last executing test programs: 1m46.09146575s ago: executing program 2 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@random="5b1a073f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x300, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x18, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5}}}}}}, 0x0) 1m46.091338047s ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000079b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1m46.081054302s ago: executing program 2 (id=741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000b00)={@loopback, @broadcast, @multicast1}, 0xc) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES16=r0, @ANYBLOB="c35f169263f4dfca72fdd54deaa6e943a6e7fca558cb9c61ccad4e458d6bb1d761bfb7b36422c043843bfdd9cb1322fa280bdf304d464e54c324832c2ec69d7967cc080a9f470b00d7581914ed4b339428029727dd00a1c94155b8eb57ca2ecce1619055523de0c5deb72a9cae2a84325425be9388bc8525f4ed751a20e4ea798721a5da5c6affa8e60da3c51f6201e18d9cbdce793f32a6c1a48f03487c77a1091c42eff5124dd3e8bfedc5ed4478a2281cf6d4bd55928029c25a7ba818b67ace4b986d0b22138ac604a89da83b", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x22) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x4, @mcast2, 0xe8}, 0x12) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x401}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="740000000208010100000000000000000a00000005000300840000000900010073797a30000000000603400000020008000840000000800800094000000005080003400000000a0800014000000006080009400000008108000440000034540800064000"/116], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @remote, 0x10024}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYBLOB="010000000000000000000100000030000180060005004e23000014000400fe8000000000000000000000000000bb080003000a0101020800060001000000080003000300000008000300030000000800030006000000", @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r6, @ANYBLOB="7cb29affd06b08255eb2d9ce3711be0605529547ffe9f39c09b83051fba2bab0cd05f6cf4e7609e49113cc2b7ebece3f1b268d929fe3b6f76e8dd530f457c8be204b63b2759e0722bee1721977667e570d5dc566a992fb86d51e0a7dd854737d19235570ad0e5768c37c84fb2e3b8bc1fbcd0d08ab95cd4c50f4653389e1452ea3856cf685", @ANYRESOCT=r4, @ANYBLOB="f9d37834628007354b874e74cfd91720abbcc870656be77ffdfb8e13155e31512fabd65b9ef02adafd89581ab09409a8e1408b30392ad8175de5f243bf1a2df1583bb9c57a78eb0e734bb952de92f634f3d639f2f0fd332dfb6fae55b1b4ccff4216cef15359ae674022d907e3a9cdb16ef0b2e34d3769c2b55b0835d663ddec7bb2747a539cfe6ddbf408a9b44e30be83b53ccdba61ed516501afb236192655855bfba6a34c7d4e9cc19fc53f5414f4bedfb3e61a", @ANYBLOB="e40f7d458e2b0c4b01be975f45b59fc4c032ce", @ANYRESDEC, @ANYRES8=r2], 0x14}, 0x1, 0xfcffffff00000000, 0x0, 0x4000884}, 0x48000) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001400)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYBLOB='\x00\x00\x00', @ANYRES8=r4, @ANYRES64=r6], 0x44}}, 0x20000090) 1m43.078136565s ago: executing program 2 (id=763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x2404c861) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() socket$nl_audit(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000b18000/0x3000)=nil, 0x3000, 0x3, 0x810, r2, 0x6d696000) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m42.68131214s ago: executing program 2 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) close_range(r1, 0xffffffffffffffff, 0x0) 1m42.541274512s ago: executing program 2 (id=768): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x44481) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xfec8) recvmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3b, 0x100, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.999778592s ago: executing program 0 (id=1326): open(&(0x7f0000000280)='.\x00', 0x0, 0x10f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c00000000000191aa9d9ee66741d414aa05009078e00000e0400000000000000000040000ac1414aa000000008303000703004424000300000000000000000000000000000000ac1414aa00000000ac1414bb0000"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000900020073797a300000000005000400000000000500011a0600000016000300686173683a6e65742c706f72742c6e6574000000050005000200003bb863007c5c6370f8b7a7e4f8bf98c06bb27b5e7967b0a31d8008e67bb82c94f39d31298345116ce17fcf4473f011ddaec64438225e3985784551e4d11f2e45bf36133e5070b5d1f9771228e281258cf96c5b4efae1ae3255a6d202b9b9c70b00"/189], 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000014000200fc000000000000000000000000000000140006006272696467655f736c6176655f31000014000300fe88000000000000000000000000000129c42e74ab50cdb1388217734e96ab39b03d786b1197aa48ccf30b80a9357c742323f0dd2daec038bd82d3ced6d2b34e909701a841d94a3ee97928053ea27dbe35cefdb1465766f186"], 0x50}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000480)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') pwrite64(r7, &(0x7f0000000200)="8c", 0xfdef, 0xe00001) 3.250325971s ago: executing program 1 (id=1332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a3200000000"], 0x80}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r4}, 0x38) 3.151155983s ago: executing program 0 (id=1333): r0 = socket(0xf, 0x2, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9d8545e2b911fec5e3c6c2586b082fa053548f286583b92085d109ef63889502", "647583f7ec3c4d3ace37fe8286b062147d7db834af737c13b9ca355879e950d7", "7df896d933bf7ac2e5a8c5af153f5859dffaa3478171f4dca98c104ca75f0153", "d1037ed6d923b6864ccd92bff98136350509b64714b4462e66219c0fd26a703b", "1f78d1e5eba11aa01a791f70a3dcbe66ffe521f4393ee7730822f6ddc414840e", "616dcceabe6ecb344b79b7d2"}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) epoll_create1(0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) getpeername$packet(r4, 0x0, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x64, r6, 0x601, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) open_by_handle_at(r5, &(0x7f0000000040)=@ceph_nfs_fh={0x8}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) 2.939298503s ago: executing program 1 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) timer_create(0x7, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}}, &(0x7f0000000280)) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=r3], 0x44}}, 0x44005) 2.796486573s ago: executing program 3 (id=1335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000b00)={@loopback, @broadcast, @multicast1}, 0xc) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES16=r0, @ANYBLOB="c35f169263f4dfca72fdd54deaa6e943a6e7fca558cb9c61ccad4e458d6bb1d761bfb7b36422c043843bfdd9cb1322fa280bdf304d464e54c324832c2ec69d7967cc080a9f470b00d7581914ed4b339428029727dd00a1c94155b8eb57ca2ecce1619055523de0c5deb72a9cae2a84325425be9388bc8525f4ed751a20e4ea798721a5da5c6affa8e60da3c51f6201e18d9cbdce793f32a6c1a48f03487c77a1091c42eff5124dd3e8bfedc5ed4478a2281cf6d4bd55928029c25a7ba818b67ace4b986d0b22138ac604a89da83b", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x22) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x4, @mcast2, 0xe8}, 0x12) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x401}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="740000000208010100000000000000000a00000005000300840000000900010073797a30000000000603400000020008000840000000800800094000000005080003400000000a0800014000000006080009400000008108000440000034540800064000"/116], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @remote, 0x10024}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r6, @ANYBLOB="010000000000000000000100000030000180060005004e23000014000400fe8000000000000000000000000000bb080003000a0101020800060001000000080003000300000008000300030000000800030006000000", @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="7cb29affd06b08255eb2d9ce3711be0605529547ffe9f39c09b83051fba2bab0cd05f6cf4e7609e49113cc2b7ebece3f1b268d929fe3b6f76e8dd530f457c8be204b63b2759e0722bee1721977667e570d5dc566a992fb86d51e0a7dd854737d19235570ad0e5768c37c84fb2e3b8bc1fbcd0d08ab95cd4c50f4653389e1452ea3856cf685", @ANYRESOCT=r4, @ANYBLOB="f9d37834628007354b874e74cfd91720abbcc870656be77ffdfb8e13155e31512fabd65b9ef02adafd89581ab09409a8e1408b30392ad8175de5f243bf1a2df1583bb9c57a78eb0e734bb952de92f634f3d639f2f0fd332dfb6fae55b1b4ccff4216cef15359ae674022d907e3a9cdb16ef0b2e34d3769c2b55b0835d663ddec7bb2747a539cfe6ddbf408a9b44e30be83b53ccdba61ed516501afb236192655855bfba6a34c7d4e9cc19fc53f5414f4bedfb3e61a", @ANYBLOB="e40f7d458e2b0c4b01be975f45b59fc4c032ce", @ANYRESDEC, @ANYRES8=r2], 0x14}, 0x1, 0xfcffffff00000000, 0x0, 0x4000884}, 0x48000) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001400)=ANY=[@ANYRESHEX=r5, @ANYRES64, @ANYBLOB='\x00\x00\x00', @ANYRES8=r4, @ANYRES64], 0x44}}, 0x20000090) 2.794304622s ago: executing program 1 (id=1342): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000340)}, 0x4080) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x400) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000380)=0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba800000", 0x2c}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="04000000fcffffff00"/28], 0x50) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue1\x00', 0x2}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x9]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000002c0)={0x81, 0x6, 0xfffffffe, 0x0, 0x0, 0x4}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x20) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000540)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) r7 = socket$isdn(0x22, 0x2, 0x25) r8 = socket$isdn(0x22, 0x2, 0x22) dup3(r7, r8, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000001380)={{r4}, "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"}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2.750916276s ago: executing program 1 (id=1336): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) userfaultfd(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.23158374s ago: executing program 0 (id=1337): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 1.941864872s ago: executing program 0 (id=1338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x80043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x1, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be00050000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 1.941226461s ago: executing program 1 (id=1339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000b00)={@loopback, @broadcast, @multicast1}, 0xc) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES16=r0, @ANYBLOB="c35f169263f4dfca72fdd54deaa6e943a6e7fca558cb9c61ccad4e458d6bb1d761bfb7b36422c043843bfdd9cb1322fa280bdf304d464e54c324832c2ec69d7967cc080a9f470b00d7581914ed4b339428029727dd00a1c94155b8eb57ca2ecce1619055523de0c5deb72a9cae2a84325425be9388bc8525f4ed751a20e4ea798721a5da5c6affa8e60da3c51f6201e18d9cbdce793f32a6c1a48f03487c77a1091c42eff5124dd3e8bfedc5ed4478a2281cf6d4bd55928029c25a7ba818b67ace4b986d0b22138ac604a89da83b", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x22) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x4, @mcast2, 0xe8}, 0x12) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x401}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="740000000208010100000000000000000a00000005000300840000000900010073797a30000000000603400000020008000840000000800800094000000005080003400000000a0800014000000006080009400000008108000440000034540800064000"/116], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @remote, 0x10024}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYBLOB="010000000000000000000100000030000180060005004e23000014000400fe8000000000000000000000000000bb080003000a0101020800060001000000080003000300000008000300030000000800030006000000", @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r6, @ANYBLOB="7cb29affd06b08255eb2d9ce3711be0605529547ffe9f39c09b83051fba2bab0cd05f6cf4e7609e49113cc2b7ebece3f1b268d929fe3b6f76e8dd530f457c8be204b63b2759e0722bee1721977667e570d5dc566a992fb86d51e0a7dd854737d19235570ad0e5768c37c84fb2e3b8bc1fbcd0d08ab95cd4c50f4653389e1452ea3856cf685", @ANYRESOCT=r4, @ANYBLOB="f9d37834628007354b874e74cfd91720abbcc870656be77ffdfb8e13155e31512fabd65b9ef02adafd89581ab09409a8e1408b30392ad8175de5f243bf1a2df1583bb9c57a78eb0e734bb952de92f634f3d639f2f0fd332dfb6fae55b1b4ccff4216cef15359ae674022d907e3a9cdb16ef0b2e34d3769c2b55b0835d663ddec7bb2747a539cfe6ddbf408a9b44e30be83b53ccdba61ed516501afb236192655855bfba6a34c7d4e9cc19fc53f5414f4bedfb3e61a", @ANYBLOB="e40f7d458e2b0c4b01be975f45b59fc4c032ce", @ANYRESDEC, @ANYRES8=r2], 0x14}, 0x1, 0xfcffffff00000000, 0x0, 0x4000884}, 0x48000) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001400)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYBLOB='\x00\x00\x00', @ANYRES8=r4, @ANYRES64=r6], 0x44}}, 0x20000090) 1.53687477s ago: executing program 3 (id=1340): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x50}, 0x1, 0x400000000000000}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2302000000000000000011f0e39d651c629f30c3c8a1bd38c8acf11d"], 0x28}}, 0x0) 1.458631562s ago: executing program 3 (id=1341): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0xffffffffffffffe1) 1.458271952s ago: executing program 3 (id=1343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x80) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000d19800000003000000000000000000000000000040000000000000000000000000000000000008"], 0x78) r2 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0xd8c2, 0x2000, 0x1, 0x8, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'syz_tun\x00', 0x600}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x10, 0x800) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) read$FUSE(r7, &(0x7f0000001a00)={0x2020}, 0x2020) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f0000000380)="36d2d8f2438395ff1f965a00c4c1185c840561ee00007b7bc4816a512425160000006f6aa1c463f962d60064660fd054060aa89ef3ae7864640f2a6cda00c412c12e1129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) splice(r7, 0x0, r9, 0x0, 0x81, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f80000000000000019010000100000000e60ff463cf87a199c591c93fd4d503b099db590a2b7dc8914b2ba3ed069b38a6cf88b8eb4c4c92505afff841f35d511835b5ce018a6bbc39db4ce3f01a3cff957248132208030cea9f26f5d4215b6a25a7e7a0ce06c530b117748ac26d45ac48ffad4a5461a055a31b3c08a03275351c0ec9acc6e82596ce596860e90f279d9003356ec80cae1a416f285ef6ce62cc47c5cd5aceb8cd12e50f9ea358bf2330bc4ea5bb9dbfa6045917b6dcc5b5169ed3601d7f0eb2194065e620fc6eeb02587010c87b07f6489c55f3182493590f32049b2bb91088d7d48667bdee57c01ae9624000000000000006800000000000000170100000100000016eacf51099c253841426fa44acd1a363e6ece37f7516f48ef8a0a212eb8bf6592e7c44f8ab484b7bb9e60d990b202059727e4bf1fc193affb71284b07cc8730cd9d30fde287ddd4eabccbebc89ac701f600000000000000780000000000000029000000070000005f1e7ceb7dd125c48c19da6999023c7204301c32eb3b7ee07f0a6cc0864045c4e4aacf67e7bbf9c9bccf84ebdee9ad598e13e95b051249c0c228e90eec4600dc113c1bed83e5782e25895db8e14463af090792b99ac4ddfb672ee2274b30011f180000000000000000010000000000000600000001000000dfc55e8fce5afd2c021b9c28566c9479c87d7884f0c529cf5a8abfa79dbcfdca3dbdbfd02976831a84bbd514e8a2c34e0207866260fadf99c57a2dd183606511b27c9f10e55f52a2c88884388e64904872042a449559a02b6a8c04ef7d1f5ab8d6b74e78543cfe29774aaead2583a2ff1846830667b560c9826b18c44a7d9ab817b50caf8dec20d28b3d14f094a834200379457c70b85250ce82575d8b302c677effc62d819e57989688d6edb9c1da69167337b8cd15bb0da6479df6bcb1e9bef72d7fcbd479a974f46d97bb7de9f1a5956f39458e7234cfacf8b9e188c165f8e26610c833fc916ce9000000000000002000000000000000020100008000000089223b88a6b64604a700000000000000c8000000000000001301000001000000f85c3cdd5699e7b22336e65f0d52c9b1cf70718f0a74707d45970aa3298fb919947d14035549d5b5c04a7394f75ac6f1e21c3cf43fde56f59a9ddfb2ceffe97d7700d080e7a926ea94fe7d15b5d07311b1f415bd29f1c9bd8639b2af4dd9206a090a5dca7c72ddc68c93a28451953c7c296dc4aaedfeb94a27cf86bce1e7570d22995c3e2a6eb1755632044d7fed1daf83eb3fef4aa23ecb47e896525a203e65591446eee14c1b3f928c1a9a6b1c1878ce00000000000000000100000000000011000000ff7f00008a7e5d4c6904768bfcd141817749d4ba3f5c703012123412fc7beb86e3e658565e10a2722751787ceabbbc3ae1ef4ba4d9024fd2c2a0aca946d949f38c948ffc0ee6fc0be851359a42b6c826b2c26381cc2b4d0b876f26385cab3173e65ed06efa99ca8de0ac8c7d8e5ae8ab6a21675b0bd31dc99e84a7bcef0db2b1277855bb428ac810fa71dc91e914bed10939cf91935d784bd1fefd8303464e400092f6de3348f802771ee518b4b1705b43377dec0b98f093808d774e3847f1ae2e56f087581c9fdd234c5d6f672b8ace8734986f5d8767f282ecff06b2f3ea03bac24cbf84176245dd8b6b59d6000000000000007800000000000000110100000f000000152e19b3b19f1edf83407b5746e7fe4015029d14a6972dea398ad702c910c1d52aac69d83385d9e1e86563029553d977b70f4ed755253d23117fe90f04c1a876fbbc58611810bb1de77eae52f1e3d005a4755386298db2d08592c52907d971460f000000000000001007"], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) 1.119604196s ago: executing program 0 (id=1344): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002840)=@newtfilter={0x1820, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_route={{0xa}, {0x17f0, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x58}, @TCA_ROUTE4_ACT={0xef4, 0x6, [@m_skbmod={0x64, 0x11, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x2a, 0x6, "6dc9932de349e9d1ce8f8f8e4a7fd4478a8159a4d7bcddb02660a0d60ea2c78a7283c756db98"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0xd30, 0x6, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x6, 0x9c, 0x1, 0x9, 0xffffff95, 0x6, 0x8, 0x4, 0x1ff, 0x400, 0x3, 0x1ff, 0x6, 0xea, 0x26, 0x6, 0x7fffffff, 0x8, 0x0, 0x3, 0x529, 0x838, 0x4, 0x0, 0x6, 0x10001, 0xff, 0x5, 0x2, 0x3, 0xb13, 0x3, 0x6, 0x9, 0xc, 0x9, 0x3, 0x0, 0xfffffffb, 0x9, 0x7, 0x9, 0x8000, 0x3, 0x9, 0xe, 0x8, 0xfffffffc, 0x1, 0x0, 0x3, 0x8, 0xfffff468, 0x0, 0x8, 0x5e, 0x5, 0x2, 0x1, 0x957, 0x3, 0x1, 0x9, 0x101, 0xa, 0x4, 0xfffffffd, 0x61b, 0x1d1, 0x4, 0x2e4, 0x20000, 0x80, 0x7, 0xfffffffa, 0xa, 0x2, 0x97d, 0x7, 0x3, 0x2, 0x0, 0x0, 0x8, 0x2, 0x5, 0x2c2c, 0x1, 0x4, 0x800, 0x6, 0x2, 0x3, 0x7, 0x3, 0x227da1ea, 0x4, 0x6, 0x9, 0x9, 0x4, 0x8, 0xffffffff, 0x6, 0x4, 0x101, 0x3, 0x0, 0x6668, 0x1, 0x9, 0x5, 0x6, 0x2, 0x3, 0x7fffffff, 0x5, 0x80000001, 0x9, 0x2, 0x5, 0x80, 0x3, 0x3, 0x120c, 0xffffffc0, 0x5, 0xfffffff9, 0x8, 0x9, 0x0, 0x3, 0x7, 0x12f5, 0x1, 0x1, 0x8, 0x40004, 0x800, 0x401, 0x0, 0x7d02, 0xda99, 0x0, 0x2, 0x2, 0xf, 0xe4b, 0xb37396dd, 0x8, 0x5, 0x0, 0x8, 0x7, 0x2, 0x7, 0x0, 0x10000, 0x26, 0x7c, 0x0, 0x807, 0x1, 0x7, 0x4, 0xf, 0x9, 0xe, 0x6, 0xfffffff3, 0x8ab0, 0x7fff, 0x2, 0x4, 0x8, 0xfffffffc, 0x1ff, 0x800, 0x80, 0x8000, 0x7, 0xc5, 0xb3d, 0x9, 0xfefb, 0x0, 0x200, 0x10000, 0xfffffff3, 0x9, 0xf, 0x7f, 0x80000001, 0x0, 0x1, 0xffffffff, 0x5, 0x9, 0x9, 0x23, 0xa, 0x9a0, 0x2c, 0x0, 0xecb, 0x1, 0x8f, 0x8, 0xa, 0x3, 0xecc, 0x0, 0x0, 0x4, 0x7fffffff, 0x2, 0x40, 0x601c, 0x82, 0x3ff, 0x80, 0x1c00, 0x97, 0x9, 0x1d000, 0x3, 0x6, 0x8, 0xfffffff8, 0x7, 0xd, 0x3, 0x4, 0x8, 0x6, 0x2, 0x4, 0xb, 0x3, 0xa1, 0x8000, 0x2, 0x10001, 0x10000, 0x8c, 0x8, 0x2, 0xe4, 0x6, 0x8, 0xfffffffe, 0x9, 0x1a, 0xfffffff7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8cf}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xb58, 0x8, 0x6, 0x1, 0xfffffffd, 