last executing test programs: 3.8656055s ago: executing program 3 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xc, 0x6}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x4b52, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x34040000}, 0x20008000) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x7, 0x20, 0x3, 0xfc, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x4}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x97, [@multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @local, @multicast1, @remote]}, @noop]}}}}}) 3.823620538s ago: executing program 2 (id=442): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.770494792s ago: executing program 1 (id=447): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x1) 3.769659258s ago: executing program 1 (id=448): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) syz_open_dev$loop(0x0, 0x6, 0x80) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) (rerun: 64) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) (async) close(r6) (async, rerun: 64) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) fcntl$lock(r7, 0x26, &(0x7f0000000040)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.694487966s ago: executing program 1 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xc, 0x6}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x4b52, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x34040000}, 0x20008000) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x7, 0x20, 0x3, 0xfc, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x4}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x97, [@multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @local, @multicast1, @remote]}, @noop]}}}}}) 3.693372524s ago: executing program 3 (id=458): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010000000000008000f000000010008000e"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r3 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) 3.042434357s ago: executing program 0 (id=451): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.041185875s ago: executing program 3 (id=452): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r5 = syz_open_pts(r4, 0x0) read(r5, 0x0, 0x2006) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b807f9fa0427d7bdb5fc8522", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0x0, 0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x0, {0x8, 0x1}, {0x4d, 0xfffe}, @rumble={0x101, 0xffff}}) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 3.040256332s ago: executing program 1 (id=460): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) r9 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43, 0x132}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.039481435s ago: executing program 2 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x103f, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.497288257s ago: executing program 1 (id=454): r0 = open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x68, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffd, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r7, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x1330, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0xc89e, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) 2.495747305s ago: executing program 0 (id=464): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) r9 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43, 0x132}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 2.141518753s ago: executing program 3 (id=455): ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000440)=""/154, 0x9a) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read(r3, &(0x7f0000000100)=""/87, 0x57) fchdir(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000280)='e\xf4E\x88-\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x58, 0x2) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, 0x0) r8 = fcntl$getown(r1, 0x9) r9 = syz_open_procfs(r8, &(0x7f00000001c0)='net/rt_cache\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40305829, &(0x7f0000000240)=0x20) syz_usb_disconnect(r0) 2.13913261s ago: executing program 2 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2004, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5}, 0x18) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r4) sendmsg$nl_generic(r6, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 2.034267008s ago: executing program 0 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113900000000000400000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x401, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "3867cdf76682f5adfcd8e893ccaf81f5bb7565160333060a3ac9d3853e8d84dee8a47190e529dc96239cfb4c6ae6d31d9fe4913c54f64518123508fc6cf71e48"}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3e1791080c48a21de26a08ac1f7078f2c90d7c05de48f40438125bc8bed3b33cbc4331a7f9767a873a55d05bc113d4f8ea0050656331074f1338df855bef3224", 0x40}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r7, r6, r5, 0x1) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x169440, 0x11) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r9 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0cc5604, &(0x7f0000000080)={0xb, @pix_mp}) 2.033965637s ago: executing program 2 (id=457): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1e, 0x126, 0x0}) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1e, 0x126, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) tee(r4, r5, 0x6, 0x4) (async) tee(r4, r5, 0x6, 0x4) 1.734531762s ago: executing program 0 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xc, 0x6}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x4b52, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x34040000}, 0x20008000) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x7, 0x20, 0x3, 0xfc, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x4}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x97, [@multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @local, @multicast1, @remote]}, @noop]}}}}}) 149.345196ms ago: executing program 1 (id=461): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffe) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 149.128523ms ago: executing program 2 (id=462): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0xb1, 0x0, 0x8, 0x252}]}, 0x8) 148.910536ms ago: executing program 3 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f0000000400000008000000f905020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r0 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000511000/0x3000)=nil, 0x3000, 0x10) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x9a0a, 0x80, 0x2000, 0xff}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) umount2(&(0x7f0000000140)='./file0\x00', 0x9) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) 137.500133ms ago: executing program 0 (id=471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xc, 0x6}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x4b52, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x34040000}, 0x20008000) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x7, 0x20, 0x3, 0xfc, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x4}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x97, [@multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @local, @multicast1, @remote]}, @noop]}}}}}) 2.259744ms ago: executing program 0 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x103f, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.256525ms ago: executing program 2 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 9) 0s ago: executing program 3 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xc, 0x6}, 0x8) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x4b52, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x34040000}, 0x20008000) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x7, 0x20, 0x3, 0xfc, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x68, 0x0, 0x1b, 0x4, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x4}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x97, [@multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @local, @multicast1, @remote]}, @noop]}}}}}) kernel console output (not intermixed with test programs): srh: unknown srh invflags 6BE9 [ 50.262095][ T5751] FAULT_INJECTION: forcing a failure. [ 50.262095][ T5751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.267336][ T5751] CPU: 2 UID: 0 PID: 5751 Comm: syz.3.120 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 50.270088][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.272846][ T5751] Call Trace: [ 50.273717][ T5751] [ 50.274510][ T5751] dump_stack_lvl+0x16c/0x1f0 [ 50.275811][ T5751] should_fail_ex+0x497/0x5b0 [ 50.277071][ T5751] strncpy_from_user+0x3b/0x2a0 [ 50.278356][ T5751] __do_sys_add_key+0xcf/0x460 [ 50.279612][ T5751] ? __pfx___do_sys_add_key+0x10/0x10 [ 50.281010][ T5751] ? ksys_write+0x1ad/0x260 [ 50.282230][ T5751] __do_fast_syscall_32+0x73/0x120 [ 50.283575][ T5751] do_fast_syscall_32+0x32/0x80 [ 50.284846][ T5751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.286499][ T5751] RIP: 0023:0xf7fc0579 [ 50.287560][ T5751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 50.292516][ T5751] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 50.294688][ T5751] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000280 [ 50.296725][ T5751] RDX: 00000000200002c0 RSI: 000000000000fe3a RDI: 00000000fffffffe [ 50.298772][ T5751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.300823][ T5751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 50.302880][ T5751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.304919][ T5751] [ 50.597025][ T5392] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.749287][ T5392] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 50.751703][ T5392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.755412][ T5392] usb 8-1: config 0 descriptor?? [ 50.760517][ T5392] cp210x 8-1:0.0: cp210x converter detected [ 51.174587][ T5392] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 51.205340][ T5392] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 51.207458][ T5392] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 51.217399][ T5392] usb 8-1: cp210x converter now attached to ttyUSB0 [ 51.223292][ T5392] usb 8-1: USB disconnect, device number 2 [ 51.232258][ T5392] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 51.234928][ T5392] cp210x 8-1:0.0: device disconnected [ 51.314688][ T5776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'. [ 51.358508][ T5778] Zero length message leads to an empty skb [ 51.407923][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 51.499227][ T5793] FAULT_INJECTION: forcing a failure. [ 51.499227][ T5793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.503185][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.1.134 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 51.505919][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.508689][ T5793] Call Trace: [ 51.509568][ T5793] [ 51.510349][ T5793] dump_stack_lvl+0x16c/0x1f0 [ 51.511583][ T5793] should_fail_ex+0x497/0x5b0 [ 51.512819][ T5793] _copy_from_user+0x30/0xf0 [ 51.514030][ T5793] get_compat_msghdr+0xa8/0x170 [ 51.515287][ T5793] ? __pfx_get_compat_msghdr+0x10/0x10 [ 51.516689][ T5793] ? __pfx___lock_acquire+0x10/0x10 [ 51.518069][ T5793] ___sys_sendmsg+0x1b0/0x1e0 [ 51.518087][ T5793] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.518106][ T5793] ? lock_acquire+0x2f/0xb0 [ 51.518119][ T5793] ? __fget_files+0x40/0x3f0 [ 51.518134][ T5793] ? fdget+0x176/0x210 [ 51.518145][ T5793] __sys_sendmsg+0x117/0x1f0 [ 51.518158][ T5793] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.518171][ T5793] ? __fget_files+0x244/0x3f0 [ 51.518188][ T5793] __do_fast_syscall_32+0x73/0x120 [ 51.518202][ T5793] do_fast_syscall_32+0x32/0x80 [ 51.518215][ T5793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.518229][ T5793] RIP: 0023:0xf7fc3579 [ 51.518238][ T5793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 51.518247][ T5793] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 51.518258][ T5793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200012c0 [ 51.518264][ T5793] RDX: 0000000000044890 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.518270][ T5793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.518276][ T5793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 51.518282][ T5793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.518293][ T5793] [ 53.337706][ T5820] FAULT_INJECTION: forcing a failure. [ 53.337706][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.341558][ T5820] CPU: 3 UID: 0 PID: 5820 Comm: syz.1.141 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 53.344308][ T5820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.347055][ T5820] Call Trace: [ 53.347997][ T5820] [ 53.348775][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 53.350082][ T5820] should_fail_ex+0x497/0x5b0 [ 53.351325][ T5820] _copy_from_user+0x30/0xf0 [ 53.352525][ T5820] move_addr_to_kernel+0x68/0x160 [ 53.353858][ T5820] __sys_sendto+0x169/0x4d0 [ 53.355052][ T5820] ? __pfx___sys_sendto+0x10/0x10 [ 53.356384][ T5820] ? ksys_write+0x1ad/0x260 [ 53.357577][ T5820] ? __pfx_ksys_write+0x10/0x10 [ 53.358861][ T5820] __ia32_sys_sendto+0xdd/0x1b0 [ 53.360145][ T5820] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.361513][ T5820] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 53.363231][ T5820] __do_fast_syscall_32+0x73/0x120 [ 53.364569][ T5820] do_fast_syscall_32+0x32/0x80 [ 53.365858][ T5820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.367511][ T5820] RIP: 0023:0xf7fc3579 [ 53.368588][ T5820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 53.373567][ T5820] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 53.375748][ T5820] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 53.377810][ T5820] RDX: 0000000000000000 RSI: 00000000240087e9 RDI: 0000000020000200 [ 53.379865][ T5820] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 53.381936][ T5820] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 53.383982][ T5820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.386046][ T5820] [ 53.411935][ T5822] process 'syz.2.142' launched './file0' with NULL argv: empty string added [ 53.428216][ T5356] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 53.672861][ T5840] FAULT_INJECTION: forcing a failure. [ 53.672861][ T5840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.676243][ T5840] CPU: 2 UID: 0 PID: 5840 Comm: syz.0.148 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 53.678999][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.681807][ T5840] Call Trace: [ 53.682691][ T5840] [ 53.683479][ T5840] dump_stack_lvl+0x16c/0x1f0 [ 53.684719][ T5840] should_fail_ex+0x497/0x5b0 [ 53.685966][ T5840] _copy_from_user+0x30/0xf0 [ 53.687185][ T5840] __sys_bpf+0x215/0x5780 [ 53.688325][ T5840] ? ksys_write+0x21e/0x260 [ 53.689519][ T5840] ? __pfx___sys_bpf+0x10/0x10 [ 53.690794][ T5840] ? vfs_write+0x14d/0x1140 [ 53.691994][ T5840] ? __mutex_unlock_slowpath+0x164/0x650 [ 53.693476][ T5840] ? fput+0x30/0x390 [ 53.694519][ T5840] ? ksys_write+0x1ad/0x260 [ 53.695713][ T5840] ? __pfx_ksys_write+0x10/0x10 [ 53.696989][ T5840] __ia32_sys_bpf+0x76/0xe0 [ 53.698175][ T5840] __do_fast_syscall_32+0x73/0x120 [ 53.699516][ T5840] do_fast_syscall_32+0x32/0x80 [ 53.700794][ T5840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.702466][ T5840] RIP: 0023:0xf743e579 [ 53.703536][ T5840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 53.708516][ T5840] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 53.710685][ T5840] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000020000880 [ 53.712746][ T5840] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.714803][ T5840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.716866][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 53.718920][ T5840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.720978][ T5840] [ 53.745944][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 53.966399][ T5857] FAULT_INJECTION: forcing a failure. [ 53.966399][ T5857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.970350][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz.0.154 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 53.973111][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.975898][ T5857] Call Trace: [ 53.976770][ T5857] [ 53.977546][ T5857] dump_stack_lvl+0x16c/0x1f0 [ 53.978886][ T5857] should_fail_ex+0x497/0x5b0 [ 53.980139][ T5857] _copy_from_user+0x30/0xf0 [ 53.981354][ T5857] get_compat_msghdr+0xa8/0x170 [ 53.982739][ T5857] ? __pfx_get_compat_msghdr+0x10/0x10 [ 53.984209][ T5857] ? __pfx___lock_acquire+0x10/0x10 [ 53.985572][ T5857] ___sys_sendmsg+0x1b0/0x1e0 [ 53.986835][ T5857] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.988217][ T5857] ? lock_acquire+0x2f/0xb0 [ 53.989416][ T5857] ? __fget_files+0x40/0x3f0 [ 53.990659][ T5857] ? fdget+0x176/0x210 [ 53.991743][ T5857] __sys_sendmsg+0x117/0x1f0 [ 53.992975][ T5857] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.994334][ T5857] ? __fget_files+0x244/0x3f0 [ 53.995593][ T5857] __do_fast_syscall_32+0x73/0x120 [ 53.996959][ T5857] do_fast_syscall_32+0x32/0x80 [ 53.998266][ T5857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.999949][ T5857] RIP: 0023:0xf743e579 [ 54.001040][ T5857] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.006094][ T5857] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 54.008262][ T5857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 54.010330][ T5857] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.012396][ T5857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.014463][ T5857] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 54.016524][ T5857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.018598][ T5857] [ 54.019559][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.337626][ T5394] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.455322][ T5867] FAULT_INJECTION: forcing a failure. [ 54.455322][ T5867] name failslab, interval 1, probability 0, space 0, times 0 [ 54.459187][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.2.158 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 54.462001][ T5867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.464819][ T5867] Call Trace: [ 54.465714][ T5867] [ 54.466511][ T5867] dump_stack_lvl+0x16c/0x1f0 [ 54.467093][ T5394] usb 5-1: device descriptor read/64, error -71 [ 54.467820][ T5867] should_fail_ex+0x497/0x5b0 [ 54.470734][ T5867] ? fs_reclaim_acquire+0xae/0x160 [ 54.472092][ T5867] should_failslab+0xc2/0x120 [ 54.473350][ T5867] __kmalloc_noprof+0xcb/0x410 [ 54.474639][ T5867] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 54.476133][ T5867] tomoyo_realpath_from_path+0xbf/0x710 [ 54.477597][ T5867] ? tomoyo_path_number_perm+0x232/0x5b0 [ 54.479093][ T5867] tomoyo_path_number_perm+0x245/0x5b0 [ 54.480538][ T5867] ? tomoyo_path_number_perm+0x232/0x5b0 [ 54.482049][ T5867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.483649][ T5867] ? trace_lock_acquire+0x14a/0x1d0 [ 54.485029][ T5867] ? lock_acquire+0x2f/0xb0 [ 54.486247][ T5867] ? __fget_files+0x40/0x3f0 [ 54.487479][ T5867] ? __fget_files+0x244/0x3f0 [ 54.488740][ T5867] security_file_ioctl_compat+0x9b/0x240 [ 54.490241][ T5867] __do_compat_sys_ioctl+0x52/0x2b0 [ 54.491632][ T5867] __do_fast_syscall_32+0x73/0x120 [ 54.493004][ T5867] do_fast_syscall_32+0x32/0x80 [ 54.494315][ T5867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.495992][ T5867] RIP: 0023:0xf7f63579 [ 54.497078][ T5867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.502245][ T5867] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 54.502260][ T5867] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000890b [ 54.502266][ T5867] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.502272][ T5867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.502278][ T5867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 54.502285][ T5867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.502297][ T5867] [ 54.517647][ T5867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.717007][ T5394] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.816605][ T5882] capability: warning: `syz.3.163' uses deprecated v2 capabilities in a way that may be insecure [ 54.847068][ T5394] usb 5-1: device descriptor read/64, error -71 [ 54.963940][ T5394] usb usb5-port1: attempt power cycle [ 54.977309][ T5887] IPv6: sit1: Disabled Multicast RS [ 55.001093][ T5893] FAULT_INJECTION: forcing a failure. [ 55.001093][ T5893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.004535][ T5893] CPU: 2 UID: 0 PID: 5893 Comm: syz.1.166 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 55.007298][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.010101][ T5893] Call Trace: [ 55.010989][ T5893] [ 55.011776][ T5893] dump_stack_lvl+0x16c/0x1f0 [ 55.013027][ T5893] should_fail_ex+0x497/0x5b0 [ 55.014292][ T5893] _copy_from_user+0x30/0xf0 [ 55.015520][ T5893] __sys_bpf+0x215/0x5780 [ 55.016675][ T5893] ? ksys_write+0x21e/0x260 [ 55.017892][ T5893] ? __pfx___sys_bpf+0x10/0x10 [ 55.019160][ T5893] ? vfs_write+0x14d/0x1140 [ 55.020374][ T5893] ? __mutex_unlock_slowpath+0x164/0x650 [ 55.021867][ T5893] ? fput+0x30/0x390 [ 55.022929][ T5893] ? ksys_write+0x1ad/0x260 [ 55.024132][ T5893] ? __pfx_ksys_write+0x10/0x10 [ 55.025416][ T5893] __ia32_sys_bpf+0x76/0xe0 [ 55.026632][ T5893] __do_fast_syscall_32+0x73/0x120 [ 55.028164][ T5893] do_fast_syscall_32+0x32/0x80 [ 55.029456][ T5893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.031123][ T5893] RIP: 0023:0xf7fc3579 [ 55.032203][ T5893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.037247][ T5893] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 55.039431][ T5893] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200004c0 [ 55.041510][ T5893] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.043588][ T5893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.045657][ T5893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 55.047733][ T5893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.049809][ T5893] [ 55.128006][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 55.132482][ T5901] overlayfs: missing 'lowerdir' [ 55.317302][ T5394] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.338113][ T5394] usb 5-1: device descriptor read/8, error -71 [ 55.577167][ T5394] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.598248][ T5394] usb 5-1: device descriptor read/8, error -71 [ 55.717940][ T5394] usb usb5-port1: unable to enumerate USB device [ 56.328779][ T5362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.331327][ T5362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.333519][ T5362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.337072][ T5362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.339342][ T5362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.341581][ T5362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.357526][ T5923] FAULT_INJECTION: forcing a failure. [ 56.357526][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 56.362046][ T5923] CPU: 2 UID: 0 PID: 5923 Comm: syz.3.179 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 56.364775][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.367564][ T5923] Call Trace: [ 56.368439][ T5923] [ 56.369218][ T5923] dump_stack_lvl+0x16c/0x1f0 [ 56.370467][ T5923] should_fail_ex+0x497/0x5b0 [ 56.371704][ T5923] ? fs_reclaim_acquire+0xae/0x160 [ 56.373045][ T5923] should_failslab+0xc2/0x120 [ 56.374294][ T5923] __kmalloc_noprof+0xcb/0x410 [ 56.375554][ T5923] ext4_find_extent+0x848/0xa60 [ 56.376844][ T5923] ext4_ext_map_blocks+0x28b/0x5a30 [ 56.378221][ T5923] ? __pfx___lock_acquire+0x10/0x10 [ 56.379588][ T5923] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 56.381066][ T5923] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.382553][ T5923] ? rwsem_read_trylock+0x12d/0x250 [ 56.383906][ T5923] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 56.385339][ T5923] ? ext4_map_blocks+0x2a7/0x1340 [ 56.386666][ T5923] ? down_read+0xc9/0x330 [ 56.387806][ T5923] ? __pfx_down_read+0x10/0x10 [ 56.389056][ T5923] ext4_map_query_blocks+0x82/0x2d0 [ 56.390419][ T5923] ext4_map_blocks+0x2b7/0x1340 [ 56.391700][ T5923] ? __pfx_ext4_map_blocks+0x10/0x10 [ 56.393070][ T5923] ? __pfx_stack_trace_save+0x10/0x10 [ 56.394476][ T5923] ? jbd2_transaction_committed+0x4e/0x70 [ 56.395962][ T5923] ? ext4_set_iomap+0xa44/0xc90 [ 56.397237][ T5923] ext4_iomap_begin_report+0x2b1/0x4a0 [ 56.398663][ T5923] ? __pfx_ext4_iomap_begin_report+0x10/0x10 [ 56.400222][ T5923] ? __pfx_ext4_iomap_begin_report+0x10/0x10 [ 56.401790][ T5923] iomap_iter+0x61f/0x1080 [ 56.402960][ T5923] iomap_seek_hole+0x185/0x2e0 [ 56.404210][ T5923] ? __pfx_iomap_seek_hole+0x10/0x10 [ 56.405595][ T5923] ? __pfx_down_read+0x10/0x10 [ 56.406854][ T5923] ? __fget_files+0x244/0x3f0 [ 56.408082][ T5923] ext4_llseek+0x210/0x2f0 [ 56.409255][ T5923] ksys_lseek+0x144/0x1b0 [ 56.410395][ T5923] __do_fast_syscall_32+0x73/0x120 [ 56.411733][ T5923] do_fast_syscall_32+0x32/0x80 [ 56.413010][ T5923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.414663][ T5923] RIP: 0023:0xf7fc0579 [ 56.415729][ T5923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.420673][ T5923] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000013 [ 56.422852][ T5923] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000600 [ 56.424897][ T5923] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.426949][ T5923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.428991][ T5923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.431056][ T5923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.433249][ T5923] [ 56.592949][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 56.721670][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.726889][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.728858][ T5924] bridge_slave_0: entered allmulticast mode [ 56.730889][ T5924] bridge_slave_0: entered promiscuous mode [ 56.733463][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.735339][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.737848][ T5924] bridge_slave_1: entered allmulticast mode [ 56.739826][ T5924] bridge_slave_1: entered promiscuous mode [ 56.759795][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.763395][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.783782][ T5924] team0: Port device team_slave_0 added [ 56.786882][ T5924] team0: Port device team_slave_1 added [ 56.851428][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.853277][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.860021][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.863549][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.865383][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.873062][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.897641][ T5924] hsr_slave_0: entered promiscuous mode [ 56.900882][ T5924] hsr_slave_1: entered promiscuous mode [ 56.903088][ T5924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.905067][ T5924] Cannot create hsr debugfs directory [ 56.976249][ T5924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.135646][ T5924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.186735][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 57.190896][ T5940] overlayfs: missing 'lowerdir' [ 57.265576][ T5924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.397944][ T5924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.477018][ T1187] bridge_slave_1: left allmulticast mode [ 57.479730][ T1187] bridge_slave_1: left promiscuous mode [ 57.482427][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.490304][ T1187] bridge_slave_0: left allmulticast mode [ 57.491826][ T1187] bridge_slave_0: left promiscuous mode [ 57.493320][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.834197][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.841893][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.848201][ T1187] bond0 (unregistering): Released all slaves [ 57.918423][ T5924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.925118][ T5924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.942564][ T5924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.950713][ T5924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.075683][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.118061][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.124365][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.126257][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.130859][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.132747][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.191484][ T1187] hsr_slave_0: left promiscuous mode [ 58.194306][ T1187] hsr_slave_1: left promiscuous mode [ 58.198045][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.200117][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.203884][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.205828][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.234256][ T1187] veth1_macvtap: left promiscuous mode [ 58.235893][ T1187] veth0_macvtap: left promiscuous mode [ 58.238415][ T1187] veth1_vlan: left promiscuous mode [ 58.240078][ T1187] veth0_vlan: left promiscuous mode [ 58.377484][ T5362] Bluetooth: hci1: command tx timeout [ 58.736777][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 58.791970][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 59.201914][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.225628][ T5924] veth0_vlan: entered promiscuous mode [ 59.229772][ T5924] veth1_vlan: entered promiscuous mode [ 59.240184][ T5924] veth0_macvtap: entered promiscuous mode [ 59.243171][ T5924] veth1_macvtap: entered promiscuous mode [ 59.249800][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.252543][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.255084][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.258462][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.261026][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.263764][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.267231][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.271234][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.273998][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.276554][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.279635][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.282214][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.284923][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.288878][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.293220][ T5924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.295530][ T5924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.297911][ T5924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.300153][ T5924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.329003][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.331053][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.341661][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.343712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.374921][ T5959] FAULT_INJECTION: forcing a failure. [ 59.374921][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.378415][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.2.178 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 59.381151][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.383928][ T5959] Call Trace: [ 59.384819][ T5959] [ 59.385595][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 59.386839][ T5959] should_fail_ex+0x497/0x5b0 [ 59.388077][ T5959] _copy_from_iter+0x29b/0x13e0 [ 59.389344][ T5959] ? __pfx__copy_from_iter+0x10/0x10 [ 59.390741][ T5959] ? __virt_addr_valid+0x1a4/0x590 [ 59.392087][ T5959] ? __virt_addr_valid+0x5e/0x590 [ 59.393412][ T5959] ? __phys_addr_symbol+0x30/0x80 [ 59.394745][ T5959] ? __check_object_size+0x488/0x710 [ 59.396137][ T5959] netlink_sendmsg+0x813/0xd70 [ 59.397397][ T5959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.398789][ T5959] ? lock_acquire+0x2f/0xb0 [ 59.399991][ T5959] ____sys_sendmsg+0x9ae/0xb40 [ 59.401246][ T5959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.402651][ T5959] ? get_compat_msghdr+0x11b/0x170 [ 59.403990][ T5959] ? __pfx___lock_acquire+0x10/0x10 [ 59.405360][ T5959] ___sys_sendmsg+0x135/0x1e0 [ 59.406606][ T5959] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.407975][ T5959] ? lock_acquire+0x2f/0xb0 [ 59.409175][ T5959] ? __fget_files+0x40/0x3f0 [ 59.410401][ T5959] ? fdget+0x176/0x210 [ 59.411471][ T5959] __sys_sendmsg+0x117/0x1f0 [ 59.412690][ T5959] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.414042][ T5959] ? __fget_files+0x244/0x3f0 [ 59.415278][ T5959] __do_fast_syscall_32+0x73/0x120 [ 59.416621][ T5959] do_fast_syscall_32+0x32/0x80 [ 59.417993][ T5959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.419654][ T5959] RIP: 0023:0xf7f08579 [ 59.420730][ T5959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 59.425736][ T5959] RSP: 002b:00000000f568656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 59.427892][ T5959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 59.429949][ T5959] RDX: 0000000004008810 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.432001][ T5959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.434060][ T5959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 59.436124][ T5959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.436138][ T5959] [ 59.620712][ T5976] warning: `syz.2.