last executing test programs: 1m21.651003699s ago: executing program 2 (id=1292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {}, {0x1, 0x1}}, [@filter_kind_options=@f_flower={{0x1b}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "fa119955c3cc8b3d6b5e6c4a326331a7"}]}}]}, 0x48}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe80000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00140063"], 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 1m21.548972546s ago: executing program 2 (id=1294): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x20, 0x6, 0x3ff, 0x0, 0x0, 0x400, 0x0}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='\r', @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x4) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100000fffff00040000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011983589692c67b942f648d14a000176af0299209ce182b92634f03637d5900a05cad62d73047e8f7f26dcfcd7bd2988ce89707a6134f294e5120e2fc45c1c1b7ae903b49a088b3050904da75f88994c23bfd145e60b", @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES8=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x1, 0x9, 0xffff]}, &(0x7f0000000180)=0x44) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000011000101728447335bddf27db91d92000000639d0000000089b9e700e03f5a6d31df263b318e6f878218cd0890c84a95ec64d883c84960e944d2b5542fd736ed8b3856f9c9d0aa640d4253f86f7aee4315f94f2a", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20008040) r11 = dup(r4) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410a0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xd2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1m21.290916682s ago: executing program 2 (id=1297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) r3 = io_uring_setup(0xdc8, &(0x7f0000000000)={0x0, 0xf399, 0x40, 0x1, 0x230}) io_uring_enter(r3, 0x6c59, 0xc95c, 0x4, &(0x7f0000000080)={[0x5]}, 0x8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x40187014, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, 0x0, &(0x7f00000005c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x98f6}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="5b0000000000000082000040"]) bind$bt_hci(r1, 0x0, 0x0) 1m20.250370294s ago: executing program 2 (id=1319): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffe}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af18ef598afbf50c5f73d09b2ab171599eceeebd", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="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", 0x136}, {&(0x7f0000000800)="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", 0x1fe}, {&(0x7f00000005c0)="0ce32eab78ca3c4a7bc73e96c2990c9002babb5c34c1327440eabea6ae3692de3f41d3d9844da1b5aeab30df4dd239e13f15a6dda935ca94a167891f42edbfd16936c296e72222691c9fda05000000000000001ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f", 0x76}, {&(0x7f00000058c0)="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", 0x1dd}], 0x4}}], 0x2, 0xc880) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x8) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500007000000000000190780a010101ac1414aa0400907800000000450000000000000000110000ffffffffac1e000144049b60863c0000000000109e0cec69d2ffff6de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000591ec92000706838d19b7"], 0x0) 1m20.120654678s ago: executing program 2 (id=1321): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x10000, 0x3, 0x33424752, 0xe, 0xda, 0x84e2, 0x7, 0x1, 0x1, 0x3, 0x1, 0x3}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000280)) r4 = accept$alg(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000380)=0x68) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000480)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x75) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000440)='./file2\x00', 0x880c0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', r6, &(0x7f0000000000)='./file2\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) 1m19.810394514s ago: executing program 2 (id=1327): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, 0xffffffffffffffff, 0x11, 0x0, r2, @void, @value}, 0x11) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="24000000010001", 0x7) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x811) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000000fdffffffffffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x44830}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1m4.829356092s ago: executing program 32 (id=1327): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, 0xffffffffffffffff, 0x11, 0x0, r2, @void, @value}, 0x11) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="24000000010001", 0x7) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x811) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000000fdffffffffffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x44830}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5.567630708s ago: executing program 1 (id=2287): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x400800, 0x40) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)) ppoll(&(0x7f00000003c0)=[{r2, 0x80a0}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104001700000000000000af66145cdb2a6e72e703506d1d7dcb839cd983194fdbffdb7de0e46d0cee24ff0ba84ab24dec3060f554c27b1e2f6f73c32ca769174a3b4f699d74cf5f307c388601dcb7e0269d24f71870719d99be752a02b734168554ca76c08748691d21c4772501997f3e50aba8807ead49ce7892ef821849f47a00247799288214c47327c4ed8814c618f02048278a6b0c88e3ed73fe167e35f810f962b25fc138ae1d5b2e0ea55324d4b062cebcd26f48e551412dc56b4341ea8f5e7a26e4070c57883af931a9633c920ee1ba2623e1865eb657dc4eef80efda", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8d36, 0x8000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.690262872s ago: executing program 1 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000001f010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 4.690037751s ago: executing program 1 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008d40a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4.630160705s ago: executing program 1 (id=2308): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x5, 0x0, "a05c7b5d00008023e9c59cf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x689, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x1) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r12 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r12) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r13 = eventfd(0x0) poll(&(0x7f00000008c0)=[{r13}], 0x1, 0xc6) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000000680)={&(0x7f0000000200), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x85}, 0x20040000) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r10], [], [], [0x8000000000000000]}) r14 = dup(r5) ioctl$DRM_IOCTL_GEM_FLINK(r14, 0xc008640a, &(0x7f00000000c0)={r11}) 4.17888677s ago: executing program 1 (id=2315): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000012000000000000003a444f886a87e92d2fde49cbad83dc45aaf6d89de6dbf26a8f76cd68d527a6afc9bc707bec6e38eef00dbc4e38848ba83ccbb82b3fa5a27f7bd3da1c37c64eeef6985de2f648c375aec45f77a7277a4735a889a23ea49959f89f6a1fade7187793764c8138d34fc1c3da48255a8a8aafb34fd100f0ffffffffffff889b5b77f92c867ece0e35c71e8cd831450e14344a27da6b8a07335dfee3a9debc679a8af5661809000000000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x11, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="c30000009e000000e64100ff0000000071000804000000009500000000000000181000009b3fba0275cef218eccd0db17fe30b1059c84639764a320f8ef326b2e3e120b074f90548b25e60812cd39941f8bd136ce286822f6a6c1675fa616545f9ccf1057c86a5c859859be15bd7efd06988f5e590f4c3fdb0ad5febc5e414bbd4691e0e3f2ad885dcf6dc5b9787158805883dff928b336b7a6672187c5070179cb0df98d1fabf71f13410ba09ed1168b3c7e2b15f57371787d12671a8c41e242ac8988c6c569801ac3404782eb7483ca8b466dd34c660d555fed8ce4285a6db2ca4ffbe6394c8c86a960558a71e900890", @ANYRESOCT=r1, @ANYBLOB="00950000ed00000200"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv4_getaddr={0x30, 0x16, 0x2, 0x70bd26, 0x25dfdbfe, {0x2, 0x20, 0x10, 0xfe, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x2004c894) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xc, 0x20, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000040), 0x4) pselect6(0x40, &(0x7f00000001c0)={0xd, 0x9, 0x5, 0x2, 0x4, 0x4, 0x8, 0x2}, &(0x7f00000003c0)={0x4, 0xec, 0x3, 0xe1c, 0x3, 0x1, 0x9, 0x1}, &(0x7f0000000400)={0x7, 0x2, 0x3, 0x0, 0x2, 0x6, 0x1, 0x3ff}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x1]}, 0x8}) (async) getsockopt$inet6_int(r7, 0x29, 0x48, 0x0, &(0x7f00007d0000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x1015}) (rerun: 64) 3.29932701s ago: executing program 1 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.060284075s ago: executing program 3 (id=2335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.750290143s ago: executing program 3 (id=2341): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000c3ffffff0700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c077a540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.530561772s ago: executing program 3 (id=2344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) io_uring_setup(0xdc8, &(0x7f0000000000)={0x0, 0xf399, 0x40, 0x1, 0x230}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x40187014, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f00000005c0)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001c86a76f43847dc4a325c9544d221516373064c1accc1523d51ca67f45b08c6ea437d8972bef9c2ec71cd1a73d448e35e3a933b6652098a2213c0e8ec5dbec0da035fbf98c10c18ce037db70503bd203d7a8a2957f7a1f469dad8a924ac98080f75de257d8e65537757956f4a87cd409c4976762f2c1e30ca5dd3677fa7305b8563cb7a8f3bfb7422a90ca4e300a71f891f96996333c010f28513e4f78cf8de69e86865c3f078ede52b63ead25c6475dcb711cc0edc3b7bd2eb241dad58a4"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x98f6}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="5b0000000000000082000040"]) bind$bt_hci(r1, 0x0, 0x0) 1.120676657s ago: executing program 0 (id=2349): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000744000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.050413787s ago: executing program 0 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.050289092s ago: executing program 4 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 990.498917ms ago: executing program 4 (id=2354): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="6ac1a2e7da534603ffd06f4bc169011fca2cb6a43299084ac7dc008c307f25d924690fcc4b6aec003f6526e0fdffcce8400b65e6c2af7e330e1eedc397dad71be88a11386e1a11ab9c1868c20fbcbbc27c73f59072da393f9df0bc076609b2c47373cdddce3d5143a38f965660bf0ed340ab73cf30bb273186b6ff4e4e70d47eb903227e99809c4eafc99acfe62dd17852458203aff8b65b847d013d05f981f4ee5a656333d3f809461f14630e4eb09c924b84a835b305955e06a813cfe1ee7b", 0xc0, 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80800) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f00000002c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="d2702001f61d84f0f64cf0dcef4639f5bdb302ffcb75fe486c287b2563b937bb0ba87b4bec12", 0x26}, {&(0x7f00000003c0)="79259c2f0c07b636b481290a1882e865b0ecce700459105c1b9ee38a79b50e1a4bb7504ae645e4f5f14ebf37a592ba50730a1b405ecfba71a0f6f6d2271f224dff0ed440b95486e6a96fd5cd40d4f2aeb76ea64be1e6ebb98cfa3a7169b8fe9dcbc636f700a383ed871d8f3be4", 0x6d}, {&(0x7f0000000440)="46c7057f83b01a332c566b10491aa6ec7f58f7aae7b8eed35c280de5077d7dea5e1ec12abad0e43c28ba719cfbcc2f58ea234c3cd0613b2b433fdb4bf715bb271f5ec6c41a6f034761f4f7d9b5383f0e5c07b2e8054c43cc174e0d344db1a0c5faca866ee44ba8b3d3c79f547b19904e512b4b416f826db9815c17c2ce8114046e9f740b1d1a1ffe25a58dd3e639bad6a46f20188a6c2cfa60e33f09c12a868c92ac792d0927cf3ea7f1bbf3", 0xac}, {&(0x7f0000000500)="e23a0215c84a6b1023b687ff9d02e9eafa04ac030b5461b88d454f3a93bd0d721303afb4b2e9221c46e8fc5a505fb357796dc0322ad5647dbfce93fa2273b728d6", 0x41}, {&(0x7f0000000580)="11c2777ed77312cff19b031c2afb3d30102f92ea9e5ec13b4ed784ead9b6e978c2ce200002f878a5b7a277727d6c75b287cb4ae174b9ae9eadf57c309d6939d8668e55d82c66dbd0e500ca459ac0ff40bc3c30ff5ebe3e881ead6dce4c7398d0b0fb6b1532668272c7d03fdfe90f7ca97a7171ce7b93aac4769b46c0534c0140531291277cf7057f4200d9aa62069d70067b8dbc89", 0x95}, {&(0x7f0000000640)="f62440f53a49d76c48f3dbf0d6b5ea403b07a913a78df3a2cf8d7e6ffc2a207d22c955cbf5d9f37cbea672d2b9a29aaef4c768eacf8cd745dc8b713e8143b77e1c22f2e036ebe19c4a444a1e6b8f451ab09205799a8f29126eeaa52ec5c134e86ce61521d09f09f03e318c9b3141", 0x6e}, {&(0x7f00000006c0)="a45b1dd9c252b99a6ad2d39976579c48a6a9", 0x12}], 0x7}, 0x0) r3 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="ac", 0x1, 0xfffffffffffffffe) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000800), 0x8000000000000001, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x20004040) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x4800) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000080)={0x8, [0x10000, 0x0, 0x1], [{}, {}, {0xf6a}, {0x6, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}, {0x3d1, 0xf788, 0x0, 0x1}, {0x8, 0x1ff, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x40, 0x1}, {0xfff, 0x3, 0x1, 0x1}, {0x986d, 0x8}, {0x8, 0x7f, 0x0, 0x0, 0x1}, {0x800, 0x2, 0x1, 0x0, 0x1}]}) keyctl$dh_compute(0x17, &(0x7f0000001000)={r3, r0, r0}, &(0x7f0000002280)=""/198, 0xc6, 0x0) 987.164968ms ago: executing program 4 (id=2355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 458.739654ms ago: executing program 0 (id=2356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x7ff}, {}, {}, {}, {}, {0x4}]}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) 458.475921ms ago: executing program 4 (id=2357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000200)='\'({}\x00', 0x6) r3 = memfd_create(&(0x7f0000000240)='/dev/kvm\x00', 0x4) r4 = memfd_create(&(0x7f0000000280)='#! ', 0x4) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0080000000000000", @ANYRES32=r2, @ANYBLOB="0000000000f0ffff0000000000f0ffff00000000", @ANYRES32=r3, @ANYBLOB="00000000fbe2d83f60fd37520000010000000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0000000100000000", @ANYRES32=r4, @ANYBLOB="00000000000000050000040100000000008f841630e5ba3a909b5d2b0bdff209be65ff7ae81a54fb21cfdcc9660c905c70d3fbef4be5fe696edcb5a65e671e1cbdf955e2d59f924a443f42fb9dfcae9ee8ecec37d63ab6950272705929cdcce6c9a87dadf0ff8218c171038c35b31114a84f05d8de231bf1b34e46cd4e1468ff6316ca21c2d19ebd13ee25e0efb833e106ec08ee55"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r5, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x10, 0x39, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 390.637362ms ago: executing program 0 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40120000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 390.211564ms ago: executing program 3 (id=2359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff06000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x5}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000008000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) write$char_usb(r5, &(0x7f0000002e80)="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", 0x3f7) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) pread64(r4, &(0x7f0000000400)=""/4096, 0x1000, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x200000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x20, 0x4) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x0, r9}, 0x2a) r10 = dup(r6) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) openat$cgroup_ro(r10, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) 390.045242ms ago: executing program 0 (id=2360): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000844000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 309.834983ms ago: executing program 0 (id=2361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af25, &(0x7f00000001c0)=0x304008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 92.345706ms ago: executing program 4 (id=2362): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000a40)="0b4ad768"}, 0x20) r8 = socket(0x2, 0x3, 0x6) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e22, @dev}, 0x10) getsockname$packet(r8, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r9 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x8000) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) r10 = socket$kcm(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) openat$cgroup_type(r11, &(0x7f0000000100), 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) timerfd_create(0x1, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r12, &(0x7f0000000400)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r10, 0x84, 0x1e, &(0x7f0000000000), 0x10) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r13}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r13}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000002580)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x7}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000002440)="46b2177616b2a1cc30cfa1a39a900b5be8a1465f88e273688b3c7c69677f461a9abeb01947da7a39540e1646d3cf702cd2dc001e6ae80a22ddc5049c13c8c3a327e5a0680e03b277ed5afa0420209236e9d03631fca54c9bf5be1e3268f4aeee50dffe8695b1fe91928dd7692c894351c8c2d3c7b299c02da97c39dab8391fc75c7ae284f72142b847dd873d5e14b8b97074ff5704bcecd8a4a68f5d99d7efbddfde3e2d1e", 0xa5}], 0x1, &(0x7f00000025c0)="1b487ca6e903ffd69f5bb87faf1072832932546a1b9924df7b9230976a2c0ed456af6fd9f2768298793bd72385312e21626eb1c4f6ed40adcbb88d1afe5d3398afbbccbf192b62b76dd396d0818a539e41624331e075d7a5b03f5880ec4f3f8c497cc4a6154af1e6726152d61da9ee28ff8b61370172e700000000000000", 0x7e, 0x20000000}, 0x881) 502.512µs ago: executing program 3 (id=2363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001a000100000000000000000064010102000000000000000000000000ac14140000000038012dd1f79080251f77000008486785000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003"], 0x138}}, 0x0) 248.563µs ago: executing program 3 (id=2364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 21) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 4 (id=2365): syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000640)=@default_ibss_ssid, 0x6, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x8, 0x4, 0x0, 0x0, @msi={0x3, 0x8, 0xbc, 0xfffffffe}}]}) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 174.144077][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.146312][T12647] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 174.148406][T12647] [ 174.552655][T12680] kvm: kvm [12679]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9 [ 174.608389][ T5286] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.853007][T12694] lo speed is unknown, defaulting to 1000 [ 175.050555][T12694] __nla_validate_parse: 4 callbacks suppressed [ 175.050575][T12694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2062'. [ 175.132460][T12704] kvm: kvm [12703]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 175.298368][T12719] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2068'. [ 175.316110][ T9743] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.476121][ T9743] usb 5-1: Using ep0 maxpacket: 8 [ 175.479297][ T9743] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.481920][ T9743] usb 5-1: config 0 has no interface number 0 [ 175.483872][ T9743] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.487447][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 175.489098][ T9743] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.492170][ T9743] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.495150][ T9743] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.499297][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.502977][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 175.505179][ T9743] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.507735][ T9743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.511060][ T9743] usb 5-1: config 0 descriptor?? [ 175.514925][ T9743] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.746322][T12726] kvm: kvm [12725]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 175.752531][T12726] kvm: kvm [12725]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 175.754518][T12734] mkiss: ax0: crc mode is auto. [ 175.894382][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2076'. [ 175.897671][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2076'. [ 175.969517][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 175.972402][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 176.486801][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 176.486811][ T39] audit: type=1400 audit(176.391:23266): avc: denied { wake_alarm } for pid=12765 comm="syz.3.2085" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.592274][ T39] audit: type=1400 audit(176.491:23267): avc: denied { create } for pid=12768 comm="syz.1.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.612116][ T39] audit: type=1400 audit(176.511:23268): avc: denied { read } for pid=12770 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.697217][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2088'. [ 176.699725][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2088'. [ 176.797512][ T39] audit: type=1400 audit(176.701:23269): avc: denied { ioctl } for pid=12777 comm="syz.4.2089" path="socket:[71534]" dev="sockfs" ino=71534 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.810747][ T39] audit: type=1400 audit(176.711:23270): avc: denied { bind } for pid=12777 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.817978][ T39] audit: type=1400 audit(176.711:23271): avc: denied { name_bind } for pid=12777 comm="syz.4.2089" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 176.825326][ T39] audit: type=1400 audit(176.711:23272): avc: denied { node_bind } for pid=12777 comm="syz.4.2089" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 176.833658][ T39] audit: type=1400 audit(176.711:23273): avc: denied { name_connect } for pid=12777 comm="syz.4.2089" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 176.925846][ T39] audit: type=1400 audit(176.821:23274): avc: denied { ioctl } for pid=12781 comm="syz.4.2091" path="socket:[70456]" dev="sockfs" ino=70456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.336246][ T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 177.453878][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 177.461024][T12795] overlay: ./file1 is not a directory [ 177.468132][T12795] syzkaller1: entered promiscuous mode [ 177.469659][T12795] syzkaller1: entered allmulticast mode [ 177.487436][ T8] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 177.489585][ T8] usb 9-1: config 0 has no interface number 0 [ 177.491378][ T8] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.496539][ T8] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 177.498942][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.501096][ T8] usb 9-1: Product: syz [ 177.502291][ T8] usb 9-1: Manufacturer: syz [ 177.503525][ T8] usb 9-1: SerialNumber: syz [ 177.506168][ T8] usb 9-1: config 0 descriptor?? [ 177.512816][ T8] yurex 9-1:0.50: USB YUREX device now attached to Yurex #1 [ 177.566224][ T5286] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.742546][ T8] usb 9-1: USB disconnect, device number 3 [ 177.744506][ T832] usb 5-1: USB disconnect, device number 12 [ 177.758014][ T832] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 177.758341][ T8] yurex 9-1:0.50: USB YUREX #1 now disconnected [ 177.895643][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2097'. [ 177.972467][T12801] FAULT_INJECTION: forcing a failure. [ 177.972467][T12801] name failslab, interval 1, probability 0, space 0, times 0 [ 177.977120][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.1.2096 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 177.980100][T12801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.983085][T12801] Call Trace: [ 177.984004][T12801] [ 177.985066][T12801] dump_stack_lvl+0x16c/0x1f0 [ 177.986488][T12801] should_fail_ex+0x497/0x5b0 [ 177.987930][T12801] ? fs_reclaim_acquire+0xae/0x150 [ 177.989581][T12801] should_failslab+0xc2/0x120 [ 177.991021][T12801] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 177.992495][T12801] ? __pfx_mark_lock+0x10/0x10 [ 177.993846][T12801] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 177.995503][T12801] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 177.997126][T12801] mmu_topup_memory_caches+0x22/0xd0 [ 177.998549][T12801] kvm_mmu_load+0xda/0x21f0 [ 177.999782][T12801] ? mark_held_locks+0x9f/0xe0 [ 178.001074][T12801] ? kvm_apic_has_interrupt+0xb6/0x190 [ 178.002546][T12801] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.004848][T12801] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 178.006770][T12801] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.008197][T12801] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 178.010164][T12801] ? kvm_check_and_inject_events+0x725/0x12e0 [ 178.011954][T12801] ? kvm_setup_guest_pvclock+0x701/0x730 [ 178.013541][T12801] vcpu_run+0x33a4/0x4f50 [ 178.014705][T12801] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 178.016169][T12801] ? __pfx_vcpu_run+0x10/0x10 [ 178.017452][T12801] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.018938][T12801] ? rcu_is_watching+0x12/0xc0 [ 178.020245][T12801] ? trace_lock_acquire+0x14e/0x1f0 [ 178.021612][T12801] ? __local_bh_enable_ip+0xa4/0x120 [ 178.023153][T12801] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.025108][T12801] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 178.026979][T12801] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 178.028511][T12801] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 178.030178][T12801] kvm_vcpu_ioctl+0x6ce/0x1520 [ 178.031719][T12801] ? do_vfs_ioctl+0x513/0x1990 [ 178.033402][T12801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.034886][T12801] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 178.036630][T12801] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.038446][T12801] ? __pfx_lock_release+0x10/0x10 [ 178.039821][T12801] ? selinux_file_ioctl+0x180/0x270 [ 178.041238][T12801] ? selinux_file_ioctl+0xb4/0x270 [ 178.042627][T12801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.044154][T12801] __x64_sys_ioctl+0x190/0x200 [ 178.045683][T12801] do_syscall_64+0xcd/0x250 [ 178.047075][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.048962][T12801] RIP: 0033:0x7f01ee77ff19 [ 178.050350][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.055957][T12801] RSP: 002b:00007f01ef60e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.058159][T12801] RAX: ffffffffffffffda RBX: 00007f01ee945fa0 RCX: 00007f01ee77ff19 [ 178.060314][T12801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 178.062415][T12801] RBP: 00007f01ef60e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.065768][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.069052][T12801] R13: 0000000000000000 R14: 00007f01ee945fa0 R15: 00007fff8119f9d8 [ 178.072685][T12801] [ 178.150834][T12807] trusted_key: encrypted_key: master key parameter '' is invalid [ 178.161054][ T39] audit: type=1400 audit(178.061:23275): avc: denied { bind } for pid=12806 comm="syz.0.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.172310][T12808] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 178.173417][T12807] overlayfs: conflicting lowerdir path [ 178.272831][T12815] tmpfs: Bad value for 'mpol' [ 178.327020][T12817] overlayfs: conflicting lowerdir path [ 178.417021][T12824] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 178.496650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.672885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.677127][T12823] netlink: 'syz.4.2103': attribute type 2 has an invalid length. [ 178.689293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 178.768667][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.778483][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.782534][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.789667][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.792714][ T5941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.795081][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.827533][T12828] lo speed is unknown, defaulting to 1000 [ 178.934370][T12831] kvm: kvm [12830]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000001c [ 178.939209][T12831] kvm: kvm [12830]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3c000001fc [ 178.943936][T12828] chnl_net:caif_netlink_parms(): no params data found [ 179.011115][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.013294][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.015516][T12828] bridge_slave_0: entered allmulticast mode [ 179.018455][T12828] bridge_slave_0: entered promiscuous mode [ 179.024340][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.031011][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.033877][T12828] bridge_slave_1: entered allmulticast mode [ 179.036764][T12828] bridge_slave_1: entered promiscuous mode [ 179.060335][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.065673][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.093818][T12828] team0: Port device team_slave_0 added [ 179.097565][T12828] team0: Port device team_slave_1 added [ 179.153274][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.155077][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.162513][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.173504][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.175921][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.186408][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.217255][T12828] hsr_slave_0: entered promiscuous mode [ 179.219369][T12828] hsr_slave_1: entered promiscuous mode [ 179.221457][T12828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.223367][T12828] Cannot create hsr debugfs directory [ 179.284429][T12851] trusted_key: encrypted_key: insufficient parameters specified [ 179.305435][T12845] FAULT_INJECTION: forcing a failure. [ 179.305435][T12845] name failslab, interval 1, probability 0, space 0, times 0 [ 179.309097][T12845] CPU: 0 UID: 0 PID: 12845 Comm: syz.4.2109 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 179.311976][T12845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.314903][T12845] Call Trace: [ 179.315846][T12845] [ 179.316688][T12845] dump_stack_lvl+0x16c/0x1f0 [ 179.318028][T12845] should_fail_ex+0x497/0x5b0 [ 179.319407][T12845] ? fs_reclaim_acquire+0xae/0x150 [ 179.320897][T12845] should_failslab+0xc2/0x120 [ 179.322234][T12845] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 179.324073][T12845] ? __pfx_mark_lock+0x10/0x10 [ 179.325884][T12845] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 179.327677][T12845] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 179.329254][T12845] mmu_topup_memory_caches+0x22/0xd0 [ 179.330664][T12845] kvm_mmu_load+0xda/0x21f0 [ 179.331891][T12845] ? mark_held_locks+0x9f/0xe0 [ 179.333293][T12845] ? kvm_apic_has_interrupt+0xb6/0x190 [ 179.334817][T12845] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 179.336466][T12845] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 179.338067][T12845] ? __pfx_kvm_mmu_load+0x10/0x10 [ 179.339489][T12845] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 179.341155][T12845] ? kvm_check_and_inject_events+0x725/0x12e0 [ 179.342861][T12845] ? kvm_setup_guest_pvclock+0x701/0x730 [ 179.344388][T12845] vcpu_run+0x33a4/0x4f50 [ 179.345550][T12845] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 179.347029][T12845] ? __pfx_vcpu_run+0x10/0x10 [ 179.348297][T12845] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.350073][T12845] ? rcu_is_watching+0x12/0xc0 [ 179.351863][T12845] ? trace_lock_acquire+0x14e/0x1f0 [ 179.353663][T12845] ? __local_bh_enable_ip+0xa4/0x120 [ 179.355643][T12845] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.357528][T12845] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 179.359286][T12845] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 179.360829][T12845] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 179.362320][T12845] kvm_vcpu_ioctl+0x6ce/0x1520 [ 179.363674][T12845] ? do_vfs_ioctl+0x513/0x1990 [ 179.365125][T12845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.366764][T12845] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 179.368615][T12845] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.370572][T12845] ? __pfx_lock_release+0x10/0x10 [ 179.371966][T12845] ? selinux_file_ioctl+0x180/0x270 [ 179.373657][T12845] ? selinux_file_ioctl+0xb4/0x270 [ 179.375531][T12845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.377212][T12845] __x64_sys_ioctl+0x190/0x200 [ 179.378444][T12845] do_syscall_64+0xcd/0x250 [ 179.379682][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.381430][T12845] RIP: 0033:0x7f87e057ff19 [ 179.382754][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.387965][T12845] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.390122][T12845] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 179.392199][T12845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 179.394329][T12845] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.396393][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.398540][T12845] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 179.400876][T12845] [ 179.411941][T12854] QAT: Invalid ioctl -2110754303 [ 179.429135][T12828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.432046][T12828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.493272][T12860] vivid-000: ================= START STATUS ================= [ 179.496615][T12860] vivid-000: ================== END STATUS ================== [ 179.622120][T12828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.626456][T12828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.721162][T12828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.726945][T12828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.780439][T12868] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.808203][T12828] bond0: (slave netdevsim0): Releasing backup interface [ 179.811664][T12828] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 179.815546][T12828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.819341][T12828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.850589][T12888] FAULT_INJECTION: forcing a failure. [ 179.850589][T12888] name failslab, interval 1, probability 0, space 0, times 0 [ 179.854952][T12888] CPU: 1 UID: 0 PID: 12888 Comm: syz.0.2121 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 179.858695][T12888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.862530][T12888] Call Trace: [ 179.863701][T12888] [ 179.864749][T12888] dump_stack_lvl+0x16c/0x1f0 [ 179.866520][T12888] should_fail_ex+0x497/0x5b0 [ 179.868176][T12888] ? fs_reclaim_acquire+0xae/0x150 [ 179.869956][T12888] should_failslab+0xc2/0x120 [ 179.871630][T12888] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 179.873624][T12888] ? __pfx_mark_lock+0x10/0x10 [ 179.875381][T12888] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 179.877067][T12888] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 179.878644][T12888] mmu_topup_memory_caches+0x22/0xd0 [ 179.880065][T12888] kvm_mmu_load+0xda/0x21f0 [ 179.881298][T12888] ? mark_held_locks+0x9f/0xe0 [ 179.882570][T12888] ? kvm_apic_has_interrupt+0xb6/0x190 [ 179.884010][T12888] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 179.885600][T12888] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 179.887076][T12888] ? __pfx_kvm_mmu_load+0x10/0x10 [ 179.888588][T12888] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 179.890640][T12888] ? kvm_check_and_inject_events+0x725/0x12e0 [ 179.892753][T12888] ? kvm_setup_guest_pvclock+0x701/0x730 [ 179.894688][T12888] vcpu_run+0x33a4/0x4f50 [ 179.896198][T12888] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 179.898124][T12888] ? __pfx_vcpu_run+0x10/0x10 [ 179.899779][T12888] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.901727][T12888] ? rcu_is_watching+0x12/0xc0 [ 