last executing test programs: 8.764442586s ago: executing program 0 (id=417): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 8.709631931s ago: executing program 2 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8.618420415s ago: executing program 2 (id=421): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000400)={0xa000001c}) 8.618158979s ago: executing program 2 (id=422): socket$inet6(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0, 0x5}, 0x1c, 0x0}}], 0x1, 0x40088d5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8.540067777s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 8.419771321s ago: executing program 2 (id=425): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x748, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 7.868636249s ago: executing program 0 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 7.868526886s ago: executing program 2 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x3, 0x80001) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) close_range(r2, r2, 0x0) shutdown(r0, 0x0) 7.785594276s ago: executing program 32 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x3, 0x80001) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) close_range(r2, r2, 0x0) shutdown(r0, 0x0) 6.570450051s ago: executing program 0 (id=446): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000e00)=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r7, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 6.510478474s ago: executing program 0 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 6.459757032s ago: executing program 0 (id=449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xfffffffc, 0xb, 0x0, 0x86, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x280, 0x49, 0x7ff, 0x200207, 0xff, "d60000790002800080000900000c00000800"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 6.161737503s ago: executing program 0 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x0, 0xffff}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb26}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.994147428s ago: executing program 33 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x0, 0xffff}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb26}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.446317998s ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 1.424100098s ago: executing program 5 (id=523): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) 1.108619348s ago: executing program 1 (id=535): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.063344175s ago: executing program 4 (id=528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$bpf(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x20, 0x0) unshare(0x60040000) 1.050982923s ago: executing program 3 (id=529): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.039918805s ago: executing program 5 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 851.303311ms ago: executing program 3 (id=530): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) 847.014752ms ago: executing program 5 (id=540): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x4b) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x9dec67345735b285, 0x0) 820.211481ms ago: executing program 4 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002980)={@random="652c1d569d1e", @remote, @void, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x6, 0x4, 0x1, 0x5, 0xd73, 0x67, 0x0, 0x7f, 0x2, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x3, 0x2c}]}}, {0x17, 0x8, 0x0, @remote, "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"}}}}}}, 0x0) 766.874975ms ago: executing program 3 (id=532): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffa, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 693.962777ms ago: executing program 4 (id=533): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 688.921855ms ago: executing program 1 (id=534): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000cc0)={0x5, 0x687}) 613.302858ms ago: executing program 1 (id=536): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x6819, &(0x7f0000000540)={0x0, 0x869ee, 0xc00, 0x7, 0x4050}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 613.113745ms ago: executing program 3 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1}}, 0x0, 0x0, 0x45, 0x0, "1bffc793d737a7d49543ad77a6f328190ab97f9c60778238ac9670df77c0a058a0d7c7189014ea03a1b89a2d5c4730e7f54e3f5636c2698c4e1dabfcb97d121e8f01e554bcbb7336e173e81ea0ced206"}, 0xd8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 605.647366ms ago: executing program 5 (id=539): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 501.635506ms ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x97d}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 496.886784ms ago: executing program 1 (id=542): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 438.456103ms ago: executing program 4 (id=543): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000800) 438.045879ms ago: executing program 4 (id=544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000580)=@gcm_128={{0x303}, "dbab597919c74d3f", "2e69d489eb27ba918fc6dce2035b1f6e", "22e66fd7", "7dfe381cf0263251"}, 0x28) 400.519155ms ago: executing program 4 (id=545): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x4, 0x40783) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 175.589424ms ago: executing program 5 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 171.722919ms ago: executing program 1 (id=554): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 149.874947ms ago: executing program 3 (id=547): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 5 (id=548): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="08e0211db1d69fa4593039c5ad01740c", 0x10}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x20040894) 0s ago: executing program 1 (id=549): r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x20400, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_FRONTEND(r2, 0x80246f4d, &(0x7f0000000000)) close_range(r0, r2, 0x0) kernel console output (not intermixed with test programs): 48711][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.649455][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.653980][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.654785][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.658820][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.711578][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.716187][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.718518][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.722545][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.726951][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.736487][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.739011][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.742503][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.800329][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.804736][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.812256][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.816434][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.823406][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.827399][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.828000][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.831776][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.839987][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.869141][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.878137][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.878257][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.892577][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.892988][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.905109][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.935783][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.967142][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.967285][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.968738][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.968883][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.975260][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.994350][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.001819][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.001962][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.010704][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.020823][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.020917][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.052613][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.069933][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.070038][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.071643][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.071689][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.241009][ T5098] Bluetooth: hci0: command tx timeout [ 40.241551][ T5098] Bluetooth: hci2: command tx timeout [ 40.241655][ T5098] Bluetooth: hci1: command tx timeout [ 40.294220][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.305695][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.330586][ T65] Bluetooth: hci3: command tx timeout [ 40.353902][ T5735] veth0_vlan: entered promiscuous mode [ 40.355524][ T5736] veth0_vlan: entered promiscuous mode [ 40.364114][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.365461][ T5736] veth1_vlan: entered promiscuous mode [ 40.368610][ T5735] veth1_vlan: entered promiscuous mode [ 40.390630][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.407293][ T5743] veth0_vlan: entered promiscuous mode [ 40.408588][ T5735] veth0_macvtap: entered promiscuous mode [ 40.417682][ T5736] veth0_macvtap: entered promiscuous mode [ 40.423393][ T5743] veth1_vlan: entered promiscuous mode [ 40.424975][ T5735] veth1_macvtap: entered promiscuous mode [ 40.432813][ T5736] veth1_macvtap: entered promiscuous mode [ 40.458808][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.466145][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.471825][ T5743] veth0_macvtap: entered promiscuous mode [ 40.474741][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.479310][ T5745] veth0_vlan: entered promiscuous mode [ 40.495389][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.499105][ T5743] veth1_macvtap: entered promiscuous mode [ 40.519049][ T5745] veth1_vlan: entered promiscuous mode [ 40.536197][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.541610][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.542010][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.542048][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.542084][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.556173][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.598093][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.598154][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.638585][ T5745] veth0_macvtap: entered promiscuous mode [ 40.653120][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.653164][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.674139][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.674194][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.678430][ T5745] veth1_macvtap: entered promiscuous mode [ 40.737574][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.737662][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.749429][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.749475][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.750764][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750823][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750868][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750913][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750980][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.751026][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.751071][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.751115][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.775516][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.775676][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.784744][ T5736] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.803262][ T5736] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.806346][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.826252][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.828187][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.828201][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.833808][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.838572][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.923525][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.923739][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.923919][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.990470][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.990536][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.039424][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.039517][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.386523][ T5903] FAULT_INJECTION: forcing a failure. [ 41.386523][ T5903] name failslab, interval 1, probability 0, space 0, times 1 [ 41.389186][ T5902] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 41.389474][ T5903] CPU: 1 UID: 0 PID: 5903 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT(full) [ 41.389493][ T5903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.389501][ T5903] Call Trace: [ 41.389506][ T5903] [ 41.389513][ T5903] dump_stack_lvl+0x100/0x190 [ 41.389537][ T5903] should_fail_ex.cold+0x5/0xa [ 41.389555][ T5903] should_failslab+0xc2/0x120 [ 41.389574][ T5903] __kmalloc_noprof+0xfc/0x840 [ 41.389590][ T5903] ? n_hdlc_alloc_buf+0x5b/0xf0 [ 41.389609][ T5903] n_hdlc_alloc_buf+0x5b/0xf0 [ 41.389627][ T5903] n_hdlc_tty_open+0x257/0x520 [ 41.389644][ T5903] ? __pfx_n_hdlc_tty_open+0x10/0x10 [ 41.389659][ T5903] tty_ldisc_open+0xa2/0x120 [ 41.389674][ T5903] tty_set_ldisc+0x325/0x740 [ 41.389691][ T5903] tty_ioctl+0x5b2/0x1640 [ 41.389710][ T5903] ? __pfx_tty_ioctl+0x10/0x10 [ 41.389725][ T5903] ? do_vfs_ioctl+0x226/0x13e0 [ 41.389747][ T5903] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.389771][ T5903] ? __fget_files+0x34/0x3d0 [ 41.389786][ T5903] ? find_held_lock+0x2b/0x80 [ 41.389800][ T5903] ? __fget_files+0x215/0x3d0 [ 41.389813][ T5903] ? hook_file_ioctl_common+0x140/0x440 [ 41.389837][ T5903] ? __fget_files+0x21f/0x3d0 [ 41.389854][ T5903] tty_compat_ioctl+0x2b3/0x420 [ 41.389871][ T5903] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 41.389888][ T5903] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 41.389912][ T5903] __do_fast_syscall_32+0x13a/0x8b0 [ 41.389934][ T5903] do_fast_syscall_32+0x32/0x70 [ 41.389956][ T5903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.389993][ T5903] RIP: 0023:0xf7fc8fec [ 41.390008][ T5903] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 41.390015][ T5903] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 41.390030][ T5903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005423 [ 41.390040][ T5903] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.390049][ T5903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.390057][ T5903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.390066][ T5903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.390085][ T5903] [ 41.510473][ T5906] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 41.628314][ T5916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16'. [ 41.960719][ T43] audit: type=1326 audit(1788615347.448:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.960790][ T43] audit: type=1326 audit(1788615347.448:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.960834][ T43] audit: type=1326 audit(1788615347.448:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.960881][ T43] audit: type=1326 audit(1788615347.448:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.960929][ T43] audit: type=1326 audit(1788615347.448:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.960977][ T43] audit: type=1326 audit(1788615347.448:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.961011][ T43] audit: type=1326 audit(1788615347.