last executing test programs: 5.708888574s ago: executing program 2 (id=7069): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e38, 0x8}, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb70280000080003000300000018000400aa", @ANYRES32=r5], 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r0, &(0x7f00000000c0)=0x58, 0x5) 4.788449647s ago: executing program 2 (id=7071): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="00e4d65d734a2b3f5afd133336110ae6e36de9f334ea35ab2d9114389e6f4c3c82bbd2ae8e5b896c409b82b1c65887224313f96fa6a33e72c94464c85f2ada0cd50522954d449cfed7ff1c5adbf7fee72c5852af6547381151b746d04bcfbc963778ad5d7bf066ffb809ada134e443451a6775ce5be550981fa30534bd2dc0e9bdb1212709ad418fa4dde13db52640794736e8dd11aa3e414fb6e0053179baf206ad45da8ea9dc59ae4a1fe3e82e8848218695f4239d0cc81e466340d900826acbe3cbccaeb8", @ANYBLOB="5452d96674b3ce5833f2405c535401bedacfc96c95d952be6d5cedc482b36165beecc166c071ff093d06a1222dfee2692d2c765a22386a73c7c8a31ef408dd429d6314a3c03d5afcdee86898def1011812e6fa35d51ae34312286aa406c186d341da03bbdf805041c7aa41c1c8be903f16a11f33f78057284eec383c16bef52e99bcd2d67d29c7f697eb9abac4eb540f3af0e30972bccf95b2edd93d602324897a361e5ec43fc9399c4083a80cc99df9f74ca1096e5298d14ed9d61aea7f6f53127519941cdbb526bb05e09defac9de1a1585251f75567a4496a8a6771048483904bf0f0", @ANYRES32, @ANYBLOB='@\x00'/28], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x26063c, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x5, 0x5e3b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffff72b53b55b62708004520007800000000000190780a010102ac1414aa0300907801000000470000000000000000110000000f000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414fe00"/118], 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x1100000002, 0x40080) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1414aa640101010000000009000000e0000002ac1414bb01ffffffff7f00000164010101000000000000000000000000000000c6009aa2369eba51425f56d2d27b7bbae137f086061935d751f08b57d36e25312eea440dd910a361e7845043e8b39090f85507c7885d518bc0f238969066093d2ac9353712d5ba36333b6c5d35ae74cda2f49bc3b3d3bf094c805941244b5bc2e4ea7894e02e578098b6b11dea577bfbd13b0bf14be87aab7b2821ea3a68013afd658dae146a12c4e9796904437327b2c92eeaef433765e599261b84ef2fc72480c666e178b860e83a2c1e4e31e72864110ee712954e7aa5add62dfb10db90093719ad1633d9447d745d310ee24aa01b064d06de64c0fb225bb7925527ba01d45897fc883bbf50a6a2c7c0a6fa434957312b1744071d23f93ecac9279f8400000000000000"], 0x34) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) getpid() 4.0161793s ago: executing program 3 (id=7078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000000c0)={0x1, 0xdc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x203, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.609241186s ago: executing program 3 (id=7082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x3, r8}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.608875238s ago: executing program 2 (id=7083): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f94924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x8340}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syncfs(0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.138024924s ago: executing program 0 (id=7084): socket$kcm(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMEJECT(r2, 0x5309) 3.06934205s ago: executing program 0 (id=7086): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') faccessat2(r0, &(0x7f0000000040)='\x00', 0x1, 0x1300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) 2.887653769s ago: executing program 0 (id=7088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1f7220979351aa7c7b477796b726a5672a3d63cb482e573220a58d2359bebf04e4f9d08fbfd20d1ca3c50d1ad11587836b9c41c8355c42c9db848d037aa0b85775031ede2eba644b6c9bb96e433c60fc1ad55d21673b10087d5731cc399435b8a9abdb66d9fe8c7dec570546b7b2834e50b71ce93d8d54c94ce54f1c128c28f0bf4667f056c1039cfe2af9dd0d5feceeb4ae452d61c79b5a0e9ae893b9dc26e97189a018e89d94b3785f5f13a40f0b7b4f9c04b37695d1f12add67a1c80af773c3a0d64834726ee7f0b5b2314613a6710896292cd86d5d568c6781c5fa145ac5d031b0f319dddf04310eb0056b38511b70c", @ANYRES8=r0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x8, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x60}}, 0x200000c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 2.829346833s ago: executing program 1 (id=7089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x3, @default, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x6) 2.714253848s ago: executing program 1 (id=7090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000000c0)={0x1, 0xdc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x203, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.196347224s ago: executing program 1 (id=7091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="03", 0x1, 0xfffffffffffffffe) keyctl$unlink(0x11, r1, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x40850) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}}}]}, 0x78}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=bind:0-', @ANYRESDEC]) 2.189102751s ago: executing program 3 (id=7092): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x3, r8}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.147843646s ago: executing program 2 (id=7093): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x5, 0x4, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001b40), 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/112, 0x70}], 0x2, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0x56c1, &(0x7f0000000580)={0x0, 0x4f89, 0x400, 0xfffffffd, 0x1}, &(0x7f0000000280), &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) getpid() 2.088197656s ago: executing program 1 (id=7094): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e38, 0x8}, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb70280000080003000300000018000400aa", @ANYRES32=r5], 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0x9}, @hyper, 0x0, 0x4, 0x140000000000000, 0x3, 0x9, 0x8}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r0, &(0x7f00000000c0)=0x58, 0x5) 2.018185638s ago: executing program 0 (id=7095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, r7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.187140834s ago: executing program 3 (id=7096): socket$kcm(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5304, &(0x7f0000000440)={"7b80aae6d5d0dc8f29cfcf08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) 1.18641641s ago: executing program 1 (id=7097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) setfsuid(0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0x0, 0x2}]}) 1.186200854s ago: executing program 3 (id=7098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102}, @nfc, @xdp={0x2c, 0x5b639c4ec1334926, 0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0xfd00, 0x0, 0xb}) 1.128620384s ago: executing program 3 (id=7099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000000c0)={0x1, 0xdc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x203, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.128317001s ago: executing program 0 (id=7100): r0 = syz_socket_connect_nvme_tcp() close(r0) 2.388108ms ago: executing program 0 (id=7101): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x80100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b703000000000000850000005100000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000500)=[@increfs_done, @decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x29, 0x0, &(0x7f0000000640)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8f}]}], {0x14, 0x10}}, 0x78}}, 0x0) close(0xffffffffffffffff) openat$audio(0xffffff9c, &(0x7f0000000000), 0xc801, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x90081, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, r6, 0x0]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x9, 0x1568, 0x0, {0x0, 0x9, 0x8, 0xf0e, 0x7, 0x6, 0x7, 0x8, 0xea, 0xc000, 0x1, 0x0, r6, 0x8000, 0x4}}}, 0x78) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xffffffff}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0c000320"], 0xf) 0s ago: executing program 1 (id=7102): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="00e4d65d734a2b3f5afd133336110ae6e36de9f334ea35ab2d9114389e6f4c3c82bbd2ae8e5b896c409b82b1c65887224313f96fa6a33e72c94464c85f2ada0cd50522954d449cfed7ff1c5adbf7fee72c5852af6547381151b746d04bcfbc963778ad5d7bf066ffb809ada134e443451a6775ce5be550981fa30534bd2dc0e9bdb1212709ad418fa4dde13db52640794736e8dd11aa3e414fb6e0053179baf206ad45da8ea9dc59ae4a1fe3e82e8848218695f4239d0cc81e466340d900826acbe3cbccaeb8", @ANYBLOB="5452d96674b3ce5833f2405c535401bedacfc96c95d952be6d5cedc482b36165beecc166c071ff093d06a1222dfee2692d2c765a22386a73c7c8a31ef408dd429d6314a3c03d5afcdee86898def1011812e6fa35d51ae34312286aa406c186d341da03bbdf805041c7aa41c1c8be903f16a11f33f78057284eec383c16bef52e99bcd2d67d29c7f697eb9abac4eb540f3af0e30972bccf95b2edd93d602324897a361e5ec43fc9399c4083a80cc99df9f74ca1096e5298d14ed9d61aea7f6f53127519941cdbb526bb05e09defac9de1a1585251f75567a4496a8a6771048483904bf0f0", @ANYRES32, @ANYBLOB='@\x00'/28], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x26063c, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x5, 0x5e3b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b0001000000000000000000040100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348fcff2126ff01000000000000b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc36c29be82fd3f8cd100000000"], 0x114}], 0x1, 0x0, 0x0, 0x8040}, 0x0) kernel console output (not intermixed with test programs): [U] [ 1573.148368][ T1228] [U] u% l [ 1573.149261][ T1228] [U] wX.mPEvd@ܕHjF5赘BZn3"lKk [ 1573.158366][ T1228] [U] CZ -aKkCf5!JX'jtlK5h$P[-_قaV4ݦow˒B]e`L Doˍn<Ē"|gȧXpVC>CVj> 4H1Os [ 1573.162420][ T1228] [U] $~(ƹ9Hyd C\5ǘl-RbO [ 1573.164169][ T1228] [U] [ 1573.164886][ T1228] [U] [ 1573.176157][ T1228] [U] [ 1573.177387][ T1228] [U] [ 1573.178303][ T1228] [U] [ 1573.179088][ T1228] [U] [ 1573.188863][ T1228] [U] [ 1573.189596][ T1228] [U] [ 1573.190321][ T1228] [U] [ 1573.191008][ T1228] [U] [ 1573.191724][ T1228] [U] [ 1573.192429][ T1228] [U] [ 1573.193132][ T1228] [U] [ 1573.193857][ T1228] [U] [ 1573.194546][ T1228] [U] [ 1573.195254][ T1228] [U] [ 1573.195964][ T1228] [U] [ 1573.196665][ T1228] [U] [ 1573.197360][ T1228] [U] [ 1573.198809][ T1228] [U] [ 1573.199550][ T1228] [U] [ 1573.200244][ T1228] [U] [ 1573.200931][ T1228] [U] [ 1573.201695][ T1228] [U] [ 1573.202440][ T1228] [U] [ 1573.203151][ T1228] [U] [ 1573.203878][ T1228] [U] [ 1573.204658][ T1228] [U] [ 1573.205392][ T1228] [U] [ 1573.206122][ T1228] [U] [ 1573.206897][ T1228] [U] [ 1573.207703][ T1228] [U] [ 1573.208403][ T1228] [U] [ 1573.209098][ T1228] [U] [ 1573.209807][ T1228] [U] [ 1573.210524][ T1228] [U] [ 1573.211237][ T1228] [U] [ 1573.211954][ T1228] [U] [ 1573.212650][ T1228] [U] [ 1573.213418][ T1228] [U] [ 1573.214198][ T1228] [U] [ 1573.214890][ T1228] [U] [ 1573.215594][ T1228] [U] [ 1573.216706][ T1228] [U] [ 1573.217418][ T1228] [U] [ 1573.218212][ T1228] [U] [ 1573.218914][ T1228] [U] [ 1573.219663][ T1228] [U] [ 1573.220366][ T1228] [U] [ 1573.221059][ T1228] [U] [ 1573.221754][ T1228] [U] [ 1573.222458][ T1228] [U] [ 1573.223133][ T1228] [U] [ 1573.223838][ T1228] [U] [ 1573.224530][ T1228] [U] [ 1573.225236][ T1228] [U] [ 1573.225941][ T1228] [U] [ 1573.226632][ T1228] [U] [ 1573.227310][ T1228] [U] [ 1573.228093][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1573.230157][ T1228] [U] [ 1573.230840][ T1228] [U] [ 1573.231509][ T1228] [U] [ 1573.232185][ T1228] [U] [ 1573.232880][ T1228] [U] [ 1573.233584][ T1228] [U] [ 1573.234278][ T1228] [U] [ 1573.234974][ T1228] [U] [ 1573.235735][ T1228] [U] [ 1573.236437][ T1228] [U] [ 1573.237156][ T1228] [U] [ 1573.237883][ T1228] [U] [ 1573.238669][ T1228] [U] [ 1573.239393][ T1228] [U] [ 1573.240118][ T1228] [U] [ 1573.240845][ T1228] [U] [ 1573.241587][ T1228] [U] [ 1573.242332][ T1228] [U] [ 1573.243119][ T1228] [U] [ 1573.243844][ T1228] [U] [ 1573.245463][ T1228] [U] [ 1573.246246][ T1228] [U] [ 1573.246980][ T1228] [U] [ 1573.247740][ T1228] [U] [ 1573.249089][ T1228] [U] [ 1573.250135][ T1228] [U] [ 1573.251162][ T1228] [U] [ 1573.252141][ T1228] [U] [ 1573.252866][ T1228] [U] [ 1573.253602][ T1228] [U] [ 1573.254344][ T1228] [U] [ 1573.255073][ T1228] [U] [ 1573.255817][ T1228] [U] [ 1573.256546][ T1228] [U] [ 1573.257293][ T1228] [U] [ 1573.258256][ T1228] [U] [ 1573.259380][ T1228] [U] [ 1573.260404][ T1228] [U] [ 1573.261167][ T1228] [U] [ 1573.261902][ T1228] [U] [ 1573.262989][ T1228] [U] [ 1573.263714][ T1228] [U] [ 1573.264447][ T1228] [U] [ 1573.265174][ T1228] [U] [ 1573.266078][ T1228] [U] [ 1573.266819][ T1228] [U] [ 1573.267550][ T1228] [U] [ 1573.306826][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1573.510431][ T1242] : renamed from bond0 (while UP) [ 1573.890638][ T1223] [U] [ 1573.942578][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6763'. [ 1573.947125][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1573.956026][ T74] Bluetooth: hci1: Frame reassembly failed (-84) [ 1574.266816][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1574.346902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1574.996877][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1575.306923][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1575.721241][ T1270] netlink: 'syz.2.6767': attribute type 1 has an invalid length. [ 1575.731598][ T1270] bond1: entered promiscuous mode [ 1575.739855][ T1270] team_slave_1: entered promiscuous mode [ 1575.747137][ T1270] team0: Port device team_slave_1 removed [ 1575.750990][ T1270] bond1: (slave team_slave_1): making interface the new active one [ 1575.753881][ T1270] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 1575.950192][T31629] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1576.139345][ T1280] netlink: 'syz.1.6771': attribute type 1 has an invalid length. [ 1576.160565][ T1280] bond0: entered promiscuous mode [ 1576.162341][ T1280] FAULT_INJECTION: forcing a failure. [ 1576.162341][ T1280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.165777][ T1280] CPU: 0 UID: 0 PID: 1280 Comm: syz.1.6771 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1576.168991][ T1280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1576.172867][ T1280] Call Trace: [ 1576.173840][ T1280] [ 1576.174615][ T1280] dump_stack_lvl+0x16c/0x1f0 [ 1576.175817][ T1280] should_fail_ex+0x497/0x5b0 [ 1576.177018][ T1280] _copy_from_user+0x30/0xf0 [ 1576.178891][ T1280] get_compat_msghdr+0xa8/0x170 [ 1576.180252][ T1280] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1576.181807][ T1280] ? __pfx___lock_acquire+0x10/0x10 [ 1576.183204][ T1280] ___sys_sendmsg+0x1b0/0x1e0 [ 1576.184447][ T1280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1576.185824][ T1280] ? lock_acquire+0x2f/0xb0 [ 1576.187032][ T1280] ? __fget_files+0x40/0x3f0 [ 1576.188526][ T1280] ? fdget+0x176/0x210 [ 1576.190038][ T1280] __sys_sendmsg+0x117/0x1f0 [ 1576.191738][ T1280] ? __pfx___sys_sendmsg+0x10/0x10 [ 1576.193529][ T1280] ? __fget_files+0x244/0x3f0 [ 1576.194774][ T1280] __do_fast_syscall_32+0x73/0x120 [ 1576.196113][ T1280] do_fast_syscall_32+0x32/0x80 [ 1576.197456][ T1280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1576.199576][ T1280] RIP: 0023:0xf747e579 [ 1576.200646][ T1280] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1576.205670][ T1280] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1576.208109][ T1280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1576.211224][ T1280] RDX: 0000000004008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.214323][ T1280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1576.216532][ T1280] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1576.219189][ T1280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1576.221340][ T1280] [ 1576.282159][ T1286] FAULT_INJECTION: forcing a failure. [ 1576.282159][ T1286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.286030][ T1286] CPU: 3 UID: 0 