179.903397][T12888] ? trace_lock_acquire+0x14e/0x1f0 [ 179.905199][T12888] ? __local_bh_enable_ip+0xa4/0x120 [ 179.907025][T12888] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.908825][T12888] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 179.910809][T12888] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 179.912847][T12888] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 179.914925][T12888] kvm_vcpu_ioctl+0x6ce/0x1520 [ 179.916904][T12888] ? do_vfs_ioctl+0x513/0x1990 [ 179.918632][T12888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.920449][T12888] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 179.922700][T12888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.925119][T12888] ? __pfx_lock_release+0x10/0x10 [ 179.926890][T12888] ? selinux_file_ioctl+0x180/0x270 [ 179.928686][T12888] ? selinux_file_ioctl+0xb4/0x270 [ 179.930453][T12888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.932248][T12888] __x64_sys_ioctl+0x190/0x200 [ 179.933934][T12888] do_syscall_64+0xcd/0x250 [ 179.935355][T12888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.937026][T12888] RIP: 0033:0x7f620ad7ff19 [ 179.938607][T12888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.945527][T12888] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.948403][T12888] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 179.951192][T12888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 179.953857][T12888] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.955950][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.958399][T12888] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 179.960533][T12888] [ 180.023107][T12828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.026950][T12828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.063618][T12828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.068985][T12828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.099204][T12828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.112078][T12828] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.117505][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.119398][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.123617][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.126138][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.178153][T12914] netlink: 'syz.4.2129': attribute type 9 has an invalid length. [ 180.180279][T12914] __nla_validate_parse: 15 callbacks suppressed [ 180.180287][T12914] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2129'. [ 180.206756][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2130'. [ 180.209235][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2130'. [ 180.252425][T12925] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2131'. [ 180.255376][T12828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.259434][T12908] kvm: kvm [12907]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 180.290702][T12828] veth0_vlan: entered promiscuous mode [ 180.296533][T12828] veth1_vlan: entered promiscuous mode [ 180.306671][T12828] veth0_macvtap: entered promiscuous mode [ 180.319158][T12828] veth1_macvtap: entered promiscuous mode [ 180.329690][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.333706][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.337832][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.341817][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.349663][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 180.352050][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 180.354653][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.358214][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.361455][T12828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.369025][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.372114][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.375994][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.379311][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.382015][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.385945][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.389842][T12828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.407510][T12828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.416218][T12828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.419513][T12828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.421983][T12828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.427875][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2134'. [ 180.498898][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.501291][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.523898][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.526281][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.584153][ T5973] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.628008][T12944] FAULT_INJECTION: forcing a failure. [ 180.628008][T12944] name failslab, interval 1, probability 0, space 0, times 0 [ 180.631640][T12944] CPU: 2 UID: 0 PID: 12944 Comm: syz.4.2136 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 180.634687][T12944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.637617][T12944] Call Trace: [ 180.638533][T12944] [ 180.639357][T12944] dump_stack_lvl+0x16c/0x1f0 [ 180.640647][T12944] should_fail_ex+0x497/0x5b0 [ 180.641970][T12944] ? fs_reclaim_acquire+0xae/0x150 [ 180.643379][T12944] should_failslab+0xc2/0x120 [ 180.644995][T12944] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 180.646873][T12944] ? __pfx_mark_lock+0x10/0x10 [ 180.648481][T12944] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 180.650574][T12944] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 180.652571][T12944] mmu_topup_memory_caches+0x22/0xd0 [ 180.654773][T12944] kvm_mmu_load+0xda/0x21f0 [ 180.656379][T12944] ? mark_held_locks+0x9f/0xe0 [ 180.658085][T12944] ? kvm_apic_has_interrupt+0xb6/0x190 [ 180.660053][T12944] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 180.662172][T12944] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 180.664072][T12944] ? __pfx_kvm_mmu_load+0x10/0x10 [ 180.665856][T12944] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 180.667835][T12944] ? kvm_check_and_inject_events+0x725/0x12e0 [ 180.669897][T12944] ? kvm_setup_guest_pvclock+0x701/0x730 [ 180.671799][T12944] vcpu_run+0x33a4/0x4f50 [ 180.673293][T12944] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 180.675157][T12944] ? __pfx_vcpu_run+0x10/0x10 [ 180.676770][T12944] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 180.678548][T12944] ? rcu_is_watching+0x12/0xc0 [ 180.680085][T12944] ? trace_lock_acquire+0x14e/0x1f0 [ 180.681737][T12944] ? __local_bh_enable_ip+0xa4/0x120 [ 180.683498][T12944] ? lockdep_hardirqs_on+0x7c/0x110 [ 180.685359][T12944] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 180.687290][T12944] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 180.688835][T12944] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 180.690631][T12944] kvm_vcpu_ioctl+0x6ce/0x1520 [ 180.691920][T12944] ? do_vfs_ioctl+0x513/0x1990 [ 180.693223][T12944] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.694610][T12944] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 180.696361][T12944] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 180.698215][T12944] ? __pfx_lock_release+0x10/0x10 [ 180.699604][T12944] ? selinux_file_ioctl+0x180/0x270 [ 180.701123][T12944] ? selinux_file_ioctl+0xb4/0x270 [ 180.702610][T12944] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.704239][T12944] __x64_sys_ioctl+0x190/0x200 [ 180.705700][T12944] do_syscall_64+0xcd/0x250 [ 180.706980][T12944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.708597][T12944] RIP: 0033:0x7f87e057ff19 [ 180.709818][T12944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.713830][T12964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2139'. [ 180.714935][T12944] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.720272][T12944] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 180.722616][T12944] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 180.724795][T12944] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.726909][T12944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.729028][T12944] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 180.731133][T12944] [ 180.743847][ T5973] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 180.746117][ T5973] usb 5-1: config 0 has no interface number 0 [ 180.747772][ T5973] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.752481][ T5973] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 180.754894][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.757818][ T5973] usb 5-1: Product: syz [ 180.758973][ T5973] usb 5-1: Manufacturer: syz [ 180.762365][ T5973] usb 5-1: SerialNumber: syz [ 180.767120][ T5973] usb 5-1: config 0 descriptor?? [ 180.772730][ T5973] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 180.813330][T12969] netlink: 'syz.3.2140': attribute type 9 has an invalid length. [ 180.815849][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 180.846207][ T5941] Bluetooth: hci0: command tx timeout [ 180.886561][T12978] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2141'. [ 180.992156][T10176] usb 5-1: USB disconnect, device number 13 [ 180.995373][T10176] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 180.996997][T12975] kvm: kvm [12974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 181.547095][ T25] IPVS: starting estimator thread 0... [ 181.562887][T13023] kvm: kvm [13022]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 181.632308][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 181.632319][ T39] audit: type=1400 audit(181.531:23308): avc: denied { ioctl } for pid=13034 comm="syz.3.2158" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 181.646388][ T39] audit: type=1400 audit(181.531:23309): avc: denied { write } for pid=13034 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.646398][T13029] IPVS: using max 38 ests per chain, 91200 per kthread [ 181.768617][T13049] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 181.803472][T13037] FAULT_INJECTION: forcing a failure. [ 181.803472][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 181.808353][T13037] CPU: 0 UID: 0 PID: 13037 Comm: syz.0.2159 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 181.811291][T13037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.814904][T13037] Call Trace: [ 181.816079][T13037] [ 181.817158][T13037] dump_stack_lvl+0x16c/0x1f0 [ 181.818549][T13037] should_fail_ex+0x497/0x5b0 [ 181.819889][T13037] ? fs_reclaim_acquire+0xae/0x150 [ 181.821372][T13037] should_failslab+0xc2/0x120 [ 181.823019][T13037] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 181.824736][T13037] ? __pfx_mark_lock+0x10/0x10 [ 181.826109][T13037] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 181.827743][T13037] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 181.829317][T13037] mmu_topup_memory_caches+0x22/0xd0 [ 181.830914][T13037] kvm_mmu_load+0xda/0x21f0 [ 181.832405][T13037] ? mark_held_locks+0x9f/0xe0 [ 181.833761][T13037] ? kvm_apic_has_interrupt+0xb6/0x190 [ 181.835230][T13037] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 181.836983][T13037] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 181.838620][T13037] ? __pfx_kvm_mmu_load+0x10/0x10 [ 181.839973][T13037] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 181.841599][T13037] ? kvm_check_and_inject_events+0x725/0x12e0 [ 181.843329][T13037] ? kvm_setup_guest_pvclock+0x701/0x730 [ 181.845174][T13037] vcpu_run+0x33a4/0x4f50 [ 181.846408][T13037] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 181.848011][T13037] ? __pfx_vcpu_run+0x10/0x10 [ 181.849385][T13037] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.851116][T13037] ? rcu_is_watching+0x12/0xc0 [ 181.852804][T13037] ? trace_lock_acquire+0x14e/0x1f0 [ 181.854659][T13037] ? __local_bh_enable_ip+0xa4/0x120 [ 181.856448][T13037] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.858223][T13037] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 181.860192][T13037] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 181.862148][T13037] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 181.864107][T13037] kvm_vcpu_ioctl+0x6ce/0x1520 [ 181.866156][T13037] ? do_vfs_ioctl+0x513/0x1990 [ 181.867827][T13037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.869700][T13037] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 181.872270][T13037] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.874941][T13037] ? __pfx_lock_release+0x10/0x10 [ 181.876752][T13037] ? selinux_file_ioctl+0x180/0x270 [ 181.878644][T13037] ? selinux_file_ioctl+0xb4/0x270 [ 181.880329][T13037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.882030][T13037] __x64_sys_ioctl+0x190/0x200 [ 181.883737][T13037] do_syscall_64+0xcd/0x250 [ 181.885366][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.887415][T13037] RIP: 0033:0x7f620ad7ff19 [ 181.889366][T13037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.896142][T13037] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.899501][T13037] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 181.902152][T13037] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 181.905188][T13037] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.907456][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.909746][T13037] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 181.912160][T13037] [ 182.056961][T13060] openvswitch: netlink: IP tunnel dst address not specified [ 182.140352][T13069] batadv0: entered promiscuous mode [ 182.143840][T13069] bond0: entered promiscuous mode [ 182.143880][T13069] bond_slave_0: entered promiscuous mode [ 182.143960][T13069] bond_slave_1: entered promiscuous mode [ 182.148079][T13069] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 182.154074][T13069] Cannot create hsr debugfs directory [ 182.154383][T13069] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 182.241406][ T39] audit: type=1400 audit(182.141:23310): avc: denied { mount } for pid=13076 comm="syz.3.2171" name="/" dev="ramfs" ino=75417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 182.243852][T13077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.248207][T13065] kvm: kvm [13064]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4c500000080 [ 182.255417][T13065] kvm: kvm [13064]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x11df00000000 [ 182.258468][T13065] kvm: kvm [13064]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x120000000080 [ 182.262743][ T39] audit: type=1326 audit(182.161:23311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.3.2171" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd7bd7ff19 code=0x0 [ 182.264655][T13065] kvm: kvm [13064]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x170000000000 [ 182.273600][T13065] kvm: kvm [13064]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x174500000080 [ 182.283151][T13072] FAULT_INJECTION: forcing a failure. [ 182.283151][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 182.288053][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.1.2170 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 182.291137][T13072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.294036][T13072] Call Trace: [ 182.295003][T13072] [ 182.295799][T13072] dump_stack_lvl+0x16c/0x1f0 [ 182.297121][T13072] should_fail_ex+0x497/0x5b0 [ 182.298431][T13072] ? fs_reclaim_acquire+0xae/0x150 [ 182.299794][T13072] should_failslab+0xc2/0x120 [ 182.301054][T13072] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 182.302703][T13072] ? __pfx_mark_lock+0x10/0x10 [ 182.304524][T13072] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 182.306301][T13072] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 182.307947][T13072] mmu_topup_memory_caches+0x22/0xd0 [ 182.309698][T13072] kvm_mmu_load+0xda/0x21f0 [ 182.311084][T13072] ? mark_held_locks+0x9f/0xe0 [ 182.312694][T13072] ? kvm_apic_has_interrupt+0xb6/0x190 [ 182.314304][T13072] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 182.316383][T13072] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 182.318062][T13072] ? __pfx_kvm_mmu_load+0x10/0x10 [ 182.319444][T13072] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 182.321139][T13072] ? kvm_check_and_inject_events+0x725/0x12e0 [ 182.322881][T13072] ? kvm_setup_guest_pvclock+0x701/0x730 [ 182.324433][T13072] vcpu_run+0x33a4/0x4f50 [ 182.325787][T13072] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 182.327492][T13072] ? __pfx_vcpu_run+0x10/0x10 [ 182.328938][T13072] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.330783][T13072] ? rcu_is_watching+0x12/0xc0 [ 182.332425][T13072] ? trace_lock_acquire+0x14e/0x1f0 [ 182.333963][T13072] ? __local_bh_enable_ip+0xa4/0x120 [ 182.335684][T13072] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.337106][T13072] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 182.338657][T13072] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 182.340211][T13072] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 182.341722][T13072] kvm_vcpu_ioctl+0x6ce/0x1520 [ 182.343331][T13072] ? do_vfs_ioctl+0x513/0x1990 [ 182.344854][T13072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.346525][T13072] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 182.348383][T13072] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.350403][T13072] ? __pfx_lock_release+0x10/0x10 [ 182.351910][T13072] ? selinux_file_ioctl+0x180/0x270 [ 182.353680][T13072] ? selinux_file_ioctl+0xb4/0x270 [ 182.355320][T13072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.356769][T13072] __x64_sys_ioctl+0x190/0x200 [ 182.358144][T13072] do_syscall_64+0xcd/0x250 [ 182.359371][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.360970][T13072] RIP: 0033:0x7fce2ed7ff19 [ 182.362187][T13072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.368062][T13072] RSP: 002b:00007fce2fc6f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.370710][T13072] RAX: ffffffffffffffda RBX: 00007fce2ef45fa0 RCX: 00007fce2ed7ff19 [ 182.372949][T13072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 182.375062][T13072] RBP: 00007fce2fc6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.377249][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.379464][T13072] R13: 0000000000000000 R14: 00007fce2ef45fa0 R15: 00007fffdd196358 [ 182.381725][T13072] [ 182.434744][ T39] audit: type=1400 audit(182.331:23312): avc: denied { bind } for pid=13076 comm="syz.3.