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.969104][ T43] audit: type=1326 audit(1788615347.458:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.969297][ T43] audit: type=1326 audit(1788615347.458:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 41.969481][ T43] audit: type=1326 audit(1788615347.458:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf701efec code=0x7ffc0000 [ 42.133979][ T5939] tipc: Started in network mode [ 42.134072][ T5939] tipc: Node identity ac1414aa, cluster identity 4711 [ 42.134745][ T5939] tipc: New replicast peer: 172.20.20.187 [ 42.135793][ T5939] tipc: Enabled bearer , priority 10 [ 42.211972][ T5950] Unknown status report in ack skb [ 42.285844][ T224] IPVS: starting estimator thread 0... [ 42.331970][ T5098] Bluetooth: hci2: command tx timeout [ 42.332044][ T5098] Bluetooth: hci0: command tx timeout [ 42.332133][ T65] Bluetooth: hci1: command tx timeout [ 42.383470][ T5955] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.401032][ T5739] Bluetooth: hci3: command tx timeout [ 42.601955][ T5971] FAULT_INJECTION: forcing a failure. [ 42.601955][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 42.602041][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 42.602073][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.602084][ T5971] Call Trace: [ 42.602090][ T5971] [ 42.602100][ T5971] dump_stack_lvl+0x100/0x190 [ 42.602163][ T5971] should_fail_ex.cold+0x5/0xa [ 42.602189][ T5971] should_failslab+0xc2/0x120 [ 42.602220][ T5971] __kmalloc_flags_noprof+0x122/0x8e0 [ 42.602246][ T5971] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 42.602269][ T5971] ? do_kmem_cache_create+0x6fc/0x7a0 [ 42.602297][ T5971] do_kmem_cache_create+0x6fc/0x7a0 [ 42.602318][ T5971] ? __kmem_cache_create_args+0x1c3/0x430 [ 42.602349][ T5971] __kmem_cache_create_args+0x1e3/0x430 [ 42.602373][ T5971] copy_pid_ns+0xe2c/0x10a0 [ 42.602401][ T5971] ? __pfx_copy_pid_ns+0x10/0x10 [ 42.602436][ T5971] ? create_new_namespaces+0x30/0xac0 [ 42.602466][ T5971] create_new_namespaces+0x2aa/0xac0 [ 42.602499][ T5971] unshare_nsproxy_namespaces+0xf2/0x220 [ 42.602523][ T5971] ksys_unshare+0x4a2/0xa70 [ 42.602541][ T5971] ? __pfx_ksys_unshare+0x10/0x10 [ 42.602569][ T5971] __ia32_sys_unshare+0x30/0x40 [ 42.602585][ T5971] __do_fast_syscall_32+0x13a/0x8b0 [ 42.602620][ T5971] do_fast_syscall_32+0x32/0x70 [ 42.602647][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.602668][ T5971] RIP: 0023:0xf701efec [ 42.602688][ T5971] Code: Unable to access opcode bytes at 0xf701efc2. [ 42.602696][ T5971] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 42.602715][ T5971] RAX: ffffffffffffffda RBX: 0000000060040000 RCX: 0000000000000000 [ 42.602728][ T5971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.602741][ T5971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.602751][ T5971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 42.602759][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.602783][ T5971] [ 42.605113][ T5971] __kmem_cache_create_args(pid_3) failed with error -12 [ 42.605133][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 42.605157][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.605168][ T5971] Call Trace: [ 42.605175][ T5971] [ 42.605182][ T5971] dump_stack_lvl+0x100/0x190 [ 42.605212][ T5971] __kmem_cache_create_args.cold+0x4c/0x6f [ 42.605243][ T5971] copy_pid_ns+0xe2c/0x10a0 [ 42.605272][ T5971] ? __pfx_copy_pid_ns+0x10/0x10 [ 42.605307][ T5971] ? create_new_namespaces+0x30/0xac0 [ 42.605340][ T5971] create_new_namespaces+0x2aa/0xac0 [ 42.605368][ T5971] unshare_nsproxy_namespaces+0xf2/0x220 [ 42.605398][ T5971] ksys_unshare+0x4a2/0xa70 [ 42.605417][ T5971] ? __pfx_ksys_unshare+0x10/0x10 [ 42.605453][ T5971] __ia32_sys_unshare+0x30/0x40 [ 42.605471][ T5971] __do_fast_syscall_32+0x13a/0x8b0 [ 42.605499][ T5971] do_fast_syscall_32+0x32/0x70 [ 42.605526][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.605549][ T5971] RIP: 0023:0xf701efec [ 42.605569][ T5971] Code: Unable to access opcode bytes at 0xf701efc2. [ 42.605575][ T5971] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 42.605591][ T5971] RAX: ffffffffffffffda RBX: 0000000060040000 RCX: 0000000000000000 [ 42.605602][ T5971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.605615][ T5971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.605627][ T5971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 42.605639][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.605665][ T5971] [ 42.740873][ T2324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.901469][ T2324] usb 6-1: Using ep0 maxpacket: 8 [ 42.902664][ T2324] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 42.905937][ T2324] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.905958][ T2324] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.905994][ T2324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 42.906017][ T2324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 42.906051][ T2324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.936766][ T2324] hub 6-1:1.0: bad descriptor, ignoring hub [ 42.936859][ T2324] hub 6-1:1.0: probe with driver hub failed with error -5 [ 42.937440][ T2324] cdc_wdm 6-1:1.0: skipping garbage [ 42.937455][ T2324] cdc_wdm 6-1:1.0: skipping garbage [ 42.956262][ T2324] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 42.956344][ T2324] cdc_wdm 6-1:1.0: Unknown control protocol [ 43.053848][ T5985] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 43.251065][ T3269] tipc: Node number set to 2886997162 [ 43.449080][ T5996] FAULT_INJECTION: forcing a failure. [ 43.449080][ T5996] name failslab, interval 1, probability 0, space 0, times 0 [ 43.454003][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 43.454036][ T5996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.454046][ T5996] Call Trace: [ 43.454052][ T5996] [ 43.454059][ T5996] dump_stack_lvl+0x100/0x190 [ 43.454082][ T5996] should_fail_ex.cold+0x5/0xa [ 43.454101][ T5996] should_failslab+0xc2/0x120 [ 43.454120][ T5996] __kmalloc_noprof+0xfc/0x840 [ 43.454136][ T5996] ? __vb2_queue_alloc+0x23e/0x1160 [ 43.454169][ T5996] __vb2_queue_alloc+0x23e/0x1160 [ 43.454194][ T5996] vb2_core_reqbufs+0x899/0xf30 [ 43.454214][ T5996] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 43.454231][ T5996] ? rcu_is_watching+0x13/0xc0 [ 43.454247][ T5996] ? __mutex_lock+0x26c/0x1bd0 [ 43.454267][ T5996] ? __video_do_ioctl+0x50f/0xdf0 [ 43.454288][ T5996] vb2_ioctl_reqbufs+0x291/0x450 [ 43.454311][ T5996] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 43.454337][ T5996] vidioc_reqbufs+0x86/0x100 [ 43.454355][ T5996] v4l_reqbufs+0x175/0x1d0 [ 43.454373][ T5996] __video_do_ioctl+0xb2a/0xdf0 [ 43.454395][ T5996] ? __might_fault+0xc5/0x140 [ 43.454414][ T5996] ? __pfx___video_do_ioctl+0x10/0x10 [ 43.454439][ T5996] video_usercopy+0x3d3/0x14c0 [ 43.454459][ T5996] ? __pfx___video_do_ioctl+0x10/0x10 [ 43.454479][ T5996] ? __pfx_video_usercopy+0x10/0x10 [ 43.454503][ T5996] ? __fget_files+0x215/0x3d0 [ 43.454517][ T5996] ? hook_file_ioctl_common+0x140/0x440 [ 43.454540][ T5996] v4l2_ioctl+0x1bd/0x250 [ 43.454562][ T5996] v4l2_compat_ioctl32+0x20f/0x2d0 [ 43.454579][ T5996] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 43.454596][ T5996] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 43.454620][ T5996] __do_fast_syscall_32+0x13a/0x8b0 [ 43.454642][ T5996] do_fast_syscall_32+0x32/0x70 [ 43.454661][ T5996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 43.454678][ T5996] RIP: 0023:0xf706efec [ 43.454695][ T5996] Code: Unable to access opcode bytes at 0xf706efc2. [ 43.454701][ T5996] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 43.454715][ T5996] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 43.454723][ T5996] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.454731][ T5996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.454739][ T5996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.454746][ T5996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.454764][ T5996] [ 43.489136][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 43.489175][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 43.489558][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 43.489569][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 43.489576][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 43.489751][ T2324] usb 6-1: USB disconnect, device number 2 [ 43.800655][ T6009] null_blk: disk nullb1 created [ 44.048295][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 44.050557][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 44.051771][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 44.093953][ T6022] FAULT_INJECTION: forcing a failure. [ 44.093953][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 44.094036][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 44.094063][ T6022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.094072][ T6022] Call Trace: [ 44.094077][ T6022] [ 44.094082][ T6022] dump_stack_lvl+0x100/0x190 [ 44.094103][ T6022] should_fail_ex.cold+0x5/0xa [ 44.094120][ T6022] should_failslab+0xc2/0x120 [ 44.094142][ T6022] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 44.094157][ T6022] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 44.094171][ T6022] ? rcu_is_watching+0x13/0xc0 [ 44.094183][ T6022] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 44.094201][ T6022] krealloc_node_align_noprof+0x1f9/0x3e0 [ 44.094217][ T6022] snd_pcm_hw_rule_add+0x3b3/0x510 [ 44.094232][ T6022] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 44.094248][ T6022] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 44.094262][ T6022] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 44.094278][ T6022] ? mutex_init_lockdep+0xf1/0x120 [ 44.094296][ T6022] ? snd_pcm_attach_substream+0x287/0xd20 [ 44.094311][ T6022] snd_pcm_open_substream+0x942/0x1850 [ 44.094325][ T6022] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 44.094336][ T6022] ? lockdep_init_map_type+0x5c/0x250 [ 44.094355][ T6022] ? lockdep_init_map_type+0x5c/0x250 [ 44.094375][ T6022] snd_pcm_oss_open+0x715/0x1380 [ 44.094397][ T6022] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 44.094415][ T6022] ? __pfx_default_wake_function+0x10/0x10 [ 44.094433][ T6022] ? __lock_acquire+0x4c5/0x1ec0 [ 44.094452][ T6022] ? do_raw_spin_lock+0x128/0x260 [ 44.094471][ T6022] ? soundcore_open+0x231/0x5a0 [ 44.094487][ T6022] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 44.094503][ T6022] soundcore_open+0x2e3/0x5a0 [ 44.094519][ T6022] ? __pfx_soundcore_open+0x10/0x10 [ 44.094534][ T6022] chrdev_open+0x234/0x6a0 [ 44.094548][ T6022] ? __pfx_chrdev_open+0x10/0x10 [ 44.094562][ T6022] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 44.094582][ T6022] do_dentry_open+0x6ab/0x14d0 [ 44.094594][ T6022] ? __pfx_chrdev_open+0x10/0x10 [ 44.094617][ T6022] vfs_open+0x82/0x3f0 [ 44.094636][ T6022] path_openat+0x19fa/0x2440 [ 44.094654][ T6022] ? __pfx_path_openat+0x10/0x10 [ 44.094672][ T6022] do_file_open+0x20e/0x430 [ 44.094688][ T6022] ? __pfx_do_file_open+0x10/0x10 [ 44.094714][ T6022] ? _raw_spin_unlock+0x28/0x50 [ 44.094728][ T6022] ? alloc_fd+0x471/0x7a0 [ 44.094746][ T6022] do_sys_openat2+0x10f/0x1e0 [ 44.094761][ T6022] ? __pfx_do_sys_openat2+0x10/0x10 [ 44.094783][ T6022] __ia32_compat_sys_openat+0x12d/0x210 [ 44.094800][ T6022] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 44.094825][ T6022] __do_fast_syscall_32+0x13a/0x8b0 [ 44.094845][ T6022] do_fast_syscall_32+0x32/0x70 [ 44.094863][ T6022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 44.094878][ T6022] RIP: 0023:0xf706efec [ 44.094896][ T6022] Code: Unable to access opcode bytes at 0xf706efc2. [ 44.094935][ T6022] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 44.094953][ T6022] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 44.094967][ T6022] RDX: 0000000000002002 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.094979][ T6022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 44.094990][ T6022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 44.095000][ T6022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.095025][ T6022] [ 44.197456][ T5739] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 44.197477][ T5739] CPU: 2 UID: 0 PID: 5739 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 44.197501][ T5739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.197514][ T5739] Workqueue: hci2 hci_rx_work [ 44.197539][ T5739] Call Trace: [ 44.197546][ T5739] [ 44.197554][ T5739] dump_stack_lvl+0x100/0x190 [ 44.197584][ T5739] sysfs_warn_dup.cold+0x1c/0x28 [ 44.197612][ T5739] sysfs_create_dir_ns+0x24b/0x2b0 [ 44.197632][ T5739] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 44.197652][ T5739] ? find_held_lock+0x2b/0x80 [ 44.197672][ T5739] ? kobject_add_internal+0x25f/0x930 [ 44.197689][ T5739] ? kobject_add_internal+0x25f/0x930 [ 44.197710][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 44.197739][ T5739] kobject_add_internal+0x2c8/0x930 [ 44.197761][ T5739] kobject_add+0x16a/0x1e0 [ 44.197778][ T5739] ? __pfx_kobject_add+0x10/0x10 [ 44.197795][ T5739] ? class_to_subsys+0x10f/0x150 [ 44.197826][ T5739] ? kobject_put+0xb9/0x640 [ 44.197852][ T5739] ? _raw_spin_unlock+0x28/0x50 [ 44.197879][ T5739] device_add+0x294/0x1970 [ 44.197903][ T5739] ? __pfx_dev_set_name+0x10/0x10 [ 44.197931][ T5739] ? __pfx_device_add+0x10/0x10 [ 44.197963][ T5739] ? mgmt_send_event_skb+0x2fb/0x460 [ 44.197993][ T5739] hci_conn_add_sysfs+0x1a3/0x260 [ 44.198023][ T5739] le_conn_complete_evt+0x122f/0x2130 [ 44.198053][ T5739] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 44.198079][ T5739] ? hci_event_packet+0x186/0xcd0 [ 44.198107][ T5739] hci_le_conn_complete_evt+0x23c/0x3a0 [ 44.198130][ T5739] ? skb_pull_data+0x15f/0x1e0 [ 44.198157][ T5739] hci_le_meta_evt+0x34a/0x5f0 [ 44.198181][ T5739] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 44.198206][ T5739] hci_event_packet+0x51c/0xcd0 [ 44.198227][ T5739] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 44.198250][ T5739] ? __pfx_hci_event_packet+0x10/0x10 [ 44.198274][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.198303][ T5739] hci_rx_work+0x451/0xfc0 [ 44.198329][ T5739] process_one_work+0xac7/0x1b10 [ 44.198363][ T5739] ? __pfx_process_one_work+0x10/0x10 [ 44.198386][ T5739] ? lock_acquire+0x1d1/0x380 [ 44.198416][ T5739] ? __pfx_hci_rx_work+0x10/0x10 [ 44.198455][ T5739] worker_thread+0x5ef/0xe50 [ 44.198486][ T5739] ? kthread+0x13a/0x450 [ 44.198503][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 44.198524][ T5739] kthread+0x373/0x450 [ 44.198542][ T5739] ? __pfx_kthread+0x10/0x10 [ 44.198562][ T5739] ret_from_fork+0x730/0xd60 [ 44.198591][ T5739] ? __pfx_ret_from_fork+0x10/0x10 [ 44.198618][ T5739] ? native_load_gs_index+0x1e/0xc0 [ 44.198641][ T5739] ? __switch_to+0x800/0x10f0 [ 44.198663][ T5739] ? __pfx_kthread+0x10/0x10 [ 44.198683][ T5739] ret_from_fork_asm+0x1a/0x30 [ 44.198713][ T5739] [ 44.198736][ T5739] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.198763][ T5739] Bluetooth: hci2: failed to register connection device [ 44.400331][ T5739] Bluetooth: hci1: command tx timeout [ 44.400421][ T5739] Bluetooth: hci0: command tx timeout [ 44.400466][ T5739] Bluetooth: hci2: command tx timeout [ 44.481125][ T65] Bluetooth: hci3: command tx timeout [ 44.675505][ T6047] sctp: [Deprecated]: syz.2.75 (pid 6047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.675505][ T6047] Use struct sctp_sack_info instead [ 45.909147][ T6101] Bluetooth: MGMT ver 1.23 [ 46.481316][ T65] Bluetooth: hci2: command tx timeout [ 46.481384][ T65] Bluetooth: hci0: command tx timeout [ 46.481438][ T65] Bluetooth: hci1: command tx timeout [ 46.552728][ T42] kernel read not supported for file /video9 (pid: 42 comm: kworker/3:1) [ 46.560652][ T5739] Bluetooth: hci3: command tx timeout [ 47.023001][ T6154] loop0: detected capacity change from 0 to 1 [ 47.083887][ T6154] ldm_validate_privheads(): Disk read failed. [ 47.083962][ T6154] loop0: [ 47.084580][ T6154] loop0: partition table partially beyond EOD, truncated [ 47.435886][ T6166] syz_tun: entered allmulticast mode [ 47.442774][ T6165] syz_tun: left allmulticast mode [ 47.473663][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 47.473732][ T43] audit: type=1326 audit(1788615352.968:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.473774][ T43] audit: type=1326 audit(1788615352.968:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.490715][ T43] audit: type=1326 audit(1788615352.