PID: 1286 Comm: syz.1.6773 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1576.289257][ T1286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1576.292127][ T1286] Call Trace: [ 1576.293015][ T1286] [ 1576.293819][ T1286] dump_stack_lvl+0x16c/0x1f0 [ 1576.295061][ T1286] should_fail_ex+0x497/0x5b0 [ 1576.296304][ T1286] _copy_to_user+0x30/0xc0 [ 1576.297606][ T1286] simple_read_from_buffer+0xd0/0x160 [ 1576.299064][ T1286] proc_fail_nth_read+0x198/0x270 [ 1576.300440][ T1286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1576.302039][ T1286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1576.303775][ T1286] vfs_read+0x1ce/0xbd0 [ 1576.305082][ T1286] ? __fget_files+0x23a/0x3f0 [ 1576.306573][ T1286] ? fdget_pos+0x24c/0x360 [ 1576.307885][ T1286] ? __pfx_lock_release+0x10/0x10 [ 1576.309392][ T1286] ? trace_lock_acquire+0x14a/0x1d0 [ 1576.310968][ T1286] ? __pfx_vfs_read+0x10/0x10 [ 1576.312396][ T1286] ? __pfx___mutex_lock+0x10/0x10 [ 1576.313806][ T1286] ? __fget_files+0x244/0x3f0 [ 1576.315078][ T1286] ksys_read+0x12f/0x260 [ 1576.316381][ T1286] ? __pfx_ksys_read+0x10/0x10 [ 1576.317771][ T1286] __do_fast_syscall_32+0x73/0x120 [ 1576.319133][ T1286] do_fast_syscall_32+0x32/0x80 [ 1576.320425][ T1286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1576.322104][ T1286] RIP: 0023:0xf747e579 [ 1576.323318][ T1286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1576.329009][ T1286] RSP: 002b:00000000f57665a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1576.331456][ T1286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5766620 [ 1576.333511][ T1286] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1576.335568][ T1286] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1576.337605][ T1286] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1576.339747][ T1286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1576.341803][ T1286] [ 1576.342727][ C3] vkms_vblank_simulate: vblank timer overrun [ 1576.371404][ T1288] UBIFS error (pid: 1288): cannot open "./file0", error -22 [ 1576.372504][ T1288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6774'. [ 1577.386813][ C2] net_ratelimit: 5 callbacks suppressed [ 1577.386826][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1577.466855][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1577.771363][ T1319] FAULT_INJECTION: forcing a failure. [ 1577.771363][ T1319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.774769][ T1319] CPU: 3 UID: 0 PID: 1319 Comm: syz.2.6782 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1577.777856][ T1319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1577.781350][ T1319] Call Trace: [ 1577.782403][ T1319] [ 1577.783221][ T1319] dump_stack_lvl+0x16c/0x1f0 [ 1577.784553][ T1319] should_fail_ex+0x497/0x5b0 [ 1577.785843][ T1319] _copy_to_user+0x30/0xc0 [ 1577.787008][ T1319] simple_read_from_buffer+0xd0/0x160 [ 1577.788409][ T1319] proc_fail_nth_read+0x198/0x270 [ 1577.790054][ T1319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.791799][ T1319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.793313][ T1319] vfs_read+0x1ce/0xbd0 [ 1577.794418][ T1319] ? __fget_files+0x23a/0x3f0 [ 1577.795650][ T1319] ? fdget_pos+0x24c/0x360 [ 1577.796888][ T1319] ? __pfx_lock_release+0x10/0x10 [ 1577.798270][ T1319] ? trace_lock_acquire+0x14a/0x1d0 [ 1577.799975][ T1319] ? __pfx_vfs_read+0x10/0x10 [ 1577.801514][ T1319] ? __pfx___mutex_lock+0x10/0x10 [ 1577.802953][ T1319] ? __fget_files+0x244/0x3f0 [ 1577.804225][ T1319] ksys_read+0x12f/0x260 [ 1577.805218][ T1319] ? __pfx_ksys_read+0x10/0x10 [ 1577.806492][ T1319] __do_fast_syscall_32+0x73/0x120 [ 1577.807875][ T1319] do_fast_syscall_32+0x32/0x80 [ 1577.809182][ T1319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1577.810832][ T1319] RIP: 0023:0xf744e579 [ 1577.811901][ T1319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1577.816919][ T1319] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1577.819121][ T1319] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5736620 [ 1577.821960][ T1319] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 1577.824028][ T1319] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1577.826095][ T1319] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1577.828122][ T1319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1577.830158][ T1319] [ 1577.831055][ C3] vkms_vblank_simulate: vblank timer overrun [ 1578.116836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1578.426837][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1578.516835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1578.545110][ T39] audit: type=1326 audit(1729208429.513:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1332 comm="syz.0.6787" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 1578.595854][ T1338] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1578.681856][ T1340] FAULT_INJECTION: forcing a failure. [ 1578.681856][ T1340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.685624][ T1340] CPU: 2 UID: 0 PID: 1340 Comm: syz.1.6789 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1578.688746][ T1340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1578.691730][ T1340] Call Trace: [ 1578.692848][ T1340] [ 1578.693936][ T1340] dump_stack_lvl+0x16c/0x1f0 [ 1578.695258][ T1340] should_fail_ex+0x497/0x5b0 [ 1578.696536][ T1340] _copy_from_user+0x30/0xf0 [ 1578.697798][ T1340] __sys_bpf+0x215/0x5780 [ 1578.698945][ T1340] ? ksys_write+0x21e/0x260 [ 1578.700140][ T1340] ? __pfx___sys_bpf+0x10/0x10 [ 1578.701399][ T1340] ? vfs_write+0x14d/0x1140 [ 1578.702603][ T1340] ? __mutex_unlock_slowpath+0x164/0x650 [ 1578.704077][ T1340] ? fput+0x30/0x390 [ 1578.705110][ T1340] ? ksys_write+0x1ad/0x260 [ 1578.706308][ T1340] ? __pfx_ksys_write+0x10/0x10 [ 1578.707587][ T1340] __ia32_sys_bpf+0x76/0xe0 [ 1578.708781][ T1340] __do_fast_syscall_32+0x73/0x120 [ 1578.710150][ T1340] do_fast_syscall_32+0x32/0x80 [ 1578.711434][ T1340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1578.713111][ T1340] RIP: 0023:0xf747e579 [ 1578.714202][ T1340] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1578.719355][ T1340] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1578.721540][ T1340] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 1578.723641][ T1340] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1578.725738][ T1340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1578.727961][ T1340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1578.730061][ T1340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1578.732142][ T1340] [ 1578.733250][ C2] hpet: Lost 2 RTC interrupts [ 1579.156870][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1579.193509][ T1358] virtio-fs: tag <(null)> not found [ 1579.466815][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1579.546843][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1579.935950][ T1380] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1579.983770][ T1386] fuse: Unknown parameter '' [ 1580.186885][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1580.654868][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.656458][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.659814][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.663741][ T1401] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1580.669614][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.672913][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.675505][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.678069][ T1401] lo speed is unknown, defaulting to 1000 [ 1580.727818][ T1404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6807'. [ 1580.858990][ T1418] FAULT_INJECTION: forcing a failure. [ 1580.858990][ T1418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.870592][ T1418] CPU: 3 UID: 0 PID: 1418 Comm: syz.1.6812 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1580.873575][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1580.876361][ T1418] Call Trace: [ 1580.877251][ T1418] [ 1580.878072][ T1418] dump_stack_lvl+0x16c/0x1f0 [ 1580.879346][ T1418] should_fail_ex+0x497/0x5b0 [ 1580.880872][ T1418] _copy_from_user+0x30/0xf0 [ 1580.882101][ T1418] get_compat_msghdr+0xa8/0x170 [ 1580.883372][ T1418] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1580.884783][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 1580.886223][ T1418] ___sys_sendmsg+0x1b0/0x1e0 [ 1580.887457][ T1418] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.888815][ T1418] ? lock_acquire+0x2f/0xb0 [ 1580.890106][ T1418] ? __fget_files+0x40/0x3f0 [ 1580.891813][ T1418] ? fdget+0x176/0x210 [ 1580.893321][ T1418] __sys_sendmsg+0x117/0x1f0 [ 1580.894769][ T1418] ? __pfx___sys_sendmsg+0x10/0x10 [ 1580.896257][ T1418] ? __fget_files+0x244/0x3f0 [ 1580.897521][ T1418] __do_fast_syscall_32+0x73/0x120 [ 1580.898918][ T1418] do_fast_syscall_32+0x32/0x80 [ 1580.900379][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1580.902294][ T1418] RIP: 0023:0xf747e579 [ 1580.903384][ T1418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1580.908748][ T1418] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1580.911363][ T1418] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200001c0 [ 1580.914185][ T1418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1580.916263][ T1418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1580.918618][ T1418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1580.920988][ T1418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1580.923230][ T1418] [ 1580.924143][ C3] vkms_vblank_simulate: vblank timer overrun [ 1581.102545][ T1427] FAULT_INJECTION: forcing a failure. [ 1581.102545][ T1427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.106530][ T1427] CPU: 0 UID: 0 PID: 1427 Comm: syz.0.6815 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1581.110507][ T1427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1581.113289][ T1427] Call Trace: [ 1581.114174][ T1427] [ 1581.114925][ T1427] dump_stack_lvl+0x16c/0x1f0 [ 1581.116135][ T1427] should_fail_ex+0x497/0x5b0 [ 1581.117358][ T1427] _copy_from_user+0x30/0xf0 [ 1581.118565][ T1427] get_compat_msghdr+0xa8/0x170 [ 1581.119805][ T1427] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1581.121225][ T1427] ? __pfx___lock_acquire+0x10/0x10 [ 1581.122554][ T1427] ___sys_sendmsg+0x1b0/0x1e0 [ 1581.123753][ T1427] ? __pfx____sys_sendmsg+0x10/0x10 [ 1581.125085][ T1427] ? lock_acquire+0x2f/0xb0 [ 1581.126305][ T1427] ? __fget_files+0x40/0x3f0 [ 1581.127559][ T1427] ? fdget+0x176/0x210 [ 1581.128670][ T1427] __sys_sendmmsg+0x2a5/0x450 [ 1581.129877][ T1427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1581.131666][ T1427] ? vfs_write+0x14d/0x1140 [ 1581.132852][ T1427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1581.134419][ T1427] ? fput+0x30/0x390 [ 1581.135452][ T1427] ? ksys_write+0x1ad/0x260 [ 1581.136668][ T1427] ? __pfx_ksys_write+0x10/0x10 [ 1581.137934][ T1427] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1581.139355][ T1427] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1581.141095][ T1427] __do_fast_syscall_32+0x73/0x120 [ 1581.142399][ T1427] do_fast_syscall_32+0x32/0x80 [ 1581.143669][ T1427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1581.145256][ T1427] RIP: 0023:0xf73ae579 [ 1581.146317][ T1427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1581.151152][ T1427] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1581.153314][ T1427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020004640 [ 1581.155323][ T1427] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1581.157375][ T1427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1581.159455][ T1427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1581.161536][ T1427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1581.163550][ T1427] [ 1581.277056][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.290561][ T1431] team0: entered promiscuous mode [ 1581.292186][ T1431] team_slave_0: entered promiscuous mode [ 1581.297043][ T1431] team_slave_1: entered promiscuous mode [ 1581.298797][ T1431] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1581.407325][ T1441] FAULT_INJECTION: forcing a failure. [ 1581.407325][ T1441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.410554][ T1441] CPU: 2 UID: 0 PID: 1441 Comm: syz.2.6820 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1581.413143][ T1441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1581.415794][ T1441] Call Trace: [ 1581.416667][ T1441] [ 1581.417483][ T1441] dump_stack_lvl+0x16c/0x1f0 [ 1581.418714][ T1441] should_fail_ex+0x497/0x5b0 [ 1581.419911][ T1441] _copy_to_user+0x30/0xc0 [ 1581.421042][ T1441] simple_read_from_buffer+0xd0/0x160 [ 1581.422360][ T1441] proc_fail_nth_read+0x198/0x270 [ 1581.423581][ T1441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1581.425053][ T1441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1581.426491][ T1441] vfs_read+0x1ce/0xbd0 [ 1581.427904][ T1441] ? __fget_files+0x23a/0x3f0 [ 1581.429166][ T1441] ? fdget_pos+0x24c/0x360 [ 1581.430368][ T1441] ? __pfx_lock_release+0x10/0x10 [ 1581.431759][ T1441] ? trace_lock_acquire+0x14a/0x1d0 [ 1581.433142][ T1441] ? __pfx_vfs_read+0x10/0x10 [ 1581.434410][ T1441] ? __pfx___mutex_lock+0x10/0x10 [ 1581.435729][ T1441] ? __fget_files+0x244/0x3f0 [ 1581.436967][ T1441] ksys_read+0x12f/0x260 [ 1581.438091][ T1441] ? __pfx_ksys_read+0x10/0x10 [ 1581.439345][ T1441] __do_fast_syscall_32+0x73/0x120 [ 1581.440695][ T1441] do_fast_syscall_32+0x32/0x80 [ 1581.441984][ T1441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1581.443637][ T1441] RIP: 0023:0xf744e579 [ 1581.444712][ T1441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1581.449724][ T1441] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1581.451890][ T1441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5736620 [ 1581.453977][ T1441] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 1581.456024][ T1441] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1581.458049][ T1441] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1581.460107][ T1441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1581.462189][ T1441] [ 1581.463292][ C2] hpet: Lost 2 RTC interrupts [ 1581.499338][ T1444] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 1581.501271][ T1444] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 1581.756899][ T5471] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1581.918860][ T5471] usb 7-1: Using ep0 maxpacket: 32 [ 1581.924244][ T5471] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1581.947212][ T5471] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1581.949922][ T5471] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1581.952351][ T5471] usb 7-1: Product: syz [ 1581.953899][ T5471] usb 7-1: Manufacturer: syz [ 1581.955515][ T5471] usb 7-1: SerialNumber: syz [ 1581.959475][ T5471] usb 7-1: config 0 descriptor?? [ 1581.961872][ T1449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1582.052601][ T1430] team0: left promiscuous mode [ 1582.053903][ T1430] team_slave_0: left promiscuous mode [ 1582.056573][ T1430] team_slave_1: left promiscuous mode [ 1582.062669][ T1430] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1582.257090][ T5471] usb 7-1: USB disconnect, device number 121 [ 1582.586813][ C2] net_ratelimit: 6 callbacks suppressed [ 1582.586831][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1582.676884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1582.973359][ T1473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1582.980483][ T1473] bridge0: port 3(batadv1) entered blocking state [ 1582.982737][ T1473] bridge0: port 3(batadv1) entered disabled state [ 1582.985067][ T1473] batadv1: entered allmulticast mode [ 1582.987876][ T1473] batadv1: entered promiscuous mode [ 