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.445129][T13082] netem: change failed [ 182.690850][T13091] FAULT_INJECTION: forcing a failure. [ 182.690850][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 182.694201][T13091] CPU: 1 UID: 0 PID: 13091 Comm: syz.4.2176 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 182.697032][T13091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.699835][T13091] Call Trace: [ 182.700722][T13091] [ 182.701523][T13091] dump_stack_lvl+0x16c/0x1f0 [ 182.702783][T13091] should_fail_ex+0x497/0x5b0 [ 182.704054][T13091] ? fs_reclaim_acquire+0xae/0x150 [ 182.705459][T13091] should_failslab+0xc2/0x120 [ 182.706734][T13091] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 182.708226][T13091] ? __pfx_mark_lock+0x10/0x10 [ 182.709542][T13091] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 182.711183][T13091] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 182.712762][T13091] mmu_topup_memory_caches+0x22/0xd0 [ 182.714154][T13091] kvm_mmu_load+0xda/0x21f0 [ 182.715392][T13091] ? mark_held_locks+0x9f/0xe0 [ 182.716685][T13091] ? kvm_apic_has_interrupt+0xb6/0x190 [ 182.718153][T13091] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 182.719723][T13091] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 182.721232][T13091] ? __pfx_kvm_mmu_load+0x10/0x10 [ 182.722598][T13091] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 182.724185][T13091] ? kvm_check_and_inject_events+0x725/0x12e0 [ 182.726086][T13091] ? kvm_setup_guest_pvclock+0x701/0x730 [ 182.727711][T13091] vcpu_run+0x33a4/0x4f50 [ 182.728980][T13091] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 182.730497][T13091] ? __pfx_vcpu_run+0x10/0x10 [ 182.731780][T13091] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.733317][T13091] ? rcu_is_watching+0x12/0xc0 [ 182.734641][T13091] ? trace_lock_acquire+0x14e/0x1f0 [ 182.736041][T13091] ? __local_bh_enable_ip+0xa4/0x120 [ 182.737491][T13091] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.738897][T13091] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 182.740404][T13091] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 182.741887][T13091] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 182.743415][T13091] kvm_vcpu_ioctl+0x6ce/0x1520 [ 182.744711][T13091] ? do_vfs_ioctl+0x513/0x1990 [ 182.746013][T13091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.747462][T13091] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 182.749219][T13091] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.751046][T13091] ? __pfx_lock_release+0x10/0x10 [ 182.752400][T13091] ? selinux_file_ioctl+0x180/0x270 [ 182.753809][T13091] ? selinux_file_ioctl+0xb4/0x270 [ 182.755185][T13091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.756590][T13091] __x64_sys_ioctl+0x190/0x200 [ 182.757900][T13091] do_syscall_64+0xcd/0x250 [ 182.759226][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.760922][T13091] RIP: 0033:0x7f87e057ff19 [ 182.762142][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.767267][T13091] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.769487][T13091] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 182.771614][T13091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 182.773755][T13091] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.775887][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.778035][T13091] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 182.780184][T13091] [ 182.926745][ T5941] Bluetooth: hci0: command tx timeout [ 183.070294][ T39] audit: type=1400 audit(182.971:23313): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 183.098413][ T39] audit: type=1400 audit(183.001:23314): avc: denied { accept } for pid=13105 comm="syz.1.2181" lport=58242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.255897][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 183.384105][T13120] FAULT_INJECTION: forcing a failure. [ 183.384105][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 183.388772][T13120] CPU: 3 UID: 0 PID: 13120 Comm: syz.0.2185 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 183.391897][T13120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.394765][T13120] Call Trace: [ 183.395674][T13120] [ 183.396115][ T25] usb 9-1: device descriptor read/64, error -71 [ 183.396535][T13120] dump_stack_lvl+0x16c/0x1f0 [ 183.400165][T13120] should_fail_ex+0x497/0x5b0 [ 183.401530][T13120] ? fs_reclaim_acquire+0xae/0x150 [ 183.403050][T13120] should_failslab+0xc2/0x120 [ 183.404347][T13120] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 183.405818][T13120] ? __pfx_mark_lock+0x10/0x10 [ 183.407130][T13120] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 183.408829][T13120] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 183.410556][T13120] mmu_topup_memory_caches+0x22/0xd0 [ 183.412185][T13120] kvm_mmu_load+0xda/0x21f0 [ 183.413555][T13120] ? mark_held_locks+0x9f/0xe0 [ 183.414982][T13120] ? kvm_apic_has_interrupt+0xb6/0x190 [ 183.416543][T13120] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 183.418127][T13120] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 183.419647][T13120] ? __pfx_kvm_mmu_load+0x10/0x10 [ 183.421076][T13120] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 183.422666][T13120] ? kvm_check_and_inject_events+0x725/0x12e0 [ 183.424287][T13120] ? kvm_setup_guest_pvclock+0x701/0x730 [ 183.425854][T13120] vcpu_run+0x33a4/0x4f50 [ 183.427027][T13120] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 183.428516][T13120] ? __pfx_vcpu_run+0x10/0x10 [ 183.429807][T13120] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.431320][T13120] ? rcu_is_watching+0x12/0xc0 [ 183.432622][T13120] ? trace_lock_acquire+0x14e/0x1f0 [ 183.434013][T13120] ? __local_bh_enable_ip+0xa4/0x120 [ 183.435427][T13120] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.436830][T13120] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 183.438367][T13120] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 183.440007][T13120] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 183.441639][T13120] kvm_vcpu_ioctl+0x6ce/0x1520 [ 183.443014][T13120] ? do_vfs_ioctl+0x513/0x1990 [ 183.444400][T13120] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.445874][T13120] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 183.447654][T13120] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 183.449490][T13120] ? __pfx_lock_release+0x10/0x10 [ 183.450846][T13120] ? selinux_file_ioctl+0x180/0x270 [ 183.452246][T13120] ? selinux_file_ioctl+0xb4/0x270 [ 183.453635][T13120] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.455043][T13120] __x64_sys_ioctl+0x190/0x200 [ 183.456336][T13120] do_syscall_64+0xcd/0x250 [ 183.457569][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.459182][T13120] RIP: 0033:0x7f620ad7ff19 [ 183.460403][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.465540][T13120] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.467780][T13120] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 183.469905][T13120] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 183.472018][T13120] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.474292][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.476392][T13120] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 183.478030][T13126] syz.3.2187 (13126): attempted to duplicate a private mapping with mremap. This is not supported. [ 183.478903][T13120] [ 183.479011][ C3] vkms_vblank_simulate: vblank timer overrun [ 183.636213][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 183.691309][T13136] FAULT_INJECTION: forcing a failure. [ 183.691309][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 183.695295][T13136] CPU: 2 UID: 0 PID: 13136 Comm: syz.0.2189 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 183.698204][T13136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.701070][T13136] Call Trace: [ 183.701976][T13136] [ 183.702820][T13136] dump_stack_lvl+0x16c/0x1f0 [ 183.704433][T13136] should_fail_ex+0x497/0x5b0 [ 183.706110][T13136] ? fs_reclaim_acquire+0xae/0x150 [ 183.707917][T13136] should_failslab+0xc2/0x120 [ 183.709510][T13136] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 183.710934][T13136] ? __pfx_mark_lock+0x10/0x10 [ 183.712207][T13136] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 183.714098][T13136] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 183.716191][T13136] mmu_topup_memory_caches+0x22/0xd0 [ 183.718086][T13136] kvm_mmu_load+0xda/0x21f0 [ 183.719730][T13136] ? mark_held_locks+0x9f/0xe0 [ 183.721465][T13136] ? kvm_apic_has_interrupt+0xb6/0x190 [ 183.723395][T13136] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 183.725540][T13136] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 183.727552][T13136] ? __pfx_kvm_mmu_load+0x10/0x10 [ 183.729378][T13136] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 183.731455][T13136] ? kvm_check_and_inject_events+0x725/0x12e0 [ 183.733598][T13136] ? kvm_setup_guest_pvclock+0x701/0x730 [ 183.735594][T13136] vcpu_run+0x33a4/0x4f50 [ 183.737134][T13136] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 183.739114][T13136] ? __pfx_vcpu_run+0x10/0x10 [ 183.740798][T13136] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.742777][T13136] ? rcu_is_watching+0x12/0xc0 [ 183.744494][T13136] ? trace_lock_acquire+0x14e/0x1f0 [ 183.746371][T13136] ? __local_bh_enable_ip+0xa4/0x120 [ 183.748233][T13136] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.750070][T13136] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 183.752088][T13136] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 183.754118][T13136] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 183.756087][T13136] kvm_vcpu_ioctl+0x6ce/0x1520 [ 183.757789][T13136] ? do_vfs_ioctl+0x513/0x1990 [ 183.759498][T13136] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.761336][T13136] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 183.763600][T13136] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 183.765924][T13136] ? __pfx_lock_release+0x10/0x10 [ 183.767720][T13136] ? selinux_file_ioctl+0x180/0x270 [ 183.769561][T13136] ? selinux_file_ioctl+0xb4/0x270 [ 183.771370][T13136] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.773206][T13136] __x64_sys_ioctl+0x190/0x200 [ 183.774902][T13136] do_syscall_64+0xcd/0x250 [ 183.776513][T13136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.778603][T13136] RIP: 0033:0x7f620ad7ff19 [ 183.780182][T13136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.786803][T13136] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.789708][T13136] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 183.792464][T13136] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 183.795221][T13136] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.798027][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.800790][T13136] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 183.803568][T13136] [ 183.858715][ T25] usb 9-1: device descriptor read/64, error -71 [ 183.966695][ T25] usb usb9-port1: attempt power cycle [ 184.125323][T13156] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 184.219309][ T39] audit: type=1326 audit(184.121:23315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.1.2198" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce2ed7ff19 code=0x0 [ 184.306094][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 184.336161][ T25] usb 9-1: device descriptor read/8, error -71 [ 184.432088][T13169] FAULT_INJECTION: forcing a failure. [ 184.432088][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 184.435529][T13169] CPU: 2 UID: 0 PID: 13169 Comm: syz.0.2199 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 184.438446][T13169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.441345][T13169] Call Trace: [ 184.442251][T13169] [ 184.443048][T13169] dump_stack_lvl+0x16c/0x1f0 [ 184.444319][T13169] should_fail_ex+0x497/0x5b0 [ 184.445607][T13169] ? fs_reclaim_acquire+0xae/0x150 [ 184.447234][T13169] should_failslab+0xc2/0x120 [ 184.448741][T13169] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 184.450180][T13169] ? __pfx_mark_lock+0x10/0x10 [ 184.451469][T13169] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 184.453091][T13169] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 184.454628][T13169] mmu_topup_memory_caches+0x22/0xd0 [ 184.456042][T13169] kvm_mmu_load+0xda/0x21f0 [ 184.457313][T13169] ? mark_held_locks+0x9f/0xe0 [ 184.458570][T13169] ? kvm_apic_has_interrupt+0xb6/0x190 [ 184.460005][T13169] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 184.461594][T13169] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 184.463084][T13169] ? __pfx_kvm_mmu_load+0x10/0x10 [ 184.464433][T13169] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 184.466027][T13169] ? kvm_check_and_inject_events+0x725/0x12e0 [ 184.467644][T13169] ? kvm_setup_guest_pvclock+0x701/0x730 [ 184.469125][T13169] vcpu_run+0x33a4/0x4f50 [ 184.470276][T13169] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 184.471752][T13169] ? __pfx_vcpu_run+0x10/0x10 [ 184.473030][T13169] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 184.474528][T13169] ? rcu_is_watching+0x12/0xc0 [ 184.475813][T13169] ? trace_lock_acquire+0x14e/0x1f0 [ 184.477257][T13169] ? __local_bh_enable_ip+0xa4/0x120 [ 184.478664][T13169] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.480046][T13169] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 184.481606][T13169] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 184.483134][T13169] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 184.484643][T13169] kvm_vcpu_ioctl+0x6ce/0x1520 [ 184.485926][T13169] ? do_vfs_ioctl+0x513/0x1990 [ 184.487233][T13169] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.488691][T13169] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 184.490420][T13169] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.492247][T13169] ? __pfx_lock_release+0x10/0x10 [ 184.493629][T13169] ? selinux_file_ioctl+0x180/0x270 [ 184.495039][T13169] ? selinux_file_ioctl+0xb4/0x270 [ 184.496490][T13169] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.497936][T13169] __x64_sys_ioctl+0x190/0x200 [ 184.499249][T13169] do_syscall_64+0xcd/0x250 [ 184.500478][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.502123][T13169] RIP: 0033:0x7f620ad7ff19 [ 184.503343][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.508429][T13169] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.510652][T13169] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 184.512762][T13169] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 184.514866][T13169] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.517021][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.519153][T13169] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 184.521312][T13169] [ 184.656169][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 184.679635][ T39] audit: type=1400 audit(184.581:23316): avc: denied { read } for pid=13179 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.689383][ T25] usb 9-1: device descriptor read/8, error -71 [ 184.796666][ T25] usb usb9-port1: unable to enumerate USB device [ 184.825597][T13186] FAULT_INJECTION: forcing a failure. [ 184.825597][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 184.832683][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz.0.2203 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 184.836739][T13186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.840927][T13186] Call Trace: [ 184.842181][T13186] [ 184.843291][T13186] dump_stack_lvl+0x16c/0x1f0 [ 184.845051][T13186] should_fail_ex+0x497/0x5b0 [ 184.846798][T13186] ? fs_reclaim_acquire+0xae/0x150 [ 184.848454][T13186] should_failslab+0xc2/0x120 [ 184.849955][T13186] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 184.851634][T13186] ? __pfx_mark_lock+0x10/0x10 [ 184.853145][T13186] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 184.855048][T13186] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 184.857021][T13186] mmu_topup_memory_caches+0x22/0xd0 [ 184.858465][T13186] kvm_mmu_load+0xda/0x21f0 [ 184.859719][T13186] ? mark_held_locks+0x9f/0xe0 [ 184.861071][T13186] ? kvm_apic_has_interrupt+0xb6/0x190 [ 184.862689][T13186] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 184.864314][T13186] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 184.865942][T13186] ? __pfx_kvm_mmu_load+0x10/0x10 [ 184.867299][T13186] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 184.869015][T13186] ? kvm_check_and_inject_events+0x725/0x12e0 [ 184.870502][T13186] ? kvm_setup_guest_pvclock+0x701/0x730 [ 184.872017][T13186] vcpu_run+0x33a4/0x4f50 [ 184.873204][T13186] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 184.874807][T13186] ? __pfx_vcpu_run+0x10/0x10 [ 184.876478][T13186] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 184.878450][T13186] ? rcu_is_watching+0x12/0xc0 [ 184.880129][T13186] ? trace_lock_acquire+0x14e/0x1f0 [ 184.881956][T13186] ? __local_bh_enable_ip+0xa4/0x120 [ 184.883774][T13186] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.885604][T13186] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 184.887846][T13186] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 184.889849][T13186] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 184.891768][T13186] kvm_vcpu_ioctl+0x6ce/0x1520 [ 184.893521][T13186] ? do_vfs_ioctl+0x513/0x1990 [ 184.895196][T13186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.896993][T13186] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 