last executing test programs: 8.214027737s ago: executing program 2 (id=515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x18d100, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/stat\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x80) 8.159056905s ago: executing program 2 (id=520): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.158606504s ago: executing program 2 (id=523): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000f5ffffffffffffff00bbfe8000000000000000000000000000aa0000010100000008"], 0x0) 8.078228635s ago: executing program 2 (id=526): getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) socket(0x28, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2dc, r3, 0xf21, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x17d, 0x2a, [@gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x4, @device_a, 0x4, @value=@broadcast, 0x8, 0x7, @device_b, 0x101}}, @rann={0x7e, 0x15, {{0x1, 0x74}, 0x3, 0xd, @device_a, 0x0, 0x7}}, @perr={0x84, 0x115, {0x7c, 0x11, [{{0x0, 0x1}, @broadcast, 0x7ff, @value=@device_b, 0x2a}, {{}, @device_b, 0x8, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x9}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x15}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x26}, {{}, @device_b, 0x9, @void, 0x2b}, {{}, @broadcast, 0x10001, @void, 0x3}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x1d}, {{0x0, 0x1}, @broadcast, 0x8000, @value, 0x41}, {{}, @device_a, 0x9, @void, 0x41}, {{}, @device_a, 0x9, @void, 0x40}, {{}, @device_b, 0x8, @void, 0x41}, {{}, @device_b, 0x6, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x25}, {{}, @device_b, 0x4, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x200, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x15}]}}, @erp={0x2a, 0x1}, @cf={0x4, 0x6, {0x1, 0x6, 0x5, 0xaf6}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x49}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="606f94de8032"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_IE={0xf2, 0x2a, [@ibss={0x6, 0x2, 0x400}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x1000, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0x78, 0x9}}, @random={0x9, 0xd5, "380ddc24e36f05967b00ca01d7487c6f1945ef256546504251ed030a10e4418669e8c00e06aa11aa28650f4a3dd51fceac14fb57cd4c978f555103a0e08f0b364435eee196d4cad3d550228f08450e1422b8624877234140979b5021ee786534fff75023d97a1b7f5b796bb59741dd03fe36d70058e9185f674970fe44f0f26f428954ea9867d8790ac1604a7e5518e266270c906a031388d11f3bbe121aa6afee08a4c4812e884c0510f63b34de1884052d277a0a90ffe9fbbc06881fdd28f7d199bad537b3cd8fdbff2bef34bc607921ab28674e"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "683a99"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "2cbce38b22262f8338"}]]}, 0x2dc}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) 8.077364846s ago: executing program 2 (id=529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0xe7, 0x203) ioctl$I2C_PEC(r1, 0x708, 0xb) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000a80)={0x1, 0xb, 0x8, &(0x7f0000000a40)={0x1, "f0e9751a54215991ecff3947a72cae56a5c0e1702414b5fd2ecd561bbcc49058e0"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) syz_open_dev$I2C(&(0x7f0000000080), 0xe7, 0x203) (async) ioctl$I2C_PEC(r1, 0x708, 0xb) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000a80)={0x1, 0xb, 0x8, &(0x7f0000000a40)={0x1, "f0e9751a54215991ecff3947a72cae56a5c0e1702414b5fd2ecd561bbcc49058e0"}}) (async) 7.99855834s ago: executing program 2 (id=531): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x3, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) (async) socket(0x10, 0x3, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) write$selinux_attr(r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x3, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) (async) 3.940389845s ago: executing program 3 (id=701): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, &(0x7f0000000240)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) setreuid(0x0, 0xee00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1100, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.940160127s ago: executing program 3 (id=702): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000060000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) 3.938223948s ago: executing program 3 (id=703): r0 = userfaultfd(0x801) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282110000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x442, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) close_range(r0, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) 3.818121409s ago: executing program 3 (id=708): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f00007fffffff000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000000000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) 3.817769411s ago: executing program 3 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r2, 0x0, 0x3}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000018) 3.769904437s ago: executing program 3 (id=712): syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00e70c", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "98558ced0561c369bdce17260aecf0d0ef8051f16a33d395bb9998e65920ac9e", "2d8a3f8f6b35bf2999f23cb4b717412f7761cd850d01a42ebc78bb36b631374a497bd8931167fb9a2bdb672fb36b2879", "f24b91ff3ac89b423d9c2632e77da5f229e21074e80d66883c395413", {"38b27b0047081c5ce5491f55d30a2224", "544c894ff9732ce4f1a601c017cf96f0"}}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000100)=""/210, 0xd2, 0x2000, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x1, 0x2}}, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 310.296364ms ago: executing program 1 (id=776): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newchain={0x54, 0x64, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1e, 0xfff2}, {0xd}, {0xffff, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xff11}, @TCA_CHAIN={0x8, 0xb, 0x3ff8}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x50000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x23939904284bff71, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffffc, 0x7fffffffffffffff, 0xf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000180)) (async) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'batadv_slave_1', 0x32, 0x34}, 0x11) 309.976862ms ago: executing program 1 (id=777): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x2a8, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_VFINFO_LIST={0x258, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffff7, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xc04}}]}, {0x160, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x80000001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x9}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x746, 0x6, 0x88a8}}, {0x14, 0x1, {0x800, 0xd88, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xcb2, 0x7, 0x88a8}}, {0x14, 0x1, {0xe, 0xa02, 0x6, 0x88a8}}, {0x14, 0x1, {0xffff, 0x211, 0x81}}, {0x14, 0x1, {0x8, 0x4a6, 0x2, 0x8100}}, {0x14, 0x1, {0x2, 0x5e8, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6e3, 0x40, 0x88a8}}, {0x14, 0x1, {0xa, 0xcb2, 0x7, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x3}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xd5a, 0x3, 0x88a8}}, {0x14, 0x1, {0x13, 0xa4c, 0x7, 0x8100}}, {0x14, 0x1, {0x800, 0xa24, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xad8, 0x401, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf3c80000, 0x7}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0xc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x8, 0x9}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf4, 0x7e}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5a, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0xe, 0xfffffffb}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffd, 0x1}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffd, 0x3}}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c0}, 0xc800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x198, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8a4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5c0610c1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc026}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x40) 258.9533ms ago: executing program 1 (id=779): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3fffffff}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.790468ms ago: executing program 1 (id=781): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r3 = open(&(0x7f0000000140)='./bus\x00', 0x80, 0x12c) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) unlink(&(0x7f0000001200)='./file1\x00') 178.986818ms ago: executing program 1 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x3d9, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x4, 0x9, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x4, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x0, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x49, 0x3, 0x2, '\x00', 0xff}, {0x8, 0x9e, 0xc0, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@cpuid={0x2, 0x18, {0x1, 0x62b6}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x5}], 0x90}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0x800, 0x7f, 0x6, 0xfffffffffffffffd, 0x200, 0x4, 0x5, 0x40, 0x3, 0x8, 0x7fff, 0x8, 0x6, 0x4, 0x7, 0x6], 0x3000}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000fee000/0x4000)=nil) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x4, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 178.840443ms ago: executing program 0 (id=784): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000001c0000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 178.479803ms ago: executing program 1 (id=785): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r0, &(0x7f0000000000)="7bd461380933e23a3c393df168d4fc797a752e1ecb579390135c7199bd891dcba00d8cf64fbebc09945e74e4b66a88311dc7aef8f6ca2d8f7fceaf64421b56c8724e283476a7d77d7c6c17cd693677840c51eef4e3ffc463f109eee3edde761d78096589b90f5cc3dd9aeaddf119d68ebcb7e2721a15f44c40d77c60fb1e29c83a547881c5e9023ffff5d05bf0022eb28da061a98c01ae96e52a4974820bfaf229cdadf20ab2ed0064348595d38e9fbfc2807af437f2a704006f4d90f578aca3814f8246ebbdd07a0b9a323d38cd7b9515b97cbf347137824e489740e16eecc9529aeb26049a4f8c05579dfafbf4c0019a34a6e6", 0xf4) read$char_usb(r0, &(0x7f0000000100)=""/16, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xfffffffeffffffff, 0x80900) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x87, @multicast2, 0x4e20, 0x4, 'sed\x00', 0xc, 0x7a4e, 0x5a}, 0x2c) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60) lseek(r3, 0x7, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'bridge_slave_0\x00', {}, 0x3}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r4) r5 = socket(0xb, 0x800, 0x7fffffff) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x17, 0x0, "a02b8e75e1342c129179503117681c9785eefc69e2198263f00f310d6f34d3312f67ed4ce213d78190a1b152529cff8f4c0010ee9db257ba8bbb3439769b005fcebe3875c1051cacbe1db27df53041cd"}, 0xd8) sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="66446c8fbd2938fde971ac7cbf29c07c82cf35a82ffc23cd75bb3430c337147edb6157b80192d8cc49900a3d0b425d3818677a8bed95997cf15e97370533b47722519b0767a743ae49533613c767d1f934aaa73135f5dceb2cdf6d517e24619ef8af526cae285d5c2754372fdcc72588d95f677d479ca49a3213b0e2642a6384f81f4be740aeb03188a981d8eb9b53145453edd6d8499e5694892dce75d704880393a702bfb8c9c624879c924e0d62f7e6fc0924373ce1c63be154eeb116996d551e417114d317f3c73fa815ef0c00e8af0368d7", 0xd4}], 0x1, &(0x7f0000000600)=[{0xc0, 0x101, 0x3, "0001a7d2a7a627b743c367c8370aa7afc8f4eb79cc2adbcc90fb813b8e7dcf2e8259d016438f7b1ef920fe99bbcbdcb8e290002710944ce46e766c6e82c26e88ed0b5709bc30a123e0a6289e7a1c7aae4cad18af47e116bacce53878d461d90e3ff0b6563f9c1a6d33afe2d13e7d812201a5d2635416a066bd98e85ecff3ca60633c23656b290b97eef937366e175da796d2d34d1d1c7b2102e599acef8bcd3e44745f848623f7964997ce69"}, {0x110, 0x10c, 0x3, "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"}, {0xe8, 0xff, 0x2d5, "c0a54a8e711fb982cd78c28c0cf04b8b657b2cb559b90a097ae45e2cb658e4a8cf84247370204f21ee7dd1424fc3123907e1e7f9cb3dcd0fcadd15be2d95e4e7f005c956012cd5073fb7b98899937ba79ce529489fa77647eb35715d7a387c6779766ab98b905fc2222072a55d18ac754da414c084cfea727970b27b731ee861437026ba2b7faec0f6cee5ac1d2cf2d7751186132f7bf6444d0add2e23717d1260043d665bd7551194774683854cea54ed875eeaefb9680e420712c9820199e38b80d7291f275249fd7e0fd211d73d6c2097"}, {0x1010, 0x11, 0x2, "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"}, {0x1010, 0x1, 0x10, "11aba3f21d34bb2a0e15a1873994279414057c7559aa1caf081269a8989a173c288317f3d9af477499a278749abda08120fd9834dc833d06bb11eb0d450c4fc803cde6e554e02ad16f44dd9b2affe1633f27b3fd558fbc1ca3841d7f8f708c46187763087400ae02be1c3a182ba743923ddc020a8df469c0e84b8233775dd3eb965c87045716e720145014291b30bddbdccba18abaee9bf1a67c579eea95b39cda2b83821c0cba08b21f7b9ccc31c26ea5fe0cd39e82106c7b3477d5ee111ce586a55f2673a6f61f49792620901135699ceffce83f1fe665d6c6643536ab3caa4898622bcc253ae17f8adad5a81667c0421acaab36d1d90aa98861766e076d440576d6ea5c240d1129c45ae0a46274028f506ff1a133d3f853797f1a3f7da9c6b28c9bf1ab77bbdb080a0a79c8d5916a5820a4d03a918a5581153be41726e89b7ff6a8c549b4e6d9599f00cc7dc8d1d7c564f083bfbb63ded54e47c3cd57853744a7233163599eeced6f642247b9ca83c3de91773e556816ecb31c14d40738ba4661b4086dfca9785286862e59e387b600114aa42b0711f9e55643c25211f7baf07e485bed0f9204a76b315ea3a7417fdcebb59f80362d293629cb402cfb4f80514cacd6d86ac585d6bff1479f52842d905d95d5ab0388060b64039a3442c3f50007d911ebbbaf71404d2ebab45c88d080919ce079a1f276203b7a60b45d534fa0075d4aa80bd50428fe3b75a0302620e5d73eb6384ae99719685bc479a6d1aa6577713e472459d04d7b2ff65e09b8dfa0f58e7ecc68155b20ba13d8918bf34b5e0cf543684aa2563eb49edd0edd7bd64fc79be0aee7d19dd746a9fdfb8333e28368560eb77be671f477d68158f4ec993cc11d7ddb8008a6ff5617fdbd5ef5f307dbd26a2685c901b86527b7d2748859b7de96908baa02658a3e93cc3ba8ab8a83e7f69e8556d8803ec3f16ec2337537e1a47b9debaa2c3588c5ebc0ce30ed5af63ff429a02f39ec457042f6e76f8d8c5c54563aca412aadd158f269a5723e1b891862eceb93239d561f8d1fcbf21e9fc1a19194ff86ad55ed97ec185068f862fc0414b8ed34aaa4969cd7469177cbf84daddbfbcdb87851389fd32987bd16adc644fdb25c2e6933103f88ecd6af106e99625fb05d2d892f96b2b165a29ab4007703205ba3064994e6fa8fbceff94b366628b82c1441544cdfa02b0de57b22804c26b2f705bbf8fb6131264d5f6f86c232f25af8428b733aea739215ff01bb9e26d8b2c8f4965b11b109d0e0d24ec94e13acab0cfbb1db4a17f4493fddba10084f60a4df4571835b048a0a11940c8070ef736ab65ae834aecf8686bec5476bb9df04d5def6899619a4ece8337998b4b13988b7327f0845269f618516fd1f29d3ee105cc33673b97d3357874b4c2c283e2cd4bd8ef4fc8d09f39ae2df30c3ac0e1e0afd7fa3928a54c11ef690bf92e7d54eb1a395ef1b5de0ce61dc0341e0f71c44fa83b366923e4e102ae7737c0beaa70a5c19a9b5e534759714dabd2e99a5107573744b6c0c9eca7dc46d66c22a6b349113e499fc957c6acf605a44194248ec3dc3736037ea457d4a1a16cc3d0c9c07578bdcea41ee521163bdf69ff4311aec39a330a11c9b5bc1b5196af11fb7e15c93b5577e3009f27ccbc4e2616cc69a275b08ef14579e071affb5d2581c589160cfea4053c6170f5aa2ad880694c8ee03d94582223141592926a507dfb3b2e1a87bfc81b15fff309670bceaa5926f8bbc8c0bf3deb84909fe8bc718578b8678e1b284a1e86d39d944bbc624c2f3f8b7ac26237342e4cd7dcccce508a413a6fa8db29aa7e929d0c7131aaddfc4c0adedde1542db43c52807a2511057c373cf6d53719b344ef4903f10a703948ce6ba2674bf6c48043dd9838b942533a5af4d3966b2070774d119628c6269ddbeceba8d6738a6ccd1cda63a1306a7a7ecbbe43b959918bf4019b03c7e1c1e449d8953b9634b553d3918ab216351eca9cd4f049fb44e99548dcfa6cbf273677f0c8cd3b7585fb410fb84799ed8765b80d15bb8fc005013340455abebe6ba2bc2b8d43fd9dd8682e2460fbe12708cc8fbe8761a8a21f6343dc4aea57b439cb8bb06e06f5007802dc47648ba10e1a0419dbdf45bbd9e683817ef8f939420f2d506f6129c8ec8415763e75af194ddcec5d7b8cf7369a62091d9ce2a197b4c5253a4ceec7e5fd99288789e73c0e96c0002e0595c745e2667cc755a4b0a4fa604d72755e39ca35b63cd5e6bc2ae0e73682e4ee1b90ff953497cfa3d01cbe27625770564695b5b5771b086ab065c6e24ab58f99c50b690dc18dc3bbced2a870974e2aae9ccb2017f8f1ccb25d358ff4ca90392c0a974fac4bf65fff31f4d20b9782ba9d866f4141527c2e4c09a6e7049b7e0cd4137f708496c434d0c9001e46e38d19f9a13a3a439c3c3746cef9b293501d0f7ffc471463069636c243462d0752e8368ef199006c4c527d65a600a66305d06a9dbbec1cbe4bcd7acf5803a37dca582a209838e8218a7574c6e8d97ad93d6c42d234fa3fc5eb382aa29fe694c368a57cc6c80be7742eca2b40b0f8442a2f259325780cd26dad61439d89da3565a28eaa772c8e830eb315aab2da45508da6d1d2fb2dc5c7e56df05b6cca49bf2c93a8cf142d971bb1f76bcbfdf0a7e97af5b2d1b180a64e80ef11899b07bcd6f88d28a1cba4a3d95a51ef32000e5f4cdd81acca61db83a06721ac46ac0b61369a64f3d90787ad0e9b93108693dcca2d8b5deacd15825a05bc71c2f37b6d9fdfbd2b3949f9cfcc55e41f039151bb3cb14ea15e0bd5b7e4f393e5282048e1d2b194554456e81527dd49286a79c85cf56c62161d750b7f4b944555e19b5a5002cfcda98dd1335af751a2a99cdd2306f1e12ae372653fec27f8ed22cdc5ba21a787e68bf987c0162288183e095c8b9e711dad8ff853f42860bdf6d772a6762b08ac8df5aae6013c6d1d4a7089b8a8293ae85f79bc6a89ccd8687992449493ac13876fbb07414414f6b24c0ad43ec10be3878c18f1145c0b64218dbb04f8aeaf886cbe902fffc07966a3e7b976ab70c7165396f8ab2e4792fa964fc72944e6b0b349ad2af41228aba5c966a40792f2c6ec486d1d59e1e4a87732332362c456b08af19fd2ce3113ab481f8cc77a3da3d134721a62aac31f0538ca1761e2bf502463ad489cdc0c98a0e80cec95a1ea8d8e71d77c249e60517f54d4193f7859bbcd2f00f3e4c0bafb7ab08cf6c1842da4f147175b4bb661e4a2db8bf866de7da6332538d4b7fd7c067a166b95196a1484a3e43ae7f38b6984072a958ebe74db9fd1bb787085c687558d38dcfa5944d84c86c17bb25e504891ed592b6917fb4900abcca8a2b793ed02b2a509e2ef070b7d7d26fcc4cbfdd9763e54cc9d742576cea790a6f03185b7dc57e2d85047e645b9a6e3b28be4335577cd5bd45148fd14255b0c8bf625a3225ac615f9495561dc2f2c1140f08f0dff4fee638b2756ff646d3c7618ec05dc6e0f7bb439399eef60b4fea9f5e742b48fc1c9f9d90e9e51054550a83cff43147677b2de832c06a3e2cdaf61413ef5574dd82c514f2e98dc5df5eec50c3c600da5e80e7de07729c61c2675eaaa5edeb1e64d45707d0eb9b4ff9b34d0f4328485a021a0f8bfaafc082028d2f473da22b3d333fb6daa40cd49b2f6675578902c5a637ebbe473cdf9284d28953e2d9e9dfac1f691217e32ebf49f385f469f15303f93a3994efbc4f5e51e5ff29ce78c251cd3c92abb823cb0a4c13d25050d78be53cdffa8b67cfaa6d0b1154fc54e36f88579e04d15e9bfc2fe5c60c24361a826da4481e4ea9644daf1953d50335bf5b2802cef332e9f9b9dea058832b380fbf7d042043690af85fb85b07050c40221ed2a386973ad31f43e979e003d5b689617427509386dd1827549c1dc5ba43f35aa715c1962592e4a454b9aa380e91e7c33077fe98de5b7e3363bcf24d23732199651e24e6f40b113e9ee1cdcb1778a8d2d1fc5918564fd3478f758c0dfb6fb56ed57a4a56a7b10218dbb58449c804d00b62f5c842bf85a3ff2b7c741783ed1ad3e9cbbe2d3800db33642d40a579632026f48f63cb72e184fb71999907f6691dacb9214367f153762a3638b51753b61af89a1235def8650aba6c53975116fed010427d7d51a4e452b6f726082d0c835c3fd7feb07192a103304ab3ad3323e05c0087f7c31eb0043ae3014024109f8e60399af82ef844d117e92a96772af3f784cf9c1467068f33e23bb72546810f7b433a7a506904c4c0d89da745144f3ffd75cd97cca42550cbf2a7f997f1ce8d7aa54e8ccdc223f6ba273bc116ac6b4d1d99d7a22576e4d090d1ee29aa90baafb1337f5f4516e02a87a50034aa31b76b76ecd31acd18f8b5e639b857e3cb9790ca63e7b63cf6783eda716d56088f7b5ddbf3267f40778d56b26f30c50adb606747b41bad474ba60c4073779527959f4f1f500b445864bbd242cd204b6a4de61739926606bc3c53f2eb0336ac39c5e55f90594635cd52ecb89d72de559cb90da9a00195b77a693c99e0c3e53acaaf5c0fe56c3cebf667c28975cfc27a3d39a19d14345ff9c130570d6d539935e6404ddf1751b206d68adab1679d22363d69c77acb836a0c7b0ff36d5fde4f46c87942d5f3eacc9218553a6260bd07836e5139855980e271dfeaf2ceb519a1c14c6cf5044dd6ce515bc0f50cef7306db1a9ad7a35ddc16dcc369e0efc9f08a4930af9cfad1cf0622e5dc51b349ca8f7915ae076df4d761fb6b609ed6cd0d8d5475a986da83250afc77d21b0a237ec52601409e0c449e249e7dd856e9d5e5d2edb757fed389e0193ad22e3fb11d7e125962f2ad17f8f122089d70ba0aa5895c96d8774855cda867e15112e404f504deeb31828ee92f9bbb3bfe1012725c9d9d5bc9b33cfac473ea6075a7a13c741428137b7029bf2f0b61cb4fc2daa30d70405c14452f0bbbc1ed813d2822ab849789d1ebfe9304f910ebc53cb48340bc220a75ce8f7fc64bdbc6e88acdb3d7c016d6764ff586c63132c1ca4289e7db669107bb30a27419e15a07d934fe9bf709991be2e55c0c84658670c67f5405c623d99d9d53448dcf282c792b43c9f814d104a7af8fb1bf183d0c4a578beaa1118be772d48e64ed04e2c26f2d9f90b16ac87506244643370180d1b2d7be9ac9d5325f40dcd36c8ebba61c41491562a9e6bac30f7d7d7207b007083f5f51b258c6571db3bc8a1a5d2304cb0cef209626a0435ee140616f0813b9b45ea4d7c951be76625be77bace069dc561bfcb38c66c5e18d62a736291b83afdf2132ab1cb4e2afeba94fa91ac0480f3b4fb92f0a941c712dbcaba9fa5c699d22c8aabd901b0eafbb44c397d05d235d3f45b917296d21b39b77a62edb3820c7e0924051c666939ba651a026ab046b326e1eb83205125cab280b45f4d240894d4153c80a8c0c084aa3cf0222333b24d5178d47515a056d644510da071bbf58539339f53a373758f2214b6f29d287b203099e62acc64c02ce936ae125c7ea4785c5344e18925f6684693753913c4784d74f220d98b3a6b848383b5a77aa10eb98bdf804b2f55172d6440d402c1a6cd8800d2b243ba265a291e697c86a918852fb65c67750bf6cf4aed1b357eae84a8c38c3b0d576f3d3743d3b895c2819b9250801f498d409753caab47a1aff34fda463c819f360ebced160c1440c425632b83a3243ed2aea153aa6cec39422f2502912050319bca29511128ea6754525ba8dbf197b44c92a9bc9be50f6"}, {0x18, 