last executing test programs: 2m20.741373671s ago: executing program 3 (id=736): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_robust_list(0x0, &(0x7f0000004140)=0x0, &(0x7f0000004180)) 2m20.581465927s ago: executing program 3 (id=738): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2m20.581357861s ago: executing program 3 (id=739): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 2m20.401134802s ago: executing program 3 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0, 0x1000) 2m20.401013019s ago: executing program 3 (id=741): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0xffffffff}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x203, 0x0, 0x3fff}) 2m20.25030516s ago: executing program 3 (id=742): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.240226054s ago: executing program 32 (id=742): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.288199316s ago: executing program 1 (id=2601): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.047115425s ago: executing program 1 (id=2609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x800, 0x4}, 0x8) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x5698, @dev={0xfe, 0x80, '\x00', 0xb}, 0xd1}, 0x1c) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @default, @netrom, @bcast, @remote, @bcast, @remote, @default]}, &(0x7f0000000180)=0x48) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f00000001c0)) shutdown(r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20040084) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x118, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff57dc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4b}}]}, 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x40) recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/117, 0x75}], 0x1}, 0x40) acct(&(0x7f0000000740)='./file0\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind$l2tp6(r4, &(0x7f00000008c0)={0xa, 0x0, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x4}, 0x20) r6 = accept$ax25(r1, &(0x7f0000000900)={{0x3, @rose}, [@null, @bcast, @default, @default, @default, @default, @default]}, &(0x7f0000000980)=0x48) accept$ax25(r6, &(0x7f00000009c0)={{0x3, @bcast}, [@rose, @remote, @remote, @null, @default, @rose, @netrom, @bcast]}, &(0x7f0000000a40)=0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x1c}}, 0x4040000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x7e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x20008080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 43.039578921s ago: executing program 1 (id=2611): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x5887, 0x400, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (fail_nth: 3) 42.937751068s ago: executing program 1 (id=2612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 42.040224175s ago: executing program 1 (id=2620): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xe5c, &(0x7f0000000080)={0x0, 0xeebb, 0x14300, 0x0, 0x2d4, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0x80000000, 0x3ff, 0x5, r2, 0xb, '\x00', r7, r0, 0x4, 0x2, 0x1, 0x3, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4e, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2201}, 0x1}) io_uring_enter(r3, 0x29ed, 0xd5c8, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000004c0)=""/162, &(0x7f0000000100)=0xa2) 41.71071908s ago: executing program 1 (id=2621): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0xe, 0xc, 0xe, 0xb4, 0xfffffffffffffffc, 0x7, 0x26, 0x1ff]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26.320859985s ago: executing program 33 (id=2621): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0xe, 0xc, 0xe, 0xb4, 0xfffffffffffffffc, 0x7, 0x26, 0x1ff]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.749578962s ago: executing program 2 (id=3055): timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/131, 0x83}], 0x5) 1.990006053s ago: executing program 5 (id=3059): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.989712967s ago: executing program 5 (id=3060): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.930030863s ago: executing program 5 (id=3061): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x101a02, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) splice(r3, 0x0, r6, 0x0, 0x9aa7, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"]) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r8) pipe2$9p(&(0x7f00000001c0), 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0xe, 0x6, 0xfffffffffffffffc, 0x0, 0x29]}) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1.828921447s ago: executing program 2 (id=3062): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.828755944s ago: executing program 2 (id=3063): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0xe, 0xc, 0xe, 0xb4, 0xfffffffffffffffc, 0x7, 0x26, 0x1ff]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x700) 1.730386504s ago: executing program 5 (id=3064): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000000)=""/14, 0xe}], 0x3, 0x0, 0x0, 0x200000}, 0x1f00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x58, 0x30, 0x4, 0x100000, 0x0, {}, [{0x44, 0x1, [@m_ife={0x40, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.73026304s ago: executing program 2 (id=3065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="2e0f35b9a80900000f32b9a70200000f326566430fc77291f3480f2d16d1acc10c0000002e6567f20f5af40fc72966b8dd008ec0f3400f06", 0x38}], 0x1, 0x88, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 8) 1.529663582s ago: executing program 2 (id=3070): timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/131, 0x83}], 0x5) 1.43845352s ago: executing program 4 (id=3071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') write$binfmt_script(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.350188366s ago: executing program 0 (id=3072): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) mmap(&(0x7f0000967000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r2, 0x70a79000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x209312, 0x23bf6a}) dup3(r0, r2, 0x0) 1.349801715s ago: executing program 0 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000580)={r0, 0x6ea, 0xf8ea, "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"}) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x102) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x492493a, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r2, 0xc4f, 0x0, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000580)={r0, 0x6ea, 0xf8ea, "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"}) (async) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x102) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000240)) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x492493a, 0x0) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) io_uring_enter(r2, 0xc4f, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x9) (async) 1.280137728s ago: executing program 0 (id=3074): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=g\xaa\xd5\xe9n\xd5\xeas\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9e\x86\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\x00\x00\x00\x00\x00\nj\x8c\xef\x90\x97X\x16:\xe2\xf08\xc0Z\xfa\x1a\xb3\xf0wV\x01\x00d\xf8N\x80\xd1g\xd8e\xc8\x16\xadba\x14\xb8O\xe3\x91\x93\x11\xf0\xc2!\x98\x1a\']\xe5\x1e\xa7\xa6\xcc\x9b\xc1R.\x8aGj+k', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xef, 0x81, 0x4, 0x9, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x1, [{r1, 0x0, 0x2000, 0x8000}]}) 1.279908766s ago: executing program 0 (id=3075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x2000000, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x15, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0xff], 0x4, [0x8, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0df00001300200026bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0000000002000000080023000500000008000d00000100007c0034801400350076657468305f746f5f7465616d0000001400350070696d3672656731000000000000000014003500766574683100000000000000000000001400350073797a5f74756e0000000000000000001400350064756d6d793000000000000000000000140035007665746830000000000000000000000008001b00040000000a000200bbbbbbbbbbbb000008001f00997900000500210040000000"], 0xd0}}, 0x0) 1.189649695s ago: executing program 0 (id=3076): r0 = socket(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x24, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0]}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208", 0x29}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6d07128"], 0x2c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r7, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0xa}, @local, @mcast2, 0xffff, 0x2, 0x9, 0x100, 0x1, 0x20001}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.070280883s ago: executing program 0 (id=3077): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r3) 949.240507ms ago: executing program 4 (id=3078): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 949.070609ms ago: executing program 4 (id=3079): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 948.810521ms ago: executing program 4 (id=3080): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 878.085839ms ago: executing program 5 (id=3081): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000400)=ANY=[@ANYBLOB="060000"]) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000500)={{0x5, 0x5, 0x116d, 0x1356, 'syz0\x00', 0xfffffff2}, 0x4, 0x4, 0x8, r5, 0x9, 0xfffffff2, 'syz1\x00', &(0x7f0000000140)=['\x00', 'keyring\x00', '/dev/kvm\x00', '/dev/hidraw#\x00', 'rxrpc\x00', '/dev/dsp1\x00', '/dev/kvm\x00', '/dev/input/mice\x00', '/dev/hidraw#\x00'], 0x55}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0xfff, 0xb3, 0x4, 0x9, 0x9, 0x2390905c, 0x1}, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r6, &(0x7f0000000080)=""/153, 0x99) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x200140, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r7, 0x8004500f, &(0x7f00000002c0)) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x80) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r8 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x90006) ioctl$HIDIOCGFEATURE(r8, 0x4004480d, 0x0) getdents64(r6, &(0x7f00000001c0)=""/147, 0x93) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r9) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x202d) 877.362272ms ago: executing program 4 (id=3082): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r2, 0x0, &(0x7f0000874000/0x4000)=nil, 0x4000, 0xfffffffffffffffb}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x5}) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r6 = socket$packet(0x11, 0x2, 0x300) keyctl$set_timeout(0xf, 0x0, 0x7) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0xa, 0x1}, 0x7a91, 0x80, &(0x7f0000000040)={0x60, 0x13, 0x8, 0x6, 0x5}, 0x8, 0x8000, 0x0, 0x0, 0x9, 0x7, &(0x7f00000000c0)="5f2123a41f5c2225"}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x9) r9 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r9, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$IPC_RMID(r9, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) lseek(r10, 0x3, 0x1) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x0, r8}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 749.666908ms ago: executing program 4 (id=3083): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="611afb9a9d0c7d41a7f5ee176bba5f072b2e214aa13363073a5f7af8b4ea40f7282b21dfef8227f9bb60d1090e112459", 0x30}, {&(0x7f00000002c0)="3e27afe597c07f51eb3c407fb7a17184de580145515b51881768ca92a035ba16beebc6b29dbd6aa61c2c24914d4e6607d3fb61b8997db62359e8909f725b344b6e6970521fefc4d05bb999f3bd52553f8545e90c3f481cf4c6906aea48e6f97fb83f709d69ad1338fc321bd3610c3b786c8ef67614e3a53638ceb127bf0e541afbbad56ccd224ce9dd9387cd2b308324bd1a0c2ad2e9a97370fa69b63764d747d4f5a21550", 0xa5}, {&(0x7f0000000180)="d581eddfb7703a66afca1b60ccf065cadc1b5227c60a4eb285364f8065d053c08da8a803a476b1f1d3966ede79b5cf076fe3754f6f55061b8fdb5b976d4cf3085774eb87d0b5bd508aac2294c6a86629", 0x50}, {&(0x7f0000000380)="cd75593ad2ac2ef11d8a297c5684863ed4ffb7e0dcb02dc0ed7fb2e4bed4d4ef03d46bd7b993ae7b1a85c614e9777de96cfdf6fca5ff3edba92943ab4a9285587fadac3838258deed880685d36624d323df6e4f903530b246e72127054d5253d69e24b7f36d467bf36beb406083b8cad5825303d33b55f156170f45c97a4564ebdc90134f75f7ac80513ad58a4a2ea3fa59a", 0x92}], 0x4, 0x0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r3}, 0x66) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r5, &(0x7f0000000240)=""/4096, 0xfffffdef) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000010c0)={0x13, 0xffffffff, 0xcbd, 0x3, 0x10, "c187b3a7e5c979b0d066d45eb27803ea28bc0c"}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1407, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r7 = syz_io_uring_setup(0x367a, &(0x7f0000000440)={0x0, 0x5141, 0x400, 0x0, 0x233}, &(0x7f00000004c0), &(0x7f0000000500)) r8 = syz_io_uring_setup(0x16e9, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x404, 0x2e7, 0x0, r7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x1, @private0, 0x2}, 0x1c) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, 0x4}, &(0x7f0000000340)=0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0x14, 0x5, 0x1, 0xc03, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040851}, 0x200600d0) 670.042013ms ago: executing program 2 (id=3084): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x209312, 0x23bf6a}) dup3(r0, r2, 0x3b02) 0s ago: executing program 5 (id=3085): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1b59ded130e0fd83fb81f3d3287772fd29f35239d2000000de0d00000000000000e5ff0900", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x128, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8001, @private0, 0x8}}}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x28}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x65}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000035}, 0x2000c0c1) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x0, 0xffff, 0xa}, {0x0, 0x401, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2, 0x0, 0x7}]}]}, 0xfc}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r7, {0x7, 0x1f, 0xfffffffb, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0xffffffff, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004800)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000000000000000000002f6465762f667573650027be35293a0b70d944da701a3f53a15f9120c8571cdf4146d739c678a5f02bb71860da8c8c317769a7d662980b300fabd8d7f1f80aec21e90bdc10d3b823d79516d24894d5de7d0272305e8bcdecdab2ba80c6070edb2b72b411aad206073082d7d3b67a1b0bd7047a008331d4b7b2af9547b7c0eb3019fe2027fa8f952ccf74bd6f6810ee8247e5f6ff5c8850d11ba7b4754257ece8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r9, r8, 0x0, 0x20000008) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r11, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r11, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0xb, r8, 0x0, r11}) r12 = dup(r1) ioctl$LOOP_CLR_FD(r12, 0x4c01) kernel console output (not intermixed with test programs): 0000000000000000 [ 212.008237][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.008243][T13524] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 212.008255][T13524] [ 212.013888][T13531] FAULT_INJECTION: forcing a failure. [ 212.013888][T13531] name failslab, interval 1, probability 0, space 0, times 0 [ 212.013903][T13531] CPU: 1 UID: 0 PID: 13531 Comm: syz.4.2812 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 212.013915][T13531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.013921][T13531] Call Trace: [ 212.013924][T13531] [ 212.013928][T13531] dump_stack_lvl+0x16c/0x1f0 [ 212.013943][T13531] should_fail_ex+0x50a/0x650 [ 212.013959][T13531] ? fs_reclaim_acquire+0xae/0x150 [ 212.013975][T13531] should_failslab+0xc2/0x120 [ 212.013987][T13531] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 212.013997][T13531] ? __kernfs_new_node+0xd3/0x890 [ 212.014016][T13531] __kernfs_new_node+0xd3/0x890 [ 212.014032][T13531] ? __pfx___kernfs_new_node+0x10/0x10 [ 212.014051][T13531] ? lock_acquire.part.0+0x11b/0x380 [ 212.014071][T13531] ? find_held_lock+0x2d/0x110 [ 212.014085][T13531] kernfs_new_node+0x186/0x240 [ 212.014097][T13531] kernfs_create_link+0xcc/0x240 [ 212.014111][T13531] sysfs_do_create_link_sd+0x90/0x140 [ 212.014126][T13531] sysfs_create_link+0x61/0xc0 [ 212.014141][T13531] driver_sysfs_add+0x91/0x2d0 [ 212.014151][T13531] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 212.014164][T13531] device_bind_driver+0x16/0x70 [ 212.014175][T13531] usb_driver_claim_interface+0x22f/0x400 [ 212.014190][T13531] claimintf+0x17d/0x240 [ 212.014206][T13531] checkintf+0x161/0x1d0 [ 