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.641377][ T5977] FAULT_INJECTION: forcing a failure. [ 59.641377][ T5977] name failslab, interval 1, probability 0, space 0, times 0 [ 59.644889][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.1.189 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 59.647668][ T5977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.651305][ T5977] Call Trace: [ 59.652441][ T5977] [ 59.653236][ T5977] dump_stack_lvl+0x16c/0x1f0 [ 59.654513][ T5977] should_fail_ex+0x497/0x5b0 [ 59.655764][ T5977] ? fs_reclaim_acquire+0xae/0x160 [ 59.657113][ T5977] should_failslab+0xc2/0x120 [ 59.658366][ T5977] __kmalloc_node_noprof+0xd1/0x440 [ 59.659745][ T5977] ? alloc_slab_obj_exts+0x41/0xa0 [ 59.661096][ T5977] alloc_slab_obj_exts+0x41/0xa0 [ 59.662431][ T5977] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 59.663990][ T5977] __kmalloc_node_noprof+0x3c0/0x440 [ 59.665376][ T5977] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 59.666826][ T5977] __kvmalloc_node_noprof+0xad/0x1a0 [ 59.668639][ T5977] alloc_netdev_mqs+0xc9/0x12a0 [ 59.670309][ T5977] ? __pfx_hsr_dev_setup+0x10/0x10 [ 59.672052][ T5977] rtnl_create_link+0xbed/0xf10 [ 59.673724][ T5977] __rtnl_newlink+0x10b3/0x1920 [ 59.674317][ T5979] hfsplus: unable to parse mount options [ 59.675379][ T5977] ? __pfx___rtnl_newlink+0x10/0x10 [ 59.675416][ T5977] rtnl_newlink+0x67/0xa0 [ 59.680231][ T5977] ? __pfx_rtnl_newlink+0x10/0x10 [ 59.681959][ T5977] rtnetlink_rcv_msg+0x3c7/0xea0 [ 59.683648][ T5977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.685490][ T5977] ? __pfx___dev_queue_xmit+0x10/0x10 [ 59.687321][ T5977] netlink_rcv_skb+0x165/0x410 [ 59.688941][ T5977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.690800][ T5977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.692602][ T5977] ? netlink_deliver_tap+0x1ae/0xcf0 [ 59.694395][ T5977] netlink_unicast+0x53c/0x7f0 [ 59.696025][ T5977] ? __pfx_netlink_unicast+0x10/0x10 [ 59.697953][ T5977] ? __phys_addr_symbol+0x30/0x80 [ 59.699336][ T5977] ? __check_object_size+0x488/0x710 [ 59.700729][ T5977] netlink_sendmsg+0x8b8/0xd70 [ 59.702023][ T5977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.703413][ T5977] ? lock_acquire+0x2f/0xb0 [ 59.704626][ T5977] ____sys_sendmsg+0x9ae/0xb40 [ 59.705890][ T5977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.707276][ T5977] ? get_compat_msghdr+0x11b/0x170 [ 59.708635][ T5977] ? __pfx___lock_acquire+0x10/0x10 [ 59.710016][ T5977] ___sys_sendmsg+0x135/0x1e0 [ 59.711264][ T5977] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.712646][ T5977] ? lock_acquire+0x2f/0xb0 [ 59.713864][ T5977] ? __fget_files+0x40/0x3f0 [ 59.715091][ T5977] ? fdget+0x176/0x210 [ 59.716176][ T5977] __sys_sendmsg+0x117/0x1f0 [ 59.717401][ T5977] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.718751][ T5977] ? __fget_files+0x244/0x3f0 [ 59.720001][ T5977] __do_fast_syscall_32+0x73/0x120 [ 59.721344][ T5977] do_fast_syscall_32+0x32/0x80 [ 59.722655][ T5977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.724307][ T5977] RIP: 0023:0xf7fc3579 [ 59.725384][ T5977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 59.730383][ T5977] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 59.732667][ T5977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 59.734735][ T5977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.736792][ T5977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.738853][ T5977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 59.740905][ T5977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.742998][ T5977] [ 59.758180][ T5977] gretap0: entered promiscuous mode [ 59.765371][ T5977] erspan0: entered promiscuous mode [ 59.960107][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 60.149648][ T5986] overlayfs: missing 'lowerdir' [ 60.313881][ T5991] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.196'. [ 60.457178][ T5362] Bluetooth: hci1: command tx timeout [ 60.832236][ T6010] FAULT_INJECTION: forcing a failure. [ 60.832236][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 60.835616][ T6010] CPU: 2 UID: 0 PID: 6010 Comm: syz.0.202 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 60.838360][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.841165][ T6010] Call Trace: [ 60.842062][ T6010] [ 60.842848][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 60.844113][ T6010] should_fail_ex+0x497/0x5b0 [ 60.845370][ T6010] should_failslab+0xc2/0x120 [ 60.846621][ T6010] __kmalloc_noprof+0xcb/0x410 [ 60.847886][ T6010] ? lock_acquire.part.0+0x11b/0x380 [ 60.849279][ T6010] blk_rq_map_user_iov+0x29d/0x1700 [ 60.850650][ T6010] ? lock_acquire.part.0+0xa1/0x380 [ 60.852017][ T6010] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 60.853483][ T6010] ? find_held_lock+0x2d/0x110 [ 60.854759][ T6010] ? sg_common_write.constprop.0+0xe6a/0x1c60 [ 60.856351][ T6010] ? __pfx_lock_release+0x10/0x10 [ 60.857717][ T6010] ? trace_contention_end+0xea/0x140 [ 60.859111][ T6010] blk_rq_map_user_io+0x206/0x230 [ 60.860433][ T6010] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 60.861892][ T6010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 60.863465][ T6010] ? sg_write+0x403/0xe00 [ 60.864601][ T6010] sg_common_write.constprop.0+0xfbf/0x1c60 [ 60.866162][ T6010] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 60.867826][ T6010] sg_write+0x81c/0xe00 [ 60.868924][ T6010] ? __pfx_sg_write+0x10/0x10 [ 60.870169][ T6010] ? aa_file_perm+0x4d5/0xfe0 [ 60.871407][ T6010] ? find_held_lock+0x2d/0x110 [ 60.872671][ T6010] ? apparmor_file_permission+0x251/0x400 [ 60.874161][ T6010] ? bpf_lsm_file_permission+0x9/0x10 [ 60.875570][ T6010] ? security_file_permission+0x71/0x210 [ 60.877048][ T6010] ? __pfx_sg_write+0x10/0x10 [ 60.878292][ T6010] vfs_write+0x28e/0x1140 [ 60.879430][ T6010] ? __fget_files+0x23a/0x3f0 [ 60.880662][ T6010] ? __pfx_lock_release+0x10/0x10 [ 60.881999][ T6010] ? trace_lock_acquire+0x14a/0x1d0 [ 60.883357][ T6010] ? __pfx_vfs_write+0x10/0x10 [ 60.884610][ T6010] ? lock_acquire+0x2f/0xb0 [ 60.885817][ T6010] ? __fget_files+0x40/0x3f0 [ 60.887031][ T6010] ? __fget_files+0x244/0x3f0 [ 60.888270][ T6010] ksys_write+0x12f/0x260 [ 60.889408][ T6010] ? __pfx_ksys_write+0x10/0x10 [ 60.890695][ T6010] __do_fast_syscall_32+0x73/0x120 [ 60.892045][ T6010] do_fast_syscall_32+0x32/0x80 [ 60.893329][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.895001][ T6010] RIP: 0023:0xf743e579 [ 60.896076][ T6010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.901050][ T6010] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 60.903232][ T6010] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000380 [ 60.905291][ T6010] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.907357][ T6010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.909400][ T6010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.911458][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.913517][ T6010] [ 60.969369][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 60.991598][ T6014] veth3: entered promiscuous mode [ 61.087835][ T6021] FAULT_INJECTION: forcing a failure. [ 61.087835][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 61.101277][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.0.205 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 61.104070][ T6021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.106872][ T6021] Call Trace: [ 61.107768][ T6021] [ 61.108553][ T6021] dump_stack_lvl+0x16c/0x1f0 [ 61.109805][ T6021] should_fail_ex+0x497/0x5b0 [ 61.111054][ T6021] ? fs_reclaim_acquire+0xae/0x160 [ 61.112405][ T6021] should_failslab+0xc2/0x120 [ 61.113654][ T6021] __kmalloc_cache_noprof+0x6b/0x310 [ 61.115052][ T6021] ? ip6_setup_cork+0x22b/0x1360 [ 61.116356][ T6021] ip6_setup_cork+0x22b/0x1360 [ 61.117623][ T6021] ip6_make_skb+0x24b/0x4e0 [ 61.118835][ T6021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.120288][ T6021] ? __pfx_ip6_make_skb+0x10/0x10 [ 61.121633][ T6021] ? find_held_lock+0x2d/0x110 [ 61.122910][ T6021] ? udpv6_sendmsg+0x2500/0x3030 [ 61.124214][ T6021] udpv6_sendmsg+0x2500/0x3030 [ 61.125485][ T6021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.126960][ T6021] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 61.128317][ T6021] ? hlock_class+0x4e/0x130 [ 61.129524][ T6021] ? __lock_acquire+0x163e/0x3ce0 [ 61.130877][ T6021] ? __pfx_aa_sk_perm+0x10/0x10 [ 61.132169][ T6021] ? __import_iovec+0x1fd/0x6e0 [ 61.133454][ T6021] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 61.134815][ T6021] ? inet6_sendmsg+0x105/0x140 [ 61.136076][ T6021] inet6_sendmsg+0x105/0x140 [ 61.137292][ T6021] ____sys_sendmsg+0x649/0xb40 [ 61.138571][ T6021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.139954][ T6021] ? get_compat_msghdr+0x11b/0x170 [ 61.141299][ T6021] ? __pfx___lock_acquire+0x10/0x10 [ 61.142693][ T6021] ___sys_sendmsg+0x135/0x1e0 [ 61.143945][ T6021] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.145488][ T6021] ? lock_acquire+0x2f/0xb0 [ 61.146713][ T6021] ? __fget_files+0x40/0x3f0 [ 61.147946][ T6021] ? __pfx___might_resched+0x10/0x10 [ 61.149340][ T6021] ? fdget+0x176/0x210 [ 61.150426][ T6021] __sys_sendmmsg+0x2a5/0x450 [ 61.151680][ T6021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.153060][ T6021] ? vfs_write+0x14d/0x1140 [ 61.154273][ T6021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.155854][ T6021] ? fput+0x30/0x390 [ 61.156893][ T6021] ? ksys_write+0x1ad/0x260 [ 61.158115][ T6021] ? __pfx_ksys_write+0x10/0x10 [ 61.159401][ T6021] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 61.160892][ T6021] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 61.162638][ T6021] __do_fast_syscall_32+0x73/0x120 [ 61.164000][ T6021] do_fast_syscall_32+0x32/0x80 [ 61.165290][ T6021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.166943][ T6021] RIP: 0023:0xf743e579 [ 61.168020][ T6021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.173300][ T6021] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 61.175476][ T6021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002940 [ 61.177532][ T6021] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.179592][ T6021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.181650][ T6021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.183709][ T6021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.185769][ T6021] [ 62.537009][ T5362] Bluetooth: hci1: command tx timeout [ 62.796828][ T6030] hfsplus: unable to parse mount options [ 62.890029][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 62.892440][ T6038] FAULT_INJECTION: forcing a failure. [ 62.892440][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 62.895803][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.1.212 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 62.898566][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.901342][ T6038] Call Trace: [ 62.902235][ T6038] [ 62.903017][ T6038] dump_stack_lvl+0x16c/0x1f0 [ 62.904255][ T6038] should_fail_ex+0x497/0x5b0 [ 62.905491][ T6038] ? fs_reclaim_acquire+0xae/0x160 [ 62.906840][ T6038] should_failslab+0xc2/0x120 [ 62.908090][ T6038] __kmalloc_node_noprof+0xd1/0x440 [ 62.909445][ T6038] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 62.910882][ T6038] __kvmalloc_node_noprof+0xad/0x1a0 [ 62.912261][ T6038] alloc_netdev_mqs+0xa97/0x12a0 [ 62.913570][ T6038] rtnl_create_link+0xbed/0xf10 [ 62.914849][ T6038] __rtnl_newlink+0x10b3/0x1920 [ 62.916137][ T6038] ? __pfx___rtnl_newlink+0x10/0x10 [ 62.917520][ T6038] rtnl_newlink+0x67/0xa0 [ 62.918670][ T6038] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.920000][ T6038] rtnetlink_rcv_msg+0x3c7/0xea0 [ 62.921310][ T6038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.922756][ T6038] ? __pfx___dev_queue_xmit+0x10/0x10 [ 62.924169][ T6038] netlink_rcv_skb+0x165/0x410 [ 62.925435][ T6038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.926882][ T6038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.928278][ T6038] ? netlink_deliver_tap+0x1ae/0xcf0 [ 62.929675][ T6038] netlink_unicast+0x53c/0x7f0 [ 62.931109][ T6038] ? __pfx_netlink_unicast+0x10/0x10 [ 62.932482][ T6038] ? __phys_addr_symbol+0x30/0x80 [ 62.933801][ T6038] ? __check_object_size+0x488/0x710 [ 62.935185][ T6038] netlink_sendmsg+0x8b8/0xd70 [ 62.936433][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.937831][ T6038] ? lock_acquire+0x2f/0xb0 [ 62.939029][ T6038] ____sys_sendmsg+0x9ae/0xb40 [ 62.940288][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.941686][ T6038] ? get_compat_msghdr+0x11b/0x170 [ 62.943036][ T6038] ? __pfx___lock_acquire+0x10/0x10 [ 62.944406][ T6038] ___sys_sendmsg+0x135/0x1e0 [ 62.945662][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.947031][ T6038] ? lock_acquire+0x2f/0xb0 [ 62.948237][ T6038] ? __fget_files+0x40/0x3f0 [ 62.949460][ T6038] ? fdget+0x176/0x210 [ 62.950602][ T6038] __sys_sendmsg+0x117/0x1f0 [ 62.951814][ T6038] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.953156][ T6038] ? __fget_files+0x244/0x3f0 [ 62.954405][ T6038] __do_fast_syscall_32+0x73/0x120 [ 62.955750][ T6038] do_fast_syscall_32+0x32/0x80 [ 62.957024][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.958672][ T6038] RIP: 0023:0xf7fc3579 [ 62.959747][ T6038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.964726][ T6038] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 62.966885][ T6038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 62.968941][ T6038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.971007][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.973060][ T6038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.975109][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.977158][ T6038] [ 63.043497][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 63.299201][ T6059] overlayfs: missing 'lowerdir' [ 63.477009][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.627084][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 63.630316][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.641097][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.644020][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.652977][ T35] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 63.655343][ T35] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 63.661521][ T35] usb 7-1: Product: syz [ 63.664349][ T35] usb 7-1: Manufacturer: syz [ 63.667505][ T35] usb 7-1: SerialNumber: syz [ 63.673520][ T6055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.678099][ T35] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input5 [ 63.697877][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 63.936379][ T5236] usb 7-1: USB disconnect, device number 2 [ 63.988979][ T6055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.994037][ T5236] appletouch 7-1:1.0: input: appletouch disconnected [ 64.617377][ T5362] Bluetooth: hci1: command tx timeout [ 64.793704][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 65.597481][ T6079] hfsplus: unable to parse mount options [ 65.898186][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 65.946142][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 67.027132][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.047078][ T5394] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.177094][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 67.180222][ T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 67.182352][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.184830][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.189318][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.191868][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.195189][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.197082][ T5394] usb 7-1: Using ep0 maxpacket: 8 [ 67.197984][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.205385][ T5394] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 67.207597][ T5394] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.210109][ T5394] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.212617][ T5394] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.219665][ T5394] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.223261][ T5394] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.225844][ T5394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.410981][ T56] usb 8-1: usb_control_msg returned -32 [ 67.412527][ T56] usbtmc 8-1:16.0: can't read capabilities [ 67.434238][ T5394] usb 7-1: usb_control_msg returned -32 [ 67.435832][ T5394] usbtmc 7-1:16.0: can't read capabilities [ 67.767688][ T6106] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 67.786009][ T6107] FAULT_INJECTION: forcing a failure. [ 67.786009][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 67.789343][ T6107] CPU: 3 UID: 0 PID: 6107 Comm: syz.2.230 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 67.792096][ T6107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.794872][ T6107] Call Trace: [ 67.795751][ T6107] [ 67.796534][ T6107] dump_stack_lvl+0x16c/0x1f0 [ 67.797778][ T6107] should_fail_ex+0x497/0x5b0 [ 67.799019][ T6107] ? fs_reclaim_acquire+0xae/0x160 [ 67.800360][ T6107] should_failslab+0xc2/0x120 [ 67.801619][ T6107] __kmalloc_cache_noprof+0x6b/0x310 [ 67.803012][ T6107] ? usbtmc_read+0x12d/0x12f0 [ 67.804255][ T6107] ? __pfx_usbtmc_read+0x10/0x10 [ 67.805557][ T6107] usbtmc_read+0x12d/0x12f0 [ 67.806761][ T6107] ? copy_compat_iovec_from_user+0x138/0x180 [ 67.808331][ T6107] ? import_ubuf+0x1a4/0x200 [ 67.809552][ T6107] ? __pfx_usbtmc_read+0x10/0x10 [ 67.810858][ T6107] ? bpf_lsm_file_permission+0x9/0x10 [ 67.812260][ T6107] ? security_file_permission+0x71/0x210 [ 67.813734][ T6107] ? __pfx_usbtmc_read+0x10/0x10 [ 67.815028][ T6107] vfs_readv+0x6bf/0x890 [ 67.816141][ T6107] ? find_held_lock+0x2d/0x110 [ 67.817397][ T6107] ? __pfx_vfs_readv+0x10/0x10 [ 67.818651][ T6107] ? find_held_lock+0x2d/0x110 [ 67.819907][ T6107] ? __pfx_lock_release+0x10/0x10 [ 67.821217][ T6107] ? trace_lock_acquire+0x14a/0x1d0 [ 67.822582][ T6107] ? __fget_files+0x244/0x3f0 [ 67.823813][ T6107] ? do_readv+0x137/0x370 [ 67.824944][ T6107] do_readv+0x137/0x370 [ 67.826045][ T6107] ? __pfx_do_readv+0x10/0x10 [ 67.827275][ T6107] __do_fast_syscall_32+0x73/0x120 [ 67.828605][ T6107] do_fast_syscall_32+0x32/0x80 [ 67.829880][ T6107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.831517][ T6107] RIP: 0023:0xf7f08579 [ 67.832586][ T6107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.837541][ T6107] RSP: 002b:00000000f566556c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 67.839696][ T6107] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000400 [ 67.841752][ T6107] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.843794][ T6107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.845845][ T6107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.847882][ T6107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.849941][ T6107] [ 68.108653][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 68.457075][ T1998] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.607063][ T1998] usb 6-1: Using ep0 maxpacket: 8 [ 68.609676][ T1998] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 68.611823][ T1998] usb 6-1: config 16 has an invalid descriptor of length 238, skipping remainder of the config [ 68.614551][ T1998] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.618334][ T1998] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.620725][ T1998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.956459][ T6117] mkiss: ax0: crc mode is auto. [ 68.964645][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 69.020564][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 69.023089][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.025851][ T6118] batadv_slave_0: entered promiscuous mode [ 69.542386][ T6125] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 69.771670][ T1998] usb 8-1: USB disconnect, device number 4 [ 69.815306][ T5423] usb 7-1: USB disconnect, device number 3 [ 70.709152][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.711001][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.228377][ T5392] usb 6-1: USB disconnect, device number 7 [ 71.276504][ T6130] hfsplus: unable to parse mount options [ 71.414472][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 72.242473][ T6157] FAULT_INJECTION: forcing a failure. [ 72.242473][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 72.245757][ T6157] CPU: 2 UID: 0 PID: 6157 Comm: syz.3.256 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 72.248483][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.251250][ T6157] Call Trace: [ 72.252109][ T6157] [ 72.252874][ T6157] dump_stack_lvl+0x16c/0x1f0 [ 72.254124][ T6157] should_fail_ex+0x497/0x5b0 [ 72.255367][ T6157] should_failslab+0xc2/0x120 [ 72.256614][ T6157] __kmalloc_noprof+0xcb/0x410 [ 72.257905][ T6157] ? kasan_save_track+0x14/0x30 [ 72.259181][ T6157] nsim_fib_event_nb+0x448/0xec0 [ 72.260484][ T6157] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 72.261975][ T6157] ? rcu_is_watching+0x12/0xc0 [ 72.263230][ T6157] notifier_call_chain+0xb9/0x410 [ 72.264547][ T6157] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 72.265978][ T6157] atomic_notifier_call_chain+0x71/0x1c0 [ 72.267445][ T6157] call_fib_notifiers+0x33/0x70 [ 72.268727][ T6157] call_fib6_multipath_entry_notifiers+0x104/0x160 [ 72.270422][ T6157] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 72.272228][ T6157] ? __pfx_lock_release+0x10/0x10 [ 72.273554][ T6157] ip6_route_multipath_add+0xb79/0x2190 [ 72.275019][ T6157] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 72.276601][ T6157] ? __mutex_trylock_common+0xea/0x250 [ 72.278030][ T6157] ? __pfx___mutex_trylock_common+0x10/0x10 [ 72.279572][ T6157] ? inet6_rtm_newroute+0xe5/0x170 [ 72.280910][ T6157] inet6_rtm_newroute+0xe5/0x170 [ 72.282232][ T6157] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 72.283686][ T6157] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 72.285130][ T6157] rtnetlink_rcv_msg+0x3c7/0xea0 [ 72.286438][ T6157] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.287858][ T6157] ? __pfx___dev_queue_xmit+0x10/0x10 [ 72.289262][ T6157] netlink_rcv_skb+0x165/0x410 [ 72.290525][ T6157] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.291945][ T6157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.293328][ T6157] ? netlink_deliver_tap+0x1ae/0xcf0 [ 72.294725][ T6157] netlink_unicast+0x53c/0x7f0 [ 72.295979][ T6157] ? __pfx_netlink_unicast+0x10/0x10 [ 72.297350][ T6157] ? __phys_addr_symbol+0x30/0x80 [ 72.298685][ T6157] ? __check_object_size+0x488/0x710 [ 72.300068][ T6157] netlink_sendmsg+0x8b8/0xd70 [ 72.301342][ T6157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.302730][ T6157] ? lock_acquire+0x2f/0xb0 [ 72.303927][ T6157] ____sys_sendmsg+0x9ae/0xb40 [ 72.305181][ T6157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.306577][ T6157] ? get_compat_msghdr+0x11b/0x170 [ 72.308082][ T6157] ? __pfx___lock_acquire+0x10/0x10 [ 72.309534][ T6157] ___sys_sendmsg+0x135/0x1e0 [ 72.310797][ T6157] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.312178][ T6157] ? lock_acquire+0x2f/0xb0 [ 72.313373][ T6157] ? __fget_files+0x40/0x3f0 [ 72.314606][ T6157] ? fdget+0x176/0x210 [ 72.315681][ T6157] __sys_sendmsg+0x117/0x1f0 [ 72.316913][ T6157] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.318274][ T6157] ? __fget_files+0x244/0x3f0 [ 72.319541][ T6157] __do_fast_syscall_32+0x73/0x120 [ 72.320894][ T6157] do_fast_syscall_32+0x32/0x80 [ 72.322219][ T6157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.323882][ T6157] RIP: 0023:0xf7fc0579 [ 72.324958][ T6157] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.329989][ T6157] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 72.332188][ T6157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 72.334287][ T6157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.336356][ T6157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.338445][ T6157] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.340521][ T6157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.342628][ T6157] [ 72.563411][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 72.607687][ T6166] FAULT_INJECTION: forcing a failure. [ 72.607687][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 72.611097][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.2.250 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 72.613841][ T6166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.616635][ T6166] Call Trace: [ 72.617521][ T6166] [ 72.618310][ T6166] dump_stack_lvl+0x16c/0x1f0 [ 72.619565][ T6166] should_fail_ex+0x497/0x5b0 [ 72.620809][ T6166] ? fs_reclaim_acquire+0xae/0x160 [ 72.622176][ T6166] should_failslab+0xc2/0x120 [ 72.623423][ T6166] kmem_cache_alloc_node_noprof+0x71/0x310 [ 72.624964][ T6166] ? __alloc_skb+0x2b3/0x380 [ 72.626202][ T6166] __alloc_skb+0x2b3/0x380 [ 72.627500][ T6166] ? __pfx___alloc_skb+0x10/0x10 [ 72.628884][ T6166] br_vlan_notify+0x15b/0x8c0 [ 72.630137][ T6166] __br_vlan_set_default_pvid+0xf6f/0x1130 [ 72.631665][ T6166] ? unwind_get_return_address+0x59/0xa0 [ 72.633116][ T6166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.634666][ T6166] ? __pfx___br_vlan_set_default_pvid+0x10/0x10 [ 72.636295][ T6166] ? __nla_validate_parse+0x605/0x2b10 [ 72.637731][ T6166] br_changelink+0x4ed/0x17b0 [ 72.638973][ T6166] ? __pfx_br_changelink+0x10/0x10 [ 72.640313][ T6166] ? __pfx_stack_trace_save+0x10/0x10 [ 72.641746][ T6166] ? stack_depot_save_flags+0x28/0x900 [ 72.643181][ T6166] ? find_held_lock+0x2d/0x110 [ 72.644449][ T6166] ? __nla_parse+0x40/0x60 [ 72.645632][ T6166] ? __pfx_br_changelink+0x10/0x10 [ 72.646980][ T6166] __rtnl_newlink+0xb5d/0x1920 [ 72.648273][ T6166] ? __pfx___rtnl_newlink+0x10/0x10 [ 72.649666][ T6166] rtnl_newlink+0x67/0xa0 [ 72.650815][ T6166] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.652150][ T6166] rtnetlink_rcv_msg+0x3c7/0xea0 [ 72.653469][ T6166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.654916][ T6166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 72.656347][ T6166] netlink_rcv_skb+0x165/0x410 [ 72.657633][ T6166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.659077][ T6166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.660484][ T6166] ? netlink_deliver_tap+0x1ae/0xcf0 [ 72.661905][ T6166] netlink_unicast+0x53c/0x7f0 [ 72.663176][ T6166] ? __pfx_netlink_unicast+0x10/0x10 [ 72.664575][ T6166] ? __phys_addr_symbol+0x30/0x80 [ 72.665910][ T6166] ? __check_object_size+0x488/0x710 [ 72.667303][ T6166] netlink_sendmsg+0x8b8/0xd70 [ 72.668572][ T6166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.669974][ T6166] ? lock_acquire+0x2f/0xb0 [ 72.671172][ T6166] ____sys_sendmsg+0x9ae/0xb40 [ 72.672441][ T6166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.673839][ T6166] ? get_compat_msghdr+0x11b/0x170 [ 72.675188][ T6166] ? __pfx___lock_acquire+0x10/0x10 [ 72.676550][ T6166] ___sys_sendmsg+0x135/0x1e0 [ 72.677796][ T6166] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.679164][ T6166] ? lock_acquire+0x2f/0xb0 [ 72.680365][ T6166] ? __fget_files+0x40/0x3f0 [ 72.681617][ T6166] ? fdget+0x176/0x210 [ 72.682700][ T6166] __sys_sendmsg+0x117/0x1f0 [ 72.683924][ T6166] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.685271][ T6166] ? __fget_files+0x244/0x3f0 [ 72.686526][ T6166] __do_fast_syscall_32+0x73/0x120 [ 72.687877][ T6166] do_fast_syscall_32+0x32/0x80 [ 72.689160][ T6166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.690825][ T6166] RIP: 0023:0xf7f08579 [ 72.691875][ T6166] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.696838][ T6166] RSP: 002b:00000000f568656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 72.699004][ T6166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 72.701040][ T6166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.703098][ T6166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.705144][ T6166] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.707194][ T6166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.709250][ T6166] [ 72.745311][ T6171] hfsplus: unable to parse mount options [ 72.790115][ T6173] raw_sendmsg: syz.3.263 forgot to set AF_INET. Fix it! [ 72.864908][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 73.835762][ T6191] FAULT_INJECTION: forcing a failure. [ 73.835762][ T6191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.847193][ T6191] CPU: 3 UID: 0 PID: 6191 Comm: syz.3.259 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 73.849979][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.852780][ T6191] Call Trace: [ 73.853679][ T6191] [ 73.854468][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 73.855725][ T6191] should_fail_ex+0x497/0x5b0 [ 73.856974][ T6191] ? fs_reclaim_acquire+0xae/0x160 [ 73.858374][ T6191] should_fail_alloc_page+0xe7/0x130 [ 73.859766][ T6191] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 73.861386][ T6191] __alloc_pages_noprof+0x190/0x25c0 [ 73.862787][ T6191] ? hlock_class+0x4e/0x130 [ 73.863996][ T6191] ? __pfx_mark_lock+0x10/0x10 [ 73.865259][ T6191] ? hlock_class+0x4e/0x130 [ 73.866461][ T6191] ? __lock_acquire+0xbdd/0x3ce0 [ 73.867769][ T6191] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 73.869263][ T6191] ? hlock_class+0x4e/0x130 [ 73.870469][ T6191] ? mark_lock+0xb5/0xc60 [ 73.871611][ T6191] ? __pfx___lock_acquire+0x10/0x10 [ 73.872993][ T6191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.874620][ T6191] ? policy_nodemask+0xea/0x4e0 [ 73.875997][ T6191] alloc_pages_mpol_noprof+0x2c9/0x610 [ 73.877431][ T6191] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 73.879023][ T6191] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.880503][ T6191] folio_alloc_mpol_noprof+0x36/0xd0 [ 73.881924][ T6191] vma_alloc_folio_noprof+0xee/0x1b0 [ 73.883316][ T6191] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 73.884873][ T6191] ? find_held_lock+0x2d/0x110 [ 73.886145][ T6191] do_pte_missing+0x2010/0x3e50 [ 73.887438][ T6191] __handle_mm_fault+0x100a/0x2a10 [ 73.888797][ T6191] ? __pfx_mt_find+0x10/0x10 [ 73.890033][ T6191] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.891513][ T6191] ? __pfx___handle_mm_fault+0x10/0x10 [ 73.892956][ T6191] ? find_vma+0xc0/0x140 [ 73.894086][ T6191] ? __pfx_find_vma+0x10/0x10 [ 73.895329][ T6191] handle_mm_fault+0x3fa/0xaa0 [ 73.896601][ T6191] do_user_addr_fault+0x7a3/0x13f0 [ 73.898050][ T6191] exc_page_fault+0x5c/0xc0 [ 73.899266][ T6191] asm_exc_page_fault+0x26/0x30 [ 73.900556][ T6191] RIP: 0010:__put_user_4+0x11/0x20 [ 73.901937][ T6191] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 73.906932][ T6191] RSP: 0018:ffffc900070a7860 EFLAGS: 00050206 [ 73.908532][ T6191] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000200012c0 [ 73.910604][ T6191] RDX: ffff88801f87c880 RSI: ffffffff88e4eba6 RDI: ffffffff8bb12020 [ 73.912663][ T6191] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20398a9 [ 73.914733][ T6191] R10: ffffffff901cc54f R11: 0000000000000000 R12: 00000000200012c0 [ 73.916791][ T6191] R13: 1ffff92000e14f0d R14: 000000000000541b R15: 0000000000000001 [ 73.918869][ T6191] ? sk_ioctl+0x1c6/0x360 [ 73.920017][ T6191] sk_ioctl+0x1d2/0x360 [ 73.921117][ T6191] ? __pfx_sk_ioctl+0x10/0x10 [ 73.922389][ T6191] inet_ioctl+0x1ef/0x3f0 [ 73.923537][ T6191] ? __pfx_mark_lock+0x10/0x10 [ 73.924804][ T6191] ? __pfx_inet_ioctl+0x10/0x10 [ 73.926133][ T6191] ? kasan_save_stack+0x33/0x60 [ 73.927432][ T6191] ? kasan_save_track+0x14/0x30 [ 73.928711][ T6191] ? kasan_save_free_info+0x3b/0x60 [ 73.930080][ T6191] ? __kasan_slab_free+0x51/0x70 [ 73.931376][ T6191] ? kfree+0x14f/0x4b0 [ 73.932466][ T6191] ? __pfx_mark_lock+0x10/0x10 [ 73.933746][ T6191] sock_do_ioctl+0x116/0x280 [ 73.934978][ T6191] ? __pfx_sock_do_ioctl+0x10/0x10 [ 73.936324][ T6191] ? find_held_lock+0x2d/0x110 [ 73.937594][ T6191] sock_ioctl+0x228/0x6c0 [ 73.938736][ T6191] ? __pfx_sock_ioctl+0x10/0x10 [ 73.940015][ T6191] ? tomoyo_path_number_perm+0x467/0x5b0 [ 73.941505][ T6191] ? tomoyo_path_number_perm+0x190/0x5b0 [ 73.942989][ T6191] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.944561][ T6191] ? __pfx_sock_ioctl+0x10/0x10 [ 73.945853][ T6191] do_vfs_ioctl+0x682/0x1950 [ 73.947075][ T6191] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.948412][ T6191] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.949789][ T6191] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.951322][ T6191] ? trace_lock_acquire+0x14a/0x1d0 [ 73.952684][ T6191] ? bpf_send_signal_common+0x2b5/0x3a0 [ 73.954148][ T6191] ? __fget_files+0x244/0x3f0 [ 73.955390][ T6191] __do_compat_sys_ioctl+0x13b/0x2b0 [ 73.956778][ T6191] __do_fast_syscall_32+0x73/0x120 [ 73.958132][ T6191] do_fast_syscall_32+0x32/0x80 [ 73.959418][ T6191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.961157][ T6191] RIP: 0023:0xf7fc0579 [ 73.962262][ T6191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.967259][ T6191] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 73.969426][ T6191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 73.971505][ T6191] RDX: 00000000200012c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.973584][ T6191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.975651][ T6191] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.977727][ T6191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.979801][ T6191] [ 74.120944][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 74.516673][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 74.523059][ T6215] overlayfs: invalid redirect (./file1) [ 75.042640][ T6225] FAULT_INJECTION: forcing a failure. [ 75.042640][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 75.046187][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.1.274 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 75.048939][ T6225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.051726][ T6225] Call Trace: [ 75.052618][ T6225] [ 75.053406][ T6225] dump_stack_lvl+0x16c/0x1f0 [ 75.054657][ T6225] should_fail_ex+0x497/0x5b0 [ 75.055893][ T6225] ? fs_reclaim_acquire+0xae/0x160 [ 75.057224][ T6225] should_failslab+0xc2/0x120 [ 75.058472][ T6225] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 75.059875][ T6225] ? __kernfs_new_node+0xd3/0x890 [ 75.061200][ T6225] __kernfs_new_node+0xd3/0x890 [ 75.062512][ T6225] ? __pfx___kernfs_new_node+0x10/0x10 [ 75.063930][ T6225] ? find_held_lock+0x2d/0x110 [ 75.065190][ T6225] kernfs_new_node+0x186/0x240 [ 75.066458][ T6225] ? __pfx_map_id_range_down+0x10/0x10 [ 75.067847][ T6225] __kernfs_create_file+0x53/0x350 [ 75.069187][ T6225] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 75.070589][ T6225] internal_create_group+0x565/0xe50 [ 75.071973][ T6225] ? __pfx_internal_create_group+0x10/0x10 [ 75.073477][ T6225] ? sysfs_create_dir_ns+0x14d/0x2b0 [ 75.074864][ T6225] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 75.076327][ T6225] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.077736][ T6225] internal_create_groups+0x9d/0x150 [ 75.079118][ T6225] kobject_add_internal+0x317/0x990 [ 75.080488][ T6225] kobject_init_and_add+0x11c/0x190 [ 75.081878][ T6225] ? __pfx_kobject_init_and_add+0x10/0x10 [ 75.083360][ T6225] ? __do_fast_syscall_32+0x73/0x120 [ 75.084749][ T6225] netdev_queue_update_kobjects+0x29c/0x5b0 [ 75.086310][ T6225] netif_set_real_num_tx_queues+0x168/0x880 [ 75.087949][ T6225] tun_attach.isra.0+0x6a4/0x17a0 [ 75.089273][ T6225] ? trace_lock_acquire+0x14a/0x1d0 [ 75.090646][ T6225] __tun_chr_ioctl+0x1ba3/0x4960 [ 75.091942][ T6225] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 75.093328][ T6225] ? __fget_files+0x244/0x3f0 [ 75.094571][ T6225] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 75.096060][ T6225] __do_compat_sys_ioctl+0x259/0x2b0 [ 75.097451][ T6225] __do_fast_syscall_32+0x73/0x120 [ 75.098804][ T6225] do_fast_syscall_32+0x32/0x80 [ 75.100088][ T6225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.101765][ T6225] RIP: 0023:0xf7fc3579 [ 75.102842][ T6225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.107826][ T6225] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 75.109998][ T6225] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 75.112052][ T6225] RDX: 0000000020002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.114122][ T6225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.116167][ T6225] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.118220][ T6225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.120276][ T6225] [ 75.121855][ T6225] kobject: kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 75.536467][ T6247] FAULT_INJECTION: forcing a failure. [ 75.536467][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 75.541902][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.3.282 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 75.544715][ T6247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.547601][ T6247] Call Trace: [ 75.548480][ T6247] [ 75.549262][ T6247] dump_stack_lvl+0x16c/0x1f0 [ 75.550529][ T6247] should_fail_ex+0x497/0x5b0 [ 75.551779][ T6247] should_failslab+0xc2/0x120 [ 75.553021][ T6247] __kmalloc_noprof+0xcb/0x410 [ 75.554298][ T6247] ? kasan_save_track+0x14/0x30 [ 75.555583][ T6247] nsim_fib_event_nb+0x448/0xec0 [ 75.556892][ T6247] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 75.558385][ T6247] ? rcu_is_watching+0x12/0xc0 [ 75.559652][ T6247] notifier_call_chain+0xb9/0x410 [ 75.560959][ T6247] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 75.562424][ T6247] atomic_notifier_call_chain+0x71/0x1c0 [ 75.563894][ T6247] call_fib_notifiers+0x33/0x70 [ 75.565172][ T6247] call_fib6_multipath_entry_notifiers+0x104/0x160 [ 75.566856][ T6247] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 75.568658][ T6247] ? __pfx_lock_release+0x10/0x10 [ 75.570005][ T6247] ip6_route_multipath_add+0xb79/0x2190 [ 75.571449][ T6247] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 75.573025][ T6247] ? __mutex_trylock_common+0xea/0x250 [ 75.574469][ T6247] ? __pfx___mutex_trylock_common+0x10/0x10 [ 75.576025][ T6247] ? inet6_rtm_newroute+0xe5/0x170 [ 75.577363][ T6247] inet6_rtm_newroute+0xe5/0x170 [ 75.578685][ T6247] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 75.580140][ T6247] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 75.581620][ T6247] rtnetlink_rcv_msg+0x3c7/0xea0 [ 75.582918][ T6247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.584339][ T6247] ? __pfx___dev_queue_xmit+0x10/0x10 [ 75.585754][ T6247] netlink_rcv_skb+0x165/0x410 [ 75.587004][ T6247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.588419][ T6247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.589812][ T6247] ? netlink_deliver_tap+0x1ae/0xcf0 [ 75.591177][ T6247] netlink_unicast+0x53c/0x7f0 [ 75.592426][ T6247] ? __pfx_netlink_unicast+0x10/0x10 [ 75.593816][ T6247] ? __phys_addr_symbol+0x30/0x80 [ 75.595135][ T6247] ? __check_object_size+0x488/0x710 [ 75.596517][ T6247] netlink_sendmsg+0x8b8/0xd70 [ 75.597800][ T6247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.599171][ T6247] ? lock_acquire+0x2f/0xb0 [ 75.600370][ T6247] ____sys_sendmsg+0x9ae/0xb40 [ 75.601653][ T6247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.603026][ T6247] ? get_compat_msghdr+0x11b/0x170 [ 75.604363][ T6247] ? __pfx___lock_acquire+0x10/0x10 [ 75.605740][ T6247] ___sys_sendmsg+0x135/0x1e0 [ 75.606975][ T6247] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.608332][ T6247] ? lock_acquire+0x2f/0xb0 [ 75.609524][ T6247] ? __fget_files+0x40/0x3f0 [ 75.610775][ T6247] ? fdget+0x176/0x210 [ 75.611849][ T6247] __sys_sendmsg+0x117/0x1f0 [ 75.613072][ T6247] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.614472][ T6247] ? __fget_files+0x244/0x3f0 [ 75.615812][ T6247] __do_fast_syscall_32+0x73/0x120 [ 75.617168][ T6247] do_fast_syscall_32+0x32/0x80 [ 75.618462][ T6247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.620108][ T6247] RIP: 0023:0xf7fc0579 [ 75.621180][ T6247] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.626253][ T6247] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 75.628420][ T6247] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 75.630450][ T6247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.632496][ T6247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.634555][ T6247] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.636597][ T6247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.638660][ T6247] [ 75.642822][ T6251] FAULT_INJECTION: forcing a failure. [ 75.642822][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 75.646099][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.0.289 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 75.648822][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.651614][ T6251] Call Trace: [ 75.652512][ T6251] [ 75.653304][ T6251] dump_stack_lvl+0x16c/0x1f0 [ 75.654571][ T6251] should_fail_ex+0x497/0x5b0 [ 75.655816][ T6251] ? fs_reclaim_acquire+0xae/0x160 [ 75.657161][ T6251] should_failslab+0xc2/0x120 [ 75.658415][ T6251] __kmalloc_node_noprof+0xd1/0x440 [ 75.660237][ T6251] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 75.661761][ T6251] __kvmalloc_node_noprof+0xad/0x1a0 [ 75.663158][ T6251] io_uring_setup+0x4f4/0x3730 [ 75.664426][ T6251] ? __pfx_io_uring_setup+0x10/0x10 [ 75.665805][ T6251] ? __fget_files+0x244/0x3f0 [ 75.667043][ T6251] ? ksys_write+0x1ad/0x260 [ 75.668243][ T6251] ? __pfx_ksys_write+0x10/0x10 [ 75.669522][ T6251] __ia32_sys_io_uring_setup+0x97/0x140 [ 75.670980][ T6251] __do_fast_syscall_32+0x73/0x120 [ 75.672325][ T6251] do_fast_syscall_32+0x32/0x80 [ 75.673616][ T6251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.675267][ T6251] RIP: 0023:0xf743e579 [ 75.676337][ T6251] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.681334][ T6251] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 00000000000001a9 [ 75.683514][ T6251] RAX: ffffffffffffffda RBX: 0000000000003055 RCX: 00000000200001c0 [ 75.685570][ T6251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.687617][ T6251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.689639][ T6251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.691674][ T6251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.693723][ T6251] [ 75.767350][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'. [ 75.820243][ T67] cfg80211: failed to load regulatory.db [ 76.750580][ T6271] FAULT_INJECTION: forcing a failure. [ 76.750580][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.763648][ T6271] CPU: 3 UID: 0 PID: 6271 Comm: syz.3.290 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 76.766413][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.769162][ T6271] Call Trace: [ 76.770039][ T6271] [ 76.770810][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 76.772038][ T6271] should_fail_ex+0x497/0x5b0 [ 76.773268][ T6271] _copy_from_user+0x30/0xf0 [ 76.774480][ T6271] get_compat_msghdr+0xa8/0x170 [ 76.775749][ T6271] ? __pfx_get_compat_msghdr+0x10/0x10 [ 76.777156][ T6271] ? find_held_lock+0x2d/0x110 [ 76.778411][ T6271] ___sys_recvmsg+0x193/0x1a0 [ 76.779640][ T6271] ? __pfx____sys_recvmsg+0x10/0x10 [ 76.780990][ T6271] ? lock_acquire+0x2f/0xb0 [ 76.782204][ T6271] ? __fget_files+0x40/0x3f0 [ 76.783422][ T6271] ? fdget+0x176/0x210 [ 76.784481][ T6271] do_recvmmsg+0x51a/0x750 [ 76.785653][ T6271] ? __pfx_do_recvmmsg+0x10/0x10 [ 76.786937][ T6271] ? get_signal+0x185/0x26d0 [ 76.788149][ T6271] ? __pfx___schedule+0x10/0x10 [ 76.789419][ T6271] ? arch_do_signal_or_restart+0x212/0x7e0 [ 76.790940][ T6271] __sys_recvmmsg+0x21e/0x280 [ 76.792314][ T6271] ? __pfx___sys_recvmmsg+0x10/0x10 [ 76.793925][ T6271] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 76.796073][ T6271] ? do_int80_emulation+0xd1/0x200 [ 76.797649][ T6271] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.799003][ T6271] do_int80_emulation+0x104/0x200 [ 76.800319][ T6271] asm_int80_emulation+0x1a/0x20 [ 76.801646][ T6271] RIP: 0023:0xf7fc0579 [ 76.802718][ T6271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.807697][ T6271] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 76.809864][ T6271] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020003c40 [ 76.811913][ T6271] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.813971][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.816015][ T6271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.818070][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.820201][ T6271] [ 77.731353][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 77.735468][ T6290] FAULT_INJECTION: forcing a failure. [ 77.735468][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.740891][ T6290] CPU: 3 UID: 0 PID: 6290 Comm: syz.3.295 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 77.743676][ T6290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.746478][ T6290] Call Trace: [ 77.747377][ T6290] [ 77.748160][ T6290] dump_stack_lvl+0x16c/0x1f0 [ 77.749418][ T6290] should_fail_ex+0x497/0x5b0 [ 77.750669][ T6290] _copy_to_user+0x30/0xc0 [ 77.751871][ T6290] simple_read_from_buffer+0xd0/0x160 [ 77.753300][ T6290] proc_fail_nth_read+0x198/0x270 [ 77.754634][ T6290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.756076][ T6290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.757535][ T6290] vfs_read+0x1ce/0xbd0 [ 77.758635][ T6290] ? __fget_files+0x23a/0x3f0 [ 77.759877][ T6290] ? fdget_pos+0x24c/0x360 [ 77.761052][ T6290] ? __pfx_lock_release+0x10/0x10 [ 77.762405][ T6290] ? trace_lock_acquire+0x14a/0x1d0 [ 77.763766][ T6290] ? __pfx_vfs_read+0x10/0x10 [ 77.765002][ T6290] ? __pfx___mutex_lock+0x10/0x10 [ 77.766335][ T6290] ? __fget_files+0x244/0x3f0 [ 77.767615][ T6290] ksys_read+0x12f/0x260 [ 77.768732][ T6290] ? __pfx_ksys_read+0x10/0x10 [ 77.769997][ T6290] __do_fast_syscall_32+0x73/0x120 [ 77.771341][ T6290] do_fast_syscall_32+0x32/0x80 [ 77.772627][ T6290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.774287][ T6290] RIP: 0023:0xf7fc0579 [ 77.775365][ T6290] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.780498][ T6290] RSP: 002b:00000000f57465a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 77.782720][ T6290] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5746620 [ 77.784779][ T6290] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 77.786850][ T6290] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 77.788911][ T6290] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 77.790982][ T6290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.793046][ T6290] [ 77.889237][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.299'. [ 77.893870][ T6297] trusted_key: syz.0.306 sent an empty control message without MSG_MORE. [ 77.972388][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 78.017132][ T6314] FAULT_INJECTION: forcing a failure. [ 78.017132][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.020523][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.1.304 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 78.023401][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.026643][ T6314] Call Trace: [ 78.027532][ T6314] [ 78.028310][ T6314] dump_stack_lvl+0x16c/0x1f0 [ 78.029554][ T6314] should_fail_ex+0x497/0x5b0 [ 78.030798][ T6314] _copy_to_user+0x30/0xc0 [ 78.032085][ T6314] simple_read_from_buffer+0xd0/0x160 [ 78.033549][ T6314] proc_fail_nth_read+0x198/0x270 [ 78.034867][ T6314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.036307][ T6314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.037935][ T6314] vfs_read+0x1ce/0xbd0 [ 78.039227][ T6314] ? __fget_files+0x23a/0x3f0 [ 78.040484][ T6314] ? fdget_pos+0x24c/0x360 [ 78.041990][ T6314] ? __pfx_lock_release+0x10/0x10 [ 78.043811][ T6314] ? trace_lock_acquire+0x14a/0x1d0 [ 78.045687][ T6314] ? __pfx_vfs_read+0x10/0x10 [ 78.047388][ T6314] ? __pfx___mutex_lock+0x10/0x10 [ 78.049180][ T6314] ? __fget_files+0x244/0x3f0 [ 78.050874][ T6314] ksys_read+0x12f/0x260 [ 78.052373][ T6314] ? __pfx_ksys_read+0x10/0x10 [ 78.053972][ T6314] __do_fast_syscall_32+0x73/0x120 [ 78.055801][ T6314] do_fast_syscall_32+0x32/0x80 [ 78.057570][ T6314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.059853][ T6314] RIP: 0023:0xf7fc3579 [ 78.061375][ T6314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.068318][ T6314] RSP: 002b:00000000f57465a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 78.071297][ T6314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5746620 [ 78.074112][ T6314] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 78.076937][ T6314] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 78.079761][ T6314] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 78.082617][ T6314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.085237][ T6314] [ 78.185128][ T6327] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 78.192058][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.195082][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.196753][ T6328] FAULT_INJECTION: forcing a failure. [ 78.196753][ T6328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.200552][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.3.308 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 78.203420][ T6328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.206271][ T6328] Call Trace: [ 78.207181][ T6328] [ 78.207996][ T6328] dump_stack_lvl+0x16c/0x1f0 [ 78.209292][ T6328] should_fail_ex+0x497/0x5b0 [ 78.210612][ T6328] _copy_from_user+0x30/0xf0 [ 78.211867][ T6328] get_compat_msghdr+0xa8/0x170 [ 78.213221][ T6328] ? __pfx_get_compat_msghdr+0x10/0x10 [ 78.214712][ T6328] ? find_held_lock+0x2d/0x110 [ 78.216015][ T6328] ___sys_recvmsg+0x193/0x1a0 [ 78.217287][ T6328] ? __pfx____sys_recvmsg+0x10/0x10 [ 78.218719][ T6328] ? lock_acquire+0x2f/0xb0 [ 78.219954][ T6328] ? __fget_files+0x40/0x3f0 [ 78.221226][ T6328] ? fdget+0x176/0x210 [ 78.222362][ T6328] do_recvmmsg+0x51a/0x750 [ 78.223580][ T6328] ? __pfx_do_recvmmsg+0x10/0x10 [ 78.224920][ T6328] ? get_signal+0x185/0x26d0 [ 78.226205][ T6328] ? arch_do_signal_or_restart+0x212/0x7e0 [ 78.227767][ T6328] __sys_recvmmsg+0x21e/0x280 [ 78.229038][ T6328] ? __pfx___sys_recvmmsg+0x10/0x10 [ 78.230462][ T6328] ? xfd_validate_state+0x5d/0x180 [ 78.231842][ T6328] ? rcu_is_watching+0x12/0xc0 [ 78.233152][ T6328] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 78.234849][ T6328] ? do_int80_emulation+0xd1/0x200 [ 78.236226][ T6328] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.237649][ T6328] do_int80_emulation+0x104/0x200 [ 78.239010][ T6328] asm_int80_emulation+0x1a/0x20 [ 78.240343][ T6328] RIP: 0023:0xf7fc0579 [ 78.241465][ T6328] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.246624][ T6328] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 78.248874][ T6328] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020003c40 [ 78.251012][ T6328] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.253129][ T6328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.255272][ T6328] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.257388][ T6328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.259542][ T6328] [ 78.335051][ T39] audit: type=1326 audit(1727948674.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.343241][ T6335] FAULT_INJECTION: forcing a failure. [ 78.343241][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 78.346588][ T6335] CPU: 3 UID: 0 PID: 6335 Comm: syz.0.312 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 78.347400][ T39] audit: type=1326 audit(1727948674.809:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.349376][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.357791][ T6335] Call Trace: [ 78.358707][ T6335] [ 78.359512][ T6335] dump_stack_lvl+0x16c/0x1f0 [ 78.360790][ T6335] should_fail_ex+0x497/0x5b0 [ 78.362121][ T6335] should_failslab+0xc2/0x120 [ 78.363395][ T6335] __kmalloc_noprof+0xcb/0x410 [ 78.364698][ T6335] aa_label_asxprint+0x75/0x140 [ 78.366023][ T6335] apparmor_secid_to_secctx+0xb1/0x180 [ 78.367039][ T39] audit: type=1326 audit(1727948674.819:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.367483][ T6335] security_secid_to_secctx+0x9c/0x290 [ 78.374490][ T6335] audit_log_task_context+0xf5/0x170 [ 78.375917][ T6335] ? __pfx_audit_log_task_context+0x10/0x10 [ 78.377522][ T6335] ? from_kuid+0x89/0xd0 [ 78.378672][ T6335] ? __pfx_audit_log_start+0x10/0x10 [ 78.380068][ T6335] audit_log_task+0x1d0/0x300 [ 78.381358][ T6335] ? __pfx_audit_log_task+0x10/0x10 [ 78.382090][ T39] audit: type=1326 audit(1727948674.819:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.382754][ T6335] ? migrate_enable+0x1ef/0x260 [ 78.389661][ T6335] ? __pfx_migrate_enable+0x10/0x10 [ 78.391063][ T6335] audit_seccomp+0x7a/0x280 [ 78.392291][ T6335] __seccomp_filter+0x816/0xf40 [ 78.392882][ T39] audit: type=1326 audit(1727948674.819:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.393599][ T6335] ? __pfx___seccomp_filter+0x10/0x10 [ 78.393615][ T6335] ? __pfx_set_fs_pwd+0x10/0x10 [ 78.393627][ T6335] ? security_inode_permission+0xbf/0x260 [ 78.403323][ T6335] __secure_computing+0x26c/0x3f0 [ 78.404674][ T6335] syscall_trace_enter+0x8b/0x240 [ 78.406034][ T6335] __do_fast_syscall_32+0xc2/0x120 [ 78.407401][ T6335] do_fast_syscall_32+0x32/0x80 [ 78.408464][ T39] audit: type=1326 audit(1727948674.819:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.408699][ T6335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.415825][ T6335] RIP: 0023:0xf743e579 [ 78.416923][ T6335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.422045][ T39] audit: type=1326 audit(1727948674.819:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.422065][ T39] audit: type=1326 audit(1727948674.819:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.427522][ T6335] RSP: 002b:00000000f57265a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 78.427540][ T6335] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5726620 [ 78.427547][ T6335] RDX: 000000000000000f RSI: 00000000f742bff4 RDI: 0000000000000000 [ 78.427553][ T6335] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 78.427559][ T6335] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 78.427565][ T6335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.427576][ T6335] [ 78.453550][ T6335] audit: error in audit_log_task_context [ 78.455829][ T39] audit: type=1326 audit(1727948674.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6334 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 78.499505][ T5236] kernel write not supported for file [eventfd] (pid: 5236 comm: kworker/2:3) [ 79.157849][ T6377] FAULT_INJECTION: forcing a failure. [ 79.157849][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.161368][ T6377] CPU: 3 UID: 0 PID: 6377 Comm: syz.2.319 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 79.164136][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.166932][ T6377] Call Trace: [ 79.167830][ T6377] [ 79.168617][ T6377] dump_stack_lvl+0x16c/0x1f0 [ 79.169861][ T6377] should_fail_ex+0x497/0x5b0 [ 79.171100][ T6377] _copy_from_user+0x30/0xf0 [ 79.172310][ T6377] get_compat_msghdr+0xa8/0x170 [ 79.173600][ T6377] ? __pfx_get_compat_msghdr+0x10/0x10 [ 79.175507][ T6377] ? find_held_lock+0x2d/0x110 [ 79.177148][ T6377] ___sys_recvmsg+0x193/0x1a0 [ 79.178823][ T6377] ? __pfx____sys_recvmsg+0x10/0x10 [ 79.180591][ T6377] ? lock_acquire+0x2f/0xb0 [ 79.182141][ T6377] ? __fget_files+0x40/0x3f0 [ 79.183719][ T6377] ? fdget+0x176/0x210 [ 79.185094][ T6377] do_recvmmsg+0x51a/0x750 [ 79.186626][ T6377] ? __pfx_do_recvmmsg+0x10/0x10 [ 79.188299][ T6377] ? get_signal+0x185/0x26d0 [ 79.189901][ T6377] ? arch_do_signal_or_restart+0x212/0x7e0 [ 79.191857][ T6377] __sys_recvmmsg+0x21e/0x280 [ 79.193463][ T6377] ? __pfx___sys_recvmmsg+0x10/0x10 [ 79.195242][ T6377] ? rcu_is_watching+0x12/0xc0 [ 79.196861][ T6377] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 79.198959][ T6377] ? do_int80_emulation+0xd1/0x200 [ 79.200576][ T6377] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.201982][ T6377] do_int80_emulation+0x104/0x200 [ 79.203332][ T6377] asm_int80_emulation+0x1a/0x20 [ 79.204645][ T6377] RIP: 0023:0xf7f08579 [ 79.205741][ T6377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.210769][ T6377] RSP: 002b:00000000f566556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 79.212943][ T6377] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020003c40 [ 79.214995][ T6377] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.217050][ T6377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.219104][ T6377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.221292][ T6377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.223385][ T6377] [ 79.393191][ T74] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.406826][ T74] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 79.515618][ T6401] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 79.524728][ T6401] binder: 6400:6401 ioctl 810c9365 20000980 returned -22 [ 79.589745][ T6404] netlink: 'syz.2.328': attribute type 4 has an invalid length. [ 79.602409][ T6404] binder: 6403:6404 ioctl 810c9365 20000980 returned -22 [ 79.880823][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.883926][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.258746][ T6426] FAULT_INJECTION: forcing a failure. [ 80.258746][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 80.263021][ T6426] CPU: 2 UID: 0 PID: 6426 Comm: syz.3.332 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 80.266497][ T6426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.270073][ T6426] Call Trace: [ 80.271187][ T6426] [ 80.272188][ T6426] dump_stack_lvl+0x16c/0x1f0 [ 80.273786][ T6426] should_fail_ex+0x497/0x5b0 [ 80.275388][ T6426] ? fs_reclaim_acquire+0xae/0x160 [ 80.277119][ T6426] should_failslab+0xc2/0x120 [ 80.278737][ T6426] __kmalloc_noprof+0xcb/0x410 [ 80.280369][ T6426] sk_prot_alloc+0x1a8/0x2a0 [ 80.281958][ T6426] sk_alloc+0x36/0xb90 [ 80.283337][ T6426] bpf_prog_test_run_skb+0x335/0x2140 [ 80.285153][ T6426] ? lock_acquire+0x2f/0xb0 [ 80.286754][ T6426] ? __fget_files+0x40/0x3f0 [ 80.288322][ T6426] ? __fget_files+0x244/0x3f0 [ 80.289925][ T6426] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 80.291892][ T6426] ? fput+0x30/0x390 [ 80.293231][ T6426] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 80.295195][ T6426] __sys_bpf+0x1921/0x5780 [ 80.296714][ T6426] ? ksys_write+0x21e/0x260 [ 80.298274][ T6426] ? __pfx___sys_bpf+0x10/0x10 [ 80.299910][ T6426] ? vfs_write+0x14d/0x1140 [ 80.301479][ T6426] ? __mutex_unlock_slowpath+0x164/0x650 [ 80.303408][ T6426] ? fput+0x30/0x390 [ 80.304750][ T6426] ? ksys_write+0x1ad/0x260 [ 80.306294][ T6426] ? __pfx_ksys_write+0x10/0x10 [ 80.307931][ T6426] __ia32_sys_bpf+0x76/0xe0 [ 80.309470][ T6426] __do_fast_syscall_32+0x73/0x120 [ 80.311223][ T6426] do_fast_syscall_32+0x32/0x80 [ 80.312872][ T6426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.315008][ T6426] RIP: 0023:0xf7fc0579 [ 80.316382][ T6426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.322853][ T6426] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 80.325647][ T6426] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0 [ 80.328285][ T6426] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.330936][ T6426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.333588][ T6426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.336237][ T6426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.338896][ T6426] [ 80.635946][ T6442] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 80.668949][ T6445] dns_resolver: Unsupported server list version (0) [ 80.959846][ T6467] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 80.997428][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.097147][ T5394] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.153285][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 81.257528][ T5394] usb 6-1: Using ep0 maxpacket: 16 [ 81.263845][ T5394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.267228][ T5394] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.270790][ T5394] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.273577][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.286034][ T5394] usb 6-1: config 0 descriptor?? [ 81.795373][ T5394] usbhid 6-1:0.0: can't add hid device: -71 [ 81.797133][ T5394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 81.802805][ T5394] usb 6-1: USB disconnect, device number 8 [ 81.916910][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 82.409441][ T6511] pimreg: entered allmulticast mode [ 82.508549][ T5236] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.544246][ T6515] FAULT_INJECTION: forcing a failure. [ 82.544246][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.548255][ T6515] CPU: 1 UID: 0 PID: 6515 Comm: syz.2.363 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 82.551034][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.553852][ T6515] Call Trace: [ 82.554742][ T6515] [ 82.555535][ T6515] dump_stack_lvl+0x16c/0x1f0 [ 82.556799][ T6515] should_fail_ex+0x497/0x5b0 [ 82.558081][ T6515] _copy_to_user+0x30/0xc0 [ 82.559264][ T6515] simple_read_from_buffer+0xd0/0x160 [ 82.560693][ T6515] proc_fail_nth_read+0x198/0x270 [ 82.562059][ T6515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.563519][ T6515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.564982][ T6515] vfs_read+0x1ce/0xbd0 [ 82.566132][ T6515] ? __fget_files+0x23a/0x3f0 [ 82.567416][ T6515] ? fdget_pos+0x24c/0x360 [ 82.568608][ T6515] ? __pfx_lock_release+0x10/0x10 [ 82.569970][ T6515] ? trace_lock_acquire+0x14a/0x1d0 [ 82.571351][ T6515] ? __pfx_vfs_read+0x10/0x10 [ 82.572615][ T6515] ? __pfx___mutex_lock+0x10/0x10 [ 82.573986][ T6515] ? __fget_files+0x244/0x3f0 [ 82.575244][ T6515] ksys_read+0x12f/0x260 [ 82.576383][ T6515] ? __pfx_ksys_read+0x10/0x10 [ 82.577712][ T6515] __do_fast_syscall_32+0x73/0x120 [ 82.579071][ T6515] do_fast_syscall_32+0x32/0x80 [ 82.580373][ T6515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.582078][ T6515] RIP: 0023:0xf7f08579 [ 82.583176][ T6515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 82.588223][ T6515] RSP: 