1583.134198][T31631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1583.140238][T31631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1583.142700][T31631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1583.145103][T31631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1583.148608][T31631] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1583.151036][T31631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1583.172479][ T1479] lo speed is unknown, defaulting to 1000 [ 1583.233343][ T1479] chnl_net:caif_netlink_parms(): no params data found [ 1583.284456][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.286289][ T1479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.288279][ T1479] bridge_slave_0: entered allmulticast mode [ 1583.290537][ T1479] bridge_slave_0: entered promiscuous mode [ 1583.293376][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.295180][ T1479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.297104][ T1479] bridge_slave_1: entered allmulticast mode [ 1583.299508][ T1479] bridge_slave_1: entered promiscuous mode [ 1583.306891][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1583.321886][ T1482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6832'. [ 1583.325563][ T1479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.329281][ T1479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.331673][ T1482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 1583.370711][ T1479] team0: Port device team_slave_0 added [ 1583.374029][ T1479] team0: Port device team_slave_1 added [ 1583.410180][ T1479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.412458][ T1479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.420592][ T1479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.424991][ T1479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.432187][ T1479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.440225][ T1479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.472183][ T1479] hsr_slave_0: entered promiscuous mode [ 1583.475666][ T1479] hsr_slave_1: entered promiscuous mode [ 1583.480092][ T1479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1583.484188][ T1479] Cannot create hsr debugfs directory [ 1583.487644][T32076] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1583.490728][T32076] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1583.636809][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1583.648279][ T1479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.706928][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1583.730231][ T1479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.815518][ T1479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.839994][ T1501] capability: warning: `syz.2.6836' uses 32-bit capabilities (legacy support in use) [ 1583.886201][ T1479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.036459][ T1479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1584.039634][ T1479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1584.042951][ T1479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1584.046281][ T1479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1584.063206][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.065080][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.067025][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.068826][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.091069][ T1479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.099240][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.102391][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.124281][ T1479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.133493][T32076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.135936][T32076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.144399][T32076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.146432][T32076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.281481][ T1479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.309662][ T1479] veth0_vlan: entered promiscuous mode [ 1584.318675][ T1479] veth1_vlan: entered promiscuous mode [ 1584.334180][ T1479] veth0_macvtap: entered promiscuous mode [ 1584.337956][ T1479] veth1_macvtap: entered promiscuous mode [ 1584.344222][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.347098][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1584.349769][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.352314][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.355094][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.358278][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.361138][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.364334][ T1479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.372195][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.374953][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.378862][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.381656][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.384155][ T1479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.387468][ T1479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.391430][ T1479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.395769][ T1479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.398477][ T1479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.400758][ T1479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.403083][ T1479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.666832][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1584.756987][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1585.181016][ T1501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1585.186363][ T1501] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1585.226905][T31629] Bluetooth: hci1: command tx timeout [ 1585.238926][ T1501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1585.241779][ T1501] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1585.313179][ T1501] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1585.323345][ T1501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1585.336479][ T1501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1585.386961][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1585.528299][ T1501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1585.560267][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.562220][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.577787][T18417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.579738][T18417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.649974][ T1520] netlink: 'syz.2.6840': attribute type 1 has an invalid length. [ 1585.706807][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1585.774151][ T1524] FAULT_INJECTION: forcing a failure. [ 1585.774151][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.796825][ T1524] CPU: 3 UID: 0 PID: 1524 Comm: syz.0.6841 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1585.799873][ T1524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1585.802810][ T1524] Call Trace: [ 1585.803948][ T1524] [ 1585.804984][ T1524] dump_stack_lvl+0x16c/0x1f0 [ 1585.806418][ T1524] should_fail_ex+0x497/0x5b0 [ 1585.807894][ T1524] ? fs_reclaim_acquire+0xae/0x150 [ 1585.809675][ T1524] should_failslab+0xc2/0x120 [ 1585.811295][ T1524] __kmalloc_noprof+0xcb/0x410 [ 1585.812870][ T1524] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1585.814659][ T1524] tls_get_rec+0xf5/0x5c0 [ 1585.816189][ T1524] ? __local_bh_enable_ip+0xa4/0x120 [ 1585.818061][ T1524] tls_sw_sendmsg+0xf3d/0x23c0 [ 1585.819742][ T1524] ? __lock_acquire+0xbdd/0x3ce0 [ 1585.821493][ T1524] ? __pfx___lock_acquire+0x10/0x10 [ 1585.823379][ T1524] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1585.825220][ T1524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1585.827292][ T1524] ? aa_sk_perm+0x2f5/0xb20 [ 1585.828877][ T1524] ? find_held_lock+0x2d/0x110 [ 1585.830523][ T1524] ? __pfx_aa_sk_perm+0x10/0x10 [ 1585.832207][ T1524] ? aa_file_perm+0x4c6/0xfe0 [ 1585.833865][ T1524] ? __pfx_lock_release+0x10/0x10 [ 1585.835618][ T1524] ? trace_lock_acquire+0x14a/0x1d0 [ 1585.837398][ T1524] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1585.839632][ T1524] inet6_sendmsg+0x119/0x140 [ 1585.841216][ T1524] sock_write_iter+0x3e8/0x5b0 [ 1585.842872][ T1524] ? __pfx_sock_write_iter+0x10/0x10 [ 1585.844718][ T1524] do_iter_readv_writev+0x532/0x7f0 [ 1585.846535][ T1524] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1585.848419][ T1524] ? bpf_lsm_file_permission+0x9/0x10 [ 1585.850283][ T1524] ? security_file_permission+0x71/0x210 [ 1585.852234][ T1524] vfs_writev+0x363/0xdd0 [ 1585.853861][ T1524] ? find_held_lock+0x2d/0x110 [ 1585.855612][ T1524] ? __pfx_vfs_writev+0x10/0x10 [ 1585.857330][ T1524] ? find_held_lock+0x2d/0x110 [ 1585.859109][ T1524] ? __pfx_lock_release+0x10/0x10 [ 1585.860918][ T1524] ? trace_lock_acquire+0x14a/0x1d0 [ 1585.862776][ T1524] ? __fget_files+0x244/0x3f0 [ 1585.864503][ T1524] ? do_writev+0x289/0x370 [ 1585.866117][ T1524] do_writev+0x289/0x370 [ 1585.867600][ T1524] ? __pfx_do_writev+0x10/0x10 [ 1585.869280][ T1524] __do_fast_syscall_32+0x73/0x120 [ 1585.871126][ T1524] do_fast_syscall_32+0x32/0x80 [ 1585.872939][ T1524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1585.875182][ T1524] RIP: 0023:0xf73ae579 [ 1585.876680][ T1524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1585.883242][ T1524] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 1585.886160][ T1524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1585.888807][ T1524] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1585.891508][ T1524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1585.894233][ T1524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1585.896971][ T1524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1585.899669][ T1524] [ 1585.900879][ C3] vkms_vblank_simulate: vblank timer overrun [ 1585.946983][T31629] Bluetooth: hci0: command 0x0406 tx timeout [ 1585.965483][ T1536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1585.969498][ T1536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1586.009486][ T1537] bridge_slave_1: left allmulticast mode [ 1586.011621][ T1537] bridge_slave_1: left promiscuous mode [ 1586.013448][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.618405][T31629] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1586.903808][ T1567] warn_alloc: 1 callbacks suppressed [ 1586.903870][ T1567] syz.0.6849: vmalloc error: size 1834914816, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1586.912296][ T1567] CPU: 0 UID: 0 PID: 1567 Comm: syz.0.6849 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1586.916025][ T1567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1586.919756][ T1567] Call Trace: [ 1586.920923][ T1567] [ 1586.922030][ T1567] dump_stack_lvl+0x16c/0x1f0 [ 1586.926147][ T1567] warn_alloc+0x24d/0x3a0 [ 1586.926182][ T1567] ? __pfx_warn_alloc+0x10/0x10 [ 1586.926214][ T1567] ? __pfx___lock_acquire+0x10/0x10 [ 1586.926239][ T1567] ? get_ctrl+0x394/0x4f0 [ 1586.926257][ T1567] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1586.926289][ T1567] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1586.926315][ T1567] ? __mutex_trylock_common+0xea/0x250 [ 1586.926343][ T1567] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1586.926371][ T1567] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1586.926406][ T1567] ? rcu_is_watching+0x12/0xc0 [ 1586.926430][ T1567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1586.926453][ T1567] ? rcu_is_watching+0x12/0xc0 [ 1586.926475][ T1567] ? rcu_is_watching+0x12/0xc0 [ 1586.926495][ T1567] ? trace_kmalloc+0x2d/0xe0 [ 1586.926520][ T1567] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1586.926547][ T1567] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1586.926574][ T1567] __kvmalloc_node_noprof+0x14f/0x1a0 [ 1586.926598][ T1567] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1586.926625][ T1567] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1586.926657][ T1567] vivid_update_format_cap+0x127b/0x2530 [ 1586.926681][ T1567] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 1586.926701][ T1567] ? v4l2_match_dv_timings+0x1df/0x1010 [ 1586.926725][ T1567] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 1586.926753][ T1567] vidioc_s_dv_timings+0xa5/0xc0 [ 1586.926772][ T1567] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 1586.926797][ T1567] __video_do_ioctl+0xaf0/0xf00 [ 1586.926824][ T1567] ? __pfx___video_do_ioctl+0x10/0x10 [ 1586.926854][ T1567] video_usercopy+0x426/0x1500 [ 1586.926877][ T1567] ? __pfx___video_do_ioctl+0x10/0x10 [ 1586.926899][ T1567] ? __pfx_video_usercopy+0x10/0x10 [ 1586.926937][ T1567] v4l2_ioctl+0x1ba/0x250 [ 1586.926960][ T1567] v4l2_compat_ioctl32+0x214/0x2c0 [ 1586.926980][ T1567] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1586.927000][ T1567] __do_compat_sys_ioctl+0x259/0x2b0 [ 1586.927028][ T1567] __do_fast_syscall_32+0x73/0x120 [ 1586.927055][ T1567] do_fast_syscall_32+0x32/0x80 [ 1586.927078][ T1567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1586.927103][ T1567] RIP: 0023:0xf73ae579 [ 1586.927119][ T1567] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1586.927137][ T1567] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1586.927157][ T1567] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0845657 [ 1586.927169][ T1567] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1586.927180][ T1567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1586.927191][ T1567] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1586.927202][ T1567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1586.927224][ T1567] [ 1586.967043][ T1567] Mem-Info: [ 1587.103652][ T1570] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1587.109469][ T1567] active_anon:1365 inactive_anon:644 isolated_anon:0 [ 1587.109469][ T1567] active_file:6260 inactive_file:7708 isolated_file:0 [ 1587.109469][ T1567] unevictable:776 dirty:819 writeback:0 [ 1587.109469][ T1567] slab_reclaimable:4662 slab_unreclaimable:59450 [ 1587.109469][ T1567] mapped:24958 shmem:823 pagetables:765 [ 1587.109469][ T1567] sec_pagetables:346 bounce:0 [ 1587.109469][ T1567] kernel_misc_reclaimable:0 [ 1587.109469][ T1567] free:95503 free_pcp:2322 free_cma:0 [ 1587.171029][ T1567] Node 0 active_anon:0kB inactive_anon:68kB active_file:0kB inactive_file:316kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:2796kB dirty:336kB writeback:0kB shmem:2412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8932kB pagetables:1276kB sec_pagetables:1228kB all_unreclaimable? no [ 1587.194347][ T1567] Node 1 active_anon:5296kB inactive_anon:2560kB active_file:24772kB inactive_file:30784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96852kB dirty:2940kB writeback:0kB shmem:840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2512kB pagetables:1448kB sec_pagetables:156kB all_unreclaimable? no [ 1587.206231][ T1567] Node 0 DMA free:880kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:228kB free_cma:0kB [ 1587.219610][ T1567] lowmem_reserve[]: 0 273 0 0 0 [ 1587.221035][ T1567] Node 0 DMA32 free:21276kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:56kB active_file:0kB inactive_file:316kB unevictable:1568kB writepending:336kB present:1032196kB managed:306284kB mlocked:32kB bounce:0kB free_pcp:1292kB local_pcp:120kB free_cma:0kB [ 1587.240519][ T1567] lowmem_reserve[]: 0 0 0 0 0 [ 1587.241930][ T1567] Node 1 DMA32 free:358912kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:5596kB inactive_anon:2560kB active_file:24772kB inactive_file:30784kB unevictable:1536kB writepending:2940kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8616kB local_pcp:1428kB free_cma:0kB [ 1587.243445][ T1589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1587.254566][ T1567] lowmem_reserve[]: 0 0 0 0 0 [ 1587.259873][ T1567] Node 0 DMA: 4*4kB (U) 44*8kB (U) 20*16kB (U) 6*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 880kB [ 1587.263470][ T1567] Node 0 DMA32: 104*4kB (UMH) 423*8kB (UMEH) 64*16kB (UMH) 52*32kB (UMEH) 54*64kB (UMEH) 30*128kB (UME) 8*256kB (UME) 