212.014220][T13531] proc_do_submiturb+0x484/0x3b60 [ 212.014236][T13531] ? __pfx_lock_release+0x10/0x10 [ 212.014249][T13531] ? trace_lock_acquire+0x14e/0x1f0 [ 212.014272][T13531] ? lock_acquire+0x2f/0xb0 [ 212.014286][T13531] ? __might_fault+0xe3/0x190 [ 212.014298][T13531] ? __might_fault+0xe3/0x190 [ 212.014313][T13531] usbdev_ioctl+0x3173/0x4010 [ 212.014331][T13531] ? __pfx_usbdev_ioctl+0x10/0x10 [ 212.014346][T13531] ? do_vfs_ioctl+0x513/0x1990 [ 212.014360][T13531] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 212.014377][T13531] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 212.014394][T13531] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 212.014411][T13531] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 212.014429][T13531] ? __pfx_lock_release+0x10/0x10 [ 212.014447][T13531] ? selinux_file_ioctl+0x180/0x270 [ 212.014462][T13531] ? selinux_file_ioctl+0xb4/0x270 [ 212.014478][T13531] ? __pfx_usbdev_ioctl+0x10/0x10 [ 212.014494][T13531] __x64_sys_ioctl+0x190/0x200 [ 212.014509][T13531] do_syscall_64+0xcd/0x250 [ 212.014522][T13531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.014536][T13531] RIP: 0033:0x7fc73798d169 [ 212.014544][T13531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.014553][T13531] RSP: 002b:00007fc7377f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.014562][T13531] RAX: ffffffffffffffda RBX: 00007fc737ba5fa0 RCX: 00007fc73798d169 [ 212.014568][T13531] RDX: 0000400000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 212.014574][T13531] RBP: 00007fc7377f9090 R08: 0000000000000000 R09: 0000000000000000 [ 212.014579][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.014585][T13531] R13: 0000000000000000 R14: 00007fc737ba5fa0 R15: 00007ffd836d4028 [ 212.014597][T13531] [ 212.038875][T13534] QAT: Stopping all acceleration devices. [ 212.039439][T13532] fuse: Bad value for 'user_id' [ 212.040090][ T5947] Bluetooth: hci2: command tx timeout [ 212.253767][T13541] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 212.273154][T13543] FAULT_INJECTION: forcing a failure. [ 212.273154][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 212.276982][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.0.2815 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 212.276994][T13543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.277001][T13543] Call Trace: [ 212.277004][T13543] [ 212.277008][T13543] dump_stack_lvl+0x16c/0x1f0 [ 212.277025][T13543] should_fail_ex+0x50a/0x650 [ 212.277041][T13543] ? fs_reclaim_acquire+0xae/0x150 [ 212.277057][T13543] should_failslab+0xc2/0x120 [ 212.277069][T13543] __kmalloc_node_noprof+0xd1/0x510 [ 212.277081][T13543] ? find_held_lock+0x2d/0x110 [ 212.277092][T13543] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 212.277110][T13543] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 212.277126][T13543] ? __pfx_lock_release+0x10/0x10 [ 212.277143][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.277159][T13543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.277174][T13543] ? avc_has_perm+0x11b/0x1c0 [ 212.277188][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.277199][T13543] vmalloc_noprof+0x6b/0x90 [ 212.277215][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.277226][T13543] sel_write_load+0x2b0/0x1c60 [ 212.277240][T13543] ? __pfx___lock_acquire+0x10/0x10 [ 212.277257][T13543] ? __pfx_sel_write_load+0x10/0x10 [ 212.277271][T13543] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.277286][T13543] ? rcu_is_watching+0x12/0xc0 [ 212.277297][T13543] ? trace_lock_acquire+0x14e/0x1f0 [ 212.277312][T13543] ? __pfx_sel_write_load+0x10/0x10 [ 212.277323][T13543] vfs_write+0x24c/0x1150 [ 212.277333][T13543] ? __fget_files+0x1fc/0x3a0 [ 212.277343][T13543] ? __pfx___mutex_lock+0x10/0x10 [ 212.277356][T13543] ? __pfx_vfs_write+0x10/0x10 [ 212.277369][T13543] ? __fget_files+0x206/0x3a0 [ 212.277382][T13543] ksys_write+0x12b/0x250 [ 212.277417][T13543] ? __pfx_ksys_write+0x10/0x10 [ 212.277429][T13543] do_syscall_64+0xcd/0x250 [ 212.277443][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.277458][T13543] RIP: 0033:0x7f40c198d169 [ 212.277466][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.277475][T13543] RSP: 002b:00007f40c282e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.277485][T13543] RAX: ffffffffffffffda RBX: 00007f40c1ba6080 RCX: 00007f40c198d169 [ 212.277491][T13543] RDX: 000000000000202d RSI: 0000400000000000 RDI: 0000000000000003 [ 212.277496][T13543] RBP: 00007f40c282e090 R08: 0000000000000000 R09: 0000000000000000 [ 212.277502][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.277507][T13543] R13: 0000000000000001 R14: 00007f40c1ba6080 R15: 00007fff8832bac8 [ 212.277519][T13543] [ 212.277583][T13543] warn_alloc: 1 callbacks suppressed [ 212.277589][T13543] syz.0.2815: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.364483][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.0.2815 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 212.364504][T13543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.364514][T13543] Call Trace: [ 212.364519][T13543] [ 212.364526][T13543] dump_stack_lvl+0x16c/0x1f0 [ 212.364553][T13543] warn_alloc+0x24d/0x3a0 [ 212.364573][T13543] ? __pfx_warn_alloc+0x10/0x10 [ 212.364589][T13543] ? dump_stack_lvl+0x1a3/0x1f0 [ 212.364617][T13543] ? rcu_is_watching+0x12/0xc0 [ 212.364635][T13543] ? trace_kmalloc+0x2d/0xd0 [ 212.364654][T13543] ? __kmalloc_node_noprof+0x23d/0x510 [ 212.364679][T13543] __vmalloc_node_range_noprof+0x1102/0x1530 [ 212.364704][T13543] ? __pfx_lock_release+0x10/0x10 [ 212.364733][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.364760][T13543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.364785][T13543] ? avc_has_perm+0x11b/0x1c0 [ 212.364808][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.364836][T13543] vmalloc_noprof+0x6b/0x90 [ 212.364860][T13543] ? sel_write_load+0x2b0/0x1c60 [ 212.364879][T13543] sel_write_load+0x2b0/0x1c60 [ 212.364903][T13543] ? __pfx___lock_acquire+0x10/0x10 [ 212.364932][T13543] ? __pfx_sel_write_load+0x10/0x10 [ 212.364956][T13543] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.364980][T13543] ? rcu_is_watching+0x12/0xc0 [ 212.364997][T13543] ? trace_lock_acquire+0x14e/0x1f0 [ 212.365023][T13543] ? __pfx_sel_write_load+0x10/0x10 [ 212.365043][T13543] vfs_write+0x24c/0x1150 [ 212.365060][T13543] ? __fget_files+0x1fc/0x3a0 [ 212.365077][T13543] ? __pfx___mutex_lock+0x10/0x10 [ 212.365099][T13543] ? __pfx_vfs_write+0x10/0x10 [ 212.365121][T13543] ? __fget_files+0x206/0x3a0 [ 212.365144][T13543] ksys_write+0x12b/0x250 [ 212.365159][T13543] ? __pfx_ksys_write+0x10/0x10 [ 212.365181][T13543] do_syscall_64+0xcd/0x250 [ 212.365204][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.365226][T13543] RIP: 0033:0x7f40c198d169 [ 212.365240][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.365255][T13543] RSP: 002b:00007f40c282e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.365269][T13543] RAX: ffffffffffffffda RBX: 00007f40c1ba6080 RCX: 00007f40c198d169 [ 212.365279][T13543] RDX: 000000000000202d RSI: 0000400000000000 RDI: 0000000000000003 [ 212.365289][T13543] RBP: 00007f40c282e090 R08: 0000000000000000 R09: 0000000000000000 [ 212.365298][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.365307][T13543] R13: 0000000000000001 R14: 00007f40c1ba6080 R15: 00007fff8832bac8 [ 212.365330][T13543] [ 212.365336][T13543] Mem-Info: [ 212.445050][T13543] active_anon:10969 inactive_anon:0 isolated_anon:0 [ 212.445050][T13543] active_file:8981 inactive_file:42194 isolated_file:0 [ 212.445050][T13543] unevictable:1767 dirty:3294 writeback:0 [ 212.445050][T13543] slab_reclaimable:8243 slab_unreclaimable:79662 [ 212.445050][T13543] mapped:24212 shmem:2475 pagetables:1105 [ 212.445050][T13543] sec_pagetables:300 bounce:0 [ 212.445050][T13543] kernel_misc_reclaimable:0 [ 212.445050][T13543] free:448538 free_pcp:3952 free_cma:0 [ 212.457773][T13543] Node 0 active_anon:43876kB inactive_anon:0kB active_file:35920kB inactive_file:168768kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:96848kB dirty:13176kB writeback:0kB shmem:6364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:12752kB pagetables:4420kB sec_pagetables:1200kB all_unreclaimable? no [ 212.466621][T13543] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 212.474877][T13543] Node 0 DMA free:15164kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:68kB free_cma:0kB [ 212.482406][T13543] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 212.484078][T13543] Node 0 DMA32 free:190596kB boost:6144kB min:33752kB low:40652kB high:47552kB reserved_highatomic:4096KB active_anon:43876kB inactive_anon:0kB active_file:35920kB inactive_file:168768kB unevictable:3532kB writepending:13176kB present:2080628kB managed:1270132kB mlocked:0kB bounce:0kB free_pcp:13776kB local_pcp:3832kB free_cma:0kB [ 212.492598][T13543] lowmem_reserve[]: 0 0 0 0 0 [ 212.494022][T13543] Node 1 Normal free:1588392kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:12288KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2348kB local_pcp:192kB free_cma:0kB [ 212.501864][T13543] lowmem_reserve[]: 0 0 0 0 0 [ 212.503270][T13543] Node 0 DMA: 7*4kB (UM) 6*8kB (UM) 5*16kB (UM) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 15164kB [ 212.507874][T13543] Node 0 DMA32: 117*4kB (UME) 373*8kB (UME) 184*16kB (UME) 824*32kB (UME) 377*64kB (UME) 75*128kB (UME) 35*256kB (UME) 17*512kB (UME) 27*1024kB (UME) 17*2048kB (UMH) 11*4096kB (UM) = 191676kB [ 212.513239][T13543] Node 1 Normal: 3*4kB (UE) 7*8kB (ME) 8*16kB (UE) 117*32kB (UME) 71*64kB (UME) 27*128kB (UME) 10*256kB (UE) 8*512kB (UM) 3*1024kB (U) 3*2048kB (UME) 381*4096kB (UMH) = 1588388kB [ 212.518292][T13543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.520963][T13543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.523612][T13543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.526663][T13543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.529427][T13543] 53650 total pagecache pages [ 212.530813][T13543] 0 pages in swap cache [ 212.532031][T13543] Free swap = 124508kB [ 212.533252][T13543] Total swap = 124996kB [ 212.534682][T13543] 1048443 pages RAM [ 212.535898][T13543] 0 pages HighMem/MovableOnly [ 212.537231][T13543] 281589 pages reserved [ 212.538422][T13543] 0 pages cma reserved [ 212.540869][T13553] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 212.543819][T13553] SELinux: failed to load policy [ 212.703309][T13558] FAULT_INJECTION: forcing a failure. [ 212.703309][T13558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.707499][T13558] CPU: 0 UID: 0 PID: 13558 Comm: syz.4.2821 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 212.707513][T13558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.707521][T13558] Call Trace: [ 212.707526][T13558] [ 212.707532][T13558] dump_stack_lvl+0x16c/0x1f0 [ 212.707554][T13558] should_fail_ex+0x50a/0x650 [ 212.707577][T13558] _copy_to_user+0x32/0xd0 [ 212.707588][T13558] video_usercopy+0xf3e/0x1620 [ 212.707600][T13558] ? __pfx___video_do_ioctl+0x10/0x10 [ 212.707611][T13558] ? __pfx_video_usercopy+0x10/0x10 [ 212.707642][T13558] v4l2_ioctl+0x1ba/0x250 [ 212.707652][T13558] ? __pfx_v4l2_ioctl+0x10/0x10 [ 212.707663][T13558] __x64_sys_ioctl+0x190/0x200 [ 212.707678][T13558] do_syscall_64+0xcd/0x250 [ 212.707692][T13558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.707707][T13558] RIP: 0033:0x7fc73798d169 [ 212.707715][T13558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.707724][T13558] RSP: 002b:00007fc7377f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.707734][T13558] RAX: ffffffffffffffda RBX: 00007fc737ba5fa0 RCX: 00007fc73798d169 [ 212.707740][T13558] RDX: 00004000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 212.707746][T13558] RBP: 00007fc7377f9090 R08: 0000000000000000 R09: 0000000000000000 [ 212.707752][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.707757][T13558] R13: 0000000000000000 R14: 00007fc737ba5fa0 R15: 00007ffd836d4028 [ 212.707769][T13558] [ 212.757273][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.856464][ T40] audit: type=1400 audit(1741538677.441:39514): avc: denied { create } for pid=13563 comm="syz.2.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 212.959722][T13575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2827'. [ 212.963002][T13575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2827'. [ 212.973555][ T40] audit: type=1400 audit(1741538677.561:39515): avc: denied { listen } for pid=13574 comm="syz.2.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.096401][ T40] audit: type=1400 audit(1741538677.681:39516): avc: denied { connect } for pid=13576 comm="syz.0.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.183916][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 213.447501][T13596] FAULT_INJECTION: forcing a failure. [ 213.447501][T13596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.451254][T13596] CPU: 0 UID: 0 PID: 13596 Comm: syz.2.2836 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 213.451269][T13596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.451275][T13596] Call Trace: [ 213.451278][T13596] [ 213.451282][T13596] dump_stack_lvl+0x16c/0x1f0 [ 213.451299][T13596] should_fail_ex+0x50a/0x650 [ 213.451317][T13596] _copy_to_user+0x32/0xd0 [ 213.451330][T13596] simple_read_from_buffer+0xd0/0x160 [ 213.451347][T13596] proc_fail_nth_read+0x198/0x270 [ 213.451361][T13596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.451376][T13596] ? rw_verify_area+0xcf/0x680 [ 213.451391][T13596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.451404][T13596] vfs_read+0x1df/0xbf0 [ 213.451420][T13596] ? __fget_files+0x1fc/0x3a0 [ 213.451431][T13596] ? __pfx___mutex_lock+0x10/0x10 [ 213.451444][T13596] ? __pfx_vfs_read+0x10/0x10 [ 213.451463][T13596] ? __fget_files+0x206/0x3a0 [ 213.451476][T13596] ksys_read+0x12b/0x250 [ 213.451484][T13596] ? __pfx_ksys_read+0x10/0x10 [ 213.451497][T13596] do_syscall_64+0xcd/0x250 [ 213.451511][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.451525][T13596] RIP: 0033:0x7f037058bb7c [ 213.451533][T13596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.451543][T13596] RSP: 002b:00007f0371456030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.451553][T13596] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058bb7c [ 213.451558][T13596] RDX: 000000000000000f RSI: 00007f03714560a0 RDI: 0000000000000004 [ 213.451564][T13596] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 213.451570][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.451575][T13596] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 213.451587][T13596] [ 213.510809][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.530557][ T40] audit: type=1400 audit(1741538678.121:39517): avc: denied { read } for pid=13597 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.583885][ T40] audit: type=1400 audit(1741538678.171:39518): avc: denied { write } for pid=13597 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.640624][T13599] netlink: 'syz.2.2837': attribute type 21 has an invalid length. [ 213.643761][T13599] netlink: 'syz.2.2837': attribute type 20 has an invalid length. [ 213.646839][T13599] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.677368][ T40] audit: type=1400 audit(1741538678.261:39519): avc: denied { read } for pid=13601 comm="syz.4.