184.899222][T13186] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.901547][T13186] ? __pfx_lock_release+0x10/0x10 [ 184.903277][T13186] ? selinux_file_ioctl+0x180/0x270 [ 184.905069][T13186] ? selinux_file_ioctl+0xb4/0x270 [ 184.906832][T13186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.908634][T13186] __x64_sys_ioctl+0x190/0x200 [ 184.910257][T13186] do_syscall_64+0xcd/0x250 [ 184.911830][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.913731][T13186] RIP: 0033:0x7f620ad7ff19 [ 184.915254][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.921679][T13186] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.924390][T13186] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 184.927025][T13186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 184.929621][T13186] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.932159][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.934901][T13186] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 184.937627][T13186] [ 185.006177][ T5941] Bluetooth: hci0: command tx timeout [ 185.319955][T13211] kvm: kvm [13210]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 185.570563][T13227] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 185.614823][T13230] __nla_validate_parse: 14 callbacks suppressed [ 185.614834][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 185.619959][ T39] audit: type=1400 audit(185.511:23317): avc: denied { nlmsg_read } for pid=13229 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.628079][T13230] lo speed is unknown, defaulting to 1000 [ 185.698091][T13230] xt_nat: multiple ranges no longer supported [ 185.823070][T13235] FAULT_INJECTION: forcing a failure. [ 185.823070][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 185.835515][T13235] CPU: 3 UID: 0 PID: 13235 Comm: syz.1.2217 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 185.838457][T13235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.841344][T13235] Call Trace: [ 185.842251][T13235] [ 185.843062][T13235] dump_stack_lvl+0x16c/0x1f0 [ 185.844398][T13235] should_fail_ex+0x497/0x5b0 [ 185.845694][T13235] ? fs_reclaim_acquire+0xae/0x150 [ 185.847081][T13235] should_failslab+0xc2/0x120 [ 185.848598][T13235] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 185.850069][T13235] ? __pfx_mark_lock+0x10/0x10 [ 185.851369][T13235] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.853097][T13235] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.854835][T13235] mmu_topup_memory_caches+0x22/0xd0 [ 185.856330][T13235] kvm_mmu_load+0xda/0x21f0 [ 185.857587][T13235] ? mark_held_locks+0x9f/0xe0 [ 185.858899][T13235] ? kvm_apic_has_interrupt+0xb6/0x190 [ 185.860390][T13235] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.862111][T13235] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 185.863643][T13235] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.865020][T13235] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 185.866616][T13235] ? kvm_check_and_inject_events+0x725/0x12e0 [ 185.868197][T13235] ? kvm_setup_guest_pvclock+0x701/0x730 [ 185.869691][T13235] vcpu_run+0x33a4/0x4f50 [ 185.870861][T13235] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 185.872311][T13235] ? __pfx_vcpu_run+0x10/0x10 [ 185.873617][T13235] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 185.875094][T13235] ? rcu_is_watching+0x12/0xc0 [ 185.876375][T13235] ? trace_lock_acquire+0x14e/0x1f0 [ 185.877761][T13235] ? __local_bh_enable_ip+0xa4/0x120 [ 185.879195][T13235] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.880584][T13235] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 185.882100][T13235] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 185.883621][T13235] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 185.885210][T13235] kvm_vcpu_ioctl+0x6ce/0x1520 [ 185.886523][T13235] ? do_vfs_ioctl+0x513/0x1990 [ 185.887832][T13235] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.889258][T13235] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 185.891161][T13235] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.892976][T13235] ? __pfx_lock_release+0x10/0x10 [ 185.894318][T13235] ? selinux_file_ioctl+0x180/0x270 [ 185.895769][T13235] ? selinux_file_ioctl+0xb4/0x270 [ 185.897365][T13235] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.898922][T13235] __x64_sys_ioctl+0x190/0x200 [ 185.900298][T13235] do_syscall_64+0xcd/0x250 [ 185.901522][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.903133][T13235] RIP: 0033:0x7fce2ed7ff19 [ 185.904366][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.909571][T13235] RSP: 002b:00007fce2fc6f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.911899][T13235] RAX: ffffffffffffffda RBX: 00007fce2ef45fa0 RCX: 00007fce2ed7ff19 [ 185.914228][T13235] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 185.916435][T13235] RBP: 00007fce2fc6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.918564][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.920707][T13235] R13: 0000000000000000 R14: 00007fce2ef45fa0 R15: 00007fffdd196358 [ 185.922833][T13235] [ 185.923777][ C3] vkms_vblank_simulate: vblank timer overrun [ 186.193688][T13252] kvm: kvm [13250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 186.682241][ T45] Bluetooth: Error in BCSP hdr checksum [ 186.851148][T13288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2235'. [ 186.872129][T13287] binder: BINDER_SET_CONTEXT_MGR already set [ 186.874120][T13287] binder: 13285:13287 ioctl 4018620d 200002c0 returned -16 [ 186.877671][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 186.877703][ T39] audit: type=1400 audit(186.781:23320): avc: denied { connect } for pid=13291 comm="syz.4.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.921411][ T39] audit: type=1400 audit(186.821:23321): avc: denied { write } for pid=13298 comm="syz.0.2237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.928640][T13299] team0: entered allmulticast mode [ 186.930048][T13299] team_slave_0: entered allmulticast mode [ 186.931554][T13299] team_slave_1: entered allmulticast mode [ 186.935727][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 186.939176][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 186.947486][ T39] audit: type=1400 audit(186.851:23322): avc: denied { getopt } for pid=13298 comm="syz.0.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.962500][ T39] audit: type=1400 audit(186.861:23323): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 187.086208][ T5286] Bluetooth: hci0: command tx timeout [ 187.951881][T13321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.956388][T13320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.994721][T13327] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2245'. [ 188.256153][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.272995][T13333] FAULT_INJECTION: forcing a failure. [ 188.272995][T13333] name failslab, interval 1, probability 0, space 0, times 0 [ 188.276637][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.4.2247 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 188.279450][T13333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.282279][T13333] Call Trace: [ 188.283171][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.283212][T13333] [ 188.285979][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.286432][T13333] dump_stack_lvl+0x16c/0x1f0 [ 188.286456][T13333] should_fail_ex+0x497/0x5b0 [ 188.286471][T13333] ? fs_reclaim_acquire+0xae/0x150 [ 188.286489][T13333] should_failslab+0xc2/0x120 [ 188.286503][T13333] __kmalloc_node_noprof+0xd1/0x510 [ 188.286516][T13333] ? alloc_slab_obj_exts+0x41/0xa0 [ 188.286529][T13333] alloc_slab_obj_exts+0x41/0xa0 [ 188.286540][T13333] new_slab+0x314/0x410 [ 188.286551][T13333] ___slab_alloc+0xdac/0x1870 [ 188.286562][T13333] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.286582][T13333] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.286593][T13333] ? __slab_alloc.constprop.0+0x56/0xb0 [ 188.286604][T13333] __slab_alloc.constprop.0+0x56/0xb0 [ 188.286617][T13333] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 188.286628][T13333] ? __pfx_mark_lock+0x10/0x10 [ 188.286641][T13333] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.286654][T13333] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.286670][T13333] mmu_topup_memory_caches+0x22/0xd0 [ 188.286687][T13333] kvm_mmu_load+0xda/0x21f0 [ 188.286701][T13333] ? mark_held_locks+0x9f/0xe0 [ 188.286713][T13333] ? kvm_apic_has_interrupt+0xb6/0x190 [ 188.286727][T13333] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 188.290613][T13337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13337 comm=syz.1.2248 [ 188.291670][T13333] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 188.293303][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.294274][T13333] ? __pfx_kvm_mmu_load+0x10/0x10 [ 188.295791][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.297061][T13333] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 188.297084][T13333] ? kvm_check_and_inject_events+0x725/0x12e0 [ 188.297100][T13333] ? kvm_setup_guest_pvclock+0x701/0x730 [ 188.297117][T13333] vcpu_run+0x33a4/0x4f50 [ 188.297133][T13333] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 188.297152][T13333] ? __pfx_vcpu_run+0x10/0x10 [ 188.297166][T13333] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 188.297178][T13333] ? rcu_is_watching+0x12/0xc0 [ 188.299218][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.299691][T13333] ? trace_lock_acquire+0x14e/0x1f0 [ 188.301052][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.302566][T13333] ? __local_bh_enable_ip+0xa4/0x120 [ 188.304324][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.305646][T13333] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.307595][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.308493][T13333] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 188.309855][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.311444][T13333] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 188.313108][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.314593][T13333] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 188.314623][T13333] kvm_vcpu_ioctl+0x6ce/0x1520 [ 188.314635][T13333] ? do_vfs_ioctl+0x513/0x1990 [ 188.315983][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.317140][T13333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.317160][T13333] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 188.317176][T13333] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.319388][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.320256][T13333] ? __pfx_lock_release+0x10/0x10 [ 188.323771][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.325540][T13333] ? selinux_file_ioctl+0x180/0x270 [ 188.328451][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.329299][T13333] ? selinux_file_ioctl+0xb4/0x270 [ 188.331813][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.333522][T13333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.333552][T13333] __x64_sys_ioctl+0x190/0x200 [ 188.333582][T13333] do_syscall_64+0xcd/0x250 [ 188.333609][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.333632][T13333] RIP: 0033:0x7f87e057ff19 [ 188.333648][T13333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.333666][T13333] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.335418][T13338] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.336798][T13333] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 188.336812][T13333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 188.336819][T13333] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.336826][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.336833][T13333] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 188.336848][T13333] [ 188.426181][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 188.429089][ T8] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 188.431209][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.433915][ T8] usb 5-1: config 0 has no interface number 0 [ 188.435533][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 188.438577][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 188.441531][ T8] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.444860][ T8] usb 5-1: config 0 interface 52 has no altsetting 0 [ 188.452102][ T8] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 188.455114][ T8] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 188.458635][ T8] usb 5-1: Product: syz [ 188.459968][ T8] usb 5-1: SerialNumber: syz [ 188.463228][ T8] usb 5-1: config 0 descriptor?? [ 188.545773][ T39] audit: type=1400 audit(188.441:23324): avc: denied { read write } for pid=13345 comm="syz.4.2250" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.549303][T13346] input: syz0 as /devices/virtual/input/input17 [ 188.553809][ T39] audit: type=1400 audit(188.441:23325): avc: denied { open } for pid=13345 comm="syz.4.2250" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.561849][ T39] audit: type=1400 audit(188.451:23326): avc: denied { ioctl } for pid=13345 comm="syz.4.2250" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.570654][ T39] audit: type=1400 audit(188.451:23327): avc: denied { read } for pid=5331 comm="acpid" name="js0" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.582239][ T39] audit: type=1400 audit(188.451:23328): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.589766][ T39] audit: type=1400 audit(188.451:23329): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3048 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.611764][T13342] kvm: kvm [13341]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24df00000080 [ 188.670060][ T8] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.52/input/input18 [ 188.675138][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.683016][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.686221][ T5286] Bluetooth: hci4: command 0x1003 tx timeout [ 188.686406][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.699453][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.717070][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.747924][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.767727][ T8281] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.778262][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.789616][ T5331] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 188.790367][T13354] ufs: You didn't specify the type of your ufs filesystem [ 188.790367][T13354] [ 188.790367][T13354] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 188.790367][T13354] [ 188.790367][T13354] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 188.802557][T13354] ufs: ufstype=old is supported read-only [ 188.807214][T13354] ufs: ufs_fill_super(): bad magic number [ 189.289360][T13362] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 189.704830][T13364] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2256'. [ 189.865718][T13368] FAULT_INJECTION: forcing a failure. [ 189.865718][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 189.869178][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.4.2258 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 189.871990][T13368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.874815][T13368] Call Trace: [ 189.875723][T13368] [ 189.876524][T13368] dump_stack_lvl+0x16c/0x1f0 [ 189.877781][T13368] should_fail_ex+0x497/0x5b0 [ 189.879040][T13368] ? fs_reclaim_acquire+0xae/0x150 [ 189.880390][T13368] should_failslab+0xc2/0x120 [ 189.881639][T13368] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 189.883077][T13368] ? __pfx_mark_lock+0x10/0x10 [ 189.884369][T13368] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 189.885974][T13368] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 189.887513][T13368] mmu_topup_memory_caches+0x22/0xd0 [ 189.888901][T13368] kvm_mmu_load+0xda/0x21f0 [ 189.890099][T13368] ? mark_held_locks+0x9f/0xe0 [ 189.891373][T13368] ? kvm_apic_has_interrupt+0xb6/0x190 [ 189.892822][T13368] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 189.894391][T13368] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 189.895863][T13368] ? __pfx_kvm_mmu_load+0x10/0x10 [ 189.897202][T13368] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 189.898759][T13368] ? kvm_check_and_inject_events+0x725/0x12e0 [ 189.900375][T13368] ? kvm_setup_guest_pvclock+0x701/0x730 [ 189.901860][T13368] vcpu_run+0x33a4/0x4f50 [ 189.903119][T13368] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 189.904649][T13368] ? __pfx_vcpu_run+0x10/0x10 [ 189.905925][T13368] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 189.907420][T13368] ? rcu_is_watching+0x12/0xc0 [ 189.908752][T13368] ? trace_lock_acquire+0x14e/0x1f0 [ 189.910189][T13368] ? __local_bh_enable_ip+0xa4/0x120 [ 189.911651][T13368] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.913063][T13368] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 189.914586][T13368] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 189.916086][T13368] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 189.917572][T13368] kvm_vcpu_ioctl+0x6ce/0x1520 [ 189.918841][T13368] ? do_vfs_ioctl+0x513/0x1990 [ 189.920134][T13368] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.921666][T13368] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 189.923499][T13368] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 189.925330][T13368] ? __pfx_lock_release+0x10/0x10 [ 189.926660][T13368] ? selinux_file_ioctl+0x180/0x270 [ 189.928048][T13368] ? selinux_file_ioctl+0xb4/0x270 [ 189.929484][T13368] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.930916][T13368] __x64_sys_ioctl+0x190/0x200 [ 189.932245][T13368] do_syscall_64+0xcd/0x250 [ 189.933621][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.935246][T13368] RIP: 0033:0x7f87e057ff19 [ 189.936457][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.941579][T13368] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.943869][T13368] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 