0x9, 0x393ecb34, 0x5, 0x8, 0xd5ee, 0x120000, 0x8, 0x10000, 0x1, 0x2, 0x9, 0x1, 0x6bf5, 0xfff, 0x9b91, 0x4, 0x80000001, 0xa, 0x9, 0x9e8, 0x7418, 0xffffffff, 0x5, 0x0, 0x1, 0x4bf9, 0x2, 0x9, 0x6, 0x1, 0x4, 0x80000000, 0xfff, 0xe, 0x4, 0xbbf, 0x9dd, 0x0, 0x7, 0x7, 0x58d25fd0, 0xfffffc00, 0x5, 0x50e2, 0x8, 0x8, 0x8001, 0x9, 0x4, 0x8, 0x10, 0x7f, 0x1, 0x3, 0x3, 0x0, 0xd7f9, 0xd, 0xffffff87, 0x5, 0x8, 0x36, 0x7ff, 0xfff, 0x5, 0x1, 0x6, 0x10000, 0x4, 0x40, 0xd, 0xa29a, 0xf3a, 0xfdb9, 0x40, 0x4b8, 0x2, 0x7, 0x0, 0x81, 0xa8, 0x400, 0x6, 0x2, 0x3, 0x0, 0x400, 0x2, 0xff, 0x6, 0x9c, 0x2, 0x8001, 0x7, 0x4, 0x3, 0x5, 0x1, 0x1000, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x2, 0x8, 0x388, 0x80000, 0x7, 0x5, 0x3, 0x3, 0x398, 0x48, 0x7, 0xddf1, 0xb3, 0x8001, 0xffffffff, 0x61, 0x7, 0x0, 0xffff8000, 0x80000001, 0x50915bee, 0x2, 0x20, 0x7, 0x3, 0x3, 0x8, 0x0, 0x19, 0x3, 0x3dae90ed, 0x0, 0x7, 0xb4, 0x0, 0x6, 0x473, 0x9, 0x4, 0x5, 0x4, 0x4, 0x8, 0xfbe, 0xb0, 0xf5b, 0x400, 0x7, 0x8, 0x5, 0x400, 0x3, 0x0, 0x3, 0x3, 0x226, 0x260, 0x2, 0xa, 0x7, 0x10001, 0x2, 0x9, 0x6, 0x8001, 0xcb, 0x8, 0x7, 0xfffff000, 0x9, 0x8, 0x6, 0x4, 0x100, 0xc, 0x6, 0x6, 0x9, 0x2393, 0x918, 0x100, 0xffffffff, 0x4d, 0x40, 0x4, 0x7, 0x6, 0x1ff, 0x4, 0x101, 0x4000008, 0xd, 0xfff, 0x8, 0x1, 0xffffd29a, 0x4, 0xbd3, 0xffffffff, 0x400, 0xd1ca, 0x7, 0x8, 0xb, 0x8000, 0x101, 0x9, 0x40, 0x1000, 0x10, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000000, 0x1, 0x6, 0x7fffffff, 0x7fff, 0x7fffffff, 0x5, 0x3, 0x2, 0x10, 0x8, 0xfffffff7, 0xe, 0x10000, 0x9, 0x3, 0x8, 0x8, 0xfffffff7, 0x1c, 0xfffffff1, 0x7e, 0x40, 0x100, 0x5, 0x3, 0x2, 0x1000, 0x7fffffff, 0x95, 0x1, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x2, 0x80000000, 0xa, 0x7fff, 0xdf, 0x9, 0x2, 0x1, 0x1, 0xf, 0x2, 0x3, 0x9, 0x1, 0x2, 0x8, 0x8, 0x8, 0x58e, 0x3, 0x8001, 0xfffffff9, 0x0, 0x3, 0x1, 0x4, 0x200, 0x2, 0x8001, 0x8, 0x9, 0x1000, 0xb, 0x0, 0x8, 0x4, 0x5, 0x3, 0x8000, 0x10000, 0x249, 0x6, 0x10000, 0x800, 0x101, 0x2, 0x101, 0x2, 0x1b60, 0x8, 0x3, 0xff, 0x5, 0xb9, 0x101, 0x10, 0xffff, 0x2, 0x114, 0x7, 0x2, 0x7, 0x9, 0x62, 0xfff, 0x7, 0x3, 0x6, 0x1, 0x6, 0x1, 0x5, 0x101, 0x3, 0x0, 0x1, 0x8001, 0x100, 0xffffffff, 0x8, 0x6, 0x66, 0x66e8, 0x5, 0x2, 0xf, 0x7, 0xfffffc01, 0x4, 0x3, 0x5, 0xa, 0x3, 0x2, 0x1c8, 0x3ff, 0x10000, 0x8b, 0xfffffffb, 0x6, 0xb, 0x4, 0x3, 0xfffffff9, 0xb, 0x9, 0x1, 0x800, 0xfffffffd, 0x7, 0x8b, 0x3, 0x2, 0x7, 0x1, 0x9, 0x5, 0x8, 0xf, 0xfffffff7, 0x0, 0x3, 0x101, 0x0, 0x0, 0x60, 0xffffffff, 0x0, 0x3, 0x6, 0x7, 0x0, 0xffff, 0xd, 0x1d90000, 0xc7cb, 0x2, 0x4, 0x8, 0x8, 0x3, 0x2, 0x2, 0x9, 0x7, 0x80, 0x1, 0x1, 0x3, 0xfffffff7, 0x8, 0xf9b, 0x0, 0x4, 0x1, 0x12b, 0x5, 0x7, 0x7, 0x2, 0x1, 0xff, 0xfffffffd, 0xfffff12d, 0x4, 0xffffff7f, 0x4, 0xf, 0x3ff, 0x5, 0x1, 0x8, 0x4, 0x8, 0x6, 0x4, 0x6, 0x5, 0xfffffffd, 0x6, 0xc, 0x1, 0x486, 0x9, 0x7fff, 0x5, 0x9, 0x6, 0x5, 0x5, 0x0, 0xf, 0x9, 0x6, 0x7fffffff, 0x0, 0x6, 0x80, 0x8, 0x7ff, 0xfffffa76, 0x101, 0xffff, 0x2, 0xf741, 0x1, 0xc365, 0x5, 0xfe, 0xfffff942, 0x9, 0x10001, 0x0, 0x6, 0x9e9, 0x0, 0x4, 0x80000b4, 0x2, 0x733d, 0x1, 0xcb1, 0x81, 0x3ff, 0x8, 0x7, 0x3, 0xe06, 0x3, 0xff, 0x7, 0x80000001, 0x3, 0x9, 0x9a0c, 0x6, 0xb2bf, 0x7f, 0x6, 0x661, 0x6, 0x6, 0x0, 0x1, 0x2, 0x9, 0x0, 0x7, 0x1, 0x4, 0x5, 0x3a2d1a16, 0x4, 0x1]}]]}, {0xd6, 0x6, "eb62845b3d09edad029abc69fd6dc6929bd17330d6d3a5aa7f6753624fb165a2f733c211d1e7fc95eb639c9daa6bcd927320ad4fe5f293ca83423af1a5745dcc58a077842c0fd08503865e5cfc6be0b14474efbee005cdcb27a46854767c8df2c951cc1a4f98a1262767ce5a2928a2a9d4f32455e02003be37b915e00bd22e450653a68506d79ab465d9348f48bf205271045e4cf083bdd0c57f0d71731ff5a2f30ff093c22493b3a8d61867ee9024371ab94dc43d8d73c755b8bd14bc62df2d3227fe6dc8a998d10bd8aa5830b355ac5ad7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x15c, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x7, 0x1, 0x3, 0x4fd}, @empty, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x401, 0x3, 0x3, 0x1}, @empty, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0xe2, 0x6, "f1f645204aa987f52687a41c28949bb8bdc7e425681ec381f852eb9f9531596b5ae898ae119467100d4558cd061ea0fe2b060fcdb5bf10317e2a386c013a2a993ee2dae45a305efd3d999632bf675be26f41b2cd0a24c970e7e589e827ac367536ffa33005c9a59507816c1d5ac11297bc403c027f27dc00b40f7a3d1789102ef5496f2cd8b334834fc0cb3196d4fbf79b71c8474a31281de0f42e39fe564d00faa2c28ac36f9f84fbe623e2991d1fbd831a8c871495f470543ee0814009157e6e6197b9579d8497399d2ce2ca7ba85dd1c218056820bcb4e611a6608d76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x4b0, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x8, 0x8, 0x80000001, {0x0, 0x2, 0xff6f, 0x3, 0xe, 0x800}, {0x8, 0x0, 0xfffe, 0x81, 0x1, 0x3}, 0xc3c7f57, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffe01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x8, 0x9, 0x1000, 0x5, 0x9, 0x5, 0xe, 0x52f, 0xffffffff, 0x5, 0x7, 0x5, 0x80000000, 0xfffffffe, 0xff, 0x3, 0x2, 0x2, 0x1ff, 0xfff, 0x8, 0x10001, 0x9, 0xa4f, 0x46201d95, 0x3, 0x7, 0x8, 0x2, 0x1, 0x2, 0x40, 0xfffffff9, 0x30000000, 0x80, 0x5, 0x4464, 0xffff, 0xfffffdaf, 0x5, 0x8, 0x400, 0xffff80bc, 0x2, 0x10000, 0x5, 0xcd, 0x80000001, 0xf, 0x1, 0x6108, 0xffff0001, 0x8b5, 0x2, 0x9, 0x10000000, 0x80, 0x10000, 0x1ff, 0x6, 0x6, 0x6, 0x3, 0xfffffff9, 0x8, 0xfffffffa, 0x5, 0x7, 0xfe, 0x6, 0x7, 0xfffff801, 0x7, 0x3, 0x2010, 0x1, 0xfffffffc, 0x2, 0x1, 0x1000, 0x2, 0x2, 0x7fff, 0xc30, 0x4, 0xc, 0x9, 0x400, 0xb8c7aaf, 0x7, 0x9, 0xb, 0xfc0d, 0x19, 0xffffffca, 0xfffffff2, 0x30f53bbc, 0x38000, 0x2, 0x5, 0x3, 0x80, 0x8001, 0x3, 0xfffffffb, 0x7, 0x19, 0xae, 0x6, 0xfffffffd, 0x2864, 0x0, 0x9, 0x2b20, 0x2, 0x0, 0x101, 0x200, 0x1, 0xfffffe05, 0x6, 0xb4c, 0x4, 0x80000000, 0x5, 0x7184f645, 0x7, 0xb, 0x3, 0xe, 0x100, 0x80000001, 0xb, 0xa16f, 0x6, 0x4, 0x36, 0x9, 0x0, 0x4f, 0x0, 0x5, 0x0, 0x8001, 0x7, 0x3bd20dc0, 0x8, 0xc, 0x200, 0x0, 0xd, 0x6, 0x200, 0x9, 0x7, 0x7, 0x4, 0x1c00000, 0xfffffff7, 0xb, 0x7, 0x0, 0x5, 0x400, 0x2, 0x7, 0x3, 0x80000000, 0xfffffffe, 0x3, 0x8000, 0x7fffffff, 0x8, 0x401, 0x7, 0xbd, 0xf, 0x8, 0x9cc0fd3, 0x8, 0x0, 0x7fffffff, 0x7, 0x8, 0x1, 0x6, 0x10000, 0x2, 0x5, 0xba63, 0xffffffff, 0x1, 0x0, 0x4, 0xc, 0x5, 0x3ff, 0x4, 0x9, 0x1, 0x4, 0x400, 0x93271726, 0xb, 0x0, 0x4, 0x8, 0x3, 0x0, 0x2, 0xe13d, 0x5, 0x5, 0x8, 0x3, 0x5, 0x8, 0xe, 0x80, 0x1, 0x8, 0x9, 0x7fffffff, 0x19d, 0x6, 0x4, 0x5, 0x1, 0x1, 0xffff, 0x1000, 0x5, 0xfffffffb, 0x1f, 0x5, 0xfffffff8, 0x80000001, 0x0, 0xffff3e0b, 0xffffffff, 0x6fc65b05, 0xfffffffe, 0x66911596, 0xe0d, 0x2, 0xdd7c, 0x0, 0x6ad5, 0x8, 0x5, 0x8001, 0x400000, 0x1, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x0, 0x8001, 0x0, {0x7, 0x1, 0x4, 0x9, 0x3, 0xff}, {0x3, 0x2, 0x3, 0x2, 0x0, 0x6}, 0x2, 0x1, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xbb}, @TCA_ROUTE4_ACT={0x418, 0x6, [@m_skbmod={0xa8, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="cd18ad156835"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb, 0x24, 0x2, 0x3f771fbd, 0x4}, 0x1}}]}, {0x4c, 0x6, "6d329e5ee4b06ea828004afa80d901d94bbee2b0ddc726c487e329ce153437a513aa18a2b45b1031b0a06f482ccfe68946eaf2580d9a597e9ff5e9e89bd75600e7c6bf3f42ac2731"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x90c}]}, {0xe8, 0x6, "1bd1ebd113fef75e5dec03a016cf698116a50c7270e7f2fc84cabb45298f9ecfd39307762d8c2bde15d96f4a416be52669d7873b159f3abed8cb839745f72320e3da9f321f107387e58cf4063de862e3d43b288d85f9109c5428ebe2bee73dfd8db3b1c5003c9d7601431ebe235353c532cae18bab4d0d2fd21cb2d7b9275d8034272bc751fae82553134c02c20b3cc9f0c3f968963d37c2f4f22d77c9a0d6a571d35f2ff3fa854eadd38172987dd8873c492e464954cfcfd90c96fcaad07d36dfe0fbd670c6e7572dc0e01c1557a4f3c57272cb63936b7491e2046c62aa9cc430646310"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x12c, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x4, 0xfffffff3, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0x5, 0x2, 0x5}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x57b8, 0x6fa79841, 0xb, 0x5, 0xb}, 0x7f61b8af6479d454, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xb3c6, 0x5, 0xfffffffb, 0x9}, 0x0, r6}}]}, {0x7f, 0x6, "beb4f7084e4eb4b688a3331b9accae8dec4d93bb4f2b445b798c5729ebf4924c2720a8ea141631cc33e2ce7f8c87fac7da0f66f8021666586da8d6c1654a31f05f18fc124c9cda33f72714432aedd932f4104cb42f17ca99a2f272ce800c530dc0a8bc83c08b766c4bbbfec56c260301f3f03de0d2173adeffcd5a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x124, 0x16, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa91, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7fffffff, 0x8, 0x9, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x7, 0xfffffff9, 0xb09}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x9, 0x4, 0x8, 0xefd2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a82, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x5ff, 0x8}}]}, {0x8c, 0x6, "1d20f91827a340cef86a99e0a7bd594dc4d614b817dab38fca06558237ff1f3f7e06aa299ce90afd299897e550ecd4428262ad6954d277485b4193ae540bdfe132c058597a0eea5a6e7a63f6cdd56115aaee6daae5bfd1f23053639eaab646950dcefd3f5ff5162cf6342e156aa03712235623b2c85adcf24c9c6dde2def68c9decf8e4275a6bffb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8}]}}]}, 0x1820}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 580.147361ms ago: executing program 3 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) 579.923666ms ago: executing program 3 (id=1346): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/156, 0x94) (fail_nth: 1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) 469.498235ms ago: executing program 1 (id=1347): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) userfaultfd(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 0s ago: executing program 0 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0xf000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0x2}}}}]}, 0x88}}, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000004000000040000000600000000000000", @ANYRES32=r7, @ANYBLOB="ad6a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r8, @ANYBLOB="0899310d35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close_range(r8, r4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000d86dd6000000400282c00fe8000000000000084000000000000bb"], 0x0) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) getsockopt$netlink(r9, 0x10e, 0x5, &(0x7f0000000140)=""/21, &(0x7f0000000180)=0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsopen(0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 185.362316][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.364364][ T8857] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 185.366436][ T8857] [ 185.486903][ T40] audit: type=1400 audit(1729701878.756:907): avc: denied { bind } for pid=8865 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.501293][ T8923] ip6gretap0 speed is unknown, defaulting to 1000 [ 188.815907][ T8935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7962 sclass=netlink_route_socket pid=8935 comm=syz.0.979 [ 189.833450][ T8956] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.794745][ T8981] FAULT_INJECTION: forcing a failure. [ 190.794745][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 190.798726][ T8981] CPU: 2 UID: 0 PID: 8981 Comm: syz.0.993 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 190.801535][ T8981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.804391][ T8981] Call Trace: [ 190.805418][ T8981] [ 190.806293][ T8981] dump_stack_lvl+0x16c/0x1f0 [ 190.807587][ T8981] should_fail_ex+0x497/0x5b0 [ 190.808930][ T8981] ? fs_reclaim_acquire+0xae/0x150 [ 190.810487][ T8981] should_failslab+0xc2/0x120 [ 190.812213][ T8981] __kmalloc_noprof+0xcb/0x400 [ 190.813978][ T8981] tomoyo_encode2+0x100/0x3e0 [ 190.815243][ T8981] tomoyo_encode+0x29/0x50 [ 190.816545][ T8981] tomoyo_realpath_from_path+0x19d/0x720 [ 190.818060][ T8981] tomoyo_path_perm+0x273/0x450 [ 190.819435][ T8981] ? tomoyo_path_perm+0x25f/0x450 [ 190.820863][ T8981] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 190.822376][ T8981] ? lookup_dcache+0x62/0x130 [ 190.823641][ T8981] ? lookup_one+0x121/0x1c0 [ 190.824870][ T8981] security_inode_getattr+0x116/0x290 [ 190.826390][ T8981] vfs_getattr+0x36/0xb0 [ 190.827568][ T8981] ovl_cache_update+0x796/0xa50 [ 190.828893][ T8981] ? __pfx_ovl_cache_update+0x10/0x10 [ 190.830505][ T8981] ? fput+0x148/0x390 [ 190.831992][ T8981] ? __pfx_filldir+0x10/0x10 [ 190.833696][ T8981] ? filldir+0x268/0x5e0 [ 190.835263][ T8981] ovl_iterate+0x406/0xe40 [ 190.836879][ T8981] ? __pfx_ovl_iterate+0x10/0x10 [ 190.838214][ T8981] wrap_directory_iterator+0x9f/0xe0 [ 190.839660][ T8981] iterate_dir+0x52f/0xb40 [ 190.840905][ T8981] __x64_sys_getdents+0x14c/0x2d0 [ 190.842320][ T8981] ? __pfx___x64_sys_getdents+0x10/0x10 [ 190.843793][ T8981] ? __pfx_filldir+0x10/0x10 [ 190.845047][ T8981] do_syscall_64+0xcd/0x250 [ 190.846304][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.847971][ T8981] RIP: 0033:0x7f4e89d7dff9 [ 190.849167][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.854491][ T8981] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 190.856726][ T8981] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 190.859247][ T8981] RDX: 000000000000004c RSI: 0000000020000200 RDI: 0000000000000007 [ 190.861405][ T8981] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 190.863553][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.865676][ T8981] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 190.868021][ T8981] [ 190.870581][ T8981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.874223][ T8981] overlayfs: failed to get inode (-116) [ 190.876152][ T8981] overlayfs: failed to look up (bus) for ino (-116) [ 191.182347][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 191.182430][ T40] audit: type=1326 audit(1729701884.466:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.194741][ T40] audit: type=1326 audit(1729701884.466:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.207636][ T40] audit: type=1326 audit(1729701884.466:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.213359][ T40] audit: type=1326 audit(1729701884.466:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.226595][ T40] audit: type=1326 audit(1729701884.466:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.237754][ T40] audit: type=1326 audit(1729701884.466:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.243730][ T40] audit: type=1326 audit(1729701884.466:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.258089][ T40] audit: type=1326 audit(1729701884.466:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.263698][ T40] audit: type=1326 audit(1729701884.466:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.277975][ T40] audit: type=1326 audit(1729701884.466:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d99d7dff9 code=0x7ffc0000 [ 191.881147][ T9007] netlink: 'syz.1.1000': attribute type 9 has an invalid length. [ 191.883272][ T9007] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1000'. [ 192.264867][ T9023] netlink: 'syz.0.1005': attribute type 2 has an invalid length. [ 192.266943][ T9023] netlink: 'syz.0.1005': attribute type 2 has an invalid length. [ 192.725167][ T5336] buffer_io_error: 38 callbacks suppressed [ 192.725179][ T5336] Buffer I/O error on dev loop7, logical block 4095, async page read [ 192.886052][ T9038] vivid-002: ================= START STATUS ================= [ 192.888579][ T9038] vivid-002: Radio HW Seek Mode: Bounded [ 192.890347][ T9038] vivid-002: Radio Programmable HW Seek: false [ 192.892040][ T9038] vivid-002: RDS Rx I/O Mode: Block I/O [ 192.893559][ T9038] vivid-002: Generate RBDS Instead of RDS: false [ 192.896244][ T9038] vivid-002: RDS Reception: true [ 192.898097][ T9038] vivid-002: RDS Program Type: 0 inactive [ 192.900292][ T9038] vivid-002: RDS PS Name: inactive [ 192.901965][ T9038] vivid-002: RDS Radio Text: inactive [ 192.903433][ T9038] vivid-002: RDS Traffic Announcement: false inactive [ 192.905363][ T9038] vivid-002: RDS Traffic Program: false inactive [ 192.907082][ T9038] vivid-002: RDS Music: false inactive [ 192.909329][ T9038] vivid-002: ================== END STATUS ================== [ 192.962215][ T9048] random: crng reseeded on system resumption [ 193.448690][ T9056] FAULT_INJECTION: forcing a failure. [ 193.448690][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.452209][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.0.1014 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 193.454993][ T9056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.457787][ T9056] Call Trace: [ 193.458713][ T9056] [ 193.459501][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 193.460731][ T9056] should_fail_ex+0x497/0x5b0 [ 193.461995][ T9056] _copy_from_iter+0x2a1/0x1540 [ 193.463317][ T9056] ? __pfx__copy_from_iter+0x10/0x10 [ 193.464830][ T9056] ? __virt_addr_valid+0x1a4/0x590 [ 193.466252][ T9056] ? __virt_addr_valid+0x5e/0x590 [ 193.467600][ T9056] ? __phys_addr_symbol+0x30/0x80 [ 193.469038][ T9056] ? __check_object_size+0x488/0x710 [ 193.470507][ T9056] netlink_sendmsg+0x813/0xd70 [ 193.471830][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.473295][ T9056] ? __import_iovec+0x1fd/0x6e0 [ 193.474692][ T9056] ____sys_sendmsg+0xaaf/0xc90 [ 193.476052][ T9056] ? copy_msghdr_from_user+0x10b/0x160 [ 193.477604][ T9056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.479038][ T9056] ? __pfx___lock_acquire+0x10/0x10 [ 193.480399][ T9056] ___sys_sendmsg+0x135/0x1e0 [ 193.481632][ T9056] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.483018][ T9056] ? lock_acquire+0x2f/0xb0 [ 193.484214][ T9056] ? __fget_files+0x40/0x3f0 [ 193.485442][ T9056] ? fdget+0x176/0x210 [ 193.486522][ T9056] __sys_sendmsg+0x117/0x1f0 [ 193.487741][ T9056] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.489172][ T9056] ? __fget_files+0x244/0x3f0 [ 193.490448][ T9056] do_syscall_64+0xcd/0x250 [ 193.491656][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.493211][ T9056] RIP: 0033:0x7f4e89d7dff9 [ 193.494396][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.499414][ T9056] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.501524][ T9056] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 193.503582][ T9056] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 193.505650][ T9056] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 193.507725][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.509813][ T9056] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 193.511881][ T9056] [ 193.741965][ T9064] random: crng reseeded on system resumption [ 193.968312][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.970039][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.159192][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17016 sclass=netlink_route_socket pid=9071 comm=syz.1.1018 [ 194.305840][ T9084] random: crng reseeded on system resumption [ 194.565055][ T9089] random: crng reseeded on system resumption [ 194.866401][ T1424] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.868647][ T1424] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.875278][ T1424] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 194.900231][ T9093] overlayfs: failed to get inode (-116) [ 194.901916][ T9093] overlayfs: failed to look up (bus) for ino (-116) [ 195.046568][ T9102] netlink: 'syz.3.1025': attribute type 2 has an invalid length. [ 195.054216][ T9102] netlink: 'syz.3.1025': attribute type 2 has an invalid length. [ 195.923878][ T9116] No such timeout policy "syz1" [ 196.032446][ T9122] random: crng reseeded on system resumption [ 196.533748][ T9138] FAULT_INJECTION: forcing a failure. [ 196.533748][ T9138] name failslab, interval 1, probability 0, space 0, times 0 [ 196.538293][ T9138] CPU: 2 UID: 0 PID: 9138 Comm: syz.1.1039 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 196.541840][ T9138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.544601][ T9138] Call Trace: [ 196.545497][ T9138] [ 196.546411][ T9138] dump_stack_lvl+0x16c/0x1f0 [ 196.547638][ T9138] should_fail_ex+0x497/0x5b0 [ 196.548778][ T9138] ? fs_reclaim_acquire+0xae/0x150 [ 196.550101][ T9138] should_failslab+0xc2/0x120 [ 196.551317][ T9138] __kmalloc_cache_noprof+0x6b/0x300 [ 196.552823][ T9138] ? blocking_notifier_call_chain+0x53/0xa0 [ 196.554384][ T9138] ? cryptomgr_notify+0xa8/0xbc0 [ 196.555688][ T9138] cryptomgr_notify+0xa8/0xbc0 [ 196.556957][ T9138] notifier_call_chain+0xb9/0x410 [ 196.558330][ T9138] ? __pfx_cryptomgr_notify+0x10/0x10 [ 196.559743][ T9138] blocking_notifier_call_chain+0x69/0xa0 [ 196.561234][ T9138] crypto_alg_mod_lookup+0x2cf/0x4e0 [ 196.562620][ T9138] crypto_alloc_tfm_node+0xd3/0x260 [ 196.563977][ T9138] esp_init_authenc.constprop.0+0x1de/0xb80 [ 196.565553][ T9138] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 196.567263][ T9138] ? __pfx_lock_release+0x10/0x10 [ 196.568564][ T9138] ? xfrm_state_get_afinfo+0x49/0x2b0 [ 196.569990][ T9138] esp6_init_state+0x3f4/0x510 [ 196.571239][ T9138] __xfrm_init_state+0x836/0x1a90 [ 196.572567][ T9138] xfrm_add_sa+0x2b41/0x4de0 [ 196.573796][ T9138] ? cap_capable+0x1cf/0x240 [ 196.575009][ T9138] ? __pfx_xfrm_add_sa+0x10/0x10 [ 196.576303][ T9138] ? __nla_parse+0x40/0x60 [ 196.577481][ T9138] ? __pfx_xfrm_add_sa+0x10/0x10 [ 196.578785][ T9138] xfrm_user_rcv_msg+0x58c/0xb30 [ 196.580081][ T9138] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 196.581496][ T9138] ? hlock_class+0x4e/0x130 [ 196.582696][ T9138] ? __lock_acquire+0x163e/0x3ce0 [ 196.584014][ T9138] ? __mutex_trylock_common+0xea/0x250 [ 196.585415][ T9138] ? __pfx___mutex_trylock_common+0x10/0x10 [ 196.587013][ T9138] netlink_rcv_skb+0x16b/0x440 [ 196.588275][ T9138] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 196.589825][ T9138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.591211][ T9138] xfrm_netlink_rcv+0x71/0x90 [ 196.592475][ T9138] netlink_unicast+0x53c/0x7f0 [ 196.593756][ T9138] ? __pfx_netlink_unicast+0x10/0x10 [ 196.595146][ T9138] netlink_sendmsg+0x8b8/0xd70 [ 196.596422][ T9138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.597908][ T9138] ? __import_iovec+0x1fd/0x6e0 [ 196.599220][ T9138] ____sys_sendmsg+0xaaf/0xc90 [ 196.600510][ T9138] ? copy_msghdr_from_user+0x10b/0x160 [ 196.602196][ T9138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.603672][ T9138] ? __pfx___lock_acquire+0x10/0x10 [ 196.605028][ T9138] ___sys_sendmsg+0x135/0x1e0 [ 196.606346][ T9138] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.607716][ T9138] ? lock_acquire+0x2f/0xb0 [ 196.608934][ T9138] ? __fget_files+0x40/0x3f0 [ 196.610165][ T9138] ? fdget+0x176/0x210 [ 196.611253][ T9138] __sys_sendmsg+0x117/0x1f0 [ 196.612468][ T9138] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.614034][ T9138] ? __fget_files+0x244/0x3f0 [ 196.615312][ T9138] do_syscall_64+0xcd/0x250 [ 196.616525][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.618104][ T9138] RIP: 0033:0x7f7d99d7dff9 [ 196.619317][ T9138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.624365][ T9138] RSP: 002b:00007f7d9ab0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.626612][ T9138] RAX: ffffffffffffffda RBX: 00007f7d99f35f80 RCX: 00007f7d99d7dff9 [ 196.628715][ T9138] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 196.630803][ T9138] RBP: 00007f7d9ab0a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.632923][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.635051][ T9138] R13: 0000000000000000 R14: 00007f7d99f35f80 R15: 00007ffcfe43c098 [ 196.637165][ T9138] [ 196.678292][ T9144] fuse: Unknown parameter 'group_i00000000000000000000' [ 196.755056][ T9151] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1042'. [ 196.774234][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 196.774245][ T40] audit: type=1400 audit(1729701890.056:952): avc: denied { write } for pid=9148 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 196.946331][ T9156] syz.3.1043: attempt to access beyond end of device [ 196.946331][ T9156] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 196.950195][ T9156] syz.3.1043: attempt to access beyond end of device [ 196.950195][ T9156] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 196.954004][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.957524][ T9156] syz.3.1043: attempt to access beyond end of device [ 196.957524][ T9156] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 196.962230][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.968418][ T9156] syz.3.1043: attempt to access beyond end of device [ 196.968418][ T9156] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 196.969036][ T9154] nbd3: detected capacity change from 0 to 12 [ 196.972103][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.983926][ T9156] block nbd3: Send control failed (result -89) [ 196.986260][ T9156] block nbd3: Request send failed, requeueing [ 196.988969][ T9158] FAULT_INJECTION: forcing a failure. [ 196.988969][ T9158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.990143][ T4780] block nbd3: Receive control failed (result -32) [ 196.991829][ T5673] block nbd3: Dead connection, failed to find a fallback [ 196.992593][ T5673] block nbd3: shutting down sockets [ 196.993086][ T5673] blk_print_req_error: 38 callbacks suppressed [ 196.993096][ T5673] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.993255][ T26] I/O error, dev nbd3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.993282][ T5673] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.993374][ T9158] CPU: 0 UID: 0 PID: 9158 Comm: syz.0.1044 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 196.993394][ T9158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.993405][ T9158] Call Trace: [ 196.993411][ T9158] [ 196.993425][ T9158] dump_stack_lvl+0x16c/0x1f0 [ 196.993452][ T9158] should_fail_ex+0x497/0x5b0 [ 196.993470][ T9158] _copy_from_iter+0x2a1/0x1540 [ 196.993493][ T9158] ? __pfx__copy_from_iter+0x10/0x10 [ 196.993543][ T5673] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.993557][ T5673] Buffer I/O error on dev nbd3, logical block 1, async page read [ 196.993577][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 196.993609][ T5673] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.993650][ T5673] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.993760][ T5673] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.993778][ T5673] Buffer I/O error on dev nbd3, logical block 1, async page read [ 196.995841][ T5673] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.998168][ T9158] ? __virt_addr_valid+0x1a4/0x590 [ 196.998202][ T9158] ? __virt_addr_valid+0x5e/0x590 [ 196.998222][ T9158] ? __phys_addr_symbol+0x30/0x80 [ 196.998252][ T9158] ? __check_object_size+0x488/0x710 [ 196.998278][ T9158] netlink_sendmsg+0x813/0xd70 [ 196.998307][ T9158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.016355][ T5673] Buffer I/O error on dev nbd3, logical block 0, async page read [ 197.016460][ T9158] ? __import_iovec+0x1fd/0x6e0 [ 197.018234][ T5673] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.019311][ T9158] ____sys_sendmsg+0xaaf/0xc90 [ 197.020674][ T5673] Buffer I/O error on dev nbd3, logical block 1, async page read [ 197.022108][ T9158] ? copy_msghdr_from_user+0x10b/0x160 [ 197.024648][ T9156] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.026899][ T9158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.026933][ T9158] ? __pfx___lock_acquire+0x10/0x10 [ 197.026954][ T9158] ___sys_sendmsg+0x135/0x1e0 [ 197.026976][ T9158] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.027000][ T9158] ? lock_acquire+0x2f/0xb0 [ 197.033088][ T5673] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.033404][ T9158] ? __fget_files+0x40/0x3f0 [ 197.035773][ T5673] Buffer I/O error on dev nbd3, logical block 0, async page read [ 197.038495][ T9158] ? fdget+0x176/0x210 [ 197.038525][ T9158] __sys_sendmsg+0x117/0x1f0 [ 197.038546][ T9158] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.038562][ T9158] ? __fget_files+0x244/0x3f0 [ 197.041673][ T5673] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.043735][ T9158] do_syscall_64+0xcd/0x250 [ 197.045287][ T5673] Buffer I/O error on dev nbd3, logical block 1, async page read [ 197.046826][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.050821][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 197.051687][ T9158] RIP: 0033:0x7f4e89d7dff9 [ 197.053534][ T5673] Buffer I/O error on dev nbd3, logical block 0, async page read [ 197.055694][ T9158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.059858][ T5673] ldm_validate_partition_table(): Disk read failed. [ 197.060230][ T9158] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 [ 197.061790][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 197.064053][ T9158] ORIG_RAX: 000000000000002e [ 197.064063][ T9158] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 197.066241][ T5673] Dev nbd3: unable to read RDB block 0 [ 197.068540][ T9158] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 197.068554][ T9158] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.068565][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.068575][ T9158] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 197.068599][ T9158] [ 197.070649][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 197.072837][ T5673] nbd3: unable to read partition table [ 197.075834][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 197.077132][ T5673] nbd3: partition table beyond EOD, [ 197.077930][ T40] audit: type=1400 audit(1729701890.346:953): avc: denied { bind } for pid=9153 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.077953][ T40] audit: type=1400 audit(1729701890.346:954): avc: denied { name_bind } for pid=9153 comm="syz.3.1043" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 197.077970][ T40] audit: type=1400 audit(1729701890.346:955): avc: denied { node_bind } for pid=9153 comm="syz.3.1043" saddr=fc00:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 197.077988][ T40] audit: type=1400 audit(1729701890.356:956): avc: denied { connect } for pid=9153 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.078003][ T40] audit: type=1400 audit(1729701890.356:957): avc: denied { name_connect } for pid=9153 comm="syz.3.1043" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 197.084746][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 197.086148][ T5673] truncated [ 197.086702][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 197.173782][ T9156] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 197.179530][ T5673] ldm_validate_partition_table(): Disk read failed. [ 197.181773][ T5673] Dev nbd3: unable to read RDB block 0 [ 197.184089][ T5673] nbd3: unable to read partition table [ 197.185644][ T5673] nbd3: partition table beyond EOD, truncated [ 198.117905][ T9178] FAULT_INJECTION: forcing a failure. [ 198.117905][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 198.122140][ T9178] CPU: 2 UID: 0 PID: 9178 Comm: syz.0.1051 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 198.125739][ T9178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.129496][ T9178] Call Trace: [ 198.130649][ T9178] [ 198.131663][ T9178] dump_stack_lvl+0x16c/0x1f0 [ 198.133277][ T9178] should_fail_ex+0x497/0x5b0 [ 198.134881][ T9178] ? fs_reclaim_acquire+0xae/0x150 [ 198.136626][ T9178] should_failslab+0xc2/0x120 [ 198.138243][ T9178] __kmalloc_node_noprof+0xd1/0x430 [ 198.140013][ T9178] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 198.142058][ T9178] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 198.144078][ T9178] ? kasan_save_stack+0x33/0x60 [ 198.145762][ T9178] ? kasan_save_track+0x14/0x30 [ 198.147433][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.149197][ T9178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.151355][ T9178] ? __pfx___lock_acquire+0x10/0x10 [ 198.153108][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.154748][ T9178] vmalloc_noprof+0x6b/0x90 [ 198.156287][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.158030][ T9178] bpf_prog_calc_tag+0x108/0x720 [ 198.159726][ T9178] ? trace_lock_acquire+0x14a/0x1d0 [ 198.161499][ T9178] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 198.163366][ T9178] ? lock_acquire+0x2f/0xb0 [ 198.164925][ T9178] ? __might_fault+0xe3/0x190 [ 198.166560][ T9178] ? _copy_from_user+0x5d/0xf0 [ 198.168187][ T9178] ? btf_name_by_offset+0x13b/0x180 [ 198.169982][ T9178] resolve_pseudo_ldimm64+0xcd/0x2950 [ 198.171811][ T9178] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 198.173655][ T9178] ? fput+0x30/0x390 [ 198.175000][ T9178] bpf_check+0x6e0f/0xb430 [ 198.176558][ T9178] ? __pfx_bpf_check+0x10/0x10 [ 198.178311][ T9178] ? __kasan_kmalloc+0xaa/0xb0 [ 198.179951][ T9178] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 198.181808][ T9178] bpf_prog_load+0xedb/0x2660 [ 198.183406][ T9178] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.185142][ T9178] ? avc_has_perm_noaudit+0x143/0x3a0 [ 198.186987][ T9178] ? selinux_bpf+0xde/0x130 [ 198.188545][ T9178] __sys_bpf+0x402b/0x49a0 [ 198.190064][ T9178] ? ksys_write+0x21e/0x260 [ 198.191635][ T9178] ? reacquire_held_locks+0x450/0x4c0 [ 198.193580][ T9178] ? __pfx___sys_bpf+0x10/0x10 [ 198.195271][ T9178] ? vfs_write+0x14d/0x1140 [ 198.196882][ T9178] ? __mutex_unlock_slowpath+0x164/0x650 [ 198.198866][ T9178] ? fput+0x30/0x390 [ 198.200243][ T9178] ? ksys_write+0x1ad/0x260 [ 198.201820][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 198.203096][ T9178] __x64_sys_bpf+0x78/0xc0 [ 198.204254][ T9178] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.205604][ T9178] do_syscall_64+0xcd/0x250 [ 198.206820][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.208360][ T9178] RIP: 0033:0x7f4e89d7dff9 [ 198.209544][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.214506][ T9178] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.216654][ T9178] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 198.218696][ T9178] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 198.220718][ T9178] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 198.222792][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.224826][ T9178] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 198.226884][ T9178] [ 198.228949][ T9178] syz.0.1051: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.234694][ T9178] CPU: 3 UID: 0 PID: 9178 Comm: syz.0.1051 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 198.238375][ T9178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.242051][ T9178] Call Trace: [ 198.243225][ T9178] [ 198.244265][ T9178] dump_stack_lvl+0x16c/0x1f0 [ 198.246044][ T9178] warn_alloc+0x24d/0x3a0 [ 198.247492][ T9178] ? __pfx_warn_alloc+0x10/0x10 [ 198.249235][ T9178] ? dump_stack_lvl+0x197/0x1f0 [ 198.250977][ T9178] ? dump_stack_lvl+0x1a1/0x1f0 [ 198.252691][ T9178] ? should_fail_ex+0x2de/0x5b0 [ 198.254394][ T9178] ? rcu_is_watching+0x12/0xc0 [ 198.256061][ T9178] ? trace_kmalloc+0x2d/0xe0 [ 198.257678][ T9178] ? __kmalloc_node_noprof+0x22f/0x430 [ 198.259597][ T9178] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 198.261697][ T9178] ? kasan_save_stack+0x33/0x60 [ 198.263410][ T9178] ? kasan_save_track+0x14/0x30 [ 198.265119][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.267045][ T9178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.269153][ T9178] ? __pfx___lock_acquire+0x10/0x10 [ 198.271011][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.272823][ T9178] vmalloc_noprof+0x6b/0x90 [ 198.274439][ T9178] ? bpf_prog_calc_tag+0x108/0x720 [ 198.276245][ T9178] bpf_prog_calc_tag+0x108/0x720 [ 198.278003][ T9178] ? trace_lock_acquire+0x14a/0x1d0 [ 198.279831][ T9178] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 198.281755][ T9178] ? lock_acquire+0x2f/0xb0 [ 198.283277][ T9178] ? __might_fault+0xe3/0x190 [ 198.284928][ T9178] ? _copy_from_user+0x5d/0xf0 [ 198.286625][ T9178] ? btf_name_by_offset+0x13b/0x180 [ 198.288453][ T9178] resolve_pseudo_ldimm64+0xcd/0x2950 [ 198.290359][ T9178] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 198.292423][ T9178] ? fput+0x30/0x390 [ 198.293822][ T9178] bpf_check+0x6e0f/0xb430 [ 198.295426][ T9178] ? __pfx_bpf_check+0x10/0x10 [ 198.297152][ T9178] ? __kasan_kmalloc+0xaa/0xb0 [ 198.298863][ T9178] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 198.300786][ T9178] bpf_prog_load+0xedb/0x2660 [ 198.302461][ T9178] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.304256][ T9178] ? avc_has_perm_noaudit+0x143/0x3a0 [ 198.306159][ T9178] ? selinux_bpf+0xde/0x130 [ 198.307763][ T9178] __sys_bpf+0x402b/0x49a0 [ 198.309339][ T9178] ? ksys_write+0x21e/0x260 [ 198.310972][ T9178] ? reacquire_held_locks+0x450/0x4c0 [ 198.312867][ T9178] ? __pfx___sys_bpf+0x10/0x10 [ 198.314564][ T9178] ? vfs_write+0x14d/0x1140 [ 198.316122][ T9178] ? __mutex_unlock_slowpath+0x164/0x650 [ 198.318087][ T9178] ? fput+0x30/0x390 [ 198.319489][ T9178] ? ksys_write+0x1ad/0x260 [ 198.321103][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 198.322847][ T9178] __x64_sys_bpf+0x78/0xc0 [ 198.324431][ T9178] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.326307][ T9178] do_syscall_64+0xcd/0x250 [ 198.327934][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.330038][ T9178] RIP: 0033:0x7f4e89d7dff9 [ 198.331625][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.338290][ T9178] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.341180][ T9178] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 198.343930][ T9178] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 198.346690][ T9178] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 198.349445][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.352194][ T9178] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 198.354964][ T9178] [ 198.358248][ T9178] Mem-Info: [ 198.359405][ T9178] active_anon:8270 inactive_anon:0 isolated_anon:0 [ 198.359405][ T9178] active_file:12850 inactive_file:3547 isolated_file:0 [ 198.359405][ T9178] unevictable:1768 dirty:326 writeback:0 [ 198.359405][ T9178] slab_reclaimable:10174 slab_unreclaimable:68832 [ 198.359405][ T9178] mapped:18290 shmem:4363 pagetables:745 [ 198.359405][ T9178] sec_pagetables:323 bounce:0 [ 198.359405][ T9178] kernel_misc_reclaimable:0 [ 198.359405][ T9178] free:524864 free_pcp:4137 free_cma:0 [ 198.374809][ T9178] Node 0 active_anon:33080kB inactive_anon:0kB active_file:51400kB inactive_file:14180kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:73160kB dirty:1300kB writeback:0kB shmem:13916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2980kB sec_pagetables:1292kB all_unreclaimable? no [ 198.383955][ T9178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 198.391643][ T9178] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.398747][ T9178] lowmem_reserve[]: 0 1214 0 0 0 [ 198.400076][ T9178] Node 0 DMA32 free:479872kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:33080kB inactive_anon:0kB active_file:51400kB inactive_file:14180kB unevictable:3536kB writepending:1300kB present:2080628kB managed:1272188kB mlocked:0kB bounce:0kB free_pcp:7432kB local_pcp:4580kB free_cma:0kB [ 198.407792][ T9178] lowmem_reserve[]: 0 0 0 0 0 [ 198.409041][ T9178] Node 1 Normal free:1604120kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:9100kB local_pcp:9100kB free_cma:0kB [ 198.416411][ T9178] lowmem_reserve[]: 0 0 0 0 0 [ 198.417734][ T9178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.420988][ T9178] Node 0 DMA32: 695*4kB (UME) 486*8kB (UME) 820*16kB (UME) 421*32kB (UME) 354*64kB (UME) 59*128kB (UME) 29*256kB (UME) 46*512kB (UM) 40*1024kB (UME) 21*2048kB (UME) 74*4096kB (UME) = 481516kB [ 198.425830][ T9178] Node 1 Normal: 6*4kB (UE) 6*8kB (UME) 11*16kB (UME) 153*32kB (UE) 56*64kB (UE) 22*128kB (UE) 5*256kB (UM) 2*512kB (UE) 1*1024kB (M) 6*2048kB (UME) 385*4096kB (UM) = 1604120kB [ 198.430454][ T9178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.432889][ T9178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.435274][ T9178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.437801][ T9178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.440177][ T9178] 20763 total pagecache pages [ 198.441400][ T9178] 0 pages in swap cache [ 198.442490][ T9178] Free swap = 124072kB [ 198.443572][ T9178] Total swap = 124996kB [ 198.444660][ T9178] 1048443 pages RAM [ 198.445670][ T9178] 0 pages HighMem/MovableOnly [ 198.446896][ T9178] 281075 pages reserved [ 198.448134][ T9178] 0 pages cma reserved [ 198.480382][ T40] audit: type=1400 audit(1729701891.766:958): avc: denied { listen } for pid=9179 comm="syz.1.1052" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.808872][ T9180] buffer_io_error: 41 callbacks suppressed [ 198.808889][ T9180] Buffer I/O error on dev loop7, logical block 4095, async page read [ 198.816897][ T9180] Buffer I/O error on dev loop7, logical block 4095, async page read [ 198.893750][ T5336] Buffer I/O error on dev loop7, logical block 4095, async page read [ 199.020793][ T9197] random: crng reseeded on system resumption [ 199.079555][ T40] audit: type=1400 audit(1729701892.366:959): avc: denied { mount } for pid=9199 comm="syz.1.1057" name="/" dev="autofs" ino=28780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 199.086044][ T40] audit: type=1400 audit(1729701892.366:960): avc: denied { read } for pid=9199 comm="syz.1.1057" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.097223][ T40] audit: type=1400 audit(1729701892.366:961): avc: denied { open } for pid=9199 comm="syz.1.1057" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.220030][ T9208] FAULT_INJECTION: forcing a failure. [ 199.220030][ T9208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.223436][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.3.1059 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 199.226199][ T9208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.228987][ T9208] Call Trace: [ 199.229849][ T9208] [ 199.230581][ T9208] dump_stack_lvl+0x16c/0x1f0 [ 199.231873][ T9208] should_fail_ex+0x497/0x5b0 [ 199.233092][ T9208] _copy_from_user+0x30/0xf0 [ 199.234294][ T9208] sctp_getsockopt+0x2cad/0x74a0 [ 199.235590][ T9208] ? avc_has_perm_noaudit+0x119/0x3a0 [ 199.237015][ T9208] ? __pfx_lock_release+0x10/0x10 [ 199.238328][ T9208] ? trace_lock_acquire+0x14a/0x1d0 [ 199.239708][ T9208] ? __pfx_mark_lock+0x10/0x10 [ 199.240981][ T9208] ? __pfx_sctp_getsockopt+0x10/0x10 [ 199.242386][ T9208] ? avc_has_perm+0x11b/0x1c0 [ 199.243614][ T9208] ? __pfx___lock_acquire+0x10/0x10 [ 199.244990][ T9208] ? find_held_lock+0x2d/0x110 [ 199.246254][ T9208] ? __might_fault+0x13b/0x190 [ 199.247538][ T9208] ? __pfx_lock_release+0x10/0x10 [ 199.248866][ T9208] ? trace_lock_acquire+0x14a/0x1d0 [ 199.250269][ T9208] ? lock_acquire+0x2f/0xb0 [ 199.251477][ T9208] ? __might_fault+0xe3/0x190 [ 199.252727][ T9208] ? __might_fault+0xe3/0x190 [ 199.253987][ T9208] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 199.255555][ T9208] ? do_sock_getsockopt+0x3fe/0x800 [ 199.256933][ T9208] do_sock_getsockopt+0x3fe/0x800 [ 199.258278][ T9208] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 199.259745][ T9208] ? __fget_files+0x244/0x3f0 [ 199.260983][ T9208] __sys_getsockopt+0x1a1/0x270 [ 199.262296][ T9208] ? __pfx___sys_getsockopt+0x10/0x10 [ 199.263699][ T9208] ? fput+0x30/0x390 [ 199.264736][ T9208] ? ksys_write+0x1ad/0x260 [ 199.265943][ T9208] ? __pfx_ksys_write+0x10/0x10 [ 199.267221][ T9208] __x64_sys_getsockopt+0xbd/0x160 [ 199.268556][ T9208] ? do_syscall_64+0x91/0x250 [ 199.269779][ T9208] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.271147][ T9208] do_syscall_64+0xcd/0x250 [ 199.272352][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.273915][ T9208] RIP: 0033:0x7efdf1d7dff9 [ 199.275085][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.280131][ T9208] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 199.282310][ T9208] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 199.284368][ T9208] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 199.286411][ T9208] RBP: 00007efdf2ade090 R08: 0000000020000240 R09: 0000000000000000 [ 199.288449][ T9208] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.290524][ T9208] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 199.292579][ T9208] [ 199.464391][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32811 sclass=netlink_route_socket pid=9216 comm=syz.0.1068 [ 200.182971][ T9222] FAULT_INJECTION: forcing a failure. [ 200.182971][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 200.186436][ T9222] CPU: 3 UID: 0 PID: 9222 Comm: syz.3.1063 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 200.189739][ T9222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.192740][ T9222] Call Trace: [ 200.193573][ T9222] [ 200.194318][ T9222] dump_stack_lvl+0x16c/0x1f0 [ 200.195557][ T9222] should_fail_ex+0x497/0x5b0 [ 200.196779][ T9222] ? fs_reclaim_acquire+0xae/0x150 [ 200.198098][ T9222] should_failslab+0xc2/0x120 [ 200.199332][ T9222] __kmalloc_noprof+0xcb/0x400 [ 200.200545][ T9222] bpf_test_init.isra.0+0xa5/0x150 [ 200.201852][ T9222] bpf_prog_test_run_xdp+0x4f0/0x1580 [ 200.203186][ T9222] ? lock_acquire+0x2f/0xb0 [ 200.204644][ T9222] ? __fget_files+0x40/0x3f0 [ 200.205938][ T9222] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.208603][ T9222] ? fput+0x30/0x390 [ 200.210076][ T9222] ? __bpf_prog_get+0xa0/0x290 [ 200.211769][ T9222] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.213700][ T9222] __sys_bpf+0xfc6/0x49a0 [ 200.215235][ T9222] ? ksys_write+0x21e/0x260 [ 200.216884][ T9222] ? reacquire_held_locks+0x450/0x4c0 [ 200.218568][ T9222] ? __pfx___sys_bpf+0x10/0x10 [ 200.219793][ T9222] ? vfs_write+0x14d/0x1140 [ 200.220937][ T9222] ? __mutex_unlock_slowpath+0x164/0x650 [ 200.222342][ T9222] ? fput+0x30/0x390 [ 200.223292][ T9222] ? ksys_write+0x1ad/0x260 [ 200.224444][ T9222] ? __pfx_ksys_write+0x10/0x10 [ 200.225694][ T9222] __x64_sys_bpf+0x78/0xc0 [ 200.226850][ T9222] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.228247][ T9222] do_syscall_64+0xcd/0x250 [ 200.229466][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.231001][ T9222] RIP: 0033:0x7efdf1d7dff9 [ 200.232328][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.237381][ T9222] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.239526][ T9222] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 200.241575][ T9222] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 200.243652][ T9222] RBP: 00007efdf2ade090 R08: 0000000000000000 R09: 0000000000000000 [ 200.245725][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.247787][ T9222] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 200.249920][ T9222] [ 200.283737][ T9227] FAULT_INJECTION: forcing a failure. [ 200.283737][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 200.286927][ T9227] CPU: 3 UID: 0 PID: 9227 Comm: syz.3.1065 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 200.289709][ T9227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.292483][ T9227] Call Trace: [ 200.293367][ T9227] [ 200.294169][ T9227] dump_stack_lvl+0x16c/0x1f0 [ 200.295417][ T9227] should_fail_ex+0x497/0x5b0 [ 200.296657][ T9227] ? fs_reclaim_acquire+0xae/0x150 [ 200.298028][ T9227] should_failslab+0xc2/0x120 [ 200.299269][ T9227] kmem_cache_alloc_node_noprof+0x71/0x310 [ 200.300800][ T9227] ? __alloc_skb+0x2b1/0x380 [ 200.302043][ T9227] __alloc_skb+0x2b1/0x380 [ 200.303227][ T9227] ? __pfx___alloc_skb+0x10/0x10 [ 200.304542][ T9227] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 200.306146][ T9227] netlink_alloc_large_skb+0x69/0x130 [ 200.307554][ T9227] netlink_sendmsg+0x689/0xd70 [ 200.308823][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.310238][ T9227] ? __import_iovec+0x1fd/0x6e0 [ 200.311517][ T9227] ____sys_sendmsg+0xaaf/0xc90 [ 200.312785][ T9227] ? copy_msghdr_from_user+0x10b/0x160 [ 200.314223][ T9227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.315604][ T9227] ? __pfx___lock_acquire+0x10/0x10 [ 200.316963][ T9227] ___sys_sendmsg+0x135/0x1e0 [ 200.318392][ T9227] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.319763][ T9227] ? lock_acquire+0x2f/0xb0 [ 200.320960][ T9227] ? __fget_files+0x40/0x3f0 [ 200.322206][ T9227] ? fdget+0x176/0x210 [ 200.323285][ T9227] __sys_sendmsg+0x117/0x1f0 [ 200.324498][ T9227] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.325844][ T9227] ? __fget_files+0x244/0x3f0 [ 200.327090][ T9227] do_syscall_64+0xcd/0x250 [ 200.328285][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.329844][ T9227] RIP: 0033:0x7efdf1d7dff9 [ 200.331015][ T9227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.335879][ T9227] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.338071][ T9227] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 200.340145][ T9227] RDX: 0000000000000044 RSI: 0000000020000880 RDI: 0000000000000004 [ 200.342205][ T9227] RBP: 00007efdf2ade090 R08: 0000000000000000 R09: 0000000000000000 [ 200.344254][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.346304][ T9227] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 200.348362][ T9227] [ 200.777229][ T828] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.787292][ T6816] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 200.937307][ T828] usb 5-1: Using ep0 maxpacket: 8 [ 200.944460][ T828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.947806][ T828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.957528][ T828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.959067][ T6816] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.960110][ T828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.960136][ T828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.963451][ T6816] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.966710][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.969950][ T6816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.977316][ T6816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 200.980187][ T6816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 200.984645][ T6816] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.987010][ T6816] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.989296][ T6816] usb 8-1: Product: syz [ 200.990382][ T6816] usb 8-1: Manufacturer: syz [ 200.998025][ T6816] cdc_wdm 8-1:1.0: skipping garbage [ 200.999549][ T6816] cdc_wdm 8-1:1.0: skipping garbage [ 201.001852][ T6816] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 201.003428][ T6816] cdc_wdm 8-1:1.0: Unknown control protocol [ 201.200435][ T6816] usb 8-1: USB disconnect, device number 25 [ 201.383734][ T828] usb 5-1: usb_control_msg returned -71 [ 201.385236][ T828] usbtmc 5-1:16.0: can't read capabilities [ 201.389807][ T828] usb 5-1: USB disconnect, device number 10 [ 201.758390][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 201.847284][ T30] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 201.885302][ T9258] FAULT_INJECTION: forcing a failure. [ 201.885302][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 201.889080][ T9258] CPU: 0 UID: 0 PID: 9258 Comm: syz.1.1075 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 201.892194][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.895020][ T9258] Call Trace: [ 201.896043][ T9258] [ 201.896857][ T9258] dump_stack_lvl+0x16c/0x1f0 [ 201.898258][ T9258] should_fail_ex+0x497/0x5b0 [ 201.899635][ T9258] ? fs_reclaim_acquire+0xae/0x150 [ 201.901166][ T9258] should_failslab+0xc2/0x120 [ 201.902576][ T9258] __kmalloc_cache_noprof+0x6b/0x300 [ 201.904307][ T9258] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 201.906266][ T9258] ? __lock_acquire+0x163e/0x3ce0 [ 201.907686][ T9258] tcp_sendmsg_fastopen+0x23a/0x700 [ 201.909158][ T9258] tcp_sendmsg_locked+0x2016/0x3750 [ 201.910702][ T9258] ? mark_lock+0xb5/0xc60 [ 201.912263][ T9258] ? __pfx_avc_has_perm+0x10/0x10 [ 201.913610][ T9258] ? __pfx_mark_lock+0x10/0x10 [ 201.914874][ T9258] ? lock_acquire.part.0+0x11b/0x380 [ 201.916261][ T9258] ? find_held_lock+0x2d/0x110 [ 201.917527][ T9258] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 201.918994][ T9258] ? tcp_sendmsg+0x20/0x50 [ 201.920195][ T9258] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.921738][ T9258] ? __local_bh_enable_ip+0xa4/0x120 [ 201.923123][ T9258] tcp_sendmsg+0x2e/0x50 [ 201.924242][ T9258] ? __pfx_tcp_sendmsg+0x10/0x10 [ 201.925599][ T9258] inet_sendmsg+0xb9/0x140 [ 201.926806][ T9258] __sys_sendto+0x426/0x4d0 [ 201.928020][ T9258] ? __pfx___sys_sendto+0x10/0x10 [ 201.929304][ T9258] ? ksys_write+0x1ad/0x260 [ 201.930491][ T9258] ? __pfx_ksys_write+0x10/0x10 [ 201.931941][ T9258] __x64_sys_sendto+0xe0/0x1c0 [ 201.933372][ T9258] ? do_syscall_64+0x91/0x250 [ 201.935055][ T9258] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.936574][ T9258] do_syscall_64+0xcd/0x250 [ 201.937793][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.939339][ T9258] RIP: 0033:0x7f7d99d7dff9 [ 201.940510][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.945849][ T9258] RSP: 002b:00007f7d9aae9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.947993][ T9258] RAX: ffffffffffffffda RBX: 00007f7d99f36058 RCX: 00007f7d99d7dff9 [ 201.950060][ T9258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 201.952670][ T9258] RBP: 00007f7d9aae9090 R08: 0000000020000040 R09: 0000000000000010 [ 201.955500][ T9258] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 201.957959][ T9258] R13: 0000000000000000 R14: 00007f7d99f36058 R15: 00007ffcfe43c098 [ 201.960026][ T9258] [ 201.998436][ T30] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.000729][ T30] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.003357][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.005670][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 202.010974][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 202.016968][ T30] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.020687][ T30] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.023539][ T30] usb 8-1: Product: syz [ 202.025043][ T30] usb 8-1: Manufacturer: syz [ 202.034290][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 202.035607][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 202.049338][ T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 202.051051][ T30] cdc_wdm 8-1:1.0: Unknown control protocol [ 