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 213.683199][T13603] capability: warning: `syz.4.2839' uses deprecated v2 capabilities in a way that may be insecure [ 213.757401][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 213.760080][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 213.937070][ T5982] IPVS: starting estimator thread 0... [ 213.981238][T13620] netlink: 'syz.2.2846': attribute type 64 has an invalid length. [ 213.983453][T13620] netlink: 'syz.2.2846': attribute type 4 has an invalid length. [ 213.985595][T13620] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2846'. [ 214.029547][T13618] IPVS: using max 36 ests per chain, 86400 per kthread [ 214.082574][T13628] FAULT_INJECTION: forcing a failure. [ 214.082574][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 214.086308][T13628] CPU: 2 UID: 0 PID: 13628 Comm: syz.0.2845 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 214.086322][T13628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.086328][T13628] Call Trace: [ 214.086332][T13628] [ 214.086336][T13628] dump_stack_lvl+0x16c/0x1f0 [ 214.086354][T13628] should_fail_ex+0x50a/0x650 [ 214.086370][T13628] ? fs_reclaim_acquire+0xae/0x150 [ 214.086386][T13628] ? iopt_area_add_access+0x1b0/0x380 [ 214.086396][T13628] should_failslab+0xc2/0x120 [ 214.086408][T13628] __kmalloc_cache_noprof+0x68/0x410 [ 214.086427][T13628] iopt_area_add_access+0x1b0/0x380 [ 214.086438][T13628] iommufd_access_pin_pages+0x634/0xa10 [ 214.086458][T13628] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 214.086475][T13628] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 214.086495][T13628] iommufd_test+0x3187/0x44b0 [ 214.086510][T13628] ? __pfx_iommufd_test+0x10/0x10 [ 214.086522][T13628] ? __pfx_lock_release+0x10/0x10 [ 214.086536][T13628] ? trace_lock_acquire+0x14e/0x1f0 [ 214.086548][T13628] ? __pfx_lock_release+0x10/0x10 [ 214.086562][T13628] ? lock_acquire+0x2f/0xb0 [ 214.086575][T13628] ? __might_fault+0xe3/0x190 [ 214.086587][T13628] ? __might_fault+0xe3/0x190 [ 214.086602][T13628] iommufd_fops_ioctl+0x359/0x4f0 [ 214.086617][T13628] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 214.086630][T13628] ? __pfx_lock_release+0x10/0x10 [ 214.086649][T13628] ? selinux_file_ioctl+0x180/0x270 [ 214.086665][T13628] ? selinux_file_ioctl+0xb4/0x270 [ 214.086681][T13628] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 214.086696][T13628] __x64_sys_ioctl+0x190/0x200 [ 214.086711][T13628] do_syscall_64+0xcd/0x250 [ 214.086726][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.086740][T13628] RIP: 0033:0x7f40c198d169 [ 214.086748][T13628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.086758][T13628] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.086768][T13628] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 214.086774][T13628] RDX: 0000400000000480 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 214.086779][T13628] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.086784][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.086790][T13628] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 214.086802][T13628] [ 214.139686][ T5947] Bluetooth: hci2: command tx timeout [ 214.183616][T13630] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 214.225922][T13630] overlayfs: conflicting options: metacopy=off,verity=on [ 214.295210][T13638] FAULT_INJECTION: forcing a failure. [ 214.295210][T13638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.298791][T13638] CPU: 2 UID: 0 PID: 13638 Comm: syz.2.2851 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 214.298807][T13638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.298813][T13638] Call Trace: [ 214.298816][T13638] [ 214.298820][T13638] dump_stack_lvl+0x16c/0x1f0 [ 214.298836][T13638] should_fail_ex+0x50a/0x650 [ 214.298854][T13638] _copy_from_user+0x2e/0xd0 [ 214.298865][T13638] memdup_user+0x71/0xd0 [ 214.298880][T13638] udmabuf_ioctl+0x271/0x310 [ 214.298892][T13638] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 214.298906][T13638] ? selinux_file_ioctl+0xb4/0x270 [ 214.298923][T13638] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 214.298934][T13638] __x64_sys_ioctl+0x190/0x200 [ 214.298950][T13638] do_syscall_64+0xcd/0x250 [ 214.298977][T13638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.298994][T13638] RIP: 0033:0x7f037058d169 [ 214.299002][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.299012][T13638] RSP: 002b:00007f0371456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.299021][T13638] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058d169 [ 214.299027][T13638] RDX: 00004000000000c0 RSI: 0000000040087543 RDI: 0000000000000003 [ 214.299032][T13638] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 214.299038][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.299044][T13638] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 214.299055][T13638] [ 214.365430][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 214.371807][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2852'. [ 214.401647][T13650] FAULT_INJECTION: forcing a failure. [ 214.401647][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 214.405283][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.0.2856 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 214.405296][T13650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.405302][T13650] Call Trace: [ 214.405306][T13650] [ 214.405310][T13650] dump_stack_lvl+0x16c/0x1f0 [ 214.405326][T13650] should_fail_ex+0x50a/0x650 [ 214.405343][T13650] ? fs_reclaim_acquire+0xae/0x150 [ 214.405358][T13650] should_failslab+0xc2/0x120 [ 214.405371][T13650] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 214.405381][T13650] ? __local_bh_enable_ip+0xa4/0x120 [ 214.405397][T13650] ? __alloc_skb+0x2b1/0x380 [ 214.405413][T13650] __alloc_skb+0x2b1/0x380 [ 214.405426][T13650] ? __pfx___alloc_skb+0x10/0x10 [ 214.405438][T13650] ? inet_diag_handler_cmd+0x1c0/0x2e0 [ 214.405451][T13650] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 214.405464][T13650] ? trace_lock_acquire+0x14e/0x1f0 [ 214.405486][T13650] netlink_ack+0x15f/0xb80 [ 214.405507][T13650] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 214.405528][T13650] netlink_rcv_skb+0x348/0x440 [ 214.405548][T13650] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 214.405567][T13650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.405597][T13650] ? netlink_deliver_tap+0x1ae/0xd30 [ 214.405613][T13650] netlink_unicast+0x53c/0x7f0 [ 214.405628][T13650] ? __pfx_netlink_unicast+0x10/0x10 [ 214.405645][T13650] netlink_sendmsg+0x8b8/0xd70 [ 214.405660][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.405678][T13650] sock_write_iter+0x4fe/0x5b0 [ 214.405689][T13650] ? __pfx_sock_write_iter+0x10/0x10 [ 214.405705][T13650] ? __pfx_file_has_perm+0x10/0x10 [ 214.405718][T13650] do_iter_readv_writev+0x655/0x950 [ 214.405734][T13650] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 214.405749][T13650] ? selinux_file_permission+0x11f/0x580 [ 214.405766][T13650] ? bpf_lsm_file_permission+0x9/0x10 [ 214.405776][T13650] ? security_file_permission+0x71/0x210 [ 214.405793][T13650] ? rw_verify_area+0xcf/0x680 [ 214.405808][T13650] vfs_writev+0x363/0xdd0 [ 214.405821][T13650] ? find_held_lock+0x2d/0x110 [ 214.405835][T13650] ? __pfx_vfs_writev+0x10/0x10 [ 214.405848][T13650] ? find_held_lock+0x2d/0x110 [ 214.405861][T13650] ? __pfx_lock_release+0x10/0x10 [ 214.405875][T13650] ? trace_lock_acquire+0x14e/0x1f0 [ 214.405890][T13650] ? __fget_files+0x206/0x3a0 [ 214.405903][T13650] ? do_writev+0x297/0x340 [ 214.405917][T13650] do_writev+0x297/0x340 [ 214.405931][T13650] ? __pfx_do_writev+0x10/0x10 [ 214.405948][T13650] do_syscall_64+0xcd/0x250 [ 214.405963][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.405977][T13650] RIP: 0033:0x7f40c198d169 [ 214.405985][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.405994][T13650] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 214.406003][T13650] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 214.406009][T13650] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003 [ 214.406015][T13650] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.406020][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.406026][T13650] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 214.406041][T13650] [ 214.455556][T13656] FAULT_INJECTION: forcing a failure. [ 214.455556][T13656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.510365][T13656] CPU: 3 UID: 0 PID: 13656 Comm: syz.5.2858 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 214.510379][T13656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.510386][T13656] Call Trace: [ 214.510389][T13656] [ 214.510392][T13656] dump_stack_lvl+0x16c/0x1f0 [ 214.510409][T13656] should_fail_ex+0x50a/0x650 [ 214.510428][T13656] _copy_from_iter+0x2a1/0x1560 [ 214.510438][T13656] ? register_lock_class+0xb1/0x1240 [ 214.510454][T13656] ? __pfx__copy_from_iter+0x10/0x10 [ 214.510463][T13656] ? __lock_acquire+0xcc5/0x3c40 [ 214.510478][T13656] ? hlock_class+0x4e/0x130 [ 214.510488][T13656] ? __lock_acquire+0xcc5/0x3c40 [ 214.510504][T13656] tun_get_user+0x34e/0x3e50 [ 214.510525][T13656] ? __pfx_tun_get_user+0x10/0x10 [ 214.510540][T13656] ? find_held_lock+0x2d/0x110 [ 214.510553][T13656] ? __pfx_lock_release+0x10/0x10 [ 214.510572][T13656] tun_chr_write_iter+0xdc/0x210 [ 214.510581][T13656] vfs_write+0x5ae/0x1150 [ 214.510591][T13656] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 214.510602][T13656] ? __pfx_vfs_write+0x10/0x10 [ 214.510611][T13656] ? __fget_files+0x40/0x3a0 [ 214.510627][T13656] ksys_write+0x12b/0x250 [ 214.510635][T13656] ? __pfx_ksys_write+0x10/0x10 [ 214.510647][T13656] do_syscall_64+0xcd/0x250 [ 214.510662][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.510676][T13656] RIP: 0033:0x7f61ce78d169 [ 214.510684][T13656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.510693][T13656] RSP: 002b:00007f61cf6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.510703][T13656] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78d169 [ 214.510709][T13656] RDX: 000000000000fdef RSI: 0000400000000240 RDI: 0000000000000003 [ 214.510714][T13656] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 214.510720][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.510725][T13656] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 214.510736][T13656] [ 214.524831][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 214.560787][ T40] audit: type=1400 audit(1741538679.151:39520): avc: denied { accept } for pid=13658 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 214.586883][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 214.601973][T13666] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 214.606191][ T1144] bridge_slave_1: left allmulticast mode [ 214.608039][ T1144] bridge_slave_1: left promiscuous mode [ 214.610258][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.613076][ T1144] bridge_slave_0: left allmulticast mode [ 214.614778][ T1144] bridge_slave_0: left promiscuous mode [ 214.616477][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.203380][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.206389][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.209429][ T1144] bond0 (unregistering): Released all slaves [ 215.367961][ T1144] hsr_slave_0: left promiscuous mode [ 215.369768][ T1144] hsr_slave_1: left promiscuous mode [ 215.371537][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.373905][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.546980][ T40] audit: type=1400 audit(1741538680.131:39521): avc: denied { write } for pid=13687 comm="syz.0.2866" name="/" dev="9p" ino=36831268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.554005][ T40] audit: type=1400 audit(1741538680.131:39522): avc: denied { remove_name } for pid=13687 comm="syz.0.2866" name="file0" dev="9p" ino=36831269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.560456][ T40] audit: type=1400 audit(1741538680.131:39523): avc: denied { unlink } for pid=13687 comm="syz.0.2866" name="file0" dev="9p" ino=36831269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.571169][ T40] audit: type=1400 audit(1741538680.161:39524): avc: denied { add_name } for pid=13687 comm="syz.0.2866" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.577064][ T40] audit: type=1400 audit(1741538680.161:39525): avc: denied { create } for pid=13687 comm="syz.0.2866" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.582907][ T40] audit: type=1400 audit(1741538680.161:39526): avc: denied { associate } for pid=13687 comm="syz.0.2866" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.594133][ T40] audit: type=1400 audit(1741538680.191:39527): avc: denied { append } for pid=13687 comm="syz.0.2866" path="/105/file0/net_prio.prioidx" dev="9p" ino=36831269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.612214][ T40] audit: type=1400 audit(1741538680.201:39528): avc: denied { ioctl } for pid=13687 comm="syz.0.2866" path="/105/file0/net_prio.prioidx" dev="9p" ino=36831269 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.040476][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 216.116577][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 216.199800][ T5947] Bluetooth: hci2: command tx timeout [ 216.365733][T13709] program syz.4.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.781853][T13721] FAULT_INJECTION: forcing a failure. [ 216.781853][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 216.789436][ T40] audit: type=1400 audit(1741538681.371:39529): avc: denied { listen } for pid=13722 comm="syz.5.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.791936][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.4.2879 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 216.791951][T13721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.791958][T13721] Call Trace: [ 216.791961][T13721] [ 216.791965][T13721] dump_stack_lvl+0x16c/0x1f0 [ 216.791982][T13721] should_fail_ex+0x50a/0x650 [ 216.791999][T13721] ? fs_reclaim_acquire+0xae/0x150 [ 216.792015][T13721] ? genl_start+0x1e7/0x960 [ 216.792029][T13721] should_failslab+0xc2/0x120 [ 216.792041][T13721] __kmalloc_cache_noprof+0x68/0x410 [ 216.792057][T13721] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 216.792076][T13721] genl_start+0x1e7/0x960 [ 216.792092][T13721] __netlink_dump_start+0x607/0x970 [ 216.792107][T13721] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 216.792123][T13721] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 216.792139][T13721] ? rcu_is_watching+0x12/0xc0 [ 216.792152][T13721] ? __pfx_genl_start+0x10/0x10 [ 216.792166][T13721] ? __pfx_genl_dumpit+0x10/0x10 [ 216.792180][T13721] ? __pfx_genl_done+0x10/0x10 [ 216.792195][T13721] ? bpf_lsm_capable+0x9/0x10 [ 216.792207][T13721] ? security_capable+0x7e/0x260 [ 216.792219][T13721] ? ns_capable+0xd7/0x110 [ 216.792235][T13721] genl_rcv_msg+0x470/0x800 [ 216.792252][T13721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.792267][T13721] ? __pfx_batadv_tt_global_dump+0x10/0x10 [ 216.792279][T13721] ? __pfx___lock_acquire+0x10/0x10 [ 216.792296][T13721] netlink_rcv_skb+0x16b/0x440 [ 216.792309][T13721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.792324][T13721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.792342][T13721] ? down_read+0xc9/0x330 [ 216.792356][T13721] ? __pfx_down_read+0x10/0x10 [ 216.792370][T13721] ? netlink_deliver_tap+0x1ae/0xd30 [ 216.792384][T13721] genl_rcv+0x28/0x40 [ 216.792397][T13721] netlink_unicast+0x53c/0x7f0 [ 216.792412][T13721] ? __pfx_netlink_unicast+0x10/0x10 [ 216.792429][T13721] netlink_sendmsg+0x8b8/0xd70 [ 216.792444][T13721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.792462][T13721] ____sys_sendmsg+0xaaf/0xc90 [ 216.792473][T13721] ? copy_msghdr_from_user+0x10b/0x160 [ 216.792487][T13721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.792504][T13721] ___sys_sendmsg+0x135/0x1e0 [ 216.792519][T13721] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.792538][T13721] ? __pfx_lock_release+0x10/0x10 [ 216.792551][T13721] ? trace_lock_acquire+0x14e/0x1f0 [ 216.792567][T13721] ? __fget_files+0x206/0x3a0 [ 216.792580][T13721] __sys_sendmsg+0x16e/0x220 [ 216.792594][T13721] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.792617][T13721] do_syscall_64+0xcd/0x250 [ 216.792631][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.792645][T13721] RIP: 0033:0x7fc73798d169 [ 216.792653][T13721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.792663][T13721] RSP: 002b:00007fc7377f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.792673][T13721] RAX: ffffffffffffffda RBX: 00007fc737ba5fa0 RCX: 00007fc73798d169 [ 216.792679][T13721] RDX: 0000000000000000 RSI: 0000400000004340 RDI: 0000000000000003 [ 216.792684][T13721] RBP: 00007fc7377f9090 R08: 0000000000000000 R09: 0000000000000000 [ 216.792690][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.792695][T13721] R13: 0000000000000000 R14: 00007fc737ba5fa0 R15: 00007ffd836d4028 [ 216.792707][T13721] [ 216.888496][T13734] loop6: detected capacity change from 0 to 63 [ 216.890431][T13731] dns_resolver: Unsupported server list version (0) [ 216.892641][ C3] blk_print_req_error: 44 callbacks suppressed [ 216.892650][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.896856][ C3] buffer_io_error: 43 callbacks suppressed [ 216.896863][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.905316][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.907864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.915890][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.919869][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.924886][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.928352][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.931554][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.934090][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.936483][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.939950][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.943634][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.947296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.952755][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.956198][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.959081][T13734] ldm_validate_partition_table(): Disk