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.490745][ T43] audit: type=1326 audit(1788615352.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.490851][ T43] audit: type=1326 audit(1788615352.988:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.491004][ T43] audit: type=1326 audit(1788615352.988:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.491523][ T43] audit: type=1326 audit(1788615352.988:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.491545][ T43] audit: type=1326 audit(1788615352.988:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.491656][ T43] audit: type=1326 audit(1788615352.988:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.492074][ T43] audit: type=1326 audit(1788615352.988:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 47.602120][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 47.605547][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 47.643857][ T6182] jffs2: notice: (6182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 47.944500][ T6203] ======================================================= [ 47.944500][ T6203] WARNING: The mand mount option has been deprecated and [ 47.944500][ T6203] and is ignored by this kernel. Remove the mand [ 47.944500][ T6203] option from the mount to silence this warning. [ 47.944500][ T6203] ======================================================= [ 48.438919][ T6229] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 48.438970][ T6229] netlink: 224 bytes leftover after parsing attributes in process `syz.3.145'. [ 49.100988][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.284407][ T35] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 49.287736][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.287765][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.287778][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 49.287792][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.289488][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.289503][ T35] usb 5-1: Product: syz [ 49.289511][ T35] usb 5-1: Manufacturer: syz [ 49.289520][ T35] usb 5-1: SerialNumber: syz [ 49.307092][ T35] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 49.307108][ T35] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 49.307137][ T35] usbserial_generic 5-1:1.0: generic converter detected [ 49.328378][ T35] usb 5-1: generic converter now attached to ttyUSB0 [ 49.564368][ T35] usb 5-1: USB disconnect, device number 2 [ 49.575271][ T35] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 49.575652][ T35] usbserial_generic 5-1:1.0: device disconnected [ 50.410281][ T65] Bluetooth: hci2: command 0x0406 tx timeout [ 50.477451][ T6309] tipc: Started in network mode [ 50.477511][ T6309] tipc: Node identity 82b8e4eae4a8, cluster identity 4711 [ 50.477728][ T6309] tipc: Enabled bearer , priority 1 [ 50.480393][ T6307] tipc: Resetting bearer [ 50.493515][ T6307] tipc: Disabling bearer [ 50.597439][ T6319] FAULT_INJECTION: forcing a failure. [ 50.597439][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 50.597934][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT(full) [ 50.597970][ T6319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.597982][ T6319] Call Trace: [ 50.597990][ T6319] [ 50.597998][ T6319] dump_stack_lvl+0x100/0x190 [ 50.598031][ T6319] should_fail_ex.cold+0x5/0xa [ 50.598058][ T6319] should_failslab+0xc2/0x120 [ 50.598085][ T6319] __kmalloc_noprof+0xfc/0x840 [ 50.598107][ T6319] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 50.598139][ T6319] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 50.598163][ T6319] vb2_core_reqbufs+0x382/0xf30 [ 50.598191][ T6319] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 50.598214][ T6319] ? trace_contention_end+0x126/0x160 [ 50.598248][ T6319] ? __video_do_ioctl+0x50f/0xdf0 [ 50.598281][ T6319] vb2_reqbufs+0x1a3/0x1f0 [ 50.598310][ T6319] ? __pfx_vb2_reqbufs+0x10/0x10 [ 50.598341][ T6319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.598371][ T6319] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 50.598409][ T6319] v4l_reqbufs+0x175/0x1d0 [ 50.598435][ T6319] __video_do_ioctl+0xb2a/0xdf0 [ 50.598463][ T6319] ? __might_fault+0xc5/0x140 [ 50.598490][ T6319] ? __pfx___video_do_ioctl+0x10/0x10 [ 50.598524][ T6319] video_usercopy+0x3d3/0x14c0 [ 50.598552][ T6319] ? __pfx___video_do_ioctl+0x10/0x10 [ 50.598582][ T6319] ? __pfx_video_usercopy+0x10/0x10 [ 50.598619][ T6319] ? __fget_files+0x215/0x3d0 [ 50.598638][ T6319] ? hook_file_ioctl_common+0x140/0x440 [ 50.598672][ T6319] v4l2_ioctl+0x1bd/0x250 [ 50.598704][ T6319] v4l2_compat_ioctl32+0x20f/0x2d0 [ 50.598728][ T6319] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 50.598753][ T6319] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 50.598786][ T6319] __do_fast_syscall_32+0x13a/0x8b0 [ 50.598814][ T6319] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.598840][ T6319] do_fast_syscall_32+0x32/0x70 [ 50.598893][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.598921][ T6319] RIP: 0023:0xf701efec [ 50.598950][ T6319] Code: Unable to access opcode bytes at 0xf701efc2. [ 50.598959][ T6319] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 50.598979][ T6319] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 50.598992][ T6319] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.599004][ T6319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.599016][ T6319] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.599029][ T6319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.599056][ T6319] [ 50.678678][ T6322] syzkaller0: entered promiscuous mode [ 50.678694][ T6322] syzkaller0: entered allmulticast mode [ 50.921195][ T6331] syzkaller0: entered promiscuous mode [ 50.921269][ T6331] syzkaller0: entered allmulticast mode [ 51.433765][ T6347] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 51.606728][ T6353] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 52.133391][ T6353] bond1: entered promiscuous mode [ 52.134453][ T6353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.157417][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.157658][ T6356] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 52.157670][ T6356] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 52.164743][ T6356] bond1: (slave ip6gre1): making interface the new active one [ 52.164758][ T6356] ip6gre1: entered promiscuous mode [ 52.175640][ T6356] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 52.252015][ T6366] FAULT_INJECTION: forcing a failure. [ 52.252015][ T6366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.252106][ T6366] CPU: 2 UID: 0 PID: 6366 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 52.252140][ T6366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.252152][ T6366] Call Trace: [ 52.252159][ T6366] [ 52.252167][ T6366] dump_stack_lvl+0x100/0x190 [ 52.252196][ T6366] should_fail_ex.cold+0x5/0xa [ 52.252216][ T6366] ? prepare_alloc_pages+0x16d/0x5b0 [ 52.252242][ T6366] should_fail_alloc_page+0xeb/0x140 [ 52.252265][ T6366] prepare_alloc_pages+0x1f0/0x5b0 [ 52.252286][ T6366] ? __memcg_slab_post_alloc_hook+0x78b/0x1270 [ 52.252317][ T6366] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 52.252348][ T6366] ? rcu_is_watching+0x13/0xc0 [ 52.252365][ T6366] ? trace_kmem_cache_alloc+0x11/0x100 [ 52.252388][ T6366] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 52.252410][ T6366] ? __lock_acquire+0x4c5/0x1ec0 [ 52.252440][ T6366] ? __css_rstat_updated+0x1ce/0x590 [ 52.252468][ T6366] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.252507][ T6366] ? rcu_is_watching+0x13/0xc0 [ 52.252525][ T6366] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 52.252545][ T6366] ? find_held_lock+0x2b/0x80 [ 52.252569][ T6366] ? __lock_acquire+0x4c5/0x1ec0 [ 52.252592][ T6366] ? rcu_is_watching+0x13/0xc0 [ 52.252608][ T6366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.252632][ T6366] ? policy_nodemask+0xed/0x4f0 [ 52.252659][ T6366] alloc_pages_mpol+0x201/0x550 [ 52.252681][ T6366] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 52.252704][ T6366] ? filemap_get_entry+0x22d/0x450 [ 52.252727][ T6366] ? filemap_get_entry+0x22d/0x450 [ 52.252753][ T6366] folio_alloc_noprof+0x22/0x250 [ 52.252780][ T6366] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 52.252801][ T6366] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 52.252821][ T6366] ? rcu_is_watching+0x13/0xc0 [ 52.252858][ T6366] ? trace_kmalloc+0xeb/0x110 [ 52.252883][ T6366] __filemap_get_folio_mpol+0x653/0x1320 [ 52.252914][ T6366] ioctx_alloc+0x7e1/0x21a0 [ 52.252947][ T6366] ? __pfx_ioctx_alloc+0x10/0x10 [ 52.252978][ T6366] __ia32_compat_sys_io_setup+0xc8/0x220 [ 52.253003][ T6366] __do_fast_syscall_32+0x13a/0x8b0 [ 52.253032][ T6366] do_fast_syscall_32+0x32/0x70 [ 52.253057][ T6366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.253078][ T6366] RIP: 0023:0xf7f68fec [ 52.253097][ T6366] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 52.253105][ T6366] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 52.253123][ T6366] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000080000200 [ 52.253135][ T6366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.253146][ T6366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.253157][ T6366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.253168][ T6366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.253193][ T6366] [ 52.358170][ T6373] netlink: 'syz.0.197': attribute type 5 has an invalid length. [ 52.358182][ T6373] netlink: 'syz.0.197': attribute type 9 has an invalid length. [ 52.358190][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 52.726744][ T6410] capability: warning: `syz.1.213' uses deprecated v2 capabilities in a way that may be insecure [ 53.014235][ T6421] Zero length message leads to an empty skb [ 53.048740][ T6423] team_slave_1: entered promiscuous mode [ 53.054298][ T6422] team_slave_1: left promiscuous mode [ 53.445657][ T6441] FAULT_INJECTION: forcing a failure. [ 53.445657][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 53.445726][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT(full) [ 53.445743][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.445751][ T6441] Call Trace: [ 53.445756][ T6441] [ 53.445763][ T6441] dump_stack_lvl+0x100/0x190 [ 53.445786][ T6441] should_fail_ex.cold+0x5/0xa [ 53.445803][ T6441] should_failslab+0xc2/0x120 [ 53.445821][ T6441] __kmalloc_noprof+0xfc/0x840 [ 53.445836][ T6441] ? find_held_lock+0x2b/0x80 [ 53.445849][ T6441] ? alloc_pipe_info+0x1ec/0x590 [ 53.445868][ T6441] alloc_pipe_info+0x1ec/0x590 [ 53.445884][ T6441] splice_direct_to_actor+0x78f/0xa30 [ 53.445900][ T6441] ? __lock_acquire+0x4c5/0x1ec0 [ 53.445916][ T6441] ? __pfx_direct_splice_actor+0x10/0x10 [ 53.445931][ T6441] ? __pfx_aa_file_perm+0x10/0x10 [ 53.445945][ T6441] ? __pfx_futex_hash+0x10/0x10 [ 53.445964][ T6441] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 53.445981][ T6441] ? lock_acquire+0x1d1/0x380 [ 53.445999][ T6441] do_splice_direct+0x174/0x240 [ 53.446015][ T6441] ? __pfx_do_splice_direct+0x10/0x10 [ 53.446031][ T6441] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 53.446046][ T6441] ? bpf_lsm_file_permission+0x9/0x10 [ 53.446062][ T6441] ? security_file_permission+0x76/0x210 [ 53.446082][ T6441] ? rw_verify_area+0xce/0x6d0 [ 53.446104][ T6441] do_sendfile+0xadc/0xe20 [ 53.446127][ T6441] ? __pfx_do_sendfile+0x10/0x10 [ 53.446150][ T6441] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 53.446166][ T6441] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 53.446182][ T6441] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 53.446203][ T6441] __do_fast_syscall_32+0x13a/0x8b0 [ 53.446222][ T6441] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.446240][ T6441] do_fast_syscall_32+0x32/0x70 [ 53.446258][ T6441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.446275][ T6441] RIP: 0023:0xf7fc8fec [ 53.446289][ T6441] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 53.446294][ T6441] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 53.446308][ T6441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 53.446316][ T6441] RDX: 0000000000000000 RSI: 0000000024002de8 RDI: 0000000000000000 [ 53.446324][ T6441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.446331][ T6441] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.446338][ T6441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.446354][ T6441] [ 54.653841][ T6493] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 54.691297][ T6493] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 54.755518][ T6499] process 'syz.0.243' launched './file0' with NULL argv: empty string added [ 54.842570][ T6506] FAULT_INJECTION: forcing a failure. [ 54.842570][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 54.842606][ T6506] CPU: 2 UID: 0 PID: 6506 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 54.842634][ T6506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.842643][ T6506] Call Trace: [ 54.842647][ T6506] [ 54.842653][ T6506] dump_stack_lvl+0x100/0x190 [ 54.842672][ T6506] should_fail_ex.cold+0x5/0xa [ 54.842688][ T6506] should_failslab+0xc2/0x120 [ 54.842703][ T6506] __kmalloc_noprof+0xfc/0x840 [ 54.842716][ T6506] ? handler_new_ref+0x1ab/0xc60 [ 54.842737][ T6506] handler_new_ref+0x1ab/0xc60 [ 54.842758][ T6506] v4l2_ctrl_new+0xe67/0x23a0 [ 54.842780][ T6506] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 54.842798][ T6506] ? handler_new_ref+0x7cb/0xc60 [ 54.842819][ T6506] v4l2_ctrl_new_std+0x1bb/0x290 [ 54.842841][ T6506] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 54.842879][ T6506] ? __mutex_unlock_slowpath+0x35d/0x930 [ 54.842900][ T6506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.842918][ T6506] ? __asan_memcpy+0x3c/0x60 [ 54.842930][ T6506] ? find_ref+0x209/0x420 [ 54.842948][ T6506] handler_new_ref+0x82f/0xc60 [ 54.842971][ T6506] v4l2_ctrl_new+0xe67/0x23a0 [ 54.842995][ T6506] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 54.843019][ T6506] v4l2_ctrl_new_std+0x1bb/0x290 [ 54.843040][ T6506] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 54.843056][ T6506] ? rcu_is_watching+0x13/0xc0 [ 54.843071][ T6506] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 54.843087][ T6506] ? media_request_object_init+0x105/0x180 [ 54.843105][ T6506] vicodec_open+0x1b2/0xf70 [ 54.843119][ T6506] ? kobject_get_unless_zero+0x156/0x200 [ 54.843140][ T6506] v4l2_open+0x1d2/0x490 [ 54.843156][ T6506] ? __pfx_v4l2_open+0x10/0x10 [ 54.843172][ T6506] chrdev_open+0x234/0x6a0 [ 54.843184][ T6506] ? __pfx_apparmor_file_open+0x10/0x10 [ 54.843201][ T6506] ? __pfx_chrdev_open+0x10/0x10 [ 54.843214][ T6506] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 54.843232][ T6506] do_dentry_open+0x6ab/0x14d0 [ 54.843243][ T6506] ? __pfx_chrdev_open+0x10/0x10 [ 54.843259][ T6506] vfs_open+0x82/0x3f0 [ 54.843275][ T6506] path_openat+0x19fa/0x2440 [ 54.843290][ T6506] ? __pfx_path_openat+0x10/0x10 [ 54.843308][ T6506] do_file_open+0x20e/0x430 [ 54.843323][ T6506] ? __pfx_do_file_open+0x10/0x10 [ 54.843347][ T6506] ? _raw_spin_unlock+0x28/0x50 [ 54.843360][ T6506] ? alloc_fd+0x471/0x7a0 [ 54.843377][ T6506] do_sys_openat2+0x10f/0x1e0 [ 