002b:00000000f56865a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 82.590422][ T6515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5686620 [ 82.592491][ T6515] RDX: 000000000000000f RSI: 00000000f738bff4 RDI: 0000000000000000 [ 82.594581][ T6515] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 82.596681][ T6515] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 82.598796][ T6515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.600903][ T6515] [ 82.618700][ T5394] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.657200][ T5236] usb 8-1: Using ep0 maxpacket: 16 [ 82.663431][ T5236] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.669069][ T5236] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.673377][ T5236] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.676423][ T5236] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.682765][ T5236] usb 8-1: config 0 descriptor?? [ 82.767135][ T5394] usb 5-1: Using ep0 maxpacket: 8 [ 82.775783][ T5394] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 82.781677][ T5394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.785507][ T5394] usb 5-1: Product: syz [ 82.788525][ T5394] usb 5-1: Manufacturer: syz [ 82.792695][ T5394] usb 5-1: SerialNumber: syz [ 82.793301][ T6517] xt_CONNSECMARK: invalid mode: 0 [ 82.798878][ T5394] usb 5-1: config 0 descriptor?? [ 82.808883][ T5394] option 5-1:0.0: GSM modem (1-port) converter detected [ 83.014743][ T1998] usb 5-1: USB disconnect, device number 6 [ 83.016712][ T1998] option 5-1:0.0: device disconnected [ 83.671061][ T5236] usbhid 8-1:0.0: can't add hid device: -71 [ 83.677029][ T5236] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.680780][ T5236] usb 8-1: USB disconnect, device number 5 [ 83.764856][ T6542] pimreg: entered allmulticast mode [ 84.060650][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 84.060659][ T39] audit: type=1326 audit(1727948680.539:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.374" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 84.580139][ T6572] FAULT_INJECTION: forcing a failure. [ 84.580139][ T6572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.584260][ T6572] CPU: 3 UID: 0 PID: 6572 Comm: syz.2.380 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 84.587013][ T6572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.589808][ T6572] Call Trace: [ 84.590693][ T6572] [ 84.591480][ T6572] dump_stack_lvl+0x16c/0x1f0 [ 84.592738][ T6572] should_fail_ex+0x497/0x5b0 [ 84.593992][ T6572] _copy_from_user+0x30/0xf0 [ 84.595209][ T6572] __sys_bpf+0x215/0x5780 [ 84.596349][ T6572] ? ksys_write+0x21e/0x260 [ 84.597724][ T6572] ? __pfx___sys_bpf+0x10/0x10 [ 84.598987][ T6572] ? vfs_write+0x14d/0x1140 [ 84.600184][ T6572] ? __mutex_unlock_slowpath+0x164/0x650 [ 84.601677][ T6572] ? fput+0x30/0x390 [ 84.602711][ T6572] ? ksys_write+0x1ad/0x260 [ 84.603904][ T6572] ? __pfx_ksys_write+0x10/0x10 [ 84.605184][ T6572] __ia32_sys_bpf+0x76/0xe0 [ 84.606396][ T6572] __do_fast_syscall_32+0x73/0x120 [ 84.607746][ T6572] do_fast_syscall_32+0x32/0x80 [ 84.609035][ T6572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.610699][ T6572] RIP: 0023:0xf7f08579 [ 84.611773][ T6572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.616756][ T6572] RSP: 002b:00000000f568656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 84.619014][ T6572] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 84.621054][ T6572] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.623106][ T6572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.625143][ T6572] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.627190][ T6572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.629234][ T6572] [ 84.630771][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.777036][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 84.790278][ T35] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.792389][ T35] usb 8-1: config 0 has no interface number 0 [ 84.793981][ T35] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.796750][ T35] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 84.811082][ T35] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.813724][ T35] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.815807][ T35] usb 8-1: Product: syz [ 84.816914][ T35] usb 8-1: SerialNumber: syz [ 84.820188][ T35] usb 8-1: config 0 descriptor?? [ 84.822816][ T35] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 84.825457][ T35] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input6 [ 84.997016][ T5414] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.028442][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.033720][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.039128][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.039166][ T5236] usb 8-1: USB disconnect, device number 6 [ 85.041032][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 85.049525][ T5236] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 85.157056][ T5414] usb 7-1: Using ep0 maxpacket: 16 [ 85.169138][ T5414] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.171994][ T5414] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.175269][ T5414] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.207014][ T5414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.224214][ T5414] usb 7-1: config 0 descriptor?? [ 85.481117][ T6594] pimreg: entered allmulticast mode [ 86.133464][ T6608] FAULT_INJECTION: forcing a failure. [ 86.133464][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 86.138153][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.1.389 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 86.141728][ T6608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.145319][ T6608] Call Trace: [ 86.146468][ T6608] [ 86.147486][ T6608] dump_stack_lvl+0x16c/0x1f0 [ 86.149080][ T6608] should_fail_ex+0x497/0x5b0 [ 86.150694][ T6608] ? fs_reclaim_acquire+0xae/0x160 [ 86.152422][ T6608] should_failslab+0xc2/0x120 [ 86.154036][ T6608] kmem_cache_alloc_node_noprof+0x71/0x310 [ 86.156000][ T6608] ? __alloc_skb+0x2b3/0x380 [ 86.157593][ T6608] __alloc_skb+0x2b3/0x380 [ 86.159098][ T6608] ? __pfx___alloc_skb+0x10/0x10 [ 86.160784][ T6608] ? lockdep_init_map_type+0x16d/0x7d0 [ 86.162654][ T6608] tipc_buf_acquire+0x26/0xe0 [ 86.164254][ T6608] tipc_msg_build+0x114/0x10d0 [ 86.165877][ T6608] ? __pfx_tipc_node_xmit+0x10/0x10 [ 86.167641][ T6608] ? __pfx_tipc_msg_build+0x10/0x10 [ 86.169399][ T6608] __tipc_sendstream+0x6f4/0x1170 [ 86.170922][ T6608] ? __pfx___tipc_sendstream+0x10/0x10 [ 86.172366][ T6608] ? tipc_sendstream+0x41/0x70 [ 86.173659][ T6608] ? __pfx_lock_release+0x10/0x10 [ 86.175000][ T6608] ? __pfx_woken_wake_function+0x10/0x10 [ 86.176485][ T6608] ? mark_held_locks+0x9f/0xe0 [ 86.177779][ T6608] ? tipc_sendstream+0x41/0x70 [ 86.179060][ T6608] ? __local_bh_enable_ip+0xa4/0x120 [ 86.180456][ T6608] tipc_sendstream+0x4f/0x70 [ 86.181717][ T6608] sock_write_iter+0x4fe/0x5b0 [ 86.182991][ T6608] ? __pfx_sock_write_iter+0x10/0x10 [ 86.184400][ T6608] ? bpf_lsm_file_permission+0x9/0x10 [ 86.185834][ T6608] ? security_file_permission+0x71/0x210 [ 86.187320][ T6608] vfs_write+0x6b5/0x1140 [ 86.188468][ T6608] ? __pfx_sock_write_iter+0x10/0x10 [ 86.189888][ T6608] ? trace_lock_acquire+0x14a/0x1d0 [ 86.191433][ T6608] ? __pfx_vfs_write+0x10/0x10 [ 86.192743][ T6608] ? __fget_files+0x40/0x3f0 [ 86.194007][ T6608] ksys_write+0x1fa/0x260 [ 86.195164][ T6608] ? __pfx_ksys_write+0x10/0x10 [ 86.196469][ T6608] __do_fast_syscall_32+0x73/0x120 [ 86.197847][ T6608] do_fast_syscall_32+0x32/0x80 [ 86.199143][ T6608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.200811][ T6608] RIP: 0023:0xf7fc3579 [ 86.201932][ T6608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.206933][ T6608] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 86.209095][ T6608] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000040 [ 86.211193][ T6608] RDX: 000000002000011a RSI: 0000000000000000 RDI: 0000000000000000 [ 86.213267][ T6608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.215357][ T6608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.217543][ T6608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.220232][ T6608] [ 86.294106][ T5414] usbhid 7-1:0.0: can't add hid device: -71 [ 86.295789][ T5414] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 86.298598][ T5414] usb 7-1: USB disconnect, device number 4 [ 86.706030][ T6615] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 86.768888][ T6617] team_slave_1: entered allmulticast mode [ 86.904589][ T6620] FAULT_INJECTION: forcing a failure. [ 86.904589][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.912849][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.1.396 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 86.915597][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.918394][ T6620] Call Trace: [ 86.919267][ T6620] [ 86.920040][ T6620] dump_stack_lvl+0x16c/0x1f0 [ 86.921288][ T6620] should_fail_ex+0x497/0x5b0 [ 86.922535][ T6620] _copy_from_user+0x30/0xf0 [ 86.923749][ T6620] __sys_bpf+0x215/0x5780 [ 86.924880][ T6620] ? ksys_write+0x21e/0x260 [ 86.926076][ T6620] ? __pfx___sys_bpf+0x10/0x10 [ 86.927330][ T6620] ? vfs_write+0x14d/0x1140 [ 86.928521][ T6620] ? __mutex_unlock_slowpath+0x164/0x650 [ 86.929995][ T6620] ? fput+0x30/0x390 [ 86.931021][ T6620] ? ksys_write+0x1ad/0x260 [ 86.932208][ T6620] ? __pfx_ksys_write+0x10/0x10 [ 86.933483][ T6620] __ia32_sys_bpf+0x76/0xe0 [ 86.934674][ T6620] __do_fast_syscall_32+0x73/0x120 [ 86.936006][ T6620] do_fast_syscall_32+0x32/0x80 [ 86.937276][ T6620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.938926][ T6620] RIP: 0023:0xf7fc3579 [ 86.939994][ T6620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.945019][ T6620] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 86.947178][ T6620] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000340 [ 86.949219][ T6620] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.951278][ T6620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.953312][ T6620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.955366][ T6620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.957410][ T6620] [ 88.621248][ T6628] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 88.648208][ T6636] pimreg: entered allmulticast mode [ 89.391011][ T39] audit: type=1326 audit(1727948685.869:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000 [ 89.677175][ T67] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.717228][ T5394] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.847048][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 89.851890][ T67] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.859962][ T67] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.866884][ T67] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.867442][ T5394] usb 5-1: Using ep0 maxpacket: 16 [ 89.869745][ T67] usb 6-1: Product: syz [ 89.872531][ T67] usb 6-1: Manufacturer: syz [ 89.874159][ T67] usb 6-1: SerialNumber: syz [ 89.879108][ T67] usb 6-1: config 0 descriptor?? [ 89.881343][ T6655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.890810][ T5394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.894312][ T5394] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.899849][ T5394] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.902335][ T5394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.905441][ T5394] usb 5-1: config 0 descriptor?? [ 90.243000][ T67] usb 6-1: USB disconnect, device number 9 [ 90.816704][ T5394] usbhid 5-1:0.0: can't add hid device: -71 [ 90.832058][ T5394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 90.837043][ T5394] usb 5-1: USB disconnect, device number 7 [ 90.990232][ T6682] FAULT_INJECTION: forcing a failure. [ 90.990232][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 90.993885][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.417 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 90.996643][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.999516][ T6682] Call Trace: [ 91.000400][ T6682] [ 91.001192][ T6682] dump_stack_lvl+0x16c/0x1f0 [ 91.002453][ T6682] should_fail_ex+0x497/0x5b0 [ 91.003702][ T6682] ? fs_reclaim_acquire+0xae/0x160 [ 91.005047][ T6682] should_failslab+0xc2/0x120 [ 91.006305][ T6682] __kmalloc_node_noprof+0xd1/0x440 [ 91.007682][ T6682] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 91.009121][ T6682] __kvmalloc_node_noprof+0xad/0x1a0 [ 91.010531][ T6682] file_tty_write.constprop.0+0x6dd/0x9a0 [ 91.012034][ T6682] ? security_file_permission+0x71/0x210 [ 91.013547][ T6682] vfs_write+0x6b5/0x1140 [ 91.014687][ T6682] ? __pfx_tty_write+0x10/0x10 [ 91.015948][ T6682] ? trace_lock_acquire+0x14a/0x1d0 [ 91.017317][ T6682] ? __pfx_vfs_write+0x10/0x10 [ 91.018583][ T6682] ? __fget_files+0x40/0x3f0 [ 91.019806][ T6682] ksys_write+0x12f/0x260 [ 91.020944][ T6682] ? __pfx_ksys_write+0x10/0x10 [ 91.022250][ T6682] __do_fast_syscall_32+0x73/0x120 [ 91.023615][ T6682] do_fast_syscall_32+0x32/0x80 [ 91.024906][ T6682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.026566][ T6682] RIP: 0023:0xf7fc0579 [ 91.027639][ T6682] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.032641][ T6682] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 91.034826][ T6682] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 91.036890][ T6682] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.038962][ T6682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.041024][ T6682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.043104][ T6682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.045174][ T6682] [ 91.154418][ T6688] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 91.156859][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.158919][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.164428][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166309][ T6688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.168497][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.170355][ T6688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.173916][ T6688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.877461][ T5394] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.027093][ T5394] usb 8-1: Using ep0 maxpacket: 16 [ 92.030639][ T5394] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.033445][ T5394] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.036715][ T5394] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.044399][ T5394] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.048303][ T5394] usb 8-1: config 0 descriptor?? [ 92.107063][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.264492][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 92.273675][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.277963][ T35] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.280321][ T35] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.282448][ T35] usb 5-1: Product: syz [ 92.283537][ T35] usb 5-1: Manufacturer: syz [ 92.284752][ T35] usb 5-1: SerialNumber: syz [ 92.290862][ T35] usb 5-1: config 0 descriptor?? [ 92.292638][ T6711] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 92.365595][ T6737] FAULT_INJECTION: forcing a failure. [ 92.365595][ T6737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.371848][ T6737] CPU: 3 UID: 0 PID: 6737 Comm: syz.1.432 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 92.374616][ T6737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.377394][ T6737] Call Trace: [ 92.378282][ T6737] [ 92.379061][ T6737] dump_stack_lvl+0x16c/0x1f0 [ 92.380299][ T6737] should_fail_ex+0x497/0x5b0 [ 92.381553][ T6737] _copy_from_user+0x30/0xf0 [ 92.382768][ T6737] kstrtouint_from_user+0xd7/0x1c0 [ 92.384108][ T6737] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 92.385601][ T6737] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 92.387068][ T6737] proc_fail_nth_write+0x84/0x250 [ 92.388388][ T6737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.389869][ T6737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.391337][ T6737] vfs_write+0x28e/0x1140 [ 92.392477][ T6737] ? __fget_files+0x23a/0x3f0 [ 92.393722][ T6737] ? fdget_pos+0x24c/0x360 [ 92.394901][ T6737] ? __pfx_lock_release+0x10/0x10 [ 92.396227][ T6737] ? trace_lock_acquire+0x14a/0x1d0 [ 92.397600][ T6737] ? __pfx_vfs_write+0x10/0x10 [ 92.398860][ T6737] ? __pfx___mutex_lock+0x10/0x10 [ 92.400184][ T6737] ? __fget_files+0x244/0x3f0 [ 92.401437][ T6737] ksys_write+0x12f/0x260 [ 92.402583][ T6737] ? __pfx_ksys_write+0x10/0x10 [ 92.403871][ T6737] __do_fast_syscall_32+0x73/0x120 [ 92.405214][ T6737] do_fast_syscall_32+0x32/0x80 [ 92.406499][ T6737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.408156][ T6737] RIP: 0023:0xf7fc3579 [ 92.409227][ T6737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.414236][ T6737] RSP: 002b:00000000f57255a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 92.416398][ T6737] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5725620 [ 92.418457][ T6737] RDX: 0000000000000001 RSI: 00000000f744bff4 RDI: 0000000000000000 [ 92.420509][ T6737] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 92.422596][ T6737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.424652][ T6737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.426722][ T6737] [ 92.654209][ T56] usb 5-1: USB disconnect, device number 8 [ 93.037909][ T5394] usbhid 8-1:0.0: can't add hid device: -71 [ 93.039552][ T5394] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.047092][ T5394] usb 8-1: USB disconnect, device number 7 [ 93.724123][ T6764] netfs: Couldn't get user pages (rc=-14) [ 93.784496][ T5392] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.947437][ T5392] usb 7-1: Using ep0 maxpacket: 32 [ 93.951624][ T5392] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.958164][ T5392] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.961382][ T5392] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.964144][ T5392] usb 7-1: Product: syz [ 93.965636][ T5392] usb 7-1: Manufacturer: syz [ 93.967555][ T5392] usb 7-1: SerialNumber: syz [ 93.972286][ T5392] usb 7-1: config 0 descriptor?? [ 93.974718][ T6759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.323959][ T5394] usb 7-1: USB disconnect, device number 5 [ 95.966777][ T6799] netfs: Couldn't get user pages (rc=-14) [ 97.078578][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 97.227070][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 97.230856][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.241060][ T35] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.243481][ T35] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.245639][ T35] usb 8-1: Product: syz [ 97.246765][ T35] usb 8-1: Manufacturer: syz [ 97.248330][ T35] usb 8-1: SerialNumber: syz [ 97.250493][ T35] usb 8-1: config 0 descriptor?? [ 97.257179][ T6811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.612445][ T5394] usb 8-1: USB disconnect, device number 8 [ 99.004836][ T6839] netfs: Couldn't get user pages (rc=-14) [ 99.011690][ T6838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20000 pfn:0x11c0d [ 99.014284][ T6838] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.016144][ T6838] raw: 00fff00000000000 ffffea0000475a88 ffffea00004744c8 0000000000000000 [ 99.018996][ T6838] raw: 0000000000020000 0000000000000000 00000000ffffffff 0000000000000000 [ 99.021361][ T6838] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 99.024053][ T6838] page_owner tracks the page as freed [ 99.026260][ T6838] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 6793, tgid 6793 (syz.3.452), ts 95920542755, free_ts 96756764109 [ 99.031989][ T6838] post_alloc_hook+0x2d1/0x350 [ 99.033362][ T6838] get_page_from_freelist+0x101e/0x3070 [ 99.034902][ T6838] __alloc_pages_noprof+0x223/0x25c0 [ 99.036361][ T6838] alloc_pages_mpol_noprof+0x2c9/0x610 [ 99.038174][ T6838] folio_alloc_mpol_noprof+0x36/0xd0 [ 99.039608][ T6838] vma_alloc_folio_noprof+0xee/0x1b0 [ 99.041014][ T6838] do_pte_missing+0x2010/0x3e50 [ 99.042485][ T6838] __handle_mm_fault+0x100a/0x2a10 [ 99.043922][ T6838] handle_mm_fault+0x3fa/0xaa0 [ 99.045202][ T6838] do_user_addr_fault+0x60d/0x13f0 [ 99.046578][ T6838] exc_page_fault+0x5c/0xc0 [ 99.048151][ T6838] asm_exc_page_fault+0x26/0x30 [ 99.049477][ T6838] page last free pid 6793 tgid 6793 stack trace: [ 99.051156][ T6838] free_unref_folios+0x956/0x1310 [ 99.052504][ T6838] folios_put_refs+0x551/0x750 [ 99.053797][ T6838] free_pages_and_swap_cache+0x45f/0x510 [ 99.055365][ T6838] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 99.057025][ T6838] tlb_flush_mmu+0xe9/0x590 [ 99.058281][ T6838] unmap_page_range+0x1bf4/0x3ce0 [ 99.059648][ T6838] unmap_single_vma+0x194/0x2b0 [ 99.060968][ T6838] unmap_vmas+0x22f/0x490 [ 99.062165][ T6838] exit_mmap+0x1c6/0xb30 [ 99.063292][ T6838] __mmput+0x12a/0x480 [ 99.064383][ T6838] mmput+0x62/0x70 [ 99.065470][ T6838] do_exit+0x9bf/0x2d70 [ 99.066591][ T6838] do_group_exit+0xd3/0x2a0 [ 99.067992][ T6838] __ia32_sys_exit_group+0x3e/0x50 [ 99.069436][ T6838] ia32_sys_call+0x13f8/0x1bb0 [ 99.070741][ T6838] __do_fast_syscall_32+0x73/0x120 [ 99.074012][ T6838] ------------[ cut here ]------------ [ 99.075623][ T6838] kernel BUG at include/linux/mm.h:1444! [ 99.081396][ T6838] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 99.083262][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.0.465 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 99.085991][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.088794][ T6838] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.090545][ T6838] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 99.095554][ T6838] RSP: 0018:ffffc9000e1b6fa8 EFLAGS: 00010293 [ 99.097165][ T6838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 99.099244][ T6838] RDX: ffff888024818000 RSI: ffffffff84873a5f RDI: ffff888024818444 [ 99.101326][ T6838] RBP: ffffea0000470374 R08: 0000000000000001 R09: fffffbfff2d315b9 [ 99.103393][ T6838] R10: ffffffff9698adcf R11: ffff88802b628a40 R12: ffffea0000470340 [ 99.105469][ T6838] R13: ffff88801a903000 R14: 0000000000001000 R15: 0000000000001000 [ 99.107523][ T6838] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:0000000058073440 [ 99.109848][ T6838] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.111582][ T6838] CR2: 0000000058073448 CR3: 0000000049bb6000 CR4: 0000000000352ef0 [ 99.113886][ T6838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.116185][ T6838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.118378][ T6838] Call Trace: [ 99.119257][ T6838] [ 99.120033][ T6838] ? die+0x31/0x80 [ 99.121042][ T6838] ? do_trap+0x232/0x430 [ 99.122183][ T6838] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.123769][ T6838] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.125371][ T6838] ? do_error_trap+0xf4/0x230 [ 99.126618][ T6838] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.128227][ T6838] ? handle_invalid_op+0x34/0x40 [ 99.129554][ T6838] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.131155][ T6838] ? exc_invalid_op+0x2e/0x50 [ 99.132435][ T6838] ? asm_exc_invalid_op+0x1a/0x20 [ 99.133775][ T6838] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 99.135362][ T6838] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.136951][ T6838] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 99.138557][ T6838] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 99.140192][ T6838] ? delete_node+0x207/0x8e0 [ 99.141438][ T6838] iov_iter_get_pages_alloc2+0x53/0xf0 [ 99.142871][ T6838] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 99.144637][ T6838] ? p9pdu_vwritef+0x368/0x21d0 [ 99.145927][ T6838] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 99.148348][ T6838] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 99.149751][ T6838] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 99.151103][ T6838] ? p9_tag_alloc+0x4cc/0x870 [ 99.152361][ T6838] ? reacquire_held_locks+0x464/0x4c0 [ 99.153876][ T6838] p9_virtio_zc_request+0x991/0x1460 [ 99.155343][ T6838] ? p9pdu_writef+0xc4/0x100 [ 99.156623][ T6838] ? __pfx_p9pdu_writef+0x10/0x10 [ 99.158077][ T6838] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 99.159450][ T6838] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 99.160975][ T6838] ? rcu_is_watching+0x12/0xc0 [ 99.162275][ T6838] ? trace_9p_protocol_dump+0x192/0x220 [ 99.163773][ T6838] ? rcu_is_watching+0x12/0xc0 [ 99.165105][ T6838] ? p9_client_prepare_req+0x111/0x4d0 [ 99.166553][ T6838] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 99.168140][ T6838] ? mark_lock+0xb5/0xc60 [ 99.169384][ T6838] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 99.170949][ T6838] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 99.172773][ T6838] ? hlock_class+0x4e/0x130 [ 99.173994][ T6838] ? __lock_acquire+0x163e/0x3ce0 [ 99.175323][ T6838] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 99.176819][ T6838] p9_client_read_once+0x443/0x820 [ 99.178199][ T6838] ? __pfx_p9_client_read_once+0x10/0x10 [ 99.179676][ T6838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.181228][ T6838] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.182618][ T6838] p9_client_read+0x13f/0x1b0 [ 99.183853][ T6838] v9fs_issue_read+0x115/0x310 [ 99.185129][ T6838] ? __pfx_v9fs_issue_read+0x10/0x10 [ 99.186541][ T6838] ? __local_bh_enable_ip+0xa4/0x120 [ 99.187952][ T6838] netfs_read_to_pagecache+0x5c9/0x9a0 [ 99.189412][ T6838] netfs_readahead+0x7fa/0xaa0 [ 99.190683][ T6838] ? __pfx_netfs_readahead+0x10/0x10 [ 99.192083][ T6838] read_pages+0x1a8/0xd80 [ 99.193233][ T6838] ? __folio_batch_add_and_move+0x689/0xc60 [ 99.194809][ T6838] ? __folio_batch_add_and_move+0x612/0xc60 [ 99.196454][ T6838] ? __pfx_read_pages+0x10/0x10 [ 99.197782][ T6838] ? maybe_unlock_mmap_for_io.part.0+0x111/0x390 [ 99.199450][ T6838] ? reacquire_held_locks+0x20b/0x4c0 [ 99.200869][ T6838] page_cache_ra_unbounded+0x3c0/0x6c0 [ 99.202338][ T6838] page_cache_ra_order+0x7d9/0xc90 [ 99.203692][ T6838] filemap_fault+0x148d/0x2820 [ 99.204965][ T6838] ? __pfx_filemap_fault+0x10/0x10 [ 99.206347][ T6838] ? lock_acquire+0x2f/0xb0 [ 99.207575][ T6838] ? __pte_offset_map+0x42/0x540 [ 99.208896][ T6838] ? __pfx_filemap_map_pages+0x10/0x10 [ 99.210364][ T6838] __do_fault+0x10a/0x490 [ 99.211565][ T6838] ? __pfx_filemap_map_pages+0x10/0x10 [ 99.213004][ T6838] do_pte_missing+0x1a8/0x3e50 [ 99.214300][ T6838] ? lock_vma_under_rcu+0x13e/0x980 [ 99.215687][ T6838] __handle_mm_fault+0x100a/0x2a10 [ 99.217053][ T6838] ? __pfx_lock_release+0x10/0x10 [ 99.218424][ T6838] ? lock_vma_under_rcu+0x13e/0x980 [ 99.219804][ T6838] ? __pfx___handle_mm_fault+0x10/0x10 [ 99.221263][ T6838] handle_mm_fault+0x3fa/0xaa0 [ 99.222563][ T6838] do_user_addr_fault+0x60d/0x13f0 [ 99.223924][ T6838] exc_page_fault+0x5c/0xc0 [ 99.225139][ T6838] asm_exc_page_fault+0x26/0x30 [ 99.226447][ T6838] RIP: 0023:0xf7152a20 [ 99.227534][ T6838] Code: 83 f0 01 09 d8 0f 85 b9 02 00 00 0f b7 44 24 28 66 c1 c0 08 0f b7 c0 89 44 24 28 31 c0 89 44 24 2c 8b 44 24 50 0f b7 4c 24 28 <66> 89 08 e9 f2 fb ff ff ff 74 24 24 ff 74 24 24 6a 00 6a 01 8b 44 [ 99.232600][ T6838] RSP: 002b:00000000fff24f10 EFLAGS: 00010246 [ 99.234217][ T6838] RAX: 0000000020000080 RBX: 0000000000000000 RCX: 0000000000000000 [ 99.236291][ T6838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.238378][ T6838] RBP: 00000000fff25228 R08: 0000000000000000 R09: 0000000000000000 [ 99.240455][ T6838] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 99.242540][ T6838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.244620][ T6838] [ 99.245451][ T6838] Modules linked in: [ 99.246838][ T6838] ---[ end trace 0000000000000000 ]--- [ 99.248518][ T6838] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 99.250327][ T6838] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 99.255342][ T6838] RSP: 0018:ffffc9000e1b6fa8 EFLAGS: 00010293 [ 99.287456][ T6838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 99.293422][ T6838] RDX: ffff888024818000 RSI: ffffffff84873a5f RDI: ffff888024818444 [ 99.295506][ T6838] RBP: ffffea0000470374 R08: 0000000000000001 R09: fffffbfff2d315b9 [ 99.300913][ T6838] R10: ffffffff9698adcf R11: ffff88802b628a40 R12: ffffea0000470340 [ 99.303034][ T6838] R13: ffff88801a903000 R14: 0000000000001000 R15: 0000000000001000 [ 99.305098][ T6838] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:0000000058073440 [ 99.311180][ T6838] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.312946][ T6838] CR2: 0000000058073448 CR3: 0000000049bb6000 CR4: 0000000000352ef0 [ 99.315029][ T6838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.317538][ T6838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.319669][ T6838] Kernel panic - not syncing: Fatal exception [ 99.321968][ T6838] Kernel Offset: disabled [ 99.323124][ T6838] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:28:23 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff90ae8f80 RDX=1ffff92000084f22 RSI=1ffff92000084f24 RDI=ffffc90000427ee8 RBP=ffffc90000427920 RSP=ffffc90000427868 R8 =ffffc9000042790c R9 =ffffffff90ae8f84 R10=ffffc900004278d8 R11=0000000000005a3f R12=ffffc90000427928 R13=ffffc900004278d8 R14=ffffc90000427ef0 R15=ffffc90000427ee8 RIP=ffffffff813cf7ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000058073448 CR3=0000000049bb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffffff2d3893a RBX=ffffffff969c4978 RCX=1ffffffff2ba367b RDX=00000000000003fd RSI=0000000000000000 RDI=ffffffff969c49d4 RBP=ffffffff96c59398 RSP=ffffc900033f6b60 R8 =0000000000000000 R9 =ffffffff969fc380 R10=0000000000000003 R11=000000000000032c R12=ffffffff81692c50 R13=ffffffff969e0180 R14=dffffc0000000000 R15=ffffffff96c59388 RIP=ffffffff8169788b RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fac38566d00 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c160ca1000 CR3=00000000487b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a5952245a5952245 a5952245a5952245 a5952245a5952245 a5952245a5952245 a5952245a5952245 a5952245a5952245 a5952245a5952245 a5952245a5952245 ZMM22=ba0750daba0750da ba0750daba0750da ba0750daba0750da ba0750daba0750da ba0750daba0750da ba0750daba0750da ba0750daba0750da ba0750daba0750da ZMM23=1622660516226605 1622660516226605 1622660516226605 1622660516226605 1622660516226605 1622660516226605 1622660516226605 1622660516226605 ZMM24=3567d8883567d888 3567d8883567d888 3567d8883567d888 3567d8883567d888 3567d8883567d888 3567d8883567d888 3567d8883567d888 3567d8883567d888 ZMM25=ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ad89fad6ad89fad6 ZMM26=6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 6f35e5776f35e577 ZMM27=89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 89d27ef589d27ef5 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5504000055040000 5504000055040000 5504000055040000 5504000055040000 5504000055040000 5504000055040000 5504000055040000 5504000055040000 info registers vcpu 2 CPU#2 RAX=fffffbfff2d31588 RBX=fffffbfff2d31589 RCX=ffffffff8169f278 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff9698ac40 RBP=fffffbfff2d31588 RSP=ffffc90000e6f560 R8 =0000000000000000 R9 =fffffbfff2d31588 R10=ffffffff9698ac47 R11=0000000000000002 R12=dffffc0000000000 R13=ffff8880207b0b08 R14=0000000000000004 R15=ffff8880207b0000 RIP=ffffffff81edf1c0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001a448 CR3=000000001a836000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000017b6c3 RBX=0000000000000003 RCX=ffffffff8b12e739 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12020 RBP=ffffed10036ec488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cc548 R15=0000000000000000 RIP=ffffffff8b12fb1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5685538 CR3=00000000287da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000000 Opmask01=00000000fffffff8 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe032fe900 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a2063 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000