read failed. [ 216.962657][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.966064][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.972288][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 216.975425][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.978242][T13734] Dev loop6: unable to read RDB block 0 [ 216.980862][T13734] loop6: unable to read partition table [ 216.982912][T13734] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 217.129609][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 217.256997][T13751] loop6: detected capacity change from 0 to 63 [ 217.259779][T13751] ldm_validate_partition_table(): Disk read failed. [ 217.261996][T13751] Dev loop6: unable to read RDB block 0 [ 217.264025][T13751] loop6: unable to read partition table [ 217.265592][T13751] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 217.300860][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 217.304030][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 217.309548][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.313053][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.315545][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.318820][ T10] usb 9-1: config 0 descriptor?? [ 217.320781][T13735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.639727][ T64] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 217.726906][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 217.730015][ T10] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 217.733318][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 217.791038][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.794823][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.798274][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.804955][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.807517][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.811184][ T64] usb 7-1: config 0 descriptor?? [ 217.929839][T13771] netlink: 'syz.5.2900': attribute type 22 has an invalid length. [ 218.219850][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 218.221603][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 218.226915][ T64] usb 7-1: USB disconnect, device number 25 [ 218.242466][T13787] __nla_validate_parse: 11 callbacks suppressed [ 218.242477][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 218.383417][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 218.386196][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'. [ 218.501815][T13798] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 218.831469][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 218.936047][T13820] sctp: [Deprecated]: syz.0.2915 (pid 13820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.936047][T13820] Use struct sctp_sack_info instead [ 218.962562][T13820] SELinux: policydb magic number 0x6e696466 does not match expected magic number 0xf97cff8c [ 218.965488][T13820] SELinux: failed to load policy [ 219.002471][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 219.005616][T13826] netlink: 'syz.5.2918': attribute type 30 has an invalid length. [ 219.009953][T13826] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.013130][T13826] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.016252][T13826] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.019403][T13826] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.079379][T13830] FAULT_INJECTION: forcing a failure. [ 219.079379][T13830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.084554][T13830] CPU: 0 UID: 0 PID: 13830 Comm: syz.2.2920 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 219.084568][T13830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.084575][T13830] Call Trace: [ 219.084578][T13830] [ 219.084582][T13830] dump_stack_lvl+0x16c/0x1f0 [ 219.084599][T13830] should_fail_ex+0x50a/0x650 [ 219.084617][T13830] _copy_to_user+0x32/0xd0 [ 219.084628][T13830] simple_read_from_buffer+0xd0/0x160 [ 219.084645][T13830] proc_fail_nth_read+0x198/0x270 [ 219.084661][T13830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.084675][T13830] ? rw_verify_area+0xcf/0x680 [ 219.084689][T13830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.084703][T13830] vfs_read+0x1df/0xbf0 [ 219.084718][T13830] ? __fget_files+0x1fc/0x3a0 [ 219.084733][T13830] ? __pfx___mutex_lock+0x10/0x10 [ 219.084746][T13830] ? __pfx_vfs_read+0x10/0x10 [ 219.084765][T13830] ? __fget_files+0x206/0x3a0 [ 219.084778][T13830] ksys_read+0x12b/0x250 [ 219.084786][T13830] ? __pfx_ksys_read+0x10/0x10 [ 219.084798][T13830] do_syscall_64+0xcd/0x250 [ 219.084812][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.084827][T13830] RIP: 0033:0x7f037058bb7c [ 219.084835][T13830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.084844][T13830] RSP: 002b:00007f0371456030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.084853][T13830] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058bb7c [ 219.084859][T13830] RDX: 000000000000000f RSI: 00007f03714560a0 RDI: 0000000000000006 [ 219.084865][T13830] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 219.084870][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.084875][T13830] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 219.084890][T13830] [ 219.169543][ T64] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 219.439572][ T6001] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 219.459554][ T58] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 219.599618][ T6001] usb 10-1: Using ep0 maxpacket: 8 [ 219.603408][ T6001] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 219.605826][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.609025][ T6001] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.612436][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.615592][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.619842][ T6001] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 219.622044][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.625045][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.627717][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.631307][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.634353][ T6001] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.637541][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.641446][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.644422][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.647006][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.650828][ T58] usb 7-1: config 0 descriptor?? [ 219.655625][ T6001] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 219.657751][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.661019][ T6001] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.664189][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.667016][ T6001] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.673800][ T6001] usb 10-1: string descriptor 0 read error: -22 [ 219.675923][ T6001] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 219.678356][ T6001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.683914][ T6001] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 219.827868][T13838] FAULT_INJECTION: forcing a failure. [ 219.827868][T13838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.831151][T13838] CPU: 3 UID: 0 PID: 13838 Comm: syz.0.2923 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 219.831164][T13838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.831171][T13838] Call Trace: [ 219.831175][T13838] [ 219.831178][T13838] dump_stack_lvl+0x16c/0x1f0 [ 219.831207][T13838] should_fail_ex+0x50a/0x650 [ 219.831225][T13838] copy_page_from_iter_atomic+0x39f/0x1920 [ 219.831242][T13838] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 219.831254][T13838] ? shmem_write_begin+0x177/0x300 [ 219.831268][T13838] ? __pfx_fault_in_readable+0x10/0x10 [ 219.831283][T13838] ? __pfx_shmem_write_begin+0x10/0x10 [ 219.831301][T13838] generic_perform_write+0x4a1/0x920 [ 219.831318][T13838] ? __pfx_generic_perform_write+0x10/0x10 [ 219.831332][T13838] ? inode_needs_update_time.part.0+0x191/0x270 [ 219.831348][T13838] shmem_file_write_iter+0x10e/0x140 [ 219.831365][T13838] vfs_write+0x5ae/0x1150 [ 219.831375][T13838] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 219.831391][T13838] ? __pfx___mutex_lock+0x10/0x10 [ 219.831405][T13838] ? __pfx_vfs_write+0x10/0x10 [ 219.831421][T13838] ksys_write+0x12b/0x250 [ 219.831430][T13838] ? __pfx_ksys_write+0x10/0x10 [ 219.831443][T13838] do_syscall_64+0xcd/0x250 [ 219.831457][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.831471][T13838] RIP: 0033:0x7f40c198d169 [ 219.831479][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.831489][T13838] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.831498][T13838] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 219.831504][T13838] RDX: 0000000000001006 RSI: 0000400000000580 RDI: 0000000000000003 [ 219.831510][T13838] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.831515][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.831521][T13838] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 219.831533][T13838] [ 219.887605][ T26] usb 10-1: USB disconnect, device number 2 [ 220.162144][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 220.163930][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 220.166604][ T58] usb 7-1: USB disconnect, device number 26 [ 220.299616][ T64] usb 9-1: device descriptor read/64, error -71 [ 220.539599][ T64] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 220.696594][T13847] FAULT_INJECTION: forcing a failure. [ 220.696594][T13847] name failslab, interval 1, probability 0, space 0, times 0 [ 220.700429][T13847] CPU: 1 UID: 0 PID: 13847 Comm: syz.2.2926 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 220.700450][T13847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.700459][T13847] Call Trace: [ 220.700464][T13847] [ 220.700470][T13847] dump_stack_lvl+0x16c/0x1f0 [ 220.700495][T13847] should_fail_ex+0x50a/0x650 [ 220.700518][T13847] ? fs_reclaim_acquire+0xae/0x150 [ 220.700544][T13847] ? sock_kmalloc+0x111/0x170 [ 220.700558][T13847] should_failslab+0xc2/0x120 [ 220.700575][T13847] __kmalloc_noprof+0xcb/0x510 [ 220.700590][T13847] ? skcipher_recvmsg+0xb5/0x1020 [ 220.700609][T13847] sock_kmalloc+0x111/0x170 [ 220.700627][T13847] af_alg_alloc_areq+0xbc/0x2e0 [ 220.700651][T13847] skcipher_recvmsg+0x326/0x1020 [ 220.700656][ T64] usb 9-1: device firmware changed [ 220.700672][T13847] ? find_held_lock+0x2d/0x110 [ 220.700689][T13847] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 220.700722][T13847] sock_recvmsg+0x1f6/0x250 [ 220.700740][T13847] ____sys_recvmsg+0x219/0x6b0 [ 220.700761][T13847] ? __pfx_____sys_recvmsg+0x10/0x10 [ 220.700795][T13847] ___sys_recvmsg+0x115/0x1a0 [ 220.700818][T13847] ? __pfx____sys_recvmsg+0x10/0x10 [ 220.700841][T13847] ? __pfx_lock_release+0x10/0x10 [ 220.700863][T13847] ? trace_lock_acquire+0x14e/0x1f0 [ 220.700898][T13847] do_recvmmsg+0x2f8/0x740 [ 220.700930][T13847] ? __pfx_do_recvmmsg+0x10/0x10 [ 220.700951][T13847] ? vfs_write+0x306/0x1150 [ 220.700971][T13847] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 220.701001][T13847] ? __fget_files+0x206/0x3a0 [ 220.701022][T13847] __x64_sys_recvmmsg+0x239/0x290 [ 220.701045][T13847] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 220.701072][T13847] do_syscall_64+0xcd/0x250 [ 220.701095][T13847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.701114][T13847] RIP: 0033:0x7f037058d169 [ 220.701126][T13847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.701140][T13847] RSP: 002b:00007f0371456038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 220.701152][T13847] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058d169 [ 220.701158][T13847] RDX: 0000000000000001 RSI: 0000400000000900 RDI: 0000000000000004 [ 220.701164][T13847] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 220.701170][T13847] R10: 0000000000002021 R11: 0000000000000246 R12: 0000000000000001 [ 220.701176][T13847] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 220.701188][T13847] [ 220.776052][ T5982] usb 9-1: USB disconnect, device number 16 [ 220.868454][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 220.909588][ T5982] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 220.982981][T13859] SELinux: failed to load policy [ 221.062721][ T5982] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.065412][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.067703][ T5982] usb 9-1: Product: syz [ 221.068951][ T5982] usb 9-1: Manufacturer: syz [ 221.070521][ T5982] usb 9-1: SerialNumber: syz [ 221.073825][ T5982] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 221.084299][ T5982] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.120016][ T5982] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 222.123363][ T5982] ath9k_htc: Failed to initialize the device [ 222.141739][ T5982] usb 9-1: ath9k_htc: USB layer deinitialized [ 222.146669][ T10] usb 9-1: USB disconnect, device number 17 [ 222.235357][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2937'. [ 222.277920][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 222.686050][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 222.686059][ T40] audit: type=1400 audit(1741538687.271:39532): avc: denied { setopt } for pid=13890 comm="syz.4.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 223.075781][T13903] FAULT_INJECTION: forcing a failure. [ 223.075781][T13903] name failslab, interval 1, probability 0, space 0, times 0 [ 223.079363][T13903] CPU: 3 UID: 0 PID: 13903 Comm: syz.2.2946 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 223.079377][T13903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.079383][T13903] Call Trace: [ 223.079387][T13903] [ 223.079391][T13903] dump_stack_lvl+0x16c/0x1f0 [ 223.079420][T13903] should_fail_ex+0x50a/0x650 [ 223.079440][T13903] ? fs_reclaim_acquire+0xae/0x150 [ 223.079467][T13903] should_failslab+0xc2/0x120 [ 223.079480][T13903] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 223.079491][T13903] ? __alloc_skb+0x2b1/0x380 [ 223.079505][T13903] ? __pfx_mark_lock+0x10/0x10 [ 223.079520][T13903] __alloc_skb+0x2b1/0x380 [ 223.079534][T13903] ? __pfx___alloc_skb+0x10/0x10 [ 223.079546][T13903] ? find_held_lock+0x2d/0x110 [ 223.079559][T13903] ? __might_fault+0x13b/0x190 [ 223.079572][T13903] alloc_skb_with_frags+0xe4/0x850 [ 223.079582][T13903] ? __might_fault+0xe3/0x190 [ 223.079595][T13903] sock_alloc_send_pskb+0x7f1/0x980 [ 223.079609][T13903] ? _copy_from_iter+0x15e/0x1560 [ 223.079622][T13903] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 223.079634][T13903] ? __lock_acquire+0xcc5/0x3c40 [ 223.079649][T13903] ? hlock_class+0x4e/0x130 [ 223.079659][T13903] ? __lock_acquire+0xcc5/0x3c40 [ 223.079672][T13903] ? iov_iter_advance+0x7d/0x6c0 [ 223.079685][T13903] tun_get_user+0xd3b/0x3e50 [ 223.079716][T13903] ? __pfx_tun_get_user+0x10/0x10 [ 223.079738][T13903] ? find_held_lock+0x2d/0x110 [ 223.079758][T13903] ? __pfx_lock_release+0x10/0x10 [ 223.079787][T13903] tun_chr_write_iter+0xdc/0x210 [ 223.079802][T13903] vfs_write+0x5ae/0x1150 [ 223.079817][T13903] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 223.079836][T13903] ? __pfx_vfs_write+0x10/0x10 [ 223.079850][T13903] ? __fget_files+0x40/0x3a0 [ 223.079870][T13903] ksys_write+0x12b/0x250 [ 223.079879][T13903] ? __pfx_ksys_write+0x10/0x10 [ 223.079891][T13903] do_syscall_64+0xcd/0x250 [ 223.079905][T13903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.079919][T13903] RIP: 0033:0x7f037058d169 [ 223.079928][T13903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.079938][T13903] RSP: 002b:00007f0371456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.079947][T13903] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058d169 [ 223.079953][T13903] RDX: 000000000000fdef RSI: 0000400000000240 RDI: 0000000000000003 [ 223.079959][T13903] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 223.079964][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.079969][T13903] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 223.079981][T13903] [ 223.159581][ T75] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 223.242061][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 223.309937][ T75] usb 9-1: Using ep0 maxpacket: 8 [ 223.312537][ T75] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 223.314657][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 