189.945997][T13368] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 189.948089][T13368] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.950218][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.952335][T13368] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 189.954498][T13368] [ 190.055677][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 190.058232][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 190.086158][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.203959][T13376] kvm: kvm [13375]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24df00000080 [ 190.226397][ T8] usb 6-1: device descriptor read/64, error -71 [ 190.442747][T13380] FAULT_INJECTION: forcing a failure. [ 190.442747][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 190.446167][T13380] CPU: 0 UID: 0 PID: 13380 Comm: syz.4.2262 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 190.448998][T13380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.451773][T13380] Call Trace: [ 190.452646][T13380] [ 190.453426][T13380] dump_stack_lvl+0x16c/0x1f0 [ 190.454685][T13380] should_fail_ex+0x497/0x5b0 [ 190.455951][T13380] ? fs_reclaim_acquire+0xae/0x150 [ 190.457310][T13380] should_failslab+0xc2/0x120 [ 190.458525][T13380] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 190.459955][T13380] ? __pfx_mark_lock+0x10/0x10 [ 190.461249][T13380] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 190.462882][T13380] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 190.464515][T13380] mmu_topup_memory_caches+0x22/0xd0 [ 190.466047][T13380] kvm_mmu_load+0xda/0x21f0 [ 190.467337][T13380] ? mark_held_locks+0x9f/0xe0 [ 190.468735][T13380] ? kvm_apic_has_interrupt+0xb6/0x190 [ 190.470322][T13380] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 190.471949][T13380] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 190.473461][T13380] ? __pfx_kvm_mmu_load+0x10/0x10 [ 190.474804][T13380] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 190.476370][T13380] ? kvm_check_and_inject_events+0x725/0x12e0 [ 190.477983][T13380] ? kvm_setup_guest_pvclock+0x701/0x730 [ 190.479488][T13380] vcpu_run+0x33a4/0x4f50 [ 190.480653][T13380] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 190.482127][T13380] ? __pfx_vcpu_run+0x10/0x10 [ 190.483386][T13380] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 190.484891][T13380] ? rcu_is_watching+0x12/0xc0 [ 190.486166][T13380] ? trace_lock_acquire+0x14e/0x1f0 [ 190.487552][T13380] ? __local_bh_enable_ip+0xa4/0x120 [ 190.488958][T13380] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.490343][T13380] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 190.491845][T13380] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 190.493366][T13380] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 190.494831][T13380] kvm_vcpu_ioctl+0x6ce/0x1520 [ 190.496109][T13380] ? do_vfs_ioctl+0x513/0x1990 [ 190.497404][T13380] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.498795][T13380] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 190.500529][T13380] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.502346][T13380] ? __pfx_lock_release+0x10/0x10 [ 190.503775][T13380] ? selinux_file_ioctl+0x180/0x270 [ 190.505295][T13380] ? selinux_file_ioctl+0xb4/0x270 [ 190.506793][T13380] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.508245][T13380] __x64_sys_ioctl+0x190/0x200 [ 190.509580][T13380] do_syscall_64+0xcd/0x250 [ 190.510816][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.512406][T13380] RIP: 0033:0x7f87e057ff19 [ 190.513588][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.518620][T13380] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.520836][T13380] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 190.522932][T13380] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 190.525090][T13380] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.527296][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.529594][T13380] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 190.531916][T13380] [ 190.533511][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.666196][ T8] usb 6-1: device descriptor read/64, error -71 [ 190.776780][ T8] usb usb6-port1: attempt power cycle [ 191.040350][ T25] usb 5-1: USB disconnect, device number 14 [ 191.116438][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.137402][ T8] usb 6-1: device descriptor read/8, error -71 [ 191.179304][T13393] FAULT_INJECTION: forcing a failure. [ 191.179304][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 191.182678][T13393] CPU: 2 UID: 0 PID: 13393 Comm: syz.0.2266 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 191.185577][T13393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.188767][T13393] Call Trace: [ 191.189674][T13393] [ 191.190474][T13393] dump_stack_lvl+0x16c/0x1f0 [ 191.191735][T13393] should_fail_ex+0x497/0x5b0 [ 191.193032][T13393] ? fs_reclaim_acquire+0xae/0x150 [ 191.194533][T13393] should_failslab+0xc2/0x120 [ 191.195815][T13393] __kmalloc_noprof+0xcb/0x510 [ 191.197263][T13393] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 191.198843][T13393] tomoyo_realpath_from_path+0xb9/0x720 [ 191.200331][T13393] ? tomoyo_path_number_perm+0x235/0x590 [ 191.201851][T13393] ? tomoyo_path_number_perm+0x235/0x590 [ 191.203474][T13393] tomoyo_path_number_perm+0x248/0x590 [ 191.204945][T13393] ? tomoyo_path_number_perm+0x235/0x590 [ 191.206435][T13393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.208199][T13393] ? __pfx_lock_release+0x10/0x10 [ 191.209597][T13393] ? trace_lock_acquire+0x14e/0x1f0 [ 191.211043][T13393] ? lock_acquire+0x2f/0xb0 [ 191.212302][T13393] ? __fget_files+0x40/0x3a0 [ 191.213677][T13393] ? __fget_files+0x206/0x3a0 [ 191.214975][T13393] security_file_ioctl+0x9b/0x240 [ 191.216327][T13393] __x64_sys_ioctl+0xb7/0x200 [ 191.217601][T13393] do_syscall_64+0xcd/0x250 [ 191.218832][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.220431][T13393] RIP: 0033:0x7f620ad7ff19 [ 191.221686][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.226783][T13393] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.229110][T13393] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 191.231255][T13393] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 191.233608][T13393] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.235890][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.238505][T13393] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 191.240868][T13393] [ 191.243181][T13393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.376098][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.396517][ T8] usb 6-1: device descriptor read/8, error -71 [ 191.507197][ T8] usb usb6-port1: unable to enumerate USB device [ 191.905015][T13398] syz.0.2267 (13398): drop_caches: 2 [ 192.088026][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 192.088037][ T39] audit: type=1400 audit(191.991:23337): avc: denied { ioctl } for pid=13408 comm="syz.4.2269" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.102775][T13414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2271'. [ 192.131910][ T39] audit: type=1400 audit(192.031:23338): avc: denied { watch_mount watch_reads } for pid=13417 comm="syz.0.2273" path="/526" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.190625][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 192.193683][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 192.203895][T13416] FAULT_INJECTION: forcing a failure. [ 192.203895][T13416] name failslab, interval 1, probability 0, space 0, times 0 [ 192.209001][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.4.2272 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 192.212490][T13416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.215847][T13416] Call Trace: [ 192.216739][T13416] [ 192.217538][T13416] dump_stack_lvl+0x16c/0x1f0 [ 192.218807][T13416] should_fail_ex+0x497/0x5b0 [ 192.220108][T13416] ? fs_reclaim_acquire+0xae/0x150 [ 192.221487][T13416] should_failslab+0xc2/0x120 [ 192.222775][T13416] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 192.224232][T13416] ? __pfx_mark_lock+0x10/0x10 [ 192.225536][T13416] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 192.227173][T13416] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 192.228814][T13416] mmu_topup_memory_caches+0x22/0xd0 [ 192.230585][T13416] kvm_mmu_load+0xda/0x21f0 [ 192.231995][T13416] ? mark_held_locks+0x9f/0xe0 [ 192.233339][T13416] ? kvm_apic_has_interrupt+0xb6/0x190 [ 192.235055][T13416] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 192.236919][T13416] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 192.238447][T13416] ? __pfx_kvm_mmu_load+0x10/0x10 [ 192.239999][T13416] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 192.242042][T13416] ? kvm_check_and_inject_events+0x725/0x12e0 [ 192.244081][T13416] ? kvm_setup_guest_pvclock+0x701/0x730 [ 192.245733][T13416] vcpu_run+0x33a4/0x4f50 [ 192.246888][T13416] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 192.248371][T13416] ? __pfx_vcpu_run+0x10/0x10 [ 192.249639][T13416] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 192.251123][T13416] ? rcu_is_watching+0x12/0xc0 [ 192.252660][T13416] ? trace_lock_acquire+0x14e/0x1f0 [ 192.254208][T13416] ? __local_bh_enable_ip+0xa4/0x120 [ 192.255581][T13416] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.256960][T13416] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 192.258469][T13416] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 192.259955][T13416] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 192.261548][T13416] kvm_vcpu_ioctl+0x6ce/0x1520 [ 192.263317][T13416] ? do_vfs_ioctl+0x513/0x1990 [ 192.265199][T13416] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.267240][T13416] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 192.269781][T13416] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 192.271704][T13416] ? __pfx_lock_release+0x10/0x10 [ 192.273097][T13416] ? selinux_file_ioctl+0x180/0x270 [ 192.274633][T13416] ? selinux_file_ioctl+0xb4/0x270 [ 192.276044][T13416] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.277430][T13416] __x64_sys_ioctl+0x190/0x200 [ 192.278699][T13416] do_syscall_64+0xcd/0x250 [ 192.279917][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.281463][T13416] RIP: 0033:0x7f87e057ff19 [ 192.282679][T13416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.287399][T13416] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.289789][T13416] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 192.292076][T13416] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 192.294372][T13416] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.296585][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.299175][T13416] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 192.302049][T13416] [ 192.339796][T13424] FAULT_INJECTION: forcing a failure. [ 192.339796][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 192.343942][T13424] CPU: 3 UID: 0 PID: 13424 Comm: syz.0.2275 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 192.347382][T13424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.351119][T13424] Call Trace: [ 192.352298][T13424] [ 192.353359][T13424] dump_stack_lvl+0x16c/0x1f0 [ 192.355097][T13424] should_fail_ex+0x497/0x5b0 [ 192.356894][T13424] ? fs_reclaim_acquire+0xae/0x150 [ 192.358751][T13424] should_failslab+0xc2/0x120 [ 192.360653][T13424] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 192.362749][T13424] ? __pfx_mark_lock+0x10/0x10 [ 192.364632][T13424] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 192.366757][T13424] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 192.368828][T13424] mmu_topup_memory_caches+0x22/0xd0 [ 192.370681][T13424] kvm_mmu_load+0xda/0x21f0 [ 192.372274][T13424] ? mark_held_locks+0x9f/0xe0 [ 192.373988][T13424] ? kvm_apic_has_interrupt+0xb6/0x190 [ 192.375824][T13424] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 192.377874][T13424] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 192.379925][T13424] ? __pfx_kvm_mmu_load+0x10/0x10 [ 192.381845][T13424] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 192.384081][T13424] ? kvm_check_and_inject_events+0x725/0x12e0 [ 192.386354][T13424] ? kvm_setup_guest_pvclock+0x701/0x730 [ 192.388435][T13424] vcpu_run+0x33a4/0x4f50 [ 192.389972][T13424] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 192.391859][T13424] ? __pfx_vcpu_run+0x10/0x10 [ 192.393483][T13424] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 192.395455][T13424] ? rcu_is_watching+0x12/0xc0 [ 192.397145][T13424] ? trace_lock_acquire+0x14e/0x1f0 [ 192.399177][T13424] ? __local_bh_enable_ip+0xa4/0x120 [ 192.401271][T13424] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.403108][T13424] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 192.405149][T13424] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 192.407246][T13424] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 192.409305][T13424] kvm_vcpu_ioctl+0x6ce/0x1520 [ 192.411123][T13424] ? do_vfs_ioctl+0x513/0x1990 [ 192.412584][T13424] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.414508][T13424] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 192.416327][T13424] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 192.418221][T13424] ? __pfx_lock_release+0x10/0x10 [ 192.419709][T13424] ? selinux_file_ioctl+0x180/0x270 [ 192.421204][T13424] ? selinux_file_ioctl+0xb4/0x270 [ 192.422853][T13424] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.424579][T13424] __x64_sys_ioctl+0x190/0x200 [ 192.425815][T13424] do_syscall_64+0xcd/0x250 [ 192.427431][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.429458][T13424] RIP: 0033:0x7f620ad7ff19 [ 192.430972][T13424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.437123][T13424] RSP: 002b:00007f620bb26058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.440045][T13424] RAX: ffffffffffffffda RBX: 00007f620af45fa0 RCX: 00007f620ad7ff19 [ 192.442831][T13424] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 192.445613][T13424] RBP: 00007f620bb260a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.448384][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.451316][T13424] R13: 0000000000000000 R14: 00007f620af45fa0 R15: 00007ffd744b3ed8 [ 192.454010][T13424] [ 192.455202][ C3] vkms_vblank_simulate: vblank timer overrun [ 192.681014][T13445] tun0: tun_chr_ioctl cmd 1074025672 [ 192.682595][T13445] tun0: ignored: set checksum enabled [ 192.696175][ T39] audit: type=1326 audit(192.591:23339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.0.2279" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f620ad7ff19 code=0x0 [ 192.873154][ T39] audit: type=1326 audit(192.771:23340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.883798][ T39] audit: type=1326 audit(192.771:23341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.896415][ T39] audit: type=1326 audit(192.771:23342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.907780][ T39] audit: type=1326 audit(192.771:23343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.915926][ T39] audit: type=1326 audit(192.771:23344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.936257][ T39] audit: type=1326 audit(192.781:23345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.945985][ T39] audit: type=1326 audit(192.781:23346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13454 comm="syz.1.2281" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2ed7ff19 code=0x7ffc0000 [ 192.973025][T13460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2282'. [ 192.992053][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 192.995458][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 193.184559][T13470] FAULT_INJECTION: forcing a failure. [ 193.184559][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 193.189134][T13470] CPU: 3 UID: 0 PID: 13470 Comm: syz.4.2286 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 193.192799][T13470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.196604][T13470] Call Trace: [ 193.197753][T13470] [ 193.199086][T13470] dump_stack_lvl+0x16c/0x1f0 [ 193.200991][T13470] should_fail_ex+0x497/0x5b0 [ 193.202632][T13470] ? fs_reclaim_acquire+0xae/0x150 [ 193.204402][T13470] should_failslab+0xc2/0x120 [ 193.206124][T13470] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 193.208272][T13470] ? __pfx_mark_lock+0x10/0x10 [ 193.210049][T13470] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 193.212606][T13470] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 193.214657][T13470] mmu_topup_memory_caches+0x22/0xd0 [ 193.216497][T13470] kvm_mmu_load+0xda/0x21f0 [ 193.218140][T13470] ? mark_held_locks+0x9f/0xe0 [ 193.219887][T13470] ? kvm_apic_has_interrupt+0xb6/0x190 [ 193.221887][T13470] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 193.223916][T13470] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 193.225852][T13470] ? __pfx_kvm_mmu_load+0x10/0x10 [ 193.227595][T13470] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 193.229633][T13470] ? kvm_check_and_inject_events+0x725/0x12e0 [ 193.231836][T13470] ? kvm_setup_guest_pvclock+0x701/0x730 [ 193.233992][T13470] vcpu_run+0x33a4/0x4f50 [ 193.235557][T13470] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 193.237242][T13470] ? __pfx_vcpu_run+0x10/0x10 [ 193.238991][T13470] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 193.241092][T13470] ? rcu_is_watching+0x12/0xc0 [ 193.242895][T13470] ? trace_lock_acquire+0x14e/0x1f0 [ 193.245007][T13470] ? __local_bh_enable_ip+0xa4/0x120 [ 193.246809][T13470] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.248298][T13470] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 193.249932][T13470] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 193.251606][T13470] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 193.253177][T13470] kvm_vcpu_ioctl+0x6ce/0x1520 [ 193.254467][T13470] ? do_vfs_ioctl+0x513/0x1990 [ 