54.843392][ T6506] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.843420][ T6506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.843438][ T6506] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 54.843454][ T6506] __ia32_compat_sys_openat+0x12d/0x210 [ 54.843470][ T6506] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 54.843494][ T6506] do_int80_emulation+0x166/0x650 [ 54.843513][ T6506] asm_int80_emulation+0x1a/0x20 [ 54.843524][ T6506] RIP: 0023:0xf71675ab [ 54.843533][ T6506] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 54.843544][ T6506] RSP: 002b:00000000f542603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 54.843555][ T6506] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426100 [ 54.843563][ T6506] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.843569][ T6506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.843575][ T6506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.843581][ T6506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.843596][ T6506] [ 55.087018][ T6514] FAULT_INJECTION: forcing a failure. [ 55.087018][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 55.087084][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(full) [ 55.087110][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.087118][ T6514] Call Trace: [ 55.087123][ T6514] [ 55.087127][ T6514] dump_stack_lvl+0x100/0x190 [ 55.087147][ T6514] should_fail_ex.cold+0x5/0xa [ 55.087163][ T6514] should_failslab+0xc2/0x120 [ 55.087180][ T6514] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.087195][ T6514] ? mas_preallocate+0xc22/0xee0 [ 55.087213][ T6514] mas_preallocate+0xc22/0xee0 [ 55.087232][ T6514] ? __pfx_mas_preallocate+0x10/0x10 [ 55.087254][ T6514] ? __asan_memset+0x23/0x50 [ 55.087265][ T6514] ? init_multi_vma_prep+0x33c/0x650 [ 55.087283][ T6514] commit_merge+0x3cc/0x2150 [ 55.087300][ T6514] ? __vma_start_write+0x1c6/0x280 [ 55.087316][ T6514] ? __pfx_commit_merge+0x10/0x10 [ 55.087336][ T6514] ? __pfx___vma_start_write+0x10/0x10 [ 55.087350][ T6514] ? __pfx_mas_prev+0x10/0x10 [ 55.087367][ T6514] ? dup_anon_vma+0x74/0x2f0 [ 55.087384][ T6514] vma_modify+0xd81/0x29b0 [ 55.087406][ T6514] ? __pfx_vma_modify+0x10/0x10 [ 55.087426][ T6514] ? lock_acquire+0x1d1/0x380 [ 55.087445][ T6514] vma_modify_flags+0x2c3/0x460 [ 55.087463][ T6514] ? __pfx_vma_modify_flags+0x10/0x10 [ 55.087486][ T6514] ? __pfx_futex_wake_mark+0x10/0x10 [ 55.087503][ T6514] mlock_fixup+0x4a8/0xc60 [ 55.087523][ T6514] ? __pfx_mlock_fixup+0x10/0x10 [ 55.087546][ T6514] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 55.087565][ T6514] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 55.087588][ T6514] ? __pfx___might_resched+0x10/0x10 [ 55.087605][ T6514] ? down_write_killable+0x152/0x240 [ 55.087626][ T6514] __do_sys_munlockall+0xc7/0x270 [ 55.087639][ T6514] __do_fast_syscall_32+0x13a/0x8b0 [ 55.087656][ T6514] do_fast_syscall_32+0x32/0x70 [ 55.087672][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.087687][ T6514] RIP: 0023:0xf701efec [ 55.087700][ T6514] Code: Unable to access opcode bytes at 0xf701efc2. [ 55.087705][ T6514] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000099 [ 55.087716][ T6514] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 55.087723][ T6514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.087729][ T6514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.087736][ T6514] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.087742][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.087756][ T6514] [ 55.537996][ T6558] FAULT_INJECTION: forcing a failure. [ 55.537996][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 55.538040][ T6558] CPU: 2 UID: 0 PID: 6558 Comm: syz.0.270 Not tainted syzkaller #0 PREEMPT(full) [ 55.538068][ T6558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.538077][ T6558] Call Trace: [ 55.538083][ T6558] [ 55.538089][ T6558] dump_stack_lvl+0x100/0x190 [ 55.538110][ T6558] should_fail_ex.cold+0x5/0xa [ 55.538126][ T6558] should_failslab+0xc2/0x120 [ 55.538142][ T6558] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 55.538161][ T6558] ? kstrdup_const+0x63/0x80 [ 55.538182][ T6558] kstrdup+0x51/0xe0 [ 55.538199][ T6558] kstrdup_const+0x63/0x80 [ 55.538216][ T6558] __kernfs_new_node+0x9b/0xa10 [ 55.538233][ T6558] ? __pfx___kernfs_new_node+0x10/0x10 [ 55.538248][ T6558] ? lock_acquire+0x1d1/0x380 [ 55.538263][ T6558] ? kernfs_root+0x23/0x2a0 [ 55.538276][ T6558] ? find_held_lock+0x2b/0x80 [ 55.538287][ T6558] ? kernfs_root+0xee/0x2a0 [ 55.538298][ T6558] ? kernfs_root+0xee/0x2a0 [ 55.538314][ T6558] kernfs_new_node+0x117/0x150 [ 55.538331][ T6558] kernfs_create_link+0xcc/0x240 [ 55.538350][ T6558] sysfs_do_create_link_sd+0x90/0x140 [ 55.538363][ T6558] sysfs_create_link+0x61/0xc0 [ 55.538392][ T6558] device_add+0xb62/0x1970 [ 55.538415][ T6558] ? __pfx_device_add+0x10/0x10 [ 55.538433][ T6558] ? kfree_const+0x5a/0x70 [ 55.538453][ T6558] ? kfree+0x1e5/0x6d0 [ 55.538478][ T6558] device_create_groups_vargs+0x1f8/0x270 [ 55.538499][ T6558] device_create+0xed/0x130 [ 55.538515][ T6558] ? __pfx_device_create+0x10/0x10 [ 55.538530][ T6558] ? do_raw_spin_lock+0x128/0x260 [ 55.538552][ T6558] ? is_console_locked+0x9/0x20 [ 55.538568][ T6558] ? con_is_visible+0x65/0x150 [ 55.538585][ T6558] ? csi_J+0x57e/0xad0 [ 55.538600][ T6558] vcs_make_sysfs+0x32/0x80 [ 55.538616][ T6558] vc_allocate+0x539/0x880 [ 55.538633][ T6558] ? __pfx_vc_allocate+0x10/0x10 [ 55.538655][ T6558] con_install+0xa1/0x620 [ 55.538673][ T6558] ? __pfx_con_install+0x10/0x10 [ 55.538692][ T6558] ? __pfx_con_install+0x10/0x10 [ 55.538708][ T6558] tty_init_dev.part.0+0x9e/0x470 [ 55.538741][ T6558] tty_open+0x953/0xe20 [ 55.538760][ T6558] ? __pfx_tty_open+0x10/0x10 [ 55.538774][ T6558] ? chrdev_open+0x589/0x6a0 [ 55.538786][ T6558] ? chrdev_open+0x589/0x6a0 [ 55.538803][ T6558] ? __pfx_tty_open+0x10/0x10 [ 55.538819][ T6558] chrdev_open+0x234/0x6a0 [ 55.538835][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 55.538872][ T6558] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 55.538896][ T6558] do_dentry_open+0x6ab/0x14d0 [ 55.538911][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 55.538931][ T6558] vfs_open+0x82/0x3f0 [ 55.538949][ T6558] path_openat+0x19fa/0x2440 [ 55.538969][ T6558] ? __pfx_path_openat+0x10/0x10 [ 55.538992][ T6558] do_file_open+0x20e/0x430 [ 55.539008][ T6558] ? __pfx_do_file_open+0x10/0x10 [ 55.539032][ T6558] ? _raw_spin_unlock+0x28/0x50 [ 55.539045][ T6558] ? alloc_fd+0x471/0x7a0 [ 55.539062][ T6558] do_sys_openat2+0x10f/0x1e0 [ 55.539077][ T6558] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.539091][ T6558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 55.539109][ T6558] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 55.539128][ T6558] __ia32_compat_sys_openat+0x12d/0x210 [ 55.539148][ T6558] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 55.539176][ T6558] do_int80_emulation+0x166/0x650 [ 55.539197][ T6558] asm_int80_emulation+0x1a/0x20 [ 55.539210][ T6558] RIP: 0023:0xf71a75ab [ 55.539219][ T6558] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 55.539229][ T6558] RSP: 002b:00000000f545d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.539241][ T6558] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f545d100 [ 55.539248][ T6558] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.539255][ T6558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.539261][ T6558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.539267][ T6558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.539282][ T6558] [ 55.743653][ T6568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.780069][ T6574] FAULT_INJECTION: forcing a failure. [ 55.780069][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 55.780135][ T6574] CPU: 3 UID: 0 PID: 6574 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 55.780160][ T6574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.780169][ T6574] Call Trace: [ 55.780177][ T6574] [ 55.780182][ T6574] dump_stack_lvl+0x100/0x190 [ 55.780201][ T6574] should_fail_ex.cold+0x5/0xa [ 55.780217][ T6574] should_failslab+0xc2/0x120 [ 55.780234][ T6574] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 55.780248][ T6574] ? alloc_inode+0x183/0x250 [ 55.780266][ T6574] alloc_inode+0x183/0x250 [ 55.780283][ T6574] iget_locked+0x1d9/0x6d0 [ 55.780299][ T6574] ? __pfx_iget_locked+0x10/0x10 [ 55.780314][ T6574] ? kernfs_root+0xee/0x2a0 [ 55.780328][ T6574] ? kernfs_root+0xee/0x2a0 [ 55.780344][ T6574] kernfs_get_inode+0x46/0x470 [ 55.780358][ T6574] kernfs_iop_lookup+0x1a7/0x2d0 [ 55.780371][ T6574] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 55.780385][ T6574] lookup_open+0xa79/0x1990 [ 55.780408][ T6574] path_openat+0xa2c/0x2440 [ 55.780429][ T6574] ? __pfx_path_openat+0x10/0x10 [ 55.780442][ T6574] ? __pfx___up_read+0x10/0x10 [ 55.780461][ T6574] ? do_user_addr_fault+0x7d7/0x12f0 [ 55.780474][ T6574] ? do_user_addr_fault+0x7d7/0x12f0 [ 55.780489][ T6574] do_file_open+0x20e/0x430 [ 55.780504][ T6574] ? __pfx_do_file_open+0x10/0x10 [ 55.780517][ T6574] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.780542][ T6574] ? _raw_spin_unlock+0x28/0x50 [ 55.780554][ T6574] ? alloc_fd+0x471/0x7a0 [ 55.780570][ T6574] do_sys_openat2+0x10f/0x1e0 [ 55.780585][ T6574] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.780600][ T6574] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 55.780618][ T6574] __ia32_compat_sys_openat+0x12d/0x210 [ 55.780634][ T6574] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 55.780657][ T6574] do_int80_emulation+0x166/0x650 [ 55.780674][ T6574] asm_int80_emulation+0x1a/0x20 [ 55.780685][ T6574] RIP: 0023:0xf71a75ab [ 55.780695][ T6574] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 55.780706][ T6574] RSP: 002b:00000000f545cf9c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.780718][ T6574] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7247fe0 [ 55.780725][ T6574] RDX: 0000000000080001 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.780731][ T6574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.780737][ T6574] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 55.780743][ T6574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.780757][ T6574] [ 55.884803][ T6581] FAULT_INJECTION: forcing a failure. [ 55.884803][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 55.884861][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(full) [ 55.884885][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.884893][ T6581] Call Trace: [ 55.884897][ T6581] [ 55.884902][ T6581] dump_stack_lvl+0x100/0x190 [ 55.884921][ T6581] should_fail_ex.cold+0x5/0xa [ 55.884936][ T6581] should_failslab+0xc2/0x120 [ 55.884952][ T6581] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.884965][ T6581] ? __pfx_map_id_range_down+0x10/0x10 [ 55.884981][ T6581] ? security_inode_alloc+0x3b/0x2c0 [ 55.885003][ T6581] security_inode_alloc+0x3b/0x2c0 [ 55.885018][ T6581] inode_init_always_gfp+0xc6f/0xfb0 [ 55.885035][ T6581] alloc_inode+0x8e/0x250 [ 55.885052][ T6581] new_inode+0x22/0x1c0 [ 55.885070][ T6581] proc_get_inode+0x1d/0x780 [ 55.885087][ T6581] proc_lookup_de+0x236/0x360 [ 55.885105][ T6581] proc_tgid_net_lookup+0x61/0x90 [ 55.885122][ T6581] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 55.885138][ T6581] lookup_open+0xa79/0x1990 [ 55.885163][ T6581] path_openat+0xa2c/0x2440 [ 55.885178][ T6581] ? __pfx_path_openat+0x10/0x10 [ 55.885195][ T6581] do_file_open+0x20e/0x430 [ 55.885209][ T6581] ? __pfx_do_file_open+0x10/0x10 [ 55.885227][ T6581] ? __pfx_kfree_link+0x10/0x10 [ 55.885241][ T6581] ? _raw_spin_unlock+0x28/0x50 [ 55.885254][ T6581] ? alloc_fd+0x471/0x7a0 [ 55.885270][ T6581] do_sys_openat2+0x10f/0x1e0 [ 55.885286][ T6581] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.885303][ T6581] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 55.885318][ T6581] __ia32_compat_sys_openat+0x12d/0x210 [ 55.885335][ T6581] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 55.885357][ T6581] do_int80_emulation+0x166/0x650 [ 55.885376][ T6581] asm_int80_emulation+0x1a/0x20 [ 55.885387][ T6581] RIP: 0023:0xf71675ab [ 55.885397][ T6581] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 55.885408][ T6581] RSP: 002b:00000000f54263cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.885419][ T6581] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426490 [ 55.885426][ T6581] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.885432][ T6581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.885439][ T6581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.885445][ T6581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.885459][ T6581] [ 55.960320][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.031844][ T6578] FAULT_INJECTION: forcing a failure. [ 56.031844][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 56.031927][ T6578] CPU: 3 UID: 0 PID: 6578 Comm: syz.3.278 Not tainted syzkaller #0 PREEMPT(full) [ 56.031954][ T6578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.031963][ T6578] Call Trace: [ 56.031969][ T6578] [ 56.031975][ T6578] dump_stack_lvl+0x100/0x190 [ 56.031995][ T6578] should_fail_ex.cold+0x5/0xa [ 56.032011][ T6578] should_failslab+0xc2/0x120 [ 56.032027][ T6578] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.032042][ T6578] ? xas_split_alloc+0x182/0x530 [ 56.032063][ T6578] xas_split_alloc+0x182/0x530 [ 56.032086][ T6578] __folio_split+0x95e/0x1bf0 [ 56.032104][ T6578] ? __pfx___folio_split+0x10/0x10 [ 56.032114][ T6578] ? folio_alloc_swap+0xbd8/0x1e70 [ 56.032135][ T6578] ? folio_alloc_swap+0x4c6/0x1e70 [ 56.032169][ T6578] shmem_writeout+0x786/0x1a00 [ 56.032189][ T6578] ? __pfx_shmem_writeout+0x10/0x10 [ 56.032205][ T6578] ? __pfx_try_to_unmap+0x10/0x10 [ 56.032221][ T6578] ? find_held_lock+0x2b/0x80 [ 56.032235][ T6578] ? inode_to_bdi+0x9e/0x160 [ 56.032246][ T6578] ? folio_clear_dirty_for_io+0x178/0x960 [ 56.032267][ T6578] shrink_folio_list+0x399a/0x5e40 [ 56.032286][ T6578] ? lock_acquire+0x1d1/0x380 [ 56.032302][ T6578] ? __pfx_shrink_folio_list+0x10/0x10 [ 56.032316][ T6578] ? find_held_lock+0x2b/0x80 [ 56.032327][ T6578] ? __page_table_check_zero+0x27f/0x410 [ 56.032343][ T6578] ? __page_table_check_zero+0x27f/0x410 [ 56.032361][ T6578] ? __page_table_check_zero+0x284/0x410 [ 56.032379][ T6578] ? post_alloc_hook+0xed/0x120 [ 56.032399][ T6578] ? get_page_from_freelist+0x110d/0x35d0 [ 56.032430][ T6578] ? __lock_acquire+0x4c5/0x1ec0 [ 56.032446][ T6578] ? __css_rstat_updated+0x1ce/0x590 [ 56.032462][ T6578] ? rcu_read_unlock+0x17/0x60 [ 56.032481][ T6578] ? __pfx___css_rstat_updated+0x10/0x10 [ 56.032500][ T6578] reclaim_folio_list+0xe9/0x5e0 [ 56.032517][ T6578] ? __pfx_reclaim_folio_list+0x10/0x10 [ 56.032532][ T6578] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 56.032553][ T6578] ? lru_gen_update_size+0x431/0xe20 [ 56.032570][ T6578] ? lru_gen_del_folio+0x382/0x5f0 [ 56.032585][ T6578] reclaim_pages+0x428/0x5e0 [ 56.032602][ T6578] ? __pfx_reclaim_pages+0x10/0x10 [ 56.032616][ T6578] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 56.032635][ T6578] ? folio_isolate_lru+0xd6/0xe90 [ 56.032652][ T6578] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 56.032673][ T6578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 56.032689][ T6578] ? is_bpf_text_address+0x94/0x1a0 [ 56.032705][ T6578] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 56.032722][ T6578] ? __kernel_text_address+0xd/0x30 [ 56.032736][ T6578] ? unwind_get_return_address+0x59/0xa0 [ 56.032753][ T6578] ? __lock_acquire+0x4c5/0x1ec0 [ 56.032769][ T6578] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 56.032787][ T6578] walk_pgd_range+0xbef/0x1e00 [ 56.032802][ T6578] ? register_lock_class+0x3f/0x7b0 [ 56.032824][ T6578] ? __pfx_walk_pgd_range+0x10/0x10 [ 56.032840][ T6578] __walk_page_range+0x171/0x850 [ 56.032853][ T6578] ? __lock_acquire+0x4c5/0x1ec0 [ 56.032873][ T6578] walk_page_range_vma_unsafe+0x209/0x8f0 [ 56.032887][ T6578] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 