223.317917][ T75] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.321258][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.324327][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.328161][ T75] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 223.330215][ T5982] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 223.330299][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 223.335475][ T75] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.338740][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.341902][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.345715][ T75] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 223.347794][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 223.350925][ T75] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.354105][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.357116][ T75] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.362352][ T75] usb 9-1: string descriptor 0 read error: -22 [ 223.364147][ T75] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 223.366633][ T75] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.373088][ T75] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.491898][ T5982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.494918][ T5982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.497661][ T5982] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.501477][ T5982] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.504146][ T5982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.508676][ T5982] usb 10-1: config 0 descriptor?? [ 223.578133][ T6001] usb 9-1: USB disconnect, device number 18 [ 223.915843][ T5982] usbhid 10-1:0.0: can't add hid device: -71 [ 223.917686][ T5982] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 223.920565][ T5982] usb 10-1: USB disconnect, device number 3 [ 224.359867][ T5947] Bluetooth: hci2: command tx timeout [ 224.477867][T13917] FAULT_INJECTION: forcing a failure. [ 224.477867][T13917] name failslab, interval 1, probability 0, space 0, times 0 [ 224.482051][T13917] CPU: 2 UID: 0 PID: 13917 Comm: syz.5.2952 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 224.482064][T13917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.482071][T13917] Call Trace: [ 224.482074][T13917] [ 224.482078][T13917] dump_stack_lvl+0x16c/0x1f0 [ 224.482095][T13917] should_fail_ex+0x50a/0x650 [ 224.482111][T13917] ? fs_reclaim_acquire+0xae/0x150 [ 224.482128][T13917] ? genl_start+0x1e7/0x960 [ 224.482142][T13917] should_failslab+0xc2/0x120 [ 224.482154][T13917] __kmalloc_cache_noprof+0x68/0x410 [ 224.482170][T13917] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 224.482189][T13917] genl_start+0x1e7/0x960 [ 224.482205][T13917] __netlink_dump_start+0x607/0x970 [ 224.482220][T13917] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 224.482237][T13917] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 224.482253][T13917] ? rcu_is_watching+0x12/0xc0 [ 224.482267][T13917] ? __pfx_genl_start+0x10/0x10 [ 224.482280][T13917] ? __pfx_genl_dumpit+0x10/0x10 [ 224.482294][T13917] ? __pfx_genl_done+0x10/0x10 [ 224.482309][T13917] ? bpf_lsm_capable+0x9/0x10 [ 224.482321][T13917] ? security_capable+0x7e/0x260 [ 224.482334][T13917] ? ns_capable+0xd7/0x110 [ 224.482350][T13917] genl_rcv_msg+0x470/0x800 [ 224.482366][T13917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.482382][T13917] ? __pfx_batadv_tt_global_dump+0x10/0x10 [ 224.482397][T13917] netlink_rcv_skb+0x16b/0x440 [ 224.482411][T13917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.482427][T13917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.482445][T13917] ? down_read+0xc9/0x330 [ 224.482460][T13917] ? __pfx_down_read+0x10/0x10 [ 224.482474][T13917] ? netlink_deliver_tap+0x1ae/0xd30 [ 224.482489][T13917] genl_rcv+0x28/0x40 [ 224.482502][T13917] netlink_unicast+0x53c/0x7f0 [ 224.482517][T13917] ? __pfx_netlink_unicast+0x10/0x10 [ 224.482534][T13917] netlink_sendmsg+0x8b8/0xd70 [ 224.482549][T13917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.482568][T13917] ____sys_sendmsg+0xaaf/0xc90 [ 224.482579][T13917] ? copy_msghdr_from_user+0x10b/0x160 [ 224.482593][T13917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.482610][T13917] ___sys_sendmsg+0x135/0x1e0 [ 224.482625][T13917] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.482645][T13917] ? __pfx_lock_release+0x10/0x10 [ 224.482659][T13917] ? trace_lock_acquire+0x14e/0x1f0 [ 224.482675][T13917] ? __fget_files+0x206/0x3a0 [ 224.482688][T13917] __sys_sendmsg+0x16e/0x220 [ 224.482703][T13917] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.482726][T13917] do_syscall_64+0xcd/0x250 [ 224.482741][T13917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.482755][T13917] RIP: 0033:0x7f61ce78d169 [ 224.482763][T13917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.482772][T13917] RSP: 002b:00007f61cf6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.482781][T13917] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78d169 [ 224.482787][T13917] RDX: 0000000000000000 RSI: 0000400000004340 RDI: 0000000000000003 [ 224.482793][T13917] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 224.482798][T13917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.482804][T13917] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 224.482816][T13917] [ 224.600133][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2953'. [ 224.603159][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2953'. [ 224.892808][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'. [ 224.929651][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 225.007601][T13948] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 225.027299][ T40] audit: type=1400 audit(1741538689.611:39533): avc: denied { append } for pid=13947 comm="syz.2.2962" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 225.029046][T13948] kvm: kvm [13947]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400000001 [ 225.081889][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.084726][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.087216][ T9] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 225.089890][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.093365][ T9] usb 10-1: config 0 descriptor?? [ 225.096184][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 225.098175][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 225.103221][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 225.105888][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 225.107942][ T9] usb 10-1: media controller created [ 225.110739][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.117774][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 225.119690][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 225.122759][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input13 [ 225.128215][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 225.130269][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 225.225326][ T40] audit: type=1400 audit(1741538689.811:39534): avc: denied { connect } for pid=13952 comm="syz.2.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.298773][ T5955] Bluetooth: hci2: unexpected event for opcode 0x46f7 [ 225.304475][ T58] usb 10-1: USB disconnect, device number 4 [ 225.316441][ T40] audit: type=1400 audit(1741538689.901:39535): avc: denied { search } for pid=5337 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.325334][ T58] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 225.439342][T13963] FAULT_INJECTION: forcing a failure. [ 225.439342][T13963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.445399][T13963] CPU: 3 UID: 0 PID: 13963 Comm: syz.0.2968 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 225.445422][T13963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.445432][T13963] Call Trace: [ 225.445437][T13963] [ 225.445443][T13963] dump_stack_lvl+0x16c/0x1f0 [ 225.445468][T13963] should_fail_ex+0x50a/0x650 [ 225.445496][T13963] _copy_from_iter+0x2a1/0x1560 [ 225.445513][T13963] ? trace_lock_acquire+0x14e/0x1f0 [ 225.445533][T13963] ? __pfx__copy_from_iter+0x10/0x10 [ 225.445547][T13963] ? __virt_addr_valid+0x1a4/0x590 [ 225.445566][T13963] ? __virt_addr_valid+0x5e/0x590 [ 225.445580][T13963] ? __phys_addr_symbol+0x30/0x80 [ 225.445594][T13963] ? __check_object_size+0x488/0x710 [ 225.445615][T13963] skb_copy_datagram_from_iter+0x124/0x710 [ 225.445635][T13963] ? hlock_class+0x4e/0x130 [ 225.445651][T13963] ? __lock_acquire+0xcc5/0x3c40 [ 225.445671][T13963] ? iov_iter_advance+0x7d/0x6c0 [ 225.445689][T13963] tun_get_user+0x199c/0x3e50 [ 225.445730][T13963] ? __pfx_tun_get_user+0x10/0x10 [ 225.445754][T13963] ? find_held_lock+0x2d/0x110 [ 225.445776][T13963] ? __pfx_lock_release+0x10/0x10 [ 225.445809][T13963] tun_chr_write_iter+0xdc/0x210 [ 225.445826][T13963] vfs_write+0x5ae/0x1150 [ 225.445839][T13963] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 225.445856][T13963] ? __pfx_vfs_write+0x10/0x10 [ 225.445871][T13963] ? __fget_files+0x40/0x3a0 [ 225.445896][T13963] ksys_write+0x12b/0x250 [ 225.445911][T13963] ? __pfx_ksys_write+0x10/0x10 [ 225.445932][T13963] do_syscall_64+0xcd/0x250 [ 225.445955][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.445976][T13963] RIP: 0033:0x7f40c198d169 [ 225.445989][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.446004][T13963] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.446019][T13963] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 225.446030][T13963] RDX: 000000000000007a RSI: 0000400000000280 RDI: 0000000000000003 [ 225.446039][T13963] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.446048][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.446057][T13963] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 225.446078][T13963] [ 225.578011][T13968] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 225.711558][T13976] netlink: 'syz.2.2974': attribute type 9 has an invalid length. [ 225.750851][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 225.949406][T14000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14000 comm=syz.2.2983 [ 226.070990][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2988'. [ 226.152990][T14021] FAULT_INJECTION: forcing a failure. [ 226.152990][T14021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.157232][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.0.2991 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 226.157253][T14021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.157262][T14021] Call Trace: [ 226.157268][T14021] [ 226.157274][T14021] dump_stack_lvl+0x16c/0x1f0 [ 226.157299][T14021] should_fail_ex+0x50a/0x650 [ 226.157325][T14021] _copy_to_user+0x32/0xd0 [ 226.157343][T14021] simple_read_from_buffer+0xd0/0x160 [ 226.157366][T14021] proc_fail_nth_read+0x198/0x270 [ 226.157386][T14021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.157408][T14021] ? rw_verify_area+0xcf/0x680 [ 226.157427][T14021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.157447][T14021] vfs_read+0x1df/0xbf0 [ 226.157468][T14021] ? __fget_files+0x1fc/0x3a0 [ 226.157483][T14021] ? __pfx___mutex_lock+0x10/0x10 [ 226.157503][T14021] ? __pfx_vfs_read+0x10/0x10 [ 226.157530][T14021] ? __fget_files+0x206/0x3a0 [ 226.157551][T14021] ksys_read+0x12b/0x250 [ 226.157565][T14021] ? __pfx_ksys_read+0x10/0x10 [ 226.157585][T14021] do_syscall_64+0xcd/0x250 [ 226.157604][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.157623][T14021] RIP: 0033:0x7f40c198bb7c [ 226.157636][T14021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.157649][T14021] RSP: 002b:00007f40c284f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.157664][T14021] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198bb7c [ 226.157673][T14021] RDX: 000000000000000f RSI: 00007f40c284f0a0 RDI: 0000000000000004 [ 226.157682][T14021] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.157691][T14021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.157699][T14021] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 226.157719][T14021] [ 226.218716][T14022] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 226.224957][T14022] SELinux: failed to load policy [ 226.244400][T14024] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 226.251423][T14024] batman_adv: batadv0: Adding interface: team0 [ 226.253191][T14024] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.260407][T14024] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 226.264689][T14024] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 226.266944][T14024] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2992'. [ 226.269721][T14024] team0: entered promiscuous mode [ 226.271499][T14024] team_slave_0: entered promiscuous mode [ 226.273264][T14024] team_slave_1: entered promiscuous mode [ 226.275785][T14024] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.277906][T14024] batman_adv: batadv0: Interface activated: team0 [ 226.280427][T14024] batman_adv: batadv0: Interface deactivated: team0 [ 226.282953][T14024] batman_adv: batadv0: Removing interface: team0 [ 226.287476][T14024] bridge0: port 3(team0) entered blocking state [ 226.290094][T14024] bridge0: port 3(team0) entered disabled state [ 226.292307][T14024] team0: entered allmulticast mode [ 226.293760][T14024] team_slave_0: entered allmulticast mode [ 226.295911][T14024] team_slave_1: entered allmulticast mode [ 226.299085][T14024] bridge0: port 3(team0) entered blocking state [ 226.301023][T14024] bridge0: port 3(team0) entered forwarding state [ 226.339676][ T58] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 226.499704][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 226.503167][ T58] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 226.506117][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.510381][ T58] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.514511][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.517766][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.522906][ T58] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 226.525904][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.530252][ T58] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.534680][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.538906][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.546708][ T58] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 226.549765][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 226.554046][ T58] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.558340][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.562596][ T58] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.569498][ T58] usb 7-1: string descriptor 0 read error: -22 [ 226.572111][ T58] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.575605][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.582681][ T58] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 226.730352][T14028] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 226.732677][T14027] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 226.789640][ T64] usb 7-1: USB disconnect, device number 27 [ 227.190015][T14037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2997'. [ 227.215404][T14035] fuse: root generation should be zero [ 227.256192][T14043] netlink: 'syz.4.2999': attribute type 5 has an invalid length. [ 227.562209][ T40] audit: type=1326 audit(1741538692.151:39536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.568758][ T40] audit: type=1326 audit(1741538692.151:39537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.589622][ T40] audit: type=1326 audit(1741538692.151:39538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.592134][T14049] program syz.0.3000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.605831][ T40] audit: type=1326 audit(1741538692.151:39539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.614539][ T40] audit: type=1326 audit(1741538692.151:39540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.622682][ T40] audit: type=1326 audit(1741538692.151:39541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.5.2993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ce78d169 code=0x7fc00000 [ 227.670260][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 227.672984][ T1110] ata1.00: irq_stat 0x40000000 [ 227.674712][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 227.676917][ T1110] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 227.676917][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 227.684752][ T1110] ata1.00: status: { DRDY ERR } [ 227.686502][ T1110] ata1.00: error: { ABRT } [ 227.688242][ T1110] ata1.00: device reported invalid CHS sector 0 [ 