last executing test programs: 4.28800657s ago: executing program 1 (id=1051): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}}, 0x3a) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x41, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x6, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x4, 0x8, 0x3, 0xe, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xb, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x5, 0x6, 0x10], 0x8}}, 0xffff0001}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.808230677s ago: executing program 3 (id=1053): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14}}, 0xcc}}, 0x0) 3.744080098s ago: executing program 3 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x6}}}}}}}}, 0x0) 3.678882647s ago: executing program 3 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @ax25={0x3, @bcast, 0x7}, @ax25={0x3, @null, 0x3}, @isdn={0x22, 0x10, 0x2, 0x2, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='wlan0\x00', 0x0, 0x1000, 0x8000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x28, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0x1, 0x0, 0x60, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x183}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x48, &(0x7f00000002c0)=""/72, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x5, 0x9e6d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r1, 0x0, 0x389}, 0x18) listen(r0, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x1c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xc, [@typedef={0x10, 0x0, 0x0, 0x8, 0x2}, @enum64={0x4, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x4, 0x4}, {0x10, 0xfffffff9, 0x6}, {0x2, 0x3, 0x4f30}, {0x8, 0x8, 0x7}, {0x1, 0xf, 0x401}]}, @struct={0xd, 0x4, 0x0, 0x4, 0x1, 0x8, [{0x0, 0x1, 0x5}, {0xb, 0x4, 0xc26}, {0x5, 0x3, 0x7}, {0x7, 0x1}]}, @restrict={0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x4ae8c49d3d620c1a, 0x30, 0x0, 0x2e, 0x2e, 0x2e, 0x2e, 0x61, 0x2e, 0x2e]}}, &(0x7f00000009c0)=""/22, 0xe8, 0x16, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x20, &(0x7f0000000c00)={&(0x7f0000000ac0)=""/15, 0xf, 0x0, &(0x7f0000000b00)=""/212, 0xd4}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1b, 0x1b, &(0x7f0000000700)=@raw=[@generic={0x5, 0x6, 0x7, 0x6, 0x1000}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x0, 0x3, 0x7, 0xa, 0x1, 0xffffffffffffffc0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xf572}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x28}], &(0x7f0000000800)='GPL\x00', 0xfffffff7, 0x26, &(0x7f0000000840)=""/38, 0x41100, 0x4, '\x00', r6, @fallback=0x19, r7, 0x8, &(0x7f0000000a40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x1, 0xfffffffa, 0x4}, 0x10, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c80)=[{0x1, 0x5, 0xe, 0x5}, {0x2, 0x5, 0xa, 0x7}], 0x10, 0x4000, @void, @value}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x178, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2b551cf12240ff03f787b54dee203eb1b7db4ab2c2093877b3e6a3033f886f47"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2e5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xefcf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f6b83c644717fb22af1199912785c233"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "36714480e9813b10db8d4c1f5bf98da4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d17604b53a3c09067218b6c7219bba03"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6167d8b103747ed590f195433a9cdd8f1ed3deeeea271fa4fe76935adb532fcd"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x178}, 0x1, 0x0, 0x0, 0xcd5ebc75d811aecc}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_GET(r16, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, 0x1401, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6da}]}, 0x50}}, 0x40001) setsockopt$RDS_GET_MR_FOR_DEST(r16, 0x114, 0x7, &(0x7f00000013c0)={@ethernet={0x6, @link_local}, {&(0x7f0000001280)=""/208, 0xd0}, &(0x7f0000001380), 0x11}, 0xa0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r17, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, r11, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={r16, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={r2, 0xffffffffffffffff}, 0x4) r20 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x8001, '\x00', r6, r7, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x2, 0x2e, &(0x7f0000001600)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0xc, 0x2, 0x7, 0xfff, 0x1ae}, @generic={0x6b, 0x4, 0x9, 0x4a7, 0x101}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, @jmp={0x5, 0x1, 0x9, 0x1, 0xa, 0x1}, @alu={0x4, 0x1, 0x0, 0x1, 0x1, 0xffffffffffffffc2, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}], &(0x7f0000001780)='syzkaller\x00', 0xfc, 0xcc, &(0x7f00000017c0)=""/204, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0x1, 0xfff, 0x100}, 0x10, r8, r9, 0xa, &(0x7f0000001a00)=[r4, r19, r16, r7, r4, r20, r5, r16, r4, r4], &(0x7f0000001a40)=[{0x0, 0x4, 0xf, 0xb}, {0x5, 0x1, 0xc, 0x9}, {0x4, 0x3, 0x1, 0x8}, {0x0, 0x3, 0xb, 0x4}, {0x5, 0x1, 0xb, 0x2}, {0x5, 0x2, 0x3, 0x8}, {0x3, 0x5, 0x0, 0xd}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x5, 0x1, 0x3}, {0x3, 0x1, 0x2, 0xb}], 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001c80)={'tunl0\x00', &(0x7f0000001bc0)={'tunl0\x00', r6, 0x8000, 0x7800, 0x9, 0x9, {{0x1e, 0x4, 0x1, 0xb, 0x78, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1f, 0x55, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @multicast1, @broadcast]}, @cipso={0x86, 0x18, 0x3, [{0x7, 0x12, "7eee2f8be4da3856e6284c2b4a3507e0"}]}, @noop, @cipso={0x86, 0x2b, 0x3, [{0x6, 0xb, "968ef9421b8f495d47"}, {0x1, 0xc, "81598f1eb1e67645fe65"}, {0x2, 0x5, "a9b146"}, {0x0, 0x2}, {0x7, 0x7, "d3cf051123"}]}, @end]}}}}}) 3.678022246s ago: executing program 3 (id=1057): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x4}}, 0xe4) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11f7, @empty, 'pim6reg1\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008c0c0}, 0x840) r3 = socket$inet6(0xa, 0x2, 0x84) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtaction={0x124, 0x30, 0x2, 0x0, 0x20, {}, [{0x110, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xd8, 0xb, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000000, 0x1, 0x3, 0x400, 0x81}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff8, 0x3, 0x0, 0x10001, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x2f, 0x6, "13d2242216e610a50b73416782d9dadcf1ef0394a84294ed3ea068bca4292938fad0a63a44cd49414faf9d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"0da976033ffec3d1bd01d2f43659c99dee1a5f50700499dde067aa23d1bf55cb7ec364f913149a388253254f5c04679cb0db38d5e61ac310b6e86e028c62de5bb96a2ccfcd96d905ce31f0f222d5aa7e8b14f5d1cfe03f774bd55d00b2ea0e6e2870c9f869e2899fd83fc0863964bdeff336b8fb3d3adc51ec885aa57f81af8e5aa309ab1093c4c54399696ecd3dafe0c89b576ba0700ba48a77bc1a0d121d80f77c4abced0d8afcc8f6485caa2ab83283f83124cc85ddcec27037bf9c68acb839a9bb7842835b7f957c0f42a89eec6705657446c7ab5a7d465e4b99f1848f489dd6abaab55e542c02bb13a640c27e0ea355b8f2569cd60bdf6df3e23a1af2b3756df9a05f4413eae9422f55282bea891dc7f7d4226b35fe42e33d8114bfeaae0448f198180d712c6ccc90549dc9e888444f1b4e1c99d05f1a6583b2d3975c04ceb78bf732b64631d660729cddd9956327f07b90cd4948ea5342dc4fbc115e1694cdffb73f3714cfbd8822aade97cd2f7996045853d9b35ac614f02abc145c8da6d22ff814eeeb821aa2ab474ff099a18dd767576c1ab5c2c68909dd3e160cebfffcd8fef8aad6ca2cd58f79ea78db5c4f818e1073d4799411f153f350253b2a919e5c280d48d3d9c10c66d675e54b0a56016790a5c4a4629edcf2f544bfbc67021286bd4f83f49bc92c5ce5cabb6370531633a5f2c00729cf09cf03c281f25dda5ae484ae83ecf1c5c89ed78f15fe1b3e37b178c466b9363cb800e2220a9548ba1393652960a58e75dc280be874912b6c2b34700ff53d20fa853a43f11efd7d9c6427712e7f97484eedb99ab995acf6d2213b14967dc1edbc28544002455aa20d9ef4bb8e911b06eb253612a886ae4d31f31e6fbbd815f53768acf46a34624bf3de8f186cee1136adeb644d2e24b10d69dea81613d8fea16b89a438aa2e4c520cbaa735ed451f83f3b67c2cb3e9949700f4cda8df382222a08ad64163f9e704cc187af7f2fd7452d3d1778c570e152f614a9a9a63ea9ac0621cb2e5572574a5ae60ac7823698ae8fb084bbf32f39f85025a7d262d5a287f1386466af8e73c5bec9ed221b27cbccf1f1765792d7ab375560c7fb10a8b51ae61fc873a403ccd38c4f9b0f4fc1fe64eb24cfaa8800e729aad2e595a1084ddebedc1751a9078bd2f0118d5e9ce642140dc0d2c7b056f2ca1d354567d0e048a76b541cff4b4ab492263cbc29b58aa67ab30eb7d7c6cedce786a05721626c48f5de928a74ad29334b396228c377d2d0581c1c8bc49bd52bca79a0f2cacb13d4e2b9b319e38e48b287fc4f4d6dacc5909d502de2582113f927342884a757f362f72c5d006383d12002965ffac0ce0f308e0aac235b4d93129619ad171ced1a6573a66c3fc34a1b49bbb029043af884e6db4620e6301d6f0c7017d16b71892d82b507105e58ad63edf9f"}) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000180)) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) 3.350083397s ago: executing program 1 (id=1058): socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYRES32, @ANYRES8=r1, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB="2000000000000000002c4200004000e6ffffff000000090000000000"], 0x48) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r5, 0x2000000) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) dup(r4) 3.28977298s ago: executing program 0 (id=1060): ioperm(0x0, 0x5, 0x4000000000000020) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x8000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x57174000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4010, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64]) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8008010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.289364141s ago: executing program 0 (id=1061): timerfd_create(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x50565559, 0x0, 0x0, [{0xfffffffd}]}}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x1}, 0x10) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 2.989575994s ago: executing program 2 (id=1065): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2000000000000058, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4, 0x2, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a72, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0xee01) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec0000001a0001000000000000000000fc00"/32, @ANYRES32=0x0, @ANYRES32=r3], 0xec}}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = dup(0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d0b, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x63) syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp\x00') 2.619867289s ago: executing program 3 (id=1066): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}}, 0x3a) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x41, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x6, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x4, 0x8, 0x3, 0xe, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xb, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x5, 0x6, 0x10], 0x8}}, 0xffff0001}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.339739365s ago: executing program 0 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000440)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000680)={r7, 0x0, 0x0, 0xfb, 0x1, 0x4, 0xc4d9aef, 0xa70, 0x7f, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pivot_root(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000001d000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 2.059736523s ago: executing program 2 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003040400000000000000007fff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0xba01}, 0x810) 2.059463646s ago: executing program 1 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x4, 0x0, 0x6, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x4, 0x0, 0x6, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) 2.008324282s ago: executing program 1 (id=1070): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) r1 = open(0x0, 0x60840, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x8}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) 1.699655386s ago: executing program 3 (id=1071): r0 = socket$inet(0xa, 0x801, 0x84) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3ac0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) 1.563612676s ago: executing program 1 (id=1072): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) 1.371974258s ago: executing program 0 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x2000000, 0x10000}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x0) (fail_nth: 5) 1.199901747s ago: executing program 0 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x7f, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000002300)=0xfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(r0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}}, 0x3a) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x6, 0x3, 0x2, 0x107, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1fe, 0x40, 0x1, 0x7f, 0x2, 0x7ff, 0x4, 0x8, 0x3, 0xe, 0x4, 0x3, 0x1, 0x3, 0xd56, 0x3, 0x6, 0xb, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x5, 0x6, 0x10], 0x800}}, 0xffff0001}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0193da251a910f366f01010c00028008000140e0000002"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.199565931s ago: executing program 2 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r3 = dup(r2) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000140)={0x0, 0x0, 0x19, 0x1b, 0x8, &(0x7f0000000a40)="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"}) ioctl$SIOCSIFHWADDR(r3, 0x400442c8, &(0x7f0000000080)={'macsec0\x00', @dev}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sendmmsg$inet(r1, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r6, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010004b0400000000ffdbdf257a000000", @ANYRES32=r5, @ANYBLOB="004201000848060004001980f06ce93a7810e12bcf8835e623daa85752b5dec5307dca14f5a6b15fd70bd7b827a497312ea53da37d3e58a61324bf8fd04e84b5684b16705ed05f383c6394de536762606a48a314c50ba8d8bee83dd72dc397118343f72ad151fbdb97db786b9e107ed493590c65d8b396cae0e95fb42896ecbe9d252de90f38189767912b5d1eb1e871f15dbd39691791255e5a5fba9c93b71392bf2f509fa2ae251de8f4c8e6000000"], 0x24}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) 1.119246834s ago: executing program 2 (id=1076): pipe(0x0) r0 = fanotify_init(0x4, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_mark(r0, 0x1, 0x8000011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f, 0x4}}, 0x20) 1.111675295s ago: executing program 1 (id=1077): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000140)=0x2) r1 = socket$inet(0x2, 0x1, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ocfs2\x00', 0xd, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) rmdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007200330306000000a6ffffff07000000", @ANYRES32=0x0, @ANYBLOB="0800010022"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYRES8=r1, @ANYRES16], 0x11c}}, 0x20000801) 939.821447ms ago: executing program 2 (id=1078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x4000c0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) unshare(0x400) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000ffcffc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000a0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) 296.0399ms ago: executing program 0 (id=1079): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0x6a98047402e98331}, 0x14}}, 0x0) close(r0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 0s ago: executing program 2 (id=1080): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 [ 146.501830][ T7677] dump_stack_lvl+0x16c/0x1f0 [ 146.501866][ T7677] should_fail_ex+0x50a/0x650 [ 146.501889][ T7677] ? fs_reclaim_acquire+0xae/0x150 [ 146.501919][ T7677] should_failslab+0xc2/0x120 [ 146.501941][ T7677] __kmalloc_noprof+0xce/0x4f0 [ 146.501962][ T7677] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 146.501983][ T7677] ? tomoyo_realpath_from_path+0xbf/0x710 [ 146.502010][ T7677] tomoyo_realpath_from_path+0xbf/0x710 [ 146.502034][ T7677] ? tomoyo_path2_perm+0x298/0x760 [ 146.502055][ T7677] tomoyo_path2_perm+0x2a6/0x760 [ 146.502071][ T7677] ? tomoyo_path2_perm+0x298/0x760 [ 146.502090][ T7677] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 146.502119][ T7677] ? hlock_class+0x4e/0x130 [ 146.502144][ T7677] ? mark_lock+0xb5/0xc60 [ 146.502180][ T7677] ? current_check_refer_path+0x563/0x820 [ 146.502203][ T7677] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.502228][ T7677] ? __pfx_current_check_refer_path+0x10/0x10 [ 146.502250][ T7677] tomoyo_path_rename+0x102/0x1b0 [ 146.502274][ T7677] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 146.502300][ T7677] ? d_lookup+0xe7/0x190 [ 146.502330][ T7677] security_path_rename+0x18e/0x3c0 [ 146.502353][ T7677] do_renameat2+0x7a0/0xdd0 [ 146.502381][ T7677] ? __pfx_do_renameat2+0x10/0x10 [ 146.502401][ T7677] ? lock_acquire+0x2f/0xb0 [ 146.502425][ T7677] ? __virt_addr_valid+0x5e/0x590 [ 146.502454][ T7677] ? __phys_addr_symbol+0x30/0x80 [ 146.502487][ T7677] ? getname_flags.part.0+0x1c5/0x550 [ 146.502513][ T7677] __ia32_sys_rename+0x7c/0xa0 [ 146.502532][ T7677] __do_fast_syscall_32+0x73/0x120 [ 146.502549][ T7677] do_fast_syscall_32+0x32/0x80 [ 146.502563][ T7677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.502587][ T7677] RIP: 0023:0xf747e579 [ 146.502600][ T7677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.502615][ T7677] RSP: 002b:00000000f50c455c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 146.502631][ T7677] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000f00 [ 146.502642][ T7677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.502651][ T7677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.502661][ T7677] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.502671][ T7677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.502694][ T7677] [ 146.598478][ T7677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.254148][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 147.402634][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 147.406192][ T25] usb 6-1: config 0 has no interfaces? [ 147.408346][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.411717][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.416180][ T25] usb 6-1: config 0 descriptor?? [ 148.103614][ T7711] veth5: entered promiscuous mode [ 148.115571][ T7712] veth7: entered promiscuous mode [ 148.315801][ T7717] netem: change failed [ 148.820205][ T7726] bridge0: port 1(ipvlan2) entered blocking state [ 148.822054][ T7726] bridge0: port 1(ipvlan2) entered disabled state [ 148.824002][ T7726] ipvlan2: entered allmulticast mode [ 148.825481][ T7726] bridge0: entered allmulticast mode [ 148.827505][ T7726] ipvlan2: left allmulticast mode [ 148.828966][ T7726] bridge0: left allmulticast mode [ 149.311050][ T7736] FAULT_INJECTION: forcing a failure. [ 149.311050][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 149.315876][ T7736] CPU: 3 UID: 0 PID: 7736 Comm: syz.0.471 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 149.315892][ T7736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.315899][ T7736] Call Trace: [ 149.315903][ T7736] [ 149.315907][ T7736] dump_stack_lvl+0x16c/0x1f0 [ 149.315931][ T7736] should_fail_ex+0x50a/0x650 [ 149.315948][ T7736] ? sctp_add_bind_addr+0x9d/0x3e0 [ 149.315966][ T7736] should_failslab+0xc2/0x120 [ 149.315981][ T7736] __kmalloc_cache_noprof+0x68/0x420 [ 149.315997][ T7736] sctp_add_bind_addr+0x9d/0x3e0 [ 149.316015][ T7736] sctp_copy_local_addr_list+0x39e/0x5a0 [ 149.316030][ T7736] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 149.316045][ T7736] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 149.316060][ T7736] ? sctp_bind_addr_copy+0xe0/0x530 [ 149.316070][ T7736] sctp_bind_addr_copy+0xe0/0x530 [ 149.316083][ T7736] sctp_connect_new_asoc+0x1d8/0x790 [ 149.316101][ T7736] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.316116][ T7736] ? lock_acquire+0x2f/0xb0 [ 149.316130][ T7736] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 149.316146][ T7736] __sctp_connect+0x3f5/0xc60 [ 149.316160][ T7736] ? __might_fault+0x13b/0x190 [ 149.316176][ T7736] ? trace_lock_acquire+0x14e/0x1f0 [ 149.316186][ T7736] ? __pfx___sctp_connect+0x10/0x10 [ 149.316200][ T7736] ? lock_acquire+0x2f/0xb0 [ 149.316212][ T7736] ? __might_fault+0xe3/0x190 [ 149.316226][ T7736] ? __might_fault+0xe3/0x190 [ 149.316242][ T7736] __sctp_setsockopt_connectx+0xfc/0x170 [ 149.316258][ T7736] sctp_getsockopt+0x2e9f/0x7ae0 [ 149.316273][ T7736] ? hlock_class+0x4e/0x130 [ 149.316290][ T7736] ? mark_lock+0xb5/0xc60 [ 149.316301][ T7736] ? aa_label_sk_perm+0x19d/0x5a0 [ 149.316316][ T7736] ? __pfx_sctp_getsockopt+0x10/0x10 [ 149.316330][ T7736] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 149.316343][ T7736] ? find_held_lock+0x2d/0x110 [ 149.316366][ T7736] ? __pfx___might_resched+0x10/0x10 [ 149.316383][ T7736] ? aa_sk_perm+0x2f5/0xb20 [ 149.316394][ T7736] ? ksys_write+0x191/0x250 [ 149.316405][ T7736] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.316417][ T7736] ? find_held_lock+0x2d/0x110 [ 149.316448][ T7736] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 149.316466][ T7736] ? do_sock_getsockopt+0x3fe/0x870 [ 149.316480][ T7736] do_sock_getsockopt+0x3fe/0x870 [ 149.316495][ T7736] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 149.316508][ T7736] ? lock_acquire+0x2f/0xb0 [ 149.316520][ T7736] ? __fget_files+0x40/0x3a0 [ 149.316533][ T7736] ? __fget_files+0x206/0x3a0 [ 149.316547][ T7736] __sys_getsockopt+0x12f/0x260 [ 149.316560][ T7736] __ia32_sys_getsockopt+0xbc/0x160 [ 149.316570][ T7736] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.316588][ T7736] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 149.316606][ T7736] __do_fast_syscall_32+0x73/0x120 [ 149.316618][ T7736] do_fast_syscall_32+0x32/0x80 [ 149.316628][ T7736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.316647][ T7736] RIP: 0023:0xf747e579 [ 149.316655][ T7736] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.316666][ T7736] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 149.316677][ T7736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 149.316683][ T7736] RDX: 000000000000006f RSI: 0000000080000180 RDI: 0000000080000100 [ 149.316689][ T7736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.316695][ T7736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.316701][ T7736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.316723][ T7736] [ 149.470937][ T7740] ALSA: seq fatal error: cannot create timer (-16) [ 149.478165][ T7740] usb usb9: usbfs: process 7740 (syz.0.473) did not claim interface 0 before use [ 149.738596][ T7749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'. [ 149.761000][ T7753] xt_CT: No such helper "syz1" [ 149.965686][ T8] usb 6-1: USB disconnect, device number 7 [ 150.529684][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.768086][ T7776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.483'. [ 151.734405][ T7783] overlayfs: failed to resolve './file1': -2 [ 151.737870][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.741820][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.745437][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.749323][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.752704][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.755526][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.758546][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 152.465019][ T7813] SET target dimension over the limit! [ 152.507635][ T39] audit: type=1800 audit(2000000002.719:22): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.494" name="file1" dev="tmpfs" ino=673 res=0 errno=0 [ 152.592190][ T7821] FAULT_INJECTION: forcing a failure. [ 152.592190][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 152.597296][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.1.498 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 152.597318][ T7821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.597327][ T7821] Call Trace: [ 152.597332][ T7821] [ 152.597339][ T7821] dump_stack_lvl+0x16c/0x1f0 [ 152.597372][ T7821] should_fail_ex+0x50a/0x650 [ 152.597392][ T7821] ? fs_reclaim_acquire+0xae/0x150 [ 152.597423][ T7821] should_failslab+0xc2/0x120 [ 152.597443][ T7821] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 152.597462][ T7821] ? security_inode_alloc+0x3b/0x2b0 [ 152.597481][ T7821] security_inode_alloc+0x3b/0x2b0 [ 152.597496][ T7821] inode_init_always_gfp+0xce4/0x1030 [ 152.597515][ T7821] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.597534][ T7821] alloc_inode+0x82/0x230 [ 152.597553][ T7821] iget5_locked+0x33b/0x3d0 [ 152.597572][ T7821] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.597590][ T7821] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.597609][ T7821] ? __pfx_iget5_locked+0x10/0x10 [ 152.597633][ T7821] ? lock_acquire.part.0+0x11b/0x380 [ 152.597655][ T7821] ovl_get_inode+0xceb/0x13c0 [ 152.597680][ T7821] ? __pfx_ovl_get_inode+0x10/0x10 [ 152.597697][ T7821] ? lockref_get+0x15/0x50 [ 152.597718][ T7821] ? do_raw_spin_unlock+0x172/0x230 [ 152.597738][ T7821] ? _raw_spin_unlock+0x28/0x50 [ 152.597761][ T7821] ovl_lookup+0xd4f/0x21f0 [ 152.597788][ T7821] ? __pfx_ovl_lookup+0x10/0x10 [ 152.597807][ T7821] ? generic_permission+0xad/0x7d0 [ 152.597828][ T7821] ? bpf_lsm_inode_permission+0x9/0x10 [ 152.597845][ T7821] ? security_inode_permission+0xbf/0x260 [ 152.597863][ T7821] ? inode_permission+0xdd/0x5f0 [ 152.597888][ T7821] ? __pfx_ovl_permission+0x10/0x10 [ 152.597911][ T7821] ? bpf_lsm_inode_permission+0x9/0x10 [ 152.597927][ T7821] ? security_inode_permission+0xbf/0x260 [ 152.597943][ T7821] ? inode_permission+0xdd/0x5f0 [ 152.597964][ T7821] ? __pfx_ovl_lookup+0x10/0x10 [ 152.597983][ T7821] lookup_open.isra.0+0x4d9/0x1580 [ 152.598011][ T7821] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 152.598036][ T7821] ? workingset_refault+0x890/0x1250 [ 152.598059][ T7821] ? lock_acquire+0x2f/0xb0 [ 152.598075][ T7821] ? path_openat+0x15a4/0x2d80 [ 152.598101][ T7821] ? workingset_refault+0x890/0x1250 [ 152.598122][ T7821] ? __pfx_down_write+0x10/0x10 [ 152.598136][ T7821] ? mnt_get_write_access+0x20c/0x300 [ 152.598160][ T7821] path_openat+0x904/0x2d80 [ 152.598183][ T7821] ? __pfx_path_openat+0x10/0x10 [ 152.598198][ T7821] ? __pfx___lock_acquire+0x10/0x10 [ 152.598213][ T7821] ? lock_acquire.part.0+0x11b/0x380 [ 152.598229][ T7821] ? find_held_lock+0x2d/0x110 [ 152.598253][ T7821] do_filp_open+0x20c/0x470 [ 152.598269][ T7821] ? __pfx_do_filp_open+0x10/0x10 [ 152.598284][ T7821] ? find_held_lock+0x2d/0x110 [ 152.598341][ T7821] ? alloc_fd+0x41f/0x760 [ 152.598365][ T7821] do_sys_openat2+0x17a/0x1e0 [ 152.598385][ T7821] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.598405][ T7821] ? __fget_files+0x206/0x3a0 [ 152.598423][ T7821] __ia32_compat_sys_openat+0x16e/0x210 [ 152.598445][ T7821] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 152.598465][ T7821] ? ksys_write+0x1ba/0x250 [ 152.598486][ T7821] __do_fast_syscall_32+0x73/0x120 [ 152.598502][ T7821] do_fast_syscall_32+0x32/0x80 [ 152.598516][ T7821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.598540][ T7821] RIP: 0023:0xf7f84579 [ 152.598552][ T7821] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 152.598566][ T7821] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 152.598581][ T7821] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 152.598590][ T7821] RDX: 0000000000143042 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.598598][ T7821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.598606][ T7821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 152.598614][ T7821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.598633][ T7821] [ 152.599017][ T7821] overlayfs: failed to get inode (-12) [ 152.829745][ T7830] netem: change failed [ 152.924729][ T7837] syzkaller0: entered promiscuous mode [ 152.926755][ T7837] syzkaller0: entered allmulticast mode [ 153.841462][ T7848] SET target dimension over the limit! [ 155.212240][ T39] audit: type=1400 audit(2000000005.419:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="&&/00#" pid=7863 comm="syz.1.512" [ 155.213442][ T7864] openvswitch: netlink: IP tunnel dst address not specified [ 155.247531][ T7868] hsr_slave_0: left promiscuous mode [ 155.249617][ T7868] hsr_slave_1: left promiscuous mode [ 155.334529][ T7861] __nla_validate_parse: 31 callbacks suppressed [ 155.334544][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.511'. [ 155.389587][ T7871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.429310][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 155.432908][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 155.719511][ T7879] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 155.724613][ T7879] UDF-fs: Scanning with blocksize 2048 failed [ 155.730136][ T7879] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 155.734195][ T7879] UDF-fs: Scanning with blocksize 4096 failed [ 155.738841][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 155.741439][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 155.745519][ T7879] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 156.132563][ T35] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 156.295382][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.299490][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.302795][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 156.306233][ T35] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 156.308761][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.314249][ T7882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.316993][ T35] hub 7-1:1.0: bad descriptor, ignoring hub [ 156.318726][ T35] hub 7-1:1.0: probe with driver hub failed with error -5 [ 156.320923][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 156.322379][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 156.324401][ T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 156.326087][ T35] cdc_wdm 7-1:1.0: Unknown control protocol [ 156.579505][ T7900] input: syz0 as /devices/virtual/input/input11 [ 156.597006][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.597021][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.695479][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.697427][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.699725][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.701588][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.703499][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.705388][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.707254][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.709419][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.711285][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.713160][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.714970][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.717114][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.719522][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.721727][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.723897][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.726334][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.728354][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 156.730648][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 156.864770][ T8] usb 7-1: USB disconnect, device number 11 [ 158.639680][ T7924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.641633][ T7924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.645642][ T7924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.651826][ T7924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.279199][ T39] audit: type=1326 audit(2000000009.489:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.283395][ T7936] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 159.285954][ T39] audit: type=1326 audit(2000000009.489:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.295391][ T39] audit: type=1326 audit(2000000009.499:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.302305][ T39] audit: type=1326 audit(2000000009.499:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.308394][ T39] audit: type=1326 audit(2000000009.499:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.314422][ T39] audit: type=1326 audit(2000000009.499:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.320292][ T39] audit: type=1326 audit(2000000009.499:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 159.442345][ T7945] Invalid logical block size (768) [ 159.447700][ T7945] loop9: detected capacity change from 0 to 1 [ 159.457063][ T7945] Dev loop9: unable to read RDB block 1 [ 159.458888][ T7945] loop9: unable to read partition table [ 159.460381][ T7941] vxcan3: entered allmulticast mode [ 159.460721][ T7945] loop9: partition table beyond EOD, truncated [ 159.465632][ T7945] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 159.572305][ T7954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.540'. [ 159.577147][ T7954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.540'. [ 159.839482][ T39] audit: type=1326 audit(2000000010.049:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.1.541" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84579 code=0x0 [ 159.907740][ T7965] input: syz0 as /devices/virtual/input/input12 [ 160.652594][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.652632][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.656892][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.659390][ T5961] Bluetooth: hci3: command 0x040f tx timeout [ 161.522584][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 161.769159][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 161.879323][ T8019] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 162.590048][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 162.860348][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.067864][ T39] audit: type=1800 audit(2000000013.279:32): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.568" name="file0" dev="9p" ino=36186300 res=0 errno=0 [ 163.295527][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 163.312670][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 163.711133][ T8058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.936672][ T39] audit: type=1326 audit(2000000014.149:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.573" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 164.619259][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 165.060666][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.705956][ T8090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.140296][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 166.143047][ T8099] netlink: 92 bytes leftover after parsing attributes in process `syz.2.584'. [ 166.145606][ T8099] vlan0: entered allmulticast mode [ 166.147045][ T8099] veth0_vlan: entered allmulticast mode [ 166.196774][ T8105] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.628816][ T8124] xt_CT: No such helper "syz1" [ 167.307692][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 167.504202][ T8148] FAULT_INJECTION: forcing a failure. [ 167.504202][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 167.508481][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.3.595 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 167.508513][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.508521][ T8148] Call Trace: [ 167.508525][ T8148] [ 167.508530][ T8148] dump_stack_lvl+0x16c/0x1f0 [ 167.508554][ T8148] should_fail_ex+0x50a/0x650 [ 167.508569][ T8148] ? fs_reclaim_acquire+0xae/0x150 [ 167.508589][ T8148] should_failslab+0xc2/0x120 [ 167.508604][ T8148] __kmalloc_noprof+0xce/0x4f0 [ 167.508617][ T8148] ? rcu_is_watching+0x12/0xc0 [ 167.508633][ T8148] ? io_cache_alloc_new+0x3f/0xd0 [ 167.508648][ T8148] io_cache_alloc_new+0x3f/0xd0 [ 167.508659][ T8148] io_prep_rw+0x3bf/0x10b0 [ 167.508673][ T8148] ? __pfx_io_prep_rw+0x10/0x10 [ 167.508685][ T8148] ? io_read+0x32/0x70 [ 167.508698][ T8148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.508733][ T8148] io_submit_sqes+0x850/0x25f0 [ 167.508755][ T8148] __do_sys_io_uring_enter+0xd60/0x1670 [ 167.508772][ T8148] ? __fget_files+0x206/0x3a0 [ 167.508789][ T8148] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 167.508806][ T8148] ? fput+0x67/0x440 [ 167.508821][ T8148] ? ksys_write+0x1ba/0x250 [ 167.508831][ T8148] ? __pfx_ksys_write+0x10/0x10 [ 167.508845][ T8148] __do_fast_syscall_32+0x73/0x120 [ 167.508857][ T8148] do_fast_syscall_32+0x32/0x80 [ 167.508867][ T8148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.508886][ T8148] RIP: 0023:0xf7f54579 [ 167.508895][ T8148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.508906][ T8148] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 167.508916][ T8148] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000000047f6 [ 167.508923][ T8148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.508928][ T8148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.508934][ T8148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 167.508940][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.508952][ T8148] [ 168.672155][ T8172] tipc: Enabling of bearer <@F:> rejected, media not registered [ 169.154806][ T8180] xt_CT: No such helper "syz1" [ 169.743181][ T8191] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 169.745429][ T8191] netlink: 'syz.2.609': attribute type 10 has an invalid length. [ 169.747677][ T8191] netlink: 236 bytes leftover after parsing attributes in process `syz.2.609'. [ 170.496946][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 170.732930][ T8234] wireguard0: entered promiscuous mode [ 170.735031][ T8234] wireguard0: entered allmulticast mode [ 170.742729][ T8237] tmpfs: Bad value for 'mpol' [ 171.517190][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 172.273267][ T8260] wg1 speed is unknown, defaulting to 1000 [ 172.863150][ T8279] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 173.631097][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'. [ 173.892595][ T1450] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 174.054799][ T1450] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.061919][ T1450] usb 7-1: config 0 interface 0 has no altsetting 0 [ 174.068052][ T1450] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.072147][ T1450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.079155][ T1450] usb 7-1: Product: syz [ 174.080527][ T1450] usb 7-1: Manufacturer: syz [ 174.082558][ T1450] usb 7-1: SerialNumber: syz [ 174.088830][ T1450] usb 7-1: config 0 descriptor?? [ 174.100145][ T1450] usb 7-1: selecting invalid altsetting 0 [ 174.295773][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.298705][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.301811][ T6018] usb 7-1: USB disconnect, device number 12 [ 174.661625][ T8305] bridge0: port 1(ipvlan2) entered blocking state [ 174.663961][ T8305] bridge0: port 1(ipvlan2) entered disabled state [ 174.666214][ T8305] ipvlan2: entered allmulticast mode [ 174.667772][ T8305] bridge0: entered allmulticast mode [ 174.670095][ T8305] ipvlan2: left allmulticast mode [ 174.671584][ T8305] bridge0: left allmulticast mode [ 174.828740][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888075d19400: rx timeout, send abort [ 174.835012][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888075d19000: rx timeout, send abort [ 174.838675][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888075d19400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.847211][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888075d19000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.934141][ T8310] wg1 speed is unknown, defaulting to 1000 [ 175.055387][ T6018] IPVS: starting estimator thread 0... [ 175.143520][ T8316] IPVS: using max 35 ests per chain, 84000 per kthread [ 175.598845][ T8322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.645'. [ 175.995704][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 175.999140][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 176.002759][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 176.235487][ T8333] FAULT_INJECTION: forcing a failure. [ 176.235487][ T8333] name failslab, interval 1, probability 0, space 0, times 0 [ 176.239091][ T8333] CPU: 1 UID: 0 PID: 8333 Comm: syz.0.648 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 176.239106][ T8333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.239114][ T8333] Call Trace: [ 176.239118][ T8333] [ 176.239123][ T8333] dump_stack_lvl+0x16c/0x1f0 [ 176.239148][ T8333] should_fail_ex+0x50a/0x650 [ 176.239164][ T8333] ? fs_reclaim_acquire+0xae/0x150 [ 176.239183][ T8333] should_failslab+0xc2/0x120 [ 176.239199][ T8333] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 176.239212][ T8333] ? __alloc_skb+0x2b3/0x380 [ 176.239227][ T8333] __alloc_skb+0x2b3/0x380 [ 176.239237][ T8333] ? __pfx___alloc_skb+0x10/0x10 [ 176.239247][ T8333] ? lock_acquire+0x2f/0xb0 [ 176.239264][ T8333] netlink_alloc_large_skb+0x69/0x130 [ 176.239283][ T8333] netlink_sendmsg+0x689/0xd70 [ 176.239300][ T8333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.239320][ T8333] ____sys_sendmsg+0x9ae/0xb40 [ 176.239336][ T8333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.239351][ T8333] ? get_compat_msghdr+0x11b/0x170 [ 176.239371][ T8333] ___sys_sendmsg+0x135/0x1e0 [ 176.239382][ T8333] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.239398][ T8333] ? __pfx_lock_release+0x10/0x10 [ 176.239410][ T8333] ? trace_lock_acquire+0x14e/0x1f0 [ 176.239423][ T8333] ? __fget_files+0x206/0x3a0 [ 176.239439][ T8333] __sys_sendmsg+0x16e/0x220 [ 176.239450][ T8333] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.239468][ T8333] __do_fast_syscall_32+0x73/0x120 [ 176.239480][ T8333] do_fast_syscall_32+0x32/0x80 [ 176.239491][ T8333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.239510][ T8333] RIP: 0023:0xf747e579 [ 176.239518][ T8333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.239529][ T8333] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 176.239539][ T8333] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800037c0 [ 176.239546][ T8333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.239552][ T8333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.239558][ T8333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.239564][ T8333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.239575][ T8333] [ 176.407690][ T39] audit: type=1326 audit(2000000026.619:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7fc00000 [ 176.422664][ T39] audit: type=1326 audit(2000000026.619:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84579 code=0x7fc00000 [ 177.451176][ T8359] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 177.454496][ T8359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.099305][ T8369] netlink: 452 bytes leftover after parsing attributes in process `syz.2.659'. [ 178.119780][ T8371] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 178.537857][ T8383] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.877743][ T8406] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.032797][ T1252] Bluetooth: hci5: Frame reassembly failed (-84) [ 180.034965][ T1140] Bluetooth: hci5: Frame reassembly failed (-84) [ 180.043749][ T8409] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 180.332692][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 180.332728][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 181.364709][ T8449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.375760][ T8451] netem: change failed [ 181.383636][ T8452] overlay: Unknown parameter 'smackfsroot' [ 181.388330][ T8452] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 181.426544][ T8449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.565491][ T8449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.634335][ T8449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.705395][ T8449] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.710502][ T8449] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.719446][ T8449] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.726387][ T8449] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.821012][ T8464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.092700][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 182.092726][ T5961] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.766266][ T8480] bridge0: port 1(ipvlan2) entered blocking state [ 182.769695][ T8480] bridge0: port 1(ipvlan2) entered disabled state [ 182.771623][ T8480] ipvlan2: entered allmulticast mode [ 182.772787][ T8484] ntfs3(sr0): Primary boot signature is not NTFS. [ 182.775359][ T8480] bridge0: entered allmulticast mode [ 182.778211][ T8484] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 182.780432][ T8480] ipvlan2: left allmulticast mode [ 182.782701][ T8480] bridge0: left allmulticast mode [ 182.874502][ T8489] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 183.033194][ T8502] netlink: 120 bytes leftover after parsing attributes in process `syz.3.686'. [ 183.033266][ T8501] netlink: 120 bytes leftover after parsing attributes in process `syz.3.686'. [ 183.081332][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.084327][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.087154][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.089801][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.091926][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.094388][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.096420][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.098800][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.101084][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.103523][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.106271][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.109158][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.111709][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.114130][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.116215][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.118374][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.120425][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.122647][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.124759][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.126753][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.129002][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.131038][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.133284][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.135478][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.137552][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.139625][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.141650][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.143906][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.145991][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.148119][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.150191][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.152285][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.154421][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.156491][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.158664][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.160788][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.163076][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.165064][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.167119][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.169258][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.171313][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.173540][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.175598][ T6015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.183705][ T6015] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 183.775108][ T8518] FAULT_INJECTION: forcing a failure. [ 183.775108][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 183.779899][ T8518] CPU: 2 UID: 0 PID: 8518 Comm: syz.0.690 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 183.779920][ T8518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.779930][ T8518] Call Trace: [ 183.779937][ T8518] [ 183.779944][ T8518] dump_stack_lvl+0x16c/0x1f0 [ 183.779976][ T8518] should_fail_ex+0x50a/0x650 [ 183.779996][ T8518] ? fs_reclaim_acquire+0xae/0x150 [ 183.780015][ T8518] should_failslab+0xc2/0x120 [ 183.780030][ T8518] __kmalloc_node_noprof+0xd1/0x520 [ 183.780045][ T8518] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 183.780058][ T8518] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 183.780074][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.780090][ T8518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.780102][ T8518] ? __pfx_aa_get_newest_label+0x10/0x10 [ 183.780120][ T8518] ? rcu_is_watching+0x12/0xc0 [ 183.780139][ T8518] ? trace_cap_capable+0x1a2/0x210 [ 183.780163][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.780179][ T8518] __vmalloc_noprof+0x6d/0x90 [ 183.780197][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.780214][ T8518] bpf_prog_alloc_no_stats+0x54/0x630 [ 183.780229][ T8518] ? security_capable+0x7e/0x260 [ 183.780255][ T8518] bpf_prog_alloc+0x3b/0x230 [ 183.780270][ T8518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.780295][ T8518] bpf_prog_load+0x160a/0x2480 [ 183.780321][ T8518] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.780340][ T8518] ? find_held_lock+0x2d/0x110 [ 183.780369][ T8518] ? __might_fault+0x13b/0x190 [ 183.780401][ T8518] ? __might_fault+0xe3/0x190 [ 183.780428][ T8518] __sys_bpf+0x5677/0x57a0 [ 183.780450][ T8518] ? __pfx_lock_release+0x10/0x10 [ 183.780473][ T8518] ? __pfx___sys_bpf+0x10/0x10 [ 183.780493][ T8518] ? vfs_write+0x306/0x1150 [ 183.780516][ T8518] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 183.780581][ T8518] ? fput+0x67/0x440 [ 183.780603][ T8518] ? ksys_write+0x1ba/0x250 [ 183.780619][ T8518] ? __pfx_ksys_write+0x10/0x10 [ 183.780638][ T8518] __ia32_sys_bpf+0x76/0xe0 [ 183.780661][ T8518] __do_fast_syscall_32+0x73/0x120 [ 183.780681][ T8518] do_fast_syscall_32+0x32/0x80 [ 183.780697][ T8518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.780725][ T8518] RIP: 0023:0xf747e579 [ 183.780739][ T8518] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.780756][ T8518] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 183.780772][ T8518] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 183.780783][ T8518] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.780792][ T8518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.780801][ T8518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.780811][ T8518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.780832][ T8518] [ 183.781081][ T8518] syz.0.690: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.877530][ T8518] CPU: 2 UID: 0 PID: 8518 Comm: syz.0.690 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 183.877549][ T8518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.877557][ T8518] Call Trace: [ 183.877563][ T8518] [ 183.877568][ T8518] dump_stack_lvl+0x16c/0x1f0 [ 183.877590][ T8518] warn_alloc+0x24d/0x3a0 [ 183.877606][ T8518] ? __pfx_warn_alloc+0x10/0x10 [ 183.877617][ T8518] ? dump_stack_lvl+0x185/0x1f0 [ 183.877633][ T8518] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.877653][ T8518] ? rcu_is_watching+0x12/0xc0 [ 183.877670][ T8518] ? trace_kmalloc+0x2d/0xd0 [ 183.877685][ T8518] ? __kmalloc_node_noprof+0x23d/0x520 [ 183.877701][ T8518] __vmalloc_node_range_noprof+0x1102/0x1530 [ 183.877717][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.877732][ T8518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.877744][ T8518] ? __pfx_aa_get_newest_label+0x10/0x10 [ 183.877763][ T8518] ? rcu_is_watching+0x12/0xc0 [ 183.877778][ T8518] ? trace_cap_capable+0x1a2/0x210 [ 183.877796][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.877807][ T8518] __vmalloc_noprof+0x6d/0x90 [ 183.877821][ T8518] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 183.877832][ T8518] bpf_prog_alloc_no_stats+0x54/0x630 [ 183.877843][ T8518] ? security_capable+0x7e/0x260 [ 183.877860][ T8518] bpf_prog_alloc+0x3b/0x230 [ 183.877870][ T8518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.877886][ T8518] bpf_prog_load+0x160a/0x2480 [ 183.877902][ T8518] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.877915][ T8518] ? find_held_lock+0x2d/0x110 [ 183.877933][ T8518] ? __might_fault+0x13b/0x190 [ 183.877952][ T8518] ? __might_fault+0xe3/0x190 [ 183.877969][ T8518] __sys_bpf+0x5677/0x57a0 [ 183.877982][ T8518] ? __pfx_lock_release+0x10/0x10 [ 183.877996][ T8518] ? __pfx___sys_bpf+0x10/0x10 [ 183.878009][ T8518] ? vfs_write+0x306/0x1150 [ 183.878023][ T8518] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 183.878047][ T8518] ? fput+0x67/0x440 [ 183.878060][ T8518] ? ksys_write+0x1ba/0x250 [ 183.878070][ T8518] ? __pfx_ksys_write+0x10/0x10 [ 183.878083][ T8518] __ia32_sys_bpf+0x76/0xe0 [ 183.878098][ T8518] __do_fast_syscall_32+0x73/0x120 [ 183.878110][ T8518] do_fast_syscall_32+0x32/0x80 [ 183.878120][ T8518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.878138][ T8518] RIP: 0023:0xf747e579 [ 183.878148][ T8518] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.878158][ T8518] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 183.878167][ T8518] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 183.878174][ T8518] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.878179][ T8518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.878185][ T8518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.878191][ T8518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.878203][ T8518] [ 183.878207][ T8518] Mem-Info: [ 183.968964][ T8518] active_anon:1201 inactive_anon:27404 isolated_anon:0 [ 183.968964][ T8518] active_file:3310 inactive_file:17096 isolated_file:0 [ 183.968964][ T8518] unevictable:1787 dirty:41 writeback:0 [ 183.968964][ T8518] slab_reclaimable:9019 slab_unreclaimable:55873 [ 183.968964][ T8518] mapped:24523 shmem:25221 pagetables:929 [ 183.968964][ T8518] sec_pagetables:298 bounce:0 [ 183.968964][ T8518] kernel_misc_reclaimable:0 [ 183.968964][ T8518] free:57890 free_pcp:4568 free_cma:0 [ 183.985972][ T8518] Node 0 active_anon:2244kB inactive_anon:0kB active_file:0kB inactive_file:14000kB unevictable:3556kB isolated(anon):0kB isolated(file):0kB mapped:5864kB dirty:0kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9328kB pagetables:688kB sec_pagetables:1132kB all_unreclaimable? yes [ 184.002690][ T8518] Node 1 active_anon:2560kB inactive_anon:109616kB active_file:13240kB inactive_file:54384kB unevictable:3592kB isolated(anon):0kB isolated(file):0kB mapped:92128kB dirty:164kB writeback:0kB shmem:96748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2992kB pagetables:2928kB sec_pagetables:60kB all_unreclaimable? no [ 184.015208][ T8518] Node 0 DMA free:2636kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 184.024786][ T8518] lowmem_reserve[]: 0 297 0 0 0 [ 184.026208][ T8518] Node 0 DMA32 free:28612kB boost:12288kB min:25960kB low:29376kB high:32792kB reserved_highatomic:4096KB active_anon:2244kB inactive_anon:0kB active_file:0kB inactive_file:13996kB unevictable:3556kB writepending:0kB present:1032196kB managed:305040kB mlocked:20kB bounce:0kB free_pcp:2608kB local_pcp:2128kB free_cma:0kB [ 184.026309][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 184.034533][ T8518] lowmem_reserve[]: 0 0 0 0 0 [ 184.034559][ T8518] Node 1 DMA32 free:200516kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:10240KB active_anon:2376kB inactive_anon:109616kB active_file:13240kB inactive_file:54384kB unevictable:3592kB writepending:164kB present:1048432kB managed:948252kB mlocked:56kB bounce:0kB free_pcp:15096kB local_pcp:1072kB free_cma:0kB [ 184.048646][ T8518] lowmem_reserve[]: 0 0 0 0 0 [ 184.050014][ T8518] Node 0 DMA: 87*4kB (UM) 36*8kB (UM) 11*16kB (UM) 17*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2636kB [ 184.054796][ T8518] Node 0 DMA32: 739*4kB (UMEH) 271*8kB (UMEH) 58*16kB (UMEH) 237*32kB (UMEH) 100*64kB (UMEH) 15*128kB (UE) 10*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 28612kB [ 184.063584][ T8518] Node 1 DMA32: 70*4kB (UH) 272*8kB (UMEH) 781*16kB (UMEH) 251*32kB (UMEH) 292*64kB (UMEH) 120*128kB (UMEH) 66*256kB (UMH) 41*512kB (UMH) 37*1024kB (UMH) 13*2048kB (UMH) 10*4096kB (UM) = 200392kB [ 184.068905][ T8518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.071394][ T8518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.074047][ T8518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.076675][ T8518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.079274][ T8518] 45647 total pagecache pages [ 184.080593][ T8518] 0 pages in swap cache [ 184.081677][ T8518] Free swap = 124540kB [ 184.083019][ T8518] Total swap = 124996kB [ 184.084192][ T8518] 524155 pages RAM [ 184.085272][ T8518] 0 pages HighMem/MovableOnly [ 184.086600][ T8518] 206992 pages reserved [ 184.087824][ T8518] 0 pages cma reserved [ 184.203341][ T8529] ip6t_srh: unknown srh invflags 6BE9 [ 184.627908][ T8541] xt_CT: No such helper "syz1" [ 185.344385][ T8571] geneve2: entered promiscuous mode [ 185.345952][ T8571] geneve2: entered allmulticast mode [ 185.621465][ T8588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.691289][ T8592] FAULT_INJECTION: forcing a failure. [ 185.691289][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 185.695987][ T8592] CPU: 2 UID: 0 PID: 8592 Comm: syz.0.714 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 185.696005][ T8592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.696012][ T8592] Call Trace: [ 185.696016][ T8592] [ 185.696020][ T8592] dump_stack_lvl+0x16c/0x1f0 [ 185.696045][ T8592] should_fail_ex+0x50a/0x650 [ 185.696075][ T8592] ? fs_reclaim_acquire+0xae/0x150 [ 185.696097][ T8592] should_failslab+0xc2/0x120 [ 185.696112][ T8592] __kmalloc_noprof+0xce/0x4f0 [ 185.696126][ T8592] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 185.696151][ T8592] ? tomoyo_realpath_from_path+0xbf/0x710 [ 185.696185][ T8592] ? rcu_is_watching+0x12/0xc0 [ 185.696203][ T8592] tomoyo_realpath_from_path+0xbf/0x710 [ 185.696222][ T8592] tomoyo_check_open_permission+0x2ad/0x3c0 [ 185.696235][ T8592] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 185.696261][ T8592] ? __pfx_hook_file_open+0x10/0x10 [ 185.696273][ T8592] ? lock_acquire+0x2f/0xb0 [ 185.696286][ T8592] ? mnt_get_write_access+0x6a/0x300 [ 185.696303][ T8592] tomoyo_file_open+0x6b/0x90 [ 185.696320][ T8592] security_file_open+0x84/0x1e0 [ 185.696335][ T8592] do_dentry_open+0x57c/0x1c40 [ 185.696352][ T8592] vfs_open+0x82/0x3f0 [ 185.696365][ T8592] ? may_open+0x1f2/0x400 [ 185.696407][ T8592] path_openat+0x1e88/0x2d80 [ 185.696425][ T8592] ? __pfx_path_openat+0x10/0x10 [ 185.696437][ T8592] ? __pfx___lock_acquire+0x10/0x10 [ 185.696450][ T8592] ? lock_acquire.part.0+0x11b/0x380 [ 185.696462][ T8592] ? find_held_lock+0x2d/0x110 [ 185.696481][ T8592] do_filp_open+0x20c/0x470 [ 185.696492][ T8592] ? __pfx_do_filp_open+0x10/0x10 [ 185.696503][ T8592] ? find_held_lock+0x2d/0x110 [ 185.696528][ T8592] ? alloc_fd+0x41f/0x760 [ 185.696575][ T8592] do_sys_openat2+0x17a/0x1e0 [ 185.696590][ T8592] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.696606][ T8592] ? __fget_files+0x206/0x3a0 [ 185.696620][ T8592] __ia32_compat_sys_openat+0x16e/0x210 [ 185.696636][ T8592] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 185.696652][ T8592] ? ksys_write+0x1ba/0x250 [ 185.696667][ T8592] __do_fast_syscall_32+0x73/0x120 [ 185.696679][ T8592] do_fast_syscall_32+0x32/0x80 [ 185.696689][ T8592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.696708][ T8592] RIP: 0023:0xf747e579 [ 185.696717][ T8592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.696728][ T8592] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 185.696738][ T8592] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 185.696744][ T8592] RDX: 0000000000143042 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.696750][ T8592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.696756][ T8592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 185.696761][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.696774][ T8592] [ 185.698460][ T8592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.770542][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.720'. [ 187.918841][ T8639] FAULT_INJECTION: forcing a failure. [ 187.918841][ T8639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.923865][ T8639] CPU: 2 UID: 0 PID: 8639 Comm: syz.2.730 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 187.923880][ T8639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.923887][ T8639] Call Trace: [ 187.923892][ T8639] [ 187.923896][ T8639] dump_stack_lvl+0x16c/0x1f0 [ 187.923921][ T8639] should_fail_ex+0x50a/0x650 [ 187.923936][ T8639] ? __pfx___might_resched+0x10/0x10 [ 187.923953][ T8639] should_fail_alloc_page+0xe7/0x130 [ 187.923969][ T8639] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 187.923988][ T8639] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 187.924007][ T8639] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 187.924022][ T8639] ? unwind_get_return_address+0x59/0xa0 [ 187.924040][ T8639] ? arch_stack_walk+0xa7/0x100 [ 187.924060][ T8639] ? hlock_class+0x4e/0x130 [ 187.924076][ T8639] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.924095][ T8639] ? __pfx___lock_acquire+0x10/0x10 [ 187.924107][ T8639] ? kasan_save_stack+0x42/0x60 [ 187.924118][ T8639] ? kasan_save_stack+0x33/0x60 [ 187.924128][ T8639] ? kasan_save_track+0x14/0x30 [ 187.924139][ T8639] ? __kasan_slab_alloc+0x89/0x90 [ 187.924151][ T8639] ? kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 187.924163][ T8639] ? alloc_vmap_area+0x636/0x2a60 [ 187.924179][ T8639] ? __get_vm_area_node+0x19e/0x2f0 [ 187.924188][ T8639] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 187.924199][ T8639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.924215][ T8639] ? policy_nodemask+0xea/0x4e0 [ 187.924230][ T8639] alloc_pages_mpol+0x1fc/0x540 [ 187.924244][ T8639] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.924257][ T8639] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 187.924270][ T8639] ? do_raw_spin_lock+0x12d/0x2c0 [ 187.924286][ T8639] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.924303][ T8639] alloc_pages_noprof+0x131/0x390 [ 187.924316][ T8639] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.924327][ T8639] get_free_pages_noprof+0xc/0x40 [ 187.924342][ T8639] kasan_populate_vmalloc_pte+0x2d/0x160 [ 187.924353][ T8639] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.924365][ T8639] __apply_to_page_range+0x5fd/0xd30 [ 187.924378][ T8639] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.924391][ T8639] ? __pfx___apply_to_page_range+0x10/0x10 [ 187.924403][ T8639] ? insert_vmap_area+0x2ef/0x4d0 [ 187.924421][ T8639] alloc_vmap_area+0x93e/0x2a60 [ 187.924442][ T8639] ? __pfx_alloc_vmap_area+0x10/0x10 [ 187.924462][ T8639] __get_vm_area_node+0x19e/0x2f0 [ 187.924474][ T8639] __vmalloc_node_range_noprof+0x26a/0x1530 [ 187.924485][ T8639] ? xdp_umem_create+0x652/0x1270 [ 187.924500][ T8639] ? rcu_is_watching+0x12/0xc0 [ 187.924538][ T8639] ? kfree+0x260/0x4d0 [ 187.924554][ T8639] ? xdp_umem_create+0x652/0x1270 [ 187.924574][ T8639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.924587][ T8639] ? rcu_is_watching+0x12/0xc0 [ 187.924602][ T8639] ? trace_kmalloc+0x2d/0xd0 [ 187.924618][ T8639] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 187.924630][ T8639] ? apparmor_capable+0x114/0x1d0 [ 187.924649][ T8639] ? xdp_umem_create+0x652/0x1270 [ 187.924662][ T8639] __kvmalloc_node_noprof+0x14f/0x1a0 [ 187.924674][ T8639] ? xdp_umem_create+0x652/0x1270 [ 187.924687][ T8639] xdp_umem_create+0x652/0x1270 [ 187.924704][ T8639] xsk_setsockopt+0x7e7/0xac0 [ 187.924716][ T8639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.924728][ T8639] ? ksys_write+0x191/0x250 [ 187.924742][ T8639] ? find_held_lock+0x2d/0x110 [ 187.924761][ T8639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.924777][ T8639] do_sock_setsockopt+0x222/0x480 [ 187.924793][ T8639] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 