0x29, 0x66, "dba7"}], 0x22f0}}], 0x1, 0x884) readv(r5, &(0x7f0000002980)=[{&(0x7f0000002940)=""/56, 0x38}], 0x1) syz_usb_disconnect(r4) close(r0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/kernel/uevent_helper', 0x121a42, 0x40) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000002a00)={0x1, 0x4, 0x9, 0x3, 0x6, 0x7f, 0x500, 0x110d5021, 0x9, 0x17}) bind$tipc(r5, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000002ac0)) syz_usb_connect$cdc_ecm(0x6, 0xbd, &(0x7f0000002b00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x1, 0x1, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, '\ra\v'}, {0x5, 0x24, 0x0, 0x4f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xffff, 0xe7, 0x4}, [@mdlm_detail={0x36, 0x24, 0x13, 0x10, "6fc64d697810291a4e89972e1ae68d7c1d12e580210c3ae74be3970c8b5ed994747a7bf5f369f64e5d0715e9b9a2a6a9eac7"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x1, 0x8}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0x0, 0x0, 0xa9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0xe, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfc, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000002d40)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x310, 0x2, 0x6, 0x90, 0xff, 0xc8}, 0x6e, &(0x7f0000002c00)={0x5, 0xf, 0x6e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5, 0x0, 0x35cb, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x7ecb9aedb519021, 0x7, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0xf4, 0x6, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "89d3acb3b478538d4bd0e8111db9206b"}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x4, 0xf000, 0x7, [0xc0c0, 0xc030, 0xc000, 0xffc00f, 0xff3f00, 0xff30]}, @ssp_cap={0x14, 0x10, 0xa, 0xaa, 0x2, 0x3, 0x0, 0x8, [0xf, 0xff000f]}]}, 0x3, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000002cc0)=@string={0x4, 0x3, '\to'}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_disconnect(r4) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000002d80)=0x8, &(0x7f0000002dc0)=0x4) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000002e00)="9353103b8ce1e3e36e6728756e5462cbc8fd476dc6f575624ffe8b185d49f1da85f633500d1ace1639c9dee7e458f73721e42675ed102afc0eaf84c391baea147c03c2dcd174c31e8f750e0b8bd69681b4e443157def4018f5") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002f40)={'ip6gre0\x00', &(0x7f0000002ec0)={'syztnl0\x00', 0x0, 0x2b, 0x4, 0x9, 0x1, 0x69, @local, @loopback, 0x20, 0x40, 0x5, 0xfae}}) sendmsg$nl_route_sched(r6, &(0x7f0000003040)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)=@newtclass={0x6c, 0x28, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xf}, {0x6, 0xf}, {0x9}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x56, 0x2}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000003080)={0x6, 0x0, 0x9}) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000003100)) 176.3772ms ago: executing program 0 (id=786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xa4102, 0xc}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='snd_soc_jack_report\x00', r4, 0x0, 0x1}, 0x18) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r3) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x50001, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000240)=0x0) statx(r4, &(0x7f0000000280)='./file0\x00', 0x6000, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)) setresuid(r6, r7, r9) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000480)=0x3) sendmsg$sock(r4, &(0x7f00000016c0)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x1}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000540)="9c1ae5f1d0913559e8b4342b96117a3c2bd4f289091f69b16d1b1bf150039fc1e2a375466e289517facb50e7a9c4692848880d196418889d0cc088e7d806e52ba3d2", 0x42}, {&(0x7f00000005c0)="bd9c8362ac0d9750705b7a350df7b3d2d49f368b43da8a5721114d983e807fd764454c951667696528c24e8b04f5c85c40b1b236d291f0f3822b150c5311b10936b6a344ca2f84594f7d86ca6005c4ac6de4a0e98416dbead43f263e2160b2a7e93e824cd7", 0x65}, {&(0x7f0000000640)="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", 0x1000}], 0x3, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0xfff}}], 0x18}, 0x40) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001740)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, &(0x7f0000001780)=r12) r13 = openat$cgroup_ro(r4, &(0x7f00000017c0)='cgroup.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000001800)={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0xfbfb, "558f689f1b5a690eedb18ebc10950e18edf43521d52e5668cf13a8cc95b3df8357b0b21555ea4e20ad5adcdba2a0"}}}, &(0x7f0000001880)={0x1, 0x3, [0x426, 0x5d3, 0xb80, 0x750]}) r14 = syz_clone3(&(0x7f0000001b40)={0x2000, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940), {0x1e}, &(0x7f0000001980)=""/112, 0x70, &(0x7f0000001a00)=""/231, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r13}}, 0x58) read$FUSE(r4, &(0x7f0000001f00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGSID(r13, 0x5429, &(0x7f0000003f40)=0x0) sendmsg$netlink(r13, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)={0x10c, 0x2b, 0x10, 0x70bd25, 0x25dfdbfb, "", [@generic, @nested={0x54, 0x9c, 0x0, 0x1, [@generic="466859ba656a1010b6036d756d8126dafffd08e3fcc966ffd3285e792b2fc9bea53fe8ecbdefffc580d799caabaa6fed59fd492897a08e25d5e2666e", @typed={0x8, 0x10c, 0x0, 0x0, @pid}, @nested={0x4, 0x13d}, @nested={0x4, 0x140}, @nested={0x4, 0x13e}]}, @nested={0x9e, 0xc1, 0x0, 0x1, [@generic="c0f886468a74a3aca392158fb32c5399fbe20c1bbed5808f7a314a7776d2f65262f0288531b24e685c63d8859f8562620726b52d158c2c19bb025beab5c4d9d5699f6d6609446270548e0b43506e82dfebc82d34dcc00aaae768e3deeec60c79470f15512602f35bc2b9b71b722370e33bd9ac9e46e2160fa93d8b5aebdafbf2d06d287974a14d6c742566acdfba251f16570a35bb5b545d09d4"]}, @typed={0x8, 0x72, 0x0, 0x0, @pid=r14}]}, 0x10c}, {&(0x7f0000001d00)={0x1bc, 0x32, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@generic="13411b93505561e7540abd7d2b48732511499c4380ea6a78b85b5a3f66379fabf7db56f93a1792ca4c85e48fd65f9536889138cba1af1a3ec2dca1b4c36118f54143f44163453145d9b88636f332d4e37005aceb1b0b7d6c82e13917606a11bb6eaf446de6b30cefacaf2a51440e5420f679abb4ba9e9f46c5ec9f18615e424ee969f6ed381c5ebbb8263164b57ce0e846050c512e8ba65d10b90877d2a67619ebf737a66fcad7219033960496066d9f90b0b0d9bcb8e70c74e851d60695", @nested={0xe9, 0xc9, 0x0, 0x1, [@nested={0x4, 0x5}, @typed={0x57, 0xf3, 0x0, 0x0, @binary="bf6b57949eb68b247de0f0d87b3b4ed99379009a2dcdfaf39029343118aa1039f7ac378a21069e6fe2fb6f6637c7aa150c1de0003c3d1b46d41daa7478bc7357079d099baf42de41e3f1be42cffeeb09c9b43a"}, @typed={0x54, 0xa0, 0x0, 0x0, @binary="91dfadff632f1e039f42c4f38eef1c1fc4f07ae0c856a36a6be772ee45b34fae3430ce25c986c084abebd38c269b87b4f91dffbf1dc74cd27c3a23887034fb2c7637fee540b82d01aeb498ebef937324"}, @nested={0x4, 0x104}, @generic="e00743fef9cfd6845a55e347ccddc6cab15cc58521e1574c8eeb619fda8ce09b3b1420ac328716338c916a25792b711567"]}]}, 0x1bc}], 0x2, &(0x7f0000003f80)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r16, r10, r8}}}], 0x40, 0x4044091}, 0x48004) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000004000)) fremovexattr(r11, &(0x7f0000004040)=@random={'osx.', 'snd_soc_jack_report\x00'}) r17 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r17, 0xae60) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)={0x60, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x19b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x1b}, {0xb}, {0x1b, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x6, 0x1}, {0xf328254b6d9816f7}, {0x12}, {0x60, 0x1}, {0x48, 0x1}, {0x1b, 0x1}, {0x1}, {0xc, 0x1}, {0x60, 0x1}, {0x48, 0x1}, {0x1, 0x1}, {0x2}, {0x48, 0x1}, {0x12, 0x1}, {0x60}, {0x9}, {0x12}, {0x30, 0x1}, {0x2, 0x1}, {0x12}, {0xf96a1448d6943294, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000021}, 0x40000) 80.130758ms ago: executing program 0 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x1000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000) 79.882787ms ago: executing program 0 (id=788): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r0, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x2007, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x62, 0xfffffffffffffffd}], 0x1ffffff}) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x11000}) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xfffffffffffffe86}}, 0x4000080) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x40101, 0x0) ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f00000000c0)={0x0, 0x1000, 0x6, 0x81}) (async) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 79.588655ms ago: executing program 0 (id=789): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=790): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000004040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0xa, 0x20, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) read$FUSE(r8, &(0x7f00000025c0)={0x2020}, 0x2020) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) bind$ax25(r0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$netlink(0x10, 0x3, 0x1) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0xdaa4, 0x8001, 0x408, 0xfffffffb, 0x1000, 0xfe, 0x6623, 0x6, 0x7, 0x4, 0x3, 0x2, 0xfffffffe, 0x9, 0x6, 0x7, 0x1, 0x99d, 0x4, 0xa263, 0x10, 0x5, 0x0, 0x9, 0x2, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x44]}) kernel console output (not intermixed with test programs): :system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.232244][ T40] audit: type=1400 audit(1752584724.674:63): avc: denied { write } for pid=5862 comm="sh" path="pipe:[6196]" dev="pipefs" ino=6196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.244439][ T40] audit: type=1400 audit(1752584724.694:64): avc: denied { execute } for pid=5862 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.251367][ T40] audit: type=1400 audit(1752584724.694:65): avc: denied { execute_no_trans } for pid=5862 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.221233][ T40] audit: type=1400 audit(1752584726.664:66): avc: denied { mounton } for pid=5862 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.223720][ T5862] cgroup: Unknown subsys name 'net' [ 41.375701][ T5862] cgroup: Unknown subsys name 'cpuset' [ 41.379988][ T5862] cgroup: Unknown subsys name 'rlimit' [ 41.620627][ T5902] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.290554][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.146379][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.146399][ T40] audit: type=1400 audit(1752584730.594:80): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.349422][ T40] audit: type=1400 audit(1752584730.794:81): avc: denied { create } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.358226][ T40] audit: type=1400 audit(1752584730.794:82): avc: denied { read write } for pid=5946 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.366554][ T40] audit: type=1400 audit(1752584730.794:83): avc: denied { open } for pid=5946 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.374032][ T40] audit: type=1400 audit(1752584730.804:84): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="socket:[5676]" dev="sockfs" ino=5676 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.393721][ T5310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.396801][ T5310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.399419][ T5310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.401998][ T5310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.404678][ T5310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.407977][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.408599][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.411262][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.414907][ T40] audit: type=1400 audit(1752584730.864:85): avc: denied { read } for pid=5946 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.416463][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.419292][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.419649][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.419945][ T5310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.420125][ T5310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.420403][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.421124][ T5310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.421289][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.421865][ T5310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.421920][ T40] audit: type=1400 audit(1752584730.864:86): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.422042][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.425206][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.426437][ T40] audit: type=1400 audit(1752584730.864:87): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.429488][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.582294][ T40] audit: type=1400 audit(1752584731.024:88): avc: denied { module_request } for pid=5946 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.645363][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.737855][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 45.767300][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.812144][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.816260][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.818837][ T5946] bridge_slave_0: entered allmulticast mode [ 45.821484][ T5946] bridge_slave_0: entered promiscuous mode [ 45.831070][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.846484][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.848746][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.850980][ T5946] bridge_slave_1: entered allmulticast mode [ 45.853687][ T5946] bridge_slave_1: entered promiscuous mode [ 45.990153][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.014226][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.016543][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.018820][ T5958] bridge_slave_0: entered allmulticast mode [ 46.021479][ T5958] bridge_slave_0: entered promiscuous mode [ 46.025301][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.094070][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.096290][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.098604][ T5958] bridge_slave_1: entered allmulticast mode [ 46.101150][ T5958] bridge_slave_1: entered promiscuous mode [ 46.134389][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.136653][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.138899][ T5947] bridge_slave_0: entered allmulticast mode [ 46.141438][ T5947] bridge_slave_0: entered promiscuous mode [ 46.174500][ T5946] team0: Port device team_slave_0 added [ 46.178682][ T5946] team0: Port device team_slave_1 added [ 46.208084][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.210314][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.212551][ T5947] bridge_slave_1: entered allmulticast mode [ 46.215872][ T5947] bridge_slave_1: entered promiscuous mode [ 46.235763][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.254079][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.257072][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.260023][ T5955] bridge_slave_0: entered allmulticast mode [ 46.263850][ T5955] bridge_slave_0: entered promiscuous mode [ 46.283599][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.287852][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.290136][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.301800][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.307238][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.309449][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.311904][ T5955] bridge_slave_1: entered allmulticast mode [ 46.316120][ T5955] bridge_slave_1: entered promiscuous mode [ 46.320689][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.336784][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.338983][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.346994][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.368297][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.400806][ T5958] team0: Port device team_slave_0 added [ 46.455073][ T5958] team0: Port device team_slave_1 added [ 46.458564][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.476530][ T5947] team0: Port device team_slave_0 added [ 46.492186][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.513292][ T5947] team0: Port device team_slave_1 added [ 46.551216][ T5946] hsr_slave_0: entered promiscuous mode [ 46.553465][ T5946] hsr_slave_1: entered promiscuous mode [ 46.571384][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.573625][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.581277][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.586765][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.589713][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.600521][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.621053][ T5955] team0: Port device team_slave_0 added [ 