last executing test programs: 49.419177245s ago: executing program 3 (id=611): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x101) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, 0x0, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) name_to_handle_at(r0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)=@isofs_parent={0x14, 0x2, {0x7, 0x8, 0x4, 0x79a, 0x7, 0x6ee8}}, &(0x7f0000000400), 0x400) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 46.288940349s ago: executing program 3 (id=660): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (fail_nth: 3) 46.17842693s ago: executing program 3 (id=665): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000300)=0xd000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe2$9p(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x5}, &(0x7f0000000040)=0xc) 45.969869134s ago: executing program 3 (id=673): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000780)={0xb236, [0x5, 0x7, 0x0, 0xfff8, 0x8, 0x100, 0xfff8, 0x40, 0x400, 0xbf13, 0x40, 0xac2, 0x2, 0x7, 0x1, 0xa34, 0x7, 0x3, 0x4, 0x9, 0xff7a, 0x4, 0x1, 0x4, 0x0, 0x80, 0xd89, 0xfff, 0x400, 0x3dfe, 0x1, 0x101, 0x74, 0xd, 0x0, 0x100, 0x3, 0x1, 0x52c, 0x9, 0x838e, 0x3, 0x8, 0x2, 0x8, 0x1, 0x0, 0x5], 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f20e035100000000f22e0dc1a660f38811c1167670fc72dc4e37905f313b96d080000b8a134e2eeba000000000f3066ba2100b800800000efb805000000b9075800000f01d93ee10f66baf80cb808c7998aef66bafc0c66b8b42066ef", 0x5d}], 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472bfc2be616e733d66642c7266646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040029087000fcdbdfaa0fae7852"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 45.810885078s ago: executing program 3 (id=675): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200)=0xc, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0xfffffffa, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r6, 0x1c}}, 0x10) setsockopt(r2, 0x6, 0x9, &(0x7f0000000180)='C]=:.', 0x5) sendmmsg(r2, &(0x7f000000e700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000d010000aaff0e0bcc8beb0000000000380000000000000003010000070000000e8d5c9b772a5453a0c1e964f0677c766243146568908ec9665cd5f3454eb840478e000000000000100000000000000007010000ffffffff09fa4473af6d9246c67fce25c8b515818aa248cfc2ceb4a74aef3234602d23253d617c29bce192a4ccfab596ce6caf"], 0x60}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4048004) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) 44.989978519s ago: executing program 3 (id=687): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x9, 0x7, &(0x7f0000000200)=0xb}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.000264149s ago: executing program 32 (id=687): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x9, 0x7, &(0x7f0000000200)=0xb}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.919268921s ago: executing program 1 (id=1400): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES16=r1], 0x48) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f000000e700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x84, 0x5fb}, {0xd8, 0xff, 0x4, "e84f393a3f117e056834ce717f88b48140762dd3fff3fd330bea15c8afc8d9bf9e8f7a0325995b41bb1115f76a761331be31585ee7cb9dba52b31fb70acd6f23ae35fdd0574ca3adb059b0b16a39a078a33a509702e50c4915fcc6cb32238f8b99bd16055b262c5149d7bde5dc91bf82e8b7f6f96e3328a2010b91fe51e124a0a89936e346a0143cfff5b074b2cc38f17d316128c809537b016fa7e1ffe20864bc975af891b5fa48889c6a0500a3e96f353dec2002331ecfb64f490c1df304b5df7924835246"}], 0xe8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xd0, 0x10d, 0xff, "4f3ce1acf77fb3c33e59e6dee18f376a597277809f9cc57f6e7b4b2b1e7eb6f7d5a8eee2bbfaf900c92741ff3a3493bdda467fbe4eef9c16d81ed550c2ad576ada8c8237f79d59a72800bf0989a380ca6a9eb81e78f888c7826e550750c9a81b8453d06caae46f7181f3ea7fdece06c9b9c2d6ad5f643175cf30a553a91474fa8cfbe2eddec4a509547dafa2fa6fcc28fdaa908e7df2ab1ea41fa44be3329d5816fbc60893b6d05c7acd74a622addd2d658ad889b9d190f5ce8afbf4b42db740"}], 0xd0}}], 0x2, 0x4048004) 1.039490695s ago: executing program 1 (id=1409): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)="b05cb5b48b76aa2b434a87e46cba1f0eade881ee1c50ab7c1e5081e6a962197cd21d4b4029749a65e67f2c9c49", 0x2d) 1.039261798s ago: executing program 1 (id=1410): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) 909.602184ms ago: executing program 1 (id=1412): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 860.177287ms ago: executing program 1 (id=1414): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f000000e700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x5fb}, {0x10, 0xff, 0x4}], 0x20}, 0xffc3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)=[{0x10, 0x10d, 0xb0effaa}], 0x10}}], 0x2, 0x4048004) 479.82853ms ago: executing program 2 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mq_open(&(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x20, &(0x7f0000000100)={0x8, 0x401, 0x0, 0x101}) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f000000010001307000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000040000000000005e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/268], 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 338.993983ms ago: executing program 2 (id=1427): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@sack_info={0x0, 0x6, 0x5}, &(0x7f0000000640)=0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x144, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb14}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6489}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @loopback, 0x8001}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x87ddcdbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x297e}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004001}, 0x48000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x280, 0x280, 0x368, 0xd0, 0x1b0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) socket$inet_udplite(0x2, 0x2, 0x88) 287.264121ms ago: executing program 0 (id=1431): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4) 285.120834ms ago: executing program 4 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x118}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x3000000, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000540001d660843b8995bc250807000000c9e4cc8800f449962d2a0e2c208409419f66eee79d14136abbed5d4f3e11e6b0781429892e046437dc683bf041e5e0a43ebcec306bf7c9e3de65600db91bd6fada21fe1ce7b041", @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40080) socket(0x15, 0x4, 0x8) 219.532865ms ago: executing program 0 (id=1433): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) 219.269031ms ago: executing program 2 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000f"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 219.209076ms ago: executing program 4 (id=1435): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) getpgid(0x0) r0 = gettid() syz_open_procfs(r0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 170.206945ms ago: executing program 2 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x20004804}, 0x10) 170.042807ms ago: executing program 4 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 169.515534ms ago: executing program 2 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './bus'}, 0x9) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) ftruncate(r0, 0x9) 109.887166ms ago: executing program 4 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r4, 0x205, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42001}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60c4}, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34d7d1cb", @ANYRES16=r4, @ANYBLOB="000129bd7000fedbdf257f00000008000300", @ANYRES32=r8, @ANYBLOB="0a00f500ffffffffffff00000a0034000101010101010000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x63, 0x10, 0x503}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) (async) read(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r4, 0x205, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42001}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60c4}, 0x4) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34d7d1cb", @ANYRES16=r4, @ANYBLOB="000129bd7000fedbdf257f00000008000300", @ANYRES32=r8, @ANYBLOB="0a00f500ffffffffffff00000a0034000101010101010000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x63, 0x10, 0x503}, 0x20}}, 0x0) (async) 109.722613ms ago: executing program 0 (id=1440): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x84, 0x5fb}, {0xd8, 0xff, 0x4, "e84f393a3f117e056834ce717f88b48140762dd3fff3fd330bea15c8afc8d9bf9e8f7a0325995b41bb1115f76a761331be31585ee7cb9dba52b31fb70acd6f23ae35fdd0574ca3adb059b0b16a39a078a33a509702e50c4915fcc6cb32238f8b99bd16055b262c5149d7bde5dc91bf82e8b7f6f96e3328a2010b91fe51e124a0a89936e346a0143cfff5b074b2cc38f17d316128c809537b016fa7e1ffe20864bc975af891b5fa48889c6a0500a3e96f353dec2002331ecfb64f490c1df304b5df7924835246"}], 0xe8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xd0, 0x10d, 0xff, "4f3ce1acf77fb3c33e59e6dee18f376a597277809f9cc57f6e7b4b2b1e7eb6f7d5a8eee2bbfaf900c92741ff3a3493bdda467fbe4eef9c16d81ed550c2ad576ada8c8237f79d59a72800bf0989a380ca6a9eb81e78f888c7826e550750c9a81b8453d06caae46f7181f3ea7fdece06c9b9c2d6ad5f643175cf30a553a91474fa8cfbe2eddec4a509547dafa2fa6fcc28fdaa908e7df2ab1ea41fa44be3329d5816fbc60893b6d05c7acd74a622addd2d658ad889b9d190f5ce8afbf4b42db740"}], 0xd0}}], 0x2, 0x4048004) 108.678677ms ago: executing program 4 (id=1441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 59.703326ms ago: executing program 0 (id=1442): semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000000)=""/56) 59.318917ms ago: executing program 4 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c00010026bd7000fcdbdf250400000005000b00"/36], 0x24}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) (fail_nth: 10) 58.971037ms ago: executing program 0 (id=1444): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 58.768607ms ago: executing program 2 (id=1445): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f000000e700)=[{{0x0, 0x700, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)=[{0x18, 0x10d, 0xb0effaa, "cc8beb"}, {0x38, 0x103, 0x7, "0e8d5c9b772a5453a0c1e964f0677c766243146568908ec9665cd5f3454eb840478e"}, {0x10, 0x107, 0xffffffff}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4048004) 269.283µs ago: executing program 0 (id=1446): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fadvise64(r2, 0x0, 0x8000, 0x4) 0s ago: executing program 1 (id=1447): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) kernel console output (not intermixed with test programs): 7/0x370 [ 99.219062][ T8440] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 99.219074][ T8440] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 99.219085][ T8440] ? __x64_sys_ioctl+0x190/0x200 [ 99.219098][ T8440] ? do_syscall_64+0xcd/0x250 [ 99.219112][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.219134][ T8440] ? __pfx_copy_process+0x10/0x10 [ 99.219152][ T8440] ? lockdep_init_map_type+0x16d/0x7d0 [ 99.219167][ T8440] ? __raw_spin_lock_init+0x3a/0x110 [ 99.219178][ T8440] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 99.219194][ T8440] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 99.219205][ T8440] vhost_task_create+0x1d3/0x2e0 [ 99.219218][ T8440] ? __pfx_vhost_task_create+0x10/0x10 [ 99.219231][ T8440] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 99.219247][ T8440] ? __pfx_vhost_task_fn+0x10/0x10 [ 99.219265][ T8440] ? lock_acquire.part.0+0x11b/0x380 [ 99.219279][ T8440] ? find_held_lock+0x2d/0x110 [ 99.219294][ T8440] kvm_mmu_post_init_vm+0x1b7/0x370 [ 99.219308][ T8440] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 99.219320][ T8440] ? lock_acquire+0x2f/0xb0 [ 99.219333][ T8440] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 99.219347][ T8440] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 99.219361][ T8440] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.219377][ T8440] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 99.219395][ T8440] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.219414][ T8440] ? __pfx_lock_release+0x10/0x10 [ 99.219434][ T8440] ? selinux_file_ioctl+0x180/0x270 [ 99.219450][ T8440] ? selinux_file_ioctl+0xb4/0x270 [ 99.219466][ T8440] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.219479][ T8440] __x64_sys_ioctl+0x190/0x200 [ 99.219494][ T8440] do_syscall_64+0xcd/0x250 [ 99.219511][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.219526][ T8440] RIP: 0033:0x7f3de4b8d169 [ 99.219535][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.219544][ T8440] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.219554][ T8440] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 99.219561][ T8440] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.219566][ T8440] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 99.219572][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.219578][ T8440] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 99.219591][ T8440] [ 99.219754][ T8440] warn_alloc: 1 callbacks suppressed [ 99.219760][ T8440] syz.1.885: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 99.278776][ T8444] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 99.278776][ T8444] 2#“ Ù›žr£ýly §' [ 99.278969][ T8440] ,cpuset= [ 99.283728][ T8444] overlay: filesystem on ./bus not supported as upperdir [ 99.283763][ T8440] /,mems_allowed=0-1 [ 99.388269][ T8440] CPU: 2 UID: 0 PID: 8440 Comm: syz.1.885 Not tainted 6.14.0-syzkaller #0 [ 99.388292][ T8440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.388299][ T8440] Call Trace: [ 99.388302][ T8440] [ 99.388307][ T8440] dump_stack_lvl+0x16c/0x1f0 [ 99.388325][ T8440] warn_alloc+0x24d/0x3a0 [ 99.388338][ T8440] ? __pfx_warn_alloc+0x10/0x10 [ 99.388350][ T8440] ? kfree+0x2c4/0x4d0 [ 99.388368][ T8440] ? __get_vm_area_node+0x1dc/0x2f0 [ 99.388387][ T8440] __vmalloc_node_range_noprof+0xd24/0x1530 [ 99.388405][ T8440] ? mod_objcg_state+0x4c4/0x8d0 [ 99.388421][ T8440] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.388453][ T8440] ? vhost_task_create+0x1d3/0x2e0 [ 99.388470][ T8440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.388487][ T8440] ? rcu_is_watching+0x12/0xc0 [ 99.388499][ T8440] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 99.388513][ T8440] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 99.388523][ T8440] ? mark_held_locks+0x9f/0xe0 [ 99.388537][ T8440] ? copy_process+0x4be/0x8c50 [ 99.388547][ T8440] ? vhost_task_create+0x1d3/0x2e0 [ 99.388560][ T8440] copy_process+0x2ef2/0x8c50 [ 99.388570][ T8440] ? vhost_task_create+0x1d3/0x2e0 [ 99.388582][ T8440] ? kasan_save_stack+0x33/0x60 [ 99.388591][ T8440] ? kasan_save_track+0x14/0x30 [ 99.388600][ T8440] ? __kasan_kmalloc+0xaa/0xb0 [ 99.388609][ T8440] ? vhost_task_create+0xe6/0x2e0 [ 99.388621][ T8440] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 99.388634][ T8440] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 99.388646][ T8440] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 99.388657][ T8440] ? __x64_sys_ioctl+0x190/0x200 [ 99.388671][ T8440] ? do_syscall_64+0xcd/0x250 [ 99.388685][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.388707][ T8440] ? __pfx_copy_process+0x10/0x10 [ 99.388725][ T8440] ? lockdep_init_map_type+0x16d/0x7d0 [ 99.388740][ T8440] ? __raw_spin_lock_init+0x3a/0x110 [ 99.388750][ T8440] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 99.388766][ T8440] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 99.388778][ T8440] vhost_task_create+0x1d3/0x2e0 [ 99.388791][ T8440] ? __pfx_vhost_task_create+0x10/0x10 [ 99.388804][ T8440] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 99.388821][ T8440] ? __pfx_vhost_task_fn+0x10/0x10 [ 99.388835][ T8440] ? lock_acquire.part.0+0x11b/0x380 [ 99.388849][ T8440] ? find_held_lock+0x2d/0x110 [ 99.388864][ T8440] kvm_mmu_post_init_vm+0x1b7/0x370 [ 99.388879][ T8440] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 99.388891][ T8440] ? lock_acquire+0x2f/0xb0 [ 99.388904][ T8440] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 99.388918][ T8440] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 99.388932][ T8440] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.388948][ T8440] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 99.388968][ T8440] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.388987][ T8440] ? __pfx_lock_release+0x10/0x10 [ 99.389007][ T8440] ? selinux_file_ioctl+0x180/0x270 [ 99.389023][ T8440] ? selinux_file_ioctl+0xb4/0x270 [ 99.389040][ T8440] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.389053][ T8440] __x64_sys_ioctl+0x190/0x200 [ 99.389068][ T8440] do_syscall_64+0xcd/0x250 [ 99.389083][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.389097][ T8440] RIP: 0033:0x7f3de4b8d169 [ 99.389106][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.389115][ T8440] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.389125][ T8440] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 99.389131][ T8440] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.389137][ T8440] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 99.389143][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.389149][ T8440] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 99.389162][ T8440] [ 99.389174][ T8440] Mem-Info: [ 99.502955][ T8440] active_anon:6418 inactive_anon:0 isolated_anon:0 [ 99.502955][ T8440] active_file:1456 