442496][T19137] input: syz0 as /devices/virtual/input/input26 [ 1093.499580][T19140] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 1093.501889][T19140] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1093.624602][T19144] syz.2.3231: attempt to access beyond end of device [ 1093.624602][T19144] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1093.629085][T19144] qnx6: unable to read the first superblock [ 1093.631826][T19144] syz.2.3231: attempt to access beyond end of device [ 1093.631826][T19144] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1093.635106][T19144] qnx6: unable to read the first superblock [ 1093.636699][T19144] qnx6: unable to read the first superblock [ 1093.865493][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 1093.945969][T19159] xt_socket: unknown flags 0x4 [ 1094.297121][T19166] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3237'. [ 1094.575422][T19168] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 1094.580338][T19168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1094.616587][T19172] FAULT_INJECTION: forcing a failure. [ 1094.616587][T19172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.620009][T19172] CPU: 2 UID: 0 PID: 19172 Comm: syz.2.3240 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1094.622795][T19172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1094.625548][T19172] Call Trace: [ 1094.626433][T19172] <TASK> [ 1094.627208][T19172] dump_stack_lvl+0x16c/0x1f0 [ 1094.628444][T19172] should_fail_ex+0x497/0x5b0 [ 1094.629675][T19172] _copy_from_user+0x30/0xf0 [ 1094.630910][T19172] kstrtouint_from_user+0xd7/0x1c0 [ 1094.632274][T19172] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1094.633745][T19172] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1094.635209][T19172] proc_fail_nth_write+0x84/0x250 [ 1094.636525][T19172] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1094.637983][T19172] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1094.639432][T19172] vfs_write+0x28e/0x1140 [ 1094.640562][T19172] ? __fget_files+0x23a/0x3f0 [ 1094.641785][T19172] ? fdget_pos+0x24c/0x360 [ 1094.642956][T19172] ? __pfx_lock_release+0x10/0x10 [ 1094.644263][T19172] ? trace_lock_acquire+0x14a/0x1d0 [ 1094.645616][T19172] ? __pfx_vfs_write+0x10/0x10 [ 1094.646863][T19172] ? __pfx___mutex_lock+0x10/0x10 [ 1094.648181][T19172] ? __fget_files+0x244/0x3f0 [ 1094.649406][T19172] ksys_write+0x12f/0x260 [ 1094.650555][T19172] ? __pfx_ksys_write+0x10/0x10 [ 1094.651827][T19172] __do_fast_syscall_32+0x73/0x120 [ 1094.653164][T19172] do_fast_syscall_32+0x32/0x80 [ 1094.654460][T19172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1094.656108][T19172] RIP: 0023:0xf747e579 [ 1094.657182][T19172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1094.662135][T19172] RSP: 002b:00000000f57665a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1094.664283][T19172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5766620 [ 1094.666325][T19172] RDX: 0000000000000001 RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1094.668371][T19172] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1094.670430][T19172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1094.672699][T19172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1094.674757][T19172] </TASK> [ 1095.011359][T14745] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1095.162488][T14745] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.165313][T14745] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1095.168602][T14745] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.170937][T14745] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.173851][T14745] usb 8-1: config 0 descriptor?? [ 1095.316664][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 1095.316675][ T39] audit: type=1326 audit(2000000356.829:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.324258][ T39] audit: type=1326 audit(2000000356.829:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.329883][ T39] audit: type=1326 audit(2000000356.829:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.335993][ T39] audit: type=1326 audit(2000000356.829:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.342313][ T39] audit: type=1326 audit(2000000356.829:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.347990][ T39] audit: type=1326 audit(2000000356.829:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.353971][ T39] audit: type=1326 audit(2000000356.829:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.359840][ T39] audit: type=1326 audit(2000000356.849:19038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.366132][ T39] audit: type=1326 audit(2000000356.849:19039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.371654][ T39] audit: type=1326 audit(2000000356.849:19040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.0.3246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1095.606320][T19193] FAULT_INJECTION: forcing a failure. [ 1095.606320][T19193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.610022][T19193] CPU: 1 UID: 0 PID: 19193 Comm: syz.2.3247 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1095.613025][T19193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1095.616015][T19193] Call Trace: [ 1095.616989][T19193] <TASK> [ 1095.617842][T19193] dump_stack_lvl+0x16c/0x1f0 [ 1095.619174][T19193] should_fail_ex+0x497/0x5b0 [ 1095.620507][T19193] _copy_from_user+0x30/0xf0 [ 1095.621829][T19193] do_tcp_getsockopt+0x180c/0x3a90 [ 1095.623294][T19193] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1095.624874][T19193] ? hlock_class+0x4e/0x130 [ 1095.626213][T19193] ? mark_lock+0xb5/0xc60 [ 1095.627431][T19193] ? __pfx_mark_lock+0x10/0x10 [ 1095.628793][T19193] ? mark_lock+0xb5/0xc60 [ 1095.630088][T19193] ? aa_label_sk_perm+0x19d/0x5a0 [ 1095.631467][T19193] ? __lock_acquire+0xbdd/0x3ce0 [ 1095.632879][T19193] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1095.634319][T19193] ? __pfx___lock_acquire+0x10/0x10 [ 1095.635475][T14745] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1095.635775][T19193] ? hlock_class+0x4e/0x130 [ 1095.639266][T19193] ? __lock_acquire+0xbdd/0x3ce0 [ 1095.640610][T19193] ? __pfx___might_resched+0x10/0x10 [ 1095.641996][T19193] ? __pfx___lock_acquire+0x10/0x10 [ 1095.643516][T19193] ? __pfx_aa_sk_perm+0x10/0x10 [ 1095.644864][T14745] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1095.644971][T19193] ? find_held_lock+0x2d/0x110 [ 1095.649807][T19193] tcp_getsockopt+0xdf/0x100 [ 1095.651088][T19193] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1095.652705][T19193] do_sock_getsockopt+0x3fe/0x870 [ 1095.654110][T19193] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1095.655653][T19193] ? __fget_files+0x244/0x3f0 [ 1095.656973][T19193] __sys_getsockopt+0x1a1/0x270 [ 1095.658331][T19193] ? __pfx___sys_getsockopt+0x10/0x10 [ 1095.659842][T19193] ? fput+0x30/0x390 [ 1095.660974][T19193] ? ksys_write+0x1ad/0x260 [ 1095.662223][T19193] ? __pfx_ksys_write+0x10/0x10 [ 1095.663606][T19193] __ia32_sys_getsockopt+0xbc/0x160 [ 1095.665045][T19193] ? lockdep_hardirqs_on+0x7c/0x110 [ 1095.666468][T19193] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1095.668310][T19193] __do_fast_syscall_32+0x73/0x120 [ 1095.669716][T19193] do_fast_syscall_32+0x32/0x80 [ 1095.671041][T19193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1095.672794][T19193] RIP: 0023:0xf747e579 [ 1095.673979][T19193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1095.679309][T19193] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1095.681610][T19193] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 1095.683870][T19193] RDX: 0000000000000023 RSI: 0000000020000140 RDI: 0000000020000080 [ 1095.686026][T19193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.688083][T19193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1095.690157][T19193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.692222][T19193] </TASK> [ 1095.747159][T19198] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 1095.749257][T19198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 1095.840205][T19178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.844977][T19178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.848871][T19178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1095.855371][ T30] usb 8-1: USB disconnect, device number 15 [ 1096.063664][T19204] netlink: 'syz.1.3251': attribute type 10 has an invalid length. [ 1096.065732][T19204] ipvlan1: entered promiscuous mode [ 1096.067398][T19204] batman_adv: batadv0: Adding interface: ipvlan1 [ 1096.069046][T19204] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.075580][T19204] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1096.095226][T19204] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1096.291704][T19209] 9pnet_fd: Insufficient options for proto=fd [ 1096.293976][T19209] vivid-001: disconnect [ 1096.299085][T19208] vivid-001: reconnect [ 1096.342045][T19211] 9pnet_fd: Insufficient options for proto=fd [ 1096.344011][T19211] FAULT_INJECTION: forcing a failure. [ 1096.344011][T19211] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.347290][T19211] CPU: 3 UID: 0 PID: 19211 Comm: syz.0.3254 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1096.350097][T19211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1096.352890][T19211] Call Trace: [ 1096.353779][T19211] <TASK> [ 1096.354576][T19211] dump_stack_lvl+0x16c/0x1f0 [ 1096.355823][T19211] should_fail_ex+0x497/0x5b0 [ 1096.357076][T19211] ? fs_reclaim_acquire+0xae/0x150 [ 1096.358439][T19211] should_failslab+0xc2/0x120 [ 1096.359686][T19211] __kmalloc_noprof+0xcb/0x410 [ 1096.360953][T19211] ? __pfx_d_absolute_path+0x10/0x10 [ 1096.362349][T19211] tomoyo_encode2+0x100/0x3e0 [ 1096.363588][T19211] tomoyo_realpath_from_path+0x1a7/0x710 [ 1096.365057][T19211] tomoyo_path_number_perm+0x245/0x5b0 [ 1096.366493][T19211] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1096.367960][T19211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1096.369540][T19211] ? trace_lock_acquire+0x14a/0x1d0 [ 1096.370922][T19211] ? lock_acquire+0x2f/0xb0 [ 1096.372132][T19211] ? __fget_files+0x40/0x3f0 [ 1096.373352][T19211] ? __fget_files+0x244/0x3f0 [ 1096.374595][T19211] security_file_ioctl_compat+0x9b/0x240 [ 1096.376071][T19211] __do_compat_sys_ioctl+0x52/0x2b0 [ 1096.377451][T19211] __do_fast_syscall_32+0x73/0x120 [ 1096.378814][T19211] do_fast_syscall_32+0x32/0x80 [ 1096.380107][T19211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1096.381913][T19211] RIP: 0023:0xf7f88579 [ 1096.382999][T19211] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1096.388006][T19211] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1096.390308][T19211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 1096.392529][T19211] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1096.394619][T19211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1096.396670][T19211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1096.398741][T19211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.400802][T19211] </TASK> [ 1096.402701][T19211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1096.404668][T19211] vivid-001: disconnect [ 1096.407480][T19213] vivid-002: disconnect [ 1096.409158][T19210] vivid-001: reconnect [ 1096.410559][T19212] vivid-002: reconnect [ 1096.695996][T19226] xt_socket: unknown flags 0x4 [ 1097.049415][T19229] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 1097.052339][T19229] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1097.634263][T19246] ubi0: attaching mtd0 [ 1097.637221][T19246] ubi0: scanning is finished [ 1097.690384][T19246] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1097.692599][T19246] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1097.694547][T19246] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1097.696437][T19246] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1097.698445][T19246] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1097.700548][T19246] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1097.702804][T19246] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1097.705486][T19246] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1097.708076][T19250] ubi0: background thread "ubi_bgt0d" started, PID 19250 [ 1097.710026][T19249] ubi0: detaching mtd0 [ 1097.714627][T19249] ubi0: mtd0 is detached [ 1097.859741][T19260] ubi0: attaching mtd0 [ 1097.862680][T19260] ubi0: scanning is finished [ 1097.923054][T19260] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1097.925057][T19260] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1097.926954][T19260] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1097.928753][T19260] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1097.930713][T19260] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1097.935073][T19260] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1097.937342][T19260] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1097.939942][T19260] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1097.943826][T19264] ubi0: background thread "ubi_bgt0d" started, PID 19264 [ 1097.945872][T19263] ubi0: detaching mtd0 [ 1097.954131][T19263] ubi0: mtd0 is detached [ 1097.997239][T19269] netlink: 'syz.2.3268': attribute type 1 has an invalid length. [ 1097.999385][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3268'. [ 1098.757742][T19272] ubi0: attaching mtd0 [ 1098.760238][T19272] ubi0: scanning is finished [ 1098.874625][T19272] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1098.876646][T19272] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1098.878614][T19272] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1098.881024][T19272] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1098.883118][T19272] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1098.885317][T19272] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1098.888064][T19272] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1098.890711][T19272] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1098.893493][T19280] ubi0: background thread "ubi_bgt0d" started, PID 19280 [ 1098.893529][T19278] ubi0: detaching mtd0 [ 1098.912715][T19278] ubi0: mtd0 is detached [ 1099.046692][T19286] netlink: 'syz.2.3271': attribute type 10 has an invalid length. [ 1099.050264][T19286] ipvlan1: entered promiscuous mode [ 1099.053433][T19286] batman_adv: batadv0: Adding interface: ipvlan1 [ 1099.055856][T19286] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.069096][T19286] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1099.105243][T19286] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1099.597718][T19296] xt_socket: unknown flags 0x4 [ 1099.726219][T19307] FAULT_INJECTION: forcing a failure. [ 1099.726219][T19307] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.747322][T19307] CPU: 3 UID: 0 PID: 19307 Comm: syz.0.3276 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1099.750156][T19307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1099.752946][T19307] Call Trace: [ 1099.753831][T19307] <TASK> [ 1099.754608][T19307] dump_stack_lvl+0x16c/0x1f0 [ 1099.755936][T19307] should_fail_ex+0x497/0x5b0 [ 1099.757328][T19307] ? fs_reclaim_acquire+0xae/0x150 [ 1099.758886][T19307] should_failslab+0xc2/0x120 [ 1099.760482][T19307] __kmalloc_noprof+0xcb/0x410 [ 1099.762122][T19307] ? rcu_is_watching+0x12/0xc0 [ 1099.763525][T19307] tomoyo_encode2+0x100/0x3e0 [ 1099.764785][T19307] tomoyo_realpath_from_path+0x1a7/0x710 [ 1099.766255][T19307] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1099.767744][T19307] tomoyo_path_number_perm+0x245/0x5b0 [ 1099.769162][T19307] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1099.770653][T19307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1099.772221][T19307] ? trace_lock_acquire+0x14a/0x1d0 [ 1099.773570][T19307] ? lock_acquire+0x2f/0xb0 [ 1099.774767][T19307] ? __fget_files+0x40/0x3f0 [ 1099.775973][T19307] ? __fget_files+0x244/0x3f0 [ 1099.777191][T19307] security_file_ioctl_compat+0x9b/0x240 [ 1099.778665][T19307] __do_compat_sys_ioctl+0x52/0x2b0 [ 1099.780343][T19307] __do_fast_syscall_32+0x73/0x120 [ 1099.781939][T19307] do_fast_syscall_32+0x32/0x80 [ 1099.783228][T19307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1099.784864][T19307] RIP: 0023:0xf7f88579 [ 1099.785955][T19307] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1099.790900][T19307] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1099.793086][T19307] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008948 [ 1099.795166][T19307] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1099.797215][T19307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.799269][T19307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1099.801315][T19307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.803363][T19307] </TASK> [ 1099.807707][T19307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1100.161397][T14745] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1100.213601][T19313] EXT4-fs (sda1): shut down requested (0) [ 1100.331311][T14745] usb 5-1: Using ep0 maxpacket: 8 [ 1100.333886][T14745] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1100.335999][T14745] usb 5-1: config 179 has no interface number 0 [ 1100.337577][T14745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1100.341947][T14745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1100.344869][T14745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1100.347733][T14745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1100.350341][T14745] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1100.354277][T14745] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1100.356554][T14745] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1100.359554][T14745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.391726][T19311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1100.396458][T14745] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input28 [ 1100.606122][T19310] binder: 19309:19310 ioctl c018620c 20003640 returned -1 [ 1100.609498][T15831] usb 5-1: USB disconnect, device number 14 [ 1100.609539][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1100.613807][T15831] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1101.153985][T19330] FAULT_INJECTION: forcing a failure. [ 1101.153985][T19330] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.159287][T19330] CPU: 2 UID: 0 PID: 19330 Comm: syz.0.3285 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1101.162087][T19330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1101.164854][T19330] Call Trace: [ 1101.165733][T19330] <TASK> [ 1101.166521][T19330] dump_stack_lvl+0x16c/0x1f0 [ 1101.167760][T19330] should_fail_ex+0x497/0x5b0 [ 1101.169002][T19330] ? fs_reclaim_acquire+0xae/0x150 [ 1101.170372][T19330] should_failslab+0xc2/0x120 [ 1101.171601][T19330] __kmalloc_noprof+0xcb/0x410 [ 1101.172857][T19330] ? __pfx_d_absolute_path+0x10/0x10 [ 1101.174237][T19330] tomoyo_encode2+0x100/0x3e0 [ 1101.175472][T19330] tomoyo_realpath_from_path+0x1a7/0x710 [ 1101.176935][T19330] tomoyo_path_number_perm+0x245/0x5b0 [ 1101.178364][T19330] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1101.179826][T19330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1101.181402][T19330] ? trace_lock_acquire+0x14a/0x1d0 [ 1101.182799][T19330] ? lock_acquire+0x2f/0xb0 [ 1101.184009][T19330] ? __fget_files+0x40/0x3f0 [ 1101.185231][T19330] ? __fget_files+0x244/0x3f0 [ 