193.255781][T13470] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.257197][T13470] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 193.258956][T13470] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 193.260855][T13470] ? __pfx_lock_release+0x10/0x10 [ 193.262242][T13470] ? selinux_file_ioctl+0x180/0x270 [ 193.263741][T13470] ? selinux_file_ioctl+0xb4/0x270 [ 193.265217][T13470] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.266699][T13470] __x64_sys_ioctl+0x190/0x200 [ 193.268006][T13470] do_syscall_64+0xcd/0x250 [ 193.269195][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.270874][T13470] RIP: 0033:0x7f87e057ff19 [ 193.272185][T13470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.278569][T13470] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.281140][T13470] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 193.283244][T13470] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 193.285366][T13470] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.287447][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.289544][T13470] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 193.291690][T13470] [ 193.508528][ T5941] Bluetooth: hci1: unexpected event for opcode 0x202f [ 193.554448][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2287'. [ 193.558170][T13485] netlink: 'syz.1.2287': attribute type 10 has an invalid length. [ 193.567679][T13485] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.570166][T13485] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.762385][T13492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2292'. [ 193.819497][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 193.822367][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 193.844850][T13502] overlayfs: conflicting lowerdir path [ 193.985687][T13510] tun0: tun_chr_ioctl cmd 1074025672 [ 193.987888][T13510] tun0: ignored: set checksum enabled [ 194.001187][ T5941] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 194.049992][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448348][T13543] FAULT_INJECTION: forcing a failure. [ 194.448348][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 194.451731][T13543] CPU: 3 UID: 0 PID: 13543 Comm: syz.4.2309 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 194.454541][T13543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.457424][T13543] Call Trace: [ 194.458327][T13543] [ 194.459141][T13543] dump_stack_lvl+0x16c/0x1f0 [ 194.460475][T13543] should_fail_ex+0x497/0x5b0 [ 194.461753][T13543] ? fs_reclaim_acquire+0xae/0x150 [ 194.463126][T13543] should_failslab+0xc2/0x120 [ 194.464402][T13543] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 194.465844][T13543] ? __pfx_mark_lock+0x10/0x10 [ 194.467123][T13543] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 194.468754][T13543] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 194.470371][T13543] mmu_topup_memory_caches+0x22/0xd0 [ 194.471800][T13543] kvm_mmu_load+0xda/0x21f0 [ 194.473081][T13543] ? mark_held_locks+0x9f/0xe0 [ 194.474355][T13543] ? kvm_apic_has_interrupt+0xb6/0x190 [ 194.475804][T13543] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 194.477353][T13543] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 194.478872][T13543] ? __pfx_kvm_mmu_load+0x10/0x10 [ 194.480252][T13543] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 194.481904][T13543] ? kvm_check_and_inject_events+0x725/0x12e0 [ 194.483530][T13543] ? kvm_setup_guest_pvclock+0x701/0x730 [ 194.484973][T13543] vcpu_run+0x33a4/0x4f50 [ 194.486110][T13543] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 194.487545][T13543] ? __pfx_vcpu_run+0x10/0x10 [ 194.488789][T13543] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 194.490280][T13543] ? rcu_is_watching+0x12/0xc0 [ 194.491538][T13543] ? trace_lock_acquire+0x14e/0x1f0 [ 194.492912][T13543] ? __local_bh_enable_ip+0xa4/0x120 [ 194.494422][T13543] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.495782][T13543] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 194.497284][T13543] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 194.498762][T13543] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 194.500285][T13543] kvm_vcpu_ioctl+0x6ce/0x1520 [ 194.501542][T13543] ? do_vfs_ioctl+0x513/0x1990 [ 194.502871][T13543] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 194.504273][T13543] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 194.506020][T13543] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 194.507989][T13543] ? __pfx_lock_release+0x10/0x10 [ 194.509412][T13543] ? selinux_file_ioctl+0x180/0x270 [ 194.510857][T13543] ? selinux_file_ioctl+0xb4/0x270 [ 194.512245][T13543] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 194.513666][T13543] __x64_sys_ioctl+0x190/0x200 [ 194.514967][T13543] do_syscall_64+0xcd/0x250 [ 194.516230][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.517842][T13543] RIP: 0033:0x7f87e057ff19 [ 194.519073][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.524359][T13543] RSP: 002b:00007f87e1414058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.526586][T13543] RAX: ffffffffffffffda RBX: 00007f87e0745fa0 RCX: 00007f87e057ff19 [ 194.528837][T13543] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 194.531029][T13543] RBP: 00007f87e14140a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.533564][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.535912][T13543] R13: 0000000000000000 R14: 00007f87e0745fa0 R15: 00007ffec50c2888 [ 194.538094][T13543] [ 195.474840][T13585] FAULT_INJECTION: forcing a failure. [ 195.474840][T13585] name failslab, interval 1, probability 0, space 0, times 0 [ 195.478465][T13585] CPU: 3 UID: 0 PID: 13585 Comm: syz.3.2322 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 195.481375][T13585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.484682][T13585] Call Trace: [ 195.485717][T13585] [ 195.486790][T13585] dump_stack_lvl+0x16c/0x1f0 [ 195.488457][T13585] should_fail_ex+0x497/0x5b0 [ 195.490108][T13585] ? fs_reclaim_acquire+0xae/0x150 [ 195.491919][T13585] should_failslab+0xc2/0x120 [ 195.493550][T13585] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 195.495389][T13585] ? __pfx_mark_lock+0x10/0x10 [ 195.497185][T13585] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 195.499371][T13585] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 195.501310][T13585] mmu_topup_memory_caches+0x22/0xd0 [ 195.502704][T13585] kvm_mmu_load+0xda/0x21f0 [ 195.503852][T13585] ? mark_held_locks+0x9f/0xe0 [ 195.505072][T13585] ? kvm_apic_has_interrupt+0xb6/0x190 [ 195.506441][T13585] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 195.507891][T13585] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 195.509329][T13585] ? __pfx_kvm_mmu_load+0x10/0x10 [ 195.510571][T13585] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 195.512187][T13585] ? kvm_check_and_inject_events+0x725/0x12e0 [ 195.513923][T13585] ? kvm_setup_guest_pvclock+0x701/0x730 [ 195.515328][T13585] vcpu_run+0x33a4/0x4f50 [ 195.516480][T13585] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 195.517851][T13585] ? __pfx_vcpu_run+0x10/0x10 [ 195.519061][T13585] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 195.520454][T13585] ? rcu_is_watching+0x12/0xc0 [ 195.521674][T13585] ? trace_lock_acquire+0x14e/0x1f0 [ 195.523028][T13585] ? __local_bh_enable_ip+0xa4/0x120 [ 195.524337][T13585] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.525839][T13585] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 195.527514][T13585] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 195.529397][T13585] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 195.531347][T13585] kvm_vcpu_ioctl+0x6ce/0x1520 [ 195.533041][T13585] ? do_vfs_ioctl+0x513/0x1990 [ 195.534641][T13585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.536344][T13585] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 195.538431][T13585] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 195.540742][T13585] ? __pfx_lock_release+0x10/0x10 [ 195.542454][T13585] ? selinux_file_ioctl+0x180/0x270 [ 195.544299][T13585] ? selinux_file_ioctl+0xb4/0x270 [ 195.546154][T13585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.547903][T13585] __x64_sys_ioctl+0x190/0x200 [ 195.549353][T13585] do_syscall_64+0xcd/0x250 [ 195.550594][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.552128][T13585] RIP: 0033:0x7fbd7bd7ff19 [ 195.553626][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.560137][T13585] RSP: 002b:00007fbd7cab8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.562901][T13585] RAX: ffffffffffffffda RBX: 00007fbd7bf45fa0 RCX: 00007fbd7bd7ff19 [ 195.565484][T13585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 195.568116][T13585] RBP: 00007fbd7cab80a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.570740][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.573375][T13585] R13: 0000000000000000 R14: 00007fbd7bf45fa0 R15: 00007fffbef91708 [ 195.576031][T13585] [ 195.577217][ C3] vkms_vblank_simulate: vblank timer overrun [ 195.946513][T13598] netfs: Couldn't get user pages (rc=-14) [ 196.037126][T13609] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 196.039932][T13609] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 196.825269][T13611] overlayfs: failed to resolve './file0': -2 [ 196.859115][T13607] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 196.935048][T13616] overlayfs: failed to resolve './file1': -2 [ 196.951229][T13613] FAULT_INJECTION: forcing a failure. [ 196.951229][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 196.955010][T13613] CPU: 3 UID: 0 PID: 13613 Comm: syz.3.2335 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 196.958703][T13613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.961944][T13613] Call Trace: [ 196.962993][T13613] [ 196.963741][T13613] dump_stack_lvl+0x16c/0x1f0 [ 196.964961][T13613] should_fail_ex+0x497/0x5b0 [ 196.966327][T13613] ? fs_reclaim_acquire+0xae/0x150 [ 196.967750][T13613] should_failslab+0xc2/0x120 [ 196.969043][T13613] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 196.970518][T13613] ? __pfx_mark_lock+0x10/0x10 [ 196.971815][T13613] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 196.973850][T13613] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 196.975665][T13613] mmu_topup_memory_caches+0x22/0xd0 [ 196.977018][T13613] kvm_mmu_load+0xda/0x21f0 [ 196.978162][T13613] ? mark_held_locks+0x9f/0xe0 [ 196.979409][T13613] ? kvm_apic_has_interrupt+0xb6/0x190 [ 196.980758][T13613] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 196.982210][T13613] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 196.983593][T13613] ? __pfx_kvm_mmu_load+0x10/0x10 [ 196.984987][T13613] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 196.986601][T13613] ? kvm_check_and_inject_events+0x725/0x12e0 [ 196.988188][T13613] ? kvm_setup_guest_pvclock+0x701/0x730 [ 196.989722][T13613] vcpu_run+0x33a4/0x4f50 [ 196.990899][T13613] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 196.992329][T13613] ? __pfx_vcpu_run+0x10/0x10 [ 196.993565][T13613] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 196.995072][T13613] ? rcu_is_watching+0x12/0xc0 [ 196.996361][T13613] ? trace_lock_acquire+0x14e/0x1f0 [ 196.997744][T13613] ? __local_bh_enable_ip+0xa4/0x120 [ 196.999215][T13613] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.000648][T13613] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 197.002185][T13613] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 197.003712][T13613] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 197.005210][T13613] kvm_vcpu_ioctl+0x6ce/0x1520 [ 197.006546][T13613] ? do_vfs_ioctl+0x513/0x1990 [ 197.007799][T13613] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 197.009161][T13613] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 197.011022][T13613] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 197.013443][T13613] ? __pfx_lock_release+0x10/0x10 [ 197.015248][T13613] ? selinux_file_ioctl+0x180/0x270 [ 197.016798][T13613] ? selinux_file_ioctl+0xb4/0x270 [ 197.018156][T13613] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 197.019493][T13613] __x64_sys_ioctl+0x190/0x200 [ 197.020748][T13613] do_syscall_64+0xcd/0x250 [ 197.021876][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.023397][T13613] RIP: 0033:0x7fbd7bd7ff19 [ 197.024586][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.029626][T13613] RSP: 002b:00007fbd7cab8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.031828][T13613] RAX: ffffffffffffffda RBX: 00007fbd7bf45fa0 RCX: 00007fbd7bd7ff19 [ 197.033914][T13613] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 197.036014][T13613] RBP: 00007fbd7cab80a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.038129][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.040243][T13613] R13: 0000000000000000 R14: 00007fbd7bf45fa0 R15: 00007fffbef91708 [ 197.042351][T13613] [ 197.043394][ C3] vkms_vblank_simulate: vblank timer overrun [ 197.239668][T13634] __nla_validate_parse: 14 callbacks suppressed [ 197.239681][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2341'. [ 197.243975][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2341'. [ 197.250518][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 197.252710][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 197.342003][T13631] kvm: kvm [13630]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf80000003c [ 197.365617][T13631] kvm: kvm [13630]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xd7000000aa [ 197.419179][T13643] tun0: tun_chr_ioctl cmd 1074025672 [ 197.420592][T13643] tun0: ignored: set checksum enabled [ 197.432172][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 197.432183][ T39] audit: type=1326 audit(197.331:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.3.2344" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd7bd7ff19 code=0x0 [ 197.521194][ T39] audit: type=1400 audit(197.421:23376): avc: denied { read write } for pid=13648 comm="syz.0.2345" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 197.530261][ T5972] hid (null): invalid report_count 1772517967 [ 197.535742][ T5972] hid-generic 000D:0003:0009.0007: unknown main item tag 0x7 [ 197.538346][ T39] audit: type=1400 audit(197.441:23377): avc: denied { open } for pid=13648 comm="syz.0.2345" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 197.544313][ T39] audit: type=1400 audit(197.441:23378): avc: denied { connect } for pid=13648 comm="syz.0.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.549858][ T5972] hid-generic 000D:0003:0009.0007: unknown main item tag 0x7 [ 197.551840][ T5972] hid-generic 000D:0003:0009.0007: invalid report_count 1772517967 [ 197.553924][ T5972] hid-generic 000D:0003:0009.0007: item 0 4 1 9 parsing failed [ 197.557610][ T5972] hid-generic 000D:0003:0009.0007: probe with driver hid-generic failed with error -22 [ 197.561046][ T5286] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 197.579212][ T39] audit: type=1400 audit(197.481:23379): avc: denied { write } for pid=13648 comm="syz.0.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.724280][ T39] audit: type=1400 audit(197.621:23380): avc: denied { create } for pid=13657 comm="syz.4.2348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 197.724446][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 197.735556][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 197.873822][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 197.876265][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 198.016678][T13678] FAULT_INJECTION: forcing a failure. [ 198.016678][T13678] name failslab, interval 1, probability 0, space 0, times 0 [ 198.020038][T13678] CPU: 2 UID: 0 PID: 13678 Comm: syz.0.2352 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 198.023105][T13678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.026695][T13678] Call Trace: [ 198.027846][T13678] [ 198.028697][T13678] dump_stack_lvl+0x16c/0x1f0 [ 198.030004][T13678] should_fail_ex+0x497/0x5b0 [ 198.031280][T13678] ? fs_reclaim_acquire+0xae/0x150 [ 198.032664][T13678] should_failslab+0xc2/0x120 [ 198.033938][T13678] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 198.035396][T13678] ? __pfx_mark_lock+0x10/0x10 [ 198.036692][T13678] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 198.038304][T13678] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 198.039938][T13678] mmu_topup_memory_caches+0x22/0xd0 [ 198.041362][T13678] kvm_mmu_load+0xda/0x21f0 [ 198.042588][T13678] ? mark_held_locks+0x9f/0xe0 [ 198.043864][T13678] ? kvm_apic_has_interrupt+0xb6/0x190 [ 198.045341][T13678] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 198.046915][T13678] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 198.048417][T13678] ? __pfx_kvm_mmu_load+0x10/0x10 [ 198.049766][T13678] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 198.051342][T13678] ? kvm_check_and_inject_events+0x725/0x12e0 [ 198.053063][T13678] ? kvm_setup_guest_pvclock+0x701/0x730 [ 198.054721][T13678] vcpu_run+0x33a4/0x4f50 [ 198.055913][T13678] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 198.057427][T13678] ? __pfx_vcpu_run+0x10/0x10 [ 198.058646][T13678] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 198.060067][T13678] ? rcu_is_watching+0x12/0xc0 [ 198.061389][T13678] ? trace_lock_acquire+0x14e/0x1f0 [ 198.062668][T13678] ? __local_bh_enable_ip+0xa4/0x120 [ 198.064009][T13678] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.065306][T13678] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 198.066715][T13678] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 198.068141][T13678] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 198.069562][T13678] kvm_vcpu_ioctl+0x6ce/0x1520 [ 198.070786][T13678] ? do_vfs_ioctl+0x513/0x1990 [ 198.070935][T13681] FAULT_INJECTION: forcing a failure. [ 198.070935][T13681] name failslab, interval 1, probability 0, space 0, times 0 [ 198.071977][T13678] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 198.071999][T13678] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 