187.924807][ T8639] ? lock_acquire+0x2f/0xb0 [ 187.924825][ T8639] __sys_setsockopt+0x1a0/0x230 [ 187.924838][ T8639] __ia32_sys_setsockopt+0xbc/0x160 [ 187.924848][ T8639] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.924865][ T8639] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 187.924882][ T8639] __do_fast_syscall_32+0x73/0x120 [ 187.924894][ T8639] do_fast_syscall_32+0x32/0x80 [ 187.924904][ T8639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.924922][ T8639] RIP: 0023:0xf745e579 [ 187.924931][ T8639] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.924941][ T8639] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 187.924952][ T8639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 187.924959][ T8639] RDX: 0000000000000004 RSI: 0000000080000100 RDI: 0000000000000020 [ 187.924965][ T8639] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.924970][ T8639] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.924976][ T8639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.924988][ T8639] [ 188.668680][ T8648] FAULT_INJECTION: forcing a failure. [ 188.668680][ T8648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.673561][ T8648] CPU: 3 UID: 0 PID: 8648 Comm: syz.0.733 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 188.673576][ T8648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.673583][ T8648] Call Trace: [ 188.673586][ T8648] [ 188.673591][ T8648] dump_stack_lvl+0x16c/0x1f0 [ 188.673617][ T8648] should_fail_ex+0x50a/0x650 [ 188.673642][ T8648] _copy_from_user+0x2e/0xd0 [ 188.673666][ T8648] get_compat_msghdr+0xa8/0x170 [ 188.673689][ T8648] ? __pfx_get_compat_msghdr+0x10/0x10 [ 188.673718][ T8648] ___sys_sendmsg+0x1b0/0x1e0 [ 188.673738][ T8648] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.673763][ T8648] ? __pfx_lock_release+0x10/0x10 [ 188.673782][ T8648] ? trace_lock_acquire+0x14e/0x1f0 [ 188.673804][ T8648] ? __fget_files+0x206/0x3a0 [ 188.673827][ T8648] __sys_sendmsg+0x16e/0x220 [ 188.673845][ T8648] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.673875][ T8648] __do_fast_syscall_32+0x73/0x120 [ 188.673892][ T8648] do_fast_syscall_32+0x32/0x80 [ 188.673906][ T8648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.673931][ T8648] RIP: 0023:0xf747e579 [ 188.673944][ T8648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.673959][ T8648] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 188.673974][ T8648] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0 [ 188.673984][ T8648] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.673993][ T8648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.674001][ T8648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.674010][ T8648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.674029][ T8648] [ 189.979972][ T8679] 9p: Unknown Cache mode or invalid value fscach [ 191.351974][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 191.948842][ T8695] xt_CT: No such helper "syz1" [ 192.354366][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 192.840918][ T39] audit: type=1326 audit(2000004138.046:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 192.841467][ T8701] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.893574][ T39] audit: type=1326 audit(2000004138.046:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 192.923110][ T39] audit: type=1326 audit(2000004138.046:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 192.983280][ T39] audit: type=1326 audit(2000004138.046:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 192.989414][ T39] audit: type=1326 audit(2000004138.046:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 193.160092][ T39] audit: type=1326 audit(2000004138.366:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 193.167394][ T39] audit: type=1326 audit(2000004138.366:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 193.562926][ T8720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.753'. [ 193.935375][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.937871][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.571230][ T8746] xt_CT: No such helper "syz1" [ 194.674466][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 194.938957][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 194.943205][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 194.946535][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 194.949843][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 195.660284][ T8780] netlink: 'syz.0.772': attribute type 4 has an invalid length. [ 195.685454][ T8786] overlay: Unknown parameter 'fsname' [ 196.103148][ T39] audit: type=1326 audit(2000004143.311:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.3.777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 196.109569][ T39] audit: type=1326 audit(2000004143.311:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.3.777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 196.116430][ T39] audit: type=1326 audit(2000004143.311:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.3.777" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 196.808348][ T8816] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 196.811250][ T8816] overlayfs: missing 'lowerdir' [ 197.564810][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'. [ 197.567528][ T8834] netlink: 92 bytes leftover after parsing attributes in process `syz.3.790'. [ 197.569950][ T8834] vlan0: entered allmulticast mode [ 197.571350][ T8834] veth0_vlan: entered allmulticast mode [ 197.574515][ T8836] IPVS: set_ctl: invalid protocol: 47 172.30.32.2:0 [ 197.973974][ T5994] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 198.226049][ T8856] wg1 speed is unknown, defaulting to 1000 [ 198.335115][ T5994] usb 8-1: config 1 interface 0 altsetting 24 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 198.339044][ T5994] usb 8-1: config 1 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.342707][ T5994] usb 8-1: config 1 interface 0 has no altsetting 0 [ 198.347028][ T5994] usb 8-1: language id specifier not provided by device, defaulting to English [ 198.351820][ T5994] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.355432][ T5994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.358089][ T5994] usb 8-1: Product: syz [ 198.359257][ T5994] usb 8-1: Manufacturer: 澇ࢾ悱뀐얆㡉嬮嗲ਅ캿ㅘ㡥㱄뚲鲜Ꮤ╬ﰗ㟦魶ଔ൪쏤뮾佤ℱڭ흇閭뭦릌詧춄ࢢᘡ郞䖨⯻頺䲟燹 [ 198.364530][ T5994] usb 8-1: SerialNumber: syz [ 198.369531][ T8843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.455382][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.603172][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 198.607328][ T63] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 198.609882][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.615456][ T63] usb 5-1: Product: syz [ 198.617156][ T63] usb 5-1: Manufacturer: syz [ 198.618637][ T63] usb 5-1: SerialNumber: syz [ 198.621031][ T63] usb 5-1: config 0 descriptor?? [ 198.663776][ T5994] usb 8-1: USB disconnect, device number 9 [ 198.878573][ T63] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 198.880631][ T63] gspca_sunplus: reg_w_riv err -71 [ 198.882104][ T63] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 198.888945][ T63] usb 5-1: USB disconnect, device number 9 [ 199.088770][ T8876] afs: Unknown parameter 'd' [ 199.292584][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 200.056665][ T8899] fuse: Bad value for 'group_id' [ 200.058241][ T8899] fuse: Bad value for 'group_id' [ 200.071659][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.080949][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.084053][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.087017][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.090119][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.093240][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.096312][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.101115][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 200.813510][ T8913] netlink: 'syz.0.815': attribute type 11 has an invalid length. [ 201.194420][ T8914] xt_CT: No such helper "syz1" [ 202.266656][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 202.269437][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 202.576422][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 202.578614][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 202.685286][ T8938] ceph: No mds server is up or the cluster is laggy [ 202.848679][ T8963] FAULT_INJECTION: forcing a failure. [ 202.848679][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 202.852226][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.0.829 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 202.852241][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.852248][ T8963] Call Trace: [ 202.852252][ T8963] [ 202.852257][ T8963] dump_stack_lvl+0x16c/0x1f0 [ 202.852291][ T8963] should_fail_ex+0x50a/0x650 [ 202.852308][ T8963] ? fs_reclaim_acquire+0xae/0x150 [ 202.852328][ T8963] should_failslab+0xc2/0x120 [ 202.852342][ T8963] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 202.852355][ T8963] ? mark_lock+0xb5/0xc60 [ 202.852367][ T8963] ? __get_vm_area_node+0x101/0x2f0 [ 202.852394][ T8963] __get_vm_area_node+0x101/0x2f0 [ 202.852408][ T8963] __vmalloc_node_range_noprof+0x26a/0x1530 [ 202.852420][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 202.852442][ T8963] ? mark_lock+0xb5/0xc60 [ 202.852458][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 202.852468][ T8963] ? hlock_class+0x4e/0x130 [ 202.852485][ T8963] ? mark_lock+0xb5/0xc60 [ 202.852496][ T8963] ? mark_lock+0xb5/0xc60 [ 202.852509][ T8963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.852521][ T8963] ? __pfx_aa_get_newest_label+0x10/0x10 [ 202.852540][ T8963] ? rcu_is_watching+0x12/0xc0 [ 202.852557][ T8963] ? trace_cap_capable+0x1a2/0x210 [ 202.852576][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 202.852587][ T8963] __vmalloc_noprof+0x6d/0x90 [ 202.852604][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 202.852615][ T8963] bpf_prog_alloc_no_stats+0x54/0x630 [ 202.852626][ T8963] ? security_capable+0x7e/0x260 [ 202.852642][ T8963] bpf_prog_alloc+0x3b/0x230 [ 202.852652][ T8963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.852667][ T8963] bpf_prog_load+0x1a00/0x2480 [ 202.852684][ T8963] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.852697][ T8963] ? find_held_lock+0x2d/0x110 [ 202.852715][ T8963] ? __might_fault+0x13b/0x190 [ 202.852733][ T8963] ? __might_fault+0xe3/0x190 [ 202.852750][ T8963] __sys_bpf+0x5677/0x57a0 [ 202.852763][ T8963] ? finish_task_switch.isra.0+0x217/0xcc0 [ 202.852780][ T8963] ? __pfx___sys_bpf+0x10/0x10 [ 202.852793][ T8963] ? __schedule+0xf4b/0x5890 [ 202.852818][ T8963] ? fput+0x67/0x440 [ 202.852833][ T8963] ? ksys_write+0x1ba/0x250 [ 202.852847][ T8963] __ia32_sys_bpf+0x76/0xe0 [ 202.852862][ T8963] __do_fast_syscall_32+0x73/0x120 [ 202.852874][ T8963] do_fast_syscall_32+0x32/0x80 [ 202.852884][ T8963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.852903][ T8963] RIP: 0023:0xf747e579 [ 202.852911][ T8963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.852922][ T8963] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 202.852933][ T8963] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 202.852940][ T8963] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.852945][ T8963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.852951][ T8963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.852957][ T8963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.852969][ T8963] [ 203.011326][ T8963] syz.0.829: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.018586][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.0.829 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 203.018616][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.018624][ T8963] Call Trace: [ 203.018628][ T8963] [ 203.018633][ T8963] dump_stack_lvl+0x16c/0x1f0 [ 203.018657][ T8963] warn_alloc+0x24d/0x3a0 [ 203.018673][ T8963] ? __pfx_warn_alloc+0x10/0x10 [ 203.018685][ T8963] ? rcu_is_watching+0x12/0xc0 [ 203.018703][ T8963] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 203.018717][ T8963] ? __kasan_kmalloc+0x8a/0xb0 [ 203.018730][ T8963] ? __get_vm_area_node+0x1dc/0x2f0 [ 203.018743][ T8963] __vmalloc_node_range_noprof+0xd24/0x1530 [ 203.018756][ T8963] ? mark_lock+0xb5/0xc60 [ 203.018770][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 203.018783][ T8963] ? hlock_class+0x4e/0x130 [ 203.018800][ T8963] ? mark_lock+0xb5/0xc60 [ 203.018811][ T8963] ? mark_lock+0xb5/0xc60 [ 203.018824][ T8963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.018836][ T8963] ? __pfx_aa_get_newest_label+0x10/0x10 [ 203.018854][ T8963] ? rcu_is_watching+0x12/0xc0 [ 203.018870][ T8963] ? trace_cap_capable+0x1a2/0x210 [ 203.018887][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 203.018899][ T8963] __vmalloc_noprof+0x6d/0x90 [ 203.018910][ T8963] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 203.018921][ T8963] bpf_prog_alloc_no_stats+0x54/0x630 [ 203.018932][ T8963] ? security_capable+0x7e/0x260 [ 203.018949][ T8963] bpf_prog_alloc+0x3b/0x230 [ 203.018959][ T8963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.018975][ T8963] bpf_prog_load+0x1a00/0x2480 [ 203.018991][ T8963] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.019004][ T8963] ? find_held_lock+0x2d/0x110 [ 203.019021][ T8963] ? __might_fault+0x13b/0x190 [ 203.019041][ T8963] ? __might_fault+0xe3/0x190 [ 203.019058][ T8963] __sys_bpf+0x5677/0x57a0 [ 203.019071][ T8963] ? finish_task_switch.isra.0+0x217/0xcc0 [ 203.019086][ T8963] ? __pfx___sys_bpf+0x10/0x10 [ 203.019099][ T8963] ? __schedule+0xf4b/0x5890 [ 203.019124][ T8963] ? fput+0x67/0x440 [ 203.019138][ T8963] ? ksys_write+0x1ba/0x250 [ 203.019152][ T8963] __ia32_sys_bpf+0x76/0xe0 [ 203.019167][ T8963] __do_fast_syscall_32+0x73/0x120 [ 203.019178][ T8963] do_fast_syscall_32+0x32/0x80 [ 203.019188][ T8963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.019208][ T8963] RIP: 0023:0xf747e579 [ 203.019216][ T8963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.019227][ T8963] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 203.019237][ T8963] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 203.019244][ T8963] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.019249][ T8963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.019255][ T8963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 203.019261][ T8963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.019273][ T8963] [ 203.019307][ T8963] Mem-Info: [ 203.102657][ T833] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 203.104325][ T8963] active_anon:3375 inactive_anon:27376 isolated_anon:0 [ 203.104325][ T8963] active_file:4302 inactive_file:17124 isolated_file:0 [ 203.104325][ T8963] unevictable:1768 dirty:261 writeback:0 [ 203.104325][ T8963] slab_reclaimable:8925 slab_unreclaimable:65257 [ 203.104325][ T8963] mapped:26747 shmem:27388 pagetables:941 [ 203.104325][ T8963] sec_pagetables:298 bounce:0 [ 203.104325][ T8963] kernel_misc_reclaimable:0 [ 203.104325][ T8963] free:46656 free_pcp:3082 free_cma:0 [ 203.123551][ T8963] Node 0 active_anon:2760kB inactive_anon:0kB active_file:0kB inactive_file:14048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6412kB dirty:0kB writeback:0kB shmem:4500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9328kB pagetables:764kB sec_pagetables:1132kB all_unreclaimable? yes [ 203.132398][ T8963] Node 1 active_anon:13340kB inactive_anon:109504kB active_file:17208kB inactive_file:54448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103076kB dirty:1044kB writeback:0kB shmem:107552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3128kB pagetables:3000kB sec_pagetables:60kB all_unreclaimable? no [ 203.149880][ T8966] FAULT_INJECTION: forcing a failure. [ 203.149880][ T8966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.153116][ T8963] Node 0 DMA free:2636kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 203.156690][ T8966] CPU: 3 UID: 0 PID: 8966 Comm: syz.3.830 