202.234909][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.236826][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.239333][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.241470][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.243357][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.245764][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.247846][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.249955][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.252003][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.253919][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.255986][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.257884][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.259926][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.261798][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.263861][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.265764][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.267788][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.269677][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.271711][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.273607][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.275647][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.277531][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.279592][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.281481][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.283542][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.285564][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.287606][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.289845][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.291921][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.293807][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.295845][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.297716][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.299756][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.301767][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.303658][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.305690][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.307568][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.309659][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.311706][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.313593][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.315618][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.317499][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.319565][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.321591][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.323531][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.325563][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.327518][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.329558][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.331448][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.333499][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.335410][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.337454][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.339339][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.341376][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.343254][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.345266][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.347129][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.349054][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.350954][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.352936][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.355152][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.357104][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.359005][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.361032][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.363039][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.364920][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.367096][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.368991][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.371137][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.373168][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.375074][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.377147][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.379182][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.381195][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.383095][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.385105][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.386683][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.388405][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.389922][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.391515][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.392987][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.394866][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.396747][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.398759][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.400777][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.402710][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.404585][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.406528][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.408574][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.410481][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.412530][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.414571][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.416637][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.418794][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.420673][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.422725][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.424600][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.426832][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.428902][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.431000][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.433039][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.435085][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.437106][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.439003][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.441038][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.442907][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.444938][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.446839][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.448881][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.450638][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.452122][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.453727][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.455347][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.456996][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.458622][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.460259][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.461901][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.462207][ T9240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.463516][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.467536][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.468118][ T9240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.469178][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.472736][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.474513][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.476182][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.477856][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.479483][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.481110][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.482753][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.484379][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.486014][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.487690][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.489396][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.490928][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.492582][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.494080][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.495711][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.497197][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.498833][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.500316][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.501934][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.503425][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.505046][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.506723][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.508550][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.510240][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.511936][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.513451][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.515085][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.516586][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.518234][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.519701][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.521316][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.522819][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.524404][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.525905][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.527504][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.528990][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.530619][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.532122][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.533828][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.535584][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.537233][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.539109][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.541019][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.542704][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.544498][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.546104][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.547692][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.549371][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.550885][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.552499][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.554161][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.555663][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.557286][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.559110][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.560908][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.562743][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.564585][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.566444][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.568106][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.569763][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.571371][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.572994][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.574611][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.576188][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.577693][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.579253][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.580810][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.582239][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.583720][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.585123][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.586626][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.588052][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.589578][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.591103][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.592511][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.594037][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.595390][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.596978][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.598627][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.600169][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.601628][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.603180][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.604652][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.606279][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.607755][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.609414][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.611126][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.612945][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.614878][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.616547][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.618065][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.619625][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.621019][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.622579][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.624096][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.625504][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.627039][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.628417][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.629983][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.631497][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.633019][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.634600][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.636194][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.637859][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.639355][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.640958][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.642463][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.644064][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.645549][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.647194][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.648693][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.650315][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.651962][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.653610][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.655318][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.656965][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.658628][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.660267][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.661792][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.663388][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.664880][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.666497][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.668164][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.669843][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.671488][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 202.672936][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 202.674679][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 202.679319][ T5375] usb 8-1: USB disconnect, device number 26 [ 202.808310][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 202.808322][ T40] audit: type=1400 audit(1729701896.096:963): avc: denied { mount } for pid=9266 comm="syz.1.1078" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 203.226675][ T9272] random: crng reseeded on system resumption [ 203.233094][ T9276] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 203.454851][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 203.586645][ T9288] random: crng reseeded on system resumption [ 203.801500][ T9299] fuse: Bad value for 'fd' [ 204.259784][ T40] audit: type=1400 audit(1729701897.546:964): avc: denied { create } for pid=9302 comm="syz.3.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.324014][ T40] audit: type=1400 audit(1729701897.606:965): avc: denied { write } for pid=9302 comm="syz.3.1088" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.584481][ T40] audit: type=1400 audit(1729701897.866:966): avc: denied { accept } for pid=9306 comm="syz.0.1089" lport=42167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.694868][ T9312] syzkaller0: entered promiscuous mode [ 204.696662][ T9312] syzkaller0: entered allmulticast mode [ 205.283905][ T9319] random: crng reseeded on system resumption [ 205.451888][ T9324] FAULT_INJECTION: forcing a failure. [ 205.451888][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 205.455556][ T9324] CPU: 1 UID: 0 PID: 9324 Comm: syz.0.1093 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 205.458516][ T9324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.461286][ T9324] Call Trace: [ 205.462181][ T9324] [ 205.462967][ T9324] dump_stack_lvl+0x16c/0x1f0 [ 205.464179][ T9324] should_fail_ex+0x497/0x5b0 [ 205.465490][ T9324] ? fs_reclaim_acquire+0xae/0x150 [ 205.466978][ T9324] should_failslab+0xc2/0x120 [ 205.468216][ T9324] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 205.469644][ T9324] ? getname_flags.part.0+0x4c/0x550 [ 205.471027][ T9324] getname_flags.part.0+0x4c/0x550 [ 205.472390][ T9324] getname_flags+0x93/0xf0 [ 205.473599][ T9324] __x64_sys_rename+0x65/0xa0 [ 205.474839][ T9324] do_syscall_64+0xcd/0x250 [ 205.476016][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.477550][ T9324] RIP: 0033:0x7f4e89d7dff9 [ 205.478730][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.483898][ T9324] RSP: 002b:00007f4e8abdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 205.486044][ T9324] RAX: ffffffffffffffda RBX: 00007f4e89f36058 RCX: 00007f4e89d7dff9 [ 205.488114][ T9324] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000020000000 [ 205.490174][ T9324] RBP: 00007f4e8abdb090 R08: 0000000000000000 R09: 0000000000000000 [ 205.492172][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.494307][ T9324] R13: 0000000000000001 R14: 00007f4e89f36058 R15: 00007fff6b6cf188 [ 205.496351][ T9324] [ 205.672209][ T9330] random: crng reseeded on system resumption [ 205.691894][ T9334] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1096'. [ 206.112920][ T9344] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 206.254427][ T9347] FAULT_INJECTION: forcing a failure. [ 206.254427][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 206.258082][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.0.1101 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 206.260858][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.263801][ T9347] Call Trace: [ 206.264753][ T9347] [ 206.265636][ T9347] dump_stack_lvl+0x16c/0x1f0 [ 206.266966][ T9347] should_fail_ex+0x497/0x5b0 [ 206.268246][ T9347] ? fs_reclaim_acquire+0xae/0x150 [ 206.269734][ T9347] should_failslab+0xc2/0x120 [ 206.270999][ T9347] __kmalloc_cache_noprof+0x6b/0x300 [ 206.272406][ T9347] ? kasan_save_track+0x14/0x30 [ 206.273718][ T9347] ? rtm_new_nexthop+0x111a/0x5d70 [ 206.275097][ T9347] rtm_new_nexthop+0x111a/0x5d70 [ 206.276414][ T9347] ? __lock_acquire+0x163e/0x3ce0 [ 206.277763][ T9347] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.279223][ T9347] ? __pfx___lock_acquire+0x10/0x10 [ 206.280675][ T9347] ? find_held_lock+0x2d/0x110 [ 206.281963][ T9347] ? __mutex_trylock_common+0xea/0x250 [ 206.283408][ T9347] ? __pfx___mutex_trylock_common+0x10/0x10 [ 206.284959][ T9347] ? rtnetlink_rcv_msg+0x372/0xea0 [ 206.286400][ T9347] ? rcu_is_watching+0x12/0xc0 [ 206.287682][ T9347] ? trace_contention_end+0xea/0x140 [ 206.289081][ T9347] ? __mutex_lock+0x1a6/0x9c0 [ 206.290362][ T9347] ? rtnetlink_rcv_msg+0x372/0xea0 [ 206.291722][ T9347] ? find_held_lock+0x2d/0x110 [ 206.292992][ T9347] ? __pfx___mutex_lock+0x10/0x10 [ 206.294340][ T9347] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.295791][ T9347] rtnetlink_rcv_msg+0x3c7/0xea0 [ 206.297164][ T9347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.298687][ T9347] netlink_rcv_skb+0x16b/0x440 [ 206.300008][ T9347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.301449][ T9347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.302863][ T9347] ? netlink_deliver_tap+0x1ae/0xd90 [ 206.304269][ T9347] netlink_unicast+0x53c/0x7f0 [ 206.305559][ T9347] ? __pfx_netlink_unicast+0x10/0x10 [ 206.306963][ T9347] netlink_sendmsg+0x8b8/0xd70 [ 206.308241][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.309696][ T9347] ? __import_iovec+0x1fd/0x6e0 [ 206.311055][ T9347] ____sys_sendmsg+0xaaf/0xc90 [ 206.312392][ T9347] ? copy_msghdr_from_user+0x10b/0x160 [ 206.313930][ T9347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.315369][ T9347] ? hlock_class+0x4e/0x130 [ 206.316575][ T9347] ? __lock_acquire+0x163e/0x3ce0 [ 206.317913][ T9347] ___sys_sendmsg+0x135/0x1e0 [ 206.319160][ T9347] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.320538][ T9347] ? __pfx___lock_acquire+0x10/0x10 [ 206.321938][ T9347] ? __pfx___might_resched+0x10/0x10 [ 206.323337][ T9347] ? __might_fault+0xe3/0x190 [ 206.324645][ T9347] __sys_sendmmsg+0x1a1/0x450 [ 206.325933][ T9347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.327360][ T9347] ? vfs_write+0x14d/0x1140 [ 206.328575][ T9347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.330236][ T9347] ? fput+0x30/0x390 [ 206.331353][ T9347] ? ksys_write+0x1ad/0x260 [ 206.332629][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 206.333963][ T9347] __x64_sys_sendmmsg+0x9c/0x100 [ 206.335272][ T9347] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.336652][ T9347] do_syscall_64+0xcd/0x250 [ 206.337908][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.339478][ T9347] RIP: 0033:0x7f4e89d7dff9 [ 206.340696][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.345956][ T9347] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.348132][ T9347] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 206.350223][ T9347] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 206.352244][ T9347] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 206.354464][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.356543][ T9347] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 206.358737][ T9347] [ 208.217326][ T9344] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 208.217388][ T4780] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.221173][ T9344] Bluetooth: hci4: Opcode 0x0406 failed: -110 [ 209.073652][ T9344] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 209.355006][ T40] audit: type=1400 audit(1729701902.636:967): avc: denied { create } for pid=9384 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 209.493495][ T9391] netlink: 'syz.1.1114': attribute type 3 has an invalid length. [ 209.495634][ T9391] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1114'. [ 209.543459][ T9394] ip6gretap0 speed is unknown, defaulting to 1000 [ 209.738580][ T9398] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 210.227346][ T40] audit: type=1400 audit(1729701903.506:968): avc: denied { ioctl } for pid=9403 comm="syz.0.1119" path="socket:[26553]" dev="sockfs" ino=26553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.231713][ T9405] ptrace attach of "/syz-executor exec"[5334] was attempted by "/syz-executor exec"[9405] [ 210.250023][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 210.254606][ T40] audit: type=1400 audit(1729701903.536:969): avc: denied { read } for pid=9403 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.328939][ T9424] ip6gretap0 speed is unknown, defaulting to 1000 [ 211.406969][ T40] audit: type=1400 audit(1729701904.686:970): avc: denied { getopt } for pid=9423 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.783787][ T40] audit: type=1400 audit(1729701905.066:971): avc: denied { read } for pid=9430 comm="syz.0.1126" lport=49089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.888626][ T4780] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.891469][ T9398] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 212.652494][ T9444] syz.3.1129: attempt to access beyond end of device [ 212.652494][ T9444] md0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 212.658025][ T9444] hfs: can't find a HFS filesystem on dev md0 [ 213.703653][ T40] audit: type=1400 audit(1729701906.986:972): avc: denied { wake_alarm } for pid=9464 comm="syz.3.1133" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.977256][ T4780] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.296535][ T40] audit: type=1400 audit(1729701907.576:973): avc: denied { setopt } for pid=9477 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.467226][ T9484] random: crng reseeded on system resumption [ 215.921990][ T9503] random: crng reseeded on system resumption [ 216.899530][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.905692][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.910291][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.914911][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.920054][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.924347][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.954008][ T9521] ip6gretap0 speed is unknown, defaulting to 1000 [ 216.978648][ T40] audit: type=1400 audit(1729701910.256:974): avc: denied { setcurrent } for pid=9523 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 216.984477][ T40] audit: type=1401 audit(1729701910.266:975): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 217.070938][ T1202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.119283][ T9521] chnl_net:caif_netlink_parms(): no params data found [ 217.142002][ T9534] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 217.144308][ T9534] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.209565][ T1202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.245194][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.260217][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.262385][ T9521] bridge_slave_0: entered allmulticast mode [ 217.265618][ T9521] bridge_slave_0: entered promiscuous mode [ 217.272375][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.274457][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.276702][ T9521] bridge_slave_1: entered allmulticast mode [ 217.279943][ T9521] bridge_slave_1: entered promiscuous mode [ 217.325876][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.332172][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.367452][ T1202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.389571][ T9521] team0: Port device team_slave_0 added [ 217.395212][ T9521] team0: Port device team_slave_1 added [ 217.448941][ T1202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.558344][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.560265][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.569151][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.583597][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.585758][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.596076][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.766405][ T9521] hsr_slave_0: entered promiscuous mode [ 217.781550][ T9521] hsr_slave_1: entered promiscuous mode [ 217.784120][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.786701][ T9521] Cannot create hsr debugfs directory [ 218.145356][ T1202] bridge_slave_1: left allmulticast mode [ 218.147811][ T1202] bridge_slave_1: left promiscuous mode [ 218.149961][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.153704][ T1202] bridge_slave_0: left allmulticast mode [ 218.155231][ T1202] bridge_slave_0: left promiscuous mode [ 218.157469][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.560953][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.565604][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.571012][ T1202] bond0 (unregistering): Released all slaves [ 219.017347][ T4780] Bluetooth: hci1: command tx timeout [ 219.097514][ T1202] hsr_slave_0: left promiscuous mode [ 219.099613][ T1202] hsr_slave_1: left promiscuous mode [ 219.101629][ T1202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.103998][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.106334][ T1202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.108854][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.156757][ T1202] veth1_macvtap: left promiscuous mode [ 219.158577][ T1202] veth0_macvtap: left promiscuous mode [ 219.160046][ T1202] veth1_vlan: left promiscuous mode [ 219.163115][ T1202] veth0_vlan: left promiscuous mode [ 219.366126][ T9581] FAULT_INJECTION: forcing a failure. [ 219.366126][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 219.369653][ T9581] CPU: 3 UID: 0 PID: 9581 Comm: syz.0.1162 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 219.372593][ T9581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.375402][ T9581] Call Trace: [ 219.376294][ T9581] [ 219.377085][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 219.378438][ T9581] should_fail_ex+0x497/0x5b0 [ 219.379682][ T9581] ? fs_reclaim_acquire+0xae/0x150 [ 219.381035][ T9581] should_failslab+0xc2/0x120 [ 219.382370][ T9581] __kmalloc_noprof+0xcb/0x400 [ 219.383745][ T9581] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 219.385398][ T9581] tomoyo_realpath_from_path+0xb9/0x720 [ 219.387023][ T9581] ? tomoyo_path_number_perm+0x232/0x590 [ 219.388667][ T9581] tomoyo_path_number_perm+0x245/0x590 [ 219.390331][ T9581] ? tomoyo_path_number_perm+0x232/0x590 [ 219.391892][ T9581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.393761][ T9581] ? trace_lock_acquire+0x14a/0x1d0 [ 219.395227][ T9581] ? lock_acquire+0x2f/0xb0 [ 219.396468][ T9581] ? __fget_files+0x40/0x3f0 [ 219.397807][ T9581] ? __fget_files+0x244/0x3f0 [ 219.399102][ T9581] security_file_ioctl+0x9b/0x240 [ 219.400496][ T9581] __x64_sys_ioctl+0xbb/0x220 [ 219.401744][ T9581] do_syscall_64+0xcd/0x250 [ 219.402941][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.404486][ T9581] RIP: 0033:0x7f4e89d7dff9 [ 219.405662][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.410887][ T9581] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.413144][ T9581] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 219.415192][ T9581] RDX: 0000000020000100 RSI: 0000000000004b72 RDI: 0000000000000003 [ 219.417239][ T9581] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 219.419317][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.421391][ T9581] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 219.423470][ T9581] [ 219.447992][ T9581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.457274][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 220.618892][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.622494][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.625609][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.628981][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.632275][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.634572][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.648449][ T35] usb 5-1: config 0 descriptor?? [ 221.001529][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 221.061494][ T35] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x6 [ 221.063448][ T35] plantronics 0003:047F:FFFF.0006: item fetching failed at offset 12/15 [ 221.065790][ T35] plantronics 0003:047F:FFFF.0006: parse failed [ 221.068049][ T35] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 221.087374][ T4780] Bluetooth: hci1: command tx timeout [ 221.113017][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 221.283330][ T6816] usb 5-1: USB disconnect, device number 11 [ 221.831247][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1171'. [ 221.833892][ T9610] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 221.936719][ T40] audit: type=1400 audit(1729701915.216:976): avc: denied { create } for pid=9612 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 222.042814][ T9521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.047901][ T9521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.052505][ T9521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.058182][ T9521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.102695][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.110926][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.114650][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.117292][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.130395][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.132264][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.254413][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.273169][ T9521] veth0_vlan: entered promiscuous mode [ 222.277401][ T9521] veth1_vlan: entered promiscuous mode [ 222.295678][ T9521] veth0_macvtap: entered promiscuous mode [ 222.301606][ T9521] veth1_macvtap: entered promiscuous mode [ 222.308182][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.311003][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.313869][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.319229][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.322150][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.324904][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.329857][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.336443][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.339466][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.342207][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.344958][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.349409][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.353656][ T9521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.355926][ T9521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.358441][ T9521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.360533][ T9521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.403078][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.407442][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.429179][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.431138][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.177272][ T4780] Bluetooth: hci1: command tx timeout [ 223.999826][ T9660] kvm: pic: non byte read [ 224.899031][ T9684] input: syz1 as /devices/virtual/input/input11 [ 224.901695][ T40] audit: type=1400 audit(1729701918.186:977): avc: denied { read } for pid=4815 comm="acpid" name="mouse2" dev="devtmpfs" ino=2605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.916250][ T40] audit: type=1400 audit(1729701918.196:978): avc: denied { open } for pid=4815 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.924772][ T40] audit: type=1400 audit(1729701918.196:979): avc: denied { ioctl } for pid=4815 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2605 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.995963][ T40] audit: type=1400 audit(1729701918.276:980): avc: denied { remount } for pid=9682 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.257323][ T4780] Bluetooth: hci1: command tx timeout [ 225.550677][ T40] audit: type=1400 audit(1729701918.836:981): avc: denied { write } for pid=9691 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.561645][ T9695] FAULT_INJECTION: forcing a failure. [ 225.561645][ T9695] name failslab, interval 1, probability 0, space 0, times 0 [ 225.565041][ T9695] CPU: 3 UID: 0 PID: 9695 Comm: syz.1.1192 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 225.568347][ T9695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.571965][ T9695] Call Trace: [ 225.572870][ T9695] [ 225.573683][ T9695] dump_stack_lvl+0x16c/0x1f0 [ 225.574965][ T9695] should_fail_ex+0x497/0x5b0 [ 225.576231][ T9695] ? fs_reclaim_acquire+0xae/0x150 [ 225.577709][ T9695] should_failslab+0xc2/0x120 [ 225.578967][ T9695] __kmalloc_node_noprof+0xd1/0x430 [ 225.580346][ T9695] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 225.581798][ T9695] __kvmalloc_node_noprof+0xad/0x1a0 [ 225.583207][ T9695] check_cfg+0x10a/0x840 [ 225.584355][ T9695] bpf_check+0x6ef8/0xb430 [ 225.585670][ T9695] ? kasan_save_stack+0x42/0x60 [ 225.586987][ T9695] ? __pfx_bpf_check+0x10/0x10 [ 225.588276][ T9695] ? __kasan_kmalloc+0xaa/0xb0 [ 225.589565][ T9695] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 225.591004][ T9695] bpf_prog_load+0xedb/0x2660 [ 225.592264][ T9695] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.593627][ T9695] ? avc_has_perm_noaudit+0x143/0x3a0 [ 225.595050][ T9695] ? selinux_bpf+0xde/0x130 [ 225.596266][ T9695] __sys_bpf+0x402b/0x49a0 [ 225.597465][ T9695] ? ksys_write+0x21e/0x260 [ 225.598680][ T9695] ? reacquire_held_locks+0x450/0x4c0 [ 225.600094][ T9695] ? __pfx___sys_bpf+0x10/0x10 [ 225.601373][ T9695] ? vfs_write+0x14d/0x1140 [ 225.602589][ T9695] ? __mutex_unlock_slowpath+0x164/0x650 [ 225.604491][ T9695] ? fput+0x30/0x390 [ 225.605549][ T9695] ? ksys_write+0x1ad/0x260 [ 225.606754][ T9695] ? __pfx_ksys_write+0x10/0x10 [ 225.608160][ T9695] __x64_sys_bpf+0x78/0xc0 [ 225.609347][ T9695] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.610731][ T9695] do_syscall_64+0xcd/0x250 [ 225.611946][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.613535][ T9695] RIP: 0033:0x7f7d99d7dff9 [ 225.614715][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.619675][ T9695] RSP: 002b:00007f7d9ab0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.622473][ T9695] RAX: ffffffffffffffda RBX: 00007f7d99f35f80 RCX: 00007f7d99d7dff9 [ 225.625120][ T9695] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 225.627595][ T9695] RBP: 00007f7d9ab0a090 R08: 0000000000000000 R09: 0000000000000000 [ 225.629699][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.631767][ T9695] R13: 0000000000000000 R14: 00007f7d99f35f80 R15: 00007ffcfe43c098 [ 225.633877][ T9695] [ 225.765311][ T9699] loop0: detected capacity change from 0 to 128 [ 225.772760][ T9699] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 225.774744][ T9699] loop0: partition table partially beyond EOD, truncated [ 225.783141][ T9699] loop0: p1 size 348879409 extends beyond EOD, truncated [ 226.055930][ T4830] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 226.057589][ T4830] loop0: partition table partially beyond EOD, truncated [ 226.061138][ T4830] loop0: p1 size 348879409 extends beyond EOD, truncated [ 227.352764][ T40] audit: type=1400 audit(1729701920.636:982): avc: denied { unmount } for pid=6650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 227.470113][ T9732] vivid-003: disconnect [ 227.673895][ T9727] vivid-003: reconnect [ 230.460484][ T9763] FAULT_INJECTION: forcing a failure. [ 230.460484][ T9763] name failslab, interval 1, probability 0, space 0, times 0 [ 230.464818][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.3.1210 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 230.468411][ T9763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.472035][ T9763] Call Trace: [ 230.473176][ T9763] [ 230.474194][ T9763] dump_stack_lvl+0x16c/0x1f0 [ 230.475800][ T9763] should_fail_ex+0x497/0x5b0 [ 230.477411][ T9763] ? fs_reclaim_acquire+0xae/0x150 [ 230.479148][ T9763] should_failslab+0xc2/0x120 [ 230.480725][ T9763] __kmalloc_node_noprof+0xd1/0x430 [ 230.482463][ T9763] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 230.484567][ T9763] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 230.486549][ T9763] ? kasan_save_stack+0x33/0x60 [ 230.487715][ T9763] ? kasan_save_track+0x14/0x30 [ 230.488928][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.490318][ T9763] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.492193][ T9763] ? __pfx___lock_acquire+0x10/0x10 [ 230.493965][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.495685][ T9763] vmalloc_noprof+0x6b/0x90 [ 230.497182][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.498949][ T9763] bpf_prog_calc_tag+0x108/0x720 [ 230.500638][ T9763] ? trace_lock_acquire+0x14a/0x1d0 [ 230.502407][ T9763] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 230.504255][ T9763] ? lock_acquire+0x2f/0xb0 [ 230.505802][ T9763] ? __might_fault+0xe3/0x190 [ 230.507475][ T9763] ? _copy_from_user+0x5d/0xf0 [ 230.509088][ T9763] ? btf_name_by_offset+0x13b/0x180 [ 230.510856][ T9763] resolve_pseudo_ldimm64+0xcd/0x2950 [ 230.512691][ T9763] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 230.514710][ T9763] ? fput+0x30/0x390 [ 230.516054][ T9763] bpf_check+0x6e0f/0xb430 [ 230.517600][ T9763] ? __pfx_bpf_check+0x10/0x10 [ 230.519235][ T9763] ? __kasan_kmalloc+0xaa/0xb0 [ 230.520877][ T9763] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 230.522796][ T9763] bpf_prog_load+0xedb/0x2660 [ 230.524450][ T9763] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.526161][ T9763] ? avc_has_perm_noaudit+0x143/0x3a0 [ 230.527974][ T9763] ? selinux_bpf+0xde/0x130 [ 230.529486][ T9763] __sys_bpf+0x402b/0x49a0 [ 230.531001][ T9763] ? ksys_write+0x21e/0x260 [ 230.532536][ T9763] ? reacquire_held_locks+0x450/0x4c0 [ 230.534340][ T9763] ? __pfx___sys_bpf+0x10/0x10 [ 230.535984][ T9763] ? vfs_write+0x14d/0x1140 [ 230.537566][ T9763] ? __mutex_unlock_slowpath+0x164/0x650 [ 230.539474][ T9763] ? fput+0x30/0x390 [ 230.540786][ T9763] ? ksys_write+0x1ad/0x260 [ 230.542320][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 230.543976][ T9763] __x64_sys_bpf+0x78/0xc0 [ 230.545499][ T9763] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.547245][ T9763] do_syscall_64+0xcd/0x250 [ 230.548730][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.550728][ T9763] RIP: 0033:0x7efdf1d7dff9 [ 230.552239][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.558689][ T9763] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.561482][ T9763] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 230.564127][ T9763] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 230.566766][ T9763] RBP: 00007efdf2ade090 R08: 0000000000000000 R09: 0000000000000000 [ 230.569420][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.572056][ T9763] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 230.574736][ T9763] [ 230.577708][ T9763] syz.3.1210: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.583085][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.3.1210 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 230.586792][ T9763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.590407][ T9763] Call Trace: [ 230.591551][ T9763] [ 230.592557][ T9763] dump_stack_lvl+0x16c/0x1f0 [ 230.594177][ T9763] warn_alloc+0x24d/0x3a0 [ 230.595647][ T9763] ? __pfx_warn_alloc+0x10/0x10 [ 230.597292][ T9763] ? dump_stack_lvl+0x197/0x1f0 [ 230.598959][ T9763] ? dump_stack_lvl+0x1a1/0x1f0 [ 230.600615][ T9763] ? should_fail_ex+0x2de/0x5b0 [ 230.602261][ T9763] ? rcu_is_watching+0x12/0xc0 [ 230.603876][ T9763] ? trace_kmalloc+0x2d/0xe0 [ 230.605459][ T9763] ? __kmalloc_node_noprof+0x22f/0x430 [ 230.607291][ T9763] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 230.609331][ T9763] ? kasan_save_stack+0x33/0x60 [ 230.610988][ T9763] ? kasan_save_track+0x14/0x30 [ 230.612641][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.614377][ T9763] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.616494][ T9763] ? __pfx___lock_acquire+0x10/0x10 [ 230.618238][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.619971][ T9763] vmalloc_noprof+0x6b/0x90 [ 230.621520][ T9763] ? bpf_prog_calc_tag+0x108/0x720 [ 230.623164][ T9763] bpf_prog_calc_tag+0x108/0x720 [ 230.624824][ T9763] ? trace_lock_acquire+0x14a/0x1d0 [ 230.626608][ T9763] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 230.628546][ T9763] ? lock_acquire+0x2f/0xb0 [ 230.630209][ T9763] ? __might_fault+0xe3/0x190 [ 230.631811][ T9763] ? _copy_from_user+0x5d/0xf0 [ 230.633530][ T9763] ? btf_name_by_offset+0x13b/0x180 [ 230.635305][ T9763] resolve_pseudo_ldimm64+0xcd/0x2950 [ 230.637125][ T9763] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 230.639133][ T9763] ? fput+0x30/0x390 [ 230.640464][ T9763] bpf_check+0x6e0f/0xb430 [ 230.642010][ T9763] ? __pfx_bpf_check+0x10/0x10 [ 230.643647][ T9763] ? __kasan_kmalloc+0xaa/0xb0 [ 230.645270][ T9763] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 230.647125][ T9763] bpf_prog_load+0xedb/0x2660 [ 230.648734][ T9763] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.650485][ T9763] ? avc_has_perm_noaudit+0x143/0x3a0 [ 230.652301][ T9763] ? selinux_bpf+0xde/0x130 [ 230.653849][ T9763] __sys_bpf+0x402b/0x49a0 [ 230.655347][ T9763] ? ksys_write+0x21e/0x260 [ 230.656905][ T9763] ? reacquire_held_locks+0x450/0x4c0 [ 230.658723][ T9763] ? __pfx___sys_bpf+0x10/0x10 [ 230.660353][ T9763] ? vfs_write+0x14d/0x1140 [ 230.661905][ T9763] ? __mutex_unlock_slowpath+0x164/0x650 [ 230.663795][ T9763] ? fput+0x30/0x390 [ 230.665118][ T9763] ? ksys_write+0x1ad/0x260 [ 230.666670][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 230.668312][ T9763] __x64_sys_bpf+0x78/0xc0 [ 230.669840][ T9763] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.671587][ T9763] do_syscall_64+0xcd/0x250 [ 230.673136][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.675125][ T9763] RIP: 0033:0x7efdf1d7dff9 [ 230.676604][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.683045][ T9763] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.685508][ T9763] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 230.688130][ T9763] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 230.690784][ T9763] RBP: 00007efdf2ade090 R08: 0000000000000000 R09: 0000000000000000 [ 230.693251][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.695725][ T9763] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 230.698434][ T9763] [ 230.703016][ T9763] Mem-Info: [ 230.703894][ T9763] active_anon:9581 inactive_anon:0 isolated_anon:0 [ 230.703894][ T9763] active_file:13731 inactive_file:3567 isolated_file:0 [ 230.703894][ T9763] unevictable:1768 dirty:204 writeback:0 [ 230.703894][ T9763] slab_reclaimable:10275 slab_unreclaimable:70173 [ 230.703894][ T9763] mapped:18601 shmem:4324 pagetables:760 [ 230.703894][ T9763] sec_pagetables:326 bounce:0 [ 230.703894][ T9763] kernel_misc_reclaimable:0 [ 230.703894][ T9763] free:521202 free_pcp:2187 free_cma:0 [ 230.717425][ T9763] Node 0 active_anon:38324kB inactive_anon:0kB active_file:54924kB inactive_file:14260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:74404kB dirty:812kB writeback:0kB shmem:13768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11216kB pagetables:3040kB sec_pagetables:1304kB all_unreclaimable? no [ 230.727097][ T9763] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 230.735465][ T9763] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.743934][ T9763] lowmem_reserve[]: 0 1214 0 0 0 [ 230.745396][ T9763] Node 0 DMA32 free:462420kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:33116kB inactive_anon:0kB active_file:54924kB inactive_file:14260kB unevictable:3536kB writepending:688kB present:2080628kB managed:1272188kB mlocked:0kB bounce:0kB free_pcp:8032kB local_pcp:316kB free_cma:0kB [ 230.754988][ T9763] lowmem_reserve[]: 0 0 0 0 0 [ 230.756303][ T9763] Node 1 Normal free:1606672kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:6576kB local_pcp:0kB free_cma:0kB [ 230.764183][ T9763] lowmem_reserve[]: 0 0 0 0 0 [ 230.765425][ T9763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.768991][ T9763] Node 0 DMA32: 217*4kB (UME) 519*8kB (UME) 920*16kB (UME) 390*32kB (UME) 262*64kB (UME) 111*128kB (UME) 45*256kB (UME) 31*512kB (UM) 30*1024kB (UME) 18*2048kB (UME) 74*4096kB (UME) = 461276kB [ 230.773933][ T9763] Node 1 Normal: 4*4kB (UME) 4*8kB (ME) 6*16kB (UE) 148*32kB (UME) 58*64kB (UME) 23*128kB (UME) 5*256kB (UM) 3*512kB (UME) 1*1024kB (M) 5*2048kB (UE) 386*4096kB (UM) = 1606672kB [ 230.778788][ T9763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.781168][ T9763] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.783565][ T9763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.786083][ T9763] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.788780][ T9763] 22244 total pagecache pages [ 230.790046][ T9763] 0 pages in swap cache [ 230.791134][ T9763] Free swap = 124296kB [ 230.792218][ T9763] Total swap = 124996kB [ 230.793314][ T9763] 1048443 pages RAM [ 230.794322][ T9763] 0 pages HighMem/MovableOnly [ 230.795517][ T9763] 281075 pages reserved [ 230.796548][ T9763] 0 pages cma reserved [ 231.456133][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 231.550888][ T9796] exFAT-fs (nullb0): invalid boot record signature [ 231.552843][ T9796] exFAT-fs (nullb0): failed to read boot sector [ 231.554547][ T9796] exFAT-fs (nullb0): failed to recognize exfat type [ 231.563019][ T9796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9796 comm=syz.1.1221 [ 231.609827][ T9798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1222'. [ 231.668668][ T40] audit: type=1400 audit(1729701924.956:983): avc: denied { write } for pid=9800 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 231.717546][ T40] audit: type=1400 audit(1729701925.006:984): avc: denied { shutdown } for pid=9800 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 231.907239][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 232.394925][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 233.222781][ T9864] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 233.227236][ T9864] netlink: 1824 bytes leftover after parsing attributes in process `syz.0.1244'. [ 233.229759][ T9864] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1244'. [ 234.502246][ T9892] FAULT_INJECTION: forcing a failure. [ 234.502246][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 234.505918][ T9892] CPU: 3 UID: 0 PID: 9892 Comm: syz.0.1257 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 234.508722][ T9892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.511498][ T9892] Call Trace: [ 234.512384][ T9892] [ 234.513175][ T9892] dump_stack_lvl+0x16c/0x1f0 [ 234.514433][ T9892] should_fail_ex+0x497/0x5b0 [ 234.515659][ T9892] ? fs_reclaim_acquire+0xae/0x150 [ 234.517006][ T9892] should_failslab+0xc2/0x120 [ 234.518570][ T9892] __kmalloc_noprof+0xcb/0x400 [ 234.520204][ T9892] mpi_alloc_limb_space+0x31/0x60 [ 234.521928][ T9892] mpi_powm+0x513/0x1be0 [ 234.523394][ T9892] ? __pfx_mpi_powm+0x10/0x10 [ 234.525002][ T9892] ? kasan_save_track+0x14/0x30 [ 234.526666][ T9892] ? __kasan_kmalloc+0xaa/0xb0 [ 234.528303][ T9892] dh_compute_value+0x1b2/0x3b0 [ 234.530026][ T9892] ? __pfx_dh_compute_value+0x10/0x10 [ 234.531855][ T9892] ? __kmalloc_noprof+0x207/0x400 [ 234.533580][ T9892] ? __phys_addr+0xc6/0x150 [ 234.535141][ T9892] __keyctl_dh_compute+0x7d8/0xf50 [ 234.536874][ T9892] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 234.538778][ T9892] ? ksys_write+0x12f/0x260 [ 234.540340][ T9892] ? __pfx_lock_release+0x10/0x10 [ 234.542057][ T9892] ? trace_lock_acquire+0x14a/0x1d0 [ 234.543842][ T9892] keyctl_dh_compute+0xd3/0x140 [ 234.545509][ T9892] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 234.547366][ T9892] ? ksys_write+0x1ad/0x260 [ 234.548881][ T9892] ? __pfx_ksys_write+0x10/0x10 [ 234.550579][ T9892] __do_sys_keyctl+0x4df/0x590 [ 234.552221][ T9892] do_syscall_64+0xcd/0x250 [ 234.553798][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.555803][ T9892] RIP: 0033:0x7f4e89d7dff9 [ 234.556997][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.561989][ T9892] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 234.564167][ T9892] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 234.566242][ T9892] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000017 [ 234.568294][ T9892] RBP: 00007f4e8abfc090 R08: 0000000020000000 R09: 0000000000000000 [ 234.570368][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.572411][ T9892] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 234.574495][ T9892] [ 235.007499][ T5375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.160696][ T5375] usb 5-1: config 151 has an invalid descriptor of length 186, skipping remainder of the config [ 235.164527][ T5375] usb 5-1: config 151 interface 0 altsetting 15 endpoint 0x2 has an invalid bInterval 22, changing to 8 [ 235.168191][ T5375] usb 5-1: config 151 interface 0 altsetting 15 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 235.171430][ T5375] usb 5-1: config 151 interface 0 altsetting 15 bulk endpoint 0xA has invalid maxpacket 64 [ 235.174878][ T5375] usb 5-1: config 151 interface 0 altsetting 15 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 235.178812][ T5375] usb 5-1: config 151 interface 0 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 235.182936][ T5375] usb 5-1: config 151 interface 0 has no altsetting 0 [ 235.186281][ T5375] usb 5-1: Dual-Role OTG device on HNP port [ 235.188146][ T5375] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=da.4a [ 235.190604][ T5375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.192708][ T5375] usb 5-1: Product: 觎㻐蹌惈华䝗䈗ു풚䋪़涮嵼馄韄餤츕殐䗥벶縯堎䌣괵䝅鱏䄅屸⴩பᩂ햱㔄㰇⣩뿁叼덩Ὼ䮏ℶ삺鏦슏斕苊佚쨦䄪삿 [ 235.199485][ T5375] usb 5-1: Manufacturer: 摻⎠꾺켝獔쩈ū๐ቦ쭖ㆠ繵䃿幏ᵊ뛜夌Ἔ਩싰籋ᴡᷧꨶ⟂Γ萧蜺ᱹ쀏⫧蒾螙Ň絜仃䏀匉䦜둻㯔ኸ抭襘읉腰쒽纰ᕚ醒媎붽迭蟻寿鳶癚타刑퍽徾冲徫鞮뤱ㅷ獒ᾷ⌺ﯻߡ쌦䭢홎࿊뀪賷䂂ឧ悳㓲訍鴐乥ﰏ乞 [ 235.209774][ T5375] usb 5-1: SerialNumber:  [ 235.215694][ T9896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.131452][ T5375] gs_usb 5-1:151.0: Couldn't send data format (err=-71) [ 236.133446][ T5375] gs_usb 5-1:151.0: probe with driver gs_usb failed with error -71 [ 236.139972][ T5375] usb 5-1: USB disconnect, device number 12 [ 237.236641][ T40] audit: type=1326 audit(1729701930.516:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1271" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e89d7dff9 code=0x7ffc0000 [ 237.244658][ T40] audit: type=1326 audit(1729701930.516:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1271" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e89d7dff9 code=0x7ffc0000 [ 237.253080][ T40] audit: type=1326 audit(1729701930.516:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1271" exe="/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f4e89d7dff9 code=0x7ffc0000 [ 237.260948][ T40] audit: type=1326 audit(1729701930.526:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1271" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e89d7dff9 code=0x7ffc0000 [ 237.266819][ T40] audit: type=1326 audit(1729701930.526:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.1271" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e89d7dff9 code=0x7ffc0000 [ 237.710631][ T9948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1273'. [ 239.875860][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 240.673422][ T40] audit: type=1400 audit(1729701933.956:990): avc: denied { map } for pid=10001 comm="syz.1.1290" path="socket:[33273]" dev="sockfs" ino=33273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.694678][T10002] netlink: 'syz.1.1290': attribute type 3 has an invalid length. [ 240.729907][T10004] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 240.747652][T10004] usb 1-1: USB disconnect, device number 2 [ 241.125778][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1294'. [ 241.211537][ T40] audit: type=1400 audit(1729701934.496:991): avc: denied { ioctl } for pid=10015 comm="syz.0.1294" path="socket:[30714]" dev="sockfs" ino=30714 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.050002][ T40] audit: type=1400 audit(1729701935.336:992): avc: denied { execute } for pid=10029 comm="syz.1.1297" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=34821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 242.199530][ T40] audit: type=1400 audit(1729701935.486:993): avc: denied { ioctl } for pid=10029 comm="syz.1.1297" path="socket:[34136]" dev="sockfs" ino=34136 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.270103][T10034] input: syz1 as /devices/virtual/input/input13 [ 242.331758][T10040] netlink: 212872 bytes leftover after parsing attributes in process `syz.1.1301'. [ 242.334223][T10040] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 242.336307][T10040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 244.188731][T10066] input: syz1 as /devices/virtual/input/input14 [ 244.248868][T10075] netlink: 109516 bytes leftover after parsing attributes in process `syz.3.1312'. [ 244.280382][ T40] audit: type=1400 audit(1729701937.556:994): avc: denied { mount } for pid=10074 comm="syz.3.1312" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 244.364520][T10081] ip6gretap0 speed is unknown, defaulting to 1000 [ 244.389584][T10077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.391363][T10077] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.393871][T10077] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.418974][T10083] ip6gretap0 speed is unknown, defaulting to 1000 [ 244.478945][T10092] input: syz0 as /devices/virtual/input/input15 [ 244.485534][ T40] audit: type=1400 audit(1729701937.766:995): avc: denied { unmount } for pid=5332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 244.546802][T10096] input: syz1 as /devices/virtual/input/input16 [ 244.807295][T10108] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 244.848350][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 244.850606][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.852688][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.854763][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.856786][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.859391][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 244.861463][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.863481][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.865545][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.867611][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.869662][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.871714][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.873785][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.875810][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.878189][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.880232][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.882257][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.884292][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.886448][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.888607][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.890576][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.892559][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.894493][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.896416][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.898539][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.900585][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.902608][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.904588][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.906743][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.908891][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.911085][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.913081][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.915155][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.917305][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.919295][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 