1101.186476][T19330] security_file_ioctl_compat+0x9b/0x240 [ 1101.187922][T19330] __do_compat_sys_ioctl+0x52/0x2b0 [ 1101.189286][T19330] __do_fast_syscall_32+0x73/0x120 [ 1101.190651][T19330] do_fast_syscall_32+0x32/0x80 [ 1101.191935][T19330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.193584][T19330] RIP: 0023:0xf7f88579 [ 1101.194662][T19330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1101.199587][T19330] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1101.201742][T19330] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 1101.203955][T19330] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.205999][T19330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.208067][T19330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1101.210127][T19330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.212185][T19330] </TASK> [ 1101.216607][T19330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1101.218810][T19330] ubi0: attaching mtd0 [ 1101.220452][T19330] ubi0: scanning is finished [ 1101.278753][T19330] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1101.281014][T19330] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1101.283289][T19330] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1101.285264][T19330] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1101.287370][T19330] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1101.289233][T19330] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1101.291392][T19330] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1101.294024][T19330] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1101.296669][T19331] ubi0: detaching mtd0 [ 1101.296679][T19334] ubi0: background thread "ubi_bgt0d" started, PID 19334 [ 1101.301048][T19331] ubi0: mtd0 is detached [ 1101.302407][T19333] ubi0: attaching mtd0 [ 1101.304104][T19333] ubi0: scanning is finished [ 1101.402688][T19333] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1101.409843][T19333] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1101.412234][T19333] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1101.414179][T19333] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1101.416164][T19333] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1101.418132][T19333] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1101.420360][T19333] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1101.423235][T19333] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1101.425821][T19339] ubi0: background thread "ubi_bgt0d" started, PID 19339 [ 1101.427758][T19335] ubi0: detaching mtd0 [ 1101.440281][T19335] ubi0: mtd0 is detached [ 1101.505793][T19344] veth0_to_team: entered promiscuous mode [ 1101.507376][T19344] veth0_to_team: entered allmulticast mode [ 1102.387527][T19356] netlink: 'syz.3.3299': attribute type 6 has an invalid length. [ 1102.472327][T19364] xt_socket: unknown flags 0x4 [ 1103.239102][T19373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3295'. [ 1103.358896][T19382] ubi0: attaching mtd0 [ 1103.361886][T19382] ubi0: scanning is finished [ 1103.448058][T19382] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1103.451069][T19382] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1103.453571][T19382] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1103.455880][T19382] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1103.458260][T19382] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1103.460735][T19382] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1103.463613][T19382] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4206518362 [ 1103.466997][T19382] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1103.470419][T19384] ubi0: detaching mtd0 [ 1103.470436][T19385] ubi0: background thread "ubi_bgt0d" started, PID 19385 [ 1103.480796][T19384] ubi0: mtd0 is detached [ 1103.618432][T19391] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 1103.620683][T19391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3303'. [ 1103.798491][T19401] vivid-007: disconnect [ 1104.205908][T15455] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 1104.276855][T19423] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 1104.278890][T19423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1104.511368][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1104.691336][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1104.701687][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1104.717573][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1104.720380][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1104.722664][ T30] usb 7-1: Product: syz [ 1104.724018][ T30] usb 7-1: Manufacturer: syz [ 1104.725221][ T30] usb 7-1: SerialNumber: syz [ 1104.727241][ T30] usb 7-1: config 0 descriptor?? [ 1104.732264][T19420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1104.817702][T19438] usb 2-1: USB disconnect, device