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 203.156707][ T8966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.156714][ T8966] Call Trace: [ 203.156718][ T8966] [ 203.156722][ T8966] dump_stack_lvl+0x16c/0x1f0 [ 203.156748][ T8966] should_fail_ex+0x50a/0x650 [ 203.156766][ T8966] _copy_to_user+0x32/0xd0 [ 203.156783][ T8966] simple_read_from_buffer+0xd0/0x160 [ 203.156803][ T8966] proc_fail_nth_read+0x198/0x270 [ 203.156820][ T8966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.156836][ T8966] ? rw_verify_area+0xcf/0x680 [ 203.156853][ T8966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.156868][ T8966] vfs_read+0x1df/0xbf0 [ 203.156878][ T8966] ? __fget_files+0x1fc/0x3a0 [ 203.156890][ T8966] ? __pfx___mutex_lock+0x10/0x10 [ 203.156908][ T8966] ? __pfx_vfs_read+0x10/0x10 [ 203.156922][ T8966] ? __fget_files+0x206/0x3a0 [ 203.156937][ T8966] ksys_read+0x12b/0x250 [ 203.156947][ T8966] ? __pfx_ksys_read+0x10/0x10 [ 203.156956][ T8966] ? syscall_user_dispatch+0x77/0x140 [ 203.157000][ T8966] __do_fast_syscall_32+0x73/0x120 [ 203.157012][ T8966] do_fast_syscall_32+0x32/0x80 [ 203.157023][ T8966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.157041][ T8966] RIP: 0023:0xf7f54579 [ 203.157051][ T8966] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.157061][ T8966] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 203.157071][ T8966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5076620 [ 203.157078][ T8966] RDX: 000000000000000f RSI: 00000000f73dcff4 RDI: 0000000000000000 [ 203.157084][ T8966] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 203.157089][ T8966] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 203.157095][ T8966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.157108][ T8966] [ 203.220830][ T8963] lowmem_reserve[]: 0 297 0 0 0 [ 203.222422][ T8963] Node 0 DMA32 free:30776kB boost:12288kB min:25960kB low:29376kB high:32792kB reserved_highatomic:4096KB active_anon:2228kB inactive_anon:0kB active_file:0kB inactive_file:14044kB unevictable:3536kB writepending:0kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:1980kB local_pcp:60kB free_cma:0kB [ 203.231024][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 203.232686][ T8963] Node 1 DMA32 free:136104kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:10240KB active_anon:13940kB inactive_anon:109504kB active_file:17208kB inactive_file:54448kB unevictable:3536kB writepending:1044kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:28284kB local_pcp:132kB free_cma:0kB [ 203.241271][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 203.243520][ T8963] Node 0 DMA: 87*4kB (UM) 36*8kB (UM) 11*16kB (UM) 17*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2636kB [ 203.248402][ T8963] Node 0 DMA32: 698*4kB (UMEH) 251*8kB (UMEH) 51*16kB (UEH) 246*32kB (UMEH) 100*64kB (UEH) 18*128kB (UMEH) 9*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 30640kB [ 203.253631][ T8963] Node 1 DMA32: 5*4kB (MH) 49*8kB (UEH) 156*16kB (UMEH) 457*32kB (UEH) 308*64kB (UMEH) 80*128kB (UMEH) 19*256kB (UMH) 21*512kB (UMH) 17*1024kB (MH) 9*2048kB (MH) 9*4096kB (UM) = 135804kB [ 203.259256][ T8963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.261874][ T8963] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 203.262569][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 203.264635][ T8963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.268250][ T833] usb 7-1: config 1 interface 0 altsetting 241 bulk endpoint 0x1 has invalid maxpacket 1023 [ 203.268817][ T8963] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 203.271197][ T833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 203.273695][ T8963] 49475 total pagecache pages [ 203.276854][ T8963] 0 pages in swap cache [ 203.277059][ T833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.278093][ T8963] Free swap = 124744kB [ 203.280439][ T833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.281643][ T8963] Total swap = 124996kB [ 203.281651][ T8963] 524155 pages RAM [ 203.284168][ T833] usb 7-1: Product: 夃뉟rꭳ䯉⋗⥫貈﫡㶓놎㨏ᇜ袩 [ 203.285356][ T8963] 0 pages HighMem/MovableOnly [ 203.286622][ T833] usb 7-1: Manufacturer: М [ 203.288707][ T8963] 206992 pages reserved [ 203.290403][ T833] usb 7-1: SerialNumber: 穀ⁱ鹽柱굼풱槝䖁骊෵᪛৺⨏迁ᝤ㷚⼻鹕ㅂ䢔遶砾豣 [ 203.291378][ T8963] 0 pages cma reserved [ 203.301556][ T8958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.729536][ T833] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 241 proto 2 vid 0x0525 pid 0xA4A8 [ 203.737078][ T833] usb 7-1: USB disconnect, device number 13 [ 203.744302][ T833] usblp0: removed [ 204.472234][ T8988] loop6: detected capacity change from 0 to 524287999 [ 204.478283][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.478340][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.479203][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.479219][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.479820][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.479835][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.479987][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.496787][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.504411][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.507081][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.514714][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.517304][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.520157][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.522882][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.526082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.528859][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.544064][ T8988] ldm_validate_partition_table(): Disk read failed. [ 204.573165][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.576480][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.581002][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.583628][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.587252][ T8988] Dev loop6: unable to read RDB block 0 [ 204.590668][ T8988] loop6: unable to read partition table [ 204.592982][ T8988] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 204.593440][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 204.597427][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 204.612215][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 204.616450][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 204.733740][ T8991] ceph: No mds server is up or the cluster is laggy [ 205.235487][ T5362] ldm_validate_partition_table(): Disk read failed. [ 205.238164][ T5362] Dev loop6: unable to read RDB block 0 [ 205.240465][ T5362] loop6: unable to read partition table [ 205.748644][ T9022] __nla_validate_parse: 30 callbacks suppressed [ 205.748684][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 205.753057][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 205.755554][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 206.092856][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 206.200441][ T9035] FAULT_INJECTION: forcing a failure. [ 206.200441][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 206.205085][ T9035] CPU: 2 UID: 0 PID: 9035 Comm: syz.3.850 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 206.205100][ T9035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.205108][ T9035] Call Trace: [ 206.205112][ T9035] [ 206.205117][ T9035] dump_stack_lvl+0x16c/0x1f0 [ 206.205140][ T9035] should_fail_ex+0x50a/0x650 [ 206.205157][ T9035] ? fs_reclaim_acquire+0xae/0x150 [ 206.205177][ T9035] should_failslab+0xc2/0x120 [ 206.205192][ T9035] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 206.205205][ T9035] ? __alloc_skb+0x2b3/0x380 [ 206.205220][ T9035] __alloc_skb+0x2b3/0x380 [ 206.205231][ T9035] ? __pfx___alloc_skb+0x10/0x10 [ 206.205241][ T9035] ? lock_acquire+0x2f/0xb0 [ 206.205259][ T9035] netlink_alloc_large_skb+0x69/0x130 [ 206.205277][ T9035] netlink_sendmsg+0x689/0xd70 [ 206.205295][ T9035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.205315][ T9035] ____sys_sendmsg+0x9ae/0xb40 [ 206.205332][ T9035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.205347][ T9035] ? get_compat_msghdr+0x11b/0x170 [ 206.205367][ T9035] ___sys_sendmsg+0x135/0x1e0 [ 206.205379][ T9035] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.205395][ T9035] ? __pfx_lock_release+0x10/0x10 [ 206.205407][ T9035] ? trace_lock_acquire+0x14e/0x1f0 [ 206.205422][ T9035] ? __fget_files+0x206/0x3a0 [ 206.205437][ T9035] __sys_sendmsg+0x16e/0x220 [ 206.205448][ T9035] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.205467][ T9035] __do_fast_syscall_32+0x73/0x120 [ 206.205479][ T9035] do_fast_syscall_32+0x32/0x80 [ 206.205489][ T9035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.205508][ T9035] RIP: 0023:0xf7f54579 [ 206.205517][ T9035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 206.205528][ T9035] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 206.205538][ T9035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 206.205544][ T9035] RDX: 0000000000000c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.205550][ T9035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.205555][ T9035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 206.205561][ T9035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.205573][ T9035] [ 206.622593][ T5953] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 206.641709][ T9049] veth5: entered promiscuous mode [ 206.660286][ T9049] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 206.752784][ T5953] usb 5-1: device descriptor read/64, error -71 [ 206.922611][ T6015] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 206.992911][ T5953] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.117530][ T6015] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.122655][ T5953] usb 5-1: device descriptor read/64, error -71 [ 207.123201][ T6015] usb 8-1: config 0 interface 0 has no altsetting 0 [ 207.137105][ T6015] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.142518][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.145537][ T6015] usb 8-1: Product: syz [ 207.147119][ T6015] usb 8-1: Manufacturer: syz [ 207.148887][ T6015] usb 8-1: SerialNumber: syz [ 207.155361][ T6015] usb 8-1: config 0 descriptor?? [ 207.160630][ T6015] usb 8-1: selecting invalid altsetting 0 [ 207.245331][ T5953] usb usb5-port1: attempt power cycle [ 207.364967][ T35] usb 8-1: USB disconnect, device number 10 [ 207.467401][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 207.533512][ T9067] wg1 speed is unknown, defaulting to 1000 [ 207.592602][ T5953] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.623394][ T5953] usb 5-1: device descriptor read/8, error -71 [ 207.882607][ T5953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.904937][ T5953] usb 5-1: device descriptor read/8, error -71 [ 208.022921][ T5953] usb usb5-port1: unable to enumerate USB device [ 208.272027][ T9081] can0: slcan on ttyS3. [ 208.326281][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.859'. [ 208.422739][ T9095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.860'. [ 208.475540][ T9094] FAULT_INJECTION: forcing a failure. [ 208.475540][ T9094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.479402][ T9094] CPU: 3 UID: 0 PID: 9094 Comm: syz.1.862 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 208.479417][ T9094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.479424][ T9094] Call Trace: [ 208.479428][ T9094] [ 208.479433][ T9094] dump_stack_lvl+0x16c/0x1f0 [ 208.479457][ T9094] should_fail_ex+0x50a/0x650 [ 208.479474][ T9094] __fpu_restore_sig+0xf5/0x1430 [ 208.479491][ T9094] ? __pfx___fpu_restore_sig+0x10/0x10 [ 208.479510][ T9094] ? lock_acquire+0x2f/0xb0 [ 208.479523][ T9094] ? __might_fault+0xe3/0x190 [ 208.479541][ T9094] fpu__restore_sig+0x113/0x190 [ 208.479555][ T9094] ia32_restore_sigcontext+0x40f/0x5d0 [ 208.479576][ T9094] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 208.479590][ T9094] ? __pfx_lock_release+0x10/0x10 [ 208.479606][ T9094] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.479622][ T9094] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.479641][ T9094] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 208.479657][ T9094] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 208.479676][ T9094] do_int80_emulation+0x104/0x200 [ 208.479689][ T9094] asm_int80_emulation+0x1a/0x20 [ 208.479704][ T9094] RIP: 0023:0xf7f84577 [ 208.479713][ T9094] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 208.479723][ T9094] RSP: 002b:00000000f50a6500 EFLAGS: 00000293 [ 208.479732][ T9094] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000080000840 [ 208.479738][ T9094] RDX: 0000000000002000 RSI: 00000000f740cff4 RDI: 0000000000000000 [ 208.479744][ T9094] RBP: 0000000080000840 R08: 0000000000000000 R09: 0000000000000000 [ 208.479749][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.479755][ T9094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.479767][ T9094] [ 208.480884][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 208.541269][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 208.543503][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 208.551704][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 208.716593][ T9102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.812826][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 208.814798][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 208.944420][ T9076] can0 (unregistered): slcan off ttyS3. [ 208.990331][ T9095] ceph: No mds server is up or the cluster is laggy [ 209.913371][ T9137] wg1 speed is unknown, defaulting to 1000 [ 210.288413][ T9146] pim6reg527: entered allmulticast mode [ 210.712199][ T9161] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !$ULvyآDUDwn} [ 210.843933][ T9168] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 211.024068][ T9181] FAULT_INJECTION: forcing a failure. [ 211.024068][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 211.028771][ T9181] CPU: 3 UID: 0 PID: 9181 Comm: syz.3.881 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 211.028791][ T9181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.028802][ T9181] Call Trace: [ 211.028807][ T9181] [ 211.028813][ T9181] dump_stack_lvl+0x16c/0x1f0 [ 211.028844][ T9181] should_fail_ex+0x50a/0x650 [ 211.028867][ T9181] ? fs_reclaim_acquire+0xae/0x150 [ 211.028894][ T9181] ? bpf_prog_alloc_no_stats+0x101/0x630 [ 211.028910][ T9181] should_failslab+0xc2/0x120 [ 211.028931][ T9181] __kmalloc_cache_noprof+0x68/0x420 [ 211.028948][ T9181] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 211.028964][ T9181] ? __vmalloc_noprof+0x6d/0x90 [ 211.028984][ T9181] bpf_prog_alloc_no_stats+0x101/0x630 [ 211.029004][ T9181] bpf_prog_alloc+0x3b/0x230 [ 211.029017][ T9181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.029039][ T9181] bpf_prog_load+0x160a/0x2480 [ 211.029064][ T9181] ? __pfx_bpf_prog_load+0x10/0x10 [ 211.029081][ T9181] ? find_held_lock+0x2d/0x110 [ 211.029109][ T9181] ? __might_fault+0x13b/0x190 [ 211.029138][ T9181] ? __might_fault+0xe3/0x190 [ 211.029162][ T9181] __sys_bpf+0x5677/0x57a0 [ 211.029182][ T9181] ? __pfx_lock_release+0x10/0x10 [ 211.029201][ T9181] ? __pfx___sys_bpf+0x10/0x10 [ 211.029220][ T9181] ? vfs_write+0x306/0x1150 [ 211.029239][ T9181] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 211.029276][ T9181] ? fput+0x67/0x440 [ 211.029295][ T9181] ? ksys_write+0x1ba/0x250 [ 211.029311][ T9181] ? __pfx_ksys_write+0x10/0x10 [ 211.029329][ T9181] __ia32_sys_bpf+0x76/0xe0 [ 211.029354][ T9181] __do_fast_syscall_32+0x73/0x120 [ 211.029371][ T9181] do_fast_syscall_32+0x32/0x80 [ 211.029386][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.029412][ T9181] RIP: 0023:0xf7f54579 [ 211.029423][ T9181] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.029438][ T9181] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 211.029453][ T9181] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 211.029463][ T9181] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.029472][ T9181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.029482][ T9181] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.029492][ T9181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.029510][ T9181] [ 211.464055][ T9204] FAULT_INJECTION: forcing a failure. [ 211.464055][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 211.468427][ T9204] CPU: 3 UID: 0 PID: 9204 Comm: syz.1.885 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 211.468448][ T9204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.468457][ T9204] Call Trace: [ 211.468462][ T9204] [ 211.468468][ T9204] dump_stack_lvl+0x16c/0x1f0 [ 211.468500][ T9204] should_fail_ex+0x50a/0x650 [ 211.468523][ T9204] ? sctp_add_bind_addr+0x9d/0x3e0 [ 211.468546][ T9204] should_failslab+0xc2/0x120 [ 211.468568][ T9204] __kmalloc_cache_noprof+0x68/0x420 [ 211.468585][ T9204] ? __sctp_v6_cmp_addr+0x206/0x530 [ 211.468608][ T9204] sctp_add_bind_addr+0x9d/0x3e0 [ 211.468634][ T9204] sctp_copy_local_addr_list+0x39e/0x5a0 [ 211.468650][ T9204] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 211.468665][ T9204] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 211.468683][ T9204] ? sctp_bind_addr_copy+0xe0/0x530 [ 211.468693][ T9204] sctp_bind_addr_copy+0xe0/0x530 [ 211.468708][ T9204] sctp_connect_new_asoc+0x1d8/0x790 [ 211.468724][ T9204] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.468742][ T9204] ? mark_held_locks+0x9f/0xe0 [ 211.468757][ T9204] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 211.468775][ T9204] sctp_sendmsg+0x162a/0x1f10 [ 211.468790][ T9204] ? __pfx___lock_acquire+0x10/0x10 [ 211.468807][ T9204] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.468824][ T9204] ? __pfx___might_resched+0x10/0x10 [ 211.468846][ T9204] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.468859][ T9204] ? __import_iovec+0x1f2/0x6d0 [ 211.468877][ T9204] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.468892][ T9204] inet_sendmsg+0x119/0x140 [ 211.468911][ T9204] ____sys_sendmsg+0x907/0xb40 [ 211.468928][ T9204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.468943][ T9204] ? get_compat_msghdr+0x11b/0x170 [ 211.468964][ T9204] ___sys_sendmsg+0x135/0x1e0 [ 211.468976][ T9204] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.468993][ T9204] ? __pfx_lock_release+0x10/0x10 [ 211.469005][ T9204] ? trace_lock_acquire+0x14e/0x1f0 [ 211.469021][ T9204] ? __fget_files+0x206/0x3a0 [ 211.469037][ T9204] __sys_sendmsg+0x16e/0x220 [ 211.469048][ T9204] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.469068][ T9204] __do_fast_syscall_32+0x73/0x120 [ 211.469079][ T9204] do_fast_syscall_32+0x32/0x80 [ 211.469090][ T9204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.469108][ T9204] RIP: 0023:0xf7f84579 [ 211.469117][ T9204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.469128][ T9204] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 211.469139][ T9204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002dc0 [ 211.469145][ T9204] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.469152][ T9204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.469157][ T9204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.469163][ T9204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.469175][ T9204] [ 212.265938][ T9223] dlm: Unknown command passed to DLM device : 0 [ 212.265938][ T9223] [ 213.545149][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.548959][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.551777][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.554902][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.558054][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.561126][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.564313][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.567327][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.570747][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.574412][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 213.894501][ T9256] xt_CT: No such helper "syz1" [ 214.290861][ T5961] Bluetooth: hci4: sending frame failed (-49) [ 214.293793][ T5957] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 217.221236][ T9345] netem: change failed [ 217.657867][ T9355] fuse: Unknown parameter '0x0000000000000000Gk$\R*#g35~' [ 218.712606][ T5994] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 218.926461][ T5994] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.929757][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.968322][ T5994] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.970978][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.974944][ T5994] usb 6-1: Product: syz [ 218.976376][ T5994] usb 6-1: Manufacturer: syz [ 218.977712][ T5994] usb 6-1: SerialNumber: syz [ 219.027525][ T5994] usb 6-1: config 0 descriptor?? [ 219.039654][ T5994] usb 6-1: selecting invalid altsetting 0 [ 219.273464][ T63] usb 6-1: USB disconnect, device number 9 [ 219.305092][ T9368] __nla_validate_parse: 31 callbacks suppressed [ 219.305103][ T9368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'. [ 219.311340][ T39] kauditd_printk_skb: 285 callbacks suppressed [ 219.311383][ T39] audit: type=1326 audit(2000004169.515:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.934" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 219.311758][ T7506] udevd[7506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.421259][ T9402] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 220.426743][ T9402] team0: Port device netdevsim0 added [ 221.263857][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 221.612834][ T9444] netlink: 80 bytes leftover after parsing attributes in process `syz.1.958'. [ 222.016491][ T9447] xt_connbytes: Forcing CT accounting to be enabled [ 222.019245][ T9447] SET target dimension over the limit! [ 222.064686][ T9449] loop7: detected capacity change from 0 to 127 [ 222.081431][ T9449] can: request_module (can-proto-3) failed. [ 222.538488][ T9465] netlink: 'syz.2.966': attribute type 39 has an invalid length. [ 222.546220][ T9465] veth0_macvtap: left promiscuous mode [ 222.679159][ T9471] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 224.395835][ T9522] /dev/nullb0: Can't open blockdev [ 224.416517][ T9524] Cannot find add_set index 2 as target [ 224.737005][ T6015] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.132563][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 225.135554][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.138661][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.141452][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.144326][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.148102][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.150742][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.367764][ T6015] usb 5-1: usb_control_msg returned -32 [ 225.370509][ T6015] usbtmc 5-1:16.0: can't read capabilities [ 226.444904][ T9562] FAULT_INJECTION: forcing a failure. [ 226.444904][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 226.448673][ T9562] CPU: 3 UID: 0 PID: 9562 Comm: syz.3.995 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 226.448689][ T9562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.448696][ T9562] Call Trace: [ 226.448700][ T9562] [ 226.448705][ T9562] dump_stack_lvl+0x16c/0x1f0 [ 226.448728][ T9562] should_fail_ex+0x50a/0x650 [ 226.448746][ T9562] ? fs_reclaim_acquire+0xae/0x150 [ 226.448770][ T9562] should_failslab+0xc2/0x120 [ 226.448785][ T9562] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 226.448799][ T9562] ? skb_clone+0x190/0x3f0 [ 226.448815][ T9562] skb_clone+0x190/0x3f0 [ 226.448827][ T9562] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 226.448847][ T9562] ? kasan_quarantine_put+0x10a/0x240 [ 226.448864][ T9562] ? kmem_cache_free+0x2e2/0x4d0 [ 226.448876][ T9562] ? kfree_skbmem+0x1a4/0x1f0 [ 226.448891][ T9562] ? find_held_lock+0x2d/0x110 [ 226.448911][ T9562] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 226.448928][ T9562] ? __pfx_lock_release+0x10/0x10 [ 226.448943][ T9562] ? __local_bh_enable_ip+0xa4/0x120 [ 226.448959][ T9562] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.448983][ T9562] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.449020][ T9562] ? __nla_validate_parse+0x605/0x2b10 [ 226.449038][ T9562] ? __pfx_aa_get_newest_label+0x10/0x10 [ 226.449060][ T9562] ? rcu_is_watching+0x12/0xc0 [ 226.449078][ T9562] ? __pfx___nla_validate_parse+0x10/0x10 [ 226.449096][ T9562] ? apparmor_capable+0x114/0x1d0 [ 226.449115][ T9562] ? __nla_parse+0x40/0x60 [ 226.449132][ T9562] nfnetlink_rcv+0x3c3/0x430 [ 226.449149][ T9562] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 226.449174][ T9562] netlink_unicast+0x53c/0x7f0 [ 226.449192][ T9562] ? __pfx_netlink_unicast+0x10/0x10 [ 226.449208][ T9562] ? __phys_addr_symbol+0x30/0x80 [ 226.449224][ T9562] ? __check_object_size+0x488/0x710 [ 226.449241][ T9562] netlink_sendmsg+0x8b8/0xd70 [ 226.449259][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.449279][ T9562] ____sys_sendmsg+0x9ae/0xb40 [ 226.449295][ T9562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.449308][ T9562] ? get_compat_msghdr+0x11b/0x170 [ 226.449328][ T9562] ___sys_sendmsg+0x135/0x1e0 [ 226.449341][ T9562] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.449358][ T9562] ? __pfx_lock_release+0x10/0x10 [ 226.449370][ T9562] ? trace_lock_acquire+0x14e/0x1f0 [ 226.449383][ T9562] ? __fget_files+0x206/0x3a0 [ 226.449398][ T9562] __sys_sendmsg+0x16e/0x220 [ 226.449410][ T9562] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.449429][ T9562] __do_fast_syscall_32+0x73/0x120 [ 226.449441][ T9562] do_fast_syscall_32+0x32/0x80 [ 226.449451][ T9562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.449472][ T9562] RIP: 0023:0xf7f54579 [ 226.449481][ T9562] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.449492][ T9562] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 226.449502][ T9562] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 226.449508][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.449514][ T9562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.449520][ T9562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 226.449526][ T9562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.449538][ T9562] [ 226.818426][ T9575] xt_CT: No such helper "syz1" [ 226.912658][ T833] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 226.999401][ T39] audit: type=1326 audit(2000004177.205:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 227.007667][ T39] audit: type=1326 audit(2000004177.205:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 227.015231][ T39] audit: type=1326 audit(2000004177.215:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 227.062560][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 227.068628][ T833] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 227.072241][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.075924][ T833] usb 6-1: Product: syz [ 227.077655][ T833] usb 6-1: Manufacturer: syz [ 227.079616][ T833] usb 6-1: SerialNumber: syz [ 227.082705][ T833] usb 6-1: config 0 descriptor?? [ 227.096137][ T39] audit: type=1326 audit(2000004177.305:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 227.104629][ T39] audit: type=1326 audit(2000004177.305:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 227.163105][ T6015] usb 5-1: USB disconnect, device number 14 [ 227.296318][ T39] audit: type=1326 audit(2000004177.505:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.998" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x0 [ 227.323375][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 227.400599][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.405124][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.279616][ T9602] fuse: Bad value for 'group_id' [ 228.281127][ T9602] fuse: Bad value for 'group_id' [ 228.342921][ T5957] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 228.589706][ T9606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1007'. [ 228.596677][ T9606] FAULT_INJECTION: forcing a failure. [ 228.596677][ T9606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.600441][ T9606] CPU: 2 UID: 0 PID: 9606 Comm: syz.2.1007 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 228.600458][ T9606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.600465][ T9606] Call Trace: [ 228.600469][ T9606] [ 228.600474][ T9606] dump_stack_lvl+0x16c/0x1f0 [ 228.600499][ T9606] should_fail_ex+0x50a/0x650 [ 228.600517][ T9606] _copy_from_user+0x2e/0xd0 [ 228.600536][ T9606] get_compat_msghdr+0xa8/0x170 [ 228.600553][ T9606] ? __pfx_get_compat_msghdr+0x10/0x10 [ 228.600569][ T9606] ? get_pid_task+0xfc/0x250 [ 228.600583][ T9606] ___sys_sendmsg+0x1b0/0x1e0 [ 228.600596][ T9606] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.600618][ T9606] ? __pfx_vfs_write+0x10/0x10 [ 228.600634][ T9606] __sys_sendmsg+0x16e/0x220 [ 228.600646][ T9606] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.600656][ T9606] ? __pfx_lock_release+0x10/0x10 [ 228.600678][ T9606] __do_fast_syscall_32+0x73/0x120 [ 228.600690][ T9606] do_fast_syscall_32+0x32/0x80 [ 228.600700][ T9606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.600720][ T9606] RIP: 0023:0xf745e579 [ 228.600728][ T9606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.600739][ T9606] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 228.600749][ T9606] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 228.600756][ T9606] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.600762][ T9606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.600768][ T9606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.600774][ T9606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.600785][ T9606] [ 228.650144][ T9602] wg1 speed is unknown, defaulting to 1000 [ 228.747216][ T9613] xt_CT: No such helper "syz1" [ 229.547046][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.551800][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.556697][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.560652][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.564648][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.568365][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.571994][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.577854][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.578021][ T9629] netlink: 'syz.2.1012': attribute type 3 has an invalid length. [ 229.593757][ T9629] macsec1: entered promiscuous mode [ 229.694892][ T833] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 229.698052][ T833] gspca_sunplus: reg_w_riv err -71 [ 229.699610][ T833] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 229.725318][ T833] usb 6-1: USB disconnect, device number 10 [ 230.632560][ T5994] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 230.823235][ T5994] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.825791][ T5994] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 230.828622][ T5994] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.831231][ T5994] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 230.835834][ T5994] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 230.840105][ T5994] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.843583][ T5994] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.846412][ T5994] usb 8-1: Product: syz [ 230.847955][ T5994] usb 8-1: Manufacturer: syz [ 230.856830][ T5994] cdc_wdm 8-1:1.0: skipping garbage [ 230.858797][ T5994] cdc_wdm 8-1:1.0: skipping garbage [ 230.863309][ T5994] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 230.865422][ T5994] cdc_wdm 8-1:1.0: Unknown control protocol [ 230.932727][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 231.065095][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 231.067410][ C0] wdm_int_callback: 4 callbacks suppressed [ 231.067424][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.070853][ C0] wdm_int_callback: 4 callbacks suppressed [ 