inactive_file:53308 isolated_file:0 [ 99.502955][ T8440] unevictable:1767 dirty:186 writeback:0 [ 99.502955][ T8440] slab_reclaimable:11408 slab_unreclaimable:75288 [ 99.502955][ T8440] mapped:24528 shmem:2446 pagetables:999 [ 99.502955][ T8440] sec_pagetables:300 bounce:0 [ 99.502955][ T8440] kernel_misc_reclaimable:0 [ 99.502955][ T8440] free:460968 free_pcp:6851 free_cma:0 [ 99.515864][ T8440] Node 0 active_anon:25672kB inactive_anon:0kB active_file:5824kB inactive_file:213120kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:98072kB dirty:740kB writeback:0kB shmem:6248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12048kB pagetables:3996kB sec_pagetables:1200kB all_unreclaimable? no [ 99.524862][ T8440] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.533338][ T8440] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.541009][ T8440] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 99.542666][ T8440] Node 0 DMA32 free:256840kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:25608kB inactive_anon:0kB active_file:5824kB inactive_file:213120kB unevictable:3532kB writepending:752kB present:2080628kB managed:1270124kB mlocked:0kB bounce:0kB free_pcp:5700kB local_pcp:1148kB free_cma:0kB [ 99.551826][ T8440] lowmem_reserve[]: 0 0 0 0 0 [ 99.554560][ T8440] Node 1 Normal free:1571084kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:22380kB local_pcp:15876kB free_cma:0kB [ 99.562570][ T8440] lowmem_reserve[]: 0 0 0 0 0 [ 99.563917][ T8440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.567758][ T8440] Node 0 DMA32: 36*4kB (U) 338*8kB (UME) 236*16kB (UME) 133*32kB (UME) 143*64kB (UME) 59*128kB (UME) 44*256kB (UM) 23*512kB (UM) 18*1024kB (UM) 8*2048kB (UM) 42*4096kB (UM) = 257472kB [ 99.573090][ T8440] Node 1 Normal: 11*4kB (U) 16*8kB (UME) 10*16kB (UME) 18*32kB (UME) 13*64kB (UE) 3*128kB (UE) 3*256kB (E) 3*512kB (UME) 2*1024kB (UE) 0*2048kB 382*4096kB (M) = 1571148kB [ 99.577989][ T8440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.580575][ T8440] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.583044][ T8440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.585628][ T8440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.588192][ T8440] 57212 total pagecache pages [ 99.589524][ T8440] 0 pages in swap cache [ 99.590644][ T8440] Free swap = 124504kB [ 99.591781][ T8440] Total swap = 124996kB [ 99.592921][ T8440] 1048443 pages RAM [ 99.593962][ T8440] 0 pages HighMem/MovableOnly [ 99.595271][ T8440] 281591 pages reserved [ 99.596467][ T8440] 0 pages cma reserved [ 99.728569][ T8452] bridge_slave_0: left allmulticast mode [ 99.730126][ T8452] bridge_slave_0: left promiscuous mode [ 99.733316][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.738380][ T8452] bridge_slave_1: left allmulticast mode [ 99.739967][ T8452] bridge_slave_1: left promiscuous mode [ 99.741546][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.748930][ T8452] bond0: (slave bond_slave_0): Releasing backup interface [ 99.753271][ T8452] bond0: (slave bond_slave_1): Releasing backup interface [ 99.758814][ T8452] team0: Port device team_slave_0 removed [ 99.766566][ T8452] team0: Port device team_slave_1 removed [ 99.768507][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.770697][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.775668][ T8453] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 99.779345][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.781706][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.793085][ T8452] team0: Port device geneve0 removed [ 99.795583][ T8452] bond0: (slave wlan1): Releasing backup interface [ 99.811677][ T8453] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.868781][ T40] audit: type=1400 audit(1742836993.224:477): avc: denied { connect } for pid=8458 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.878901][ T40] audit: type=1400 audit(1742836993.224:478): avc: denied { setopt } for pid=8458 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.887395][ T40] audit: type=1400 audit(1742836993.224:479): avc: denied { write } for pid=8458 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.911299][ T8463] /dev/sg0: Can't lookup blockdev [ 99.919355][ T40] audit: type=1400 audit(1742836993.274:480): avc: denied { connect } for pid=8462 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.927851][ T8463] ceph: Path missing in source [ 100.001641][ T8470] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 100.001641][ T8470] 2#“ Ù›žr£ýly §' [ 100.009127][ T8470] overlay: filesystem on ./bus not supported as upperdir [ 100.017536][ T40] audit: type=1400 audit(1742836993.374:481): avc: denied { create } for pid=8471 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.022802][ T40] audit: type=1400 audit(1742836993.374:482): avc: denied { getopt } for pid=8471 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.102410][ T8474] kvm: pic: single mode not supported [ 100.102429][ T8474] pic_ioport_write: 40 callbacks suppressed [ 100.102440][ T8474] kvm: pic: level sensitive irq not supported [ 100.106006][ T8474] picdev_read: 60 callbacks suppressed [ 100.106015][ T8474] kvm: pic: non byte read [ 100.111448][ T8474] kvm: pic: non byte read [ 100.113905][ T8474] kvm: pic: non byte read [ 100.114490][ T8484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.901'. [ 100.116305][ T8474] kvm: pic: single mode not supported [ 100.118214][ T8474] kvm: pic: level sensitive irq not supported [ 100.119987][ T8474] kvm: pic: non byte read [ 100.123887][ T8474] kvm: pic: non byte read [ 100.127444][ T8474] kvm: pic: non byte read [ 100.129501][ T8474] kvm: pic: level sensitive irq not supported [ 100.129717][ T8474] kvm: pic: non byte read [ 100.133643][ T8474] kvm: pic: non byte read [ 100.136454][ T8474] kvm: pic: level sensitive irq not supported [ 100.136758][ T8474] kvm: pic: non byte read [ 100.324830][ T8494] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 100.328761][ T8494] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.440949][ T8499] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 100.443126][ T8499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.906'. [ 100.470039][ T8505] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 100.470039][ T8505] 2#“ Ù›žr£ýly §' [ 100.518917][ T40] audit: type=1400 audit(1742836993.874:483): avc: denied { execute } for pid=8509 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.525226][ T40] audit: type=1400 audit(1742836993.874:484): avc: denied { execute_no_trans } for pid=8509 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.617569][ T7132] bridge0: port 3(syz_tun) entered disabled state [ 100.626480][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.627328][ T7132] syz_tun (unregistering): left allmulticast mode [ 100.629849][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.630357][ T7132] syz_tun (unregistering): left promiscuous mode [ 100.632904][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.634226][ T7132] bridge0: port 3(syz_tun) entered disabled state [ 100.638010][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.640382][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.642717][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.653717][ T40] audit: type=1400 audit(1742836994.004:485): avc: denied { mounton } for pid=8517 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 100.664191][ T8520] FAULT_INJECTION: forcing a failure. [ 100.664191][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 100.668225][ T8520] CPU: 3 UID: 0 PID: 8520 Comm: syz.2.915 Not tainted 6.14.0-syzkaller #0 [ 100.668239][ T8520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.668246][ T8520] Call Trace: [ 100.668249][ T8520] [ 100.668253][ T8520] dump_stack_lvl+0x16c/0x1f0 [ 100.668271][ T8520] should_fail_ex+0x50a/0x650 [ 100.668288][ T8520] ? fs_reclaim_acquire+0xae/0x150 [ 100.668306][ T8520] should_failslab+0xc2/0x120 [ 100.668318][ T8520] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 100.668329][ T8520] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 100.668348][ T8520] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 100.668363][ T8520] ? vmx_set_apic_access_page_addr+0x6a4/0x900 [ 100.668376][ T8520] mmu_topup_memory_caches+0x25/0x170 [ 100.668390][ T8520] kvm_mmu_load+0xda/0x22a0 [ 100.668403][ T8520] ? kvm_apic_has_interrupt+0xb6/0x190 [ 100.668438][ T8520] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 100.668455][ T8520] ? _raw_read_unlock+0x28/0x50 [ 100.668468][ T8520] ? vmx_set_apic_access_page_addr+0x1a0/0x900 [ 100.668479][ T8520] ? kvm_apic_accept_pic_intr+0xbb/0x1a0 [ 100.668492][ T8520] ? __pfx_kvm_mmu_load+0x10/0x10 [ 100.668504][ T8520] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 100.668524][ T8520] ? kvm_check_and_inject_events+0x725/0x12e0 [ 100.668540][ T8520] vcpu_run+0x2e8b/0x4cc0 [ 100.668557][ T8520] ? __pfx_vcpu_run+0x10/0x10 [ 100.668567][ T8520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 100.668583][ T8520] ? rcu_is_watching+0x12/0xc0 [ 100.668595][ T8520] ? trace_lock_acquire+0x14e/0x1f0 [ 100.668606][ T8520] ? __local_bh_enable_ip+0xa4/0x120 [ 100.668622][ T8520] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.668635][ T8520] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 100.668650][ T8520] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 100.668663][ T8520] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 100.668679][ T8520] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 100.668692][ T8520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.668709][ T8520] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 100.668728][ T8520] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.668747][ T8520] ? __pfx_lock_release+0x10/0x10 [ 100.668766][ T8520] ? selinux_file_ioctl+0x180/0x270 [ 100.668782][ T8520] ? selinux_file_ioctl+0xb4/0x270 [ 100.668799][ T8520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.668812][ T8520] __x64_sys_ioctl+0x190/0x200 [ 100.668828][ T8520] do_syscall_64+0xcd/0x250 [ 100.668844][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.668859][ T8520] RIP: 0033:0x7fe43b78d169 [ 100.668867][ T8520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.668877][ T8520] RSP: 002b:00007fe43c55c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.668887][ T8520] RAX: ffffffffffffffda RBX: 00007fe43b9a5fa0 RCX: 00007fe43b78d169 [ 100.668894][ T8520] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 100.668899][ T8520] RBP: 00007fe43c55c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.668905][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.668911][ T8520] R13: 0000000000000000 R14: 00007fe43b9a5fa0 R15: 00007ffd901f0ea8 [ 100.668924][ T8520] [ 100.724954][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 100.725237][ C3] vkms_vblank_simulate: vblank timer overrun [ 100.763915][ C3] vkms_vblank_simulate: vblank timer overrun [ 100.805419][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.807967][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.810118][ T8517] bridge_slave_0: entered allmulticast mode [ 100.812382][ T8517] bridge_slave_0: entered promiscuous mode [ 100.815174][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.818957][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.820985][ T8517] bridge_slave_1: entered allmulticast mode [ 100.823226][ T8517] bridge_slave_1: entered promiscuous mode [ 100.857722][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.874945][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.879226][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.906191][ T8517] team0: Port device team_slave_0 added [ 100.908942][ T8517] team0: Port device team_slave_1 added [ 100.927742][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.948787][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.951376][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.958942][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.963175][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.965119][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.972920][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.006602][ T8517] hsr_slave_0: entered promiscuous mode [ 101.008570][ T8517] hsr_slave_1: entered promiscuous mode [ 101.010630][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.012918][ T8517] Cannot create hsr debugfs directory [ 101.040079][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.104699][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.152260][ T8549] 8021q: VLANs not supported on sit0 [ 101.153933][ T8517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.158933][ T8517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.163662][ T8517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.170974][ T8517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.227032][ T1139] team0: left allmulticast mode [ 101.229179][ T1139] team_slave_0: left allmulticast mode [ 101.231499][ T1139] team_slave_1: left allmulticast mode [ 101.234050][ T1139] bridge0: port 4(team0) entered disabled state [ 101.239332][ T1139] bridge_slave_1: left allmulticast mode [ 101.240946][ T1139] bridge_slave_1: left promiscuous mode [ 101.242510][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.246131][ T1139] bridge_slave_0: left allmulticast mode [ 101.247910][ T1139] bridge_slave_0: left promiscuous mode [ 101.249578][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.277346][ T1139] bridge0: left promiscuous mode [ 101.361461][ T8559] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 101.361461][ T8559] 2#“ Ù›žr£ýly §' [ 101.521535][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.529081][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.533814][ T1139] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 101.549742][ T1139] bond0 (unregistering): Released all slaves [ 101.577102][ T8569] xt_policy: output policy not valid in PREROUTING and INPUT [ 101.589933][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.598698][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.605495][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.607443][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.618739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.620668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.644214][ T1139] tipc: Disabling bearer [ 101.646040][ T1139] tipc: Left network mode [ 101.763269][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.781518][ T8592] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 101.781518][ T8592] 2#“ Ù›žr£ýly §' [ 101.789337][ T8592] overlayfs: failed to resolve './file1': -2 [ 101.794693][ T8592] overlayfs: failed to resolve './file1': -2 [ 101.890281][ T1139] hsr_slave_0: left promiscuous mode [ 101.892097][ T1139] hsr_slave_1: left promiscuous mode [ 101.894029][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.897721][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.900989][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.903123][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.925297][ T1139] veth1_macvtap: left promiscuous mode [ 101.927378][ T1139] veth0_macvtap: left promiscuous mode [ 101.929009][ T1139] veth1_vlan: left promiscuous mode [ 101.930532][ T1139] veth0_vlan: left promiscuous mode [ 102.510848][ T1139] team_slave_1 (unregistering): left promiscuous mode [ 102.515401][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 102.582993][ T1139] team_slave_0 (unregistering): left promiscuous mode [ 102.587085][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 103.073178][ T8517] veth0_vlan: entered promiscuous mode [ 103.078128][ T8517] veth1_vlan: entered promiscuous mode [ 103.093176][ T8517] veth0_macvtap: entered promiscuous mode [ 103.097230][ T8517] veth1_macvtap: entered promiscuous mode [ 103.103570][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.103582][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.103588][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.103595][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.109926][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.114322][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.133724][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.133734][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.133743][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.140930][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.169061][ T8517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.171479][ T8517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.173874][ T8517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.176694][ T8517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.192746][ T8650] FAULT_INJECTION: forcing a failure. [ 103.192746][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 103.197037][ T8650] CPU: 3 UID: 0 PID: 8650 Comm: syz.2.950 Not tainted 6.14.0-syzkaller #0 [ 103.197050][ T8650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.197057][ T8650] Call Trace: [ 103.197060][ T8650] [ 103.197064][ T8650] dump_stack_lvl+0x16c/0x1f0 [ 103.197095][ T8650] should_fail_ex+0x50a/0x650 [ 103.197115][ T8650] ? fs_reclaim_acquire+0xae/0x150 [ 103.197131][ T8650] ? ethnl_default_start+0x114/0x420 [ 103.197144][ T8650] should_failslab+0xc2/0x120 [ 103.197157][ T8650] __kmalloc_noprof+0xcb/0x510 [ 103.197171][ T8650] ? __pfx_ethnl_default_start+0x10/0x10 [ 103.197184][ T8650] ethnl_default_start+0x114/0x420 [ 103.197198][ T8650] ? __pfx_ethnl_default_start+0x10/0x10 [ 103.197211][ T8650] genl_start+0x5fa/0x960 [ 103.197222][ T8650] __netlink_dump_start+0x607/0x970 [ 103.197239][ T8650] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 103.197251][ T8650] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 103.197265][ T8650] ? __pfx_genl_get_cmd+0x10/0x10 [ 103.197279][ T8650] ? __pfx_genl_start+0x10/0x10 [ 103.197294][ T8650] ? __pfx_genl_dumpit+0x10/0x10 [ 103.197303][ T8650] ? __pfx_genl_done+0x10/0x10 [ 103.197314][ T8650] ? __radix_tree_lookup+0x21f/0x2c0 [ 103.197330][ T8650] genl_rcv_msg+0x470/0x800 [ 103.197341][ T8650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.197354][ T8650] ? __pfx_ethnl_default_start+0x10/0x10 [ 103.197370][ T8650] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 103.197387][ T8650] ? __pfx_ethnl_default_done+0x10/0x10 [ 103.197405][ T8650] ? __pfx___lock_acquire+0x10/0x10 [ 103.197432][ T8650] netlink_rcv_skb+0x16b/0x440 [ 103.197454][ T8650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.197471][ T8650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.197510][ T8650] ? down_read+0xc9/0x330 [ 103.197535][ T8650] ? __pfx_down_read+0x10/0x10 [ 103.197561][ T8650] ? netlink_deliver_tap+0x1ae/0xd30 [ 103.197587][ T8650] genl_rcv+0x28/0x40 [ 103.197610][ T8650] netlink_unicast+0x53c/0x7f0 [ 103.197637][ T8650] ? __pfx_netlink_unicast+0x10/0x10 [ 103.197669][ T8650] netlink_sendmsg+0x8b8/0xd70 [ 103.197698][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.197733][ T8650] ____sys_sendmsg+0xaaf/0xc90 [ 103.197753][ T8650] ? copy_msghdr_from_user+0x10b/0x160 [ 103.197778][ T8650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.197812][ T8650] ___sys_sendmsg+0x135/0x1e0 [ 103.197839][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.197876][ T8650] ? __pfx_lock_release+0x10/0x10 [ 103.197898][ T8650] ? trace_lock_acquire+0x14e/0x1f0 [ 103.197928][ T8650] ? __fget_files+0x206/0x3a0 [ 103.197952][ T8650] __sys_sendmsg+0x16e/0x220 [ 103.197978][ T8650] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.198020][ T8650] do_syscall_64+0xcd/0x250 [ 103.198046][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.198069][ T8650] RIP: 0033:0x7fe43b78d169 [ 103.198083][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.198100][ T8650] RSP: 002b:00007fe43c55c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.198116][ T8650] RAX: ffffffffffffffda RBX: 00007fe43b9a5fa0 RCX: 00007fe43b78d169 [ 103.198127][ T8650] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 103.198138][ T8650] RBP: 00007fe43c55c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.198148][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.198158][ T8650] R13: 0000000000000000 R14: 00007fe43b9a5fa0 R15: 00007ffd901f0ea8 [ 103.198182][ T8650] [ 103.302213][ C3] vkms_vblank_simulate: vblank timer overrun [ 103.339842][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.342031][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.355057][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.362142][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.369293][ T8659] fuse: Unknown parameter '†o®éL^0¤ø†´ZÝW¿¦Rlžó9jB@.žU:%Jo/oîê™$"…˘ÜÔc™y!#çClÒ [ 103.369293][ T8659] 2#“ Ù›žr£ýly §' [ 103.373476][ T8659] overlayfs: failed to resolve './file1': -2 [ 103.375568][ T8659] overlayfs: failed to resolve './file1': -2 [ 103.429064][ T8666] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 103.435325][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.441739][ T8666] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.522799][ T1139] IPVS: stop unused estimator thread 0... [ 104.046295][ T8718] overlay: filesystem on ./bus not supported as upperdir [ 104.093397][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 104.093409][ T40] audit: type=1400 audit(1742836997.444:499): avc: denied { write } for pid=8719 comm="syz.0.961" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.135002][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'. [ 104.201613][ T8728] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 104.259441][ T8734] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 104.259441][ T8734] The task syz.1.964 (8734) triggered the difference, watch for misbehavior. [ 104.388554][ T8741] overlay: filesystem on ./bus not supported as upperdir [ 104.485681][ T8747] 9pnet_virtio: no channels available for device syz [ 104.488652][ T8747] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 104.518722][ T40] audit: type=1400 audit(1742839557.873:500): avc: denied { create } for pid=8754 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.167209][ T8776] block nbd1: shutting down sockets [ 105.241637][ T8784] tipc: Enabling of bearer rejected, media not registered [ 105.252055][ T8786] FAULT_INJECTION: forcing a failure. [ 105.252055][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 105.255644][ T8786] CPU: 2 UID: 0 PID: 8786 Comm: syz.1.986 Not tainted 6.14.0-syzkaller #0 [ 105.255658][ T8786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.255664][ T8786] Call Trace: [ 105.255668][ T8786] [ 105.255672][ T8786] dump_stack_lvl+0x16c/0x1f0 [ 105.255691][ T8786] should_fail_ex+0x50a/0x650 [ 105.255707][ T8786] ? fs_reclaim_acquire+0xae/0x150 [ 105.255736][ T8786] should_failslab+0xc2/0x120 [ 105.255748][ T8786] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 105.255760][ T8786] ? __alloc_skb+0x2b1/0x380 [ 105.255778][ T8786] __alloc_skb+0x2b1/0x380 [ 105.255792][ T8786] ? __pfx___alloc_skb+0x10/0x10 [ 105.255806][ T8786] ? find_held_lock+0x2d/0x110 [ 105.255820][ T8786] ? tipc_node_find+0x2dd/0x500 [ 105.255832][ T8786] tipc_buf_acquire+0x26/0xe0 [ 105.255848][ T8786] tipc_msg_build+0x10c/0x1120 [ 105.255861][ T8786] ? __pfx_tipc_msg_build+0x10/0x10 [ 105.255878][ T8786] tipc_send_group_msg+0x2a7/0x4e0 [ 105.255889][ T8786] ? ____sys_sendmsg+0xaaf/0xc90 [ 105.255903][ T8786] ? __pfx_tipc_send_group_msg+0x10/0x10 [ 105.255923][ T8786] tipc_send_group_unicast+0x404/0x520 [ 105.255940][ T8786] ? __pfx_tipc_send_group_unicast+0x10/0x10 [ 105.255954][ T8786] ? kasan_quarantine_put+0x10a/0x240 [ 105.255963][ T8786] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.255979][ T8786] ? __pfx_woken_wake_function+0x10/0x10 [ 105.255992][ T8786] ? tipc_dest_pop+0x223/0x2d0 [ 105.256008][ T8786] __tipc_sendmsg+0x1260/0x1990 [ 105.256028][ T8786] ? __pfx___tipc_sendmsg+0x10/0x10 [ 105.256046][ T8786] ? __pfx_lock_release+0x10/0x10 [ 105.256062][ T8786] ? hlock_class+0x4e/0x130 [ 105.256072][ T8786] ? __lock_acquire+0x15a9/0x3c40 [ 105.256092][ T8786] ? hlock_class+0x4e/0x130 [ 105.256103][ T8786] ? __pfx___lock_acquire+0x10/0x10 [ 105.256118][ T8786] __tipc_sendstream+0xe30/0x1190 [ 105.256139][ T8786] ? __pfx___tipc_sendstream+0x10/0x10 [ 105.256154][ T8786] ? tipc_send_packet+0x5e/0xa0 [ 105.256170][ T8786] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.256181][ T8786] ? mark_held_locks+0x9f/0xe0 [ 105.256195][ T8786] ? __local_bh_enable_ip+0xa4/0x120 [ 105.256213][ T8786] tipc_send_packet+0x6c/0xa0 [ 105.256229][ T8786] ____sys_sendmsg+0xaaf/0xc90 [ 105.256241][ T8786] ? copy_msghdr_from_user+0x10b/0x160 [ 105.256257][ T8786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.256275][ T8786] ___sys_sendmsg+0x135/0x1e0 [ 105.256292][ T8786] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.256313][ T8786] ? __pfx_lock_release+0x10/0x10 [ 105.256327][ T8786] ? trace_lock_acquire+0x14e/0x1f0 [ 105.256343][ T8786] ? __fget_files+0x206/0x3a0 [ 105.256357][ T8786] __sys_sendmsg+0x16e/0x220 [ 105.256388][ T8786] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.256414][ T8786] do_syscall_64+0xcd/0x250 [ 105.256430][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.256444][ T8786] RIP: 0033:0x7f3de4b8d169 [ 105.256453][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.256463][ T8786] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.256478][ T8786] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 105.256484][ T8786] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 105.256491][ T8786] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 105.256496][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.256502][ T8786] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 105.256515][ T8786] [ 105.466279][ T40] audit: type=1400 audit(1742839558.813:501): avc: denied { map } for pid=8799 comm="syz.0.992" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.473713][ T40] audit: type=1400 audit(1742839558.813:502): avc: denied { execute } for pid=8799 comm="syz.0.992" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.549917][ T8804] FAULT_INJECTION: forcing a failure. [ 105.549917][ T8804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.549938][ T8804] CPU: 2 UID: 0 PID: 8804 Comm: syz.1.993 Not tainted 6.14.0-syzkaller #0 [ 105.549950][ T8804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.549956][ T8804] Call Trace: [ 105.549960][ T8804] [ 105.549963][ T8804] dump_stack_lvl+0x16c/0x1f0 [ 105.549983][ T8804] should_fail_ex+0x50a/0x650 [ 105.550000][ T8804] ? __pfx___might_resched+0x10/0x10 [ 105.550019][ T8804] should_fail_alloc_page+0xe7/0x130 [ 105.550033][ T8804] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 105.550052][ T8804] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 105.550065][ T8804] ? __pfx_mark_lock+0x10/0x10 [ 105.550081][ T8804] ? __pfx_mark_lock+0x10/0x10 [ 105.550098][ T8804] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.550116][ T8804] ? hlock_class+0x4e/0x130 [ 105.550126][ T8804] ? __lock_acquire+0x15a9/0x3c40 [ 105.550147][ T8804] ? fbcon_set_font+0x434/0xb60 [ 105.550159][ T8804] __alloc_pages_noprof+0xb/0x1b0 [ 105.550170][ T8804] ___kmalloc_large_node+0x84/0x1b0 [ 105.550187][ T8804] __kmalloc_large_node_noprof+0x1c/0x70 [ 105.550203][ T8804] __kmalloc_noprof.cold+0xc/0x61 [ 105.550217][ T8804] fbcon_set_font+0x434/0xb60 [ 105.550230][ T8804] ? con_font_op+0x6aa/0xf50 [ 105.550247][ T8804] ? __pfx_fbcon_set_font+0x10/0x10 [ 105.550259][ T8804] con_font_op+0x7fd/0xf50 [ 105.550275][ T8804] ? __pfx_con_font_op+0x10/0x10 [ 105.550290][ T8804] ? lock_acquire+0x2f/0xb0 [ 105.550304][ T8804] ? __might_fault+0xe3/0x190 [ 105.550317][ T8804] ? __might_fault+0xe3/0x190 [ 105.550333][ T8804] vt_ioctl+0x4ca/0x2f80 [ 105.550344][ T8804] ? __pfx_vt_ioctl+0x10/0x10 [ 105.550358][ T8804] ? tomoyo_path_number_perm+0x190/0x590 [ 105.550374][ T8804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.550392][ T8804] ? do_vfs_ioctl+0x513/0x1990 [ 105.550407][ T8804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.550424][ T8804] ? tty_jobctrl_ioctl+0x152/0xe00 [ 105.550434][ T8804] ? __pfx_vt_ioctl+0x10/0x10 [ 105.550444][ T8804] tty_ioctl+0x651/0x15d0 [ 105.550458][ T8804] ? __pfx_tty_ioctl+0x10/0x10 [ 105.550479][ T8804] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.550500][ T8804] ? __pfx_lock_release+0x10/0x10 [ 105.550521][ T8804] ? selinux_file_ioctl+0x180/0x270 [ 105.550537][ T8804] ? selinux_file_ioctl+0xb4/0x270 [ 105.550554][ T8804] ? __pfx_tty_ioctl+0x10/0x10 [ 105.550568][ T8804] __x64_sys_ioctl+0x190/0x200 [ 105.550583][ T8804] do_syscall_64+0xcd/0x250 [ 105.550600][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.550614][ T8804] RIP: 0033:0x7f3de4b8d169 [ 105.550623][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.550633][ T8804] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.550643][ T8804] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 105.550649][ T8804] RDX: 0000200000000200 RSI: 0000000000004b72 RDI: 0000000000000003 [ 105.550655][ T8804] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 105.550661][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.550667][ T8804] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 105.550680][ T8804] [ 105.608276][ T8806] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.994'. [ 105.658352][ T8806] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 105.715810][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 105.855830][ T59] usb 7-1: device descriptor read/64, error -71 [ 106.095931][ T59] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.239851][ T59] usb 7-1: device descriptor read/64, error -71 [ 106.356827][ T59] usb usb7-port1: attempt power cycle [ 106.430263][ T40] audit: type=1400 audit(1742839559.783:503): avc: denied { read } for pid=8848 comm="syz.1.1013" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.442926][ T40] audit: type=1400 audit(1742839559.783:504): avc: denied { open } for pid=8848 comm="syz.1.1013" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.461679][ T8847] FAULT_INJECTION: forcing a failure. [ 106.461679][ T8847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.465835][ T8847] CPU: 0 UID: 0 PID: 8847 Comm: syz.0.1012 Not tainted 6.14.0-syzkaller #0 [ 106.465848][ T8847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.465855][ T8847] Call Trace: [ 106.465858][ T8847] [ 106.465862][ T8847] dump_stack_lvl+0x16c/0x1f0 [ 106.465881][ T8847] should_fail_ex+0x50a/0x650 [ 106.465898][ T8847] ? __pfx___might_resched+0x10/0x10 [ 106.465916][ T8847] should_fail_alloc_page+0xe7/0x130 [ 106.465930][ T8847] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 106.465949][ T8847] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 106.465966][ T8847] ? hlock_class+0x4e/0x130 [ 106.465977][ T8847] ? mark_lock+0xb5/0xc60 [ 106.465991][ T8847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.466004][ T8847] ? __pfx_mark_lock+0x10/0x10 [ 106.466016][ T8847] ? __pfx_lock_release+0x10/0x10 [ 106.466030][ T8847] ? trace_lock_acquire+0x14e/0x1f0 [ 106.466044][ T8847] ? is_bpf_text_address+0x30/0x1a0 [ 106.466060][ T8847] ? bpf_ksym_find+0x127/0x1c0 [ 106.466071][ T8847] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.466084][ T8847] ? is_bpf_text_address+0x94/0x1a0 [ 106.466099][ T8847] ? kernel_text_address+0x8d/0x100 [ 106.466114][ T8847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.466132][ T8847] ? policy_nodemask+0xea/0x4e0 [ 106.466145][ T8847] alloc_pages_mpol+0x1fc/0x540 [ 106.466157][ T8847] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.466171][ T8847] ? __pfx___lock_acquire+0x10/0x10 [ 106.466191][ T8847] alloc_pages_noprof+0x131/0x390 [ 106.466202][ T8847] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 106.466220][ T8847] get_free_pages_noprof+0xc/0x40 [ 106.466232][ T8847] kasan_populate_vmalloc_pte+0x2d/0x160 [ 106.466249][ T8847] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 106.466265][ T8847] __apply_to_page_range+0x5fd/0xd30 [ 106.466283][ T8847] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 106.466302][ T8847] ? __pfx___apply_to_page_range+0x10/0x10 [ 106.466319][ T8847] ? insert_vmap_area+0x2ef/0x4d0 [ 106.466335][ T8847] alloc_vmap_area+0x93e/0x2a60 [ 106.466355][ T8847] ? __pfx_alloc_vmap_area+0x10/0x10 [ 106.466373][ T8847] __get_vm_area_node+0x19e/0x2f0 [ 106.466391][ T8847] __vmalloc_node_range_noprof+0x26a/0x1530 [ 106.466408][ T8847] ? vhost_task_create+0x1d3/0x2e0 [ 106.466423][ T8847] ? mod_objcg_state+0x4c4/0x8d0 [ 106.466440][ T8847] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.466456][ T8847] ? vhost_task_create+0x1d3/0x2e0 [ 106.466472][ T8847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.466489][ T8847] ? rcu_is_watching+0x12/0xc0 [ 106.466500][ T8847] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 106.466515][ T8847] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 106.466525][ T8847] ? mark_held_locks+0x9f/0xe0 [ 106.466538][ T8847] ? copy_process+0x4be/0x8c50 [ 106.466549][ T8847] ? vhost_task_create+0x1d3/0x2e0 [ 106.466562][ T8847] copy_process+0x2ef2/0x8c50 [ 106.466571][ T8847] ? vhost_task_create+0x1d3/0x2e0 [ 106.466583][ T8847] ? kasan_save_stack+0x33/0x60 [ 106.466592][ T8847] ? kasan_save_track+0x14/0x30 [ 106.466601][ T8847] ? __kasan_kmalloc+0xaa/0xb0 [ 106.466610][ T8847] ? vhost_task_create+0xe6/0x2e0 [ 106.466622][ T8847] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 106.466635][ T8847] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 106.466647][ T8847] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 106.466658][ T8847] ? __x64_sys_ioctl+0x190/0x200 [ 106.466672][ T8847] ? do_syscall_64+0xcd/0x250 [ 106.466686][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.466708][ T8847] ? __pfx_copy_process+0x10/0x10 [ 106.466726][ T8847] ? lockdep_init_map_type+0x16d/0x7d0 [ 106.466740][ T8847] ? __raw_spin_lock_init+0x3a/0x110 [ 106.466751][ T8847] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 106.466767][ T8847] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 106.466778][ T8847] vhost_task_create+0x1d3/0x2e0 [ 106.466791][ T8847] ? __pfx_vhost_task_create+0x10/0x10 [ 106.466804][ T8847] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 106.466820][ T8847] ? __pfx_vhost_task_fn+0x10/0x10 [ 106.466835][ T8847] ? lock_acquire.part.0+0x11b/0x380 [ 106.466849][ T8847] ? find_held_lock+0x2d/0x110 [ 106.466863][ T8847] kvm_mmu_post_init_vm+0x1b7/0x370 [ 106.466878][ T8847] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 106.466889][ T8847] ? lock_acquire+0x2f/0xb0 [ 106.466903][ T8847] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 106.466917][ T8847] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 106.466931][ T8847] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.466947][ T8847] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 106.466966][ T8847] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.466985][ T8847] ? __pfx_lock_release+0x10/0x10 [ 106.467005][ T8847] ? selinux_file_ioctl+0x180/0x270 [ 106.467021][ T8847] ? selinux_file_ioctl+0xb4/0x270 [ 106.467038][ T8847] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.467050][ T8847] __x64_sys_ioctl+0x190/0x200 [ 106.467066][ T8847] do_syscall_64+0xcd/0x250 [ 106.467081][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.467095][ T8847] RIP: 0033:0x7f0628d8d169 [ 106.467104][ T8847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.467114][ T8847] RSP: 002b:00007f0629b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.467124][ T8847] RAX: ffffffffffffffda RBX: 00007f0628fa5fa0 RCX: 00007f0628d8d169 [ 106.467131][ T8847] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 106.467137][ T8847] RBP: 00007f0629b78090 R08: 0000000000000000 R09: 0000000000000000 [ 106.467142][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.467148][ T8847] R13: 0000000000000000 R14: 00007f0628fa5fa0 R15: 00007ffcc9fa7ee8 [ 106.467161][ T8847] [ 106.470446][ T8854] FAULT_INJECTION: forcing a failure. [ 106.470446][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 106.627682][ T8854] CPU: 3 UID: 0 PID: 8854 Comm: syz.1.1014 Not tainted 6.14.0-syzkaller #0 [ 106.627699][ T8854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.627705][ T8854] Call Trace: [ 106.627709][ T8854] [ 106.627714][ T8854] dump_stack_lvl+0x16c/0x1f0 [ 106.627744][ T8854] should_fail_ex+0x50a/0x650 [ 106.627761][ T8854] ? fs_reclaim_acquire+0xae/0x150 [ 106.627778][ T8854] ? bio_kmalloc+0x41/0x70 [ 106.627791][ T8854] should_failslab+0xc2/0x120 [ 106.627805][ T8854] __kmalloc_noprof+0xcb/0x510 [ 106.627815][ T8854] ? trace_kmalloc+0x2d/0xd0 [ 106.627828][ T8854] ? __kmalloc_noprof+0x23b/0x510 [ 106.627838][ T8854] ? __pfx_autoremove_wake_function+0x10/0x10 [ 106.627855][ T8854] bio_kmalloc+0x41/0x70 [ 106.627868][ T8854] blk_rq_map_user_iov+0x431/0x1310 [ 106.627884][ T8854] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 106.627896][ T8854] ? mark_held_locks+0x9f/0xe0 [ 106.627912][ T8854] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.627925][ T8854] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.627939][ T8854] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.627952][ T8854] ? __debug_object_init+0x2dd/0x3e0 [ 106.627964][ T8854] ? import_ubuf+0x1b6/0x220 [ 106.627975][ T8854] blk_rq_map_user+0x11e/0x180 [ 106.627986][ T8854] ? __pfx_blk_rq_map_user+0x10/0x10 [ 106.628003][ T8854] sr_read_cdda_bpc+0x130/0x680 [ 106.628017][ T8854] ? __pfx_sr_read_cdda_bpc+0x10/0x10 [ 106.628028][ T8854] ? __might_fault+0xe3/0x190 [ 106.628044][ T8854] mmc_ioctl_cdrom_read_audio+0x45c/0x830 [ 106.628059][ T8854] ? __pfx___lock_acquire+0x10/0x10 [ 106.628073][ T8854] ? __pfx_mmc_ioctl_cdrom_read_audio+0x10/0x10 [ 106.628092][ T8854] cdrom_ioctl+0x28b7/0x3190 [ 106.628102][ T8854] ? mark_lock+0xb5/0xc60 [ 106.628116][ T8854] ? __pfx_cdrom_ioctl+0x10/0x10 [ 106.628127][ T8854] ? __pfx_mark_lock+0x10/0x10 [ 106.628140][ T8854] ? trace_rpm_return_int+0x1a6/0x230 [ 106.628154][ T8854] ? rpm_resume+0x81c/0x1330 [ 106.628164][ T8854] ? lock_acquire.part.0+0x11b/0x380 [ 106.628179][ T8854] ? find_held_lock+0x2d/0x110 [ 106.628192][ T8854] ? __pm_runtime_resume+0xc3/0x170 [ 106.628204][ T8854] ? __pfx_lock_release+0x10/0x10 [ 106.628224][ T8854] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.628237][ T8854] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.628250][ T8854] ? __pm_runtime_resume+0xc3/0x170 [ 106.628263][ T8854] sr_block_ioctl+0x1b0/0x250 [ 106.628275][ T8854] ? __pfx_sr_block_ioctl+0x10/0x10 [ 106.628287][ T8854] blkdev_ioctl+0x276/0x6d0 [ 106.628298][ T8854] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.628307][ T8854] ? selinux_file_ioctl+0x180/0x270 [ 106.628324][ T8854] ? selinux_file_ioctl+0xb4/0x270 [ 106.628343][ T8854] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.628374][ T8854] __x64_sys_ioctl+0x190/0x200 [ 106.628400][ T8854] do_syscall_64+0xcd/0x250 [ 106.628424][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.628445][ T8854] RIP: 0033:0x7f3de4b8d169 [ 106.628459][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.628479][ T8854] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.628491][ T8854] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 106.628498][ T8854] RDX: 0000200000000040 RSI: 000000000000530e RDI: 0000000000000003 [ 106.628504][ T8854] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 106.628509][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.628515][ T8854] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 106.628529][ T8854] [ 106.736813][ T8820] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 106.745821][ T59] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 106.776305][ T59] usb 7-1: device descriptor read/8, error -71 [ 106.820509][ T40] audit: type=1400 audit(1742839560.173:505): avc: denied { append } for pid=8863 comm="syz.4.1019" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.829681][ T40] audit: type=1400 audit(1742839560.183:506): avc: denied { ioctl } for pid=8863 comm="syz.4.1019" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.843476][ T8866] FAULT_INJECTION: forcing a failure. [ 106.843476][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 106.848742][ T8866] CPU: 1 UID: 0 PID: 8866 Comm: syz.0.1018 Not tainted 6.14.0-syzkaller #0 [ 106.848756][ T8866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.848763][ T8866] Call Trace: [ 106.848767][ T8866] [ 106.848771][ T8866] dump_stack_lvl+0x16c/0x1f0 [ 106.848801][ T8866] should_fail_ex+0x50a/0x650 [ 106.848821][ T8866] ? fs_reclaim_acquire+0xae/0x150 [ 106.848838][ T8866] ? tomoyo_realpath_from_path+0xb9/0x720 [ 106.848853][ T8866] should_failslab+0xc2/0x120 [ 106.848866][ T8866] __kmalloc_noprof+0xcb/0x510 [ 106.848876][ T8866] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 106.848894][ T8866] tomoyo_realpath_from_path+0xb9/0x720 [ 106.848909][ T8866] ? tomoyo_path_number_perm+0x235/0x590 [ 106.848923][ T8866] ? tomoyo_path_number_perm+0x235/0x590 [ 106.848938][ T8866] tomoyo_path_number_perm+0x248/0x590 [ 106.848951][ T8866] ? tomoyo_path_number_perm+0x235/0x590 [ 106.848965][ T8866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.848991][ T8866] ? __pfx_lock_release+0x10/0x10 [ 106.849005][ T8866] ? trace_lock_acquire+0x14e/0x1f0 [ 106.849019][ T8866] ? lock_acquire+0x2f/0xb0 [ 106.849032][ T8866] ? __fget_files+0x40/0x3a0 [ 106.849045][ T8866] ? __fget_files+0x206/0x3a0 [ 106.849056][ T8866] security_file_ioctl+0x9b/0x240 [ 106.849073][ T8866] __x64_sys_ioctl+0xb7/0x200 [ 106.849089][ T8866] do_syscall_64+0xcd/0x250 [ 106.849105][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.849120][ T8866] RIP: 0033:0x7f0628d8d169 [ 106.849128][ T8866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.849139][ T8866] RSP: 002b:00007f0629b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.849148][ T8866] RAX: ffffffffffffffda RBX: 00007f0628fa5fa0 RCX: 00007f0628d8d169 [ 106.849155][ T8866] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 106.849161][ T8866] RBP: 00007f0629b78090 R08: 0000000000000000 R09: 0000000000000000 [ 106.849170][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.849176][ T8866] R13: 0000000000000000 R14: 00007f0628fa5fa0 R15: 00007ffcc9fa7ee8 [ 106.849189][ T8866] [ 106.849193][ T8866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.025843][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 107.047015][ T59] usb 7-1: device descriptor read/8, error -71 [ 107.154803][ T8886] i2c i2c-1: Invalid block write size 34 [ 107.158507][ T59] usb usb7-port1: unable to enumerate USB device [ 107.170102][ T40] audit: type=1400 audit(1742839560.523:507): avc: denied { getopt } for pid=8887 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.175460][ T40] audit: type=1400 audit(1742839560.523:508): avc: denied { ioctl } for pid=8887 comm="syz.4.1027" path="socket:[31192]" dev="sockfs" ino=31192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.271075][ T8906] overlayfs: failed to resolve './file0': -2 [ 107.271490][ T8899] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 107.275048][ T8899] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1032'. [ 107.275486][ T8906] overlayfs: failed to resolve './file0': -2 [ 107.329383][ T8912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8912 comm=syz.4.1036 [ 107.592666][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1043'. [ 107.657840][ T8932] tipc: Enabling of bearer rejected, already enabled [ 107.825863][ T59] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 107.842294][ T8943] tipc: Enabling of bearer rejected, already enabled [ 107.945925][ T6756] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 107.965813][ T59] usb 7-1: device descriptor read/64, error -71 [ 108.085815][ T6756] usb 9-1: device descriptor read/64, error -71 [ 108.218560][ T59] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 108.325947][ T6756] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 108.345962][ T59] usb 7-1: device descriptor read/64, error -71 [ 108.456079][ T59] usb usb7-port1: attempt power cycle [ 108.458454][ T8972] FAULT_INJECTION: forcing a failure. [ 108.458454][ T8972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.462580][ T8972] CPU: 3 UID: 0 PID: 8972 Comm: syz.2.1061 Not tainted 6.14.0-syzkaller #0 [ 108.462597][ T8972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.462607][ T8972] Call Trace: [ 108.462620][ T8972] [ 108.462626][ T8972] dump_stack_lvl+0x16c/0x1f0 [ 108.462666][ T8972] should_fail_ex+0x50a/0x650 [ 108.462698][ T8972] _copy_to_user+0x32/0xd0 [ 108.462715][ T8972] simple_read_from_buffer+0xd0/0x160 [ 108.462739][ T8972] proc_fail_nth_read+0x198/0x270 [ 108.462760][ T8972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.462797][ T8972] ? rw_verify_area+0xcf/0x680 [ 108.462817][ T8972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.462838][ T8972] vfs_read+0x1df/0xbf0 [ 108.462859][ T8972] ? __fget_files+0x1fc/0x3a0 [ 108.462873][ T8972] ? __pfx___mutex_lock+0x10/0x10 [ 108.462893][ T8972] ? __pfx_vfs_read+0x10/0x10 [ 108.462921][ T8972] ? __fget_files+0x206/0x3a0 [ 108.462941][ T8972] ksys_read+0x12b/0x250 [ 108.462962][ T8972] ? __pfx_ksys_read+0x10/0x10 [ 108.462990][ T8972] do_syscall_64+0xcd/0x250 [ 108.463012][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.463032][ T8972] RIP: 0033:0x7fe43b78bb7c [ 108.463044][ T8972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.463058][ T8972] RSP: 002b:00007fe43c55c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.463073][ T8972] RAX: ffffffffffffffda RBX: 00007fe43b9a5fa0 RCX: 00007fe43b78bb7c [ 108.463082][ T8972] RDX: 000000000000000f RSI: 00007fe43c55c0a0 RDI: 0000000000000004 [ 108.463091][ T8972] RBP: 00007fe43c55c090 R08: 0000000000000000 R09: 000000000000001c [ 108.463099][ T8972] R10: 0000000004008805 R11: 0000000000000246 R12: 0000000000000001 [ 108.463108][ T8972] R13: 0000000000000000 R14: 00007fe43b9a5fa0 R15: 00007ffd901f0ea8 [ 108.463129][ T8972] [ 108.465959][ T6756] usb 9-1: device descriptor read/64, error -71 [ 108.626143][ T6756] usb usb9-port1: attempt power cycle [ 108.668875][ T8984] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.788140][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 108.931873][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 108.977675][ T6756] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 108.996233][ T6756] usb 9-1: device descriptor read/8, error -71 [ 109.235939][ T6756] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 109.256220][ T6756] usb 9-1: device descriptor read/8, error -71 [ 109.376176][ T6756] usb usb9-port1: unable to enumerate USB device [ 109.479614][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 109.591383][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 109.591397][ T40] audit: type=1400 audit(1742839562.943:517): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.625427][ T9007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.635121][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 109.691561][ T40] audit: type=1400 audit(1742839563.043:518): avc: denied { write } for pid=9008 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.907176][ T9022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9022 comm=syz.1.1075 [ 109.911503][ T40] audit: type=1400 audit(1742839563.263:519): avc: denied { read } for pid=9020 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.035888][ T9037] veth0_vlan: invalid flags given to default FDB implementation [ 110.039704][ T9036] tipc: Can't bind to reserved service type 1 [ 110.108299][ T9039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 110.384682][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 110.622769][ T9067] veth0_vlan: invalid flags given to default FDB implementation [ 110.794259][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 110.811302][ T9078] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 110.836921][ T9078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.841502][ T9078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9078 comm=syz.0.1094 [ 110.992794][ T40] audit: type=1400 audit(1742839564.343:520): avc: denied { getopt } for pid=9093 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.993300][ T9096] overlayfs: failed to resolve './file0': -2 [ 111.002671][ T9096] overlayfs: failed to resolve './file0': -2 [ 111.111959][ T40] audit: type=1400 audit(1742839564.463:521): avc: denied { write } for pid=9108 comm="syz.1.1107" name="vlan0" dev="proc" ino=4026533706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.116263][ T9111] @: renamed from vlan0 (while UP) [ 111.122631][ T40] audit: type=1400 audit(1742839564.483:522): avc: denied { map } for pid=9108 comm="syz.1.1107" path="/proc/871/net/vlan/vlan0" dev="proc" ino=4026533706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.136121][ T40] audit: type=1400 audit(1742839564.483:523): avc: denied { execute } for pid=9108 comm="syz.1.1107" path="/proc/871/net/vlan/vlan0" dev="proc" ino=4026533706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.172413][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 111.172435][ T9114] program syz.1.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.282854][ T40] audit: type=1400 audit(1742839564.633:524): avc: denied { ioctl } for pid=9118 comm="syz.1.1111" path="socket:[33858]" dev="sockfs" ino=33858 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.356566][ T9123] overlayfs: failed to resolve './file0': -2 [ 111.359404][ T9123] overlayfs: failed to resolve './file0': -2 [ 111.364670][ T9125] FAULT_INJECTION: forcing a failure. [ 111.364670][ T9125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.369159][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.1.1114 Not tainted 6.14.0-syzkaller #0 [ 111.369177][ T9125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.369187][ T9125] Call Trace: [ 111.369193][ T9125] [ 111.369199][ T9125] dump_stack_lvl+0x16c/0x1f0 [ 111.369225][ T9125] should_fail_ex+0x50a/0x650 [ 111.369254][ T9125] _copy_to_iter+0x465/0x1560 [ 111.369276][ T9125] ? __pfx__copy_to_iter+0x10/0x10 [ 111.369292][ T9125] ? __virt_addr_valid+0x1a4/0x590 [ 111.369313][ T9125] ? __virt_addr_valid+0x5e/0x590 [ 111.369330][ T9125] ? __phys_addr_symbol+0x30/0x80 [ 111.369350][ T9125] ? __check_object_size+0x488/0x710 [ 111.369374][ T9125] seq_read_iter+0xd00/0x12b0 [ 111.369407][ T9125] seq_read+0x39f/0x4e0 [ 111.369429][ T9125] ? __pfx_seq_read+0x10/0x10 [ 111.369461][ T9125] ? avc_policy_seqno+0x9/0x20 [ 111.369482][ T9125] ? __pfx_seq_read+0x10/0x10 [ 111.369504][ T9125] proc_reg_read+0x23d/0x330 [ 111.369521][ T9125] ? __pfx_proc_reg_read+0x10/0x10 [ 111.369538][ T9125] vfs_readv+0x6c2/0x8a0 [ 111.369570][ T9125] ? __pfx___lock_acquire+0x10/0x10 [ 111.369592][ T9125] ? find_held_lock+0x2d/0x110 [ 111.369614][ T9125] ? __pfx_vfs_readv+0x10/0x10 [ 111.369641][ T9125] ? __fget_files+0x1fc/0x3a0 [ 111.369656][ T9125] ? __pfx_lock_release+0x10/0x10 [ 111.369687][ T9125] ? __fget_files+0x206/0x3a0 [ 111.369708][ T9125] ? do_preadv+0x1b1/0x270 [ 111.369729][ T9125] do_preadv+0x1b1/0x270 [ 111.369752][ T9125] ? __pfx_do_preadv+0x10/0x10 [ 111.369780][ T9125] do_syscall_64+0xcd/0x250 [ 111.369803][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.369825][ T9125] RIP: 0033:0x7f3de4b8d169 [ 111.369838][ T9125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.369852][ T9125] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 111.369866][ T9125] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 111.369876][ T9125] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 111.369885][ T9125] RBP: 00007f3de59f4090 R08: 0000000000007fff R09: 0000000000000000 [ 111.369895][ T9125] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 111.369904][ T9125] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 111.369925][ T9125] [ 111.459058][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.500222][ T9127] mmap: syz.4.1115 (9127) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.532125][ T9135] fuse: Bad value for 'user_id' [ 111.534543][ T9135] fuse: Bad value for 'user_id' [ 111.596727][ T9144] tmpfs: Bad value for 'mpol' [ 