56.032903][ T6578] ? find_held_lock+0x2b/0x80 [ 56.032914][ T6578] ? mlock_drain_local+0x254/0x4e0 [ 56.032940][ T6578] ? mlock_drain_local+0x254/0x4e0 [ 56.032960][ T6578] walk_page_range_vma+0x63/0x90 [ 56.032975][ T6578] madvise_pageout+0x29e/0x5b0 [ 56.032992][ T6578] ? __pfx_madvise_pageout+0x10/0x10 [ 56.033020][ T6578] madvise_vma_behavior+0x48b/0x2350 [ 56.033039][ T6578] ? mas_prev+0xa4/0x100 [ 56.033058][ T6578] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 56.033075][ T6578] ? mas_walk+0x260/0x310 [ 56.033090][ T6578] ? find_vma_prev+0xd8/0x150 [ 56.033104][ T6578] ? __pfx_find_vma_prev+0x10/0x10 [ 56.033118][ T6578] ? lock_acquire+0x1d1/0x380 [ 56.033141][ T6578] madvise_walk_vmas+0x30e/0xc50 [ 56.033160][ T6578] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 56.033178][ T6578] ? __pfx_futex_wake_mark+0x10/0x10 [ 56.033196][ T6578] ? lock_acquire+0x1d1/0x380 [ 56.033214][ T6578] madvise_do_behavior+0x1ea/0x510 [ 56.033232][ T6578] ? __pfx_madvise_do_behavior+0x10/0x10 [ 56.033250][ T6578] ? down_read+0x13b/0x4c0 [ 56.033274][ T6578] do_madvise+0x238/0x290 [ 56.033290][ T6578] ? __pfx_do_madvise+0x10/0x10 [ 56.033305][ T6578] ? do_futex+0x190/0x440 [ 56.033319][ T6578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.033346][ T6578] __ia32_sys_madvise+0xa7/0x110 [ 56.033362][ T6578] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.033378][ T6578] __do_fast_syscall_32+0x13a/0x8b0 [ 56.033397][ T6578] do_fast_syscall_32+0x32/0x70 [ 56.033414][ T6578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.033430][ T6578] RIP: 0023:0xf701efec [ 56.033445][ T6578] Code: Unable to access opcode bytes at 0xf701efc2. [ 56.033450][ T6578] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 56.033463][ T6578] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 56.033471][ T6578] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.033478][ T6578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.033485][ T6578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.033492][ T6578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.033508][ T6578] [ 56.113765][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 56.114369][ T25] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 56.115163][ T25] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 56.115187][ T25] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 56.115200][ T25] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.115214][ T25] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 56.116832][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.116845][ T25] usb 6-1: Product: syz [ 56.116852][ T25] usb 6-1: Manufacturer: syz [ 56.116860][ T25] usb 6-1: SerialNumber: syz [ 56.127350][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 56.146273][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input5 [ 56.262151][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 56.351351][ T25] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 56.351417][ T25] (id 0x00) [ 56.400601][ T25] rc_core: IR keymap rc-imon-pad not found [ 56.400643][ T25] Registered IR keymap rc-empty [ 56.402349][ T25] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 56.402366][ T25] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 56.490263][ T1033] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.499884][ T6612] input: syz0 as /devices/virtual/input/input7 [ 56.552273][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 56.553164][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input6 [ 56.559423][ T25] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 56.611770][ T6615] handle_userfault: 28 callbacks suppressed [ 56.611843][ T6615] FAULT_FLAG_ALLOW_RETRY missing 801 [ 56.611866][ T6615] CPU: 3 UID: 0 PID: 6615 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 56.611881][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.611889][ T6615] Call Trace: [ 56.611893][ T6615] [ 56.611898][ T6615] dump_stack_lvl+0x100/0x190 [ 56.611920][ T6615] handle_userfault.cold+0x38/0x65 [ 56.611936][ T6615] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.611955][ T6615] ? _raw_spin_unlock+0x28/0x50 [ 56.611968][ T6615] ? __free_frozen_pages+0x751/0x10f0 [ 56.611984][ T6615] ? __pfx_handle_userfault+0x10/0x10 [ 56.612001][ T6615] ? rcu_read_unlock+0x2d/0xb0 [ 56.612018][ T6615] ? rcu_read_unlock+0x2d/0xb0 [ 56.612038][ T6615] do_anonymous_page+0x186d/0x2050 [ 56.612058][ T6615] ? __pfx_do_anonymous_page+0x10/0x10 [ 56.612073][ T6615] ? rcu_read_unlock+0x2d/0xb0 [ 56.612088][ T6615] ? rcu_read_unlock+0x2d/0xb0 [ 56.612110][ T6615] ? __pte_offset_map+0x179/0x310 [ 56.612126][ T6615] __handle_mm_fault+0x1ff3/0x2f60 [ 56.612145][ T6615] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.612162][ T6615] ? pte_offset_map_lock+0x174/0x320 [ 56.612176][ T6615] ? find_held_lock+0x2b/0x80 [ 56.612187][ T6615] ? find_held_lock+0x2b/0x80 [ 56.612199][ T6615] ? follow_page_pte+0x536/0x1050 [ 56.612221][ T6615] handle_mm_fault+0x363/0xa20 [ 56.612241][ T6615] __get_user_pages+0x8ae/0x2c30 [ 56.612259][ T6615] ? __pfx___get_user_pages+0x10/0x10 [ 56.612279][ T6615] populate_vma_page_range+0x267/0x3f0 [ 56.612294][ T6615] ? __pfx_populate_vma_page_range+0x10/0x10 [ 56.612307][ T6615] ? __pfx___vma_start_write+0x10/0x10 [ 56.612325][ T6615] mprotect_fixup+0x925/0xe00 [ 56.612344][ T6615] ? __pfx_mprotect_fixup+0x10/0x10 [ 56.612372][ T6615] do_mprotect_pkey+0xa51/0xdd0 [ 56.612392][ T6615] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 56.612413][ T6615] ? do_raw_spin_lock+0x128/0x260 [ 56.612436][ T6615] ? kcov_ioctl+0x17a/0x760 [ 56.612454][ T6615] __ia32_sys_mprotect+0x75/0xb0 [ 56.612469][ T6615] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.612484][ T6615] __do_fast_syscall_32+0x13a/0x8b0 [ 56.612501][ T6615] do_fast_syscall_32+0x32/0x70 [ 56.612525][ T6615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.612542][ T6615] RIP: 0023:0xf701efec [ 56.612557][ T6615] Code: Unable to access opcode bytes at 0xf701efc2. [ 56.612562][ T6615] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 56.612574][ T6615] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 56.612582][ T6615] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 56.612588][ T6615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.612595][ T6615] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.612601][ T6615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.612618][ T6615] [ 56.660332][ T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.660464][ T1033] usb 7-1: Using ep0 maxpacket: 32 [ 56.661642][ T1033] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 56.662723][ T1033] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 56.662741][ T1033] usb 7-1: config 0 has no interface number 0 [ 56.664291][ T1033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.664303][ T1033] usb 7-1: Product: syz [ 56.664310][ T1033] usb 7-1: Manufacturer: syz [ 56.664317][ T1033] usb 7-1: SerialNumber: syz [ 56.666108][ T1033] usb 7-1: config 0 descriptor?? [ 56.672819][ T1033] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 56.672844][ T1033] usb 7-1: selecting invalid altsetting 1 [ 56.672852][ T1033] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 56.676161][ T1033] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 56.676312][ T1033] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 56.676334][ T1033] usb 7-1: media controller created [ 56.684733][ T1033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.810206][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 56.812313][ T62] usb 5-1: unable to get BOS descriptor or descriptor too short [ 56.812388][ T62] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 56.813448][ T62] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 56.813461][ T62] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 56.813470][ T62] usb 5-1: config 14 has no interface number 0 [ 56.813478][ T62] usb 5-1: config 14 has no interface number 1 [ 56.813543][ T62] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 56.813560][ T62] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 56.813572][ T62] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 56.813584][ T62] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 56.813597][ T62] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 56.813610][ T62] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.813622][ T62] usb 5-1: config 14 interface 57 has no altsetting 0 [ 56.813631][ T62] usb 5-1: config 14 interface 228 has no altsetting 0 [ 56.816423][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.816435][ T62] usb 5-1: Product: syz [ 56.816442][ T62] usb 5-1: Manufacturer: syz [ 56.816449][ T62] usb 5-1: SerialNumber: syz [ 56.848706][ T1686] usb 6-1: USB disconnect, device number 3 [ 56.848780][ T6567] imon:send_packet: packet tx failed (-71) [ 56.860988][ T6567] imon:vfd_write: send packet #0 failed [ 56.861056][ T6616] imon:display_open: display port is already open [ 57.234030][ T62] legousbtower 5-1:14.57: interrupt endpoints not found [ 57.635968][ T62] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 57.639233][ T62] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 57.771842][ T1033] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 57.772293][ T1033] zl10353_read_register: readreg error (reg=127, ret==-110) [ 57.815270][ T1033] usb 7-1: USB disconnect, device number 2 [ 58.000226][ T1686] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.150883][ T1686] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.151720][ T1686] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.153231][ T1686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.153243][ T1686] usb 6-1: Product: syz [ 58.153250][ T1686] usb 6-1: Manufacturer: syz [ 58.153257][ T1686] usb 6-1: SerialNumber: syz [ 58.196342][ T6635] usb 5-1: LEGO USB Tower reset control request failed [ 58.362590][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.367302][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.371880][ T1686] cdc_ether 6-1:1.0: skipping garbage [ 58.378312][ T1686] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 58.384724][ T1686] usb 6-1: USB disconnect, device number 4 [ 58.399094][ T57] usb 5-1: USB disconnect, device number 3 [ 58.407707][ T57] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 58.519282][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 58.840215][ T1033] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.884651][ T6654] evm: overlay not supported [ 58.990640][ T1033] usb 6-1: Using ep0 maxpacket: 8 [ 58.994786][ T1033] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.995917][ T1033] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 58.995938][ T1033] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 58.995970][ T1033] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.995988][ T1033] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.996007][ T1033] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 58.996025][ T1033] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.996057][ T1033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.209419][ T1033] usb 6-1: GET_CAPABILITIES returned 0 [ 59.209476][ T1033] usbtmc 6-1:16.0: can't read capabilities [ 59.250690][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 59.279106][ T6682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.411989][ T1033] usb 6-1: USB disconnect, device number 5 [ 60.660856][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 61.169744][ T6700] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.169798][ T6700] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 61.184806][ T6700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.184853][ T6700] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 61.193459][ T6700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.193493][ T6700] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 61.204081][ T6700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.204132][ T6700] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 67.451395][ T6785] FAULT_INJECTION: forcing a failure. [ 67.451395][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 67.451464][ T6785] CPU: 2 UID: 0 PID: 6785 Comm: syz.1.353 Not tainted syzkaller #0 PREEMPT(full) [ 67.451491][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.451501][ T6785] Call Trace: [ 67.451505][ T6785] [ 67.451511][ T6785] dump_stack_lvl+0x100/0x190 [ 67.451532][ T6785] should_fail_ex.cold+0x5/0xa [ 67.451551][ T6785] should_failslab+0xc2/0x120 [ 67.451568][ T6785] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.451582][ T6785] ? fsnotify_add_mark_locked+0x33e/0x15f0 [ 67.451602][ T6785] ? fsnotify_add_mark_locked+0x39c/0x15f0 [ 67.451624][ T6785] fsnotify_add_mark_locked+0x39c/0x15f0 [ 67.451645][ T6785] ? __pfx_inc_ucount+0x10/0x10 [ 67.451657][ T6785] ? find_held_lock+0x2b/0x80 [ 67.451669][ T6785] ? inotify_update_watch+0x629/0xa50 [ 67.451684][ T6785] inotify_update_watch+0x769/0xa50 [ 67.451699][ T6785] __ia32_sys_inotify_add_watch+0x2d7/0x370 [ 67.451712][ T6785] ? __pfx___ia32_sys_inotify_add_watch+0x10/0x10 [ 67.451729][ T6785] __do_fast_syscall_32+0x13a/0x8b0 [ 67.451749][ T6785] do_fast_syscall_32+0x32/0x70 [ 67.451765][ T6785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.451780][ T6785] RIP: 0023:0xf7fc8fec [ 67.451794][ T6785] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 67.451799][ T6785] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000124 [ 67.451812][ T6785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 67.451819][ T6785] RDX: 00000000000005db RSI: 0000000000000000 RDI: 0000000000000000 [ 67.451826][ T6785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.451832][ T6785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.451839][ T6785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.451854][ T6785] [ 67.611628][ T6793] syzkaller0: entered promiscuous mode [ 67.611681][ T6793] syzkaller0: entered allmulticast mode [ 67.760287][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.920215][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 67.920700][ T5817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.921510][ T5817] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 67.921533][ T5817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.921544][ T5817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.921556][ T5817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.921567][ T5817] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.921586][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.128196][ T5817] usb 6-1: usb_control_msg returned -32 [ 68.128261][ T5817] usbtmc 6-1:16.0: can't read capabilities [ 68.537553][ T6817] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 68.548200][ T6817] bond1: entered promiscuous mode [ 68.548451][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.567190][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.567396][ T6817] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 68.567408][ T6817] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 68.576594][ T6817] bond1: (slave ip6gre1): making interface the new active one [ 68.576651][ T6817] ip6gre1: entered promiscuous mode [ 68.582738][ T6817] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 68.834383][ T6833] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 69.034482][ T42] usb 6-1: USB disconnect, device number 6 [ 70.903023][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.915790][ T854] cfg80211: failed to load regulatory.db [ 71.446672][ T6847] FAULT_INJECTION: forcing a failure. [ 71.446672][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 71.446769][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 71.446819][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.446832][ T6847] Call Trace: [ 71.446839][ T6847] [ 71.446848][ T6847] dump_stack_lvl+0x100/0x190 [ 71.446881][ T6847] should_fail_ex.cold+0x5/0xa [ 71.446907][ T6847] should_failslab+0xc2/0x120 [ 71.446933][ T6847] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.446964][ T6847] ? e1000_set_rx_mode+0x67/0xc90 [ 71.446990][ T6847] e1000_set_rx_mode+0x67/0xc90 [ 71.447018][ T6847] e1000_configure+0x44/0xda0 [ 71.447039][ T6847] ? e1000_down+0x677/0x810 [ 71.447067][ T6847] e1000_up+0x1a/0x190 [ 71.447089][ T6847] e1000_reinit_locked+0xcd/0xe0 [ 71.447113][ T6847] e1000_ioctl+0x43e/0x710 [ 71.447142][ T6847] dev_eth_ioctl+0x164/0x370 [ 71.447175][ T6847] dev_ifsioc+0x180/0x1f10 [ 71.447202][ T6847] ? __pfx_dev_ifsioc+0x10/0x10 [ 71.447223][ T6847] ? __pfx___mutex_lock+0x10/0x10 [ 71.447256][ T6847] ? lock_acquire+0x1d1/0x380 [ 71.447285][ T6847] ? dev_load+0x8e/0x240 [ 71.447305][ T6847] ? dev_load+0x8e/0x240 [ 71.447333][ T6847] dev_ioctl+0x342/0x1070 [ 71.447359][ T6847] sock_do_ioctl+0x1a0/0x280 [ 71.447386][ T6847] ? __pfx_sock_do_ioctl+0x10/0x10 [ 71.447420][ T6847] ? do_vfs_ioctl+0x226/0x13e0 [ 71.447450][ T6847] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.447489][ T6847] compat_sock_ioctl+0x568/0x760 [ 71.447528][ T6847] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 71.447558][ T6847] ? hook_file_ioctl_common+0x140/0x440 [ 71.447594][ T6847] ? __fget_files+0x21f/0x3d0 [ 71.447620][ T6847] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 71.447652][ T6847] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 71.447685][ T6847] __do_fast_syscall_32+0x13a/0x8b0 [ 71.447713][ T6847] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.447740][ T6847] do_fast_syscall_32+0x32/0x70 [ 71.447767][ T6847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.447792][ T6847] RIP: 0023:0xf7fc8fec [ 71.447812][ T6847] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 71.447820][ T6847] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 71.447840][ T6847] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008949 [ 71.447852][ T6847] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.447862][ T6847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.447872][ T6847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.447881][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.447906][ T6847] [ 71.534982][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 71.807507][ T6875] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 71.816832][ T6875] bond1: entered promiscuous mode [ 71.819080][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.863038][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.863431][ T6875] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 71.863449][ T6875] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 71.865915][ T6875] bond1: (slave ip6gre1): making interface the new active one [ 71.865934][ T6875] ip6gre1: entered promiscuous mode [ 71.874276][ T6875] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 72.595100][ T6888] input: syz0 as /devices/virtual/input/input8 [ 74.479371][ T6897] FAULT_INJECTION: forcing a failure. [ 74.479371][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 74.479452][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 74.479479][ T6897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.479493][ T6897] Call Trace: [ 74.479500][ T6897] [ 74.479509][ T6897] dump_stack_lvl+0x100/0x190 [ 74.479541][ T6897] should_fail_ex.cold+0x5/0xa [ 74.479568][ T6897] should_failslab+0xc2/0x120 [ 74.479596][ T6897] __kvmalloc_node_noprof+0x113/0x9b0 [ 74.479620][ T6897] ? bpf_prog_pack_alloc+0x1a6/0x950 [ 74.479647][ T6897] ? bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 74.479692][ T6897] bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 74.479714][ T6897] ? __pfx_jit_fill_hole+0x10/0x10 [ 74.479739][ T6897] bpf_int_jit_compile+0x526/0x1820 [ 74.479775][ T6897] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 74.479811][ T6897] __bpf_prog_select_runtime+0x3dc/0x970 [ 74.479852][ T6897] ? __asan_memcpy+0x3c/0x60 [ 74.479877][ T6897] bpf_prepare_filter+0xd32/0x11e0 [ 74.479903][ T6897] ? __pfx_seccomp_check_filter+0x10/0x10 [ 74.479926][ T6897] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 74.479944][ T6897] ? __asan_memcpy+0x3c/0x60 [ 74.479957][ T6897] ? kmemdup_noprof+0x49/0x60 [ 74.479980][ T6897] bpf_prog_create_from_user+0x1df/0x2e0 [ 74.479999][ T6897] ? __pfx_seccomp_check_filter+0x10/0x10 [ 74.480022][ T6897] do_seccomp+0x7f7/0x2730 [ 74.480039][ T6897] ? __pfx_do_seccomp+0x10/0x10 [ 74.480052][ T6897] ? xfd_validate_state+0x129/0x190 [ 74.480077][ T6897] __do_fast_syscall_32+0x13a/0x8b0 [ 74.480097][ T6897] do_fast_syscall_32+0x32/0x70 [ 74.480115][ T6897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.480146][ T6897] RIP: 0023:0xf7f68fec [ 74.480161][ T6897] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 74.480167][ T6897] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 74.480180][ T6897] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 74.480188][ T6897] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.480196][ T6897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.480204][ T6897] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.480211][ T6897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.480226][ T6897] [ 74.687889][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 75.345454][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 75.557512][ T6937] mmap: syz.2.410 (6937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.659093][ T6941] syzkaller0: entered promiscuous mode [ 75.710264][ T854] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.870281][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 75.870934][ T854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.871848][ T854] usb 6-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 32 [ 75.871874][ T854] usb 6-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 64 [ 75.871894][ T854] usb 6-1: config 1 interface 0 has no altsetting 0 [ 75.873727][ T854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.873745][ T854] usb 6-1: Product: syz [ 75.873757][ T854] usb 6-1: Manufacturer: syz [ 75.873767][ T854] usb 6-1: SerialNumber: syz [ 75.877359][ T6927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.877505][ T6927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.082695][ T854] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.088536][ T854] usb 6-1: USB disconnect, device number 7 [ 76.611745][ T6982] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.615336][ T6982] CIFS: Attempting to mount //127.0.0.1/share [ 76.639868][ T5782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.669922][ T6982] CIFS: VFS: cifs_mount failed w/return code = -112 [ 76.723605][ T5782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.788314][ T5782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.858217][ T5782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.060995][ T57] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.066588][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.068097][ T5782] bridge_slave_1: left allmulticast mode [ 77.068126][ T5782] bridge_slave_1: left promiscuous mode [ 77.069191][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.078185][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.087061][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.093392][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.093841][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.095173][ T5782] bridge_slave_0: left allmulticast mode [ 77.095187][ T5782] bridge_slave_0: left promiscuous mode [ 77.095325][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.105966][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.106165][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.106388][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.107142][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.107612][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.177041][ T7016] FAULT_INJECTION: forcing a failure. [ 77.177041][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 77.177106][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(full) [ 77.177143][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.177155][ T7016] Call Trace: [ 77.177161][ T7016] [ 77.177168][ T7016] dump_stack_lvl+0x100/0x190 [ 77.177199][ T7016] should_fail_ex.cold+0x5/0xa [ 77.177224][ T7016] should_failslab+0xc2/0x120 [ 77.177250][ T7016] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.177273][ T7016] ? security_file_alloc+0x34/0x2c0 [ 77.177305][ T7016] security_file_alloc+0x34/0x2c0 [ 77.177332][ T7016] init_file+0x95/0x480 [ 77.177356][ T7016] alloc_empty_file+0x79/0x1c0 [ 77.177382][ T7016] alloc_file_pseudo+0x183/0x290 [ 77.177409][ T7016] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 77.177435][ T7016] ? alloc_fd+0x471/0x7a0 [ 77.177460][ T7016] sock_alloc_file+0x50/0x210 [ 77.177484][ T7016] __sys_socket+0x1c0/0x260 [ 77.177510][ T7016] ? __pfx___sys_socket+0x10/0x10 [ 77.177535][ T7016] __ia32_sys_socket+0x72/0xb0 [ 77.177553][ T7016] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.177581][ T7016] __do_fast_syscall_32+0x13a/0x8b0 [ 77.177607][ T7016] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.177633][ T7016] do_fast_syscall_32+0x32/0x70 [ 77.177660][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.177685][ T7016] RIP: 0023:0xf701efec [ 77.177707][ T7016] Code: Unable to access opcode bytes at 0xf701efc2. [ 77.177717][ T7016] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 77.177739][ T7016] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 0000000000000003 [ 77.177752][ T7016] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000f540d53c [ 77.177765][ T7016] RBP: 00000000f540d5ec R08: 0000000000000000 R09: 0000000000000000 [ 77.177777][ T7016] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 77.177789][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.177818][ T7016] [ 77.216131][ T5782] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 77.216207][ T5782] ip6gre1 (unregistering): left promiscuous mode [ 77.222601][ T57] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.223810][ T57] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 77.223835][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.226294][ T57] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.226311][ T57] usb 5-1: Product: syz [ 77.226323][ T57] usb 5-1: Manufacturer: syz [ 77.226335][ T57] usb 5-1: SerialNumber: syz [ 77.236349][ T57] usb 5-1: config 0 descriptor?? [ 77.247972][ T57] usb 5-1: selecting invalid altsetting 0 [ 77.339217][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.345452][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.355372][ T5782] bond0 (unregistering): Released all slaves [ 77.376791][ T5782] bond1 (unregistering): Released all slaves [ 77.385708][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.542281][ T57] usb 5-1: USB disconnect, device number 4 [ 77.542383][ C2] usb 5-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 77.542494][ C2] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 77.543372][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.543536][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.543711][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.543871][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544037][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544197][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544355][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544520][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544683][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.544842][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545007][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545172][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545334][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545499][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545662][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545827][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.545986][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.546145][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.546309][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.546495][ T6997] usb 5-1: cannot submit urb 0, error -19: no device [ 77.724250][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.844737][ T5782] hsr_slave_0: left promiscuous mode [ 77.848782][ T5782] hsr_slave_1: left promiscuous mode [ 77.852649][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.855332][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.861232][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.864615][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.877698][ T5782] veth1_macvtap: left promiscuous mode [ 77.877805][ T5782] veth0_macvtap: left promiscuous mode [ 78.033426][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 78.044747][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 78.219521][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.435450][ T7070] Need at least one configuration in g1. [ 78.443712][ T7070] udc dummy_udc.0: failed to start g1: -22 [ 78.446599][ T7070] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 78.457090][ T7070] UDC core: g1: couldn't find an available UDC or it's busy [ 78.543122][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.543318][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.543409][ T7004] bridge_slave_0: entered allmulticast mode [ 78.544692][ T7004] bridge_slave_0: entered promiscuous mode [ 78.548319][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.548456][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.557158][ T7004] bridge_slave_1: entered allmulticast mode [ 78.558572][ T7004] bridge_slave_1: entered promiscuous mode [ 78.595204][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.597939][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.620703][ T7004] team0: Port device team_slave_0 added [ 78.622911][ T7004] team0: Port device team_slave_1 added [ 78.656903][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.657495][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.657508][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.657529][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.662111][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.662124][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.662144][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.699562][ T7004] hsr_slave_0: entered promiscuous mode [ 78.700117][ T7004] hsr_slave_1: entered promiscuous mode [ 78.710914][ T7004] debugfs: 'hsr0' already exists in 'hsr' [ 78.710999][ T7004] Cannot create hsr debugfs directory [ 78.774282][ T35] kernel write not supported for file /input/event0 (pid: 35 comm: kworker/3:0) [ 78.887389][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.890936][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.893314][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.896751][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.899663][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.996947][ T7004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.017946][ T7004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.018418][ T7004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.027232][ T7004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.031061][ T7004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.048319][ T7004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.048846][ T7004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.061414][ T7004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.123048][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.130619][ T5739] Bluetooth: hci0: command tx timeout [ 