231.070861][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.074521][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.076518][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.078454][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.080311][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.082185][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.084539][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.086564][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.088433][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.090288][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.092154][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.094179][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.096013][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.097901][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.099757][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.101647][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.103734][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.106178][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.108052][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.114777][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.117050][ T5994] usb 8-1: USB disconnect, device number 11 [ 231.117603][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.117627][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.117630][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 231.117639][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.221615][ T9689] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.235013][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.284655][ T9660] overlay: ./file0 is not a directory [ 233.280235][ T5961] Bluetooth: hci4: sending frame failed (-49) [ 233.412352][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 233.428930][ T9732] FAULT_INJECTION: forcing a failure. [ 233.428930][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 233.432410][ T9732] CPU: 3 UID: 0 PID: 9732 Comm: syz.1.1047 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 233.432426][ T9732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.432442][ T9732] Call Trace: [ 233.432450][ T9732] [ 233.432456][ T9732] dump_stack_lvl+0x16c/0x1f0 [ 233.432481][ T9732] should_fail_ex+0x50a/0x650 [ 233.432497][ T9732] ? fs_reclaim_acquire+0xae/0x150 [ 233.432528][ T9732] should_failslab+0xc2/0x120 [ 233.432545][ T9732] __kmalloc_noprof+0xce/0x4f0 [ 233.432559][ T9732] ? kobject_get_path+0xcb/0x230 [ 233.432571][ T9732] kobject_get_path+0xcb/0x230 [ 233.432583][ T9732] kobject_uevent_env+0x289/0x1670 [ 233.432595][ T9732] ? __pfx_dev_uevent_name+0x10/0x10 [ 233.432611][ T9732] ? bus_to_subsys+0x12d/0x160 [ 233.432629][ T9732] device_del+0x623/0x9f0 [ 233.432642][ T9732] ? __pfx_device_del+0x10/0x10 [ 233.432655][ T9732] ? kfree_const+0x55/0x60 [ 233.432671][ T9732] ? kobject_put+0x210/0x5a0 [ 233.432683][ T9732] hci_unregister_dev+0x35e/0x620 [ 233.432700][ T9732] hci_uart_tty_close+0x24c/0x2a0 [ 233.432716][ T9732] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 233.432730][ T9732] tty_ldisc_close+0x111/0x1a0 [ 233.432748][ T9732] tty_ldisc_kill+0x8e/0x150 [ 233.432762][ T9732] tty_ldisc_hangup+0x311/0x6a0 [ 233.432779][ T9732] __tty_hangup.part.0+0x3f8/0x890 [ 233.432799][ T9732] tty_ioctl+0xe59/0x1640 [ 233.432816][ T9732] ? __pfx_tty_ioctl+0x10/0x10 [ 233.432836][ T9732] ? __pfx_lock_release+0x10/0x10 [ 233.432851][ T9732] ? trace_lock_acquire+0x14e/0x1f0 [ 233.432866][ T9732] ? __fget_files+0x206/0x3a0 [ 233.432879][ T9732] tty_compat_ioctl+0xb9/0x4d0 [ 233.432895][ T9732] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 233.432912][ T9732] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 233.432930][ T9732] __do_fast_syscall_32+0x73/0x120 [ 233.432942][ T9732] do_fast_syscall_32+0x32/0x80 [ 233.432952][ T9732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.432971][ T9732] RIP: 0023:0xf7f84579 [ 233.432979][ T9732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.432990][ T9732] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 233.433001][ T9732] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005437 [ 233.433007][ T9732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.433013][ T9732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.433019][ T9732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 233.433025][ T9732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.433037][ T9732] [ 234.110769][ T35] usb 7-1: USB disconnect, device number 14 [ 235.063128][ T9767] __nla_validate_parse: 74 callbacks suppressed [ 235.063151][ T9767] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1059'. [ 235.077462][ T9769] fuse: Bad value for 'group_id' [ 235.078925][ T9769] fuse: Bad value for 'group_id' [ 236.421236][ T9805] bridge0: port 1(ipvlan2) entered blocking state [ 236.424132][ T9805] bridge0: port 1(ipvlan2) entered disabled state [ 236.426842][ T9805] ipvlan2: entered allmulticast mode [ 236.428939][ T9805] bridge0: entered allmulticast mode [ 236.431874][ T9805] ipvlan2: left allmulticast mode [ 236.436765][ T9805] bridge0: left allmulticast mode [ 237.033807][ T9812] FAULT_INJECTION: forcing a failure. [ 237.033807][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 237.037592][ T9812] CPU: 3 UID: 0 PID: 9812 Comm: syz.0.1073 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 237.037607][ T9812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.037614][ T9812] Call Trace: [ 237.037619][ T9812] [ 237.037624][ T9812] dump_stack_lvl+0x16c/0x1f0 [ 237.037649][ T9812] should_fail_ex+0x50a/0x650 [ 237.037667][ T9812] should_failslab+0xc2/0x120 [ 237.037683][ T9812] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 237.037698][ T9812] ? skb_clone+0x190/0x3f0 [ 237.037713][ T9812] skb_clone+0x190/0x3f0 [ 237.037725][ T9812] netlink_deliver_tap+0xafd/0xca0 [ 237.037744][ T9812] netlink_unicast+0x5e1/0x7f0 [ 237.037761][ T9812] ? __pfx_netlink_unicast+0x10/0x10 [ 237.037777][ T9812] ? __phys_addr_symbol+0x30/0x80 [ 237.037795][ T9812] ? __check_object_size+0x488/0x710 [ 237.037812][ T9812] netlink_sendmsg+0x8b8/0xd70 [ 237.037830][ T9812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.037851][ T9812] ____sys_sendmsg+0x9ae/0xb40 [ 237.037867][ T9812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.037881][ T9812] ? get_compat_msghdr+0x11b/0x170 [ 237.037903][ T9812] ___sys_sendmsg+0x135/0x1e0 [ 237.037915][ T9812] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.037931][ T9812] ? __pfx_lock_release+0x10/0x10 [ 237.037944][ T9812] ? trace_lock_acquire+0x14e/0x1f0 [ 237.037959][ T9812] ? __fget_files+0x206/0x3a0 [ 237.037975][ T9812] __sys_sendmsg+0x16e/0x220 [ 237.037986][ T9812] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.038005][ T9812] __do_fast_syscall_32+0x73/0x120 [ 237.038018][ T9812] do_fast_syscall_32+0x32/0x80 [ 237.038028][ T9812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.038047][ T9812] RIP: 0023:0xf747e579 [ 237.038056][ T9812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 237.038066][ T9812] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 237.038076][ T9812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 237.038083][ T9812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.038089][ T9812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.038094][ T9812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.038100][ T9812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.038112][ T9812] [ 237.381596][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.485111][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.545257][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.549768][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.552898][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.555660][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.558536][ T5961] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 237.560875][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.643582][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.644673][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1078'. [ 237.654331][ T9825] wg1 speed is unknown, defaulting to 1000 [ 237.884227][ T45] bond0: (slave netdevsim0): Releasing backup interface [ 237.896333][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.924019][ T9825] chnl_net:caif_netlink_parms(): no params data found [ 238.015234][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.017468][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.020187][ T9825] bridge_slave_0: entered allmulticast mode [ 238.024259][ T9825] bridge_slave_0: entered promiscuous mode [ 238.028322][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.030830][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.034733][ T9825] bridge_slave_1: entered allmulticast mode [ 238.037352][ T9825] bridge_slave_1: entered promiscuous mode [ 238.078379][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.097320][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.145033][ T45] bridge_slave_1: left allmulticast mode [ 238.146990][ T45] bridge_slave_1: left promiscuous mode [ 238.151116][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.290824][ T45] bond1 (unregistering): (slave gretap1): Releasing active interface [ 238.399671][ T9840] ------------[ cut here ]------------ [ 238.401472][ T9840] kernel BUG at mm/hugetlb.c:2333! [ 238.402934][ T9840] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 238.405048][ T9840] CPU: 0 UID: 0 PID: 9840 Comm: syz.2.1080 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.409574][ T9840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.412841][ T9840] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.414641][ T9840] Code: a3 d0 00 00 00 e8 44 74 a2 ff 48 c7 c7 40 56 e1 8d e8 b8 b4 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 25 74 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 238.419932][ T9840] RSP: 0018:ffffc90002fdf8f0 EFLAGS: 00010087 [ 238.421636][ T9840] RAX: 0000000000000877 RBX: ffffffff9a83b758 RCX: ffffc9000c001000 [ 238.423832][ T9840] RDX: 0000000000080000 RSI: ffffffff8216789b RDI: 0000000000000007 [ 238.426042][ T9840] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 238.428290][ T9840] R10: 0000000000000000 R11: 000000000000008c R12: 0000000000000000 [ 238.430487][ T9840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 238.432691][ T9840] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f50e6b40 [ 238.435163][ T9840] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 238.437028][ T9840] CR2: 0000000000000000 CR3: 0000000068e9a000 CR4: 0000000000352ef0 [ 238.439277][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.441486][ T9840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.443681][ T9840] Call Trace: [ 238.444690][ T9840] [ 238.445539][ T9840] ? die+0x31/0x80 [ 238.446558][ T9840] ? do_trap+0x232/0x430 [ 238.447794][ T9840] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.449466][ T9840] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.451110][ T9840] ? do_error_trap+0xf4/0x230 [ 238.452453][ T9840] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.454175][ T9840] ? handle_invalid_op+0x34/0x40 [ 238.455571][ T9840] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.457276][ T9840] ? exc_invalid_op+0x2e/0x50 [ 238.458557][ T9840] ? asm_exc_invalid_op+0x1a/0x20 [ 238.459911][ T9840] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 238.461523][ T9840] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.463132][ T9840] memfd_alloc_folio+0x16c/0x3b0 [ 238.464549][ T9840] memfd_pin_folios+0xe8c/0x1150 [ 238.465966][ T9840] ? __pfx_memfd_pin_folios+0x10/0x10 [ 238.467512][ T9840] ? lock_acquire.part.0+0x155/0x380 [ 238.469015][ T9840] ? __pfx_down_read+0x10/0x10 [ 238.470376][ T9840] ? __fget_files+0x206/0x3a0 [ 238.471715][ T9840] udmabuf_create+0x641/0x11e0 [ 238.473090][ T9840] ? __pfx_udmabuf_create+0x10/0x10 [ 238.474559][ T9840] ? lock_acquire+0x2f/0xb0 [ 238.475808][ T9840] ? __might_fault+0xe3/0x190 [ 238.477133][ T9840] ? __might_fault+0xe3/0x190 [ 238.478445][ T9840] udmabuf_ioctl+0x193/0x310 [ 238.479718][ T9840] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 238.481164][ T9840] ? __fget_files+0x206/0x3a0 [ 238.482498][ T9840] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 238.483934][ T9840] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 238.485445][ T9840] __do_fast_syscall_32+0x73/0x120 [ 238.486892][ T9840] do_fast_syscall_32+0x32/0x80 [ 238.488322][ T9840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.490105][ T9840] RIP: 0023:0xf745e579 [ 238.491264][ T9840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.496617][ T9840] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.498977][ T9840] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040187542 [ 238.501211][ T9840] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.503425][ T9840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.505640][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.507896][ T9840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.510133][ T9840] [ 238.511020][ T9840] Modules linked in: [ 238.512133][ T9840] ---[ end trace 0000000000000000 ]--- [ 238.513653][ T9840] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 238.515452][ T9840] Code: a3 d0 00 00 00 e8 44 74 a2 ff 48 c7 c7 40 56 e1 8d e8 b8 b4 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 25 74 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 238.520827][ T9840] RSP: 0018:ffffc90002fdf8f0 EFLAGS: 00010087 [ 238.522514][ T9840] RAX: 0000000000000877 RBX: ffffffff9a83b758 RCX: ffffc9000c001000 [ 238.524712][ T9840] RDX: 0000000000080000 RSI: ffffffff8216789b RDI: 0000000000000007 [ 238.526906][ T9840] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 238.529150][ T9840] R10: 0000000000000000 R11: 000000000000008c R12: 0000000000000000 [ 238.531354][ T9840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 238.533561][ T9840] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f50e6b40 [ 238.536036][ T9840] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 238.537944][ T9840] CR2: 0000000000000000 CR3: 0000000068e9a000 CR4: 0000000000352ef0 [ 238.540166][ T9840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.542356][ T9840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.544565][ T9840] Kernel panic - not syncing: Fatal exception [ 238.546822][ T9840] Kernel Offset: disabled [ 238.548084][ T9840] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:11:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85387ef5 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc90002fdf230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9aad2de0 R15=0000000000000000 RIP=ffffffff85387f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000068e9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000090d80c RBX=0000000000000001 RCX=ffffffff8b46ae39 RDX=ffffed10056a6f86 RSI=ffffffff8bd2d360 RDI=ffffffff818ffd39 RBP=ffffed1003ad0910 RSP=ffffc9000047fdd8 R8 =0000000000000000 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d684880 R14=ffffffff905fdd10 R15=0000000000000000 RIP=ffffffff81001530 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f80effc CR3=000000004cb9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc90003a00000 RDX=ffffc900039ffc01 RSI=ffffc900039ffcd8 RDI=ffffc900039ff908 RBP=ffffc900039ff950 RSP=ffffc900039ff898 R8 =ffffffff90fec2e2 R9 =ffffffff90fec2e0 R10=ffffc900039ff908 R11=000000000001115b R12=ffffc900039ff958 R13=ffffc900039ff908 R14=ffffc900039ffce0 R15=ffffc900039ffcd8 RIP=ffffffff8168d307 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73dcff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff1100ebf643f RBX=ffff888075fb2418 RCX=ffffffff81c8a676 RDX=ffff888022ae2440 RSI=ffffffff81c7e8a9 RDI=ffff888075fb21f8 RBP=ffff888075fb2418 RSP=ffffc900030cf700 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000000000001e R12=00000000f748e579 R13=dffffc0000000000 R14=0000000000000000 R15=ffff888022ae2440 RIP=ffffffff81c7e8c0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2e067b CR3=000000006a37a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000