198.077820][T13678] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 198.079588][T13678] ? __pfx_lock_release+0x10/0x10 [ 198.080928][T13678] ? selinux_file_ioctl+0x180/0x270 [ 198.082304][T13678] ? selinux_file_ioctl+0xb4/0x270 [ 198.083650][T13678] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 198.085094][T13678] __x64_sys_ioctl+0x190/0x200 [ 198.086336][T13678] do_syscall_64+0xcd/0x250 [ 198.087521][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.089035][T13678] RIP: 0033:0x7f620ad7ff19 [ 198.090191][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.095111][T13678] RSP: 002b:00007f620bb05058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.097280][T13678] RAX: ffffffffffffffda RBX: 00007f620af46080 RCX: 00007f620ad7ff19 [ 198.099325][T13678] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 198.101462][T13678] RBP: 00007f620bb050a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.103637][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.105700][T13678] R13: 0000000000000000 R14: 00007f620af46080 R15: 00007ffd744b3ed8 [ 198.107708][T13678] [ 198.114550][T13681] CPU: 3 UID: 0 PID: 13681 Comm: syz.4.2355 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 198.117304][T13681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.120164][T13681] Call Trace: [ 198.121149][T13681] [ 198.121898][T13681] dump_stack_lvl+0x16c/0x1f0 [ 198.123104][T13681] should_fail_ex+0x497/0x5b0 [ 198.124302][T13681] ? fs_reclaim_acquire+0xae/0x150 [ 198.125951][T13681] should_failslab+0xc2/0x120 [ 198.127257][T13681] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 198.128829][T13681] ? __pfx_mark_lock+0x10/0x10 [ 198.130086][T13681] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 198.131849][T13681] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 198.133465][T13681] mmu_topup_memory_caches+0x22/0xd0 [ 198.134881][T13681] kvm_mmu_load+0xda/0x21f0 [ 198.136085][T13681] ? mark_held_locks+0x9f/0xe0 [ 198.137427][T13681] ? kvm_apic_has_interrupt+0xb6/0x190 [ 198.139093][T13681] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 198.140644][T13681] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 198.142106][T13681] ? __pfx_kvm_mmu_load+0x10/0x10 [ 198.143404][T13681] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 198.145001][T13681] ? kvm_check_and_inject_events+0x725/0x12e0 [ 198.146824][T13681] ? kvm_setup_guest_pvclock+0x701/0x730 [ 198.148389][T13681] vcpu_run+0x33a4/0x4f50 [ 198.149583][T13681] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 198.151076][T13681] ? __pfx_vcpu_run+0x10/0x10 [ 198.152348][T13681] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 198.153887][T13681] ? rcu_is_watching+0x12/0xc0 [ 198.155182][T13681] ? trace_lock_acquire+0x14e/0x1f0 [ 198.156623][T13681] ? __local_bh_enable_ip+0xa4/0x120 [ 198.158051][T13681] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.159449][T13681] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 198.160990][T13681] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 198.162513][T13681] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 198.164003][T13681] kvm_vcpu_ioctl+0x6ce/0x1520 [ 198.165330][T13681] ? do_vfs_ioctl+0x513/0x1990 [ 198.166726][T13681] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 198.168206][T13681] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 198.170066][T13681] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 198.171912][T13681] ? __pfx_lock_release+0x10/0x10 [ 198.173298][T13681] ? selinux_file_ioctl+0x180/0x270 [ 198.174700][T13681] ? selinux_file_ioctl+0xb4/0x270 [ 198.176080][T13681] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 198.177479][T13681] __x64_sys_ioctl+0x190/0x200 [ 198.178766][T13681] do_syscall_64+0xcd/0x250 [ 198.180009][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.181590][T13681] RIP: 0033:0x7f87e057ff19 [ 198.182804][T13681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.188132][T13681] RSP: 002b:00007f87e13f3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.190358][T13681] RAX: ffffffffffffffda RBX: 00007f87e0746080 RCX: 00007f87e057ff19 [ 198.192453][T13681] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 198.194539][T13681] RBP: 00007f87e13f30a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.196628][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.198715][T13681] R13: 0000000000000000 R14: 00007f87e0746080 R15: 00007ffec50c2888 [ 198.200818][T13681] [ 198.201745][ C3] vkms_vblank_simulate: vblank timer overrun [ 198.480644][T13688] rose0: renamed from bond0 (while UP) [ 198.559464][T13691] loop5: detected capacity change from 0 to 9 [ 198.563372][T13691] Buffer I/O error on dev loop5, logical block 1, async page read [ 198.565508][T13691] Dev loop5: unable to read RDB block 8 [ 198.567147][T13691] loop5: unable to read partition table [ 198.568708][T13691] loop5: partition table beyond EOD, truncated [ 198.570335][T13691] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 198.570335][T13691] ) failed (rc=-5) [ 198.574645][T13691] Buffer I/O error on dev loop5, logical block 1, async page read [ 198.577309][T13691] Buffer I/O error on dev loop5, logical block 1, async page read [ 198.723144][ T39] audit: type=1400 audit(198.621:23381): avc: denied { bind } for pid=13690 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.797166][ T39] audit: type=1400 audit(198.701:23382): avc: denied { ioctl } for pid=13697 comm="syz.0.2361" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.806794][ T39] audit: type=1400 audit(198.711:23383): avc: denied { write } for pid=13705 comm="syz.4.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.831820][T13706] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 198.894117][T13705] block nbd4: shutting down sockets [ 198.965436][T13712] ------------[ cut here ]------------ [ 198.967337][T13712] WARNING: CPU: 0 PID: 13712 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 198.970940][T13712] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.972303][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.4.2365 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 198.977245][ T39] audit: type=1400 audit(198.871:23384): avc: denied { write } for pid=5914 comm="syz-executor" path="pipe:[6751]" dev="pipefs" ino=6751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 198.977455][T13712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.987094][T13712] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 198.989113][T13712] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 1a 9f da fa 85 ed 75 09 e8 d1 9c da fa 90 <0f> 0b 90 e8 c8 9c da fa 31 ff 44 89 f6 e8 fe 9e da fa 45 85 f6 75 [ 198.994499][T13712] RSP: 0018:ffffc90007007768 EFLAGS: 00010283 [ 198.996421][T13712] RAX: 000000000000c9d0 RBX: ffff88804e6dae32 RCX: ffffc900310d5000 [ 198.998588][T13712] RDX: 0000000000080000 RSI: ffffffff86bf66af RDI: 0000000000000005 [ 199.000745][T13712] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 199.002879][T13712] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024e4b0a0 [ 199.005192][T13712] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 199.007467][T13712] FS: 00007f87e14146c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 199.010096][T13712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.011925][T13712] CR2: 00007f87e0565cc0 CR3: 00000000511ba000 CR4: 0000000000352ef0 [ 199.014159][T13712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.016746][T13712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.019338][T13712] Call Trace: [ 199.020467][T13712] [ 199.021323][T13712] ? __warn+0xea/0x3c0 [ 199.022512][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 199.024414][T13712] ? report_bug+0x3c0/0x580 [ 199.025724][T13712] ? handle_bug+0x54/0xa0 [ 199.027017][T13712] ? exc_invalid_op+0x17/0x50 [ 199.028307][T13712] ? asm_exc_invalid_op+0x1a/0x20 [ 199.029696][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 199.031461][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 199.033242][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 199.035034][T13712] mac80211_hwsim_add_interface+0x2d6/0x370 [ 199.036767][T13712] drv_add_interface+0x1b4/0x970 [ 199.038302][T13712] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 199.040227][T13712] ieee80211_do_open+0x127f/0x1e80 [ 199.041688][T13712] ieee80211_open+0x18a/0x260 [ 199.042961][T13712] ? __pfx_ieee80211_open+0x10/0x10 [ 199.044383][T13712] __dev_open+0x2d4/0x4e0 [ 199.045607][T13712] ? __pfx___dev_open+0x10/0x10 [ 199.047027][T13712] ? __local_bh_enable_ip+0xa4/0x120 [ 199.048456][T13712] __dev_change_flags+0x561/0x720 [ 199.049925][T13712] ? __pfx___dev_change_flags+0x10/0x10 [ 199.051416][T13712] dev_change_flags+0x8f/0x160 [ 199.052731][T13712] devinet_ioctl+0x11d9/0x1f50 [ 199.054016][T13712] ? __pfx_devinet_ioctl+0x10/0x10 [ 199.055409][T13712] ? _copy_from_user+0x59/0xd0 [ 199.056852][T13712] inet_ioctl+0x3aa/0x3f0 [ 199.058026][T13712] ? __pfx_inet_ioctl+0x10/0x10 [ 199.059350][T13712] ? __pfx_lock_release+0x10/0x10 [ 199.060732][T13712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.062397][T13712] sock_do_ioctl+0x116/0x280 [ 199.063716][T13712] ? __pfx_sock_do_ioctl+0x10/0x10 [ 199.065186][T13712] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 199.067116][T13712] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 199.069003][T13712] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.070819][T13712] sock_ioctl+0x228/0x6c0 [ 199.071996][T13712] ? __pfx_sock_ioctl+0x10/0x10 [ 199.073508][T13712] ? selinux_file_ioctl+0x180/0x270 [ 199.074959][T13712] ? selinux_file_ioctl+0xb4/0x270 [ 199.076511][T13712] ? __pfx_sock_ioctl+0x10/0x10 [ 199.077836][T13712] __x64_sys_ioctl+0x190/0x200 [ 199.079158][T13712] do_syscall_64+0xcd/0x250 [ 199.080412][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.081996][T13712] RIP: 0033:0x7f87e057fb1b [ 199.083205][T13712] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 199.088506][T13712] RSP: 002b:00007f87e1412e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.090732][T13712] RAX: ffffffffffffffda RBX: 00007f87e1412fa0 RCX: 00007f87e057fb1b [ 199.092863][T13712] RDX: 00007f87e1412f00 RSI: 0000000000008914 RDI: 0000000000000004 [ 199.094969][T13712] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 199.097203][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 199.099317][T13712] R13: 0000000000000048 R14: 00007f87e1412fc0 R15: 00007f87e1412f00 [ 199.101435][T13712] [ 199.102274][T13712] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.104202][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.4.2365 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 199.107042][T13712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.110007][T13712] Call Trace: [ 199.110905][T13712] [ 199.111706][T13712] dump_stack_lvl+0x3d/0x1f0 [ 199.112975][T13712] panic+0x71d/0x800 [ 199.114034][T13712] ? __pfx_panic+0x10/0x10 [ 199.115242][T13712] ? show_trace_log_lvl+0x29d/0x3d0 [ 199.116640][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 199.118390][T13712] check_panic_on_warn+0xab/0xb0 [ 199.119740][T13712] __warn+0xf6/0x3c0 [ 199.120816][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 199.122553][T13712] report_bug+0x3c0/0x580 [ 199.123717][T13712] handle_bug+0x54/0xa0 [ 199.124845][T13712] exc_invalid_op+0x17/0x50 [ 199.126064][T13712] asm_exc_invalid_op+0x1a/0x20 [ 199.127517][T13712] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 199.129486][T13712] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 1a 9f da fa 85 ed 75 09 e8 d1 9c da fa 90 <0f> 0b 90 e8 c8 9c da fa 31 ff 44 89 f6 e8 fe 9e da fa 45 85 f6 75 [ 199.134653][T13712] RSP: 0018:ffffc90007007768 EFLAGS: 00010283 [ 199.136300][T13712] RAX: 000000000000c9d0 RBX: ffff88804e6dae32 RCX: ffffc900310d5000 [ 199.138435][T13712] RDX: 0000000000080000 RSI: ffffffff86bf66af RDI: 0000000000000005 [ 199.140550][T13712] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 199.142650][T13712] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024e4b0a0 [ 199.144755][T13712] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 199.146865][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 199.148651][T13712] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 199.150412][T13712] mac80211_hwsim_add_interface+0x2d6/0x370 [ 199.152010][T13712] drv_add_interface+0x1b4/0x970 [ 199.153364][T13712] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 199.155146][T13712] ieee80211_do_open+0x127f/0x1e80 [ 199.156550][T13712] ieee80211_open+0x18a/0x260 [ 199.157832][T13712] ? __pfx_ieee80211_open+0x10/0x10 [ 199.159257][T13712] __dev_open+0x2d4/0x4e0 [ 199.160456][T13712] ? __pfx___dev_open+0x10/0x10 [ 199.161773][T13712] ? __local_bh_enable_ip+0xa4/0x120 [ 199.163202][T13712] __dev_change_flags+0x561/0x720 [ 199.164572][T13712] ? __pfx___dev_change_flags+0x10/0x10 [ 199.166071][T13712] dev_change_flags+0x8f/0x160 [ 199.167376][T13712] devinet_ioctl+0x11d9/0x1f50 [ 199.168680][T13712] ? __pfx_devinet_ioctl+0x10/0x10 [ 199.170054][T13712] ? _copy_from_user+0x59/0xd0 [ 199.171352][T13712] inet_ioctl+0x3aa/0x3f0 [ 199.172530][T13712] ? __pfx_inet_ioctl+0x10/0x10 [ 199.173858][T13712] ? __pfx_lock_release+0x10/0x10 [ 199.175228][T13712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.176823][T13712] sock_do_ioctl+0x116/0x280 [ 199.178074][T13712] ? __pfx_sock_do_ioctl+0x10/0x10 [ 199.179469][T13712] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 199.181225][T13712] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 199.182959][T13712] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.184799][T13712] sock_ioctl+0x228/0x6c0 [ 199.185965][T13712] ? __pfx_sock_ioctl+0x10/0x10 [ 199.187283][T13712] ? selinux_file_ioctl+0x180/0x270 [ 199.188690][T13712] ? selinux_file_ioctl+0xb4/0x270 [ 199.190076][T13712] ? __pfx_sock_ioctl+0x10/0x10 [ 199.191395][T13712] __x64_sys_ioctl+0x190/0x200 [ 199.192705][T13712] do_syscall_64+0xcd/0x250 [ 199.193938][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.195531][T13712] RIP: 0033:0x7f87e057fb1b [ 199.196750][T13712] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 199.201899][T13712] RSP: 002b:00007f87e1412e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.204135][T13712] RAX: ffffffffffffffda RBX: 00007f87e1412fa0 RCX: 00007f87e057fb1b [ 199.206251][T13712] RDX: 00007f87e1412f00 RSI: 0000000000008914 RDI: 0000000000000004 [ 199.208362][T13712] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 199.210487][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 199.212606][T13712] R13: 0000000000000048 R14: 00007f87e1412fc0 R15: 00007f87e1412f00 [ 199.214724][T13712] [ 199.216100][T13712] Kernel Offset: disabled [ 199.217371][T13712] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:09:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b9525 RDI=ffffffff9ab0ac20 RBP=ffffffff9ab0abe0 RSP=ffffc900070070c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000034 R14=ffffffff851b94c0 R15=0000000000000000 RIP=ffffffff851b954f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f87e14146c0 ffffffff 00c01300 GS =0000 ffff88806a600000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f87e0565cc0 CR3=00000000511ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffe0 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e05f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87e071a488 00007f87e071a480 00007f87e071a478 00007f87e071a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=1ffff92000717ee9 RCX=ffffc900038bf788 RDX=1ffff11006099a6a RSI=ffffffff8b6cdb60 RDI=ffffffff8bd1d280 RBP=5e805f0313d93eab RSP=ffffc900038bf730 R8 =0000000000000000 R9 =fffffbfff20be2ba R10=ffffffff905f15d7 R11=0000000000000003 R12=0000000000000003 R13=0000000000000004 R14=ffff8880304cd358 R15=ffff8880304cc880 RIP=ffffffff8176ad06 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f333aa77d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3339f1a6a3 00007f3339f1a6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb68cfd90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555620f51ba 00005555620f4c80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3339f1ad00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556207e980 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012c9400020001f4 0358020001f2036e 6f3d797469726576 01ffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101800400100002 8004038004001000 0a012c9400020001 f40358020001f203 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f3d7974697265 7601ffffffffffff ffffed0801e00358 020001de0331656c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69662f2e01ffffff fffffffffff10801 d0037a020001ce03 7269647265707075 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffef0801be035802 0001bc0330656c69 662f2e01ffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=0000000000000000 RCX=0000000000000002 RDX=ffffffff96e4eaa8 RSI=0000000000000004 RDI=ffffffff8e1bb508 RBP=0000000000000000 RSP=ffffc9000524f3c8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff905f15d7 R11=0000000000000006 R12=ffffffff8e1bb500 R13=ffff88802a8d4880 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff817669d1 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbd7cab86c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203d0000 CR3=00000000252ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbef91a90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7bdf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a93ebc0 RCX=0000000000000000 RDX=dffffc0000000000 RSI=0000000000000000 RDI=ffff88806a93ebd8 RBP=0000000000000000 RSP=ffffc90004cffb08 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff905f15d7 R11=0000000000000000 R12=0000000000000000 R13=ffff88806a93ebd8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8176b8f0 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd7ca756c0 CR3=0000000024d2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd744b4260 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620adf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000