6*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 20952kB [ 1587.274085][ T1567] Node 1 DMA32: 2*4kB (UM) 8*8kB (UME) 29*16kB (ME) 73*32kB (ME) 1010*64kB (UME) 846*128kB (UME) 381*256kB (UME) 100*512kB (UM) 15*1024kB (UM) 3*2048kB (U) 2*4096kB (M) = 354232kB [ 1587.287992][ T1567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.291190][ T1567] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1587.294827][ T1567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.300963][ T1567] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1587.303584][ T1567] 15537 total pagecache pages [ 1587.305077][ T1567] 748 pages in swap cache [ 1587.306306][ T1567] Free swap = 103720kB [ 1587.307874][T31629] Bluetooth: hci3: command 0x0406 tx timeout [ 1587.310081][ T1567] Total swap = 124996kB [ 1587.311241][ T1567] 524155 pages RAM [ 1587.312267][ T1567] 0 pages HighMem/MovableOnly [ 1587.313982][ T1567] 206681 pages reserved [ 1587.315813][ T1567] 0 pages cma reserved [ 1587.387527][T31629] Bluetooth: hci1: command 0x040f tx timeout [ 1587.506681][ T1603] FAULT_INJECTION: forcing a failure. [ 1587.506681][ T1603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.510120][ T1603] CPU: 3 UID: 0 PID: 1603 Comm: syz.0.6857 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1587.512890][ T1603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1587.515894][ T1603] Call Trace: [ 1587.516787][ T1603] [ 1587.517559][ T1603] dump_stack_lvl+0x16c/0x1f0 [ 1587.518805][ T1603] should_fail_ex+0x497/0x5b0 [ 1587.520037][ T1603] _copy_from_user+0x30/0xf0 [ 1587.521287][ T1603] get_compat_msghdr+0xa8/0x170 [ 1587.522874][ T1603] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1587.524297][ T1603] ? find_held_lock+0x2d/0x110 [ 1587.525546][ T1603] ___sys_recvmsg+0x193/0x1a0 [ 1587.526846][ T1603] ? __pfx____sys_recvmsg+0x10/0x10 [ 1587.526888][T25764] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1587.528199][ T1603] ? lock_acquire+0x2f/0xb0 [ 1587.532026][ T1603] ? __fget_files+0x40/0x3f0 [ 1587.533240][ T1603] ? fdget+0x176/0x210 [ 1587.534345][ T1603] __sys_recvmsg+0x114/0x1e0 [ 1587.535565][ T1603] ? __pfx___sys_recvmsg+0x10/0x10 [ 1587.536896][ T1603] ? __fget_files+0x244/0x3f0 [ 1587.538215][ T1603] __do_fast_syscall_32+0x73/0x120 [ 1587.539546][ T1603] do_fast_syscall_32+0x32/0x80 [ 1587.540831][ T1603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1587.542540][ T1603] RIP: 0023:0xf73ae579 [ 1587.543597][ T1603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1587.548586][ T1603] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 1587.550743][ T1603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 1587.552770][ T1603] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1587.554823][ T1603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1587.556860][ T1603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1587.559023][ T1603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1587.561130][ T1603] [ 1587.562003][ C3] vkms_vblank_simulate: vblank timer overrun [ 1587.656870][T25764] usb 7-1: device descriptor read/64, error -71 [ 1587.796877][ C2] net_ratelimit: 6 callbacks suppressed [ 1587.796891][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1587.866961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1587.908001][T25764] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1588.026877][T31629] Bluetooth: hci0: command 0x0406 tx timeout [ 1588.036889][T25764] usb 7-1: device descriptor read/64, error -71 [ 1588.147273][T25764] usb usb7-port1: attempt power cycle [ 1588.486848][T25764] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1588.506887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1588.507303][T25764] usb 7-1: device descriptor read/8, error -71 [ 1588.746804][T25764] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1588.768184][T25764] usb 7-1: device descriptor read/8, error -71 [ 1588.826887][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1588.877162][T25764] usb usb7-port1: unable to enumerate USB device [ 1588.906860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1589.387162][T31629] Bluetooth: hci3: command 0x0406 tx timeout [ 1589.477171][T31629] Bluetooth: hci1: command 0x040f tx timeout [ 1589.556838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1589.592596][ T1647] FAULT_INJECTION: forcing a failure. [ 1589.592596][ T1647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.596109][ T1647] CPU: 1 UID: 0 PID: 1647 Comm: syz.0.6871 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1589.598863][ T1647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1589.601650][ T1647] Call Trace: [ 1589.602524][ T1647] [ 1589.603298][ T1647] dump_stack_lvl+0x16c/0x1f0 [ 1589.604583][ T1647] should_fail_ex+0x497/0x5b0 [ 1589.605833][ T1647] _copy_from_user+0x30/0xf0 [ 1589.607042][ T1647] __sys_bpf+0x215/0x5780 [ 1589.608171][ T1647] ? ksys_write+0x21e/0x260 [ 1589.609360][ T1647] ? __pfx___sys_bpf+0x10/0x10 [ 1589.610611][ T1647] ? vfs_write+0x14d/0x1140 [ 1589.611799][ T1647] ? __mutex_unlock_slowpath+0x164/0x650 [ 1589.613266][ T1647] ? fput+0x30/0x390 [ 1589.614318][ T1647] ? ksys_write+0x1ad/0x260 [ 1589.615512][ T1647] ? __pfx_ksys_write+0x10/0x10 [ 1589.616784][ T1647] __ia32_sys_bpf+0x76/0xe0 [ 1589.617968][ T1647] __do_fast_syscall_32+0x73/0x120 [ 1589.619406][ T1647] do_fast_syscall_32+0x32/0x80 [ 1589.620767][ T1647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1589.622454][ T1647] RIP: 0023:0xf73ae579 [ 1589.623539][ T1647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1589.628566][ T1647] RSP: 002b:00000000f567556c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1589.630754][ T1647] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000380 [ 1589.632820][ T1647] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1589.634902][ T1647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1589.636997][ T1647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1589.639059][ T1647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1589.641119][ T1647] [ 1589.866832][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1589.956878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1590.586831][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1590.594556][ T1655] netlink: 'syz.0.6874': attribute type 1 has an invalid length. [ 1590.596403][ T1655] netlink: 636 bytes leftover after parsing attributes in process `syz.0.6874'. [ 1590.844243][T31629] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1590.906804][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1590.975964][ T1665] FAULT_INJECTION: forcing a failure. [ 1590.975964][ T1665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.989458][ T1665] CPU: 0 UID: 0 PID: 1665 Comm: syz.0.6876 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1590.992929][ T1665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1590.995926][ T1665] Call Trace: [ 1590.996804][ T1665] [ 1590.997790][ T1665] dump_stack_lvl+0x16c/0x1f0 [ 1590.999343][ T1665] should_fail_ex+0x497/0x5b0 [ 1591.000876][ T1665] _copy_from_user+0x30/0xf0 [ 1591.002090][ T1665] sctp_getsockopt+0x13af/0x7ae0 [ 1591.003378][ T1665] ? aa_label_sk_perm+0x19d/0x5a0 [ 1591.004983][ T1665] ? __lock_acquire+0xbdd/0x3ce0 [ 1591.006668][ T1665] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1591.008424][ T1665] ? __pfx___lock_acquire+0x10/0x10 [ 1591.009925][ T1665] ? hlock_class+0x4e/0x130 [ 1591.011475][ T1665] ? __lock_acquire+0xbdd/0x3ce0 [ 1591.012926][ T1665] ? __pfx___might_resched+0x10/0x10 [ 1591.014329][ T1665] ? __pfx___lock_acquire+0x10/0x10 [ 1591.015682][ T1665] ? aa_sk_perm+0x2f5/0xb20 [ 1591.017101][ T1665] ? __pfx_aa_sk_perm+0x10/0x10 [ 1591.018772][ T1665] ? find_held_lock+0x2d/0x110 [ 1591.020251][ T1665] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1591.022135][ T1665] ? do_sock_getsockopt+0x3fe/0x870 [ 1591.023694][ T1665] do_sock_getsockopt+0x3fe/0x870 [ 1591.025263][ T1665] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1591.027138][ T1665] ? __fget_files+0x244/0x3f0 [ 1591.028417][ T1665] __sys_getsockopt+0x1a1/0x270 [ 1591.030004][ T1665] ? __pfx___sys_getsockopt+0x10/0x10 [ 1591.031397][ T1665] ? fput+0x30/0x390 [ 1591.032474][ T1665] ? ksys_write+0x1ad/0x260 [ 1591.034012][ T1665] ? __pfx_ksys_write+0x10/0x10 [ 1591.035399][ T1665] __ia32_sys_getsockopt+0xbc/0x160 [ 1591.036950][ T1665] ? lockdep_hardirqs_on+0x7c/0x110 [ 1591.038263][ T1665] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1591.040117][ T1665] __do_fast_syscall_32+0x73/0x120 [ 1591.041744][ T1665] do_fast_syscall_32+0x32/0x80 [ 1591.043018][ T1665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1591.044804][ T1665] RIP: 0023:0xf73ae579 [ 1591.046105][ T1665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1591.051331][ T1665] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1591.053494][ T1665] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000084 [ 1591.055581][ T1665] RDX: 000000000000006d RSI: 0000000020000000 RDI: 0000000020000080 [ 1591.057819][ T1665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1591.059873][ T1665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1591.062114][ T1665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1591.064233][ T1665] [ 1591.476969][T31629] Bluetooth: hci3: command 0x0406 tx timeout [ 1591.795270][T17794] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz1] on syz1 [ 1592.283053][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6884'. [ 1592.296034][ T1691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1592.406118][T31629] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1592.786882][ T1720] FAULT_INJECTION: forcing a failure. [ 1592.786882][ T1720] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.792828][ T1720] CPU: 3 UID: 0 PID: 1720 Comm: syz.1.6889 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1592.796176][ T1720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1592.799200][ T1720] Call Trace: [ 1592.800105][ T1720] [ 1592.800869][ T1720] dump_stack_lvl+0x16c/0x1f0 [ 1592.802143][ T1720] should_fail_ex+0x497/0x5b0 [ 1592.803416][ T1720] ? fs_reclaim_acquire+0xae/0x150 [ 1592.804799][ T1720] should_failslab+0xc2/0x120 [ 1592.806096][ T1720] __kmalloc_noprof+0xcb/0x410 [ 1592.808048][ T1720] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1592.810334][ T1720] tomoyo_realpath_from_path+0xbf/0x710 [ 1592.812499][ T1720] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1592.814604][ T1720] tomoyo_path_number_perm+0x245/0x5b0 [ 1592.816131][ T1720] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1592.817570][ T1720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1592.819284][ T1720] ? trace_lock_acquire+0x14a/0x1d0 [ 1592.820728][ T1720] ? lock_acquire+0x2f/0xb0 [ 1592.821943][ T1720] ? __fget_files+0x40/0x3f0 [ 1592.823248][ T1720] ? __fget_files+0x244/0x3f0 [ 1592.824476][ T1720] security_file_ioctl_compat+0x9b/0x240 [ 1592.825956][ T1720] __do_compat_sys_ioctl+0x52/0x2b0 [ 1592.827246][ T1720] __do_fast_syscall_32+0x73/0x120 [ 1592.829196][ T1720] do_fast_syscall_32+0x32/0x80 [ 1592.831174][ T1720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.833924][ T1720] RIP: 0023:0xf747e579 [ 1592.835565][ T1720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1592.840697][ T1720] RSP: 002b:00000000f56f156c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1592.842806][ T1720] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0306201 [ 1592.844733][ T1720] RDX: 0000000020000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 1592.846714][ T1720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1592.849341][ T1720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1592.852281][ T1720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.855285][ T1720] [ 1592.856269][ C3] vkms_vblank_simulate: vblank timer overrun [ 1592.856311][T17794] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1592.858614][ T1720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1592.986834][ C2] net_ratelimit: 5 callbacks suppressed [ 1592.986846][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1593.006828][T17794] usb 5-1: Using ep0 maxpacket: 8 [ 1593.017974][T17794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.020705][T17794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1593.022968][T17794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1593.025767][T17794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1593.028448][T26710] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1593.030289][T17794] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1593.033471][T17794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.053423][T17794] hub 5-1:1.0: bad descriptor, ignoring hub [ 1593.054980][T17794] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1593.057041][T17794] cdc_wdm 5-1:1.0: skipping garbage [ 1593.058435][T17794] cdc_wdm 5-1:1.0: skipping garbage [ 1593.065209][T17794] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1593.066940][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1593.073456][T17794] cdc_wdm 5-1:1.0: Unknown control protocol [ 1593.186911][T26710] usb 7-1: Using ep0 maxpacket: 8 [ 1593.198620][T26710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1593.200582][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1593.203664][T26710] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.209843][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1593.213864][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1593.218841][T26710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1593.221285][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1593.224584][T26710] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.228467][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1593.231641][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1593.235804][T26710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1593.237971][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1593.251188][T26710] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.257616][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1593.260411][T26710] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1593.282309][T26710] usb 7-1: string descriptor 0 read error: -22 [ 1593.284081][T26710] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1593.287040][T26710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.334897][T26710] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1593.603857][T26710] usb 7-1: USB disconnect, device number 126 [ 1593.706988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1594.026846][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1594.106896][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1594.746866][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1594.918185][T31629] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1594.921155][T31629] Bluetooth: hci1: Injecting HCI hardware error event [ 1594.926982][T31629] Bluetooth: hci1: hardware error 0x00 [ 1595.066876][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1595.156863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1595.381728][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1595.381859][ T25] usb 5-1: USB disconnect, device number 107 [ 1595.383401][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1595.383413][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1595.786908][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1595.929929][ T39] audit: type=1326 audit(1729208446.903:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1780 comm="syz.2.6899" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 1596.116817][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1596.605047][ T1789] FAULT_INJECTION: forcing a failure. [ 1596.605047][ T1789] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.609733][ T1789] CPU: 2 UID: 0 PID: 1789 Comm: syz.3.6900 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1596.612555][ T1789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1596.615334][ T1789] Call Trace: [ 1596.616451][ T1789] [ 1596.617493][ T1789] dump_stack_lvl+0x16c/0x1f0 [ 1596.618771][ T1789] should_fail_ex+0x497/0x5b0 [ 1596.620022][ T1789] ? fs_reclaim_acquire+0xae/0x150 [ 1596.621352][ T1789] should_failslab+0xc2/0x120 [ 1596.622595][ T1789] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1596.624092][ T1789] ? __alloc_skb+0x2b3/0x380 [ 1596.625290][ T1789] __alloc_skb+0x2b3/0x380 [ 1596.626718][ T1789] ? __pfx___alloc_skb+0x10/0x10 [ 1596.628401][ T1789] ? hlock_class+0x4e/0x130 [ 1596.629924][ T1789] ? __lock_acquire+0x163e/0x3ce0 [ 1596.631274][ T1789] tcp_stream_alloc_skb+0x34/0x570 [ 1596.632623][ T1789] tcp_sendmsg_locked+0xeb5/0x3750 [ 1596.633985][ T1789] ? __pfx_mark_lock+0x10/0x10 [ 1596.635230][ T1789] ? lock_acquire.part.0+0x11b/0x380 [ 1596.637032][ T1789] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1596.639050][ T1789] ? tcp_sendmsg+0x20/0x50 [ 1596.640653][ T1789] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1596.642042][ T1789] ? __local_bh_enable_ip+0xa4/0x120 [ 1596.643390][ T1789] tcp_sendmsg+0x2e/0x50 [ 1596.644471][ T1789] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1596.645787][ T1789] inet_sendmsg+0xb9/0x140 [ 1596.647173][ T1789] __sys_sendto+0x426/0x4d0 [ 1596.648832][ T1789] ? __pfx___sys_sendto+0x10/0x10 [ 1596.650676][ T1789] ? ksys_write+0x1ad/0x260 [ 1596.652226][ T1789] ? __pfx_ksys_write+0x10/0x10 [ 1596.653904][ T1789] __ia32_sys_sendto+0xdd/0x1b0 [ 1596.655654][ T1789] ? lockdep_hardirqs_on+0x7c/0x110 [ 1596.657568][ T1789] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1596.659933][ T1789] __do_fast_syscall_32+0x73/0x120 [ 1596.661816][ T1789] do_fast_syscall_32+0x32/0x80 [ 1596.663604][ T1789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1596.665880][ T1789] RIP: 0023:0xf73fe579 [ 1596.667347][ T1789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1596.674025][ T1789] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1596.676734][ T1789] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000240 [ 1596.678825][ T1789] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000000 [ 1596.680843][ T1789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1596.682904][ T1789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1596.684930][ T1789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1596.687201][ T1789] [ 1596.688365][ C2] hpet: Lost 4 RTC interrupts [ 1596.987003][T31629] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1597.226516][ T1806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6904'. [ 1597.837823][ T1827] FAULT_INJECTION: forcing a failure. [ 1597.837823][ T1827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.842111][ T1827] CPU: 1 UID: 0 PID: 1827 Comm: syz.3.6907 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1597.844973][ T1827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1597.848134][ T1827] Call Trace: [ 1597.849151][ T1827] [ 1597.850062][ T1827] dump_stack_lvl+0x16c/0x1f0 [ 1597.851640][ T1827] should_fail_ex+0x497/0x5b0 [ 1597.852939][ T1827] _copy_from_user+0x30/0xf0 [ 1597.854241][ T1827] get_compat_msghdr+0xa8/0x170 [ 1597.855551][ T1827] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1597.856969][ T1827] ? __pfx___lock_acquire+0x10/0x10 [ 1597.858367][ T1827] ___sys_sendmsg+0x1b0/0x1e0 [ 1597.859613][ T1827] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.861017][ T1827] ? lock_acquire+0x2f/0xb0 [ 1597.862208][ T1827] ? __fget_files+0x40/0x3f0 [ 1597.863424][ T1827] ? fdget+0x176/0x210 [ 1597.864485][ T1827] __sys_sendmsg+0x117/0x1f0 [ 1597.865699][ T1827] ? __pfx___sys_sendmsg+0x10/0x10 [ 1597.867040][ T1827] ? __fget_files+0x244/0x3f0 [ 1597.868283][ T1827] __do_fast_syscall_32+0x73/0x120 [ 1597.869699][ T1827] do_fast_syscall_32+0x32/0x80 [ 1597.871098][ T1827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1597.872845][ T1827] RIP: 0023:0xf73fe579 [ 1597.873980][ T1827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1597.878995][ T1827] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1597.881128][ T1827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 1597.883161][ T1827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1597.885186][ T1827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1597.887264][ T1827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1597.889308][ T1827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1597.891404][ T1827] [ 1598.092459][ T1836] FAULT_INJECTION: forcing a failure. [ 1598.092459][ T1836] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.095726][ T1836] CPU: 3 UID: 0 PID: 1836 Comm: syz.3.6911 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1598.098487][ T1836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1598.101247][ T1836] Call Trace: [ 1598.102130][ T1836] [ 1598.102915][ T1836] dump_stack_lvl+0x16c/0x1f0 [ 1598.104153][ T1836] should_fail_ex+0x497/0x5b0 [ 1598.105444][ T1836] ? fs_reclaim_acquire+0xae/0x150 [ 1598.106789][ T1836] should_failslab+0xc2/0x120 [ 1598.108022][ T1836] __kmalloc_noprof+0xcb/0x410 [ 1598.109275][ T1836] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1598.110828][ T1836] tomoyo_realpath_from_path+0xbf/0x710 [ 1598.112650][ T1836] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1598.114334][ T1836] tomoyo_path_number_perm+0x245/0x5b0 [ 1598.115794][ T1836] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1598.117275][ T1836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1598.118945][ T1836] ? trace_lock_acquire+0x14a/0x1d0 [ 1598.120463][ T1836] ? lock_acquire+0x2f/0xb0 [ 1598.122142][ T1836] ? __fget_files+0x40/0x3f0 [ 1598.123847][ T1836] ? __fget_files+0x244/0x3f0 [ 1598.125440][ T1836] security_file_ioctl_compat+0x9b/0x240 [ 1598.127033][ T1836] __do_compat_sys_ioctl+0x52/0x2b0 [ 1598.128389][ T1836] __do_fast_syscall_32+0x73/0x120 [ 1598.129740][ T1836] do_fast_syscall_32+0x32/0x80 [ 1598.131040][ T1836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1598.132675][ T1836] RIP: 0023:0xf73fe579 [ 1598.133765][ T1836] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1598.138708][ T1836] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1598.140932][ T1836] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008905 [ 1598.142979][ T1836] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1598.144963][ T1836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1598.147007][ T1836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1598.149063][ T1836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1598.151162][ T1836] [ 1598.152019][ C3] vkms_vblank_simulate: vblank timer overrun [ 1598.161985][ T1836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1598.186833][ C2] net_ratelimit: 5 callbacks suppressed [ 1598.186850][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1598.266872][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1598.907005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1599.226820][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1599.306942][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1599.555581][ T1871] FAULT_INJECTION: forcing a failure. [ 1599.555581][ T1871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.560483][ T1869] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1599.563719][ T1871] CPU: 0 UID: 0 PID: 1871 Comm: syz.3.6923 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1599.566608][ T1871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1599.569393][ T1871] Call Trace: [ 1599.570353][ T1871] [ 1599.571138][ T1871] dump_stack_lvl+0x16c/0x1f0 [ 1599.572530][ T1871] should_fail_ex+0x497/0x5b0 [ 1599.574013][ T1871] _copy_to_user+0x30/0xc0 [ 1599.575210][ T1871] simple_read_from_buffer+0xd0/0x160 [ 1599.576612][ T1871] proc_fail_nth_read+0x198/0x270 [ 1599.578108][ T1871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.579551][ T1871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.581012][ T1871] vfs_read+0x1ce/0xbd0 [ 1599.582102][ T1871] ? __fget_files+0x23a/0x3f0 [ 1599.583328][ T1871] ? fdget_pos+0x24c/0x360 [ 1599.584487][ T1871] ? __pfx_lock_release+0x10/0x10 [ 1599.585801][ T1871] ? trace_lock_acquire+0x14a/0x1d0 [ 1599.587143][ T1871] ? __pfx_vfs_read+0x10/0x10 [ 1599.588372][ T1871] ? __pfx___mutex_lock+0x10/0x10 [ 1599.589733][ T1871] ? __fget_files+0x244/0x3f0 [ 1599.591046][ T1871] ksys_read+0x12f/0x260 [ 1599.592148][ T1871] ? __pfx_ksys_read+0x10/0x10 [ 1599.593404][ T1871] __do_fast_syscall_32+0x73/0x120 [ 1599.594737][ T1871] do_fast_syscall_32+0x32/0x80 [ 1599.596015][ T1871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1599.597654][ T1871] RIP: 0023:0xf73fe579 [ 1599.598710][ T1871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1599.603658][ T1871] RSP: 002b:00000000f56e65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1599.605869][ T1871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56e6620 [ 1599.607917][ T1871] RDX: 000000000000000f RSI: 00000000f73ebff4 RDI: 0000000000000000 [ 1599.610014][ T1871] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1599.612045][ T1871] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1599.614088][ T1871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1599.616212][ T1871] [ 1599.777903][ T1873] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1599.780384][ T1873] 0: renamed from hsr0 (while UP) [ 1599.793292][ T1873] 0: entered allmulticast mode [ 1599.794615][ T1873] hsr_slave_0: entered allmulticast mode [ 1599.802807][ T1873] hsr_slave_1: entered allmulticast mode [ 1599.804754][ T1873] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 1599.947062][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1600.276865][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1600.346863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1600.448141][ T1874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1600.450738][ T1874] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1600.457181][ T1874] vhci_hcd vhci_hcd.0: Device attached [ 1600.657508][T28217] vhci_hcd: vhci_device speed not set [ 1600.727116][T28217] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 1600.986829][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1601.031720][ T1879] vhci_hcd: connection reset by peer [ 1601.042894][ T74] vhci_hcd: stop threads [ 1601.045510][ T74] vhci_hcd: release socket [ 1601.054549][ T74] vhci_hcd: disconnect device [ 1601.177144][ T1893] FAULT_INJECTION: forcing a failure. [ 1601.177144][ T1893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1601.184162][ T1893] CPU: 2 UID: 0 PID: 1893 Comm: syz.3.6929 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1601.187090][ T1893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1601.190011][ T1893] Call Trace: [ 1601.190897][ T1893] [ 1601.191684][ T1893] dump_stack_lvl+0x16c/0x1f0 [ 1601.193364][ T1893] should_fail_ex+0x497/0x5b0 [ 1601.194627][ T1893] ? fs_reclaim_acquire+0xae/0x150 [ 1601.195959][ T1893] should_fail_alloc_page+0xe7/0x130 [ 1601.197387][ T1893] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1601.199192][ T1893] __alloc_pages_noprof+0x190/0x25a0 [ 1601.200721][ T1893] ? hlock_class+0x4e/0x130 [ 1601.202008][ T1893] ? __lock_acquire+0x163e/0x3ce0 [ 1601.203426][ T1893] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1601.205066][ T1893] ? __pfx___lock_acquire+0x10/0x10 [ 1601.206543][ T1893] ? lock_acquire.part.0+0x11b/0x380 [ 1601.208033][ T1893] ? find_held_lock+0x2d/0x110 [ 1601.209446][ T1893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1601.211633][ T1893] ? policy_nodemask+0xea/0x4e0 [ 1601.213067][ T1893] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1601.214585][ T1893] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1601.216309][ T1893] ? do_raw_spin_unlock+0x172/0x230 [ 1601.217816][ T1893] ? _raw_spin_unlock+0x28/0x50 [ 1601.219269][ T1893] ? swap_swapcount+0x13c/0x220 [ 1601.220719][ T1893] ? __pfx_swap_swapcount+0x10/0x10 [ 1601.222088][ T1893] folio_alloc_mpol_noprof+0x36/0xd0 [ 1601.223473][ T1893] __read_swap_cache_async+0x50a/0x660 [ 1601.224903][ T1893] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1601.226475][ T1893] ? swp_swap_info+0xcf/0x130 [ 1601.227761][ T1893] ? __pfx_swp_swap_info+0x10/0x10 [ 1601.229263][ T1893] swap_cluster_readahead+0x3bd/0x6e0 [ 1601.230774][ T1893] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1601.232307][ T1893] ? xas_load+0x49/0x5b0 [ 1601.233427][ T1893] ? filemap_get_entry+0xd0/0x3c0 [ 1601.234894][ T1893] ? filemap_get_entry+0x1b2/0x3c0 [ 1601.236510][ T1893] ? __pfx_filemap_get_entry+0x10/0x10 [ 1601.238038][ T1893] swapin_readahead+0x12e/0xd20 [ 1601.239338][ T1893] ? __filemap_get_folio+0x2a5/0xaf0 [ 1601.240708][ T1893] ? __pfx_swapin_readahead+0x10/0x10 [ 1601.242093][ T1893] ? swap_cache_get_folio+0x1e0/0x460 [ 1601.243512][ T1893] ? get_swap_device+0x245/0x5e0 [ 1601.244850][ T1893] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1601.246376][ T1893] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1601.247902][ T1893] ? rcu_is_watching+0x12/0xc0 [ 1601.249211][ T1893] do_swap_page+0x61a/0x59b0 [ 1601.250437][ T1893] ? __pte_offset_map+0x42/0x540 [ 1601.251725][ T1893] ? __pte_offset_map+0x1b9/0x540 [ 1601.253022][ T1893] ? pte_offset_map_nolock+0xfe/0x1c0 [ 1601.254434][ T1893] ? __pfx_do_swap_page+0x10/0x10 [ 1601.256066][ T1893] ? lock_vma_under_rcu+0x13e/0x980 [ 1601.257480][ T1893] ? lock_vma_under_rcu+0x13e/0x980 [ 1601.259138][ T1893] __handle_mm_fault+0x1023/0x2a10 [ 1601.260623][ T1893] ? __pfx_lock_release+0x10/0x10 [ 1601.262079][ T1893] ? lock_vma_under_rcu+0x13e/0x980 [ 1601.263505][ T1893] ? __pfx___handle_mm_fault+0x10/0x10 [ 1601.264992][ T1893] ? __fget_files+0x244/0x3f0 [ 1601.266287][ T1893] handle_mm_fault+0x3fa/0xaa0 [ 1601.267719][ T1893] do_user_addr_fault+0x60d/0x13f0 [ 1601.269161][ T1893] exc_page_fault+0x5c/0xc0 [ 1601.270367][ T1893] asm_exc_page_fault+0x26/0x30 [ 1601.271645][ T1893] RIP: 0023:0xf71169b1 [ 1601.272721][ T1893] Code: 13 00 89 3c 24 89 c5 e8 5d c1 11 00 83 c4 10 39 c5 0f 85 8e 03 00 00 8b 44 24 04 89 74 24 14 c6 80 88 00 00 00 01 8b 44 24 08 <80> b8 e0 95 b6 00 00 74 0c 8b 44 24 04 83 c0 68 e8 1a 9d ff ff 8b [ 1601.277983][ T1893] RSP: 002b:00000000f56e65e0 EFLAGS: 00010246 [ 1601.279872][ T1893] RAX: 00000000f73ebff4 RBX: 00000000f73ebff4 RCX: 0000000000000031 [ 1601.282227][ T1893] RDX: 00000000ffffffce RSI: 0000000000000003 RDI: 00000000f56e6610 [ 1601.284270][ T1893] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1601.286332][ T1893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1601.288386][ T1893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1601.290568][ T1893] [ 1601.292087][ C2] hpet: Lost 6 RTC interrupts [ 1601.425718][ T1901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1601.433788][ T1901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1601.483282][ T1906] FAULT_INJECTION: forcing a failure. [ 1601.483282][ T1906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.487283][ T1906] CPU: 2 UID: 0 PID: 1906 Comm: syz.3.6934 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1601.490096][ T1906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1601.492892][ T1906] Call Trace: [ 1601.493794][ T1906] [ 1601.494578][ T1906] dump_stack_lvl+0x16c/0x1f0 [ 1601.495903][ T1906] should_fail_ex+0x497/0x5b0 [ 1601.497142][ T1906] _copy_from_user+0x30/0xf0 [ 1601.498380][ T1906] get_compat_msghdr+0xa8/0x170 [ 1601.499657][ T1906] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1601.501084][ T1906] ? __pfx___lock_acquire+0x10/0x10 [ 1601.502470][ T1906] ___sys_sendmsg+0x1b0/0x1e0 [ 1601.503715][ T1906] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.505090][ T1906] ? lock_acquire+0x2f/0xb0 [ 1601.506321][ T1906] ? __fget_files+0x40/0x3f0 [ 1601.507512][ T1906] ? fdget+0x176/0x210 [ 1601.508567][ T1906] __sys_sendmsg+0x117/0x1f0 [ 1601.509722][ T1906] ? __pfx___sys_sendmsg+0x10/0x10 [ 1601.510961][ T1906] ? __fget_files+0x244/0x3f0 [ 1601.512090][ T1906] __do_fast_syscall_32+0x73/0x120 [ 1601.513343][ T1906] do_fast_syscall_32+0x32/0x80 [ 1601.514572][ T1906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1601.516135][ T1906] RIP: 0023:0xf73fe579 [ 1601.517146][ T1906] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1601.521792][ T1906] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1601.523869][ T1906] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000d00 [ 1601.525847][ T1906] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1601.527766][ T1906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1601.529986][ T1906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1601.531916][ T1906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1601.533890][ T1906] [ 1601.534995][ C2] hpet: Lost 2 RTC interrupts [ 1601.623899][ T1911] lo speed is unknown, defaulting to 1000 [ 1601.762686][ T1911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6936'. [ 1602.443625][ T1934] syzkaller0: entered allmulticast mode [ 1602.537472][ T1937] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1603.137835][ T1947] lo speed is unknown, defaulting to 1000 [ 1603.387145][ C2] net_ratelimit: 6 callbacks suppressed [ 1603.387173][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1603.476881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1604.116875][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1604.300558][ T1975] FAULT_INJECTION: forcing a failure. [ 1604.300558][ T1975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1604.303912][ T1975] CPU: 2 UID: 0 PID: 1975 Comm: syz.1.6956 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1604.306703][ T1975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1604.309674][ T1975] Call Trace: [ 1604.310545][ T1975] [ 1604.311334][ T1975] dump_stack_lvl+0x16c/0x1f0 [ 1604.312826][ T1975] should_fail_ex+0x497/0x5b0 [ 1604.314186][ T1975] _copy_from_user+0x30/0xf0 [ 1604.315644][ T1975] get_compat_msghdr+0xa8/0x170 [ 1604.317028][ T1975] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1604.318477][ T1975] ? __pfx___lock_acquire+0x10/0x10 [ 1604.319830][ T1975] ___sys_sendmsg+0x1b0/0x1e0 [ 1604.320974][ T1975] ? __pfx____sys_sendmsg+0x10/0x10 [ 1604.322344][ T1975] ? lock_acquire+0x2f/0xb0 [ 1604.323536][ T1975] ? __fget_files+0x40/0x3f0 [ 1604.324748][ T1975] ? fdget+0x176/0x210 [ 1604.325832][ T1975] __sys_sendmsg+0x117/0x1f0 [ 1604.327041][ T1975] ? __pfx___sys_sendmsg+0x10/0x10 [ 1604.328374][ T1975] ? __fget_files+0x244/0x3f0 [ 1604.329611][ T1975] __do_fast_syscall_32+0x73/0x120 [ 1604.330932][ T1975] do_fast_syscall_32+0x32/0x80 [ 1604.332199][ T1975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.333850][ T1975] RIP: 0023:0xf747e579 [ 1604.334908][ T1975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1604.340155][ T1975] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1604.342421][ T1975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1604.344548][ T1975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1604.346631][ T1975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1604.348684][ T1975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1604.350943][ T1975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1604.353000][ T1975] [ 1604.354253][ C2] hpet: Lost 3 RTC interrupts [ 1604.400242][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6957'. [ 1604.426833][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1604.516817][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1604.646195][ T1981] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1604.898106][ T39] audit: type=1326 audit(1729208455.873:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1992 comm="syz.2.6963" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 1605.146840][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1605.374405][ T2000] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1605.466801][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1605.546833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1605.877080][T28217] vhci_hcd: vhci_device speed not set [ 1606.186879][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1606.506829][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1606.601991][ T2022] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6972'. [ 1606.669593][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.672007][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.807360][ T2024] FAULT_INJECTION: forcing a failure. [ 1606.807360][ T2024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.811772][ T2024] CPU: 1 UID: 0 PID: 2024 Comm: syz.2.6973 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1606.815367][ T2024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1606.818413][ T2024] Call Trace: [ 1606.819503][ T2024] [ 1606.820526][ T2024] dump_stack_lvl+0x16c/0x1f0 [ 1606.821982][ T2024] should_fail_ex+0x497/0x5b0 [ 1606.823475][ T2024] _copy_from_user+0x30/0xf0 [ 1606.824969][ T2024] get_compat_msghdr+0xa8/0x170 [ 1606.826700][ T2024] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1606.828561][ T2024] ? __pfx___lock_acquire+0x10/0x10 [ 1606.830243][ T2024] ___sys_sendmsg+0x1b0/0x1e0 [ 1606.831477][ T2024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.833016][ T2024] ? lock_acquire+0x2f/0xb0 [ 1606.834509][ T2024] ? __fget_files+0x40/0x3f0 [ 1606.836141][ T2024] ? fdget+0x176/0x210 [ 1606.837726][ T2024] __sys_sendmsg+0x117/0x1f0 [ 1606.839514][ T2024] ? __pfx___sys_sendmsg+0x10/0x10 [ 1606.841312][ T2024] ? __fget_files+0x244/0x3f0 [ 1606.843019][ T2024] __do_fast_syscall_32+0x73/0x120 [ 1606.844854][ T2024] do_fast_syscall_32+0x32/0x80 [ 1606.846394][ T2024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1606.848327][ T2024] RIP: 0023:0xf744e579 [ 1606.849516][ T2024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1606.856246][ T2024] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1606.858967][ T2024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 1606.861689][ T2024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1606.864400][ T2024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1606.867065][ T2024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1606.869826][ T2024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1606.872436][ T2024] [ 1606.966178][ T2029] input: syz0 as /devices/virtual/input/input99 [ 1607.582933][ T2050] FAULT_INJECTION: forcing a failure. [ 1607.582933][ T2050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1607.589781][ T2050] CPU: 3 UID: 0 PID: 2050 Comm: syz.1.6981 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1607.593492][ T2050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1607.597166][ T2050] Call Trace: [ 1607.598352][ T2050] [ 1607.599372][ T2050] dump_stack_lvl+0x16c/0x1f0 [ 1607.601050][ T2050] should_fail_ex+0x497/0x5b0 [ 1607.602712][ T2050] _copy_from_user+0x30/0xf0 [ 1607.604146][ T2050] get_compat_msghdr+0xa8/0x170 [ 1607.605870][ T2050] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1607.607797][ T2050] ? __pfx___lock_acquire+0x10/0x10 [ 1607.609207][ T2050] ___sys_sendmsg+0x1b0/0x1e0 [ 1607.610597][ T2050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1607.611969][ T2050] ? lock_acquire+0x2f/0xb0 [ 1607.613164][ T2050] ? __fget_files+0x40/0x3f0 [ 1607.614423][ T2050] ? fdget+0x176/0x210 [ 1607.615619][ T2050] __sys_sendmsg+0x117/0x1f0 [ 1607.616833][ T2050] ? __pfx___sys_sendmsg+0x10/0x10 [ 1607.618543][ T2050] ? __fget_files+0x244/0x3f0 [ 1607.620317][ T2050] __do_fast_syscall_32+0x73/0x120 [ 1607.622024][ T2050] do_fast_syscall_32+0x32/0x80 [ 1607.623640][ T2050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1607.625735][ T2050] RIP: 0023:0xf747e579 [ 1607.627089][ T2050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1607.633892][ T2050] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1607.637057][ T2050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 1607.639646][ T2050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1607.641792][ T2050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1607.643835][ T2050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1607.645881][ T2050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1607.647942][ T2050] [ 1607.648803][ C3] vkms_vblank_simulate: vblank timer overrun [ 1607.844091][ T2059] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1608.145290][ T2066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6985'. [ 1608.156908][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.159697][ T2066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.175014][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.196562][ T2066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.208414][ T2066] batman_adv: batadv0: Interface deactivated: vlan1 [ 1608.215660][ T2066] batman_adv: batadv0: Removing interface: vlan1 [ 1608.587007][ C2] net_ratelimit: 5 callbacks suppressed [ 1608.587026][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1608.588746][ T2073] netlink: 'syz.3.6988': attribute type 7 has an invalid length. [ 1608.593072][ T2073] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1608.597888][ T2073] netlink: 'syz.3.6988': attribute type 3 has an invalid length. [ 1608.599966][ T2073] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1608.676848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1609.260057][ T2087] FAULT_INJECTION: forcing a failure. [ 1609.260057][ T2087] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.263432][ T2087] CPU: 0 UID: 0 PID: 2087 Comm: syz.0.6994 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1609.266157][ T2087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1609.268942][ T2087] Call Trace: [ 1609.269825][ T2087] [ 1609.270621][ T2087] dump_stack_lvl+0x16c/0x1f0 [ 1609.271968][ T2087] should_fail_ex+0x497/0x5b0 [ 1609.273222][ T2087] ? fs_reclaim_acquire+0xae/0x150 [ 1609.274593][ T2087] should_failslab+0xc2/0x120 [ 1609.275848][ T2087] __kmalloc_noprof+0xcb/0x410 [ 1609.277180][ T2087] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1609.278664][ T2087] tomoyo_realpath_from_path+0xbf/0x710 [ 1609.280102][ T2087] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1609.281645][ T2087] tomoyo_path_number_perm+0x245/0x5b0 [ 1609.283161][ T2087] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1609.284662][ T2087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1609.286282][ T2087] ? trace_lock_acquire+0x14a/0x1d0 [ 1609.287668][ T2087] ? lock_acquire+0x2f/0xb0 [ 1609.288925][ T2087] ? __fget_files+0x40/0x3f0 [ 1609.290182][ T2087] ? __fget_files+0x244/0x3f0 [ 1609.291445][ T2087] security_file_ioctl_compat+0x9b/0x240 [ 1609.293027][ T2087] __do_compat_sys_ioctl+0x52/0x2b0 [ 1609.294455][ T2087] __do_fast_syscall_32+0x73/0x120 [ 1609.295818][ T2087] do_fast_syscall_32+0x32/0x80 [ 1609.297145][ T2087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1609.298879][ T2087] RIP: 0023:0xf73ae579 [ 1609.299969][ T2087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1609.304998][ T2087] RSP: 002b:00000000f567556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1609.307192][ T2087] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000004048aecb [ 1609.309327][ T2087] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.311426][ T2087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1609.313421][ T2087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1609.315500][ T2087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1609.317599][ T2087] [ 1609.318644][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1609.324130][ T2087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1609.480281][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6997'. [ 1609.590227][ T2104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6998'. [ 1609.592619][ T2104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6998'. [ 1609.636786][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1609.716829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1609.861627][ T2108] siw: device registration error -23 [ 1609.920156][ T2107] FAULT_INJECTION: forcing a failure. [ 1609.920156][ T2107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.930731][ T2107] CPU: 2 UID: 0 PID: 2107 Comm: syz.3.6999 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1609.933558][ T2107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1609.936335][ T2107] Call Trace: [ 1609.937251][ T2107] [ 1609.938051][ T2107] dump_stack_lvl+0x16c/0x1f0 [ 1609.939310][ T2107] should_fail_ex+0x497/0x5b0 [ 1609.940551][ T2107] _copy_from_user+0x30/0xf0 [ 1609.941792][ T2107] get_compat_msghdr+0xa8/0x170 [ 1609.943090][ T2107] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1609.944520][ T2107] ? __pfx___lock_acquire+0x10/0x10 [ 1609.945967][ T2107] ___sys_sendmsg+0x1b0/0x1e0 [ 1609.947266][ T2107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.948598][ T2107] ? lock_acquire+0x2f/0xb0 [ 1609.949777][ T2107] ? __fget_files+0x40/0x3f0 [ 1609.950970][ T2107] ? fdget+0x176/0x210 [ 1609.952023][ T2107] __sys_sendmsg+0x117/0x1f0 [ 1609.953270][ T2107] ? __pfx___sys_sendmsg+0x10/0x10 [ 1609.954632][ T2107] ? __fget_files+0x244/0x3f0 [ 1609.955887][ T2107] __do_fast_syscall_32+0x73/0x120 [ 1609.957281][ T2107] do_fast_syscall_32+0x32/0x80 [ 1609.958593][ T2107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1609.960262][ T2107] RIP: 0023:0xf73fe579 [ 1609.961350][ T2107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1609.966648][ T2107] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1609.968874][ T2107] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200002c0 [ 1609.971020][ T2107] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.973053][ T2107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1609.975134][ T2107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1609.977232][ T2107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1609.979363][ T2107] [ 1609.980548][ C2] hpet: Lost 3 RTC interrupts [ 1610.214504][T31629] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 1610.259203][ T2124] siw: device registration error -23 [ 1610.346890][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1610.667124][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1610.756864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1610.830384][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1610.832760][ T2136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1610.981245][ T2139] FAULT_INJECTION: forcing a failure. [ 1610.981245][ T2139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.984777][ T2139] CPU: 2 UID: 0 PID: 2139 Comm: syz.3.7010 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1610.987680][ T2139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1610.991056][ T2139] Call Trace: [ 1610.991932][ T2139] [ 1610.992710][ T2139] dump_stack_lvl+0x16c/0x1f0 [ 1610.993969][ T2139] should_fail_ex+0x497/0x5b0 [ 1610.995235][ T2139] _copy_from_user+0x30/0xf0 [ 1610.996537][ T2139] get_compat_msghdr+0xa8/0x170 [ 1610.997950][ T2139] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1610.999446][ T2139] ? __pfx___lock_acquire+0x10/0x10 [ 1611.000872][ T2139] ___sys_sendmsg+0x1b0/0x1e0 [ 1611.002133][ T2139] ? __pfx____sys_sendmsg+0x10/0x10 [ 1611.003434][ T2139] ? lock_acquire+0x2f/0xb0 [ 1611.004606][ T2139] ? __fget_files+0x40/0x3f0 [ 1611.005850][ T2139] ? fdget+0x176/0x210 [ 1611.006936][ T2139] __sys_sendmsg+0x117/0x1f0 [ 1611.008166][ T2139] ? __pfx___sys_sendmsg+0x10/0x10 [ 1611.009498][ T2139] ? __fget_files+0x244/0x3f0 [ 1611.010700][ T2139] __do_fast_syscall_32+0x73/0x120 [ 1611.012131][ T2139] do_fast_syscall_32+0x32/0x80 [ 1611.013428][ T2139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1611.015070][ T2139] RIP: 0023:0xf73fe579 [ 1611.016203][ T2139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1611.021620][ T2139] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1611.023793][ T2139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 1611.025808][ T2139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1611.027834][ T2139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1611.029897][ T2139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1611.031961][ T2139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1611.033949][ T2139] [ 1611.035021][ C2] hpet: Lost 2 RTC interrupts [ 1611.349125][ T2163] vivid-000: disconnect [ 1611.351664][ T2165] vivid-000: reconnect [ 1611.364414][ T2162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1611.386847][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1611.566660][ T2175] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 1611.572642][ T2176] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 1 [ 1611.576063][ T2178] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 3 [ 1611.577046][ T2177] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 2 [ 1611.582799][ T2180] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 5 [ 1611.585107][ T2181] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 6 [ 1611.586843][ T2179] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 4 [ 1611.589476][ T2183] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 7 [ 1611.602945][ T2184] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 8 [ 1611.603685][ T2186] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 10 [ 1611.606608][ T2185] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 9 [ 1611.614821][ T2187] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 11 [ 1611.615449][ T2189] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 12 [ 1611.621514][ T2190] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 13 [ 1611.626019][ T2191] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 14 [ 1611.626828][ T2192] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 15 [ 1611.652299][ T2194] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 17 [ 1611.652476][ T2193] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 16 [ 1611.658604][ T2195] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 18 [ 1611.664122][ T2196] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 19 [ 1611.667003][ T2197] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 20 [ 1611.671685][ T2198] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 21 [ 1611.675143][ T2200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 22 [ 1611.675572][ T2201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 23 [ 1611.676435][ T2202] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 24 [ 1611.677834][ T2203] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 25 [ 1611.678312][ T2205] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 26 [ 1611.683803][ T2199] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1611.692236][ T2199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1611.694325][ T2207] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 27 [ 1611.698965][ T2208] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 28 [ 1611.702214][ T2209] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 29 [ 1611.702644][ T2210] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 30 [ 1611.703659][ T2199] vhci_hcd vhci_hcd.0: Device attached [ 1611.709303][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1611.717057][ T2211] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 31 [ 1611.719185][ T2212] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 32 [ 1611.719489][ T2213] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 33 [ 1611.727161][ T2214] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 34 [ 1611.737103][ T2215] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 35 [ 1611.737447][ T2216] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 36 [ 1611.744343][ T2217] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 37 [ 1611.747026][ T2218] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 38 [ 1611.756871][ T2219] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 39 [ 1611.767084][ T2220] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 40 [ 1611.768115][ T2222] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 42 [ 1611.768270][ T2221] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 41 [ 1611.788141][ T2223] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 43 [ 1611.791052][ T2224] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 44 [ 1611.792128][ T2225] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 45 [ 1611.792399][ T2226] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 46 [ 1611.801862][ T2227] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 47 [ 1611.804750][ T2228] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 48 [ 1611.806035][ T2229] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 49 [ 1611.808209][ T2230] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 50 [ 1611.815979][ T2231] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 51 [ 1611.816593][ T2232] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 52 [ 1611.821687][ T2236] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 53 [ 1611.825755][ T2237] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 54 [ 1611.826901][ T2238] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 55 [ 1611.827157][ T2239] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 56 [ 1611.836940][ T2241] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 58 [ 1611.837020][ T2240] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 57 [ 1611.842798][ T2242] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 59 [ 1611.846877][ T2243] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 60 [ 1611.847167][ T2244] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 61 [ 1611.853065][ T2245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 62 [ 1611.857088][ T2246] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 63 [ 1611.896844][T17794] vhci_hcd: vhci_device speed not set [ 1611.969608][ T2252] random: crng reseeded on system resumption [ 1611.987726][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1612.105930][T17794] usb 19-1: new full-speed USB device number 3 using vhci_hcd [ 1612.265632][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7024'. [ 1612.268459][ T2261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7024'. [ 1612.639895][ T2204] vhci_hcd: connection reset by peer [ 1612.757773][ T74] vhci_hcd: stop threads [ 1612.758950][ T74] vhci_hcd: release socket [ 1612.760193][ T74] vhci_hcd: disconnect device [ 1613.281134][ T2289] FAULT_INJECTION: forcing a failure. [ 1613.281134][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.285629][ T2289] CPU: 2 UID: 0 PID: 2289 Comm: syz.2.7032 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1613.289524][ T2289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1613.293298][ T2289] Call Trace: [ 1613.294497][ T2289] [ 1613.295558][ T2289] dump_stack_lvl+0x16c/0x1f0 [ 1613.297200][ T2289] should_fail_ex+0x497/0x5b0 [ 1613.298900][ T2289] _copy_from_user+0x30/0xf0 [ 1613.300423][ T2289] kstrtouint_from_user+0xd7/0x1c0 [ 1613.302122][ T2289] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1613.304095][ T2289] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1613.306069][ T2289] proc_fail_nth_write+0x84/0x250 [ 1613.307837][ T2289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1613.309984][ T2289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1613.311953][ T2289] vfs_write+0x28e/0x1140 [ 1613.313535][ T2289] ? __fget_files+0x23a/0x3f0 [ 1613.315190][ T2289] ? fdget_pos+0x24c/0x360 [ 1613.316787][ T2289] ? __pfx_lock_release+0x10/0x10 [ 1613.318564][ T2289] ? trace_lock_acquire+0x14a/0x1d0 [ 1613.320409][ T2289] ? __pfx_vfs_write+0x10/0x10 [ 1613.322139][ T2289] ? __pfx___mutex_lock+0x10/0x10 [ 1613.323936][ T2289] ? __fget_files+0x244/0x3f0 [ 1613.325606][ T2289] ksys_write+0x12f/0x260 [ 1613.327131][ T2289] ? __pfx_ksys_write+0x10/0x10 [ 1613.328816][ T2289] __do_fast_syscall_32+0x73/0x120 [ 1613.330597][ T2289] do_fast_syscall_32+0x32/0x80 [ 1613.332219][ T2289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1613.334296][ T2289] RIP: 0023:0xf744e579 [ 1613.335686][ T2289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1613.342279][ T2289] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1613.345022][ T2289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5736620 [ 1613.347604][ T2289] RDX: 0000000000000001 RSI: 00000000f743bff4 RDI: 0000000000000000 [ 1613.350296][ T2289] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1613.353041][ T2289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1613.355868][ T2289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1613.358587][ T2289] [ 1613.360210][ C2] hpet: Lost 4 RTC interrupts [ 1613.626511][ T2308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.636919][ T2308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.786924][ C2] net_ratelimit: 6 callbacks suppressed [ 1613.786937][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1613.856830][T26710] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1613.866864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1614.184023][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1614.186410][ T2319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1614.274595][T31629] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1614.278928][T31629] Bluetooth: hci0: Injecting HCI hardware error event [ 1614.284219][T31629] Bluetooth: hci0: hardware error 0x00 [ 1614.446826][T26710] usb 8-1: Using ep0 maxpacket: 32 [ 1614.452435][T26710] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1614.454500][T26710] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1614.456638][T26710] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1614.459012][T26710] usb 8-1: config 1 has no interface number 0 [ 1614.461072][T26710] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1614.464068][T26710] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1614.468326][T26710] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1614.470979][T26710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.484739][T26710] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1614.506842][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1614.679475][ T2325] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 1614.826843][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1614.916873][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1615.038451][T26710] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 1615.244928][ T35] usb 8-1: USB disconnect, device number 102 [ 1615.247125][ T35] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1615.314879][T31631] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 1615.513547][ T2357] FAULT_INJECTION: forcing a failure. [ 1615.513547][ T2357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.526853][ T2357] CPU: 1 UID: 0 PID: 2357 Comm: syz.0.7045 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1615.529572][ T2357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1615.532179][ T2357] Call Trace: [ 1615.533024][ T2357] [ 1615.533801][ T2357] dump_stack_lvl+0x16c/0x1f0 [ 1615.534978][ T2357] should_fail_ex+0x497/0x5b0 [ 1615.536124][ T2357] strncpy_from_user+0x3b/0x2a0 [ 1615.537367][ T2357] getname_flags.part.0+0x8f/0x550 [ 1615.538630][ T2357] getname+0x8d/0xe0 [ 1615.539612][ T2357] do_sys_openat2+0x104/0x1e0 [ 1615.540787][ T2357] ? __pfx_do_sys_openat2+0x10/0x10 [ 1615.542196][ T2357] ? __fget_files+0x244/0x3f0 [ 1615.543345][ T2357] __ia32_compat_sys_openat+0x16e/0x210 [ 1615.544735][ T2357] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1615.546201][ T2357] ? ksys_write+0x1ad/0x260 [ 1615.547294][ T2357] __do_fast_syscall_32+0x73/0x120 [ 1615.547322][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1615.548569][ T2357] do_fast_syscall_32+0x32/0x80 [ 1615.548588][ T2357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1615.548603][ T2357] RIP: 0023:0xf73ae579 [ 1615.548612][ T2357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1615.548622][ T2357] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1615.548633][ T2357] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020001380 [ 1615.548640][ T2357] RDX: 0000000000004001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1615.565429][ T2357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1615.567337][ T2357] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1615.569913][ T2357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1615.571848][ T2357] [ 1615.876827][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1615.946880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1616.346981][T31629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1616.461268][ T2397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1616.463821][ T2397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1616.542237][ T2400] FAULT_INJECTION: forcing a failure. [ 1616.542237][ T2400] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.545592][ T2400] CPU: 1 UID: 0 PID: 2400 Comm: syz.0.7051 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1616.548294][ T2400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1616.551182][ T2400] Call Trace: [ 1616.552064][ T2400] [ 1616.552843][ T2400] dump_stack_lvl+0x16c/0x1f0 [ 1616.554093][ T2400] should_fail_ex+0x497/0x5b0 [ 1616.555320][ T2400] ? fs_reclaim_acquire+0xae/0x150 [ 1616.556632][ T2400] should_failslab+0xc2/0x120 [ 1616.557919][ T2400] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1616.559506][ T2400] ? copy_process+0x49c/0x6ee0 [ 1616.560737][ T2400] copy_process+0x49c/0x6ee0 [ 1616.561941][ T2400] ? __might_fault+0x13b/0x190 [ 1616.563186][ T2400] ? __pfx_lock_release+0x10/0x10 [ 1616.564485][ T2400] ? trace_lock_acquire+0x14a/0x1d0 [ 1616.565837][ T2400] ? __pfx_copy_process+0x10/0x10 [ 1616.567115][ T2400] ? _copy_from_user+0x5d/0xf0 [ 1616.568356][ T2400] kernel_clone+0xfd/0x960 [ 1616.569493][ T2400] ? ksys_write+0x12f/0x260 [ 1616.570672][ T2400] ? __pfx_kernel_clone+0x10/0x10 [ 1616.571975][ T2400] ? vfs_write+0x14d/0x1140 [ 1616.573363][ T2400] __do_sys_clone3+0x1f5/0x270 [ 1616.574623][ T2400] ? __pfx___do_sys_clone3+0x10/0x10 [ 1616.576011][ T2400] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1616.577745][ T2400] __do_fast_syscall_32+0x73/0x120 [ 1616.579167][ T2400] do_fast_syscall_32+0x32/0x80 [ 1616.580408][ T2400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1616.582023][ T2400] RIP: 0023:0xf73ae579 [ 1616.583096][ T2400] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1616.586912][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1616.587982][ T2400] RSP: 002b:00000000f569643c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 1616.587999][ T2400] RAX: ffffffffffffffda RBX: 00000000f5696470 RCX: 0000000000000058 [ 1616.588006][ T2400] RDX: 0000000000000000 RSI: 0000000042907480 RDI: 0000000000000000 [ 1616.588012][ T2400] RBP: 00000000200000c0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.588018][ T2400] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1616.588024][ T2400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1616.602400][ T2400] [ 1616.928946][ T2418] FAULT_INJECTION: forcing a failure. [ 1616.928946][ T2418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.928965][ T2418] CPU: 1 UID: 0 PID: 2418 Comm: syz.1.7056 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1616.928977][ T2418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1616.928983][ T2418] Call Trace: [ 1616.928987][ T2418] [ 1616.928991][ T2418] dump_stack_lvl+0x16c/0x1f0 [ 1616.929009][ T2418] should_fail_ex+0x497/0x5b0 [ 1616.929026][ T2418] strncpy_from_user+0x3b/0x2a0 [ 1616.929040][ T2418] getname_flags.part.0+0x8f/0x550 [ 1616.929056][ T2418] getname+0x8d/0xe0 [ 1616.929065][ T2418] do_sys_openat2+0x104/0x1e0 [ 1616.929078][ T2418] ? __pfx_do_sys_openat2+0x10/0x10 [ 1616.929092][ T2418] ? __pfx___schedule+0x10/0x10 [ 1616.929103][ T2418] ? __fget_files+0x244/0x3f0 [ 1616.929115][ T2418] __ia32_compat_sys_openat+0x16e/0x210 [ 1616.929135][ T2418] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1616.929153][ T2418] __do_fast_syscall_32+0x73/0x120 [ 1616.929168][ T2418] do_fast_syscall_32+0x32/0x80 [ 1616.929181][ T2418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1616.929196][ T2418] RIP: 0023:0xf747e579 [ 1616.929204][ T2418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1616.929213][ T2418] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1616.929224][ T2418] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 1616.929231][ T2418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.929238][ T2418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1616.929243][ T2418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1616.929249][ T2418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1616.929261][ T2418] [ 1617.217043][T17794] vhci_hcd: vhci_device speed not set [ 1617.516249][ T2446] lo speed is unknown, defaulting to 1000 [ 1618.679904][ T2501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7069'. [ 1618.682820][ T2501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7069'. [ 1618.986824][ C2] net_ratelimit: 6 callbacks suppressed [ 1618.986836][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1619.066892][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1619.450773][ T2506] futex_wake_op: syz.2.7071 tries to shift op by 144; fix this program [ 1619.450803][ T2509] fuse: Unknown parameter 'grۊ2A00000000000000000000' [ 1619.457205][ T2506] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 1619.462641][ T2506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7071'. [ 1619.521694][ T2509] kvm: user requested TSC rate below hardware speed [ 1619.536459][ T2509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1811452640 (231865937920 ns) > initial count (2048 ns). Using initial count to start timer. [ 1619.706904][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1620.026841][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1620.069398][ T2528] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7076'. [ 1620.106991][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1620.336072][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1620.339757][ T2547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1620.631917][ T2560] netlink: 'syz.2.7083': attribute type 3 has an invalid length. [ 1620.634280][ T2560] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7083'. [ 1620.726286][ T39] audit: type=1326 audit(1729208471.693:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.734510][ T39] audit: type=1326 audit(1729208471.703:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.741872][ T39] audit: type=1326 audit(1729208471.703:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.746981][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1620.750795][ T39] audit: type=1326 audit(1729208471.703:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.771422][ T39] audit: type=1326 audit(1729208471.733:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.787898][ T39] audit: type=1326 audit(1729208471.753:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.795579][ T39] audit: type=1326 audit(1729208471.753:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf744e5a7 code=0x7ffc0000 [ 1620.820458][ T39] audit: type=1326 audit(1729208471.753:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1620.841759][ T39] audit: type=1326 audit(1729208471.753:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf744e5a7 code=0x7ffc0000 [ 1620.937234][ T39] audit: type=1326 audit(1729208471.753:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz.2.7083" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 1621.066864][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1621.146839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1621.292996][ T2580] FAULT_INJECTION: forcing a failure. [ 1621.292996][ T2580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.304137][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: syz.1.7087 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1621.308859][ T2580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1621.313683][ T2580] Call Trace: [ 1621.314926][ T2580] [ 1621.315989][ T2580] dump_stack_lvl+0x16c/0x1f0 [ 1621.317734][ T2580] should_fail_ex+0x497/0x5b0 [ 1621.319445][ T2580] _copy_from_user+0x30/0xf0 [ 1621.321112][ T2580] memdup_user+0x71/0xd0 [ 1621.322647][ T2580] strndup_user+0x78/0xe0 [ 1621.324224][ T2580] __ia32_sys_mount+0x138/0x310 [ 1621.326202][ T2580] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1621.328426][ T2580] __do_fast_syscall_32+0x73/0x120 [ 1621.330352][ T2580] do_fast_syscall_32+0x32/0x80 [ 1621.332190][ T2580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1621.334646][ T2580] RIP: 0023:0xf747e579 [ 1621.336238][ T2580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1621.343472][ T2580] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1621.346457][ T2580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 1621.349369][ T2580] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 00000000200002c0 [ 1621.352231][ T2580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1621.355185][ T2580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1621.358055][ T2580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1621.361117][ T2580] [ 1621.786895][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1622.085940][ T2594] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1622.113314][ T2594] tmpfs: Bad value for 'mpol' [ 1622.275349][ T2605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7094'. [ 1622.285482][ T2605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7094'. [ 1624.186807][ C2] net_ratelimit: 6 callbacks suppressed [ 1624.186819][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1624.196230][ T45] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x125f pfn:0x51806 [ 1624.199578][ T45] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff) [ 1624.202618][ T45] raw: 04fff00000010001 ffffc900006bf608 ffffc900006bf608 ffffffff8b5d54a2 [ 1624.205563][ T45] raw: 000000000000125f 0000000000000000 00000002ffffffff 0000000000000000 [ 1624.211029][ T45] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 1624.223160][ T45] page_owner tracks the page as allocated [ 1624.225124][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 112, tgid 112 (kswapd0), ts 1624133377401, free_ts 1624039107302 [ 1624.232012][ T45] post_alloc_hook+0x2d1/0x350 [ 1624.233562][ T45] get_page_from_freelist+0x101e/0x3070 [ 1624.235357][ T45] __alloc_pages_noprof+0x223/0x25a0 [ 1624.238892][ T45] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1624.240907][ T45] z3fold_zpool_malloc+0x853/0x14f0 [ 1624.242852][ T45] zswap_store+0xda1/0x1fe0 [ 1624.244556][ T45] swap_writepage+0x3b6/0x990 [ 1624.246401][ T45] pageout+0x3b2/0xaa0 [ 1624.248372][ T45] shrink_folio_list+0x3025/0x42d0 [ 1624.250106][ T45] evict_folios+0x6d6/0x1970 [ 1624.251399][ T45] try_to_shrink_lruvec+0x612/0x9b0 [ 1624.256411][ T45] shrink_one+0x3e3/0x7b0 [ 1624.261220][ T45] shrink_node+0x2452/0x39d0 [ 1624.263097][ T45] balance_pgdat+0xc19/0x18f0 [ 1624.264802][ T45] kswapd+0x5ea/0xbf0 [ 1624.265955][ T45] kthread+0x2c1/0x3a0 [ 1624.268316][ T45] page last free pid 4837 tgid 4837 stack trace: [ 1624.270836][ T45] free_unref_page+0x5f4/0xdc0 [ 1624.274549][ T45] __put_partials+0x14c/0x170 [ 1624.276605][ T45] qlist_free_all+0x4e/0x120 [ 1624.276902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1624.278979][ T45] kasan_quarantine_reduce+0x192/0x1e0 [ 1624.286066][ T45] __kasan_slab_alloc+0x69/0x90 [ 1624.293874][ T45] kmem_cache_alloc_noprof+0x121/0x2f0 [ 1624.298584][ T45] getname_flags.part.0+0x4c/0x550 [ 1624.301672][ T45] __x64_sys_unlink+0xb0/0x110 [ 1624.306232][ T45] do_syscall_64+0xcd/0x250 [ 1624.308063][ T45] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.310321][ T45] ------------[ cut here ]------------ [ 1624.311852][ T45] kernel BUG at mm/z3fold.c:1293! [ 1624.313201][ T45] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1624.315494][ T45] CPU: 0 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 1624.320854][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1624.323655][ T45] RIP: 0010:z3fold_page_migrate+0xea1/0x12d0 [ 1624.325405][ T45] Code: bd 93 ff 48 c7 c6 60 4c 5d 8b 48 89 ef e8 c7 6b d9 ff 90 0f 0b e8 ff bc 93 ff 48 c7 c6 c0 4c 5d 8b 48 89 ef e8 b0 6b d9 ff 90 <0f> 0b e8 e8 bc 93 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 1624.332040][ T45] RSP: 0018:ffffc900006bf480 EFLAGS: 00010293 [ 1624.334229][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1624.336954][ T45] RDX: ffff88801e802440 RSI: ffffffff81f8fce0 RDI: ffff88801e802884 [ 1624.339746][ T45] RBP: ffffea0001460180 R08: 0000000000000001 R09: 0000000000000001 [ 1624.342500][ T45] R10: ffffffff901ce54f R11: 0000000000000000 R12: ffffea0001a8adc0 [ 1624.345195][ T45] R13: ffffffff8b5d54a0 R14: ffffea00014601a8 R15: ffffea0001460198 [ 1624.348008][ T45] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 1624.351165][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1624.353364][ T45] CR2: 000000003241fffc CR3: 000000002265c000 CR4: 0000000000352ef0 [ 1624.355859][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1624.358095][ T45] DR3: 00000000000f010e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1624.360226][ T45] Call Trace: [ 1624.361410][ T45] [ 1624.362451][ T45] ? die+0x31/0x80 [ 1624.363699][ T45] ? do_trap+0x232/0x430 [ 1624.365107][ T45] ? z3fold_page_migrate+0xea1/0x12d0 [ 1624.367033][ T45] ? z3fold_page_migrate+0xea1/0x12d0 [ 1624.368773][ T45] ? do_error_trap+0xf4/0x230 [ 1624.370363][ T45] ? z3fold_page_migrate+0xea1/0x12d0 [ 1624.372236][ T45] ? handle_invalid_op+0x34/0x40 [ 1624.374037][ T45] ? z3fold_page_migrate+0xea1/0x12d0 [ 1624.375940][ T45] ? exc_invalid_op+0x2e/0x50 [ 1624.377636][ T45] ? asm_exc_invalid_op+0x1a/0x20 [ 1624.379208][ T45] ? z3fold_page_migrate+0xea0/0x12d0 [ 1624.380934][ T45] ? z3fold_page_migrate+0xea1/0x12d0 [ 1624.382323][ T45] move_to_new_folio+0x449/0x700 [ 1624.383609][ T45] migrate_pages_batch+0x206a/0x31b0 [ 1624.385214][ T45] ? __pfx_compaction_free+0x10/0x10 [ 1624.387112][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1624.389114][ T45] ? __lock_acquire+0x163e/0x3ce0 [ 1624.390859][ T45] migrate_pages_sync+0x4c9/0x8f0 [ 1624.392612][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 1624.394563][ T45] ? __pfx_compaction_free+0x10/0x10 [ 1624.396457][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1624.398315][ T45] ? isolate_movable_page+0x3b/0x7f0 [ 1624.399926][ T45] migrate_pages+0x19ee/0x21f0 [ 1624.401668][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 1624.403591][ T45] ? __pfx_compaction_free+0x10/0x10 [ 1624.405507][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 1624.407332][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1624.409511][ T45] ? __pfx___might_resched+0x10/0x10 [ 1624.411389][ T45] compact_zone+0x1f68/0x4280 [ 1624.412988][ T45] ? __pfx_compact_zone+0x10/0x10 [ 1624.414806][ T45] ? lock_acquire.part.0+0x11b/0x380 [ 1624.416716][ T45] compact_node+0x1a2/0x2d0 [ 1624.418366][ T45] ? __pfx_compact_node+0x10/0x10 [ 1624.420024][ T45] ? kcompactd+0x55f/0xde0 [ 1624.421185][ T45] ? __pfx_extfrag_for_order+0x10/0x10 [ 1624.422599][ T45] kcompactd+0x76e/0xde0 [ 1624.423752][ T45] ? __pfx_kcompactd+0x10/0x10 [ 1624.424984][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1624.426675][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 1624.428486][ T45] ? __kthread_parkme+0x148/0x220 [ 1624.430202][ T45] ? __pfx_kcompactd+0x10/0x10 [ 1624.431693][ T45] kthread+0x2c1/0x3a0 [ 1624.433225][ T45] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.435077][ T45] ? __pfx_kthread+0x10/0x10 [ 1624.436623][ T45] ret_from_fork+0x45/0x80 [ 1624.438035][ T45] ? __pfx_kthread+0x10/0x10 [ 1624.439381][ T45] ret_from_fork_asm+0x1a/0x30 [ 1624.440985][ T45] [ 1624.442038][ T45] Modules linked in: [ 1624.443787][ T45] ---[ end trace 0000000000000000 ]--- [ 1624.445763][ T45] RIP: 0010:z3fold_page_migrate+0xea1/0x12d0 [ 1624.447956][ T45] Code: bd 93 ff 48 c7 c6 60 4c 5d 8b 48 89 ef e8 c7 6b d9 ff 90 0f 0b e8 ff bc 93 ff 48 c7 c6 c0 4c 5d 8b 48 89 ef e8 b0 6b d9 ff 90 <0f> 0b e8 e8 bc 93 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 1624.455497][ T45] RSP: 0018:ffffc900006bf480 EFLAGS: 00010293 [ 1624.457879][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1624.460703][ T45] RDX: ffff88801e802440 RSI: ffffffff81f8fce0 RDI: ffff88801e802884 [ 1624.463641][ T2629] futex_wake_op: syz.1.7102 tries to shift op by 144; fix this program [ 1624.463665][ T45] RBP: ffffea0001460180 R08: 0000000000000001 R09: 0000000000000001 [ 1624.463679][ T45] R10: ffffffff901ce54f R11: 0000000000000000 R12: ffffea0001a8adc0 [ 1624.467946][ T2629] netlink: 'syz.1.7102': attribute type 1 has an invalid length. [ 1624.469892][ T45] R13: ffffffff8b5d54a0 R14: ffffea00014601a8 R15: ffffea0001460198 [ 1624.472239][ T2629] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7102'. [ 1624.474264][ T45] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 1624.483663][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1624.485966][ T45] CR2: 000000003241fffc CR3: 000000002265c000 CR4: 0000000000352ef0 [ 1624.489375][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1624.492371][ T45] DR3: 00000000000f010e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1624.495390][ T45] Kernel panic - not syncing: Fatal exception [ 1624.498327][ T45] Kernel Offset: disabled [ 1624.499968][ T45] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:41:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8503dcc5 RDI=ffffffff9a63f260 RBP=ffffffff9a63f220 RSP=ffffc900006beda0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=0000000000000043 R14=ffffffff8503dc60 R15=0000000000000000 RIP=ffffffff8503dcef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003241fffc CR3=000000002265c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b4467a0 RCX=ffffc90003c41000 RDX=0000000000040000 RSI=ffffffff8180ac66 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002acf5a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffed1005688cf5 R13=0000000000000001 R14=ffff88802b4467a8 R15=ffff88802b540100 RIP=ffffffff8180ac7a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f740a1f0 CR3=000000002265c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000018be004 RBX=0000000000000002 RCX=ffffffff8b138a99 RDX=ffffed10056c7026 RSI=ffffffff8bb12a60 RDI=ffffffff8164194c RBP=ffffed10036ef000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b778000 R14=ffffffff901ce548 R15=0000000000000000 RIP=ffffffff8b139e7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffd44880 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c0f1fa92ffa5e66 bc291eccd0467e48 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8e625ea1e062db0 03f7f179bcf12ff0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74952e5641132fe6 791b87528cac6c55 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 305c6c71ecea728d e000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000017000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd43d6397b5ced83 7381a932d8dc5da2 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7eb9709c9760ec0 323c36dd5a632234 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000017000000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff81cb0534 RDX=ffff8880208e0000 RSI=ffffffff81cb038e RDI=ffffffff8ddb7800 RBP=ffff888022dde720 RSP=ffffc90000e9f788 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff8ddb7800 R13=dffffc0000000000 R14=0000000000000002 R15=ffff8880404de000 RIP=ffffffff816a34ea RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f569656c CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000