number 2 [ 1104.942281][ T30] usb 7-1: USB disconnect, device number 16 [ 1105.310873][T19440] hub 2-0:1.0: USB hub found [ 1105.321505][T19440] hub 2-0:1.0: 6 ports detected [ 1105.334240][T19452] FAULT_INJECTION: forcing a failure. [ 1105.334240][T19452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.337525][T19452] CPU: 2 UID: 0 PID: 19452 Comm: syz.0.3318 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1105.340152][T19452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1105.342869][T19452] Call Trace: [ 1105.343724][T19452] <TASK> [ 1105.344483][T19452] dump_stack_lvl+0x16c/0x1f0 [ 1105.345701][T19452] should_fail_ex+0x497/0x5b0 [ 1105.346948][T19452] strncpy_from_user+0x3b/0x2a0 [ 1105.348178][T19452] getname_flags.part.0+0x8f/0x550 [ 1105.349507][T19452] getname+0x8d/0xe0 [ 1105.350555][T19452] do_sys_openat2+0x104/0x1e0 [ 1105.351885][T19452] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.353244][T19452] ? __fget_files+0x244/0x3f0 [ 1105.354484][T19452] __ia32_compat_sys_openat+0x16e/0x210 [ 1105.355956][T19452] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1105.357522][T19452] ? ksys_write+0x1ad/0x260 [ 1105.358717][T19452] __do_fast_syscall_32+0x73/0x120 [ 1105.360055][T19452] do_fast_syscall_32+0x32/0x80 [ 1105.361347][T19452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.362982][T19452] RIP: 0023:0xf7f88579 [ 1105.364050][T19452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1105.368974][T19452] RSP: 002b:00000000f57064a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1105.371136][T19452] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f57064f0 [ 1105.373160][T19452] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f740bff4 [ 1105.375198][T19452] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1105.377279][T19452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1105.379330][T19452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.381389][T19452] </TASK> [ 1105.382259][ C2] vkms_vblank_simulate: vblank timer overrun [ 1105.481397][T14745] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 1105.614132][T19463] FAULT_INJECTION: forcing a failure. [ 1105.614132][T19463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.617558][T19463] CPU: 3 UID: 0 PID: 19463 Comm: syz.0.3321 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1105.620353][T19463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1105.623253][T19463] Call Trace: [ 1105.624129][T19463] <TASK> [ 1105.624912][T19463] dump_stack_lvl+0x16c/0x1f0 [ 1105.626181][T19463] should_fail_ex+0x497/0x5b0 [ 1105.627422][T19463] _copy_to_user+0x30/0xc0 [ 1105.628621][T19463] simple_read_from_buffer+0xd0/0x160 [ 1105.630053][T19463] proc_fail_nth_read+0x198/0x270 [ 1105.631380][T19463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.632829][T19463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.634274][T19463] vfs_read+0x1ce/0xbd0 [ 1105.635398][T19463] ? __fget_files+0x23a/0x3f0 [ 1105.636634][T19463] ? fdget_pos+0x24c/0x360 [ 1105.637804][T19463] ? __pfx_lock_release+0x10/0x10 [ 1105.639127][T19463] ? trace_lock_acquire+0x14a/0x1d0 [ 1105.640486][T19463] ? __pfx_vfs_read+0x10/0x10 [ 1105.641719][T19463] ? __pfx___mutex_lock+0x10/0x10 [ 1105.643055][T19463] ? __fget_files+0x244/0x3f0 [ 1105.644288][T19463] ksys_read+0x12f/0x260 [ 1105.645400][T19463] ? __pfx_ksys_read+0x10/0x10 [ 1105.646667][T19463] __do_fast_syscall_32+0x73/0x120 [ 1105.648013][T19463] do_fast_syscall_32+0x32/0x80 [ 1105.649294][T19463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.650961][T19463] RIP: 0023:0xf7f88579 [ 1105.652036][T19463] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1105.657017][T19463] RSP: 002b:00000000f56e55a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1105.659272][T19463] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56e5620 [ 1105.661327][T19463] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 1105.663477][T19463] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1105.665540][T19463] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1105.667641][T19463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.669705][T19463] </TASK> [ 1105.706574][T14745] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 1105.709014][T14745] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 1105.711119][T14745] usb 2-1: Product: QEMU USB Tablet [ 1105.714613][T14745] usb 2-1: Manufacturer: QEMU [ 1105.715912][T14745] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 1105.733354][T14745] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input29 [ 1105.740081][T14745] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 1105.752071][T19469] netlink: 'syz.2.3324': attribute type 6 has an invalid length. [ 1105.764238][T18410] udevd[18410]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 1105.788656][T18410] udevd[18410]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 