46.651454][ T5955] team0: Port device team_slave_1 added [ 46.654097][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.656413][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.664235][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.699191][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.701334][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.711547][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.759308][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.761469][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.769166][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.791731][ T5958] hsr_slave_0: entered promiscuous mode [ 46.795776][ T5958] hsr_slave_1: entered promiscuous mode [ 46.797793][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.800229][ T5958] Cannot create hsr debugfs directory [ 46.803751][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.806420][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.814155][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.919029][ T5947] hsr_slave_0: entered promiscuous mode [ 46.921184][ T5947] hsr_slave_1: entered promiscuous mode [ 46.923514][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.925836][ T5947] Cannot create hsr debugfs directory [ 46.930060][ T5955] hsr_slave_0: entered promiscuous mode [ 46.932221][ T5955] hsr_slave_1: entered promiscuous mode [ 46.936388][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.938741][ T5955] Cannot create hsr debugfs directory [ 47.221199][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.234084][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.240462][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.249823][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.275307][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.279945][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.286446][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.290208][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.327001][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.337467][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.341807][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.346207][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.395685][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.399674][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.403995][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.408399][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.438312][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.469868][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.473577][ T5953] Bluetooth: hci3: command tx timeout [ 47.476337][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.483209][ T5953] Bluetooth: hci1: command tx timeout [ 47.483222][ T5951] Bluetooth: hci0: command tx timeout [ 47.485278][ T5310] Bluetooth: hci2: command tx timeout [ 47.495832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.498138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.504976][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.511315][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.513581][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.518876][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.524463][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.526711][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.538544][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.540767][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.570179][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.587947][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.590247][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.595952][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.599858][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.601985][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.627412][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.637361][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.638024][ T40] audit: type=1400 audit(1752584733.084:89): avc: denied { sys_module } for pid=5958 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.639595][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.658683][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.660905][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.717011][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.740227][ T5946] veth0_vlan: entered promiscuous mode [ 47.752230][ T5946] veth1_vlan: entered promiscuous mode [ 47.758088][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.777591][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.796181][ T5946] veth0_macvtap: entered promiscuous mode [ 47.806864][ T5946] veth1_macvtap: entered promiscuous mode [ 47.818645][ T5958] veth0_vlan: entered promiscuous mode [ 47.830128][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.834572][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.837711][ T5958] veth1_vlan: entered promiscuous mode [ 47.841867][ T5955] veth0_vlan: entered promiscuous mode [ 47.849980][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.857557][ T5955] veth1_vlan: entered promiscuous mode [ 47.861308][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.865673][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.869159][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.872596][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.908102][ T5958] veth0_macvtap: entered promiscuous mode [ 47.922187][ T5947] veth0_vlan: entered promiscuous mode [ 47.930652][ T5958] veth1_macvtap: entered promiscuous mode [ 47.935556][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.938077][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.944134][ T5947] veth1_vlan: entered promiscuous mode [ 47.962219][ T5955] veth0_macvtap: entered promiscuous mode [ 47.971374][ T5955] veth1_macvtap: entered promiscuous mode [ 47.978007][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.980621][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.984013][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.989858][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.997230][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.006125][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.009760][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.013817][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.017437][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.027904][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.033614][ T5955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.036458][ T5955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.039165][ T5955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.041733][ T5955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.047999][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.048287][ T5947] veth0_macvtap: entered promiscuous mode [ 48.060592][ T5947] veth1_macvtap: entered promiscuous mode [ 48.082861][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.104574][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.117271][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.119728][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.129100][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.131820][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.135083][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.138409][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.144387][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.146847][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.166034][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.168435][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.188044][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.192369][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.219191][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.222650][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.256181][ T6045] loop2: detected capacity change from 0 to 7 [ 48.257301][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.260688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.263890][ T6045] Dev loop2: unable to read RDB block 7 [ 48.265763][ T6045] loop2: AHDI p1 p2 p3 [ 48.267397][ T6045] loop2: partition table partially beyond EOD, truncated [ 48.270330][ T6045] loop2: p1 start 1601398130 is beyond EOD, truncated [ 48.272912][ T6045] loop2: p2 start 1702059890 is beyond EOD, truncated [ 48.337192][ T6049] FAULT_INJECTION: forcing a failure. [ 48.337192][ T6049] name failslab, interval 1, probability 0, space 0, times 1 [ 48.341302][ T6049] CPU: 2 UID: 0 PID: 6049 Comm: syz.1.8 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 48.341321][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.341328][ T6049] Call Trace: [ 48.341332][ T6049] [ 48.341337][ T6049] dump_stack_lvl+0x16c/0x1f0 [ 48.341356][ T6049] should_fail_ex+0x512/0x640 [ 48.341371][ T6049] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 48.341387][ T6049] should_failslab+0xc2/0x120 [ 48.341404][ T6049] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 48.341417][ T6049] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 48.341433][ T6049] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 48.341447][ T6049] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 48.341465][ T6049] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 48.341485][ T6049] mmu_topup_memory_caches+0x25/0x170 [ 48.341500][ T6049] kvm_mmu_load+0xd9/0x22a0 [ 48.341513][ T6049] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 48.341524][ T6049] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 48.341536][ T6049] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 48.341550][ T6049] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 48.341561][ T6049] ? __pfx_kvm_mmu_load+0x10/0x10 [ 48.341574][ T6049] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 48.341590][ T6049] ? kvm_check_and_inject_events+0x71c/0x1310 [ 48.341607][ T6049] vcpu_run+0x34eb/0x5500 [ 48.341618][ T6049] ? kvm_mmu_post_init_vm+0x269/0x370 [ 48.341634][ T6049] ? __lock_acquire+0xb8a/0x1c90 [ 48.341648][ T6049] ? __pfx_vcpu_run+0x10/0x10 [ 48.341663][ T6049] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 48.341677][ T6049] ? __local_bh_enable_ip+0xa4/0x120 [ 48.341693][ T6049] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 48.341707][ T6049] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 48.341724][ T6049] kvm_vcpu_ioctl+0x5eb/0x1690 [ 48.341740][ T6049] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 48.341757][ T6049] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 48.341775][ T6049] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 48.341795][ T6049] ? hook_file_ioctl_common+0x145/0x410 [ 48.341810][ T6049] ? selinux_file_ioctl+0x180/0x270 [ 48.341824][ T6049] ? selinux_file_ioctl+0xb4/0x270 [ 48.341839][ T6049] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 48.341853][ T6049] __x64_sys_ioctl+0x18e/0x210 [ 48.341867][ T6049] do_syscall_64+0xcd/0x4c0 [ 48.341902][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.341913][ T6049] RIP: 0033:0x7f0e7f78e929 [ 48.341923][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.341933][ T6049] RSP: 002b:00007f0e8065d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.341943][ T6049] RAX: ffffffffffffffda RBX: 00007f0e7f9b5fa0 RCX: 00007f0e7f78e929 [ 48.341950][ T6049] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 48.341956][ T6049] RBP: 00007f0e8065d090 R08: 0000000000000000 R09: 0000000000000000 [ 48.341962][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.341968][ T6049] R13: 0000000000000000 R14: 00007f0e7f9b5fa0 R15: 00007ffccdfe2398 [ 48.341982][ T6049] [ 48.372844][ T6046] fuse: root generation should be zero [ 48.438142][ T6061] ======================================================= [ 48.438142][ T6061] WARNING: The mand mount option has been deprecated and [ 48.438142][ T6061] and is ignored by this kernel. Remove the mand [ 48.438142][ T6061] option from the mount to silence this warning. [ 48.438142][ T6061] ======================================================= [ 48.454492][ T6061] gadgetfs: Unknown parameter 'dyn' [ 48.551100][ T6076] loop2: detected capacity change from 0 to 7 [ 48.554736][ T6076] Dev loop2: unable to read RDB block 7 [ 48.556791][ T6076] loop2: AHDI p1 p2 p3 [ 48.558675][ T6076] loop2: partition table partially beyond EOD, truncated [ 48.562075][ T6076] loop2: p1 start 1601398130 is beyond EOD, truncated [ 48.565696][ T6076] loop2: p2 start 1702059890 is beyond EOD, truncated [ 48.654247][ T6089] tmpfs: Unknown parameter 'mpolus' [ 48.656508][ T6089] process 'syz.0.22' launched '/dev/fd/4' with NULL argv: empty string added [ 48.701447][ T6092] FAULT_INJECTION: forcing a failure. [ 48.701447][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 48.705677][ T6092] CPU: 2 UID: 0 PID: 6092 Comm: syz.1.23 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 48.705692][ T6092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.705699][ T6092] Call Trace: [ 48.705702][ T6092] [ 48.705706][ T6092] dump_stack_lvl+0x16c/0x1f0 [ 48.705725][ T6092] should_fail_ex+0x512/0x640 [ 48.705739][ T6092] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 48.705756][ T6092] should_failslab+0xc2/0x120 [ 48.705772][ T6092] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 48.705786][ T6092] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 48.705802][ T6092] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 48.705816][ T6092] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 48.705834][ T6092] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 48.705854][ T6092] mmu_topup_memory_caches+0x25/0x170 [ 48.705885][ T6092] kvm_mmu_load+0xd9/0x22a0 [ 48.705900][ T6092] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 48.705911][ T6092] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 48.705923][ T6092] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 48.705937][ T6092] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 48.705949][ T6092] ? __pfx_kvm_mmu_load+0x10/0x10 [ 48.705961][ T6092] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 48.705978][ T6092] ? kvm_check_and_inject_events+0x71c/0x1310 [ 48.705994][ T6092] vcpu_run+0x34eb/0x5500 [ 48.706005][ T6092] ? kvm_mmu_post_init_vm+0x269/0x370 [ 48.706021][ T6092] ? __lock_acquire+0xb8a/0x1c90 [ 48.706035][ T6092] ? __pfx_vcpu_run+0x10/0x10 [ 48.706050][ T6092] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 48.706064][ T6092] ? __local_bh_enable_ip+0xa4/0x120 [ 48.706080][ T6092] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 48.706093][ T6092] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 48.706111][ T6092] kvm_vcpu_ioctl+0x5eb/0x1690 [ 48.706126][ T6092] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 48.706144][ T6092] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 48.706162][ T6092] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 48.706182][ T6092] ? hook_file_ioctl_common+0x145/0x410 [ 48.706196][ T6092] ? selinux_file_ioctl+0x180/0x270 [ 48.706211][ T6092] ? selinux_file_ioctl+0xb4/0x270 [ 48.706226][ T6092] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 48.706240][ T6092] __x64_sys_ioctl+0x18e/0x210 [ 48.706254][ T6092] do_syscall_64+0xcd/0x4c0 [ 48.706271][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.706282][ T6092] RIP: 0033:0x7f0e7f78e929 [ 48.706291][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.706301][ T6092] RSP: 002b:00007f0e8065d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.706311][ T6092] RAX: ffffffffffffffda RBX: 00007f0e7f9b5fa0 RCX: 00007f0e7f78e929 [ 48.706318][ T6092] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 48.706324][ T6092] RBP: 00007f0e8065d090 R08: 0000000000000000 R09: 0000000000000000 [ 48.706330][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.706340][ T6092] R13: 0000000000000000 R14: 00007f0e7f9b5fa0 R15: 00007ffccdfe2398 [ 48.706354][ T6092] [ 48.937955][ T6109] loop2: detected capacity change from 0 to 7 [ 48.939982][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.945223][ T6109] Dev loop2: unable to read RDB block 7 [ 48.946999][ T6109] loop2: AHDI p1 p2 p3 [ 48.948309][ T6109] loop2: partition table partially beyond EOD, truncated [ 48.950562][ T6109] loop2: p1 start 1601398130 is beyond EOD, truncated [ 48.952676][ T6109] loop2: p2 start 1702059890 is beyond EOD, truncated [ 49.026502][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.033461][ T6121] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 49.036322][ T6121] veth0_vlan: left promiscuous mode [ 49.038736][ T6121] veth0_vlan: entered promiscuous mode [ 49.041581][ T6121] team0: Device veth0_vlan failed to register rx_handler [ 49.048655][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 49.051708][ T6121] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 49.066853][ T6121] netlink: 763 bytes leftover after parsing attributes in process `syz.3.40'. [ 49.140324][ T6127] loop2: detected capacity change from 0 to 7 [ 49.142670][ T6127] Dev loop2: unable to read RDB block 7 [ 49.145676][ T6127] loop2: AHDI p1 p2 p3 [ 49.147027][ T6127] loop2: partition table partially beyond EOD, truncated [ 49.149484][ T6127] loop2: p1 start 1601398130 is beyond EOD, truncated [ 49.152486][ T6127] loop2: p2 start 1702059890 is beyond EOD, truncated [ 49.230954][ T6131] FAULT_INJECTION: forcing a failure. [ 49.230954][ T6131] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.237941][ T6131] CPU: 2 UID: 0 PID: 6131 Comm: syz.2.38 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 49.237957][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.237963][ T6131] Call Trace: [ 49.237967][ T6131] [ 49.237972][ T6131] dump_stack_lvl+0x16c/0x1f0 [ 49.237992][ T6131] should_fail_ex+0x512/0x640 [ 49.238009][ T6131] should_fail_alloc_page+0xe7/0x130 [ 49.238027][ T6131] prepare_alloc_pages+0x3c2/0x610 [ 49.238039][ T6131] ? stack_depot_save_flags+0x28/0xa40 [ 49.238056][ T6131] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 49.238072][ T6131] ? kasan_save_stack+0x42/0x60 [ 49.238085][ T6131] ? kasan_save_stack+0x33/0x60 [ 49.238098][ T6131] ? kasan_save_track+0x14/0x30 [ 49.238110][ T6131] ? __kasan_kmalloc+0xaa/0xb0 [ 49.238123][ T6131] ? __kvmalloc_node_noprof+0x27b/0x620 [ 49.238136][ T6131] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.238152][ T6131] ? mmu_topup_memory_caches+0xbc/0x170 [ 49.238165][ T6131] ? kvm_mmu_load+0xd9/0x22a0 [ 49.238176][ T6131] ? vcpu_run+0x34eb/0x5500 [ 49.238187][ T6131] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.238200][ T6131] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 49.238213][ T6131] ? __x64_sys_ioctl+0x18e/0x210 [ 49.238224][ T6131] ? do_syscall_64+0xcd/0x4c0 [ 49.238238][ T6131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.238250][ T6131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.238273][ T6131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.238287][ T6131] ? policy_nodemask+0xea/0x4e0 [ 49.238304][ T6131] alloc_pages_mpol+0x1fb/0x550 [ 49.238321][ T6131] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 49.238344][ T6131] ? trace_kmalloc+0x2b/0xd0 [ 49.238360][ T6131] ? __kvmalloc_node_noprof+0x298/0x620 [ 49.238375][ T6131] alloc_pages_noprof+0x131/0x390 [ 49.238392][ T6131] get_free_pages_noprof+0x10/0xb0 [ 49.238408][ T6131] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.238423][ T6131] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 49.238445][ T6131] mmu_topup_memory_caches+0xbc/0x170 [ 49.238459][ T6131] kvm_mmu_load+0xd9/0x22a0 [ 49.238472][ T6131] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 49.238483][ T6131] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 49.238495][ T6131] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 49.238509][ T6131] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 49.238520][ T6131] ? __pfx_kvm_mmu_load+0x10/0x10 [ 49.238532][ T6131] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 49.238549][ T6131] ? kvm_check_and_inject_events+0x71c/0x1310 [ 49.238565][ T6131] vcpu_run+0x34eb/0x5500 [ 49.238578][ T6131] ? __lock_acquire+0xb8a/0x1c90 [ 49.238592][ T6131] ? __pfx_vcpu_run+0x10/0x10 [ 49.238607][ T6131] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 49.238620][ T6131] ? __local_bh_enable_ip+0xa4/0x120 [ 49.238637][ T6131] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.238650][ T6131] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.238667][ T6131] kvm_vcpu_ioctl+0x5eb/0x1690 [ 49.238682][ T6131] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.238700][ T6131] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 49.238717][ T6131] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.238737][ T6131] ? hook_file_ioctl_common+0x145/0x410 [ 49.238751][ T6131] ? selinux_file_ioctl+0x180/0x270 [ 49.238765][ T6131] ? selinux_file_ioctl+0xb4/0x270 [ 49.238780][ T6131] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.238794][ T6131] __x64_sys_ioctl+0x18e/0x210 [ 49.238807][ T6131] do_syscall_64+0xcd/0x4c0 [ 49.238824][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.238834][ T6131] RIP: 0033:0x7f2d36f8e929 [ 49.238843][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.238853][ T6131] RSP: 002b:00007f2d37e65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.238864][ T6131] RAX: ffffffffffffffda RBX: 00007f2d371b5fa0 RCX: 00007f2d36f8e929 [ 49.238870][ T6131] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 49.238876][ T6131] RBP: 00007f2d37e65090 R08: 0000000000000000 R09: 0000000000000000 [ 49.238882][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.238888][ T6131] R13: 0000000000000000 R14: 00007f2d371b5fa0 R15: 00007fff9b7ae548 [ 49.238901][ T6131] [ 49.457656][ T6154] capability: warning: `syz.1.49' uses deprecated v2 capabilities in a way that may be insecure [ 49.514198][ T6161] loop2: detected capacity change from 0 to 7 [ 49.516705][ T6161] Dev loop2: unable to read RDB block 7 [ 49.518492][ T6161] loop2: AHDI p1 p2 p3 [ 49.519801][ T6161] loop2: partition table partially beyond EOD, truncated [ 49.522221][ T6161] loop2: p1 start 1601398130 is beyond EOD, truncated [ 49.527956][ T6161] loop2: p2 start 1702059890 is beyond EOD, truncated [ 49.530635][ T6164] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 49.553408][ T5310] Bluetooth: hci2: command tx timeout [ 49.553543][ T5951] Bluetooth: hci3: command tx timeout [ 49.553630][ T5953] Bluetooth: hci1: command tx timeout [ 49.553656][ T5953] Bluetooth: hci0: command tx timeout [ 49.623218][ T6185] tmpfs: Unknown parameter '÷}Ñ r_inodes\' [ 49.632249][ T6179] FAULT_INJECTION: forcing a failure. [ 49.632249][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 49.637305][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.1.61 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 49.637321][ T6179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.637327][ T6179] Call Trace: [ 49.637331][ T6179] [ 49.637335][ T6179] dump_stack_lvl+0x16c/0x1f0 [ 49.637355][ T6179] should_fail_ex+0x512/0x640 [ 49.637369][ T6179] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 49.637386][ T6179] should_failslab+0xc2/0x120 [ 49.637402][ T6179] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 49.637416][ T6179] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.637432][ T6179] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 49.637445][ T6179] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 49.637463][ T6179] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 49.637483][ T6179] mmu_topup_memory_caches+0x25/0x170 [ 49.637498][ T6179] kvm_mmu_load+0xd9/0x22a0 [ 49.637511][ T6179] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 49.637522][ T6179] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 49.637534][ T6179] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 49.637548][ T6179] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 49.637559][ T6179] ? __pfx_kvm_mmu_load+0x10/0x10 [ 49.637572][ T6179] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 49.637588][ T6179] ? kvm_check_and_inject_events+0x71c/0x1310 [ 49.637605][ T6179] vcpu_run+0x34eb/0x5500 [ 49.637616][ T6179] ? kvm_mmu_post_init_vm+0x269/0x370 [ 49.637632][ T6179] ? __lock_acquire+0xb8a/0x1c90 [ 49.637646][ T6179] ? __pfx_vcpu_run+0x10/0x10 [ 49.637661][ T6179] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 49.637673][ T6179] ? __local_bh_enable_ip+0xa4/0x120 [ 49.637690][ T6179] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.637703][ T6179] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.637720][ T6179] kvm_vcpu_ioctl+0x5eb/0x1690 [ 49.637735][ T6179] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.637753][ T6179] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 49.637770][ T6179] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.637790][ T6179] ? hook_file_ioctl_common+0x145/0x410 [ 49.637804][ T6179] ? selinux_file_ioctl+0x180/0x270 [ 49.637818][ T6179] ? selinux_file_ioctl+0xb4/0x270 [ 49.637834][ T6179] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.637848][ T6179] __x64_sys_ioctl+0x18e/0x210 [ 49.637883][ T6179] do_syscall_64+0xcd/0x4c0 [ 49.637902][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.637913][ T6179] RIP: 0033:0x7f0e7f78e929 [ 49.637922][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.637932][ T6179] RSP: 002b:00007f0e8065d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.637942][ T6179] RAX: ffffffffffffffda RBX: 00007f0e7f9b5fa0 RCX: 00007f0e7f78e929 [ 49.637949][ T6179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 49.637955][ T6179] RBP: 00007f0e8065d090 R08: 0000000000000000 R09: 0000000000000000 [ 49.637961][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.637967][ T6179] R13: 0000000000000000 R14: 00007f0e7f9b5fa0 R15: 00007ffccdfe2398 [ 49.637980][ T6179] [ 49.737963][ C0] vkms_vblank_simulate: vblank timer overrun [ 49.775660][ T6199] loop2: detected capacity change from 0 to 7 [ 49.779382][ T5948] Dev loop2: unable to read RDB block 7 [ 49.781142][ T5948] loop2: AHDI p1 p2 p3 [ 49.782473][ T5948] loop2: partition table partially beyond EOD, truncated [ 49.784948][ T5948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 49.787082][ T5948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 49.790787][ T6199] Dev loop2: unable to read RDB block 7 [ 49.792575][ T6199] loop2: AHDI p1 p2 p3 [ 49.794876][ T6199] loop2: partition table partially beyond EOD, truncated [ 49.797375][ T6199] loop2: p1 start 1601398130 is beyond EOD, truncated [ 49.799501][ T6199] loop2: p2 start 1702059890 is beyond EOD, truncated [ 49.978548][ T6239] loop2: detected capacity change from 0 to 7 [ 49.982603][ T6239] Dev loop2: unable to read RDB block 7 [ 49.985893][ T6237] FAULT_INJECTION: forcing a failure. [ 49.985893][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 49.986343][ T6239] loop2: AHDI p1 p2 p3 [ 49.989774][ T6237] CPU: 3 UID: 0 PID: 6237 Comm: syz.0.80 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 49.989789][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.989796][ T6237] Call Trace: [ 49.989800][ T6237] [ 49.989803][ T6237] dump_stack_lvl+0x16c/0x1f0 [ 49.989823][ T6237] should_fail_ex+0x512/0x640 [ 49.989838][ T6237] ? __kvmalloc_node_noprof+0x124/0x620 [ 49.989853][ T6237] should_failslab+0xc2/0x120 [ 49.989886][ T6237] __kvmalloc_node_noprof+0x137/0x620 [ 49.989899][ T6237] ? trace_kmem_cache_alloc+0x28/0xc0 [ 49.989916][ T6237] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 49.989929][ T6237] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.989946][ T6237] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 49.989962][ T6237] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.989977][ T6237] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 49.989997][ T6237] mmu_topup_memory_caches+0xbc/0x170 [ 49.990012][ T6237] kvm_mmu_load+0xd9/0x22a0 [ 49.990038][ T6237] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 49.990050][ T6237] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 49.990061][ T6237] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 49.990075][ T6237] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 49.990088][ T6237] ? __pfx_kvm_mmu_load+0x10/0x10 [ 49.990100][ T6237] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 49.990117][ T6237] ? kvm_check_and_inject_events+0x71c/0x1310 [ 49.990133][ T6237] vcpu_run+0x34eb/0x5500 [ 49.990144][ T6237] ? kvm_mmu_post_init_vm+0x269/0x370 [ 49.990161][ T6237] ? __lock_acquire+0xb8a/0x1c90 [ 49.990175][ T6237] ? __pfx_vcpu_run+0x10/0x10 [ 49.990190][ T6237] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 49.990202][ T6237] ? __local_bh_enable_ip+0xa4/0x120 [ 49.990220][ T6237] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.990233][ T6237] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 49.990250][ T6237] kvm_vcpu_ioctl+0x5eb/0x1690 [ 49.990266][ T6237] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.990283][ T6237] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 49.990301][ T6237] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.990321][ T6237] ? hook_file_ioctl_common+0x145/0x410 [ 49.990335][ T6237] ? selinux_file_ioctl+0x180/0x270 [ 49.990353][ T6237] ? selinux_file_ioctl+0xb4/0x270 [ 49.990368][ T6237] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 49.990383][ T6237] __x64_sys_ioctl+0x18e/0x210 [ 49.990397][ T6237] do_syscall_64+0xcd/0x4c0 [ 49.990414][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.990425][ T6237] RIP: 0033:0x7ff9af38e929 [ 49.990434][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.990444][ T6237] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.990454][ T6237] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 49.990460][ T6237] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 49.990466][ T6237] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 49.990472][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.990478][ T6237] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 49.990492][ T6237] [ 50.108088][ T6239] loop2: partition table partially beyond EOD, truncated [ 50.108151][ T6033] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.110688][ T6239] loop2: p1 start 1601398130 is beyond EOD, truncated [ 50.116655][ T6239] loop2: p2 start 1702059890 is beyond EOD, truncated [ 50.250093][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 50.250103][ T40] audit: type=1400 audit(1752584735.694:182): avc: denied { create } for pid=6252 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.263113][ T6033] usb 8-1: Using ep0 maxpacket: 32 [ 50.266394][ T6033] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 50.271452][ T6033] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 50.274696][ T6033] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 50.277214][ T6033] usb 8-1: Product: syz [ 50.278553][ T6033] usb 8-1: Manufacturer: syz [ 50.280017][ T6033] usb 8-1: SerialNumber: syz [ 50.283242][ T6033] usb 8-1: config 0 descriptor?? [ 50.286284][ T6205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.289971][ T6033] hub 8-1:0.0: bad descriptor, ignoring hub [ 50.292363][ T6033] hub 8-1:0.0: probe with driver hub failed with error -5 [ 50.311167][ T40] audit: type=1400 audit(1752584735.754:183): avc: denied { bind } for pid=6252 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.320759][ T40] audit: type=1400 audit(1752584735.754:184): avc: denied { accept } for pid=6252 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.327305][ T40] audit: type=1400 audit(1752584735.754:185): avc: denied { write } for pid=6252 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.338212][ T40] audit: type=1400 audit(1752584735.784:186): avc: denied { create } for pid=6259 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.344421][ T40] audit: type=1400 audit(1752584735.784:187): avc: denied { ioctl } for pid=6259 comm="syz.1.89" path="socket:[11382]" dev="sockfs" ino=11382 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.344566][ T6260] mac80211_hwsim hwsim6 `ëÿÿ: renamed from wlan1 (while UP) [ 50.357583][ T40] audit: type=1400 audit(1752584735.804:188): avc: denied { mount } for pid=6259 comm="syz.1.89" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.411769][ T6267] loop2: detected capacity change from 0 to 7 [ 50.416327][ T6267] Dev loop2: unable to read RDB block 7 [ 50.418134][ T6267] loop2: AHDI p1 p2 p3 [ 50.419453][ T6267] loop2: partition table partially beyond EOD, truncated [ 50.421891][ T6267] loop2: p1 start 1601398130 is beyond EOD, truncated [ 50.424088][ T6267] loop2: p2 start 1702059890 is beyond EOD, truncated [ 50.454774][ T40] audit: type=1400 audit(1752584735.904:189): avc: denied { ioctl } for pid=6268 comm="syz.1.92" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.463009][ T40] audit: type=1400 audit(1752584735.904:190): avc: denied { create } for pid=6268 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.514245][ T6271] FAULT_INJECTION: forcing a failure. [ 50.514245][ T6271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.519749][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.1.93 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 50.519771][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.519780][ T6271] Call Trace: [ 50.519786][ T6271] [ 50.519794][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 50.519822][ T6271] should_fail_ex+0x512/0x640 [ 50.519848][ T6271] should_fail_alloc_page+0xe7/0x130 [ 50.519874][ T6271] prepare_alloc_pages+0x3c2/0x610 [ 50.519894][ T6271] ? rcu_is_watching+0x12/0xc0 [ 50.519932][ T6271] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 50.519958][ T6271] ? kasan_save_stack+0x42/0x60 [ 50.519992][ T6271] ? kasan_save_stack+0x33/0x60 [ 50.520023][ T6271] ? kasan_save_track+0x14/0x30 [ 50.520053][ T6271] ? __kasan_kmalloc+0xaa/0xb0 [ 50.520072][ T6271] ? __kvmalloc_node_noprof+0x27b/0x620 [ 50.520092][ T6271] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 50.520115][ T6271] ? mmu_topup_memory_caches+0xbc/0x170 [ 50.520136][ T6271] ? kvm_mmu_load+0xd9/0x22a0 [ 50.520153][ T6271] ? vcpu_run+0x34eb/0x5500 [ 50.520170][ T6271] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.520189][ T6271] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 50.520208][ T6271] ? __x64_sys_ioctl+0x18e/0x210 [ 50.520225][ T6271] ? do_syscall_64+0xcd/0x4c0 [ 50.520247][ T6271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.520267][ T6271] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.520304][ T6271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.520325][ T6271] ? policy_nodemask+0xea/0x4e0 [ 50.520351][ T6271] alloc_pages_mpol+0x1fb/0x550 [ 50.520377][ T6271] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.520402][ T6271] ? trace_kmalloc+0x2b/0xd0 [ 50.520425][ T6271] ? __kvmalloc_node_noprof+0x298/0x620 [ 50.520448][ T6271] alloc_pages_noprof+0x131/0x390 [ 50.520472][ T6271] get_free_pages_noprof+0x10/0xb0 [ 50.520496][ T6271] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 50.520519][ T6271] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 50.520549][ T6271] mmu_topup_memory_caches+0xbc/0x170 [ 50.520572][ T6271] kvm_mmu_load+0xd9/0x22a0 [ 50.520591][ T6271] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 50.520609][ T6271] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.520627][ T6271] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 50.520647][ T6271] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 50.520666][ T6271] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.520685][ T6271] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.520708][ T6271] ? kvm_check_and_inject_events+0x71c/0x1310 [ 50.520734][ T6271] vcpu_run+0x34eb/0x5500 [ 50.520752][ T6271] ? kvm_mmu_post_init_vm+0x269/0x370 [ 50.520776][ T6271] ? __lock_acquire+0xb8a/0x1c90 [ 50.520798][ T6271] ? __pfx_vcpu_run+0x10/0x10 [ 50.520821][ T6271] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 50.520841][ T6271] ? __local_bh_enable_ip+0xa4/0x120 [ 50.520867][ T6271] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.520886][ T6271] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.520914][ T6271] kvm_vcpu_ioctl+0x5eb/0x1690 [ 50.520937][ T6271] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.520964][ T6271] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 50.520991][ T6271] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.521021][ T6271] ? hook_file_ioctl_common+0x145/0x410 [ 50.521050][ T6271] ? selinux_file_ioctl+0x180/0x270 [ 50.521071][ T6271] ? selinux_file_ioctl+0xb4/0x270 [ 50.521095][ T6271] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.521116][ T6271] __x64_sys_ioctl+0x18e/0x210 [ 50.521137][ T6271] do_syscall_64+0xcd/0x4c0 [ 50.521162][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.521178][ T6271] RIP: 0033:0x7f0e7f78e929 [ 50.521193][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.521209][ T6271] RSP: 002b:00007f0e8065d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.521224][ T6271] RAX: ffffffffffffffda RBX: 00007f0e7f9b5fa0 RCX: 00007f0e7f78e929 [ 50.521234][ T6271] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 50.521245][ T6271] RBP: 00007f0e8065d090 R08: 0000000000000000 R09: 0000000000000000 [ 50.521254][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.521264][ T6271] R13: 0000000000000000 R14: 00007f0e7f9b5fa0 R15: 00007ffccdfe2398 [ 50.521285][ T6271] [ 50.567044][ T40] audit: type=1400 audit(1752584736.014:191): avc: denied { write } for pid=6277 comm="syz.0.96" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.567260][ C0] vkms_vblank_simulate: vblank timer