79.148465][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.166873][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.166970][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.188565][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.188661][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.504149][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.506556][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.506694][ T7088] bridge_slave_0: entered allmulticast mode [ 79.508586][ T7088] bridge_slave_0: entered promiscuous mode [ 79.511262][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.511388][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.511495][ T7088] bridge_slave_1: entered allmulticast mode [ 79.513058][ T7088] bridge_slave_1: entered promiscuous mode [ 79.513319][ T7135] FAULT_INJECTION: forcing a failure. [ 79.513319][ T7135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.513342][ T7135] CPU: 3 UID: 0 PID: 7135 Comm: syz.3.462 Not tainted syzkaller #0 PREEMPT(full) [ 79.513357][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.513367][ T7135] Call Trace: [ 79.513371][ T7135] [ 79.513377][ T7135] dump_stack_lvl+0x100/0x190 [ 79.513397][ T7135] should_fail_ex.cold+0x5/0xa [ 79.513413][ T7135] ? prepare_alloc_pages+0x16d/0x5b0 [ 79.513432][ T7135] should_fail_alloc_page+0xeb/0x140 [ 79.513460][ T7135] prepare_alloc_pages+0x1f0/0x5b0 [ 79.513505][ T7135] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 79.513542][ T7135] ? __pfx_stack_trace_save+0x10/0x10 [ 79.513570][ T7135] ? rcu_is_watching+0x13/0xc0 [ 79.513591][ T7135] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 79.513628][ T7135] ? kasan_save_stack+0x3f/0x50 [ 79.513667][ T7135] ? kasan_save_stack+0x30/0x50 [ 79.513680][ T7135] ? kasan_save_stack+0x31/0x50 [ 79.513693][ T7135] ? __kasan_slab_alloc+0x89/0x90 [ 79.513706][ T7135] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 79.513718][ T7135] ? ptlock_alloc+0x1f/0x70 [ 79.513740][ T7135] ? pte_alloc_one+0x82/0x3d0 [ 79.513764][ T7135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 79.513794][ T7135] ? handle_mm_fault+0x363/0xa20 [ 79.513815][ T7135] ? __gup_longterm_locked+0x87d/0x16f0 [ 79.513838][ T7135] ? __lock_acquire+0x4c5/0x1ec0 [ 79.513875][ T7135] ? clockevents_program_event+0x1bf/0x820 [ 79.513896][ T7135] ? find_held_lock+0x2b/0x80 [ 79.513915][ T7135] ? clockevents_program_event+0x1bf/0x820 [ 79.513933][ T7135] ? clockevents_program_event+0x1bf/0x820 [ 79.513946][ T7135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.513975][ T7135] ? policy_nodemask+0xed/0x4f0 [ 79.514004][ T7135] alloc_pages_mpol+0x201/0x550 [ 79.514032][ T7135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.514065][ T7135] folio_alloc_mpol_noprof+0x36/0x260 [ 79.514094][ T7135] vma_alloc_folio_noprof+0xed/0x1d0 [ 79.514123][ T7135] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 79.514152][ T7135] ? rcu_read_unlock+0x2d/0xb0 [ 79.514169][ T7135] ? rcu_read_unlock+0x2d/0xb0 [ 79.514190][ T7135] do_wp_page+0xe11/0x45c0 [ 79.514209][ T7135] ? lock_acquire+0x1d1/0x380 [ 79.514224][ T7135] ? __pfx_do_wp_page+0x10/0x10 [ 79.514241][ T7135] ? do_raw_spin_lock+0x128/0x260 [ 79.514260][ T7135] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.514283][ T7135] __handle_mm_fault+0x1cd2/0x2f60 [ 79.514305][ T7135] ? __pfx___handle_mm_fault+0x10/0x10 [ 79.514321][ T7135] ? __pfx_mt_find+0x10/0x10 [ 79.514348][ T7135] ? find_vma+0xbf/0x140 [ 79.514364][ T7135] ? __pfx_find_vma+0x10/0x10 [ 79.514388][ T7135] handle_mm_fault+0x363/0xa20 [ 79.514422][ T7135] do_user_addr_fault+0x745/0x12f0 [ 79.514448][ T7135] exc_page_fault+0x6f/0xd0 [ 79.514465][ T7135] asm_exc_page_fault+0x26/0x30 [ 79.514482][ T7135] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 79.514504][ T7135] Code: 00 e8 a4 81 e5 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 ac b0 57 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 79.514522][ T7135] RSP: 0000:ffffc90003007908 EFLAGS: 00050246 [ 79.514540][ T7135] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 79.514552][ T7135] RDX: 0000000000000001 RSI: ffff88800c00a180 RDI: 0000000080009000 [ 79.514561][ T7135] RBP: ffffc90003007d10 R08: 0000000000000000 R09: ffffed10018015ff [ 79.514569][ T7135] R10: ffff88800c00afff R11: 0000000000000000 R12: ffff88800c00a000 [ 79.514577][ T7135] R13: 0000000000008b80 R14: 0000000080008e80 R15: 0000000000001000 [ 79.514594][ T7135] ? _copy_to_iter+0x4b4/0x1720 [ 79.514611][ T7135] ? __pfx__copy_to_iter+0x10/0x10 [ 79.514627][ T7135] ? rcu_is_watching+0x13/0xc0 [ 79.514640][ T7135] ? __up_read+0x333/0x980 [ 79.514662][ T7135] copy_page_to_iter+0x285/0x370 [ 79.514675][ T7135] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 79.514694][ T7135] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 79.514714][ T7135] ? iovec_from_user+0xda/0x140 [ 79.514759][ T7135] process_vm_rw+0x226/0x2d0 [ 79.514784][ T7135] ? __pfx_process_vm_rw+0x10/0x10 [ 79.514807][ T7135] ? find_held_lock+0x2b/0x80 [ 79.514825][ T7135] ? ksys_write+0x190/0x250 [ 79.514861][ T7135] ? xfd_validate_state+0x129/0x190 [ 79.514895][ T7135] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 79.514913][ T7135] ? __do_fast_syscall_32+0xb3/0x8b0 [ 79.514928][ T7135] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.514950][ T7135] __do_fast_syscall_32+0x13a/0x8b0 [ 79.514983][ T7135] do_fast_syscall_32+0x32/0x70 [ 79.515009][ T7135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.515031][ T7135] RIP: 0023:0xf701efec [ 79.515051][ T7135] Code: Unable to access opcode bytes at 0xf701efc2. [ 79.515059][ T7135] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 79.515076][ T7135] RAX: ffffffffffffffda RBX: 0000000000000112 RCX: 0000000080008400 [ 79.515088][ T7135] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 79.515100][ T7135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.515111][ T7135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.515123][ T7135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.515148][ T7135] [ 79.558240][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.563572][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.596710][ T7088] team0: Port device team_slave_0 added [ 79.599640][ T7088] team0: Port device team_slave_1 added [ 79.646619][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.646631][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.646646][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.649006][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.649019][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.649040][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.736695][ T7088] hsr_slave_0: entered promiscuous mode [ 79.737490][ T7088] hsr_slave_1: entered promiscuous mode [ 79.737843][ T7088] debugfs: 'hsr0' already exists in 'hsr' [ 79.737860][ T7088] Cannot create hsr debugfs directory [ 79.795057][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.869908][ T7150] Unknown status report in ack skb [ 79.898410][ T7088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.907140][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.907781][ T7088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.912587][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 79.925914][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.929500][ T7088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.937109][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.944848][ T7088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.954004][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.070256][ T7004] veth0_vlan: entered promiscuous mode [ 80.077844][ T7004] veth1_vlan: entered promiscuous mode [ 80.103689][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.104933][ T7004] veth0_macvtap: entered promiscuous mode [ 80.110749][ T7004] veth1_macvtap: entered promiscuous mode [ 80.122182][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.133780][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.133868][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.139265][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.146215][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.146341][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.150656][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.234715][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234825][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234856][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234885][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.254623][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.254683][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.322374][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.322483][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.562389][ T7205] Unknown status report in ack skb [ 80.674018][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.874926][ T7088] veth0_vlan: entered promiscuous mode [ 80.881512][ T7088] veth1_vlan: entered promiscuous mode [ 80.911245][ T7088] veth0_macvtap: entered promiscuous mode [ 80.914873][ T7088] veth1_macvtap: entered promiscuous mode [ 80.925583][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.932917][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.954564][ T5837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.962081][ T5739] Bluetooth: hci2: command tx timeout [ 80.989859][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.989927][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.991162][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.002075][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.002142][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.050362][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.054972][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.200404][ T5739] Bluetooth: hci0: command tx timeout [ 81.292824][ T7248] Unknown status report in ack skb [ 82.759400][ T7317] FAULT_INJECTION: forcing a failure. [ 82.759400][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 82.759454][ T7317] CPU: 3 UID: 0 PID: 7317 Comm: syz.5.514 Not tainted syzkaller #0 PREEMPT(full) [ 82.759479][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.759488][ T7317] Call Trace: [ 82.759492][ T7317] [ 82.759497][ T7317] dump_stack_lvl+0x100/0x190 [ 82.759517][ T7317] should_fail_ex.cold+0x5/0xa [ 82.759534][ T7317] should_failslab+0xc2/0x120 [ 82.759551][ T7317] __kmalloc_noprof+0xfc/0x840 [ 82.759564][ T7317] ? __vb2_queue_alloc+0x23e/0x1160 [ 82.759580][ T7317] __vb2_queue_alloc+0x23e/0x1160 [ 82.759600][ T7317] vb2_core_reqbufs+0x899/0xf30 [ 82.759616][ T7317] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 82.759637][ T7317] ? rcu_is_watching+0x13/0xc0 [ 82.759657][ T7317] ? __mutex_lock+0x26c/0x1bd0 [ 82.759680][ T7317] ? __video_do_ioctl+0x50f/0xdf0 [ 82.759712][ T7317] vb2_ioctl_reqbufs+0x291/0x450 [ 82.759741][ T7317] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 82.759775][ T7317] vidioc_reqbufs+0x86/0x100 [ 82.759798][ T7317] v4l_reqbufs+0x175/0x1d0 [ 82.759822][ T7317] __video_do_ioctl+0xb2a/0xdf0 [ 82.759851][ T7317] ? __might_fault+0xc5/0x140 [ 82.759873][ T7317] ? __pfx___video_do_ioctl+0x10/0x10 [ 82.759907][ T7317] video_usercopy+0x3d3/0x14c0 [ 82.759933][ T7317] ? __pfx___video_do_ioctl+0x10/0x10 [ 82.759955][ T7317] ? __pfx_video_usercopy+0x10/0x10 [ 82.759987][ T7317] ? __fget_files+0x215/0x3d0 [ 82.760005][ T7317] ? hook_file_ioctl_common+0x140/0x440 [ 82.760036][ T7317] v4l2_ioctl+0x1bd/0x250 [ 82.760059][ T7317] v4l2_compat_ioctl32+0x20f/0x2d0 [ 82.760081][ T7317] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 82.760104][ T7317] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 82.760152][ T7317] __do_fast_syscall_32+0x13a/0x8b0 [ 82.760183][ T7317] do_fast_syscall_32+0x32/0x70 [ 82.760210][ T7317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.760234][ T7317] RIP: 0023:0xf7fe6fec [ 82.760257][ T7317] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 82.760265][ T7317] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 82.760285][ T7317] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 82.760297][ T7317] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.760310][ T7317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.760321][ T7317] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.760332][ T7317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.760357][ T7317] [ 82.907560][ T7322] FAULT_INJECTION: forcing a failure. [ 82.907560][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 82.907639][ T7322] CPU: 2 UID: 0 PID: 7322 Comm: syz.4.517 Not tainted syzkaller #0 PREEMPT(full) [ 82.907677][ T7322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.907691][ T7322] Call Trace: [ 82.907697][ T7322] [ 82.907706][ T7322] dump_stack_lvl+0x100/0x190 [ 82.907737][ T7322] should_fail_ex.cold+0x5/0xa [ 82.907763][ T7322] should_failslab+0xc2/0x120 [ 82.907796][ T7322] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.907826][ T7322] ? __pfx_vim2m_s_ctrl+0x10/0x10 [ 82.907851][ T7322] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 82.907882][ T7322] ? __pfx_queue_init+0x10/0x10 [ 82.907908][ T7322] v4l2_m2m_ctx_init+0x4d/0x380 [ 82.907938][ T7322] vim2m_open+0x4a6/0x830 [ 82.907966][ T7322] v4l2_open+0x1d2/0x490 [ 82.907993][ T7322] ? __pfx_v4l2_open+0x10/0x10 [ 82.908022][ T7322] chrdev_open+0x234/0x6a0 [ 82.908044][ T7322] ? __pfx_apparmor_file_open+0x10/0x10 [ 82.908072][ T7322] ? __pfx_chrdev_open+0x10/0x10 [ 82.908096][ T7322] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 82.908126][ T7322] do_dentry_open+0x6ab/0x14d0 [ 82.908144][ T7322] ? __pfx_chrdev_open+0x10/0x10 [ 82.908168][ T7322] vfs_open+0x82/0x3f0 [ 82.908209][ T7322] path_openat+0x19fa/0x2440 [ 82.908239][ T7322] ? __pfx_path_openat+0x10/0x10 [ 82.908269][ T7322] do_file_open+0x20e/0x430 [ 82.908292][ T7322] ? __pfx_do_file_open+0x10/0x10 [ 82.908328][ T7322] ? _raw_spin_unlock+0x28/0x50 [ 82.908349][ T7322] ? alloc_fd+0x471/0x7a0 [ 82.908382][ T7322] do_sys_openat2+0x10f/0x1e0 [ 82.908411][ T7322] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.908442][ T7322] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 82.908468][ T7322] __ia32_compat_sys_openat+0x12d/0x210 [ 82.908497][ T7322] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 82.908536][ T7322] do_int80_emulation+0x166/0x650 [ 82.908566][ T7322] asm_int80_emulation+0x1a/0x20 [ 82.908586][ T7322] RIP: 0023:0xf71e75ab [ 82.908602][ T7322] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 82.908623][ T7322] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 82.908643][ T7322] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 82.908656][ T7322] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.908668][ T7322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.908681][ T7322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.908693][ T7322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.908720][ T7322] [ 83.041122][ T5739] Bluetooth: hci2: command tx timeout [ 83.187278][ T7335] tipc: Started in network mode [ 83.187347][ T7335] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.188623][ T7335] tipc: New replicast peer: 172.20.20.187 [ 83.189041][ T7335] tipc: Enabled bearer , priority 10 [ 83.282471][ T5739] Bluetooth: hci0: command tx timeout [ 83.637183][ T129] IPVS: starting estimator thread 0... [ 83.687444][ T7359] FAULT_INJECTION: forcing a failure. [ 83.687444][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 83.687522][ T7359] CPU: 2 UID: 0 PID: 7359 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) [ 83.687546][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.687558][ T7359] Call Trace: [ 83.687565][ T7359] [ 83.687573][ T7359] dump_stack_lvl+0x100/0x190 [ 83.687605][ T7359] should_fail_ex.cold+0x5/0xa [ 83.687631][ T7359] should_failslab+0xc2/0x120 [ 83.687655][ T7359] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 83.687680][ T7359] ? debugfs_create_symlink+0x29/0x1f0 [ 83.687710][ T7359] kstrdup+0x51/0xe0 [ 83.687738][ T7359] debugfs_create_symlink+0x29/0x1f0 [ 83.687772][ T7359] ref_tracker_dir_symlink+0x257/0x3b0 [ 83.687802][ T7359] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 83.687852][ T7359] ? rcu_is_watching+0x13/0xc0 [ 83.687870][ T7359] ? ida_alloc_range+0x70d/0x830 [ 83.687896][ T7359] ? kfree+0x1e5/0x6d0 [ 83.687924][ T7359] ? xas_nomem+0x189/0x2c0 [ 83.687955][ T7359] ? __pfx_net_ns_net_init+0x10/0x10 [ 83.687979][ T7359] net_ns_net_init+0x7e/0x120 [ 83.688005][ T7359] ops_init+0x1e2/0x5f0 [ 83.688032][ T7359] setup_net+0x118/0x3a0 [ 83.688056][ T7359] ? __pfx_setup_net+0x10/0x10 [ 83.688087][ T7359] copy_net_ns+0x345/0x7a0 [ 83.688115][ T7359] create_new_namespaces+0x3ea/0xac0 [ 83.688148][ T7359] unshare_nsproxy_namespaces+0xf2/0x220 [ 83.688177][ T7359] ksys_unshare+0x4a2/0xa70 [ 83.688197][ T7359] ? __pfx_ksys_unshare+0x10/0x10 [ 83.688226][ T7359] __ia32_sys_unshare+0x30/0x40 [ 83.688244][ T7359] __do_fast_syscall_32+0x13a/0x8b0 [ 83.688273][ T7359] do_fast_syscall_32+0x32/0x70 [ 83.688300][ T7359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.688324][ T7359] RIP: 0023:0xf7fe4fec [ 83.688345][ T7359] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 83.688355][ T7359] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 83.688376][ T7359] RAX: ffffffffffffffda RBX: 0000000060040000 RCX: 0000000000000000 [ 83.688390][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.688403][ T7359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.688414][ T7359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.688426][ T7359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.688450][ T7359] [ 83.753876][ T7357] IPVS: using max 25 ests per chain, 60000 per kthread [ 83.883954][ T7366] FAULT_INJECTION: forcing a failure. [ 83.883954][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 83.884011][ T7366] CPU: 3 UID: 0 PID: 7366 Comm: syz.3.530 Not tainted syzkaller #0 PREEMPT(full) [ 83.884038][ T7366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.884048][ T7366] Call Trace: [ 83.884053][ T7366] [ 83.884059][ T7366] dump_stack_lvl+0x100/0x190 [ 83.884082][ T7366] should_fail_ex.cold+0x5/0xa [ 83.884100][ T7366] should_failslab+0xc2/0x120 [ 83.884117][ T7366] __kmalloc_noprof+0xfc/0x840 [ 83.884131][ T7366] ? __vb2_queue_alloc+0x23e/0x1160 [ 83.884148][ T7366] __vb2_queue_alloc+0x23e/0x1160 [ 83.884171][ T7366] vb2_core_reqbufs+0x899/0xf30 [ 83.884188][ T7366] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 83.884202][ T7366] ? rcu_is_watching+0x13/0xc0 [ 83.884216][ T7366] ? __mutex_lock+0x26c/0x1bd0 [ 83.884233][ T7366] ? __video_do_ioctl+0x50f/0xdf0 [ 83.884254][ T7366] vb2_ioctl_reqbufs+0x291/0x450 [ 83.884275][ T7366] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 83.884299][ T7366] vidioc_reqbufs+0x86/0x100 [ 83.884315][ T7366] v4l_reqbufs+0x175/0x1d0 [ 83.884332][ T7366] __video_do_ioctl+0xb2a/0xdf0 [ 83.884351][ T7366] ? __might_fault+0xc5/0x140 [ 83.884368][ T7366] ? __pfx___video_do_ioctl+0x10/0x10 [ 83.884391][ T7366] video_usercopy+0x3d3/0x14c0 [ 83.884409][ T7366] ? __pfx___video_do_ioctl+0x10/0x10 [ 83.884428][ T7366] ? __pfx_video_usercopy+0x10/0x10 [ 83.884450][ T7366] ? __fget_files+0x215/0x3d0 [ 83.884463][ T7366] ? hook_file_ioctl_common+0x140/0x440 [ 83.884484][ T7366] v4l2_ioctl+0x1bd/0x250 [ 83.884504][ T7366] v4l2_compat_ioctl32+0x20f/0x2d0 [ 83.884519][ T7366] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 83.884535][ T7366] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 83.884557][ T7366] __do_fast_syscall_32+0x13a/0x8b0 [ 83.884576][ T7366] do_fast_syscall_32+0x32/0x70 [ 83.884594][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.884609][ T7366] RIP: 0023:0xf701efec [ 83.884623][ T7366] Code: Unable to access opcode bytes at 0xf701efc2. [ 83.884629][ T7366] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 83.884642][ T7366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 83.884650][ T7366] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.884657][ T7366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.884664][ T7366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.884671][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.884687][ T7366] [ 84.323442][ T5841] tipc: Node number set to 2886997162 [ 84.791835][ T7413] ================================================================== [ 84.791859][ T7413] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 84.791877][ T7413] Write of size 4 at addr ffff888024eaf900 by task syz.1.549/7413 [ 84.791886][ T7413] [ 84.791892][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.1.549 Not tainted syzkaller #0 PREEMPT(full) [ 84.791906][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.791913][ T7413] Call Trace: [ 84.791917][ T7413] [ 84.791922][ T7413] dump_stack_lvl+0x100/0x190 [ 84.791937][ T7413] print_report+0x13d/0x4b0 [ 84.791954][ T7413] ? __virt_addr_valid+0x239/0x430 [ 84.791971][ T7413] ? try_module_get+0x4c/0xd0 [ 84.791984][ T7413] kasan_report+0xdf/0x1c0 SYZFAIL: failed to recv rpc [ 84.792000][ T7413] ? try_module_get+0x4c/0xd0 [ 84.792013][ T7413] kasan_check_range+0x10f/0x1e0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.792029][ T7413] try_module_get+0x4c/0xd0 [ 84.792042][ T7413] dvb_device_open+0x124/0x3b0 [ 84.792059][ T7413] ? __pfx_dvb_device_open+0x10/0x10 [ 84.792076][ T7413] chrdev_open+0x234/0x6a0 [ 84.792088][ T7413] ? __pfx_apparmor_file_open+0x10/0x10 [ 84.792106][ T7413] ? __pfx_chrdev_open+0x10/0x10 [ 84.792119][ T7413] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 84.792135][ T7413] do_dentry_open+0x6ab/0x14d0 [ 84.792146][ T7413] ? __pfx_chrdev_open+0x10/0x10 [ 84.792159][ T7413] vfs_open+0x82/0x3f0 [ 84.792174][ T7413] path_openat+0x19fa/0x2440 [ 84.792188][ T7413] ? __pfx_path_openat+0x10/0x10 [ 84.792202][ T7413] do_file_open+0x20e/0x430 [ 84.792215][ T7413] ? __pfx_do_file_open+0x10/0x10 [ 84.792233][ T7413] ? _raw_spin_unlock+0x28/0x50 [ 84.792246][ T7413] ? alloc_fd+0x471/0x7a0 [ 84.792258][ T7413] do_sys_openat2+0x10f/0x1e0 [ 84.792273][ T7413] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.792288][ T7413] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 84.792302][ T7413] __ia32_compat_sys_openat+0x12d/0x210 [ 84.792318][ T7413] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 84.792341][ T7413] do_int80_emulation+0x166/0x650 [ 84.792359][ T7413] asm_int80_emulation+0x1a/0x20 [ 84.792370][ T7413] RIP: 0023:0xf71c75ab [ 84.792379][ T7413] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 84.792391][ T7413] RSP: 002b:00000000f548603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 84.792403][ T7413] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5486100 [ 84.792411][ T7413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.792430][ T7413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.792438][ T7413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.792445][ T7413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.792455][ T7413] [ 84.792459][ T7413] [ 84.792462][ T7413] Allocated by task 1: [ 84.792467][ T7413] kasan_save_stack+0x30/0x50 [ 84.792479][ T7413] kasan_save_track+0x14/0x30 [ 84.792491][ T7413] __kasan_kmalloc+0xaa/0xb0 [ 84.792502][ T7413] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 84.792519][ T7413] bus_add_driver+0x92/0x5b0 [ 84.792529][ T7413] driver_register+0x1e2/0x360 [ 84.792542][ T7413] usb_register_driver+0x21c/0x3e0 [ 84.792558][ T7413] do_one_initcall+0x11c/0x6f0 [ 84.792574][ T7413] kernel_init_freeable+0x6ea/0x7b0 [ 84.792586][ T7413] kernel_init+0x21/0x1e0 [ 84.792594][ T7413] ret_from_fork+0x730/0xd60 [ 84.792610][ T7413] ret_from_fork_asm+0x1a/0x30 [ 84.792618][ T7413] [ 84.792621][ T7413] The buggy address belongs to the object at ffff888024eaf800 [ 84.792621][ T7413] which belongs to the cache kmalloc-256 of size 256 [ 84.792629][ T7413] The buggy address is located 48 bytes to the right of [ 84.792629][ T7413] allocated 208-byte region [ffff888024eaf800, ffff888024eaf8d0) [ 84.792640][ T7413] [ 84.792642][ T7413] The buggy address belongs to the physical page: [ 84.792647][ T7413] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24eae [ 84.792657][ T7413] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.792665][ T7413] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 84.792674][ T7413] page_type: f5(slab) [ 84.792683][ T7413] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 84.792693][ T7413] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 84.792702][ T7413] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 84.792711][ T7413] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 84.792721][ T7413] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 84.792730][ T7413] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 84.792736][ T7413] page dumped because: kasan: bad access detected [ 84.792741][ T7413] page_owner tracks the page as allocated [ 84.792744][ T7413] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7828534020 [ 84.792761][ T7413] post_alloc_hook+0xfd/0x120 [ 84.792776][ T7413] get_page_from_freelist+0x110d/0x35d0 [ 84.792793][ T7413] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 84.792811][ T7413] new_slab+0xa9/0x6e0 [ 84.792826][ T7413] refill_objects+0xe3/0x410 [ 84.792843][ T7413] __pcs_replace_empty_main+0x35e/0x650 [ 84.792858][ T7413] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 84.792873][ T7413] bus_add_driver+0x92/0x5b0 [ 84.792882][ T7413] driver_register+0x1e2/0x360 [ 84.792895][ T7413] do_one_initcall+0x11c/0x6f0 [ 84.792910][ T7413] kernel_init_freeable+0x6ea/0x7b0 [ 84.792922][ T7413] kernel_init+0x21/0x1e0 [ 84.792930][ T7413] ret_from_fork+0x730/0xd60 [ 84.792944][ T7413] ret_from_fork_asm+0x1a/0x30 [ 84.792953][ T7413] page last free pid 29 tgid 29 ts 7722594522 stack trace: [ 84.792960][ T7413] __free_frozen_pages+0x79f/0x10f0 [ 84.792973][ T7413] rcu_core+0x5f0/0x1260 [ 84.792988][ T7413] handle_softirqs+0x1e6/0x9d0 [ 84.793003][ T7413] run_ksoftirqd+0x38/0x60 [ 84.793017][ T7413] smpboot_thread_fn+0x3d3/0xab0 [ 84.793026][ T7413] kthread+0x373/0x450 [ 84.793036][ T7413] ret_from_fork+0x730/0xd60 [ 84.793051][ T7413] ret_from_fork_asm+0x1a/0x30 [ 84.793059][ T7413] [ 84.793061][ T7413] Memory state around the buggy address: [ 84.793066][ T7413] ffff888024eaf800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.793074][ T7413] ffff888024eaf880: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 84.793081][ T7413] >ffff888024eaf900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.793087][ T7413] ^ [ 84.793092][ T7413] ffff888024eaf980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.793099][ T7413] ffff888024eafa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.793105][ T7413] ================================================================== [ 84.793181][ T7413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.028486][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.1.549 Not tainted syzkaller #0 PREEMPT(full) [ 85.031336][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.034519][ T7413] Call Trace: [ 85.035600][ T7413] [ 85.036645][ T7413] dump_stack_lvl+0x100/0x190 [ 85.038364][ T7413] vpanic+0x553/0x970 [ 85.039777][ T7413] ? __pfx_vpanic+0x10/0x10 [ 85.041435][ T7413] ? mark_held_locks+0x40/0x70 [ 85.042993][ T7413] ? irqentry_exit+0x24d/0xa10 [ 85.044535][ T7413] ? try_module_get+0x4c/0xd0 [ 85.046051][ T7413] panic+0xd1/0xe0 [ 85.047275][ T7413] ? __pfx_panic+0x10/0x10 [ 85.048762][ T7413] check_panic_on_warn.cold+0x19/0x34 [ 85.050529][ T7413] end_report.part.0+0x3a/0x90 [ 85.052315][ T7413] kasan_report.cold+0xe/0x18 [ 85.054106][ T7413] ? try_module_get+0x4c/0xd0 [ 85.055715][ T7413] kasan_check_range+0x10f/0x1e0 [ 85.057518][ T7413] try_module_get+0x4c/0xd0 [ 85.059396][ T7413] dvb_device_open+0x124/0x3b0 [ 85.060960][ T7413] ? __pfx_dvb_device_open+0x10/0x10 [ 85.062637][ T7413] chrdev_open+0x234/0x6a0 [ 85.064103][ T7413] ? __pfx_apparmor_file_open+0x10/0x10 [ 85.065808][ T7413] ? __pfx_chrdev_open+0x10/0x10 [ 85.067478][ T7413] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 85.069550][ T7413] do_dentry_open+0x6ab/0x14d0 [ 85.071245][ T7413] ? __pfx_chrdev_open+0x10/0x10 [ 85.073222][ T7413] vfs_open+0x82/0x3f0 [ 85.074825][ T7413] path_openat+0x19fa/0x2440 [ 85.076520][ T7413] ? __pfx_path_openat+0x10/0x10 [ 85.078419][ T7413] do_file_open+0x20e/0x430 [ 85.079892][ T7413] ? __pfx_do_file_open+0x10/0x10 [ 85.081490][ T7413] ? _raw_spin_unlock+0x28/0x50 [ 85.083261][ T7413] ? alloc_fd+0x471/0x7a0 [ 85.084705][ T7413] do_sys_openat2+0x10f/0x1e0 [ 85.086278][ T7413] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.088156][ T7413] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 85.089937][ T7413] __ia32_compat_sys_openat+0x12d/0x210 [ 85.091705][ T7413] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 85.093673][ T7413] do_int80_emulation+0x166/0x650 [ 85.095283][ T7413] asm_int80_emulation+0x1a/0x20 [ 85.097018][ T7413] RIP: 0023:0xf71c75ab [ 85.098536][ T7413] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 85.105352][ T7413] RSP: 002b:00000000f548603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 85.108366][ T7413] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5486100 [ 85.110921][ T7413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.113654][ T7413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.116485][ T7413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.119298][ T7413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.121850][ T7413] [ 85.123482][ T7413] Kernel Offset: disabled [ 85.124890][ T7413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:36:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae4665 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc9000799f0b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000064 R14=000000000000000c R15=ffffc9000799f3c8 RIP=ffffffff85ae468f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096963000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033619ff8 CR3=000000006e315000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8bd0c70a RDI=fffffbfff377c974 RBP=ffffffff9bbe4ba0 RSP=ffffc90000577868 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff9145325f R11=0000000000000001 R12=ffffffff8bd0c70a R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff827d60c8 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3ebfee CR3=000000006e315000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90003287f48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c622400 RDI=0000000000000014 RBP=ffffc90003287f38 RSP=ffffc90003287f00 R8 =0000000000000001 R9 =fffffbfff228a64b R10=ffffffff9145325f R11=0000000000000000 R12=ffff8880269b2580 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b7bb88 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efeb05225d0 CR3=000000004c15f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9690a318 RBX=ffff888022253158 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888022253130 RDI=ffffffff8edebe60 RBP=0000000000000007 RSP=ffffc9000eb37410 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888022252580 R13=0000000000020000 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff81e66ecc RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7d5cbb0c80 ffffffff 00c00000 GS =0000 ffff888096c63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560f0303c5d0 CR3=0000000026e3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000fffffffa Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056241f121c50 000056241f121c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff66f35400 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6774203932206469 7020656572662074 73616c2065676170 205d333134375420 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74202c3120646970 202c29434f4c4c41 4d454d4f4e5f5046 475f5f7c504d4f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c59 525445524f4e5f50 46475f5f7c4e5241 574f4e5f5046475f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c53465f504647 5f5f7c4f495f5046 475f5f2830633032 647830206b73616d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000