1105.789187][T18534] udevd[18534]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system [ 1105.794647][T18534] udevd[18534]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system [ 1105.858993][T18726] udevd[18726]: setting mode of /dev/input/event3 to 020660 failed: Read-only file system [ 1105.863751][T19470] vivid-001: ================= START STATUS ================= [ 1105.866280][T18726] udevd[18726]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: Read-only file system [ 1105.866573][T19470] vivid-001: Radio HW Seek Mode: Bounded [ 1105.872228][T19470] vivid-001: Radio Programmable HW Seek: false [ 1105.873904][T19470] vivid-001: RDS Rx I/O Mode: Block I/O [ 1105.876594][T19470] vivid-001: Generate RBDS Instead of RDS: false [ 1105.882713][T19470] vivid-001: RDS Reception: true [ 1105.884082][T19470] vivid-001: RDS Program Type: 0 inactive [ 1105.885665][T19470] vivid-001: RDS PS Name: inactive [ 1105.887922][T19470] vivid-001: RDS Radio Text: inactive [ 1105.889538][T19470] vivid-001: RDS Traffic Announcement: false inactive [ 1105.893465][T19470] vivid-001: RDS Traffic Program: false inactive [ 1105.895259][T19470] vivid-001: RDS Music: false inactive [ 1105.897146][T19470] vivid-001: ================== END STATUS ================== [ 1106.850298][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.853565][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.855839][T19486] bridge0: entered allmulticast mode [ 1106.924036][T19490] netlink: 'syz.3.3330': attribute type 1 has an invalid length. [ 1106.926365][T19490] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1108.056870][T19505] netlink: 'syz.1.3334': attribute type 1 has an invalid length. [ 1108.058911][T19505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3334'. [ 1108.283910][T15455] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1108.286427][T15455] Bluetooth: hci0: Injecting HCI hardware error event [ 1108.289361][T15455] Bluetooth: hci0: hardware error 0x00 [ 1110.361528][T15455] Bluetooth: hci0: Opcode 0x0c03 failed: -110 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 1116.032077][T18902] vivid-007: reconnect [ 1116.290217][ T9070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.388759][ T9070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.508776][ T9070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.565293][ T9070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.663942][ T9070] bridge_slave_1: left allmulticast mode [ 1116.665481][ T9070] bridge_slave_1: left promiscuous mode [ 1116.667382][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.670196][ T9070] bridge_slave_0: left allmulticast mode [ 1116.671778][ T9070] bridge_slave_0: left promiscuous mode [ 1116.673295][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.015301][ T9070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.019611][ T9070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.023793][ T9070] bond0 (unregistering): Released all slaves [ 1117.079722][ T9070] tipc: Left network mode [ 1117.284791][ T9070] hsr_slave_0: left promiscuous mode [ 1117.286870][ T9070] hsr_slave_1: left promiscuous mode [ 1117.288886][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.290891][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.293442][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.295373][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.297623][ T9070] batman_adv: batadv0: Removing interface: ipvlan1 [ 1117.317655][ T9070] veth1_macvtap: left promiscuous mode [ 1117.319158][ T9070] veth0_macvtap: left promiscuous mode [ 1117.320618][ T9070] veth1_vlan: left promiscuous mode [ 1117.322539][ T9070] veth0_vlan: left promiscuous mode [ 1117.375337][ T9070] pim6reg (unregistering): left allmulticast mode [ 1118.122566][ T9070] team0 (unregistering): Port device team_slave_1 removed [ 1118.220879][ T9070] team0 (unregistering): Port device team_slave_0 removed [ 1119.252972][ T9070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.255877][ T9070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.349867][ T9070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.352622][ T9070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.418302][ T9070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.421816][ T9070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.537413][ T9070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.541499][ T9070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.631998][ T9070] bridge_slave_1: left allmulticast mode [ 1119.633531][ T9070] bridge_slave_1: left promiscuous mode [ 1119.635432][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.638522][ T9070] bridge_slave_0: left allmulticast mode [ 1119.640007][ T9070] bridge_slave_0: left promiscuous mode [ 1119.641897][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.946235][ T9070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.950505][ T9070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.955162][ T9070] bond0 (unregistering): Released all slaves [ 1120.219113][ T9070] hsr_slave_0: left promiscuous mode [ 1120.221131][ T9070] hsr_slave_1: left promiscuous mode [ 1120.223201][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.225153][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.227542][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.229477][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.246923][ T9070] veth1_macvtap: left promiscuous mode [ 1120.248411][ T9070] veth0_macvtap: left promiscuous mode [ 1120.249912][ T9070] veth1_vlan: left promiscuous mode [ 1120.251503][ T9070] veth0_vlan: left promiscuous mode [ 1120.946714][ T9070] team0 (unregistering): Port device team_slave_1 removed [ 1121.032806][ T9070] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 15:53:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888025ea4800 RCX=ffffffff8b024b33 RDX=ffff888024924880 RSI=ffffffff8b024b46 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000778f8f0 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000000 R12=ffffffffffffffff R13=0000000000000000 R14=ffffc9000778fa65 R15=ffffc9000778fa28 RIP=ffffffff818cb891 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33f6f00ee0 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5656e71334661d99 eff665211a138116 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2016e42da01a5dea 4749b8d403221a12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5452144fb455aa3 29187ef329ce4cca ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ce2a9a16bad8faf c5dc66b36fd6648b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0732cc7c9d6e934f 430cdb73f9288814 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3a54463193fb133 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d02d01150da68c4 d0451016813fd3ba ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d8c511500000000 081e6d9c4062d44d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44a7edf28de21c39 b9bf11d20ce2de2b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 107b25aad775470d c01f0f36a4a753a7 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000024f4f07 RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002017e000 CR3=000000005a2c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd6198b60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffff0f0e0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00204b4e494c0020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1549ac81a23ed98e 737326e1cf17da99 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130323a 306963682f306963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75706e692f740039 3030302e31303030 3a373236303a3330 30302f302e313a31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005597e51c0e80 00005597e51bdd10 00005597e51c0f00 00005597e51bdc10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005597e51ad840 00005597e51ad7a0 00005597e51b4ac0 00005597e51b4a40 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a00 7d263a3c264b3f26 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000030 3133003431332d68 00004e4f53414552 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000030 00000034311a2d10 00004e4f53414131 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000b66a81 RBX=0000000000000002 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556fe21c8000 CR3=000000004a156000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a898c435a898c435 a898c435a898c435 a898c435a898c435 a898c435a898c435 a898c435a898c435 a898c435a898c435 a898c435a898c435 a898c435a898c435 ZMM22=1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 1d563b371d563b37 ZMM23=3a8089733a808973 3a8089733a808973 3a8089733a808973 3a8089733a808973 3a8089733a808973 3a8089733a808973 3a8089733a808973 3a8089733a808973 ZMM24=03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 03c14e8603c14e86 ZMM25=05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c 05b0003c05b0003c ZMM26=6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d 6f269c3d6f269c3d ZMM27=0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 0c61c4490c61c449 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7929000079290000 7929000079290000 7929000079290000 7929000079290000 7929000079290000 7929000079290000 7929000079290000 7929000079290000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b4ccc20 RDI=ffffffff8bb12d60 RBP=ffffffff8ddb7840 RSP=ffffc9000367f720 R8 =0000000000000007 R9 =000000000007ffff R10=0000000000000009 R11=0000000000000000 R12=ffff888022c20000 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b13a69d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fb6e40 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f744bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000