111.609016][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 111.657140][ T40] audit: type=1400 audit(1742839565.013:525): avc: denied { setopt } for pid=9151 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 111.657492][ T40] audit: type=1400 audit(1742839565.013:526): avc: denied { accept } for pid=9151 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 111.703380][ T9150] FAULT_INJECTION: forcing a failure. [ 111.703380][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.707706][ T9150] CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1126 Not tainted 6.14.0-syzkaller #0 [ 111.707718][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.707724][ T9150] Call Trace: [ 111.707728][ T9150] [ 111.707732][ T9150] dump_stack_lvl+0x16c/0x1f0 [ 111.707751][ T9150] should_fail_ex+0x50a/0x650 [ 111.707770][ T9150] _copy_from_user+0x2e/0xd0 [ 111.707783][ T9150] kstrtouint_from_user+0xd7/0x1c0 [ 111.707797][ T9150] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 111.707816][ T9150] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.707833][ T9150] proc_fail_nth_write+0x84/0x250 [ 111.707849][ T9150] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.707863][ T9150] ? ksys_write+0x12b/0x250 [ 111.707875][ T9150] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.707889][ T9150] vfs_write+0x24c/0x1150 [ 111.707906][ T9150] ? __fget_files+0x1fc/0x3a0 [ 111.707916][ T9150] ? __pfx___mutex_lock+0x10/0x10 [ 111.707931][ T9150] ? __pfx_vfs_write+0x10/0x10 [ 111.707950][ T9150] ? __fget_files+0x206/0x3a0 [ 111.707964][ T9150] ksys_write+0x12b/0x250 [ 111.707973][ T9150] ? __pfx_ksys_write+0x10/0x10 [ 111.707986][ T9150] do_syscall_64+0xcd/0x250 [ 111.708001][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.708016][ T9150] RIP: 0033:0x7f3de4b8bc1f [ 111.708024][ T9150] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.708034][ T9150] RSP: 002b:00007f3de59f4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.708044][ T9150] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3de4b8bc1f [ 111.708050][ T9150] RDX: 0000000000000001 RSI: 00007f3de59f40a0 RDI: 0000000000000004 [ 111.708056][ T9150] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 111.708061][ T9150] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 111.708067][ T9150] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 111.708080][ T9150] [ 111.770161][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.792940][ T9163] fuse: Bad value for 'fd' [ 111.829342][ T9167] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 111.831515][ T9167] netlink: 'syz.1.1133': attribute type 4 has an invalid length. [ 111.833666][ T9167] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1133'. [ 111.839243][ T9168] Unknown options in mask 5 [ 111.840775][ T9167] Unknown options in mask 5 [ 111.918294][ T9171] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 111.921408][ T9171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1134'. [ 112.025229][ T9176] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 112.037743][ T9176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.052844][ T9176] bond3: (slave ip6erspan0): making interface the new active one [ 112.057077][ T9176] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 112.140797][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.144018][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.146673][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.150630][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.152992][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.155300][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.226019][ T9184] chnl_net:caif_netlink_parms(): no params data found [ 112.270561][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.273116][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.276167][ T9184] bridge_slave_0: entered allmulticast mode [ 112.279125][ T9184] bridge_slave_0: entered promiscuous mode [ 112.282082][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.283989][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.286343][ T9184] bridge_slave_1: entered allmulticast mode [ 112.288682][ T9184] bridge_slave_1: entered promiscuous mode [ 112.308097][ T9184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.313130][ T9184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.342482][ T9184] team0: Port device team_slave_0 added [ 112.346575][ T9184] team0: Port device team_slave_1 added [ 112.367138][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.369160][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.376842][ T9184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.380734][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.382725][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.390772][ T9184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.414539][ T9184] hsr_slave_0: entered promiscuous mode [ 112.418699][ T9184] hsr_slave_1: entered promiscuous mode [ 112.487870][ T9184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.559396][ T9184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.621850][ T9184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.639079][ T9199] fuse: Bad value for 'fd' [ 112.672954][ T9201] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 112.679480][ T9184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.710803][ T9203] overlayfs: failed to resolve './file1': -2 [ 112.713358][ T9203] overlayfs: failed to resolve './file1': -2 [ 112.787885][ T9184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.791117][ T9184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.794263][ T9184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.798050][ T9184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.818196][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.820193][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.822348][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.824655][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.846829][ T9184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.853282][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.856786][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.868236][ T9184] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.873983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.876117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.880948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.883448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.936565][ T9214] sp0: Synchronizing with TNC [ 112.940856][ T5941] Bluetooth: hci3: Malformed LE Event: 0x1b [ 112.941683][ T9212] [U] è` [ 112.965216][ T9184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.020580][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'. [ 113.023700][ T9220] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 113.087140][ T9233] fuse: Bad value for 'fd' [ 113.091273][ T9184] veth0_vlan: entered promiscuous mode [ 113.095413][ T9184] veth1_vlan: entered promiscuous mode [ 113.108827][ T9184] veth0_macvtap: entered promiscuous mode [ 113.112476][ T9184] veth1_macvtap: entered promiscuous mode [ 113.123845][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.127424][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.130133][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.132973][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.135692][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.139244][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.143399][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.150797][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.154706][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.160552][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.164072][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.167505][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.171273][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.175499][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.182291][ T9184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.184966][ T9184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.187868][ T9184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.190395][ T9184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.226581][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.228785][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.243456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.245611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.245935][ T9246] netlink: 'syz.2.1157': attribute type 9 has an invalid length. [ 113.257405][ T9246] openvswitch: netlink: Message has 6 unknown bytes. [ 113.338814][ T9255] @: renamed from vlan0 (while UP) [ 113.389192][ T9258] FAULT_INJECTION: forcing a failure. [ 113.389192][ T9258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.393677][ T9258] CPU: 2 UID: 0 PID: 9258 Comm: syz.4.1160 Not tainted 6.14.0-syzkaller #0 [ 113.393697][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.393706][ T9258] Call Trace: [ 113.393711][ T9258] [ 113.393718][ T9258] dump_stack_lvl+0x16c/0x1f0 [ 113.393746][ T9258] should_fail_ex+0x50a/0x650 [ 113.393775][ T9258] _copy_to_user+0x32/0xd0 [ 113.393811][ T9258] simple_read_from_buffer+0xd0/0x160 [ 113.393838][ T9258] proc_fail_nth_read+0x198/0x270 [ 113.393861][ T9258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.393885][ T9258] ? rw_verify_area+0xcf/0x680 [ 113.393908][ T9258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.393931][ T9258] vfs_read+0x1df/0xbf0 [ 113.393956][ T9258] ? __fget_files+0x1fc/0x3a0 [ 113.393973][ T9258] ? __pfx___mutex_lock+0x10/0x10 [ 113.393996][ T9258] ? __pfx_vfs_read+0x10/0x10 [ 113.394028][ T9258] ? __fget_files+0x206/0x3a0 [ 113.394052][ T9258] ksys_read+0x12b/0x250 [ 113.394077][ T9258] ? __pfx_ksys_read+0x10/0x10 [ 113.394109][ T9258] do_syscall_64+0xcd/0x250 [ 113.394148][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.394172][ T9258] RIP: 0033:0x7f896478bb7c [ 113.394185][ T9258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.394202][ T9258] RSP: 002b:00007f8965574030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.394218][ T9258] RAX: ffffffffffffffda RBX: 00007f89649a5fa0 RCX: 00007f896478bb7c [ 113.394229][ T9258] RDX: 000000000000000f RSI: 00007f89655740a0 RDI: 0000000000000004 [ 113.394239][ T9258] RBP: 00007f8965574090 R08: 0000000000000000 R09: 0000000000000000 [ 113.394249][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.394259][ T9258] R13: 0000000000000000 R14: 00007f89649a5fa0 R15: 00007ffe2d3a5928 [ 113.394282][ T9258] [ 113.479642][ T5941] Bluetooth: hci0: Malformed LE Event: 0x0b [ 113.585704][ T9261] program syz.2.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.682821][ T9282] @: renamed from vlan0 (while UP) [ 113.853274][ T9290] fuse: Bad value for 'fd' [ 113.964998][ T9302] ptrace attach of "/syz-executor exec"[5942] was attempted by ""[9302] [ 114.126538][ T9300] warn_alloc: 1 callbacks suppressed [ 114.126548][ T9300] syz.2.1177: vmalloc error: size 36864, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 114.132470][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.2.1177 Not tainted 6.14.0-syzkaller #0 [ 114.132490][ T9300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.132499][ T9300] Call Trace: [ 114.132504][ T9300] [ 114.132510][ T9300] dump_stack_lvl+0x16c/0x1f0 [ 114.132535][ T9300] warn_alloc+0x24d/0x3a0 [ 114.132556][ T9300] ? __pfx_warn_alloc+0x10/0x10 [ 114.132576][ T9300] ? __pfx_lock_release+0x10/0x10 [ 114.132600][ T9300] ? rcu_is_watching+0x12/0xc0 [ 114.132617][ T9300] ? __mod_memcg_state+0x419/0x5d0 [ 114.132646][ T9300] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 114.132672][ T9300] ? kvm_dev_ioctl+0x151/0x1a90 [ 114.132685][ T9300] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.132701][ T9300] ? __pfx_snprintf+0x10/0x10 [ 114.132716][ T9300] ? _raw_spin_unlock+0x28/0x50 [ 114.132728][ T9300] ? alloc_fd+0x41f/0x760 [ 114.132738][ T9300] ? kvm_dev_ioctl+0x151/0x1a90 [ 114.132748][ T9300] __vmalloc_noprof+0x6d/0x90 [ 114.132763][ T9300] ? kvm_dev_ioctl+0x151/0x1a90 [ 114.132772][ T9300] kvm_dev_ioctl+0x151/0x1a90 [ 114.132783][ T9300] ? __pfx_lock_release+0x10/0x10 [ 114.132799][ T9300] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 114.132810][ T9300] ? selinux_file_ioctl+0x180/0x270 [ 114.132827][ T9300] ? selinux_file_ioctl+0xb4/0x270 [ 114.132843][ T9300] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 114.132853][ T9300] __x64_sys_ioctl+0x190/0x200 [ 114.132869][ T9300] do_syscall_64+0xcd/0x250 [ 114.132884][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.132899][ T9300] RIP: 0033:0x7fe43b78d169 [ 114.132908][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.132918][ T9300] RSP: 002b:00007fe43c55c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.132927][ T9300] RAX: ffffffffffffffda RBX: 00007fe43b9a5fa0 RCX: 00007fe43b78d169 [ 114.132933][ T9300] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 114.132939][ T9300] RBP: 00007fe43c55c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.132945][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.132950][ T9300] R13: 0000000000000000 R14: 00007fe43b9a5fa0 R15: 00007ffd901f0ea8 [ 114.132962][ T9300] [ 114.132966][ T9300] Mem-Info: [ 114.136191][ T9317] wg1: entered promiscuous mode [ 114.139950][ T9300] active_anon:16191 inactive_anon:0 isolated_anon:0 [ 114.139950][ T9300] active_file:3408 inactive_file:53318 isolated_file:0 [ 114.139950][ T9300] unevictable:1767 dirty:321 writeback:0 [ 114.139950][ T9300] slab_reclaimable:12068 slab_unreclaimable:76741 [ 114.139950][ T9300] mapped:24497 shmem:11722 pagetables:1227 [ 114.139950][ T9300] sec_pagetables:300 bounce:0 [ 114.139950][ T9300] kernel_misc_reclaimable:0 [ 114.139950][ T9300] free:447564 free_pcp:4158 free_cma:0 [ 114.213491][ T9300] Node 0 active_anon:64392kB inactive_anon:0kB active_file:13632kB inactive_file:213160kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:98072kB dirty:1280kB writeback:0kB shmem:43228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:5032kB sec_pagetables:1200kB all_unreclaimable? no [ 114.215019][ T9323] FAULT_INJECTION: forcing a failure. [ 114.215019][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 114.223136][ T9300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 114.228477][ T9323] CPU: 3 UID: 0 PID: 9323 Comm: syz.1.1184 Not tainted 6.14.0-syzkaller #0 [ 114.228491][ T9323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.228497][ T9323] Call Trace: [ 114.228501][ T9323] [ 114.228505][ T9323] dump_stack_lvl+0x16c/0x1f0 [ 114.228523][ T9323] should_fail_ex+0x50a/0x650 [ 114.228539][ T9323] ? fs_reclaim_acquire+0xae/0x150 [ 114.228555][ T9323] ? tomoyo_realpath_from_path+0xb9/0x720 [ 114.228571][ T9323] should_failslab+0xc2/0x120 [ 114.228583][ T9323] __kmalloc_noprof+0xcb/0x510 [ 114.228594][ T9323] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 114.228612][ T9323] tomoyo_realpath_from_path+0xb9/0x720 [ 114.228627][ T9323] ? tomoyo_path_number_perm+0x235/0x590 [ 114.228641][ T9323] ? tomoyo_path_number_perm+0x235/0x590 [ 114.228656][ T9323] tomoyo_path_number_perm+0x248/0x590 [ 114.228668][ T9323] ? tomoyo_path_number_perm+0x235/0x590 [ 114.228683][ T9323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.228708][ T9323] ? __pfx_lock_release+0x10/0x10 [ 114.228722][ T9323] ? trace_lock_acquire+0x14e/0x1f0 [ 114.228735][ T9323] ? lock_acquire+0x2f/0xb0 [ 114.228749][ T9323] ? __fget_files+0x40/0x3a0 [ 114.228761][ T9323] ? __fget_files+0x206/0x3a0 [ 114.228772][ T9323] security_file_ioctl+0x9b/0x240 [ 114.228788][ T9323] __x64_sys_ioctl+0xb7/0x200 [ 114.228804][ T9323] do_syscall_64+0xcd/0x250 [ 114.228820][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.228835][ T9323] RIP: 0033:0x7f3de4b8d169 [ 114.228844][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.228854][ T9323] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.228864][ T9323] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 114.228871][ T9323] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 114.228877][ T9323] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 114.228883][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.228889][ T9323] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 114.228901][ T9323] [ 114.228905][ T9323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.234491][ T9300] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.305955][ T9300] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 114.307562][ T9300] Node 0 DMA32 free:190376kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:64144kB inactive_anon:0kB active_file:13632kB inactive_file:213160kB unevictable:3532kB writepending:1280kB present:2080628kB managed:1270124kB mlocked:0kB bounce:0kB free_pcp:5688kB local_pcp:1572kB free_cma:0kB [ 114.315704][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 114.317441][ T9300] Node 1 Normal free:1582976kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:10544kB local_pcp:720kB free_cma:0kB [ 114.331527][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 114.333355][ T9300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.337137][ T9300] Node 0 DMA32: 28*4kB (UM) 108*8kB (UME) 135*16kB (UME) 127*32kB (UME) 161*64kB (UME) 53*128kB (UME) 41*256kB (UME) 17*512kB (UME) 21*1024kB (UME) 13*2048kB (UME) 24*4096kB (M) = 189920kB [ 114.342407][ T9300] Node 1 Normal: 2*4kB (UM) 11*8kB (UME) 10*16kB (UME) 89*32kB (UE) 58*64kB (UME) 20*128kB (UME) 7*256kB (UME) 4*512kB (UME) 3*1024kB (UE) 1*2048kB (M) 382*4096kB (M) = 1583008kB [ 114.348423][ T9300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.351074][ T9300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.353824][ T9300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.356763][ T9300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.359553][ T9300] 68417 total pagecache pages [ 114.360903][ T9300] 0 pages in swap cache [ 114.362117][ T9300] Free swap = 124504kB [ 114.363284][ T9300] Total swap = 124996kB [ 114.364467][ T9300] 1048443 pages RAM [ 114.365553][ T9300] 0 pages HighMem/MovableOnly [ 114.367185][ T9300] 281591 pages reserved [ 114.368395][ T9300] 0 pages cma reserved [ 114.491302][ T9354] ceph: No mds server is up or the cluster is laggy [ 114.496048][ T60] libceph: connect (1)[c::]:6789 error -101 [ 114.498070][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 114.543849][ T6756] IPVS: starting estimator thread 0... [ 114.547991][ T9362] __nla_validate_parse: 4 callbacks suppressed [ 114.548001][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1197'. [ 114.577351][ T9365] evm: overlay not supported [ 114.581732][ T9365] smb3: Unknown parameter 'rdmas' [ 114.590749][ T9367] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 114.626167][ T9363] IPVS: using max 34 ests per chain, 81600 per kthread [ 114.630858][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'. [ 114.710433][ T9381] fuse: Invalid rootmode [ 114.802101][ T9397] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 114.893358][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'. [ 115.135644][ T9441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 115.275132][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 115.275147][ T40] audit: type=1400 audit(1742842128.628:535): avc: denied { read } for pid=9459 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.459491][ T9474] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 115.821758][ T9493] FAULT_INJECTION: forcing a failure. [ 115.821758][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 115.826771][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.1.1237 Not tainted 6.14.0-syzkaller #0 [ 115.826785][ T9493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.826792][ T9493] Call Trace: [ 115.826795][ T9493] [ 115.826799][ T9493] dump_stack_lvl+0x16c/0x1f0 [ 115.826817][ T9493] should_fail_ex+0x50a/0x650 [ 115.826834][ T9493] ? fs_reclaim_acquire+0xae/0x150 [ 115.826851][ T9493] should_failslab+0xc2/0x120 [ 115.826863][ T9493] __kmalloc_node_noprof+0xd1/0x510 [ 115.826874][ T9493] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 115.826893][ T9493] __kvmalloc_node_noprof+0xad/0x1a0 [ 115.826909][ T9493] kvm_recalculate_apic_map+0x222/0x15a0 [ 115.826929][ T9493] ? __might_fault+0x13b/0x190 [ 115.826942][ T9493] ? __pfx_lock_release+0x10/0x10 [ 115.826959][ T9493] ? __pfx_kvm_recalculate_apic_map+0x10/0x10 [ 115.826976][ T9493] ? __might_fault+0xe3/0x190 [ 115.826988][ T9493] ? __might_fault+0xe3/0x190 [ 115.827001][ T9493] kvm_apic_set_state+0x3fe/0xda0 [ 115.827016][ T9493] kvm_arch_vcpu_ioctl+0x1e4d/0x5050 [ 115.827030][ T9493] ? __lock_acquire+0x15a9/0x3c40 [ 115.827045][ T9493] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 115.827058][ T9493] ? kasan_save_track+0x14/0x30 [ 115.827068][ T9493] ? __kasan_slab_free+0x51/0x70 [ 115.827078][ T9493] ? __pfx___lock_acquire+0x10/0x10 [ 115.827092][ T9493] ? __x64_sys_ioctl+0xb7/0x200 [ 115.827105][ T9493] ? do_syscall_64+0xcd/0x250 [ 115.827119][ T9493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.827140][ T9493] ? hlock_class+0x4e/0x130 [ 115.827153][ T9493] ? lock_acquire.part.0+0x11b/0x380 [ 115.827171][ T9493] ? __mutex_trylock_common+0xea/0x250 [ 115.827187][ T9493] ? __pfx___mutex_trylock_common+0x10/0x10 [ 115.827202][ T9493] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 115.827215][ T9493] ? rcu_is_watching+0x12/0xc0 [ 115.827226][ T9493] ? trace_contention_end+0xee/0x140 [ 115.827242][ T9493] ? __mutex_lock+0x1cc/0xb10 [ 115.827258][ T9493] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 115.827269][ T9493] ? tomoyo_path_number_perm+0x298/0x590 [ 115.827283][ T9493] ? __pfx___mutex_lock+0x10/0x10 [ 115.827302][ T9493] ? tomoyo_path_number_perm+0x190/0x590 [ 115.827318][ T9493] ? kvm_vcpu_ioctl+0x1258/0x16b0 [ 115.827329][ T9493] kvm_vcpu_ioctl+0x1258/0x16b0 [ 115.827343][ T9493] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 115.827359][ T9493] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 115.827378][ T9493] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.827397][ T9493] ? __pfx_lock_release+0x10/0x10 [ 115.827417][ T9493] ? selinux_file_ioctl+0x180/0x270 [ 115.827433][ T9493] ? selinux_file_ioctl+0xb4/0x270 [ 115.827449][ T9493] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 115.827462][ T9493] __x64_sys_ioctl+0x190/0x200 [ 115.827477][ T9493] do_syscall_64+0xcd/0x250 [ 115.827493][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.827506][ T9493] RIP: 0033:0x7f3de4b8d169 [ 115.827515][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.827525][ T9493] RSP: 002b:00007f3de59f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.827535][ T9493] RAX: ffffffffffffffda RBX: 00007f3de4da5fa0 RCX: 00007f3de4b8d169 [ 115.827541][ T9493] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 115.827547][ T9493] RBP: 00007f3de59f4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.827553][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.827558][ T9493] R13: 0000000000000000 R14: 00007f3de4da5fa0 R15: 00007ffe883f22f8 [ 115.827571][ T9493] [ 116.014757][ T9505] fuse: Bad value for 'rootmode' [ 116.073281][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 116.148808][ T9462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.152622][ T9513] "syz.4.1243" (9513) uses obsolete ecb(arc4) skcipher [ 116.785881][ T5979] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 116.945848][ T5979] usb 7-1: Using ep0 maxpacket: 16 [ 116.954324][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.958961][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.962062][ T5979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.965423][ T5979] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.967951][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.971053][ T5979] usb 7-1: config 0 descriptor?? [ 117.031030][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1253'. [ 117.034839][ T9544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1253'. [ 117.041515][ T9522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 117.130010][ T9553] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 117.191006][ T9555] FAULT_INJECTION: forcing a failure. [ 117.191006][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 117.194528][ T9555] CPU: 3 UID: 0 PID: 9555 Comm: syz.0.1258 Not tainted 6.14.0-syzkaller #0 [ 117.194541][ T9555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.194548][ T9555] Call Trace: [ 117.194551][ T9555] [ 117.194555][ T9555] dump_stack_lvl+0x16c/0x1f0 [ 117.194574][ T9555] should_fail_ex+0x50a/0x650 [ 117.194590][ T9555] ? fs_reclaim_acquire+0xae/0x150 [ 117.194607][ T9555] ? tomoyo_encode2+0x100/0x3e0 [ 117.194621][ T9555] should_failslab+0xc2/0x120 [ 117.194633][ T9555] __kmalloc_noprof+0xcb/0x510 [ 117.194646][ T9555] ? rcu_is_watching+0x12/0xc0 [ 117.194658][ T9555] tomoyo_encode2+0x100/0x3e0 [ 117.194675][ T9555] tomoyo_encode+0x29/0x50 [ 117.194689][ T9555] tomoyo_realpath_from_path+0x19d/0x720 [ 117.194706][ T9555] ? tomoyo_path_number_perm+0x235/0x590 [ 117.194721][ T9555] tomoyo_path_number_perm+0x248/0x590 [ 117.194734][ T9555] ? tomoyo_path_number_perm+0x235/0x590 [ 117.194748][ T9555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.194774][ T9555] ? __pfx_lock_release+0x10/0x10 [ 117.194788][ T9555] ? trace_lock_acquire+0x14e/0x1f0 [ 117.194802][ T9555] ? lock_acquire+0x2f/0xb0 [ 117.194815][ T9555] ? __fget_files+0x40/0x3a0 [ 117.194828][ T9555] ? __fget_files+0x206/0x3a0 [ 117.194839][ T9555] security_file_ioctl+0x9b/0x240 [ 117.194855][ T9555] __x64_sys_ioctl+0xb7/0x200 [ 117.194871][ T9555] do_syscall_64+0xcd/0x250 [ 117.194887][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.194902][ T9555] RIP: 0033:0x7f0628d8d169 [ 117.194910][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.194920][ T9555] RSP: 002b:00007f0629b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.194930][ T9555] RAX: ffffffffffffffda RBX: 00007f0628fa5fa0 RCX: 00007f0628d8d169 [ 117.194936][ T9555] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.194942][ T9555] RBP: 00007f0629b78090 R08: 0000000000000000 R09: 0000000000000000 [ 117.194948][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.194953][ T9555] R13: 0000000000000000 R14: 00007f0628fa5fa0 R15: 00007ffcc9fa7ee8 [ 117.194966][ T9555] [ 117.194973][ T9555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.299183][ T40] audit: type=1400 audit(1742842130.658:536): avc: denied { getopt } for pid=9560 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.303270][ T9561] loop4: detected capacity change from 0 to 7 [ 117.309625][ T9561] Dev loop4: unable to read RDB block 7 [ 117.311247][ T9561] loop4: unable to read partition table [ 117.312881][ T9561] loop4: partition table beyond EOD, truncated [ 117.314615][ T9561] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 117.346845][ T9563] fuse: Unknown parameter 'use00000000000000000000' [ 117.378469][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.380821][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.382957][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.385010][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.388736][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.391539][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.394960][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.397694][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.399932][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.401986][ T5979] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 117.405630][ T5979] HID 045e:07da: Invalid code 65791 type 1 [ 117.411932][ T5979] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input8 [ 117.419697][ T40] audit: type=1400 audit(1742842130.778:537): avc: denied { shutdown } for pid=9566 comm="syz.0.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.425029][ C3] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 117.428320][ T40] audit: type=1400 audit(1742842130.778:538): avc: denied { read } for pid=5340 comm="acpid" name="event4" dev="devtmpfs" ino=2901 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.429270][ C3] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 117.429423][ T5979] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 117.440811][ T40] audit: type=1400 audit(1742842130.778:539): avc: denied { open } for pid=5340 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2901 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.486899][ T40] audit: type=1400 audit(1742842130.848:540): avc: denied { ioctl } for pid=5340 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2901 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.554124][ T9571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1264'. [ 117.584026][ T9574] FAULT_INJECTION: forcing a failure. [ 117.584026][ T9574] name failslab, interval 1, probability 0, space 0, times 0 [ 117.589244][ T9574] CPU: 0 UID: 0 PID: 9574 Comm: syz.0.1265 Not tainted 6.14.0-syzkaller #0 [ 117.589262][ T9574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.589271][ T9574] Call Trace: [ 117.589275][ T9574] [ 117.589281][ T9574] dump_stack_lvl+0x16c/0x1f0 [ 117.589305][ T9574] should_fail_ex+0x50a/0x650 [ 117.589328][ T9574] ? fs_reclaim_acquire+0xae/0x150 [ 117.589353][ T9574] should_failslab+0xc2/0x120 [ 117.589378][ T9574] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 117.589395][ T9574] ? getname_flags.part.0+0x4c/0x550 [ 117.589417][ T9574] ? fput+0x67/0x440 [ 117.589437][ T9574] getname_flags.part.0+0x4c/0x550 [ 117.589457][ T9574] ? __pfx_ksys_write+0x10/0x10 [ 117.589474][ T9574] getname_flags+0x93/0xf0 [ 117.589498][ T9574] __x64_sys_mknodat+0x9f/0xe0 [ 117.589515][ T9574] do_syscall_64+0xcd/0x250 [ 117.589539][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.589562][ T9574] RIP: 0033:0x7f0628d8d169 [ 117.589575][ T9574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.589589][ T9574] RSP: 002b:00007f0629b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 117.589606][ T9574] RAX: ffffffffffffffda RBX: 00007f0628fa5fa0 RCX: 00007f0628d8d169 [ 117.589616][ T9574] RDX: 0000000000000008 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 117.589626][ T9574] RBP: 00007f0629b78090 R08: 0000000000000000 R09: 0000000000000000 [ 117.589636][ T9574] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 117.589646][ T9574] R13: 0000000000000000 R14: 00007f0628fa5fa0 R15: 00007ffcc9fa7ee8 [ 117.589668][ T9574] [ 117.708077][ T5979] usb 7-1: USB disconnect, device number 18 [ 117.909655][ T9548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 118.327250][ T40] audit: type=1400 audit(1742842131.678:541): avc: denied { module_request } for pid=9588 comm="syz.2.1269" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.353247][ T9589] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 118.355466][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1269'. [ 118.359102][ T40] audit: type=1400 audit(1742842131.718:542): avc: denied { accept } for pid=9588 comm="syz.2.1269" path=0000244E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.411925][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 118.414820][ T40] audit: type=1400 audit(1742842131.768:543): avc: denied { write } for pid=9591 comm="syz.4.1270" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.450986][ T9602] fuse: Unknown parameter 'use00000000000000000000' [ 118.795111][ T9611] netlink: 'syz.0.1278': attribute type 13 has an invalid length. [ 118.887823][ T40] audit: type=1400 audit(1742842132.248:544): avc: denied { read } for pid=9614 comm="syz.1.1280" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.234153][ T9625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1283'. [ 119.312366][ T9604] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 119.315622][ T9628] fuse: Bad value for 'fd' [ 121.055951][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.055992][ T9617] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 121.829202][ T9617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.839891][ T9617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.845350][ T9617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.847881][ T9617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.851602][ T9617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.855513][ T9617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.857514][ T9617] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.860204][ T9617] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.940757][ T9641] tipc: Enabling of bearer rejected, already enabled [ 122.009725][ T9652] fuse: Unknown parameter 'user_i00000000000000000000' [ 122.020608][ T9655] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 122.038008][ T9655] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 122.074026][ T40] audit: type=1400 audit(1742842135.428:545): avc: denied { append } for pid=9660 comm="syz.0.1299" name="pfkey" dev="proc" ino=4026533272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.119746][ T9664] tipc: Started in network mode [ 122.121191][ T9664] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 122.123924][ T9664] tipc: Enabled bearer , priority 10 [ 122.244722][ T9680] fuse: Unknown parameter 'user_i00000000000000000000' [ 122.495489][ T9705] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 122.498172][ T9705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.528755][ T9710] fuse: Unknown parameter 'user_id00000000000000000000' [ 122.539330][ T9711] ax25_connect(): syz.0.1317 uses autobind, please contact jreuter@yaina.de [ 122.539331][ T40] audit: type=1400 audit(1742842135.898:546): avc: denied { connect } for pid=9702 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.713688][ T40] audit: type=1400 audit(1742842136.068:547): avc: denied { setopt } for pid=9723 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.761305][ T40] audit: type=1400 audit(1742842136.118:548): avc: denied { associate } for pid=9727 comm="syz.2.1327" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.771743][ T9728] netfs: Couldn't get user pages (rc=-14) [ 122.779216][ T9728] FAULT_INJECTION: forcing a failure. [ 122.779216][ T9728] name failslab, interval 1, probability 0, space 0, times 0 [ 122.782998][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.2.1327 Not tainted 6.14.0-syzkaller #0 [ 122.783010][ T9728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.783017][ T9728] Call Trace: [ 122.783021][ T9728] [ 122.783025][ T9728] dump_stack_lvl+0x16c/0x1f0 [ 122.783055][ T9728] should_fail_ex+0x50a/0x650 [ 122.783080][ T9728] ? fs_reclaim_acquire+0xae/0x150 [ 122.783097][ T9728] should_failslab+0xc2/0x120 [ 122.783110][ T9728] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 