overrun [ 50.666737][ C0] vkms_vblank_simulate: vblank timer overrun [ 50.671115][ T6020] usb 8-1: USB disconnect, device number 2 [ 50.813928][ T6298] loop2: detected capacity change from 0 to 7 [ 50.817041][ T6298] Dev loop2: unable to read RDB block 7 [ 50.818832][ T6298] loop2: AHDI p1 p2 p3 [ 50.820145][ T6298] loop2: partition table partially beyond EOD, truncated [ 50.823004][ T6298] loop2: p1 start 1601398130 is beyond EOD, truncated [ 50.825202][ T6298] loop2: p2 start 1702059890 is beyond EOD, truncated [ 50.914127][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'. [ 50.942201][ T6311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.987364][ T6313] FAULT_INJECTION: forcing a failure. [ 50.987364][ T6313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.991917][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.0.110 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 50.991932][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.991939][ T6313] Call Trace: [ 50.991943][ T6313] [ 50.991947][ T6313] dump_stack_lvl+0x16c/0x1f0 [ 50.991980][ T6313] should_fail_ex+0x512/0x640 [ 50.992003][ T6313] should_fail_alloc_page+0xe7/0x130 [ 50.992021][ T6313] prepare_alloc_pages+0x3c2/0x610 [ 50.992032][ T6313] ? rcu_is_watching+0x12/0xc0 [ 50.992048][ T6313] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 50.992064][ T6313] ? kasan_save_stack+0x42/0x60 [ 50.992077][ T6313] ? kasan_save_stack+0x33/0x60 [ 50.992090][ T6313] ? kasan_save_track+0x14/0x30 [ 50.992107][ T6313] ? __kasan_kmalloc+0xaa/0xb0 [ 50.992120][ T6313] ? __kvmalloc_node_noprof+0x27b/0x620 [ 50.992133][ T6313] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 50.992148][ T6313] ? mmu_topup_memory_caches+0xbc/0x170 [ 50.992162][ T6313] ? kvm_mmu_load+0xd9/0x22a0 [ 50.992173][ T6313] ? vcpu_run+0x34eb/0x5500 [ 50.992185][ T6313] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.992198][ T6313] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 50.992210][ T6313] ? __x64_sys_ioctl+0x18e/0x210 [ 50.992222][ T6313] ? do_syscall_64+0xcd/0x4c0 [ 50.992237][ T6313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.992250][ T6313] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.992273][ T6313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.992287][ T6313] ? policy_nodemask+0xea/0x4e0 [ 50.992304][ T6313] alloc_pages_mpol+0x1fb/0x550 [ 50.992321][ T6313] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.992337][ T6313] ? trace_kmalloc+0x2b/0xd0 [ 50.992352][ T6313] ? __kvmalloc_node_noprof+0x298/0x620 [ 50.992370][ T6313] alloc_pages_noprof+0x131/0x390 [ 50.992386][ T6313] get_free_pages_noprof+0x10/0xb0 [ 50.992402][ T6313] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 50.992417][ T6313] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 50.992437][ T6313] mmu_topup_memory_caches+0xbc/0x170 [ 50.992451][ T6313] kvm_mmu_load+0xd9/0x22a0 [ 50.992464][ T6313] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 50.992475][ T6313] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.992487][ T6313] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 50.992501][ T6313] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 50.992513][ T6313] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.992525][ T6313] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.992542][ T6313] ? kvm_check_and_inject_events+0x71c/0x1310 [ 50.992558][ T6313] vcpu_run+0x34eb/0x5500 [ 50.992569][ T6313] ? kvm_mmu_post_init_vm+0x269/0x370 [ 50.992586][ T6313] ? __lock_acquire+0xb8a/0x1c90 [ 50.992599][ T6313] ? __pfx_vcpu_run+0x10/0x10 [ 50.992614][ T6313] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 50.992627][ T6313] ? __local_bh_enable_ip+0xa4/0x120 [ 50.992644][ T6313] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.992657][ T6313] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 50.992674][ T6313] kvm_vcpu_ioctl+0x5eb/0x1690 [ 50.992690][ T6313] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.992707][ T6313] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 50.992725][ T6313] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.992745][ T6313] ? hook_file_ioctl_common+0x145/0x410 [ 50.992759][ T6313] ? selinux_file_ioctl+0x180/0x270 [ 50.992773][ T6313] ? selinux_file_ioctl+0xb4/0x270 [ 50.992788][ T6313] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.992803][ T6313] __x64_sys_ioctl+0x18e/0x210 [ 50.992816][ T6313] do_syscall_64+0xcd/0x4c0 [ 50.992832][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.992843][ T6313] RIP: 0033:0x7ff9af38e929 [ 50.992851][ T6313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.992861][ T6313] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.992871][ T6313] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 50.992878][ T6313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 50.992884][ T6313] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 50.992890][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.992896][ T6313] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 50.992909][ T6313] [ 51.127620][ C0] vkms_vblank_simulate: vblank timer overrun [ 51.127797][ T6323] loop2: detected capacity change from 0 to 7 [ 51.132702][ T5948] Dev loop2: unable to read RDB block 7 [ 51.135724][ T5948] loop2: AHDI p1 p2 p3 [ 51.137081][ T5948] loop2: partition table partially beyond EOD, truncated [ 51.139567][ T5948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.141761][ T5948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.145264][ T6323] Dev loop2: unable to read RDB block 7 [ 51.147136][ T6323] loop2: AHDI p1 p2 p3 [ 51.148461][ T6323] loop2: partition table partially beyond EOD, truncated [ 51.150872][ T6323] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.152985][ T6323] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.280590][ T6347] tmpfs: Bad value for 'mpol' [ 51.289378][ T6347] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.409901][ T6366] loop2: detected capacity change from 0 to 7 [ 51.412939][ T5360] Dev loop2: unable to read RDB block 7 [ 51.414934][ T5360] loop2: AHDI p1 p2 p3 [ 51.416369][ T5360] loop2: partition table partially beyond EOD, truncated [ 51.418703][ T5360] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.420946][ T5360] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.425749][ T6366] Dev loop2: unable to read RDB block 7 [ 51.427714][ T6366] loop2: AHDI p1 p2 p3 [ 51.429058][ T6366] loop2: partition table partially beyond EOD, truncated [ 51.431619][ T6366] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.434901][ T6366] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.450698][ T5360] Dev loop2: unable to read RDB block 7 [ 51.460482][ T5360] loop2: AHDI p1 p2 p3 [ 51.462398][ T5360] loop2: partition table partially beyond EOD, truncated [ 51.466214][ T5360] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.468389][ T5360] loop2: p2 start 1702059890 is beyond EOD, truncated [ 51.523799][ T6378] FAULT_INJECTION: forcing a failure. [ 51.523799][ T6378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.528161][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.0.130 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 51.528176][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.528182][ T6378] Call Trace: [ 51.528186][ T6378] [ 51.528190][ T6378] dump_stack_lvl+0x16c/0x1f0 [ 51.528209][ T6378] should_fail_ex+0x512/0x640 [ 51.528226][ T6378] should_fail_alloc_page+0xe7/0x130 [ 51.528244][ T6378] prepare_alloc_pages+0x3c2/0x610 [ 51.528256][ T6378] ? rcu_is_watching+0x12/0xc0 [ 51.528272][ T6378] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 51.528288][ T6378] ? kasan_save_stack+0x42/0x60 [ 51.528302][ T6378] ? kasan_save_stack+0x33/0x60 [ 51.528316][ T6378] ? kasan_save_track+0x14/0x30 [ 51.528329][ T6378] ? __kasan_kmalloc+0xaa/0xb0 [ 51.528342][ T6378] ? __kvmalloc_node_noprof+0x27b/0x620 [ 51.528355][ T6378] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 51.528371][ T6378] ? mmu_topup_memory_caches+0xbc/0x170 [ 51.528384][ T6378] ? kvm_mmu_load+0xd9/0x22a0 [ 51.528396][ T6378] ? vcpu_run+0x34eb/0x5500 [ 51.528407][ T6378] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 51.528422][ T6378] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 51.528434][ T6378] ? __x64_sys_ioctl+0x18e/0x210 [ 51.528445][ T6378] ? do_syscall_64+0xcd/0x4c0 [ 51.528460][ T6378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.528472][ T6378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.528496][ T6378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.528510][ T6378] ? policy_nodemask+0xea/0x4e0 [ 51.528527][ T6378] alloc_pages_mpol+0x1fb/0x550 [ 51.528544][ T6378] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.528560][ T6378] ? trace_kmalloc+0x2b/0xd0 [ 51.528575][ T6378] ? __kvmalloc_node_noprof+0x298/0x620 [ 51.528591][ T6378] alloc_pages_noprof+0x131/0x390 [ 51.528607][ T6378] get_free_pages_noprof+0x10/0xb0 [ 51.528623][ T6378] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 51.528639][ T6378] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 51.528659][ T6378] mmu_topup_memory_caches+0xbc/0x170 [ 51.528673][ T6378] kvm_mmu_load+0xd9/0x22a0 [ 51.528687][ T6378] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 51.528697][ T6378] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 51.528709][ T6378] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 51.528723][ T6378] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 51.528734][ T6378] ? __pfx_kvm_mmu_load+0x10/0x10 [ 51.528746][ T6378] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 51.528763][ T6378] ? kvm_check_and_inject_events+0x71c/0x1310 [ 51.528779][ T6378] vcpu_run+0x34eb/0x5500 [ 51.528790][ T6378] ? kvm_mmu_post_init_vm+0x269/0x370 [ 51.528807][ T6378] ? __lock_acquire+0xb8a/0x1c90 [ 51.528821][ T6378] ? __pfx_vcpu_run+0x10/0x10 [ 51.528836][ T6378] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 51.528848][ T6378] ? __local_bh_enable_ip+0xa4/0x120 [ 51.528865][ T6378] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 51.528878][ T6378] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 51.528895][ T6378] kvm_vcpu_ioctl+0x5eb/0x1690 [ 51.528910][ T6378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.528928][ T6378] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 51.528945][ T6378] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.528965][ T6378] ? hook_file_ioctl_common+0x145/0x410 [ 51.528979][ T6378] ? selinux_file_ioctl+0x180/0x270 [ 51.528993][ T6378] ? selinux_file_ioctl+0xb4/0x270 [ 51.529009][ T6378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.529023][ T6378] __x64_sys_ioctl+0x18e/0x210 [ 51.529036][ T6378] do_syscall_64+0xcd/0x4c0 [ 51.529053][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.529068][ T6378] RIP: 0033:0x7ff9af38e929 [ 51.529077][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.529087][ T6378] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.529097][ T6378] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 51.529104][ T6378] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 51.529110][ T6378] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 51.529116][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.529122][ T6378] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 51.529134][ T6378] [ 51.633548][ T5963] Bluetooth: hci0: command tx timeout [ 51.633678][ T5951] Bluetooth: hci1: command tx timeout [ 51.634048][ C0] vkms_vblank_simulate: vblank timer overrun [ 51.643205][ T5963] Bluetooth: hci2: command tx timeout [ 51.643581][ T5951] Bluetooth: hci3: command tx timeout [ 51.681155][ T6396] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 51.685176][ T6396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.135'. [ 51.821535][ T6407] loop2: detected capacity change from 0 to 7 [ 51.824173][ T6407] Dev loop2: unable to read RDB block 7 [ 51.826006][ T6407] loop2: AHDI p1 p2 p3 [ 51.827551][ T6407] loop2: partition table partially beyond EOD, truncated [ 51.829794][ T6407] loop2: p1 start 1601398130 is beyond EOD, truncated [ 51.831909][ T6407] loop2: p2 start 1702059890 is beyond EOD, truncated [ 52.214160][ T6426] capability: warning: `syz.0.148' uses 32-bit capabilities (legacy support in use) [ 52.361815][ T6431] netlink: 256 bytes leftover after parsing attributes in process `syz.0.149'. [ 52.419997][ T6433] FAULT_INJECTION: forcing a failure. [ 52.419997][ T6433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.424187][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.0.150 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 52.424202][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.424208][ T6433] Call Trace: [ 52.424212][ T6433] [ 52.424216][ T6433] dump_stack_lvl+0x16c/0x1f0 [ 52.424236][ T6433] should_fail_ex+0x512/0x640 [ 52.424253][ T6433] should_fail_alloc_page+0xe7/0x130 [ 52.424271][ T6433] prepare_alloc_pages+0x3c2/0x610 [ 52.424283][ T6433] ? rcu_is_watching+0x12/0xc0 [ 52.424299][ T6433] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 52.424315][ T6433] ? kasan_save_stack+0x42/0x60 [ 52.424328][ T6433] ? kasan_save_stack+0x33/0x60 [ 52.424341][ T6433] ? kasan_save_track+0x14/0x30 [ 52.424359][ T6433] ? __kasan_kmalloc+0xaa/0xb0 [ 52.424372][ T6433] ? __kvmalloc_node_noprof+0x27b/0x620 [ 52.424385][ T6433] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 52.424401][ T6433] ? mmu_topup_memory_caches+0xbc/0x170 [ 52.424415][ T6433] ? kvm_mmu_load+0xd9/0x22a0 [ 52.424426][ T6433] ? vcpu_run+0x34eb/0x5500 [ 52.424438][ T6433] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.424451][ T6433] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 52.424463][ T6433] ? __x64_sys_ioctl+0x18e/0x210 [ 52.424474][ T6433] ? do_syscall_64+0xcd/0x4c0 [ 52.424489][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.424501][ T6433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.424525][ T6433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.424539][ T6433] ? policy_nodemask+0xea/0x4e0 [ 52.424556][ T6433] alloc_pages_mpol+0x1fb/0x550 [ 52.424573][ T6433] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 52.424589][ T6433] ? trace_kmalloc+0x2b/0xd0 [ 52.424605][ T6433] ? __kvmalloc_node_noprof+0x298/0x620 [ 52.424620][ T6433] alloc_pages_noprof+0x131/0x390 [ 52.424637][ T6433] get_free_pages_noprof+0x10/0xb0 [ 52.424653][ T6433] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 52.424668][ T6433] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 52.424688][ T6433] mmu_topup_memory_caches+0xbc/0x170 [ 52.424703][ T6433] kvm_mmu_load+0xd9/0x22a0 [ 52.424716][ T6433] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 52.424727][ T6433] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 52.424738][ T6433] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 52.424753][ T6433] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 52.424764][ T6433] ? __pfx_kvm_mmu_load+0x10/0x10 [ 52.424776][ T6433] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 52.424793][ T6433] ? kvm_check_and_inject_events+0x71c/0x1310 [ 52.424809][ T6433] vcpu_run+0x34eb/0x5500 [ 52.424820][ T6433] ? kvm_mmu_post_init_vm+0x269/0x370 [ 52.424836][ T6433] ? __lock_acquire+0xb8a/0x1c90 [ 52.424850][ T6433] ? __pfx_vcpu_run+0x10/0x10 [ 52.424865][ T6433] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 52.424878][ T6433] ? __local_bh_enable_ip+0xa4/0x120 [ 52.424894][ T6433] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.424908][ T6433] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.424925][ T6433] kvm_vcpu_ioctl+0x5eb/0x1690 [ 52.424940][ T6433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.424958][ T6433] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 52.424975][ T6433] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.424995][ T6433] ? hook_file_ioctl_common+0x145/0x410 [ 52.425009][ T6433] ? selinux_file_ioctl+0x180/0x270 [ 52.425023][ T6433] ? selinux_file_ioctl+0xb4/0x270 [ 52.425039][ T6433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.425053][ T6433] __x64_sys_ioctl+0x18e/0x210 [ 52.425066][ T6433] do_syscall_64+0xcd/0x4c0 [ 52.425082][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.425093][ T6433] RIP: 0033:0x7ff9af38e929 [ 52.425102][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.425112][ T6433] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.425122][ T6433] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 52.425128][ T6433] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 52.425134][ T6433] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 52.425140][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.425146][ T6433] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 52.425159][ T6433] [ 52.569002][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.667219][ T6442] loop2: detected capacity change from 0 to 7 [ 52.669926][ T5948] Dev loop2: unable to read RDB block 7 [ 52.671640][ T5948] loop2: AHDI p1 p2 p3 [ 52.673003][ T5948] loop2: partition table partially beyond EOD, truncated [ 52.676419][ T5948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 52.678586][ T5948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 52.682156][ T6442] Dev loop2: unable to read RDB block 7 [ 52.684052][ T6442] loop2: AHDI p1 p2 p3 [ 52.685353][ T6442] loop2: partition table partially beyond EOD, truncated [ 52.687714][ T6442] loop2: p1 start 1601398130 is beyond EOD, truncated [ 52.689780][ T6442] loop2: p2 start 1702059890 is beyond EOD, truncated [ 52.808878][ T6466] loop2: detected capacity change from 0 to 7 [ 52.811220][ T6466] Dev loop2: unable to read RDB block 7 [ 52.812932][ T6466] loop2: AHDI p1 p2 p3 [ 52.815503][ T6466] loop2: partition table partially beyond EOD, truncated [ 52.818165][ T6466] loop2: p1 start 1601398130 is beyond EOD, truncated [ 52.820647][ T6466] loop2: p2 start 1702059890 is beyond EOD, truncated [ 52.857933][ T6467] FAULT_INJECTION: forcing a failure. [ 52.857933][ T6467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.861938][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.0.163 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 52.861954][ T6467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.861960][ T6467] Call Trace: [ 52.861964][ T6467] [ 52.861969][ T6467] dump_stack_lvl+0x16c/0x1f0 [ 52.861987][ T6467] should_fail_ex+0x512/0x640 [ 52.862004][ T6467] should_fail_alloc_page+0xe7/0x130 [ 52.862022][ T6467] prepare_alloc_pages+0x3c2/0x610 [ 52.862034][ T6467] ? rcu_is_watching+0x12/0xc0 [ 52.862050][ T6467] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 52.862066][ T6467] ? kasan_save_stack+0x42/0x60 [ 52.862080][ T6467] ? kasan_save_stack+0x33/0x60 [ 52.862093][ T6467] ? kasan_save_track+0x14/0x30 [ 52.862106][ T6467] ? __kasan_kmalloc+0xaa/0xb0 [ 52.862118][ T6467] ? __kvmalloc_node_noprof+0x27b/0x620 [ 52.862131][ T6467] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 52.862147][ T6467] ? mmu_topup_memory_caches+0xbc/0x170 [ 52.862160][ T6467] ? kvm_mmu_load+0xd9/0x22a0 [ 52.862172][ T6467] ? vcpu_run+0x34eb/0x5500 [ 52.862183][ T6467] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.862196][ T6467] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 52.862209][ T6467] ? __x64_sys_ioctl+0x18e/0x210 [ 52.862220][ T6467] ? do_syscall_64+0xcd/0x4c0 [ 52.862234][ T6467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.862247][ T6467] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.862270][ T6467] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.862288][ T6467] ? policy_nodemask+0xea/0x4e0 [ 52.862306][ T6467] alloc_pages_mpol+0x1fb/0x550 [ 52.862322][ T6467] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 52.862339][ T6467] ? trace_kmalloc+0x2b/0xd0 [ 52.862354][ T6467] ? __kvmalloc_node_noprof+0x298/0x620 [ 52.862370][ T6467] alloc_pages_noprof+0x131/0x390 [ 52.862386][ T6467] get_free_pages_noprof+0x10/0xb0 [ 52.862402][ T6467] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 52.862417][ T6467] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 52.862437][ T6467] mmu_topup_memory_caches+0xbc/0x170 [ 52.862451][ T6467] kvm_mmu_load+0xd9/0x22a0 [ 52.862464][ T6467] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 52.862475][ T6467] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 52.862487][ T6467] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 52.862501][ T6467] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 52.862512][ T6467] ? __pfx_kvm_mmu_load+0x10/0x10 [ 52.862525][ T6467] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 52.862541][ T6467] ? kvm_check_and_inject_events+0x71c/0x1310 [ 52.862557][ T6467] vcpu_run+0x34eb/0x5500 [ 52.862569][ T6467] ? kvm_mmu_post_init_vm+0x269/0x370 [ 52.862585][ T6467] ? __lock_acquire+0xb8a/0x1c90 [ 52.862611][ T6467] ? __pfx_vcpu_run+0x10/0x10 [ 52.862627][ T6467] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 52.862640][ T6467] ? __local_bh_enable_ip+0xa4/0x120 [ 52.862657][ T6467] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.862670][ T6467] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 52.862687][ T6467] kvm_vcpu_ioctl+0x5eb/0x1690 [ 52.862702][ T6467] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.862720][ T6467] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 52.862737][ T6467] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 52.862757][ T6467] ? hook_file_ioctl_common+0x145/0x410 [ 52.862772][ T6467] ? selinux_file_ioctl+0x180/0x270 [ 52.862786][ T6467] ? selinux_file_ioctl+0xb4/0x270 [ 52.862801][ T6467] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 52.862815][ T6467] __x64_sys_ioctl+0x18e/0x210 [ 52.862829][ T6467] do_syscall_64+0xcd/0x4c0 [ 52.862845][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.862856][ T6467] RIP: 0033:0x7ff9af38e929 [ 52.862865][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.862875][ T6467] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.862885][ T6467] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 52.862892][ T6467] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 52.862898][ T6467] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 52.862904][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.862910][ T6467] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 52.862923][ T6467] [ 52.994508][ C0] vkms_vblank_simulate: vblank timer overrun [ 53.165978][ T6501] sp0: Synchronizing with TNC [ 53.175734][ T6506] loop2: detected capacity change from 0 to 7 [ 53.178098][ T6506] Dev loop2: unable to read RDB block 7 [ 53.180203][ T6506] loop2: AHDI p1 p2 p3 [ 53.184035][ T6506] loop2: partition table partially beyond EOD, truncated [ 53.187445][ T6506] loop2: p1 start 1601398130 is beyond EOD, truncated [ 53.190198][ T6506] loop2: p2 start 1702059890 is beyond EOD, truncated [ 53.298173][ T6521] FAULT_INJECTION: forcing a failure. [ 53.298173][ T6521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.302278][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.0.183 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 53.302293][ T6521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.302300][ T6521] Call Trace: [ 53.302304][ T6521] [ 53.302308][ T6521] dump_stack_lvl+0x16c/0x1f0 [ 53.302328][ T6521] should_fail_ex+0x512/0x640 [ 53.302345][ T6521] should_fail_alloc_page+0xe7/0x130 [ 53.302363][ T6521] prepare_alloc_pages+0x3c2/0x610 [ 53.302375][ T6521] ? rcu_is_watching+0x12/0xc0 [ 53.302391][ T6521] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 53.302407][ T6521] ? kasan_save_stack+0x42/0x60 [ 53.302421][ T6521] ? kasan_save_stack+0x33/0x60 [ 53.302434][ T6521] ? kasan_save_track+0x14/0x30 [ 53.302447][ T6521] ? __kasan_kmalloc+0xaa/0xb0 [ 53.302459][ T6521] ? __kvmalloc_node_noprof+0x27b/0x620 [ 53.302472][ T6521] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 53.302488][ T6521] ? mmu_topup_memory_caches+0xbc/0x170 [ 53.302502][ T6521] ? kvm_mmu_load+0xd9/0x22a0 [ 53.302513][ T6521] ? vcpu_run+0x34eb/0x5500 [ 53.302524][ T6521] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.302538][ T6521] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 53.302550][ T6521] ? __x64_sys_ioctl+0x18e/0x210 [ 53.302562][ T6521] ? do_syscall_64+0xcd/0x4c0 [ 53.302576][ T6521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.302589][ T6521] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.302612][ T6521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.302627][ T6521] ? policy_nodemask+0xea/0x4e0 [ 53.302644][ T6521] alloc_pages_mpol+0x1fb/0x550 [ 53.302660][ T6521] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 53.302677][ T6521] ? trace_kmalloc+0x2b/0xd0 [ 53.302692][ T6521] ? __kvmalloc_node_noprof+0x298/0x620 [ 53.302708][ T6521] alloc_pages_noprof+0x131/0x390 [ 53.302724][ T6521] get_free_pages_noprof+0x10/0xb0 [ 53.302740][ T6521] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 53.302756][ T6521] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 53.302775][ T6521] mmu_topup_memory_caches+0xbc/0x170 [ 53.302790][ T6521] kvm_mmu_load+0xd9/0x22a0 [ 53.302803][ T6521] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 53.302814][ T6521] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 53.302825][ T6521] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 53.302840][ T6521] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 53.302851][ T6521] ? __pfx_kvm_mmu_load+0x10/0x10 [ 53.302876][ T6521] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 53.302893][ T6521] ? kvm_check_and_inject_events+0x71c/0x1310 [ 53.302910][ T6521] vcpu_run+0x34eb/0x5500 [ 53.302921][ T6521] ? kvm_mmu_post_init_vm+0x269/0x370 [ 53.302937][ T6521] ? __lock_acquire+0xb8a/0x1c90 [ 53.302951][ T6521] ? __pfx_vcpu_run+0x10/0x10 [ 53.302966][ T6521] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 53.302979][ T6521] ? __local_bh_enable_ip+0xa4/0x120 [ 53.302995][ T6521] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.303008][ T6521] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.303038][ T6521] kvm_vcpu_ioctl+0x5eb/0x1690 [ 53.303054][ T6521] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.303071][ T6521] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 53.303089][ T6521] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.303112][ T6521] ? hook_file_ioctl_common+0x145/0x410 [ 53.303127][ T6521] ? selinux_file_ioctl+0x180/0x270 [ 53.303141][ T6521] ? selinux_file_ioctl+0xb4/0x270 [ 53.303157][ T6521] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.303171][ T6521] __x64_sys_ioctl+0x18e/0x210 [ 53.303184][ T6521] do_syscall_64+0xcd/0x4c0 [ 53.303200][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.303211][ T6521] RIP: 0033:0x7ff9af38e929 [ 53.303220][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.303230][ T6521] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.303240][ T6521] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 53.303246][ T6521] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.303252][ T6521] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 53.303258][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.303264][ T6521] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 53.303277][ T6521] [ 53.523114][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.619584][ T6533] loop2: detected capacity change from 0 to 7 [ 53.621948][ T6533] Dev loop2: unable to read RDB block 7 [ 53.625024][ T6533] loop2: AHDI p1 p2 p3 [ 53.626422][ T6533] loop2: partition table partially beyond EOD, truncated [ 53.628777][ T6533] loop2: p1 start 1601398130 is beyond EOD, truncated [ 53.630842][ T6533] loop2: p2 start 1702059890 is beyond EOD, truncated [ 53.683142][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 53.686081][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.688558][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.692140][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.696129][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.699992][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 53.710521][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.712954][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.713815][ T5951] Bluetooth: hci3: command tx timeout [ 53.715023][ T5963] Bluetooth: hci1: command tx timeout [ 53.722435][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.723204][ T5951] Bluetooth: hci2: command tx timeout [ 53.723676][ T5963] Bluetooth: hci0: command tx timeout [ 53.727265][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.732802][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 53.736724][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.738987][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.742709][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.746658][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.749970][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 53.758597][ T34] usb 8-1: string descriptor 0 read error: -22 [ 53.760606][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 53.763702][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.771586][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 53.777067][ T6541] Zero length message leads to an empty skb [ 53.832669][ T6545] FAULT_INJECTION: forcing a failure. [ 53.832669][ T6545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.837432][ T6545] CPU: 3 UID: 0 PID: 6545 Comm: syz.0.194 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 53.837446][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.837452][ T6545] Call Trace: [ 53.837456][ T6545] [ 53.837460][ T6545] dump_stack_lvl+0x16c/0x1f0 [ 53.837479][ T6545] should_fail_ex+0x512/0x640 [ 53.837497][ T6545] should_fail_alloc_page+0xe7/0x130 [ 53.837515][ T6545] prepare_alloc_pages+0x3c2/0x610 [ 53.837526][ T6545] ? rcu_is_watching+0x12/0xc0 [ 53.837542][ T6545] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 53.837558][ T6545] ? kasan_save_stack+0x42/0x60 [ 53.837572][ T6545] ? kasan_save_stack+0x33/0x60 [ 53.837585][ T6545] ? kasan_save_track+0x14/0x30 [ 53.837597][ T6545] ? __kasan_kmalloc+0xaa/0xb0 [ 53.837610][ T6545] ? __kvmalloc_node_noprof+0x27b/0x620 [ 53.837622][ T6545] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 53.837639][ T6545] ? mmu_topup_memory_caches+0xbc/0x170 [ 53.837652][ T6545] ? kvm_mmu_load+0xd9/0x22a0 [ 53.837674][ T6545] ? vcpu_run+0x34eb/0x5500 [ 53.837687][ T6545] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.837700][ T6545] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 53.837712][ T6545] ? __x64_sys_ioctl+0x18e/0x210 [ 53.837724][ T6545] ? do_syscall_64+0xcd/0x4c0 [ 53.837738][ T6545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.837751][ T6545] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.837775][ T6545] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.837789][ T6545] ? policy_nodemask+0xea/0x4e0 [ 53.837806][ T6545] alloc_pages_mpol+0x1fb/0x550 [ 53.837842][ T6545] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 53.837862][ T6545] ? trace_kmalloc+0x2b/0xd0 [ 53.837878][ T6545] ? __kvmalloc_node_noprof+0x298/0x620 [ 53.837893][ T6545] alloc_pages_noprof+0x131/0x390 [ 53.837910][ T6545] get_free_pages_noprof+0x10/0xb0 [ 53.837926][ T6545] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 53.837941][ T6545] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 53.837961][ T6545] mmu_topup_memory_caches+0xbc/0x170 [ 53.837976][ T6545] kvm_mmu_load+0xd9/0x22a0 [ 53.837989][ T6545] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 53.838000][ T6545] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 53.838015][ T6545] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 53.838029][ T6545] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 53.838040][ T6545] ? __pfx_kvm_mmu_load+0x10/0x10 [ 53.838053][ T6545] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 53.838069][ T6545] ? kvm_check_and_inject_events+0x71c/0x1310 [ 53.838086][ T6545] vcpu_run+0x34eb/0x5500 [ 53.838100][ T6545] ? __lock_acquire+0xb8a/0x1c90 [ 53.838114][ T6545] ? __pfx_vcpu_run+0x10/0x10 [ 53.838129][ T6545] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 53.838141][ T6545] ? __local_bh_enable_ip+0xa4/0x120 [ 53.838158][ T6545] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.838171][ T6545] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 53.838189][ T6545] kvm_vcpu_ioctl+0x5eb/0x1690 [ 53.838204][ T6545] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.838221][ T6545] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 53.838239][ T6545] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.838260][ T6545] ? hook_file_ioctl_common+0x145/0x410 [ 53.838274][ T6545] ? selinux_file_ioctl+0x180/0x270 [ 53.838288][ T6545] ? selinux_file_ioctl+0xb4/0x270 [ 53.838303][ T6545] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 53.838318][ T6545] __x64_sys_ioctl+0x18e/0x210 [ 53.838331][ T6545] do_syscall_64+0xcd/0x4c0 [ 53.838347][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.838358][ T6545] RIP: 0033:0x7ff9af38e929 [ 53.838367][ T6545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.838377][ T6545] RSP: 002b:00007ff9b0224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.838387][ T6545] RAX: ffffffffffffffda RBX: 00007ff9af5b5fa0 RCX: 00007ff9af38e929 [ 53.838393][ T6545] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 53.838399][ T6545] RBP: 00007ff9b0224090 R08: 0000000000000000 R09: 0000000000000000 [ 53.838405][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.838411][ T6545] R13: 0000000000000000 R14: 00007ff9af5b5fa0 R15: 00007ffe5724d958 [ 53.838424][ T6545] [ 53.979307][ T6518] netlink: 104 bytes leftover after parsing attributes in process `syz.3.182'. [ 53.983582][ T59] usb 8-1: USB disconnect, device number 3 [ 54.076340][ T6562] loop2: detected capacity change from 0 to 7 [ 54.078901][ T6562] Dev loop2: unable to read RDB block 7 [ 54.080674][ T6562] loop2: AHDI p1 p2 p3 [ 54.081184][ T5951] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 54.081976][ T6562] loop2: partition table partially beyond EOD, truncated [ 54.085011][ T5951] CPU: 2 UID: 0 PID: 5951 Comm: kworker/u33:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 54.085041][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.085062][ T5951] Workqueue: hci3 hci_rx_work [ 54.085083][ T5951] Call Trace: [ 54.085088][ T5951] [ 54.085093][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 54.085110][ T5951] sysfs_warn_dup+0x7f/0xa0 [ 54.085127][ T5951] sysfs_create_dir_ns+0x24b/0x2b0 [ 54.085142][ T5951] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 54.085157][ T5951] ? find_held_lock+0x2b/0x80 [ 54.085203][ T5951] ? do_raw_spin_unlock+0x172/0x230 [ 54.085219][ T5951] kobject_add_internal+0x2c4/0x9b0 [ 54.085240][ T5951] kobject_add+0x16e/0x240 [ 54.085257][ T5951] ? __pfx_kobject_add+0x10/0x10 [ 54.085275][ T5951] ? do_raw_spin_unlock+0x172/0x230 [ 54.085294][ T5951] ? kobject_put+0xab/0x5a0 [ 54.085321][ T5951] device_add+0x288/0x1a70 [ 54.085333][ T5951] ? __pfx_dev_set_name+0x10/0x10 [ 54.085344][ T5951] ? __pfx_device_add+0x10/0x10 [ 54.085360][ T5951] ? mgmt_send_event_skb+0x2fb/0x460 [ 54.085388][ T5951] hci_conn_add_sysfs+0x17e/0x230 [ 54.085407][ T5951] le_conn_complete_evt+0x1075/0x1d70 [ 54.085426][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 54.085441][ T5951] ? hci_event_packet+0x459/0x11c0 [ 54.085459][ T5951] hci_le_conn_complete_evt+0x23c/0x370 [ 54.085482][ T5951] hci_le_meta_evt+0x357/0x5e0 [ 54.085505][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 54.085529][ T5951] hci_event_packet+0x685/0x11c0 [ 54.085543][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 54.085560][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 54.085576][ T5951] ? kcov_remote_start+0x3c9/0x6d0 [ 54.085589][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.085606][ T5951] hci_rx_work+0x2c5/0x16b0 [ 54.085623][ T5951] ? rcu_is_watching+0x12/0xc0 [ 54.085639][ T5951] process_one_work+0x9cf/0x1b70 [ 54.085656][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 54.085672][ T5951] ? assign_work+0x1a0/0x250 [ 54.085684][ T5951] worker_thread+0x6c8/0xf10 [ 54.085700][ T5951] ? __kthread_parkme+0x19e/0x250 [ 54.085716][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 54.085727][ T5951] kthread+0x3c5/0x780 [ 54.085738][ T5951] ? __pfx_kthread+0x10/0x10 [ 54.085749][ T5951] ? rcu_is_watching+0x12/0xc0 [ 54.085763][ T5951] ? __pfx_kthread+0x10/0x10 [ 54.085774][ T5951] ret_from_fork+0x5d7/0x6f0 [ 54.085790][ T5951] ? __pfx_kthread+0x10/0x10 [ 54.085800][ T5951] ret_from_fork_asm+0x1a/0x30 [ 54.085839][ T5951] [ 54.085868][ T5951] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 54.088450][ T6562] loop2: p1 start 1601398130 is beyond EOD, [ 54.090928][ T5951] Bluetooth: hci3: failed to register connection device [ 54.095562][ T6562] truncated [ 54.172906][ T6562] loop2: p2 start 1702059890 is beyond EOD, truncated [ 54.238941][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 54.245346][ T6565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.247301][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.252619][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.257528][ T6565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.259503][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.262025][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.265295][ T6565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.267235][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.270175][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.276495][ T6565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.278343][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.281067][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.288035][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.326494][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 