227.730109][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3003'. [ 227.804012][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 227.804023][ T40] audit: type=1400 audit(1741538692.391:39603): avc: denied { map } for pid=14060 comm="syz.5.3005" path="socket:[68682]" dev="sockfs" ino=68682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 227.890489][T14043] Set syz1 is full, maxelem 65536 reached [ 227.995804][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 228.011572][T14066] FAULT_INJECTION: forcing a failure. [ 228.011572][T14066] name failslab, interval 1, probability 0, space 0, times 0 [ 228.016241][T14066] CPU: 3 UID: 0 PID: 14066 Comm: syz.5.3007 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 228.016262][T14066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.016271][T14066] Call Trace: [ 228.016285][T14066] [ 228.016292][T14066] dump_stack_lvl+0x16c/0x1f0 [ 228.016333][T14066] should_fail_ex+0x50a/0x650 [ 228.016360][T14066] ? fs_reclaim_acquire+0xae/0x150 [ 228.016386][T14066] should_failslab+0xc2/0x120 [ 228.016405][T14066] __kmalloc_node_noprof+0xd1/0x510 [ 228.016422][T14066] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 228.016449][T14066] __kvmalloc_node_noprof+0xad/0x1a0 [ 228.016474][T14066] udmabuf_create+0x307/0x11e0 [ 228.016494][T14066] ? find_held_lock+0x2d/0x110 [ 228.016514][T14066] ? __might_fault+0x13b/0x190 [ 228.016533][T14066] ? __pfx_lock_release+0x10/0x10 [ 228.016556][T14066] ? __pfx_udmabuf_create+0x10/0x10 [ 228.016575][T14066] ? lock_acquire+0x2f/0xb0 [ 228.016594][T14066] ? __might_fault+0xe3/0x190 [ 228.016613][T14066] ? __might_fault+0xe3/0x190 [ 228.016635][T14066] ? _copy_from_user+0x59/0xd0 [ 228.016654][T14066] udmabuf_ioctl+0x2b7/0x310 [ 228.016670][T14066] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 228.016695][T14066] ? selinux_file_ioctl+0xb4/0x270 [ 228.016722][T14066] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 228.016740][T14066] __x64_sys_ioctl+0x190/0x200 [ 228.016764][T14066] do_syscall_64+0xcd/0x250 [ 228.016786][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.016808][T14066] RIP: 0033:0x7f61ce78d169 [ 228.016822][T14066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.016844][T14066] RSP: 002b:00007f61cf6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.016860][T14066] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78d169 [ 228.016870][T14066] RDX: 00004000000000c0 RSI: 0000000040087543 RDI: 0000000000000003 [ 228.016880][T14066] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 228.016889][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.016898][T14066] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 228.016918][T14066] [ 228.064916][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.091997][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.094574][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.098133][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.101316][ T5943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.103496][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.273403][T14067] chnl_net:caif_netlink_parms(): no params data found [ 228.326831][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.329479][T14067] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.330310][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 228.331769][T14067] bridge_slave_0: entered allmulticast mode [ 228.337210][T14067] bridge_slave_0: entered promiscuous mode [ 228.338692][ T1110] ata1.00: configured for UDMA/100 [ 228.340179][T14067] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.343216][T14067] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.345347][T14067] bridge_slave_1: entered allmulticast mode [ 228.347783][T14067] bridge_slave_1: entered promiscuous mode [ 228.367289][T14067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.371970][T14067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.396510][T14067] team0: Port device team_slave_0 added [ 228.401039][T14067] team0: Port device team_slave_1 added [ 228.419314][T14067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.422383][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.429959][T14067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.434159][T14067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.436047][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.443171][T14067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.466276][T14067] hsr_slave_0: entered promiscuous mode [ 228.468195][T14067] hsr_slave_1: entered promiscuous mode [ 228.523360][T14067] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.618406][T14067] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.653057][ T40] audit: type=1400 audit(1741538693.241:39604): avc: granted { setsecparam } for pid=14078 comm="syz.0.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 228.676864][T14067] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.751448][T14067] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.754352][T14085] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 228.838425][T14067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.853310][T14067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.857275][T14067] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.860532][T14067] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.872224][T14067] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.874331][T14067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.876411][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.878367][T14067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.908335][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.917641][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.922227][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.937999][T14067] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.962903][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.965310][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.970057][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.972072][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.025498][T14097] FAULT_INJECTION: forcing a failure. [ 229.025498][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 229.029324][T14097] CPU: 0 UID: 0 PID: 14097 Comm: syz.0.3015 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 229.029337][T14097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.029344][T14097] Call Trace: [ 229.029347][T14097] [ 229.029351][T14097] dump_stack_lvl+0x16c/0x1f0 [ 229.029368][T14097] should_fail_ex+0x50a/0x650 [ 229.029386][T14097] should_failslab+0xc2/0x120 [ 229.029399][T14097] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 229.029410][T14097] ? skb_clone+0x190/0x3f0 [ 229.029428][T14097] skb_clone+0x190/0x3f0 [ 229.029443][T14097] netlink_deliver_tap+0xabd/0xd30 [ 229.029470][T14097] netlink_unicast+0x5e1/0x7f0 [ 229.029485][T14097] ? __pfx_netlink_unicast+0x10/0x10 [ 229.029502][T14097] netlink_sendmsg+0x8b8/0xd70 [ 229.029517][T14097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.029535][T14097] ____sys_sendmsg+0xaaf/0xc90 [ 229.029546][T14097] ? copy_msghdr_from_user+0x10b/0x160 [ 229.029561][T14097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.029577][T14097] ___sys_sendmsg+0x135/0x1e0 [ 229.029596][T14097] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.029615][T14097] ? __pfx_lock_release+0x10/0x10 [ 229.029629][T14097] ? trace_lock_acquire+0x14e/0x1f0 [ 229.029645][T14097] ? __fget_files+0x206/0x3a0 [ 229.029658][T14097] __sys_sendmsg+0x16e/0x220 [ 229.029673][T14097] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.029695][T14097] do_syscall_64+0xcd/0x250 [ 229.029709][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.029723][T14097] RIP: 0033:0x7f40c198d169 [ 229.029732][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.029741][T14097] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.029809][T14097] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 229.029815][T14097] RDX: 0000000000008000 RSI: 0000400000000040 RDI: 0000000000000005 [ 229.029821][T14097] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.029826][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.029832][T14097] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 229.029844][T14097] [ 229.055320][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.189969][T14067] veth0_vlan: entered promiscuous mode [ 229.195304][T14067] veth1_vlan: entered promiscuous mode [ 229.210160][T14067] veth0_macvtap: entered promiscuous mode [ 229.213163][T14067] veth1_macvtap: entered promiscuous mode [ 229.218665][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.222497][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.225144][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.227872][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.230539][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.233358][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.236012][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.239033][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.242645][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.247323][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.250672][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.253436][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.256363][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.259156][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.262238][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.265030][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.268016][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.271287][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.275139][T14067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.277615][T14067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.280891][T14067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.283342][T14067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.329070][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.331487][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.342228][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.344831][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.440053][ T40] audit: type=1400 audit(1741538694.031:39605): avc: denied { connect } for pid=14128 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.579651][T14139] nbd0: detected capacity change from 0 to 12 [ 229.584223][T14139] block nbd0: Send control failed (result -89) [ 229.587723][T14139] block nbd0: Request send failed, requeueing [ 229.592488][ T5955] block nbd0: Receive control failed (result -32) [ 229.597955][ T51] block nbd0: Dead connection, failed to find a fallback [ 229.600564][ T51] block nbd0: shutting down sockets [ 229.602922][ T51] blk_print_req_error: 31 callbacks suppressed [ 229.602930][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.607238][ T51] buffer_io_error: 28 callbacks suppressed [ 229.607245][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.615346][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.618453][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.621154][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.623767][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.625823][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.628270][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.631506][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.634910][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.638269][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.641989][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.642697][T14129] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 229.644343][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.651553][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.654117][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.656712][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.659722][T14139] ldm_validate_partition_table(): Disk read failed. [ 229.662198][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.665228][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.668239][T14139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.671757][T14139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.674875][T14139] Dev nbd0: unable to read RDB block 0 [ 229.677242][T14139] nbd0: unable to read partition table [ 229.679831][T14139] nbd0: partition table beyond EOD, truncated [ 229.790508][ T5944] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 229.876044][T14151] FAULT_INJECTION: forcing a failure. [ 229.876044][T14151] name failslab, interval 1, probability 0, space 0, times 0 [ 229.881198][T14151] CPU: 2 UID: 0 PID: 14151 Comm: syz.5.3033 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 229.881212][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.881228][T14151] Call Trace: [ 229.881232][T14151] [ 229.881236][T14151] dump_stack_lvl+0x16c/0x1f0 [ 229.881253][T14151] should_fail_ex+0x50a/0x650 [ 229.881271][T14151] should_failslab+0xc2/0x120 [ 229.881283][T14151] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 229.881295][T14151] ? skb_clone+0x190/0x3f0 [ 229.881311][T14151] skb_clone+0x190/0x3f0 [ 229.881326][T14151] netlink_deliver_tap+0xabd/0xd30 [ 229.881342][T14151] netlink_unicast+0x5e1/0x7f0 [ 229.881357][T14151] ? __pfx_netlink_unicast+0x10/0x10 [ 229.881374][T14151] netlink_sendmsg+0x8b8/0xd70 [ 229.881390][T14151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.881408][T14151] ____sys_sendmsg+0xaaf/0xc90 [ 229.881419][T14151] ? copy_msghdr_from_user+0x10b/0x160 [ 229.881433][T14151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.881442][T14151] ? __lock_acquire+0xcc5/0x3c40 [ 229.881462][T14151] ___sys_sendmsg+0x135/0x1e0 [ 229.881477][T14151] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.881497][T14151] ? trace_lock_acquire+0x14e/0x1f0 [ 229.881517][T14151] __sys_sendmmsg+0x201/0x420 [ 229.881532][T14151] ? __pfx___sys_sendmmsg+0x10/0x10 [ 229.881550][T14151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.881569][T14151] ? fput+0x67/0x440 [ 229.881581][T14151] ? ksys_write+0x1ba/0x250 [ 229.881589][T14151] ? __pfx_ksys_write+0x10/0x10 [ 229.881600][T14151] __x64_sys_sendmmsg+0x9c/0x100 [ 229.881614][T14151] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.881627][T14151] do_syscall_64+0xcd/0x250 [ 229.881641][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.881658][T14151] RIP: 0033:0x7f61ce78d169 [ 229.881667][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.881676][T14151] RSP: 002b:00007f61cf6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.881686][T14151] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78d169 [ 229.881692][T14151] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000003 [ 229.881697][T14151] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 229.881703][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.881708][T14151] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 229.881720][T14151] [ 229.881814][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3033'. [ 229.921485][T14153] FAULT_INJECTION: forcing a failure. [ 229.921485][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 229.922126][T14151] netlink: 'syz.5.3033': attribute type 30 has an invalid length. [ 229.923467][T14153] CPU: 1 UID: 0 PID: 14153 Comm: syz.0.3030 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 229.923481][T14153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.923487][T14153] Call Trace: [ 229.923490][T14153] [ 229.923494][T14153] dump_stack_lvl+0x16c/0x1f0 [ 229.923513][T14153] should_fail_ex+0x50a/0x650 [ 229.923528][T14153] ? fs_reclaim_acquire+0xae/0x150 [ 229.923545][T14153] should_failslab+0xc2/0x120 [ 229.923557][T14153] __kmalloc_node_noprof+0xd1/0x510 [ 229.923568][T14153] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 229.923586][T14153] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 229.923606][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.923628][T14153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.923645][T14153] ? rcu_is_watching+0x12/0xc0 [ 229.923656][T14153] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 229.923670][T14153] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 229.923680][T14153] ? mark_held_locks+0x9f/0xe0 [ 229.923693][T14153] ? copy_process+0x4be/0x8c50 [ 229.923703][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.923716][T14153] copy_process+0x2ef2/0x8c50 [ 229.923725][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.923736][T14153] ? kasan_save_stack+0x33/0x60 [ 229.923746][T14153] ? kasan_save_track+0x14/0x30 [ 229.923754][T14153] ? __kasan_kmalloc+0xaa/0xb0 [ 229.923763][T14153] ? vhost_task_create+0xe6/0x2e0 [ 229.923774][T14153] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 229.923787][T14153] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 229.923798][T14153] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 229.923810][T14153] ? __x64_sys_ioctl+0x190/0x200 [ 229.923823][T14153] ? do_syscall_64+0xcd/0x250 [ 229.923836][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.923857][T14153] ? __pfx_copy_process+0x10/0x10 [ 229.923873][T14153] ? lockdep_init_map_type+0x16d/0x7d0 [ 229.923887][T14153] ? __raw_spin_lock_init+0x3a/0x110 [ 229.923897][T14153] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 229.923912][T14153] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 229.923923][T14153] vhost_task_create+0x1d3/0x2e0 [ 229.923936][T14153] ? __pfx_vhost_task_create+0x10/0x10 [ 229.923948][T14153] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 229.923964][T14153] ? __pfx_vhost_task_fn+0x10/0x10 [ 229.923977][T14153] ? lock_acquire.part.0+0x11b/0x380 [ 229.923991][T14153] ? find_held_lock+0x2d/0x110 [ 229.924005][T14153] kvm_mmu_post_init_vm+0x1b7/0x370 [ 229.924019][T14153] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 229.924030][T14153] ? lock_acquire+0x2f/0xb0 [ 229.924043][T14153] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 229.924056][T14153] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 229.924069][T14153] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.924084][T14153] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 229.924102][T14153] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.924120][T14153] ? __pfx_lock_release+0x10/0x10 [ 229.924139][T14153] ? selinux_file_ioctl+0x180/0x270 [ 229.924154][T14153] ? selinux_file_ioctl+0xb4/0x270 [ 229.924170][T14153] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.924182][T14153] __x64_sys_ioctl+0x190/0x200 [ 229.924197][T14153] do_syscall_64+0xcd/0x250 [ 229.924211][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.924224][T14153] RIP: 0033:0x7f40c198d169 [ 229.924232][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.924242][T14153] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.924251][T14153] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 229.924257][T14153] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 229.924262][T14153] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.924268][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.924273][T14153] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 229.924285][T14153] [ 229.924290][T14153] syz.0.3030: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 229.950560][ T5944] usb 9-1: Using ep0 maxpacket: 8 [ 229.952060][T14153] ,cpuset= [ 229.955934][ T5944] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 229.956970][T14153] / [ 229.959869][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.964507][T14153] ,mems_allowed=0-1 [ 229.966817][ T5944] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.969111][T14153] [ 229.973112][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.975967][T14153] CPU: 1 UID: 0 PID: 14153 Comm: syz.0.3030 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 229.975982][T14153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.975989][T14153] Call Trace: [ 229.975993][T14153] [ 229.975997][T14153] dump_stack_lvl+0x16c/0x1f0 [ 229.976014][T14153] warn_alloc+0x24d/0x3a0 [ 229.976027][T14153] ? __pfx_warn_alloc+0x10/0x10 [ 229.976036][T14153] ? dump_stack_lvl+0x185/0x1f0 [ 229.976047][T14153] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.976064][T14153] ? rcu_is_watching+0x12/0xc0 [ 229.976075][T14153] ? trace_kmalloc+0x2d/0xd0 [ 229.976088][T14153] ? __kmalloc_node_noprof+0x23d/0x510 [ 229.976101][T14153] __vmalloc_node_range_noprof+0x1102/0x1530 [ 229.976122][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.976139][T14153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.976155][T14153] ? rcu_is_watching+0x12/0xc0 [ 229.976165][T14153] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 229.976179][T14153] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 229.976188][T14153] ? mark_held_locks+0x9f/0xe0 [ 229.976202][T14153] ? copy_process+0x4be/0x8c50 [ 229.976211][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.976224][T14153] copy_process+0x2ef2/0x8c50 [ 229.976233][T14153] ? vhost_task_create+0x1d3/0x2e0 [ 229.976245][T14153] ? kasan_save_stack+0x33/0x60 [ 229.976255][T14153] ? kasan_save_track+0x14/0x30 [ 229.976264][T14153] ? __kasan_kmalloc+0xaa/0xb0 [ 229.976272][T14153] ? vhost_task_create+0xe6/0x2e0 [ 229.976283][T14153] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 229.976296][T14153] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 229.976308][T14153] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 229.976319][T14153] ? __x64_sys_ioctl+0x190/0x200 [ 229.976333][T14153] ? do_syscall_64+0xcd/0x250 [ 229.976345][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.976365][T14153] ? __pfx_copy_process+0x10/0x10 [ 229.976382][T14153] ? lockdep_init_map_type+0x16d/0x7d0 [ 229.976396][T14153] ? __raw_spin_lock_init+0x3a/0x110 [ 229.976406][T14153] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 229.976421][T14153] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 229.976432][T14153] vhost_task_create+0x1d3/0x2e0 [ 229.976444][T14153] ? __pfx_vhost_task_create+0x10/0x10 [ 229.976456][T14153] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 229.976472][T14153] ? __pfx_vhost_task_fn+0x10/0x10 [ 229.976485][T14153] ? lock_acquire.part.0+0x11b/0x380 [ 229.976498][T14153] ? find_held_lock+0x2d/0x110 [ 229.976512][T14153] kvm_mmu_post_init_vm+0x1b7/0x370 [ 229.976526][T14153] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 229.976537][T14153] ? lock_acquire+0x2f/0xb0 [ 229.976549][T14153] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 229.976563][T14153] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 229.976576][T14153] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.976595][T14153] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 229.976614][T14153] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.976632][T14153] ? __pfx_lock_release+0x10/0x10 [ 229.976650][T14153] ? selinux_file_ioctl+0x180/0x270 [ 229.976665][T14153] ? selinux_file_ioctl+0xb4/0x270 [ 229.976681][T14153] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 229.976693][T14153] __x64_sys_ioctl+0x190/0x200 [ 229.976708][T14153] do_syscall_64+0xcd/0x250 [ 229.976721][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.976735][T14153] RIP: 0033:0x7f40c198d169 [ 229.976744][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.976753][T14153] RSP: 002b:00007f40c284f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.976763][T14153] RAX: ffffffffffffffda RBX: 00007f40c1ba5fa0 RCX: 00007f40c198d169 [ 229.976769][T14153] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 229.976774][T14153] RBP: 00007f40c284f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.976780][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.976785][T14153] R13: 0000000000000000 R14: 00007f40c1ba5fa0 R15: 00007fff8832bac8 [ 229.976797][T14153] [ 229.976801][T14153] Mem-Info: [ 229.977244][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.978085][T14153] active_anon:6351 inactive_anon:0 isolated_anon:0 [ 229.978085][T14153] active_file:9023 inactive_file:42204 isolated_file:0 [ 229.978085][T14153] unevictable:1767 dirty:3331 writeback:0 [ 229.978085][T14153] slab_reclaimable:8311 slab_unreclaimable:82268 [ 229.978085][T14153] mapped:24225 shmem:2476 pagetables:853 [ 229.978085][T14153] sec_pagetables:301 bounce:0 [ 229.978085][T14153] kernel_misc_reclaimable:0 [ 229.978085][T14153] free:445274 free_pcp:10239 free_cma:0 [ 229.981014][ T5944] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 229.981300][T14153] Node 0 active_anon:25404kB inactive_anon:0kB active_file:36088kB inactive_file:168808kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:96900kB dirty:13316kB writeback:0kB shmem:6368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:3412kB sec_pagetables:1204kB all_unreclaimable? no [ 229.983195][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.984469][T14153] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 229.985897][ T5944] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.987589][T14153] Node 0 DMA free:15164kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 229.989209][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.990667][T14153] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 229.990692][T14153] Node 0 DMA32 free:184916kB boost:6144kB min:33752kB low:40652kB high:47552kB reserved_highatomic:4096KB active_anon:25404kB inactive_anon:0kB active_file:36088kB inactive_file:168808kB unevictable:3532kB writepending:13316kB present:2080628kB managed:1270132kB mlocked:0kB bounce:0kB free_pcp:31196kB local_pcp:2732kB free_cma:0kB [ 229.992484][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.993740][T14153] lowmem_reserve[]: 0 [ 229.995965][ T5944] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 229.996869][T14153] 0 [ 229.998207][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.999607][T14153] 0 [ 230.001066][ T5944] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.002327][T14153] 0 [ 230.003762][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.006110][T14153] 0 [ 230.006609][ T5944] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.007974][T14153] [ 230.007982][T14153] Node 1 [ 230.012054][ T5944] usb 9-1: string descriptor 0 read error: -22 [ 230.012546][T14153] Normal free:1581016kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:12288KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:9752kB local_pcp:1020kB free_cma:0kB [ 230.013974][ T5944] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.015321][T14153] lowmem_reserve[]: 0 [ 230.016657][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.017938][T14156] netlink: 'syz.5.3034': attribute type 1 has an invalid length. [ 230.018347][T14153] 0 [ 230.018502][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 230.018523][T14156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.022613][ T5944] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 230.022911][T14153] 0 [ 230.129586][ T5955] Bluetooth: hci4: command tx timeout [ 230.130523][T14153] 0 [ 230.227238][ T5944] usb 9-1: USB disconnect, device number 19 [ 230.231715][T14153] 0 [ 230.318297][T14153] Node 0 DMA: 7*4kB (UM) 6*8kB (UM) 5*16kB (UM) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 15164kB [ 230.322765][T14153] Node 0 DMA32: 596*4kB (UME) 474*8kB (UME) 406*16kB (UME) 399*32kB (UME) 125*64kB (UME) 42*128kB (UE) 39*256kB (UME) 48*512kB (UME) 18*1024kB (ME) 16*2048kB (UMH) 10*4096kB (UM) = 165536kB [ 230.327860][T14153] Node 1 Normal: 4*4kB (UME) 9*8kB (UME) 10*16kB (ME) 133*32kB (UME) 73*64kB (UME) 28*128kB (UME) 10*256kB (UE) 8*512kB (UM) 3*1024kB (U) 5*2048kB (UME) 378*4096kB (UMH) = 1581016kB [ 230.332671][T14153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.335212][T14153] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 230.337756][T14153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.340404][T14153] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 230.342964][T14153] 53703 total pagecache pages [ 230.344290][T14153] 0 pages in swap cache [ 230.345462][T14153] Free swap = 124508kB [ 230.346632][T14153] Total swap = 124996kB [ 230.347820][T14153] 1048443 pages RAM [ 230.348907][T14153] 0 pages HighMem/MovableOnly [ 230.350266][T14153] 281589 pages reserved [ 230.351397][T14153] 0 pages cma reserved [ 230.521672][T14163] FAULT_INJECTION: forcing a failure. [ 230.521672][T14163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.525329][T14163] CPU: 3 UID: 0 PID: 14163 Comm: syz.5.3037 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 230.525343][T14163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.525349][T14163] Call Trace: [ 230.525352][T14163] [ 230.525356][T14163] dump_stack_lvl+0x16c/0x1f0 [ 230.525373][T14163] should_fail_ex+0x50a/0x650 [ 230.525392][T14163] _copy_to_user+0x32/0xd0 [ 230.525403][T14163] simple_read_from_buffer+0xd0/0x160 [ 230.525420][T14163] proc_fail_nth_read+0x198/0x270 [ 230.525435][T14163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.525450][T14163] ? rw_verify_area+0xcf/0x680 [ 230.525464][T14163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.525478][T14163] vfs_read+0x1df/0xbf0 [ 230.525493][T14163] ? __fget_files+0x1fc/0x3a0 [ 230.525503][T14163] ? __pfx___mutex_lock+0x10/0x10 [ 230.525516][T14163] ? __pfx_vfs_read+0x10/0x10 [ 230.525535][T14163] ? __fget_files+0x206/0x3a0 [ 230.525548][T14163] ksys_read+0x12b/0x250 [ 230.525556][T14163] ? __pfx_ksys_read+0x10/0x10 [ 230.525569][T14163] do_syscall_64+0xcd/0x250 [ 230.525583][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.525597][T14163] RIP: 0033:0x7f61ce78bb7c [ 230.525605][T14163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.525614][T14163] RSP: 002b:00007f61cf6a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.525624][T14163] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78bb7c [ 230.525635][T14163] RDX: 000000000000000f RSI: 00007f61cf6a30a0 RDI: 0000000000000004 [ 230.525641][T14163] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.525647][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.525652][T14163] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 230.525664][T14163] [ 230.655238][ T5943] Bluetooth: hci0: sending frame failed (-49) [ 230.657956][ T5955] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 230.736510][T14174] FAULT_INJECTION: forcing a failure. [ 230.736510][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.740275][T14174] CPU: 2 UID: 0 PID: 14174 Comm: syz.5.3041 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 230.740289][T14174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.740295][T14174] Call Trace: [ 230.740299][T14174] [ 230.740302][T14174] dump_stack_lvl+0x16c/0x1f0 [ 230.740319][T14174] should_fail_ex+0x50a/0x650 [ 230.740337][T14174] _copy_to_user+0x32/0xd0 [ 230.740349][T14174] simple_read_from_buffer+0xd0/0x160 [ 230.740365][T14174] proc_fail_nth_read+0x198/0x270 [ 230.740380][T14174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.740395][T14174] ? rw_verify_area+0xcf/0x680 [ 230.740409][T14174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.740424][T14174] vfs_read+0x1df/0xbf0 [ 230.740439][T14174] ? __fget_files+0x1fc/0x3a0 [ 230.740449][T14174] ? __pfx___mutex_lock+0x10/0x10 [ 230.740463][T14174] ? __pfx_vfs_read+0x10/0x10 [ 230.740481][T14174] ? __fget_files+0x206/0x3a0 [ 230.740494][T14174] ksys_read+0x12b/0x250 [ 230.740503][T14174] ? __pfx_ksys_read+0x10/0x10 [ 230.740515][T14174] do_syscall_64+0xcd/0x250 [ 230.740530][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.740544][T14174] RIP: 0033:0x7f61ce78bb7c [ 230.740552][T14174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.740562][T14174] RSP: 002b:00007f61cf6a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.740572][T14174] RAX: ffffffffffffffda RBX: 00007f61ce9a5fa0 RCX: 00007f61ce78bb7c [ 230.740578][T14174] RDX: 000000000000000f RSI: 00007f61cf6a30a0 RDI: 0000000000000006 [ 230.740584][T14174] RBP: 00007f61cf6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.740590][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.740596][T14174] R13: 0000000000000000 R14: 00007f61ce9a5fa0 R15: 00007ffe25084f58 [ 230.740607][T14174] [ 230.826499][T14178] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 230.896381][ T40] audit: type=1400 audit(1741538695.481:39606): avc: denied { ioctl } for pid=14179 comm="syz.5.3044" path="socket:[69122]" dev="sockfs" ino=69122 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 230.961325][T14184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3046'. [ 231.061156][T14194] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 231.065341][T14194] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.068129][T14194] gretap1: entered promiscuous mode [ 231.070049][T14194] gretap1: entered allmulticast mode [ 231.501081][T14223] bridge0: port 3(team0) entered disabled state [ 231.590753][T14223] team0 (unregistering): left allmulticast mode [ 231.593567][T14223] team_slave_0: left allmulticast mode [ 231.595797][T14223] team_slave_1: left allmulticast mode [ 231.597961][T14223] bridge0: port 3(team0) entered disabled state [ 231.603125][T14223] team_slave_0: left promiscuous mode [ 231.622958][T14223] team0 (unregistering): Port device team_slave_0 removed [ 231.625508][T14223] team_slave_1: left promiscuous mode [ 231.634295][T14223] team0 (unregistering): Port