122.783121][ T9728] ? p9_tag_alloc+0x9c/0x660 [ 122.783136][ T9728] p9_tag_alloc+0x9c/0x660 [ 122.783150][ T9728] ? __pfx_p9_tag_alloc+0x10/0x10 [ 122.783162][ T9728] ? hlock_class+0x4e/0x130 [ 122.783173][ T9728] ? mark_lock+0xb5/0xc60 [ 122.783186][ T9728] ? hlock_class+0x4e/0x130 [ 122.783196][ T9728] ? mark_lock+0xb5/0xc60 [ 122.783208][ T9728] ? page_vma_mapped_walk+0xd7b/0x2cb0 [ 122.783221][ T9728] ? __pfx_mark_lock+0x10/0x10 [ 122.783237][ T9728] p9_client_prepare_req+0x19f/0x4d0 [ 122.783251][ T9728] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 122.783265][ T9728] ? hlock_class+0x4e/0x130 [ 122.783275][ T9728] ? mark_lock+0xb5/0xc60 [ 122.783291][ T9728] p9_client_zc_rpc.constprop.0+0x105/0x880 [ 122.783308][ T9728] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 122.783326][ T9728] ? __pfx___lock_acquire+0x10/0x10 [ 122.783352][ T9728] ? hlock_class+0x4e/0x130 [ 122.783364][ T9728] ? mark_lock+0xb5/0xc60 [ 122.783379][ T9728] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 122.783391][ T9728] p9_client_write+0x447/0x680 [ 122.783411][ T9728] ? __pfx_p9_client_write+0x10/0x10 [ 122.783427][ T9728] ? mark_held_locks+0x9f/0xe0 [ 122.783442][ T9728] v9fs_issue_write+0xe4/0x1b0 [ 122.783456][ T9728] ? __pfx_v9fs_issue_write+0x10/0x10 [ 122.783469][ T9728] ? rcu_is_watching+0x12/0xc0 [ 122.783481][ T9728] netfs_do_issue_write+0x92/0x110 [ 122.783493][ T9728] netfs_advance_write+0x167/0xc40 [ 122.783507][ T9728] netfs_write_folio+0xb56/0x1760 [ 122.783525][ T9728] netfs_writepages+0x29a/0x8f0 [ 122.783538][ T9728] ? __pfx_netfs_writepages+0x10/0x10 [ 122.783549][ T9728] ? __pfx_stack_trace_save+0x10/0x10 [ 122.783562][ T9728] ? __pfx___lock_acquire+0x10/0x10 [ 122.783578][ T9728] ? __pfx_netfs_writepages+0x10/0x10 [ 122.783589][ T9728] do_writepages+0x1b3/0x820 [ 122.783603][ T9728] ? find_held_lock+0x2d/0x110 [ 122.783615][ T9728] ? __pfx_do_writepages+0x10/0x10 [ 122.783627][ T9728] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 122.783641][ T9728] ? __pfx_lock_release+0x10/0x10 [ 122.783655][ T9728] ? do_raw_spin_lock+0x12d/0x2c0 [ 122.783665][ T9728] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.783675][ T9728] ? lock_acquire+0x2f/0xb0 [ 122.783688][ T9728] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 122.783702][ T9728] ? do_raw_spin_unlock+0x172/0x230 [ 122.783712][ T9728] ? _raw_spin_unlock+0x28/0x50 [ 122.783726][ T9728] filemap_fdatawrite_wbc+0x104/0x160 [ 122.783740][ T9728] __filemap_fdatawrite_range+0xb3/0xf0 [ 122.783756][ T9728] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 122.783787][ T9728] ? inode_newsize_ok+0x13b/0x200 [ 122.783803][ T9728] ? setattr_prepare+0x140/0x9a0 [ 122.783820][ T9728] v9fs_vfs_setattr_dotl+0x8a0/0xc00 [ 122.783833][ T9728] ? __pfx_v9fs_vfs_setattr_dotl+0x10/0x10 [ 122.783847][ T9728] ? evm_inode_setattr+0x65/0x680 [ 122.783863][ T9728] ? __pfx_make_vfsgid+0x10/0x10 [ 122.783879][ T9728] ? __pfx_v9fs_vfs_setattr_dotl+0x10/0x10 [ 122.783891][ T9728] notify_change+0x6a6/0x1230 [ 122.783909][ T9728] do_truncate+0x15c/0x220 [ 122.783920][ T9728] ? __pfx_do_truncate+0x10/0x10 [ 122.783929][ T9728] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 122.783947][ T9728] ? do_sys_ftruncate+0x61/0xb0 [ 122.783960][ T9728] do_ftruncate+0x5a8/0x960 [ 122.783971][ T9728] ? __pfx_do_ftruncate+0x10/0x10 [ 122.783980][ T9728] ? __fget_files+0x206/0x3a0 [ 122.783994][ T9728] do_sys_ftruncate+0x61/0xb0 [ 122.784005][ T9728] do_syscall_64+0xcd/0x250 [ 122.784021][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.784036][ T9728] RIP: 0033:0x7fe43b78d169 [ 122.784045][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.784056][ T9728] RSP: 002b:00007fe43c55c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 122.784065][ T9728] RAX: ffffffffffffffda RBX: 00007fe43b9a5fa0 RCX: 00007fe43b78d169 [ 122.784075][ T9728] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 122.784081][ T9728] RBP: 00007fe43c55c090 R08: 0000000000000000 R09: 0000000000000000 [ 122.784087][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.784093][ T9728] R13: 0000000000000000 R14: 00007fe43b9a5fa0 R15: 00007ffd901f0ea8 [ 122.784106][ T9728] [ 122.991943][ T9730] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.145847][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.166288][ T26] tipc: Node number set to 4269801488 [ 123.575302][ T9726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 123.605539][ T9756] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.734531][ T9767] netlink: zone id is out of range [ 123.736121][ T9767] netlink: zone id is out of range [ 123.737570][ T9767] netlink: zone id is out of range [ 123.739055][ T9767] netlink: zone id is out of range [ 123.740528][ T9767] netlink: zone id is out of range [ 123.741961][ T9767] netlink: zone id is out of range [ 123.743398][ T9767] netlink: zone id is out of range [ 123.744833][ T9767] netlink: zone id is out of range [ 123.757829][ T9771] xt_nfacct: accounting object `syz1' does not exists [ 123.790537][ T40] audit: type=1400 audit(1742842137.148:549): avc: denied { write } for pid=9768 comm="syz.0.1344" lport=43047 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.855926][ T5954] Bluetooth: hci2: command 0x0405 tx timeout [ 123.855940][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.985808][ T5979] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 124.114410][ T40] audit: type=1400 audit(1742842137.468:550): avc: denied { append } for pid=9779 comm="syz.1.1347" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.121236][ T40] audit: type=1400 audit(1742842137.468:551): avc: denied { open } for pid=9779 comm="syz.1.1347" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.145765][ T5979] usb 9-1: Using ep0 maxpacket: 8 [ 124.148497][ T5979] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.151160][ T5979] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.153886][ T5979] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.156760][ T5979] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.160314][ T5979] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.162816][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.369056][ T5979] usb 9-1: GET_CAPABILITIES returned 0 [ 124.370707][ T5979] usbtmc 9-1:16.0: can't read capabilities [ 124.570273][ T60] usb 9-1: USB disconnect, device number 6 [ 124.743382][ T9786] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 124.773561][ T9790] fuse: Bad value for 'fd' [ 124.909799][ T9801] futex_wake_op: syz.2.1355 tries to shift op by 32; fix this program [ 125.124418][ T9812] fuse: Bad value for 'fd' [ 125.215967][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.430536][ T9783] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 125.458577][ T40] audit: type=1400 audit(1742842138.818:552): avc: denied { read write } for pid=9825 comm="syz.0.1364" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.464991][ T40] audit: type=1400 audit(1742842138.818:553): avc: denied { open } for pid=9825 comm="syz.0.1364" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.571893][ T40] audit: type=1400 audit(1742842138.928:554): avc: denied { setopt } for pid=9825 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.621834][ T9836] fuse: Bad value for 'fd' [ 125.805899][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.936052][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.945834][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 125.965853][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 125.968523][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.971297][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.973741][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 125.977454][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 125.980538][ T26] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.983161][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.992773][ T26] hub 5-1:1.0: bad descriptor, ignoring hub [ 125.994499][ T26] hub 5-1:1.0: probe with driver hub failed with error -5 [ 125.997031][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 125.998529][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 126.000626][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 126.002294][ T26] cdc_wdm 5-1:1.0: Unknown control protocol [ 126.193769][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.196907][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.601787][ T9834] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 126.741872][ T9848] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.761082][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1377'. [ 126.774650][ T9861] fuse: Unknown parameter '0x0000000000000004' [ 126.844569][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 127.060326][ T9895] fuse: Unknown parameter '0x0000000000000004' [ 127.089736][ T5941] Bluetooth: hci0: Malformed LE Event: 0x0d [ 127.405787][ T6756] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 127.545784][ T6756] usb 9-1: device descriptor read/64, error -71 [ 127.785881][ T6756] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 127.853122][ T9893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.888845][ T9908] input: syz1 as /devices/virtual/input/input9 [ 127.900484][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 127.900493][ T40] audit: type=1400 audit(1742842141.258:557): avc: denied { setattr } for pid=9907 comm="syz.2.1393" path="socket:[38241]" dev="sockfs" ino=38241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.909193][ T40] audit: type=1400 audit(1742842141.258:558): avc: denied { getopt } for pid=9907 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.915782][ T6756] usb 9-1: device descriptor read/64, error -71 [ 128.015779][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 128.016053][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.026065][ T6756] usb usb9-port1: attempt power cycle [ 128.136495][ T40] audit: type=1400 audit(1742842141.498:559): avc: denied { getopt } for pid=9912 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.375902][ T6756] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 128.397128][ T6756] usb 9-1: device descriptor read/8, error -71 [ 128.540928][ T9920] fuse: Unknown parameter '0x0000000000000004' [ 128.566797][ T5981] usb 5-1: USB disconnect, device number 5 [ 128.635825][ T6756] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 128.657313][ T6756] usb 9-1: device descriptor read/8, error -71 [ 128.765931][ T6756] usb usb9-port1: unable to enumerate USB device [ 129.451896][ T9947] fuse: Unknown parameter '0x0000000000000004' [ 129.543182][ T9929] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.641036][ T9965] syz.0.1415(9965): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 129.641463][ T9963] gre1: entered promiscuous mode [ 129.646261][ T9963] gre1: entered allmulticast mode [ 129.741103][ T9971] sp0: Synchronizing with TNC [ 129.744668][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 129.747645][ T9970] [U] è` [ 130.085567][ T9991] sp0: Synchronizing with TNC [ 130.091936][ T5954] Bluetooth: hci3: Malformed LE Event: 0x1b [ 130.092736][ T9990] [U] è [ 130.096439][ T5954] Bluetooth: hci2: command 0x0405 tx timeout [ 130.204113][ T9993] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 130.246855][T10004] netlink: 'syz.4.1432': attribute type 16 has an invalid length. [ 130.249464][T10004] netlink: 'syz.4.1432': attribute type 17 has an invalid length. [ 130.265858][T10004] net_ratelimit: 5 callbacks suppressed [ 130.265864][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.366768][T10017] netfs: Couldn't get user pages (rc=-14) [ 130.495192][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 130.497796][T10030] FAULT_INJECTION: forcing a failure. [ 130.497796][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 130.501383][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.4.1443 Not tainted 6.14.0-syzkaller #0 [ 130.501398][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.501404][T10030] Call Trace: [ 130.501408][T10030] [ 130.501412][T10030] dump_stack_lvl+0x16c/0x1f0 [ 130.501446][T10030] should_fail_ex+0x50a/0x650 [ 130.501466][T10030] ? fs_reclaim_acquire+0xae/0x150 [ 130.501482][T10030] ? rfkill_alloc+0xac/0x330 [ 130.501497][T10030] should_failslab+0xc2/0x120 [ 130.501511][T10030] __kmalloc_noprof+0xcb/0x510 [ 130.501535][T10030] rfkill_alloc+0xac/0x330 [ 130.501559][T10030] wiphy_new_nm+0x1217/0x2160 [ 130.501582][T10030] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 130.501607][T10030] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 130.501628][T10030] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 130.501643][T10030] ? __local_bh_enable_ip+0xa4/0x120 [ 130.501661][T10030] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 130.501677][T10030] ? __pfx__printk+0x10/0x10 [ 130.501694][T10030] ? __pfx____ratelimit+0x10/0x10 [ 130.501708][T10030] ? rcu_is_watching+0x12/0xc0 [ 130.501719][T10030] ? do_trace_netlink_extack+0x17b/0x1f0 [ 130.501734][T10030] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 130.501753][T10030] hwsim_new_radio_nl+0xb42/0x12b0 [ 130.501770][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.501789][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 130.501807][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 130.501827][T10030] genl_family_rcv_msg_doit+0x202/0x2f0 [ 130.501845][T10030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.501867][T10030] ? bpf_lsm_capable+0x9/0x10 [ 130.501880][T10030] ? security_capable+0x7e/0x260 [ 130.501893][T10030] ? ns_capable+0xd7/0x110 [ 130.501909][T10030] genl_rcv_msg+0x565/0x800 [ 130.501920][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.501930][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.501950][T10030] netlink_rcv_skb+0x16b/0x440 [ 130.501965][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.501975][T10030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.502002][T10030] ? down_read+0xc9/0x330 [ 130.502017][T10030] ? __pfx_down_read+0x10/0x10 [ 130.502033][T10030] ? netlink_deliver_tap+0x1ae/0xd30 [ 130.502049][T10030] genl_rcv+0x28/0x40 [ 130.502066][T10030] netlink_unicast+0x53c/0x7f0 [ 130.502091][T10030] ? __pfx_netlink_unicast+0x10/0x10 [ 130.502121][T10030] netlink_sendmsg+0x8b8/0xd70 [ 130.502148][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.502174][T10030] ____sys_sendmsg+0xaaf/0xc90 [ 130.502186][T10030] ? copy_msghdr_from_user+0x10b/0x160 [ 130.502202][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.502221][T10030] ___sys_sendmsg+0x135/0x1e0 [ 130.502237][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.502261][T10030] ? __pfx_lock_release+0x10/0x10 [ 130.502275][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 130.502291][T10030] ? __fget_files+0x206/0x3a0 [ 130.502306][T10030] __sys_sendmsg+0x16e/0x220 [ 130.502322][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.502346][T10030] do_syscall_64+0xcd/0x250 [ 130.502362][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.502377][T10030] RIP: 0033:0x7f896478d169 [ 130.502386][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.502396][T10030] RSP: 002b:00007f8965574038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.502406][T10030] RAX: ffffffffffffffda RBX: 00007f89649a5fa0 RCX: 00007f896478d169 [ 130.502412][T10030] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 130.502418][T10030] RBP: 00007f8965574090 R08: 0000000000000000 R09: 0000000000000000 [ 130.502424][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.502430][T10030] R13: 0000000000000000 R14: 00007f89649a5fa0 R15: 00007ffe2d3a5928 [ 130.502443][T10030] [ 130.502450][T10030] INFO: trying to register non-static key. [ 130.516286][ T5954] Bluetooth: hci1: Malformed LE Event: 0x1b [ 130.517247][T10030] The code is fine but needs lockdep annotation, or maybe [ 130.585819][ T40] audit: type=1400 audit(1742842143.918:560): avc: denied { map } for pid=10035 comm="syz.0.1446" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.586989][T10030] you didn't initialize this object before use? [ 130.588531][ T40] audit: type=1400 audit(1742842143.918:561): avc: denied { execute } for pid=10035 comm="syz.0.1446" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.589769][T10030] turning off the locking correctness validator. [ 130.589777][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.4.1443 Not tainted 6.14.0-syzkaller #0 [ 130.589789][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.589796][T10030] Call Trace: [ 130.589799][T10030] [ 130.589803][T10030] dump_stack_lvl+0x116/0x1f0 [ 130.589822][T10030] register_lock_class+0xc39/0x1240 [ 130.589838][T10030] ? irq_work_queue+0x2a/0x80 [ 130.589853][T10030] ? __wake_up_klogd.part.0+0x99/0xf0 [ 130.589868][T10030] ? vprintk_emit+0x39e/0x6f0 [ 130.589878][T10030] ? __pfx_register_lock_class+0x10/0x10 [ 130.589895][T10030] __lock_acquire+0x135/0x3c40 [ 130.589909][T10030] ? mark_lock+0xb5/0xc60 [ 130.589922][T10030] ? lock_acquire+0x2f/0xb0 [ 130.589935][T10030] ? is_bpf_text_address+0x30/0x1a0 [ 130.589951][T10030] ? __pfx_mark_lock+0x10/0x10 [ 130.589965][T10030] ? __pfx___lock_acquire+0x10/0x10 [ 130.589979][T10030] ? show_trace_log_lvl+0x29d/0x3d0 [ 130.589999][T10030] lock_acquire.part.0+0x11b/0x380 [ 130.590013][T10030] ? cfg80211_dev_free+0x30/0x3d0 [ 130.590030][T10030] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 