54.378078][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 54.434734][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.0.212 [ 54.440856][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 54.464378][ T6596] netlink: 'syz.2.215': attribute type 21 has an invalid length. [ 54.466755][ T6596] netlink: 'syz.2.215': attribute type 6 has an invalid length. [ 54.469087][ T6596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.215'. [ 54.537414][ T6611] netlink: 'syz.3.219': attribute type 12 has an invalid length. [ 54.539780][ T6611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.219'. [ 54.572716][ T6616] overlayfs: failed to clone upperpath [ 54.611791][ T6621] netlink: 'syz.1.225': attribute type 5 has an invalid length. [ 54.614186][ T6622] loop2: detected capacity change from 0 to 7 [ 54.614957][ T6622] Dev loop2: unable to read RDB block 7 [ 54.617801][ T6622] loop2: AHDI p1 p2 p3 [ 54.618451][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12088 sclass=netlink_route_socket pid=6621 comm=syz.1.225 [ 54.619125][ T6622] loop2: partition table partially beyond EOD, truncated [ 54.619377][ T6622] loop2: p1 start 1601398130 is beyond EOD, [ 54.624145][ T6621] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 54.626084][ T6622] truncated [ 54.630177][ T6622] loop2: p2 start 1702059890 is beyond EOD, truncated [ 54.876457][ T6639] block nbd2: shutting down sockets [ 54.946921][ T6656] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 54.949495][ T6656] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.238'. [ 54.952275][ T6656] nbd: must specify a device to reconfigure [ 55.009361][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 55.013008][ T6665] syz.2.241 uses old SIOCAX25GETINFO [ 55.198024][ T6689] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 55.260360][ T6698] syz.1.255 uses obsolete (PF_INET,SOCK_PACKET) [ 55.268936][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 55.268944][ T40] audit: type=1400 audit(1752584740.714:272): avc: denied { create } for pid=6697 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.307010][ T40] audit: type=1400 audit(1752584740.754:273): avc: denied { read } for pid=6705 comm="syz.2.258" path="socket:[12214]" dev="sockfs" ino=12214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.329670][ T6711] loop2: detected capacity change from 0 to 7 [ 55.332588][ T6711] Dev loop2: unable to read RDB block 7 [ 55.334811][ T6711] loop2: AHDI p1 p2 p3 [ 55.336398][ T6711] loop2: partition table partially beyond EOD, truncated [ 55.339673][ T6711] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.342036][ T6711] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.512572][ T6744] loop2: detected capacity change from 0 to 7 [ 55.516879][ T5948] Dev loop2: unable to read RDB block 7 [ 55.518613][ T5948] loop2: AHDI p1 p2 p3 [ 55.519897][ T5948] loop2: partition table partially beyond EOD, truncated [ 55.522399][ T5948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.527220][ T5948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.529990][ T6744] Dev loop2: unable to read RDB block 7 [ 55.531777][ T6744] loop2: AHDI p1 p2 p3 [ 55.535536][ T6744] loop2: partition table partially beyond EOD, truncated [ 55.538054][ T6744] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.540258][ T6744] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.675318][ T40] audit: type=1400 audit(1752584741.124:274): avc: denied { create } for pid=6787 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.696850][ T40] audit: type=1400 audit(1752584741.124:275): avc: denied { name_bind } for pid=6787 comm="syz.1.284" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.705321][ T40] audit: type=1400 audit(1752584741.124:276): avc: denied { connect } for pid=6787 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.724256][ T40] audit: type=1400 audit(1752584741.124:277): avc: denied { execute } for pid=6787 comm="syz.1.284" path="/64/cpu.stat" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.754375][ T40] audit: type=1400 audit(1752584741.194:278): avc: denied { ioctl } for pid=6798 comm="syz.1.287" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13694 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.911332][ T6819] loop2: detected capacity change from 0 to 7 [ 55.917005][ T6819] Dev loop2: unable to read RDB block 7 [ 55.919316][ T6819] loop2: AHDI p1 p2 p3 [ 55.920777][ T6819] loop2: partition table partially beyond EOD, truncated [ 55.924484][ T6819] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.926755][ T6819] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.039158][ T6849] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 56.068414][ T6854] loop2: detected capacity change from 0 to 7 [ 56.070850][ T6854] Dev loop2: unable to read RDB block 7 [ 56.072614][ T6854] loop2: AHDI p1 p2 p3 [ 56.074123][ T6854] loop2: partition table partially beyond EOD, truncated [ 56.076435][ T6854] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.078592][ T6854] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.189158][ T40] audit: type=1400 audit(1752584741.634:279): avc: denied { create } for pid=6875 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.190128][ T6876] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 56.195061][ T40] audit: type=1400 audit(1752584741.634:280): avc: denied { setattr } for pid=6875 comm="syz.0.320" path="socket:[12834]" dev="sockfs" ino=12834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.204777][ T40] audit: type=1400 audit(1752584741.634:281): avc: denied { connect } for pid=6875 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.207232][ T6878] loop2: detected capacity change from 0 to 7 [ 56.213281][ T6797] Dev loop2: unable to read RDB block 7 [ 56.215085][ T6797] loop2: AHDI p1 p2 p3 [ 56.216374][ T6797] loop2: partition table partially beyond EOD, truncated [ 56.218575][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.220595][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.229618][ T6878] Dev loop2: unable to read RDB block 7 [ 56.231558][ T6878] loop2: AHDI p1 p2 p3 [ 56.232902][ T6878] loop2: partition table partially beyond EOD, truncated [ 56.235787][ T6878] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.237851][ T6878] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.255935][ T6884] program syz.0.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.275032][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.275074][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.275104][ T5310] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.325056][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.328482][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.336143][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.342008][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.437242][ T6890] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 56.446161][ T6890] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 56.452768][ T6911] loop2: detected capacity change from 0 to 7 [ 56.456527][ T6911] Dev loop2: unable to read RDB block 7 [ 56.458377][ T6911] loop2: AHDI p1 p2 p3 [ 56.459879][ T6911] loop2: partition table partially beyond EOD, truncated [ 56.462512][ T6911] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.465222][ T6911] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.493609][ T6914] tmpfs: Cannot change global quota limit on remount [ 56.503383][ T6918] wireguard: wireguard0: Could not create IPv4 socket [ 56.505754][ T6918] wireguard0: entered promiscuous mode [ 56.507509][ T6918] wireguard0: entered allmulticast mode [ 56.603158][ T5951] Bluetooth: hci3: command tx timeout [ 56.652008][ T6936] loop2: detected capacity change from 0 to 7 [ 56.657240][ T5947] Dev loop2: unable to read RDB block 7 [ 56.658953][ T5947] loop2: AHDI p1 p2 p3 [ 56.660240][ T5947] loop2: partition table partially beyond EOD, truncated [ 56.662721][ T5947] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.664957][ T5947] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.668520][ T6936] Dev loop2: unable to read RDB block 7 [ 56.670259][ T6936] loop2: AHDI p1 p2 p3 [ 56.671553][ T6936] loop2: partition table partially beyond EOD, truncated [ 56.675354][ T6936] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.677767][ T6936] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.681028][ T5360] Dev loop2: unable to read RDB block 7 [ 56.682722][ T5360] loop2: AHDI p1 p2 p3 [ 56.684026][ T5360] loop2: partition table partially beyond EOD, truncated [ 56.686297][ T5360] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.688325][ T5360] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.784790][ T6960] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 56.841988][ T6970] policy can only be matched on NF_INET_PRE_ROUTING [ 56.842000][ T6970] unable to load match [ 57.103535][ T7013] ata1.00: invalid cdb length 6 [ 57.291524][ T7041] loop2: detected capacity change from 0 to 7 [ 57.293974][ T7041] Dev loop2: unable to read RDB block 7 [ 57.295716][ T7041] loop2: AHDI p1 p2 p3 [ 57.297079][ T7041] loop2: partition table partially beyond EOD, truncated [ 57.299476][ T7041] loop2: p1 start 1601398130 is beyond EOD, truncated [ 57.301856][ T7041] loop2: p2 start 1702059890 is beyond EOD, truncated [ 57.452685][ T7068] loop2: detected capacity change from 0 to 7 [ 57.455652][ T7068] Dev loop2: unable to read RDB block 7 [ 57.457494][ T7068] loop2: AHDI p1 p2 p3 [ 57.458942][ T7068] loop2: partition table partially beyond EOD, truncated [ 57.461254][ T7068] loop2: p1 start 1601398130 is beyond EOD, truncated [ 57.464397][ T7068] loop2: p2 start 1702059890 is beyond EOD, truncated [ 57.633860][ T7094] loop2: detected capacity change from 0 to 7 [ 57.638258][ T7094] Dev loop2: unable to read RDB block 7 [ 57.640002][ T7094] loop2: AHDI p1 p2 p3 [ 57.641280][ T7094] loop2: partition table partially beyond EOD, truncated [ 57.653157][ T7094] loop2: p1 start 1601398130 is beyond EOD, truncated [ 57.655207][ T7094] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.012922][ T7156] 9pnet_fd: Insufficient options for proto=fd [ 58.088280][ T7160] loop2: detected capacity change from 0 to 7 [ 58.090646][ T7160] Dev loop2: unable to read RDB block 7 [ 58.092421][ T7160] loop2: AHDI p1 p2 p3 [ 58.094110][ T7160] loop2: partition table partially beyond EOD, truncated [ 58.096493][ T7160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.098568][ T7160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.131448][ T7164] IPVS: Error during creation of socket; terminating [ 58.136113][ T7166] IPVS: Error during creation of socket; terminating [ 58.250943][ T7184] loop2: detected capacity change from 0 to 7 [ 58.254167][ T5948] Dev loop2: unable to read RDB block 7 [ 58.256295][ T5948] loop2: AHDI p1 p2 p3 [ 58.257649][ T5948] loop2: partition table partially beyond EOD, truncated [ 58.259943][ T5948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.262086][ T5948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.269849][ T7184] Dev loop2: unable to read RDB block 7 [ 58.271620][ T7184] loop2: AHDI p1 p2 p3 [ 58.273008][ T7184] loop2: partition table partially beyond EOD, truncated [ 58.278471][ T7184] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.280574][ T7184] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.353345][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.353373][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.355914][ T7196] block nbd3: Unsupported socket: shutdown callout must be supported. [ 58.513323][ T7210] loop2: detected capacity change from 0 to 7 [ 58.516504][ T7210] Dev loop2: unable to read RDB block 7 [ 58.518315][ T7210] loop2: AHDI p1 p2 p3 [ 58.519672][ T7210] loop2: partition table partially beyond EOD, truncated [ 58.522155][ T7210] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.524471][ T7210] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.673329][ T5963] Bluetooth: hci3: command tx timeout [ 58.675431][ T5963] Bluetooth: hci0: unexpected event for opcode 0x080e [ 58.698079][ T7236] loop2: detected capacity change from 0 to 7 [ 58.700789][ T6797] Dev loop2: unable to read RDB block 7 [ 58.702558][ T6797] loop2: AHDI p1 p2 p3 [ 58.705023][ T6797] loop2: partition table partially beyond EOD, truncated [ 58.707537][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.709616][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.713580][ T7236] Dev loop2: unable to read RDB block 7 [ 58.715559][ T7236] loop2: AHDI p1 p2 p3 [ 58.716996][ T7236] loop2: partition table partially beyond EOD, truncated [ 58.719861][ T7236] loop2: p1 start 1601398130 is beyond EOD, truncated [ 58.722339][ T7236] loop2: p2 start 1702059890 is beyond EOD, truncated [ 58.796962][ T7249] 9pnet_virtio: no channels available for device 127.0.0.1 [ 59.038980][ T7286] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 59.041402][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.048136][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 59.050663][ T7287] vhci_hcd: unknown pdu 2 [ 59.058493][ T1142] vhci_hcd: stop threads [ 59.060474][ T1142] vhci_hcd: release socket [ 59.062163][ T1142] vhci_hcd: disconnect device [ 59.132792][ T7301] loop2: detected capacity change from 0 to 7 [ 59.135305][ T7301] Dev loop2: unable to read RDB block 7 [ 59.137331][ T7301] loop2: AHDI p1 p2 p3 [ 59.138644][ T7301] loop2: partition table partially beyond EOD, truncated [ 59.140926][ T7301] loop2: p1 start 1601398130 is beyond EOD, truncated [ 59.143803][ T7301] loop2: p2 start 1702059890 is beyond EOD, truncated [ 59.166875][ T7305] openvswitch: netlink: Flow key attr not present in new flow. [ 59.226417][ T7316] tipc: Started in network mode [ 59.228046][ T7316] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.230380][ T7316] tipc: Enabling of bearer rejected, failed to enable media [ 59.303303][ T7334] loop2: detected capacity change from 0 to 7 [ 59.305909][ T7334] Dev loop2: unable to read RDB block 7 [ 59.307669][ T7334] loop2: AHDI p1 p2 p3 [ 59.309079][ T7334] loop2: partition table partially beyond EOD, truncated [ 59.311257][ T7334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 59.313810][ T7334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 59.360821][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.363324][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.397371][ T7347] overlayfs: workdir and upperdir must reside under the same mount [ 59.431655][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.438742][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.472269][ T7337] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.475690][ T7337] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.478398][ T7337] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.481033][ T7337] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.619858][ T7359] __nla_validate_parse: 7 callbacks suppressed [ 59.619869][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.515'. [ 59.657394][ T7367] loop2: detected capacity change from 0 to 7 [ 59.659845][ T7367] Dev loop2: unable to read RDB block 7 [ 59.661579][ T7367] loop2: AHDI p1 p2 p3 [ 59.662850][ T7367] loop2: partition table partially beyond EOD, truncated [ 59.665726][ T7367] loop2: p1 start 1601398130 is beyond EOD, truncated [ 59.667842][ T7367] loop2: p2 start 1702059890 is beyond EOD, truncated [ 59.746144][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 59.752325][ T7380] batman_adv: batadv0: Adding interface: dummy0 [ 59.755049][ T7380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.764028][ T7380] batman_adv: batadv0: Interface activated: dummy0 [ 59.775580][ T7380] batadv0: mtu less than device minimum [ 59.777997][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.781755][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.785391][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.788966][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.792523][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.796371][ T7380] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.848339][ T7400] loop2: detected capacity change from 0 to 7 [ 59.849846][ T6797] Dev loop2: unable to read RDB block 7 [ 59.852660][ T6797] loop2: AHDI p1 p2 p3 [ 59.852677][ T6797] loop2: partition table partially beyond EOD, truncated [ 59.852959][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 59.852977][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 59.861400][ T7400] Dev loop2: unable to read RDB block 7 [ 59.865760][ T7400] loop2: AHDI p1 p2 p3 [ 59.865804][ T7400] loop2: partition table partially beyond EOD, truncated [ 59.866592][ T7400] loop2: p1 start 1601398130 is beyond EOD, truncated [ 59.870187][ T7400] loop2: p2 start 1702059890 is beyond EOD, truncated [ 60.267414][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 60.270262][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 60.355779][ T7462] validate_nla: 2 callbacks suppressed [ 60.355790][ T7462] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 60.434415][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.500108][ T7483] loop2: detected capacity change from 0 to 7 [ 60.502592][ T7483] Dev loop2: unable to read RDB block 7 [ 60.505021][ T7483] loop2: AHDI p1 p2 p3 [ 60.506685][ T7483] loop2: partition table partially beyond EOD, truncated [ 60.509377][ T7483] loop2: p1 start 1601398130 is beyond EOD, truncated [ 60.511703][ T7483] loop2: p2 start 1702059890 is beyond EOD, truncated [ 60.719523][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 60.754174][ T5963] Bluetooth: hci3: command tx timeout [ 60.831720][ T7505] loop2: detected capacity change from 0 to 7 [ 60.836001][ T7505] Dev loop2: unable to read RDB block 7 [ 60.838840][ T7505] loop2: AHDI p1 p2 p3 [ 60.840418][ T7505] loop2: partition table partially beyond EOD, truncated [ 60.843545][ T7505] loop2: p1 start 1601398130 is beyond EOD, truncated [ 60.845884][ T7505] loop2: p2 start 1702059890 is beyond EOD, truncated [ 60.850547][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 60.850559][ T40] audit: type=1400 audit(1752584746.294:337): avc: denied { ioctl } for pid=7506 comm="syz.1.579" path="socket:[17518]" dev="sockfs" ino=17518 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.862612][ T40] audit: type=1400 audit(1752584746.304:338): avc: denied { write } for pid=7506 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 60.870197][ T40] audit: type=1400 audit(1752584746.314:339): avc: denied { ioctl } for pid=7506 comm="syz.1.579" path="socket:[17522]" dev="sockfs" ino=17522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.879464][ T40] audit: type=1400 audit(1752584746.314:340): avc: denied { bind } for pid=7506 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.887282][ T40] audit: type=1400 audit(1752584746.314:341): avc: denied { setopt } for pid=7506 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.894817][ T40] audit: type=1400 audit(1752584746.314:342): avc: denied { write } for pid=7506 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.079062][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 61.084415][ T7530] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 61.121230][ T7532] loop2: detected capacity change from 0 to 7 [ 61.125691][ T6797] Dev loop2: unable to read RDB block 7 [ 61.127890][ T6797] loop2: AHDI p1 p2 p3 [ 61.129610][ T6797] loop2: partition table partially beyond EOD, truncated [ 61.132789][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 61.135679][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 61.144423][ T7532] Dev loop2: unable to read RDB block 7 [ 61.147438][ T7532] loop2: AHDI p1 p2 p3 [ 61.149101][ T7532] loop2: partition table partially beyond EOD, truncated [ 61.150429][ T40] audit: type=1400 audit(1752584746.594:343): avc: denied { ioctl } for pid=7535 comm="syz.3.592" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.152220][ T7532] loop2: p1 start 1601398130 is beyond EOD, truncated [ 61.164013][ T7532] loop2: p2 start 1702059890 is beyond EOD, truncated [ 61.234204][ T5963] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 61.237290][ T5963] Bluetooth: hci1: Injecting HCI hardware error event [ 61.240512][ T5963] Bluetooth: hci1: hardware error 0x00 [ 61.243354][ T7543] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 61.336762][ T7555] loop2: detected capacity change from 0 to 7 [ 61.339739][ T7555] Dev loop2: unable to read RDB block 7 [ 61.341475][ T7555] loop2: AHDI p1 p2 p3 [ 61.342801][ T7555] loop2: partition table partially beyond EOD, truncated [ 61.345264][ T7555] loop2: p1 start 1601398130 is beyond EOD, truncated [ 61.347632][ T7555] loop2: p2 start 1702059890 is beyond EOD, truncated [ 61.416167][ T40] audit: type=1400 audit(1752584746.864:344): avc: denied { kexec_image_load } for pid=7567 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 61.477052][ T7575] IPVS: Error during creation of socket; terminating [ 61.530413][ T7583] loop2: detected capacity change from 0 to 7 [ 61.535639][ T7583] Dev loop2: unable to read RDB block 7 [ 61.538007][ T7583] loop2: AHDI p1 p2 p3 [ 61.539758][ T7583] loop2: partition table partially beyond EOD, truncated [ 61.542532][ T7583] loop2: p1 start 1601398130 is beyond EOD, truncated [ 61.545714][ T7583] loop2: p2 start 1702059890 is beyond EOD, truncated [ 61.881644][ T7625] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 61.885187][ T7625] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 61.889208][ T7625] netlink: 492 bytes leftover after parsing attributes in process `syz.1.631'. [ 61.918774][ T7628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7628 comm=syz.1.632 [ 61.951493][ T40] audit: type=1400 audit(1752584747.394:345): avc: denied { create } for pid=7631 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.025165][ T7646] Bluetooth: MGMT ver 1.23 [ 62.162317][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 62.163367][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 62.166162][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 62.172730][ T40] audit: type=1400 audit(1752584747.614:346): avc: denied { write } for pid=7659 comm="syz.3.645" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.206716][ T7665] loop2: detected capacity change from 0 to 7 [ 62.209730][ T6797] Dev loop2: unable to read RDB block 7 [ 62.211816][ T6797] loop2: AHDI p1 p2 p3 [ 62.213571][ T6797] loop2: partition table partially beyond EOD, truncated [ 62.215970][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.218812][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.224482][ T7665] Dev loop2: unable to read RDB block 7 [ 62.226336][ T7665] loop2: AHDI p1 p2 p3 [ 62.227618][ T7665] loop2: partition table partially beyond EOD, truncated [ 62.230080][ T7665] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.232249][ T7665] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.283326][ T7676] batman_adv: batadv0: Interface deactivated: dummy0 [ 62.285390][ T7676] batman_adv: batadv0: Removing interface: dummy0 [ 62.290075][ T7676] bridge_slave_0: left allmulticast mode [ 62.291829][ T7676] bridge_slave_0: left promiscuous mode [ 62.293799][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.299714][ T7676] bridge_slave_1: left allmulticast mode [ 62.301454][ T7676] bridge_slave_1: left promiscuous mode [ 62.305278][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.315532][ T7676] bond0: (slave bond_slave_0): Releasing backup interface [ 62.321218][ T7676] bond0: (slave bond_slave_1): Releasing backup interface [ 62.336073][ T7676] team0: Port device team_slave_0 removed [ 62.346863][ T7676] team0: Port device team_slave_1 removed [ 62.350785][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.353353][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.357468][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.359853][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.408438][ T7692] loop2: detected capacity change from 0 to 7 [ 62.412233][ T7692] Dev loop2: unable to read RDB block 7 [ 62.414232][ T7692] loop2: AHDI p1 p2 p3 [ 62.415625][ T7692] loop2: partition table partially beyond EOD, truncated [ 62.418314][ T7692] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.420433][ T7692] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.700282][ T7740] loop2: detected capacity change from 0 to 7 [ 62.703142][ T7740] Dev loop2: unable to read RDB block 7 [ 62.704912][ T7740] loop2: AHDI p1 p2 p3 [ 62.706335][ T7740] loop2: partition table partially beyond EOD, truncated [ 62.708817][ T7740] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.710949][ T7740] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.843218][ T5959] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.004604][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 63.014853][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 7 [ 63.019298][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8261, setting to 1024 [ 63.025620][ T5959] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 63.029162][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.032236][ T5959] usb 5-1: Product: syz [ 63.034034][ T5959] usb 5-1: Manufacturer: syz [ 63.035997][ T5959] usb 5-1: SerialNumber: syz [ 63.040863][ T5959] usb 5-1: config 0 descriptor?? [ 63.044997][ T5959] hub 5-1:0.0: bad descriptor, ignoring hub [ 63.047431][ T5959] hub 5-1:0.0: probe with driver hub failed with error -5 [ 63.055243][ T5959] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 63.250917][ T7732] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 63.313189][ T5963] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 63.483949][ T1468] usb 5-1: USB disconnect, device number 2 [ 65.575125][ T7850] kvm: MWAIT instruction emulated as NOP! [ 65.986074][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 65.986090][ T40] audit: type=1400 audit(1752584751.434:358): avc: denied { append } for pid=7857 comm="syz.0.732" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.239286][ T7880] netlink: 'syz.0.739': attribute type 4 has an invalid length. [ 66.248385][ T40] audit: type=1400 audit(1752584751.694:359): avc: denied { read } for pid=7879 comm="syz.0.739" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.255555][ T40] audit: type=1400 audit(1752584751.694:360): avc: denied { open } for pid=7879 comm="syz.0.739" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.262471][ T40] audit: type=1400 audit(1752584751.694:361): avc: denied { create } for pid=7879 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.268739][ T40] audit: type=1400 audit(1752584751.694:362): avc: denied { read } for pid=7879 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.298588][ T40] audit: type=1400 audit(1752584751.744:363): avc: denied { ioctl } for pid=7879 comm="syz.0.739" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.527223][ T7907] __nla_validate_parse: 2 callbacks suppressed [ 66.527235][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 66.534322][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 66.538639][ T40] audit: type=1400 audit(1752584751.984:364): avc: denied { ioctl } for pid=7906 comm="syz.0.749" path="socket:[16985]" dev="sockfs" ino=16985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.708147][ T7920] batman_adv: batadv0: Adding interface: dummy0 [ 66.710267][ T7920] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.719375][ T7920] batman_adv: batadv0: Interface activated: dummy0 [ 66.809040][ T40] audit: type=1400 audit(1752584752.254:365): avc: denied { load_policy } for pid=7926 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.809185][ T7927] SELinux: policydb string S Linux does not match my string SE Linux [ 66.820323][ T7927] SELinux: failed to load policy [ 66.849219][ T40] audit: type=1400 audit(1752584752.294:366): avc: denied { write } for pid=7928 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.850922][ T5963] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 66.892689][ T40] audit: type=1400 audit(1752584752.334:367): avc: denied { set_context_mgr } for pid=7930 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.034790][ T7941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7941 comm=syz.0.765 [ 67.178479][ T7943] netlink: 'syz.1.766': attribute type 11 has an invalid length. [ 67.534825][ T7973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7973 comm=syz.1.777 [ 67.612572][ T7983] overlayfs: failed to clone upperpath [ 67.726115][ T7997] net_ratelimit: 13 callbacks suppressed [ 67.726126][ T7997] openvswitch: netlink: Flow actions attr not present in new flow. [ 67.887341][ T8007] ------------[ cut here ]------------ [ 67.889670][ T8007] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 67.896227][ T8007] shift exponent 32769 is too large for 32-bit type 'int' [ 67.900586][ T8007] CPU: 1 UID: 0 PID: 8007 Comm: syz.0.790 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 67.900614][ T8007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.900626][ T8007] Call Trace: [ 67.900633][ T8007] [ 67.900640][ T8007] dump_stack_lvl+0x16c/0x1f0 [ 67.900692][ T8007] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 67.900740][ T8007] pcl726_attach.cold+0x19/0x1e [ 67.900770][ T8007] comedi_device_attach+0x3b0/0x900 [ 67.900803][ T8007] do_devconfig_ioctl+0x1a7/0x580 [ 67.900830][ T8007] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 67.900873][ T8007] ? find_held_lock+0x2b/0x80 [ 67.900900][ T8007] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 67.900925][ T8007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.900946][ T8007] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 67.900966][ T8007] ? do_vfs_ioctl+0x523/0x1a60 [ 67.900988][ T8007] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.901013][ T8007] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 67.901037][ T8007] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 67.901063][ T8007] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.901097][ T8007] ? hook_file_ioctl_common+0x145/0x410 [ 67.901129][ T8007] ? selinux_file_ioctl+0x180/0x270 [ 67.901153][ T8007] ? selinux_file_ioctl+0xb4/0x270 [ 67.901180][ T8007] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 67.901203][ T8007] __x64_sys_ioctl+0x18e/0x210 [ 67.901226][ T8007] do_syscall_64+0xcd/0x4c0 [ 67.901251][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.901266][ T8007] RIP: 0033:0x7ff9af38e929 [ 67.901279][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.901296][ T8007] RSP: 002b:00007ff9b0203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.901315][ T8007] RAX: ffffffffffffffda RBX: 00007ff9af5b6080 RCX: 00007ff9af38e929 [ 67.901327][ T8007] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000d [ 67.901338][ T8007] RBP: 00007ff9af410b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.901348][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.901358][ T8007] R13: 0000000000000000 R14: 00007ff9af5b6080 R15: 00007ffe5724d958 [ 67.901381][ T8007] [ 67.901387][ T8007] ---[ end trace ]--- [ 67.988918][ T8007] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 67.991258][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.0.790 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 67.994961][ T8007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.998278][ T8007] Call Trace: [ 67.999337][ T8007] [ 68.000278][ T8007] dump_stack_lvl+0x3d/0x1f0 [ 68.001782][ T8007] panic+0x71c/0x800 [ 68.003029][ T8007] ? __pfx_panic+0x10/0x10 [ 68.004797][ T8007] ? __pfx__printk+0x10/0x10 [ 68.006764][ T8007] check_panic_on_warn+0xab/0xb0 [ 68.008826][ T8007] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 68.011531][ T8007] pcl726_attach.cold+0x19/0x1e [ 68.013591][ T8007] comedi_device_attach+0x3b0/0x900 [ 68.015775][ T8007] do_devconfig_ioctl+0x1a7/0x580 [ 68.017923][ T8007] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 68.020267][ T8007] ? find_held_lock+0x2b/0x80 [ 68.022260][ T8007] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 68.024557][ T8007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.027030][ T8007] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.029459][ T8007] ? do_vfs_ioctl+0x523/0x1a60 [ 68.031482][ T8007] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.033598][ T8007] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 68.036326][ T8007] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 68.038723][ T8007] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.040861][ T8007] ? hook_file_ioctl_common+0x145/0x410 [ 68.042645][ T8007] ? selinux_file_ioctl+0x180/0x270 [ 68.044265][ T8007] ? selinux_file_ioctl+0xb4/0x270 [ 68.045880][ T8007] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.047690][ T8007] __x64_sys_ioctl+0x18e/0x210 [ 68.049188][ T8007] do_syscall_64+0xcd/0x4c0 [ 68.050627][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.052803][ T8007] RIP: 0033:0x7ff9af38e929 [ 68.054690][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.062577][ T8007] RSP: 002b:00007ff9b0203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.066044][ T8007] RAX: ffffffffffffffda RBX: 00007ff9af5b6080 RCX: 00007ff9af38e929 [ 68.069308][ T8007] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000d [ 68.072578][ T8007] RBP: 00007ff9af410b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.075864][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.079135][ T8007] R13: 0000000000000000 R14: 00007ff9af5b6080 R15: 00007ffe5724d958 [ 68.082423][ T8007] [ 68.084447][ T8007] Kernel Offset: disabled [ 68.086340][ T8007] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:05:53 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ca23f RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003494c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f4400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055680e8a1600 000055680e8a1600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc219cbfd0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726576697264206e 692073646e756f62 2d666f2d74756f2d 7466696873203a4e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3737372e312e7a79 733d6d6d6f632033 3739373d64697020 74656b636f735f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c637320303d6570 79745f67736d6c6e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d6c6f636f74 6f7270203a656761 7373656d206b6e69 6c74656e2064657a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696e676f6365726e 75203a78756e694c 4553205d33373937 54205b5d35323834 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00007fc9b2dd8b30 RBX=00007fff4982add0 RCX=00007fc9b1f8e6ec RDX=0000000000000000 RSI=00007fff4982ad90 RDI=0000000000000001 RBP=00007fff4982b010 RSP=00007fff4982ad18 R8 =00007fff4982acd0 R9 =00007fff4982ace0 R10=0000000000000000 R11=0000000000000202 R12=00007fff4982b070 R13=0000000000000004 R14=00007fff4982ad90 R15=00007fff4982ae60 RIP=00007fc9b1f84097 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558e717500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1ec152ae9c CR3=000000003c183000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e734702 000055558e734180 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e72f19a 000055558e72ef40 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82080006b00306ea c8080006a8030000 0000000000000000 000000003632376c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc080006d0034080 080006c8031fffff fff6080006c00310 90080006b8030480 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080006f803080800 06f0030e080006e8 030c080006e00303 98c6080006d80303 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07a0030c08000798 031208000790031f fffffffc08000788 0304080007800306 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010680040889a390 8008000100001208 06060112a6000800 08a0030188080008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98030e0800089003 01b2080008880306 808a080008800302 080007f803080800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07f00304080007e8 0312080007e00300 080007d8030a0800 07d00320080007c8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030589c6080007c0 0308080007b80326 ba080007b0030208 0007a8030e080007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=1ffffffff35c0800 RDX=0000000000000000 RSI=ffffffff822f5e52 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000466fac8 R8 =0000000000000006 R9 =0000000000047013 R10=0000000000013d4c R11=0000000000000001 R12=0000000047013867 R13=0000000000000000 R14=ffff88805b2c2098 R15=ffffffff90a98e60 RIP=ffffffff8189727e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff9b02246c0 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b0507 CR3=000000002ae1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=00000000fce002fe Opmask02=00000000fce00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e8065cbf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 314439436d63702f 646e732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000053 12441a434e40530c 474d500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000673df RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003cd0000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e680000 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3fff90 CR3=00000000528d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000fce002fe Opmask02=00000000fce00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccdfe2720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e7f811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000