device team_slave_1 removed [ 232.062438][T14229] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3059'. [ 232.087779][T14231] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3060'. [ 232.199680][ T5955] Bluetooth: hci4: command tx timeout [ 232.330713][T14241] FAULT_INJECTION: forcing a failure. [ 232.330713][T14241] name failslab, interval 1, probability 0, space 0, times 0 [ 232.334288][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.2.3065 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 232.334302][T14241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.334308][T14241] Call Trace: [ 232.334312][T14241] [ 232.334317][T14241] dump_stack_lvl+0x16c/0x1f0 [ 232.334334][T14241] should_fail_ex+0x50a/0x650 [ 232.334350][T14241] ? fs_reclaim_acquire+0xae/0x150 [ 232.334367][T14241] should_failslab+0xc2/0x120 [ 232.334379][T14241] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 232.334391][T14241] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 232.334407][T14241] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 232.334425][T14241] mmu_topup_memory_caches+0x25/0x170 [ 232.334438][T14241] kvm_mmu_load+0xda/0x22a0 [ 232.334450][T14241] ? kvm_apic_has_interrupt+0xb6/0x190 [ 232.334466][T14241] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 232.334481][T14241] ? kvm_guest_time_update+0x71e/0xeb0 [ 232.334493][T14241] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 232.334507][T14241] ? __pfx_kvm_mmu_load+0x10/0x10 [ 232.334519][T14241] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 232.334534][T14241] ? kvm_check_and_inject_events+0x725/0x12e0 [ 232.334546][T14241] ? record_steal_time+0x61/0xbe0 [ 232.334558][T14241] vcpu_run+0x338e/0x4f50 [ 232.334570][T14241] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 232.334585][T14241] ? __pfx_vcpu_run+0x10/0x10 [ 232.334595][T14241] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.334611][T14241] ? rcu_is_watching+0x12/0xc0 [ 232.334622][T14241] ? trace_lock_acquire+0x14e/0x1f0 [ 232.334636][T14241] ? __local_bh_enable_ip+0xa4/0x120 [ 232.334652][T14241] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.334664][T14241] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 232.334679][T14241] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 232.334691][T14241] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 232.334706][T14241] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 232.334720][T14241] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.334735][T14241] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 232.334754][T14241] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.334772][T14241] ? __pfx_lock_release+0x10/0x10 [ 232.334792][T14241] ? selinux_file_ioctl+0x180/0x270 [ 232.334828][T14241] ? selinux_file_ioctl+0xb4/0x270 [ 232.334845][T14241] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.334858][T14241] __x64_sys_ioctl+0x190/0x200 [ 232.334874][T14241] do_syscall_64+0xcd/0x250 [ 232.334888][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.334902][T14241] RIP: 0033:0x7f037058d169 [ 232.334911][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.334921][T14241] RSP: 002b:00007f0371456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.334931][T14241] RAX: ffffffffffffffda RBX: 00007f03707a5fa0 RCX: 00007f037058d169 [ 232.334937][T14241] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 232.334943][T14241] RBP: 00007f0371456090 R08: 0000000000000000 R09: 0000000000000000 [ 232.334948][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.334954][T14241] R13: 0000000000000000 R14: 00007f03707a5fa0 R15: 00007fff508e8ee8 [ 232.334966][T14241] [ 232.457135][ T40] audit: type=1400 audit(1741538697.041:39607): avc: denied { ioctl } for pid=14244 comm="syz.0.3066" path="socket:[67569]" dev="sockfs" ino=67569 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.495228][T14249] tmpfs: Invalid uid '0x00000000ffffffff' [ 232.524550][T14255] vlan2: entered allmulticast mode [ 232.526234][T14255] batadv0: entered allmulticast mode [ 232.530188][T14255] batadv0: left allmulticast mode [ 232.559158][T14257] netlink: 'syz.4.3068': attribute type 10 has an invalid length. [ 232.564503][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.569634][T14257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 232.876865][T14278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.114674][T14286] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3079'. [ 233.139976][T14288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3080'. [ 233.292717][T14295] SELinux: policydb magic number 0x7600736e does not match expected magic number 0xf97cff8c [ 233.295865][T14295] SELinux: failed to load policy [ 234.040426][T14305] loop6: detected capacity change from 0 to 524287999 [ 234.044643][T14305] ldm_validate_partition_table(): Disk read failed. [ 234.046991][T14305] Dev loop6: unable to read RDB block 0 [ 234.049216][T14305] loop6: unable to read partition table [ 234.051588][T14305] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 234.127178][T14298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.130715][T14298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.132483][T14298] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.134568][T14298] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.142895][T14298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.144845][T14298] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.154272][T13961] ------------[ cut here ]------------ [ 234.156934][T13961] refcount_t: underflow; use-after-free. [ 234.159412][T13961] WARNING: CPU: 1 PID: 13961 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 234.162912][T13961] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.165073][T13961] CPU: 1 UID: 0 PID: 13961 Comm: kbnepd ÒÜ'ç‘ Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 234.170455][T13961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.173901][T13961] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 234.176330][T13961] Code: ff 89 de e8 f8 2b f5 fc 84 db 0f 85 66 ff ff ff e8 4b 31 f5 fc c6 05 0f 32 86 0b 01 90 48 c7 c7 a0 15 d3 8b e8 27 61 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 31 f5 fc 0f b6 1d ea 31 86 0b 31 [ 234.183843][T13961] RSP: 0018:ffffc90003fc7948 EFLAGS: 00010282 [ 234.185986][T13961] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 234.188837][T13961] RDX: ffff88806541a440 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 234.191429][T13961] RBP: ffff8880315c8078 R08: 0000000000000001 R09: 0000000000000000 [ 234.194538][T13961] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880643c8400 [ 234.197374][T13961] R13: ffff8880315c8078 R14: ffffffff85ec2ca0 R15: dffffc0000000000 [ 234.200430][T13961] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 234.203941][T13961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.206282][T13961] CR2: 00007f61cf681f98 CR3: 000000002ab02000 CR4: 0000000000352ef0 [ 234.209165][T13961] DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 [ 234.212101][T13961] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 234.214886][T13961] Call Trace: [ 234.216078][T13961] [ 234.217151][T13961] ? __warn+0xea/0x3c0 [ 234.218563][T13961] ? __pfx_vprintk_emit+0x10/0x10 [ 234.220420][T13961] ? refcount_warn_saturate+0x14a/0x210 [ 234.222292][T13961] ? report_bug+0x3c0/0x580 [ 234.223938][T13961] ? handle_bug+0x54/0xa0 [ 234.225506][T13961] ? exc_invalid_op+0x17/0x50 [ 234.227236][T13961] ? asm_exc_invalid_op+0x1a/0x20 [ 234.229612][T13961] ? __pfx_klist_children_put+0x10/0x10 [ 234.231585][T13961] ? __warn_printk+0x199/0x350 [ 234.233302][T13961] ? __warn_printk+0x1a6/0x350 [ 234.235017][T13961] ? refcount_warn_saturate+0x14a/0x210 [ 234.236919][T13961] ? refcount_warn_saturate+0x149/0x210 [ 234.238872][T13961] klist_put+0x11b/0x1b0 [ 234.240457][T13961] device_del+0x1d9/0x9f0 [ 234.241972][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.243800][T13961] ? __pfx_device_del+0x10/0x10 [ 234.245552][T13961] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 234.247715][T13961] ? rcu_is_watching+0x12/0xc0 [ 234.249366][T13961] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 234.251785][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.253574][T13961] ? __pfx___mutex_lock+0x10/0x10 [ 234.255419][T13961] unregister_netdevice_queue+0x307/0x3f0 [ 234.257412][T13961] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 234.259714][T13961] ? rtnl_net_dev_lock+0x3d/0x360 [ 234.261514][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.263338][T13961] ? rtnl_lock+0x9/0x20 [ 234.264820][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.266638][T13961] unregister_netdev+0x1f/0x60 [ 234.268370][T13961] bnep_session+0x21b6/0x2ca0 [ 234.270170][T13961] ? __schedule+0xf4b/0x5890 [ 234.271829][T13961] ? __pfx___lock_acquire+0x10/0x10 [ 234.273701][T13961] ? __pfx_bnep_session+0x10/0x10 [ 234.275492][T13961] ? __kthread_parkme+0xb7/0x220 [ 234.277269][T13961] ? __pfx_lock_release+0x10/0x10 [ 234.279064][T13961] ? __pfx_woken_wake_function+0x10/0x10 [ 234.280072][ T5955] Bluetooth: hci4: command tx timeout [ 234.281103][T13961] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.284571][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.286471][T13961] ? __kthread_parkme+0x148/0x220 [ 234.288287][T13961] ? __pfx_bnep_session+0x10/0x10 [ 234.290088][T13961] kthread+0x3af/0x750 [ 234.291559][T13961] ? __pfx_kthread+0x10/0x10 [ 234.293248][T13961] ? __pfx_kthread+0x10/0x10 [ 234.294918][T13961] ret_from_fork+0x45/0x80 [ 234.296515][T13961] ? __pfx_kthread+0x10/0x10 [ 234.298199][T13961] ret_from_fork_asm+0x1a/0x30 [ 234.299991][T13961] [ 234.301086][T13961] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.303596][T13961] CPU: 1 UID: 0 PID: 13961 Comm: kbnepd ÒÜ'ç‘ Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 234.307471][T13961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.310312][T13961] Call Trace: [ 234.311233][T13961] [ 234.312058][T13961] dump_stack_lvl+0x3d/0x1f0 [ 234.313300][T13961] panic+0x71d/0x800 [ 234.314396][T13961] ? __pfx_panic+0x10/0x10 [ 234.315612][T13961] ? show_trace_log_lvl+0x29d/0x3d0 [ 234.317052][T13961] ? check_panic_on_warn+0x1f/0xb0 [ 234.318435][T13961] ? refcount_warn_saturate+0x14a/0x210 [ 234.319923][T13961] check_panic_on_warn+0xab/0xb0 [ 234.321281][T13961] __warn+0xf6/0x3c0 [ 234.322337][T13961] ? __pfx_vprintk_emit+0x10/0x10 [ 234.323709][T13961] ? refcount_warn_saturate+0x14a/0x210 [ 234.325189][T13961] report_bug+0x3c0/0x580 [ 234.326362][T13961] handle_bug+0x54/0xa0 [ 234.327522][T13961] exc_invalid_op+0x17/0x50 [ 234.328750][T13961] asm_exc_invalid_op+0x1a/0x20 [ 234.330060][T13961] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 234.331728][T13961] Code: ff 89 de e8 f8 2b f5 fc 84 db 0f 85 66 ff ff ff e8 4b 31 f5 fc c6 05 0f 32 86 0b 01 90 48 c7 c7 a0 15 d3 8b e8 27 61 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 31 f5 fc 0f b6 1d ea 31 86 0b 31 [ 234.336797][T13961] RSP: 0018:ffffc90003fc7948 EFLAGS: 00010282 [ 234.338430][T13961] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 234.340499][T13961] RDX: ffff88806541a440 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 234.342594][T13961] RBP: ffff8880315c8078 R08: 0000000000000001 R09: 0000000000000000 [ 234.344707][T13961] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880643c8400 [ 234.346761][T13961] R13: ffff8880315c8078 R14: ffffffff85ec2ca0 R15: dffffc0000000000 [ 234.348802][T13961] ? __pfx_klist_children_put+0x10/0x10 [ 234.350302][T13961] ? __warn_printk+0x199/0x350 [ 234.351604][T13961] ? __warn_printk+0x1a6/0x350 [ 234.352879][T13961] ? refcount_warn_saturate+0x149/0x210 [ 234.354323][T13961] klist_put+0x11b/0x1b0 [ 234.355475][T13961] device_del+0x1d9/0x9f0 [ 234.356646][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.358053][T13961] ? __pfx_device_del+0x10/0x10 [ 234.359368][T13961] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 234.361067][T13961] ? rcu_is_watching+0x12/0xc0 [ 234.362322][T13961] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 234.364130][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.365505][T13961] ? __pfx___mutex_lock+0x10/0x10 [ 234.366877][T13961] unregister_netdevice_queue+0x307/0x3f0 [ 234.368459][T13961] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 234.370182][T13961] ? rtnl_net_dev_lock+0x3d/0x360 [ 234.371590][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.373022][T13961] ? rtnl_lock+0x9/0x20 [ 234.374183][T13961] ? rtnl_net_dev_lock+0x146/0x360 [ 234.375624][T13961] unregister_netdev+0x1f/0x60 [ 234.376974][T13961] bnep_session+0x21b6/0x2ca0 [ 234.378306][T13961] ? __schedule+0xf4b/0x5890 [ 234.379616][T13961] ? __pfx___lock_acquire+0x10/0x10 [ 234.381061][T13961] ? __pfx_bnep_session+0x10/0x10 [ 234.382462][T13961] ? __kthread_parkme+0xb7/0x220 [ 234.383862][T13961] ? __pfx_lock_release+0x10/0x10 [ 234.385259][T13961] ? __pfx_woken_wake_function+0x10/0x10 [ 234.386758][T13961] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.388330][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.389736][T13961] ? __kthread_parkme+0x148/0x220 [ 234.391122][T13961] ? __pfx_bnep_session+0x10/0x10 [ 234.392536][T13961] kthread+0x3af/0x750 [ 234.393682][T13961] ? __pfx_kthread+0x10/0x10 [ 234.395089][T13961] ? __pfx_kthread+0x10/0x10 [ 234.396323][T13961] ret_from_fork+0x45/0x80 [ 234.397500][T13961] ? __pfx_kthread+0x10/0x10 [ 234.398702][T13961] ret_from_fork_asm+0x1a/0x30 [ 234.399987][T13961] [ 235.475007][T13961] Shutting down cpus with NMI [ 235.476750][T13961] Kernel Offset: disabled [ 235.478009][T13961] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:02:18 Registers: info registers vcpu 0 CPU#0 RAX=00000000002ceb5b RBX=0000000000000000 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfb00 RDI=ffffffff8bd368a0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61ce770f20 CR3=000000002ab02000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000ffff000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe250852e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000001a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540ae55 RDI=ffffffff9ab837c0 RBP=ffffffff9ab83780 RSP=ffffc90003fc72c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9ab83780 R15=0000000000000000 RIP=ffffffff8540ae7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61cf681f98 CR3=000000002ab02000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000ffff000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe250852e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000001a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000fc07 RBX=0000000000000003 RCX=ffffc90028039000 RDX=0000000000080000 RSI=ffffffff8168945b RDI=0000000000000000 RBP=ffff8880643c8400 RSP=ffffc9000667f0d0 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000005 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83fb40 R15=ffffed100c879080 RIP=ffffffff8168945c RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f24c6a2c6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61cf4d7d60 CR3=00000000641ec000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce97c488 00007f61ce97c480 00007f61ce97c478 00007f61ce97c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61cf4dd100 00007f61ce97c440 00007f61ce970004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ce97c498 00007f61ce97c490 00007f61ce97c488 00007f61ce97c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8ec574275b4a71b d150885cfff6e547 82ee10686fbd74cf 2c958ffa2720fe19 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30ebc0b74795afb2 b7d43183007a04d7 0b1b7ab6d3d78230 0706d2aa11b4722b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 db0e07c680bab2da eccd8b5e3072027d ded59448d21695d7 23b8d310dc0be921 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec0af8f1d7d8ab0f 300b9862d6a76977 318c8cda6018b72b f0a578c639d74641 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24bfafecb5b2c6d9 daf2292d3444a3e4 8f109576150997d9 7e00000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a8468c0 RCX=ffffffff81ade25a RDX=ffff888027638000 RSI=ffffffff81ade234 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900063b7928 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d508d19 R13=0000000000000001 R14=ffff88806a93fe80 R15=ffff88806a8468c8 RIP=ffffffff81ade23b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27ffce CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8832be50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40c1a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000011d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 00000000000011d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000