244.924932][ T30] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.927718][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 244.934263][T10119] ip6gretap0 speed is unknown, defaulting to 1000 [ 244.939797][ T40] audit: type=1800 audit(1729701938.226:996): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1325" name="[kvm-gmem]" dev="anon_inodefs" ino=32287 res=0 errno=0 [ 245.437988][T10127] input: syz1 as /devices/virtual/input/input17 [ 245.483262][ T40] audit: type=1400 audit(1729701938.766:997): avc: denied { listen } for pid=10128 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.490377][ T40] audit: type=1400 audit(1729701938.776:998): avc: denied { accept } for pid=10128 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.541684][ T40] audit: type=1400 audit(1729701938.826:999): avc: denied { connect } for pid=10128 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 246.175625][T10146] ptrace attach of "/syz-executor exec"[6650] was attempted by "/syz-executor exec"[10146] [ 246.345591][T10150] delete_channel: no stack [ 246.347765][ T40] audit: type=1400 audit(1729701939.636:1000): avc: denied { ioctl } for pid=10147 comm="syz.1.1342" path="socket:[34301]" dev="sockfs" ino=34301 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 246.354497][T10147] delete_channel: no stack [ 246.447462][ T4780] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.898720][T10160] FAULT_INJECTION: forcing a failure. [ 246.898720][T10160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.903143][T10160] CPU: 2 UID: 0 PID: 10160 Comm: syz.0.1337 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 246.906776][T10160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.910719][T10160] Call Trace: [ 246.912314][T10160] [ 246.913638][T10160] dump_stack_lvl+0x16c/0x1f0 [ 246.915707][T10160] should_fail_ex+0x497/0x5b0 [ 246.917820][T10160] _copy_from_user+0x30/0xf0 [ 246.919588][T10160] cmsghdr_from_user_compat_to_kern+0x517/0x800 [ 246.921781][T10160] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 246.924237][T10160] ____sys_sendmsg+0x45c/0xc90 [ 246.925945][T10160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.927393][T10160] ? __pfx_lock_release+0x10/0x10 [ 246.928714][T10160] ? trace_lock_acquire+0x14a/0x1d0 [ 246.930127][T10160] ? __copy_msghdr+0x2ff/0x470 [ 246.931394][T10160] ? lock_acquire+0x2f/0xb0 [ 246.932619][T10160] ? __fget_files+0x40/0x3f0 [ 246.933960][T10160] __sys_sendmsg_sock+0x29/0x40 [ 246.935265][T10160] io_sendmsg+0x1c7/0x7c0 [ 246.936409][T10160] io_issue_sqe+0x4c5/0x13d0 [ 246.937741][T10160] io_submit_sqes+0x9b4/0x2530 [ 246.939006][T10160] __do_sys_io_uring_enter+0xc0f/0x1170 [ 246.940452][T10160] ? __fget_files+0x244/0x3f0 [ 246.941713][T10160] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 246.943294][T10160] ? fput+0x30/0x390 [ 246.944332][T10160] ? ksys_write+0x1ad/0x260 [ 246.945652][T10160] ? __pfx_ksys_write+0x10/0x10 [ 246.946966][T10160] do_syscall_64+0xcd/0x250 [ 246.948187][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.949791][T10160] RIP: 0033:0x7f4e89d7dff9 [ 246.950979][T10160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.956140][T10160] RSP: 002b:00007f4e8abfc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 246.958277][T10160] RAX: ffffffffffffffda RBX: 00007f4e89f35f80 RCX: 00007f4e89d7dff9 [ 246.960343][T10160] RDX: 0000000000000000 RSI: 0000000000000092 RDI: 0000000000000003 [ 246.962444][T10160] RBP: 00007f4e8abfc090 R08: 0000000000000000 R09: 0000000000000000 [ 246.964558][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.966762][T10160] R13: 0000000000000000 R14: 00007f4e89f35f80 R15: 00007fff6b6cf188 [ 246.968935][T10160] [ 248.527297][ T4780] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.777362][ T35] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 248.927313][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 248.930335][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.934456][ T35] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.936754][ T35] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.939163][ T35] usb 8-1: Product: syz [ 248.940339][ T35] usb 8-1: Manufacturer: syz [ 248.942051][ T35] usb 8-1: SerialNumber: syz [ 248.945658][ T35] usb 8-1: config 0 descriptor?? [ 248.948448][T10185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.152779][T10185] FAULT_INJECTION: forcing a failure. [ 249.152779][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 249.157859][T10185] CPU: 2 UID: 0 PID: 10185 Comm: syz.3.1346 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 249.161548][T10185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.165257][T10185] Call Trace: [ 249.166431][T10185] [ 249.167473][T10185] dump_stack_lvl+0x16c/0x1f0 [ 249.169165][T10185] should_fail_ex+0x497/0x5b0 [ 249.170813][T10185] ? fs_reclaim_acquire+0xae/0x150 [ 249.172600][T10185] should_failslab+0xc2/0x120 [ 249.174268][T10185] __kmalloc_cache_noprof+0x6b/0x300 [ 249.176353][T10185] ? dummy_urb_enqueue+0x8d/0x8e0 [ 249.178055][T10185] dummy_urb_enqueue+0x8d/0x8e0 [ 249.179760][T10185] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 249.181733][T10185] usb_hcd_submit_urb+0x2d1/0x2090 [ 249.183511][T10185] ? trace_rpm_return_int+0x19d/0x220 [ 249.185495][T10185] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 249.187454][T10185] ? lock_acquire.part.0+0x11b/0x380 [ 249.189338][T10185] ? find_held_lock+0x2d/0x110 [ 249.191032][T10185] ? __pm_runtime_resume+0xc3/0x170 [ 249.192882][T10185] ? __pfx_lock_release+0x10/0x10 [ 249.194580][T10185] ? mark_held_locks+0x9f/0xe0 [ 249.196188][T10185] usb_submit_urb+0x87c/0x1730 [ 249.197860][T10185] ? __pm_runtime_resume+0xc3/0x170 [ 249.199667][T10185] _chaoskey_fill+0x326/0x8e0 [ 249.201298][T10185] ? __mutex_lock+0x1a6/0x9c0 [ 249.202948][T10185] ? __pfx__chaoskey_fill+0x10/0x10 [ 249.204760][T10185] ? __pfx_autoremove_wake_function+0x10/0x10 [ 249.206865][T10185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.208959][T10185] ? inode_security+0x101/0x130 [ 249.210651][T10185] chaoskey_read+0x2ea/0x600 [ 249.212285][T10185] ? __pfx_chaoskey_read+0x10/0x10 [ 249.214078][T10185] vfs_read+0x1ce/0xbd0 [ 249.215548][T10185] ? __fget_files+0x23a/0x3f0 [ 249.217202][T10185] ? __pfx_lock_release+0x10/0x10 [ 249.218944][T10185] ? trace_lock_acquire+0x14a/0x1d0 [ 249.220765][T10185] ? __pfx_vfs_read+0x10/0x10 [ 249.222438][T10185] ? lock_acquire+0x2f/0xb0 [ 249.224032][T10185] ? __fget_files+0x40/0x3f0 [ 249.225681][T10185] ? __fget_files+0x244/0x3f0 [ 249.227346][T10185] ksys_read+0x12f/0x260 [ 249.228834][T10185] ? __pfx_ksys_read+0x10/0x10 [ 249.230555][T10185] do_syscall_64+0xcd/0x250 [ 249.232166][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.234213][T10185] RIP: 0033:0x7efdf1d7dff9 [ 249.235777][T10185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.242474][T10185] RSP: 002b:00007efdf2ade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.245366][T10185] RAX: ffffffffffffffda RBX: 00007efdf1f35f80 RCX: 00007efdf1d7dff9 [ 249.248091][T10185] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000004 [ 249.250878][T10185] RBP: 00007efdf2ade090 R08: 0000000000000000 R09: 0000000000000000 [ 249.253631][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.256351][T10185] R13: 0000000000000000 R14: 00007efdf1f35f80 R15: 00007ffc358b6998 [ 249.259228][T10185] [ 249.497211][T10193] ------------[ cut here ]------------ [ 249.498960][T10193] platform vkms: [drm] vblank wait timed out on crtc 0 [ 249.500973][T10193] WARNING: CPU: 1 PID: 10193 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550 [ 249.503688][T10193] Modules linked in: [ 249.505349][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.0.1348 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.506692][ T40] audit: type=1400 audit(1729701942.786:1001): avc: denied { write } for pid=5273 comm="syz-executor" path="pipe:[5261]" dev="pipefs" ino=5261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 249.509806][T10193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.509844][T10193] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 249.509863][T10193] Code: 85 ed 0f 84 54 01 00 00 e8 09 0a 62 fc 4c 89 e7 e8 21 f8 86 00 89 e9 4c 89 ea 48 c7 c7 60 5c e7 8b 48 89 c6 e8 fd fa 22 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 de 09 62 fc 90 48 8d 7b 08 48 b8 00 [ 249.509875][T10193] RSP: 0018:ffffc900043e7b28 EFLAGS: 00010286 [ 249.509887][T10193] RAX: 0000000000000000 RBX: ffff888025580000 RCX: ffffc9000d194000 [ 249.509896][T10193] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 249.533259][T10193] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 249.535303][T10193] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802538c010 [ 249.537448][T10193] R13: ffff888024ee60e0 R14: 1ffff9200087cf67 R15: 00000000000020cf [ 249.539498][T10193] FS: 00007f4e8abba6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 249.541826][T10193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.543530][T10193] CR2: 0000000020032000 CR3: 000000002f636000 CR4: 0000000000352ef0 [ 249.545583][T10193] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 249.547730][T10193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.549757][T10193] Call Trace: [ 249.550638][T10193] [ 249.552428][T10193] ? __warn+0xea/0x3d0 [ 249.553892][T10193] ? drm_wait_one_vblank+0x334/0x550 [ 249.555493][T10193] ? report_bug+0x3c0/0x580 [ 249.556856][T10193] ? handle_bug+0x54/0xa0 [ 249.558360][T10193] ? exc_invalid_op+0x17/0x50 [ 249.559927][T10193] ? asm_exc_invalid_op+0x1a/0x20 [ 249.561386][T10193] ? __warn_printk+0x1a6/0x350 [ 249.562761][T10193] ? drm_wait_one_vblank+0x334/0x550 [ 249.564514][T10193] ? drm_wait_one_vblank+0x333/0x550 [ 249.565946][T10193] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 249.567681][T10193] ? preempt_schedule_thunk+0x1a/0x30 [ 249.569115][T10193] ? __pfx_autoremove_wake_function+0x10/0x10 [ 249.570741][T10193] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 249.572276][T10193] ? drm_vblank_get+0x150/0x280 [ 249.573575][T10193] drm_fb_helper_ioctl+0x156/0x1a0 [ 249.574926][T10193] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 249.576394][T10193] do_fb_ioctl+0x3d4/0x7d0 [ 249.577676][T10193] ? __pfx_do_fb_ioctl+0x10/0x10 [ 249.578984][T10193] ? do_vfs_ioctl+0xfa4/0x1990 [ 249.579207][ T5394] usb 8-1: USB disconnect, device number 27 [ 249.580240][T10193] ? do_vfs_ioctl+0x513/0x1990 [ 249.583127][T10193] ? selinux_file_ioctl+0x180/0x270 [ 249.584514][T10193] fb_ioctl+0xe5/0x150 [ 249.585615][T10193] ? __pfx_fb_ioctl+0x10/0x10 [ 249.586867][T10193] __x64_sys_ioctl+0x18f/0x220 [ 249.588449][T10193] do_syscall_64+0xcd/0x250 [ 249.589801][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.591356][T10193] RIP: 0033:0x7f4e89d7dff9 [ 249.592649][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.597873][T10193] RSP: 002b:00007f4e8abba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.600078][T10193] RAX: ffffffffffffffda RBX: 00007f4e89f36130 RCX: 00007f4e89d7dff9 [ 249.602350][T10193] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 249.604441][T10193] RBP: 00007f4e89df0296 R08: 0000000000000000 R09: 0000000000000000 [ 249.606599][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.608863][T10193] R13: 0000000000000000 R14: 00007f4e89f36130 R15: 00007fff6b6cf188 [ 249.610993][T10193] [ 249.611831][T10193] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.613737][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.0.1348 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 249.616510][T10193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.619353][T10193] Call Trace: [ 249.620268][T10193] [ 249.621066][T10193] dump_stack_lvl+0x3d/0x1f0 [ 249.622407][T10193] panic+0x71d/0x800 [ 249.623481][T10193] ? __pfx_panic+0x10/0x10 [ 249.624833][T10193] ? show_trace_log_lvl+0x29d/0x3d0 [ 249.626234][T10193] ? drm_wait_one_vblank+0x334/0x550 [ 249.627631][T10193] check_panic_on_warn+0xab/0xb0 [ 249.628979][T10193] __warn+0xf6/0x3d0 [ 249.630046][T10193] ? drm_wait_one_vblank+0x334/0x550 [ 249.631437][T10193] report_bug+0x3c0/0x580 [ 249.632601][T10193] handle_bug+0x54/0xa0 [ 249.633736][T10193] exc_invalid_op+0x17/0x50 [ 249.634953][T10193] asm_exc_invalid_op+0x1a/0x20 [ 249.636254][T10193] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 249.637830][T10193] Code: 85 ed 0f 84 54 01 00 00 e8 09 0a 62 fc 4c 89 e7 e8 21 f8 86 00 89 e9 4c 89 ea 48 c7 c7 60 5c e7 8b 48 89 c6 e8 fd fa 22 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 de 09 62 fc 90 48 8d 7b 08 48 b8 00 [ 249.642877][T10193] RSP: 0018:ffffc900043e7b28 EFLAGS: 00010286 [ 249.644382][T10193] RAX: 0000000000000000 RBX: ffff888025580000 RCX: ffffc9000d194000 [ 249.646468][T10193] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001 [ 249.648546][T10193] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 249.650649][T10193] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802538c010 [ 249.652741][T10193] R13: ffff888024ee60e0 R14: 1ffff9200087cf67 R15: 00000000000020cf [ 249.654823][T10193] ? __warn_printk+0x1a6/0x350 [ 249.656102][T10193] ? drm_wait_one_vblank+0x333/0x550 [ 249.657495][T10193] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 249.658988][T10193] ? preempt_schedule_thunk+0x1a/0x30 [ 249.660404][T10193] ? __pfx_autoremove_wake_function+0x10/0x10 [ 249.662021][T10193] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 249.663552][T10193] ? drm_vblank_get+0x150/0x280 [ 249.664828][T10193] drm_fb_helper_ioctl+0x156/0x1a0 [ 249.666196][T10193] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 249.667668][T10193] do_fb_ioctl+0x3d4/0x7d0 [ 249.668852][T10193] ? __pfx_do_fb_ioctl+0x10/0x10 [ 249.670196][T10193] ? do_vfs_ioctl+0xfa4/0x1990 [ 249.671459][T10193] ? do_vfs_ioctl+0x513/0x1990 [ 249.672734][T10193] ? selinux_file_ioctl+0x180/0x270 [ 249.674081][T10193] fb_ioctl+0xe5/0x150 [ 249.675122][T10193] ? __pfx_fb_ioctl+0x10/0x10 [ 249.676478][T10193] __x64_sys_ioctl+0x18f/0x220 [ 249.677771][T10193] do_syscall_64+0xcd/0x250 [ 249.678966][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.680478][T10193] RIP: 0033:0x7f4e89d7dff9 [ 249.681686][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.686723][T10193] RSP: 002b:00007f4e8abba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.688938][T10193] RAX: ffffffffffffffda RBX: 00007f4e89f36130 RCX: 00007f4e89d7dff9 [ 249.691026][T10193] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 249.693044][T10193] RBP: 00007f4e89df0296 R08: 0000000000000000 R09: 0000000000000000 [ 249.695083][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.697166][T10193] R13: 0000000000000000 R14: 00007f4e89f36130 R15: 00007fff6b6cf188 [ 249.699210][T10193] [ 249.700614][T10193] Kernel Offset: disabled [ 249.701835][T10193] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:37:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff90efac38 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90003abf588 RSP=ffffc90003abf480 R8 =ffffffff90efac56 R9 =ffffffff90efac3c R10=ffffc90003abf540 R11=0000000000003487 R12=ffffc90003abf590 R13=ffffc90003abf540 R14=ffffc90003abf5e0 R15=ffffc90003abf5d0 RIP=ffffffff813d5400 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007efdf2abd6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe67286a90 CR3=0000000023cbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae d64ba0aed64ba0ae ZMM22=71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a 71cb757a71cb757a ZMM23=5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 5ed861f55ed861f5 ZMM24=3661560e3661560e 3661560e3661560e 3661560e3661560e 3661560e3661560e 3661560e3661560e 3661560e3661560e 3661560e3661560e 3661560e3661560e ZMM25=46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc 46c942fc46c942fc ZMM26=75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea 75d02aea75d02aea ZMM27=b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 b61f5c38b61f5c38 ZMM28=000000900000008f 0000008e0000008d 0000008c0000008b 0000008a00000089 0000008800000087 0000008600000085 0000008400000083 0000008200000081 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=870f0000870f0000 870f0000870f0000 870f0000870f0000 870f0000870f0000 870f0000870f0000 870f0000870f0000 870f0000870f0000 870f0000870f0000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b00a5 RDI=ffffffff9aae6bc0 RBP=ffffffff9aae6b80 RSP=ffffc900043e7488 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000049 R14=ffffffff850b0040 R15=0000000000000000 RIP=ffffffff850b00cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4e8abba6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020032000 CR3=000000002f636000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81d4e7cc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89f0b488 00007f4e89f0b480 00007f4e89f0b478 00007f4e89f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e8aa6d100 00007f4e89f0b440 00007f4e89f0b458 00007f4e89f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89f0b498 00007f4e89f0b490 00007f4e89f0b488 00007f4e89f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000ef RCX=ffffffff816da75a RDX=ffff88801f2b0000 RSI=ffffffff816da746 RDI=0000000000000001 RBP=1ffff92000130f7f RSP=ffffc90000987be8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff88802bca2440 R15=ffffc90000987cd0 RIP=ffffffff816da750 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31203ff8 CR3=000000002f636000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e58c8 ffffffff813e58a9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e5920 ffffffff813e58c8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813e917d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e5112 ffffffff813e4dd2 ffffffff813e4a7c ffffffff813e4a15 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e5920 ffffffff813e58c8 ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e5880 ffffffff813e582c ffffffff813e5112 ffffffff813e4dd2 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000003ffff RBX=ffff888047650000 RCX=ffffc9000c403000 RDX=0000000000040000 RSI=ffffffff8158277e RDI=ffff88804f1ff278 RBP=0000000000000000 RSP=ffffc900041af7e0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900041af918 R11=0000000000000000 R12=0000000000000010 R13=0000000000000000 R14=0000000000000000 R15=ffff88804ba695e8 RIP=ffffffff818d7f56 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e8abdb6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd1834d9078 CR3=000000002f636000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81582abc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89f0b488 00007f4e89f0b480 00007f4e89f0b478 00007f4e89f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e8aa6d100 00007f4e89f0b440 00007f4e89f0b458 00007f4e89f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e89f0b498 00007f4e89f0b490 00007f4e89f0b488 00007f4e89f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000