130.590045][T10030] ? rcu_is_watching+0x12/0xc0 [ 130.590056][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 130.590067][T10030] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.590081][T10030] ? cfg80211_dev_free+0x30/0x3d0 [ 130.590096][T10030] ? lock_acquire+0x2f/0xb0 [ 130.590110][T10030] ? cfg80211_dev_free+0x30/0x3d0 [ 130.590126][T10030] _raw_spin_lock_irqsave+0x3a/0x60 [ 130.590138][T10030] ? cfg80211_dev_free+0x30/0x3d0 [ 130.590153][T10030] cfg80211_dev_free+0x30/0x3d0 [ 130.590169][T10030] ? __pfx_wiphy_dev_release+0x10/0x10 [ 130.590179][T10030] device_release+0xa1/0x240 [ 130.590195][T10030] kobject_put+0x1e4/0x5a0 [ 130.590211][T10030] put_device+0x1f/0x30 [ 130.590225][T10030] wiphy_new_nm+0x1c1f/0x2160 [ 130.590239][T10030] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 130.590255][T10030] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 130.590271][T10030] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 130.590285][T10030] ? __local_bh_enable_ip+0xa4/0x120 [ 130.590302][T10030] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 130.590317][T10030] ? __pfx__printk+0x10/0x10 [ 130.590332][T10030] ? __pfx____ratelimit+0x10/0x10 [ 130.590345][T10030] ? rcu_is_watching+0x12/0xc0 [ 130.590355][T10030] ? do_trace_netlink_extack+0x17b/0x1f0 [ 130.590369][T10030] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 130.590386][T10030] hwsim_new_radio_nl+0xb42/0x12b0 [ 130.590401][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.590418][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 130.590436][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 130.590454][T10030] genl_family_rcv_msg_doit+0x202/0x2f0 [ 130.590472][T10030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.590490][T10030] ? bpf_lsm_capable+0x9/0x10 [ 130.590503][T10030] ? security_capable+0x7e/0x260 [ 130.590515][T10030] ? ns_capable+0xd7/0x110 [ 130.590529][T10030] genl_rcv_msg+0x565/0x800 [ 130.590539][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.590549][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.590565][T10030] netlink_rcv_skb+0x16b/0x440 [ 130.590579][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.590589][T10030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.590606][T10030] ? down_read+0xc9/0x330 [ 130.590620][T10030] ? __pfx_down_read+0x10/0x10 [ 130.590635][T10030] ? netlink_deliver_tap+0x1ae/0xd30 [ 130.590649][T10030] genl_rcv+0x28/0x40 [ 130.590664][T10030] netlink_unicast+0x53c/0x7f0 [ 130.590679][T10030] ? __pfx_netlink_unicast+0x10/0x10 [ 130.590695][T10030] netlink_sendmsg+0x8b8/0xd70 [ 130.590710][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.590726][T10030] ____sys_sendmsg+0xaaf/0xc90 [ 130.590738][T10030] ? copy_msghdr_from_user+0x10b/0x160 [ 130.590754][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.590768][T10030] ___sys_sendmsg+0x135/0x1e0 [ 130.590783][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.590800][T10030] ? __pfx_lock_release+0x10/0x10 [ 130.590814][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 130.590827][T10030] ? __fget_files+0x206/0x3a0 [ 130.590838][T10030] __sys_sendmsg+0x16e/0x220 [ 130.590853][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.590872][T10030] do_syscall_64+0xcd/0x250 [ 130.590886][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.590901][T10030] RIP: 0033:0x7f896478d169 [ 130.590909][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.590919][T10030] RSP: 002b:00007f8965574038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.590929][T10030] RAX: ffffffffffffffda RBX: 00007f89649a5fa0 RCX: 00007f896478d169 [ 130.590936][T10030] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 130.590942][T10030] RBP: 00007f8965574090 R08: 0000000000000000 R09: 0000000000000000 [ 130.590947][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.590953][T10030] R13: 0000000000000000 R14: 00007f89649a5fa0 R15: 00007ffe2d3a5928 [ 130.590962][T10030] [ 130.591330][T10030] ------------[ cut here ]------------ [ 130.769762][T10030] WARNING: CPU: 1 PID: 10030 at net/wireless/core.c:1197 cfg80211_dev_free+0x2e7/0x3d0 [ 130.772409][T10030] Modules linked in: [ 130.773512][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.4.1443 Not tainted 6.14.0-syzkaller #0 [ 130.775923][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.778879][T10030] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 130.780472][T10030] Code: 00 00 49 8b bd e0 08 00 00 e8 b5 63 69 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 9f 63 69 f7 e8 ea fd 10 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 79 17 74 f7 e9 aa fe ff ff 4c [ 130.785749][T10030] RSP: 0018:ffffc9000386f1b8 EFLAGS: 00010093 [ 130.787432][T10030] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 130.789622][T10030] RDX: ffff888043eda440 RSI: ffffffff8aa8f286 RDI: ffffc9000386f128 [ 130.791789][T10030] RBP: ffff888043cc86a8 R08: 0000000000000001 R09: fffff5200070de25 [ 130.793976][T10030] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888043cc86b8 [ 130.796184][T10030] R13: ffff888043cc8000 R14: ffff888030c739e0 R15: 0000000000000000 [ 130.798365][T10030] FS: 00007f89655746c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 130.800812][T10030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.802650][T10030] CR2: 000055557abfd808 CR3: 00000000588c2000 CR4: 0000000000352ef0 [ 130.804853][T10030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.807037][T10030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.809223][T10030] Call Trace: [ 130.810163][T10030] [ 130.811009][T10030] ? __warn+0xea/0x3c0 [ 130.812161][T10030] ? cfg80211_dev_free+0x2e7/0x3d0 [ 130.813595][T10030] ? report_bug+0x3c0/0x580 [ 130.814893][T10030] ? handle_bug+0x54/0xa0 [ 130.816118][T10030] ? exc_invalid_op+0x17/0x50 [ 130.817459][T10030] ? asm_exc_invalid_op+0x1a/0x20 [ 130.818868][T10030] ? do_raw_spin_lock+0x12d/0x2c0 [ 130.820284][T10030] ? cfg80211_dev_free+0x2e6/0x3d0 [ 130.821719][T10030] ? cfg80211_dev_free+0x2e7/0x3d0 [ 130.823178][T10030] ? cfg80211_dev_free+0x2e6/0x3d0 [ 130.824636][T10030] ? __pfx_wiphy_dev_release+0x10/0x10 [ 130.826121][T10030] device_release+0xa1/0x240 [ 130.827421][T10030] kobject_put+0x1e4/0x5a0 [ 130.828685][T10030] put_device+0x1f/0x30 [ 130.829862][T10030] wiphy_new_nm+0x1c1f/0x2160 [ 130.831193][T10030] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 130.833018][T10030] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 130.834881][T10030] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 130.836418][T10030] ? __local_bh_enable_ip+0xa4/0x120 [ 130.837897][T10030] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 130.839460][T10030] ? __pfx__printk+0x10/0x10 [ 130.840778][T10030] ? __pfx____ratelimit+0x10/0x10 [ 130.842195][T10030] ? rcu_is_watching+0x12/0xc0 [ 130.843500][T10030] ? do_trace_netlink_extack+0x17b/0x1f0 [ 130.845084][T10030] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 130.846771][T10030] hwsim_new_radio_nl+0xb42/0x12b0 [ 130.848213][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.849764][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 130.851800][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 130.853837][T10030] genl_family_rcv_msg_doit+0x202/0x2f0 [ 130.855380][T10030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.857078][T10030] ? bpf_lsm_capable+0x9/0x10 [ 130.858398][T10030] ? security_capable+0x7e/0x260 [ 130.859780][T10030] ? ns_capable+0xd7/0x110 [ 130.861053][T10030] genl_rcv_msg+0x565/0x800 [ 130.862425][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.863846][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.865431][T10030] netlink_rcv_skb+0x16b/0x440 [ 130.866773][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.868207][T10030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.869689][T10030] ? down_read+0xc9/0x330 [ 130.870915][T10030] ? __pfx_down_read+0x10/0x10 [ 130.872277][T10030] ? netlink_deliver_tap+0x1ae/0xd30 [ 130.873739][T10030] genl_rcv+0x28/0x40 [ 130.874875][T10030] netlink_unicast+0x53c/0x7f0 [ 130.876238][T10030] ? __pfx_netlink_unicast+0x10/0x10 [ 130.877721][T10030] netlink_sendmsg+0x8b8/0xd70 [ 130.879063][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.880553][T10030] ____sys_sendmsg+0xaaf/0xc90 [ 130.881901][T10030] ? copy_msghdr_from_user+0x10b/0x160 [ 130.883413][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.884911][T10030] ___sys_sendmsg+0x135/0x1e0 [ 130.886242][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.887699][T10030] ? __pfx_lock_release+0x10/0x10 [ 130.889129][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 130.890575][T10030] ? __fget_files+0x206/0x3a0 [ 130.891893][T10030] __sys_sendmsg+0x16e/0x220 [ 130.893212][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.894641][T10030] do_syscall_64+0xcd/0x250 [ 130.895946][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.897620][T10030] RIP: 0033:0x7f896478d169 [ 130.898864][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.904157][T10030] RSP: 002b:00007f8965574038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.906458][T10030] RAX: ffffffffffffffda RBX: 00007f89649a5fa0 RCX: 00007f896478d169 [ 130.908637][T10030] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 130.910800][T10030] RBP: 00007f8965574090 R08: 0000000000000000 R09: 0000000000000000 [ 130.912987][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.915159][T10030] R13: 0000000000000000 R14: 00007f89649a5fa0 R15: 00007ffe2d3a5928 [ 130.917338][T10030] [ 130.918216][T10030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.920229][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.4.1443 Not tainted 6.14.0-syzkaller #0 [ 130.922611][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.925564][T10030] Call Trace: [ 130.926505][T10030] [ 130.927344][T10030] dump_stack_lvl+0x3d/0x1f0 [ 130.928651][T10030] panic+0x71d/0x800 [ 130.929753][T10030] ? __pfx_panic+0x10/0x10 [ 130.931006][T10030] ? show_trace_log_lvl+0x29d/0x3d0 [ 130.932459][T10030] ? check_panic_on_warn+0x1f/0xb0 [ 130.933877][T10030] ? cfg80211_dev_free+0x2e7/0x3d0 [ 130.935328][T10030] check_panic_on_warn+0xab/0xb0 [ 130.936721][T10030] __warn+0xf6/0x3c0 [ 130.937829][T10030] ? cfg80211_dev_free+0x2e7/0x3d0 [ 130.939262][T10030] report_bug+0x3c0/0x580 [ 130.940485][T10030] handle_bug+0x54/0xa0 [ 130.941668][T10030] exc_invalid_op+0x17/0x50 [ 130.942950][T10030] asm_exc_invalid_op+0x1a/0x20 [ 130.944333][T10030] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 130.945921][T10030] Code: 00 00 49 8b bd e0 08 00 00 e8 b5 63 69 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 9f 63 69 f7 e8 ea fd 10 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 79 17 74 f7 e9 aa fe ff ff 4c [ 130.951183][T10030] RSP: 0018:ffffc9000386f1b8 EFLAGS: 00010093 [ 130.952872][T10030] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 130.955105][T10030] RDX: ffff888043eda440 RSI: ffffffff8aa8f286 RDI: ffffc9000386f128 [ 130.957284][T10030] RBP: ffff888043cc86a8 R08: 0000000000000001 R09: fffff5200070de25 [ 130.959477][T10030] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888043cc86b8 [ 130.961671][T10030] R13: ffff888043cc8000 R14: ffff888030c739e0 R15: 0000000000000000 [ 130.963852][T10030] ? do_raw_spin_lock+0x12d/0x2c0 [ 130.965293][T10030] ? cfg80211_dev_free+0x2e6/0x3d0 [ 130.966722][T10030] ? cfg80211_dev_free+0x2e6/0x3d0 [ 130.968173][T10030] ? __pfx_wiphy_dev_release+0x10/0x10 [ 130.969697][T10030] device_release+0xa1/0x240 [ 130.970997][T10030] kobject_put+0x1e4/0x5a0 [ 130.972257][T10030] put_device+0x1f/0x30 [ 130.973432][T10030] wiphy_new_nm+0x1c1f/0x2160 [ 130.974753][T10030] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 130.976587][T10030] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 130.978469][T10030] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 130.979989][T10030] ? __local_bh_enable_ip+0xa4/0x120 [ 130.981475][T10030] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 130.983031][T10030] ? __pfx__printk+0x10/0x10 [ 130.984351][T10030] ? __pfx____ratelimit+0x10/0x10 [ 130.985763][T10030] ? rcu_is_watching+0x12/0xc0 [ 130.987107][T10030] ? do_trace_netlink_extack+0x17b/0x1f0 [ 130.988675][T10030] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 130.990367][T10030] hwsim_new_radio_nl+0xb42/0x12b0 [ 130.991786][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 130.993336][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 130.995376][T10030] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 130.997420][T10030] genl_family_rcv_msg_doit+0x202/0x2f0 [ 130.998970][T10030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 131.000672][T10030] ? bpf_lsm_capable+0x9/0x10 [ 131.002003][T10030] ? security_capable+0x7e/0x260 [ 131.003385][T10030] ? ns_capable+0xd7/0x110 [ 131.004647][T10030] genl_rcv_msg+0x565/0x800 [ 131.005920][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.007319][T10030] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 131.008858][T10030] netlink_rcv_skb+0x16b/0x440 [ 131.010201][T10030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.011602][T10030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.013086][T10030] ? down_read+0xc9/0x330 [ 131.014299][T10030] ? __pfx_down_read+0x10/0x10 [ 131.015637][T10030] ? netlink_deliver_tap+0x1ae/0xd30 [ 131.017115][T10030] genl_rcv+0x28/0x40 [ 131.018245][T10030] netlink_unicast+0x53c/0x7f0 [ 131.019586][T10030] ? __pfx_netlink_unicast+0x10/0x10 [ 131.021070][T10030] netlink_sendmsg+0x8b8/0xd70 [ 131.022403][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.023871][T10030] ____sys_sendmsg+0xaaf/0xc90 [ 131.025244][T10030] ? copy_msghdr_from_user+0x10b/0x160 [ 131.026752][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.028231][T10030] ___sys_sendmsg+0x135/0x1e0 [ 131.029543][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.031000][T10030] ? __pfx_lock_release+0x10/0x10 [ 131.032411][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 131.033851][T10030] ? __fget_files+0x206/0x3a0 [ 131.035250][T10030] __sys_sendmsg+0x16e/0x220 [ 131.036580][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.038050][T10030] do_syscall_64+0xcd/0x250 [ 131.039318][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.040986][T10030] RIP: 0033:0x7f896478d169 [ 131.042225][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.047480][T10030] RSP: 002b:00007f8965574038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.049774][T10030] RAX: ffffffffffffffda RBX: 00007f89649a5fa0 RCX: 00007f896478d169 [ 131.051963][T10030] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 131.054154][T10030] RBP: 00007f8965574090 R08: 0000000000000000 R09: 0000000000000000 [ 131.056337][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.058509][T10030] R13: 0000000000000000 R14: 00007f89649a5fa0 R15: 00007ffe2d3a5928 [ 131.060707][T10030] [ 131.062276][T10030] Kernel Offset: disabled [ 131.063505][T10030] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:58:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a744a80 RCX=ffffffff81ade1ea RDX=ffff888027254880 RSI=ffffffff81ade1c4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003d9f838 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4e8951 R13=0000000000000001 R14=ffff88806a63fe80 R15=ffff88806a744a88 RIP=ffffffff81ade1c6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557abfd500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3de58d56c0 CR3=000000002a4f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe883f2680 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c495 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc9000386ebf8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=65646f6320656854 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c4bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f89655746c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557abfd808 CR3=00000000588c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe883f2680 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3de4c0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000007c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c5fb4 RBX=0000000000000002 RCX=ffffffff8b579469 RDX=ffffed100d506f86 RSI=ffffffff8bd368e0 RDI=ffffffff819082c9 RBP=ffffed1003b5a488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad2440 R14=ffffffff90626c10 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe43c53af98 CR3=0000000031ada000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd901f1230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffea00016e1140 RBX=00fff0000002001c RCX=ffffc90026b82000 RDX=0000000000080000 RSI=0000000000000008 RDI=ffffea00016e1140 RBP=ffffea00016e1140 RSP=ffffc900034cec20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000015023 R12=ffff8880278db048 R13=0000000000000000 R14=0000000000000001 R15=ffffea00016e1140 RIP=ffffffff821d10a0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0629b576c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe43c53bd58 CR3=0000000053c16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b97c488 00007fe43b97c480 00007fe43b97c478 00007fe43b97c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43c4dd100 00007fe43b97c440 00007fe43b97c458 00007fe43b97c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe43b97c498 00007fe43b97c490 00007fe43b97c488 00007fe43b97c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000